Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\axtensible auto protocol service] 'ImagePath' = 'C:\\WINDOWS\system32\1af0.lex'
- [<HKLM>\SYSTEM\ControlSet001\Services\axtensible auto protocol service] 'Start' = '00000002'
- '<SYSTEM32>\1af0.lex'
- '<Current directory>\6896.lex' "axtensible auto protocol service" C:\\WINDOWS\system32\1af0.lex
- <SYSTEM32>\1af0.lex
- <Current directory>\6896.lex
- 'o3###o.3322.org':90
- DNS ASK o3###o.3322.org