Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{D8259540-FBD5-2FD1-9C3A-18D2561BEEBE}] 'StubPath' = '<SYSTEM32>\comine.exe'
- <SYSTEM32>\comine.exe
- <SYSTEM32>\comine.exe
- 'a1#.#bmen.com':8080
- DNS ASK a1#.#bmen.com
- '<Private IP address>':1035