Technical Information
- [<HKLM>\System\CurrentControlSet\Services\EFS] 'Start' = '00000002'
- 'dns.google.com':443
- 'v3####o24wto24.hk':443
- DNS ASK dns.google.com
- DNS ASK fn#####tb4nwob524o.hk
- DNS ASK v3####o24wto24.hk
- '%LOCALAPPDATA%\microsoft\spoolsvc.exe'