Technical Information
- <SYSTEM32>\tasks\lightning
- http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt
- http://li#####ng.dns-cloud.net/register?pc#####################################################################
- DNS ASK fr###eoip.app
- DNS ASK li#####ng.dns-cloud.net
- '<Full path to file>' city=' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {D0C36D63-64B9-43D0-B39D-BDDB1A193451} S-1-5-21-1960123792-2022915161-3775307078-1001:rayzcpubintf\user:Interactive:[1]