Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\cocbuilder server's\projectx\projectx.lnk
- %HOMEPATH%\desktop\projectx.lnk
- %TEMP%\tmp1787.tmp
- %TEMP%\tmp17c7.tmp
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- %TEMP%\tmp1787.tmp
- %TEMP%\tmp17c7.tmp
- 'ap#.##cbuilder.su':443
- 'ap#.##cbuilder.su':6000
- http://os##.#ocbuilder.su/CodeSigning/1/CCSC.crt
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK os##.#ocbuilder.su
- DNS ASK ap#.##cbuilder.su
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;