Technical Information
- %WINDIR%\tasks\csaglrx.job
- <SYSTEM32>\tasks\csaglrx
- %ALLUSERSPROFILE%\lkaxvmc\csaglrx.exe
- '23##dne.com':4035
- DNS ASK 23##dne.com
- '%ALLUSERSPROFILE%\lkaxvmc\csaglrx.exe' start
- '%ALLUSERSPROFILE%\lkaxvmc\csaglrx.exe' start' (with hidden window)