Technical Information
- %LOCALAPPDATA%\1xcorp n.v\1xwin\starter.exe
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- %LOCALAPPDATA%\1xcorp n.v\1xwin\icon_new.ico
- %LOCALAPPDATA%\1xcorp n.v\1xwin\uninstall.exe
- %LOCALAPPDATA%\1xcorp n.v\1xwin\starter.exe.config
- %HOMEPATH%\desktop\1xwin.lnk
- %LOCALAPPDATA%\1xcorp n.v\1xwin\serviceupdate.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK cp##eer.com
- DNS ASK 1w###pro.com
- '%LOCALAPPDATA%\1xcorp n.v\1xwin\serviceupdate.exe'
- '%LOCALAPPDATA%\1xcorp n.v\1xwin\serviceupdate.exe' ' (with hidden window)