Technical Information
- <SYSTEM32>\tasks\nvngxupdatecheckdaily_{a6b397e0-97e0-97e0-97e0-a6b397e097e0}
- %WINDIR%\explorer.exe
- %TEMP%\cc4f.tmp
- %APPDATA%\ugsdrtw
- %APPDATA%\ugsdrtw
- %TEMP%\cc4f.tmp
- %TEMP%\cc4f.tmp
- 'x-###new.com':80
- 'go##g2.xyz':80
- http://x-###new.com/upload/
- http://go##g2.xyz/upload/
- DNS ASK x-###new.com
- DNS ASK go##g2.xyz
- DNS ASK j-##.best
- DNS ASK ja###-semui.xyz
- '%APPDATA%\ugsdrtw'
- '%APPDATA%\ugsdrtw' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {7DFB0047-76B8-4AEA-A6AE-F242CAD020AA} S-1-5-21-1960123792-2022915161-3775307078-1001:wqrgav\user:Interactive:[1]