Technical Information
- [<HKLM>\SYSTEM\CurrentControlSet\Services\RNG] 'ImagePath' = 'C:\RNG.sys'
- 'RNG' C:\RNG.sys
- <Current directory>\myd3d.dll
- C:\rng.sys
- %WINDIR%\temp\uddace1.tmp
- %WINDIR%\temp\uddace1.tmp
- '20##k.cn':80
- http://20##k.cn/api/checkVersion?id##############################################
- DNS ASK 20##k.cn
- ClassName: '' WindowName: ''