Technical Information
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '<Current directory>\WinRing0x64.sys'
- 'WinRing0_1_2_0' <Current directory>\WinRing0x64.sys
- <Current directory>\sys.dll
- <Current directory>\version.txt
- <Current directory>\config.json
- <Current directory>\windows update service.exe
- <Current directory>\winring0x64.sys
- http://mr##ile.xyz/35/sys.dll
- DNS ASK vi###soft.ir
- DNS ASK mr##ile.xyz
- DNS ASK mr##ool.xyz
- '<Current directory>\windows update service.exe'