Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dpnmap] 'Startup' = 'OnStartup'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dpnmap] 'Dllname' = 'dpnmap.dll'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\RCX3.tmp
- <SYSTEM32>\RCX4.tmp
- <SYSTEM32>\RCX2.tmp
- <SYSTEM32>\dpnmap.dll
- <SYSTEM32>\RCX1.tmp
- <SYSTEM32>\dpnmap.dll
- '83.##9.105.144':80
- 83.##9.105.144/