Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'api-muid' = 'rundll32 "%APPDATA%\acle9_27\D3DX9_41.dll",DllRegisterServer'
- [<HKLM>\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths] '%APPDATA%\acle9_27\D3DX9_41.dll' = '00000000'
- %WINDIR%\explorer.exe
- iexplore.exe
- iexplore.exe process, wininet.dll module
- iexplore.exe process, mshtml.dll module
- iexplore.exe process, advapi32.dll module
- iexplore.exe process, urlmon.dll module
- firefox.exe process, nss3.dll module
- %APPDATA%\acle9_27\d3dx9_41.dll
- '14#.#02.128.152':9772
- '23#.#55.255.250':1900
- ClassName: 'ProgMan' WindowName: ''
- '<SYSTEM32>\svchost.exe'