Technical Information
- <SYSTEM32>\tasks\ms visual extension
- <SYSTEM32>\svchost.exe
- %PROGRAMDATA%\لحأيظجل리고래.exe
- %APPDATA%\swapper\لحأيظجل리고래.exe
- %APPDATA%\swapper\settings.ini
- '85.##4.116.139':443
- '%PROGRAMDATA%\لحأيظجل리고래.exe'
- '%APPDATA%\swapper\لحأيظجل리고래.exe'
- '%PROGRAMDATA%\لحأيظجل리고래.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe' ' (with hidden window)
- '%APPDATA%\swapper\لحأيظجل리고래.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe'