Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\KBSConnectLauncher] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\KBSConnectLauncher] 'ImagePath' = '%TEMP%\\KBSConnectLauncher.exe'
- %TEMP%\KBSConnectLauncher.exe
- 'wp#d':80
- 'ic###azip.com':80
- 'kb#####ikbildirim.com':80
- http://11#.#11.111.1/wpad.dat via wp#d
- http://ic###azip.com/
- http://kb#####ikbildirim.com/api/version
- DNS ASK wp#d
- DNS ASK ic###azip.com
- DNS ASK kb#####ikbildirim.com