Technical Information
- <SYSTEM32>\tasks\googleupdatetaskmachineqc
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '%APPDATA%\Google\Libs\WR64.sys'
- 'WinRing0_1_2_0' %APPDATA%\Google\Libs\WR64.sys
- <SYSTEM32>\conhost.exe
- C:\redice.exe
- %WINDIR%\temp\uddef9b.tmp
- %WINDIR%\temp\uddef9b.tmp
- DNS ASK po##.#ashvault.pro
- ClassName: 'EDIT' WindowName: ''
- 'C:\redice.exe'
- '%APPDATA%\chrome\updater.exe'