Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C732E670-DE57-EE96-BDBA-B9AB5DFD58FE}] 'StubPath' = '<SYSTEM32>\one.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\one.exe
- 'on###e.ns1.name':443
- DNS ASK on###e.ns1.name