Technical Information
- <SYSTEM32>\tasks\explorer
- <SYSTEM32>\tasks\sihost
- %LOCALAPPDATA%\opera software\explorer.exe
- %LOCALAPPDATA%\mozilla\sihost.exe
- %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\f686aace6942fb7f7ceb231212eef4a4_8cf7b530-613e-439b-a8c5-ccfc0e745400
- DNS ASK dn#.google
- 'dn#.google':443
- '10#.21.80.1':443
- '%LOCALAPPDATA%\mozilla\sihost.exe'