Technical Information
- [<HKLM>\System\CurrentControlSet\Services\X6xa067] 'ImagePath' = '\\??\\C:\\Windows\\SysWOW64\\Drivers\\X6xa067'
- <Current directory>\mswinsck.ocx
- %WINDIR%\syswow64\mswinsck.ocx
- <Current directory>\vmprotectsdk32.dll
- <Current directory>\error.txt
- '21#.#42.202.145':9153
- '21#.#42.202.146':9153
- '21#.#42.202.147':9153
- '21#.#42.202.149':9153
- '21#.#42.202.151':9153
- '21#.#42.202.152':9153
- '21#.#42.202.153':9153
- '21#.#42.202.154':9153
- DNS ASK hk##aac.com
- '%WINDIR%\syswow64\regsvr32.exe' /s %WINDIR%\SysWOW64\MSWINSCK.OCX' (with hidden window)
- '%WINDIR%\syswow64\regsvr32.exe' /s %WINDIR%\SysWOW64\MSWINSCK.OCX