Technical Information
- [<HKLM>\System\CurrentControlSet\Services\ouCNDihXcf4] 'ImagePath' = '<DRIVERS>\ouCNDihXcf4.sys'
- 'ouCNDihXcf4' <DRIVERS>\ouCNDihXcf4.sys
- <SYSTEM32>\taskhost.exe
- <SYSTEM32>\dwm.exe
- %WINDIR%\explorer.exe
- <DRIVERS>\oucndihxcf4.sys
- <DRIVERS>\oucndihxcf4.sys
- <DRIVERS>\oucndihxcf4.sys
- 'cn.bing.com':80
- '47.##5.88.156':17320
- http://cn.bing.com/
- DNS ASK cn.bing.com
- '47.##.119.96':21785
- '255.255.255.255':29352