Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\Microsoft\{BB996C72-77BA-4241-A5EA-52CFDD88AD74}\e3408a19.exe'
- iexplore.exe
- iexplore.exe process, mswsock.dll module
- firefox.exe process, nss3.dll module
- iexplore.exe process, wininet.dll module
- firefox.exe process, mswsock.dll module
- DNS ASK as####vdmvoasdkm.ml