Technical Information
- %WINDIR%\tasks\openslides.job
- [<HKLM>\System\CurrentControlSet\Services\Irritated Audience] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Irritated Audience] 'ImagePath' = '%APPDATA%\Irritated Audience\Irritated Audience.exe'
- C:\users\clouds~1\appdata\local\temp\mqnmdhsegx.exe
- %APPDATA%\irritated audience\irritated audience.exe
- %ALLUSERSPROFILE%\application data\{db8cdf01-3af3-cecd-db8c-cdf013af7c04}\mqnmdhsegx.exe
- %APPDATA%\irritated audience\jp3if.dat
- %ALLUSERSPROFILE%\application data\{db8cdf01-3af3-cecd-db8c-cdf013af7c04}\mqnmdhsegx.dat
- DNS ASK fu###set.work
- DNS ASK al####el-pro.com
- DNS ASK ge####ltiple.link
- DNS ASK mo###odel.biz
- ClassName: 'EDIT' WindowName: ''
- 'C:\users\clouds~1\appdata\local\temp\mqnmdhsegx.exe'
- '%APPDATA%\irritated audience\irritated audience.exe'