Technical Information
- [HKLM\System\CurrentControlSet\Services\EXTERNAL_CPS] 'ImagePath' = '%WINDIR%\SysWOW64\EXTERNAL_CPS.sys'
- 'EXTERNAL_CPS' %WINDIR%\SysWOW64\EXTERNAL_CPS.sys
- %WINDIR%\syswow64\external_cps.sys
- %WINDIR%\temp\uddcd7b.tmp
- %WINDIR%\temp\uddcd7b.tmp
- 'cd#.dho.ink':443
- 'oc##.##ust-provider.cn':80
- http://oc##.##ust-provider.cn/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQDhvjmfMdSVsHZ9u52p9jqu3rd8gQUXzp8ERB%2BDGdxYdyLo7UAA2f1VxwCEQDRj6qvhJuN4Dm2UNGL%2BZSa
- 'cd#.dho.ink':443
- DNS ASK cd#.dho.ink
- DNS ASK oc##.##ust-provider.cn