Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\leane.url
- %TEMP%\diao.exe
- %TEMP%\diao.exe
- 'k.###4top.io':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'k.###4top.io':443
- DNS ASK k.###4top.io
- DNS ASK microsoft.com