Technical Information
- <SYSTEM32>\tasks\firefox default browser agent 7e4ccd6831c0a51e
- %WINDIR%\explorer.exe
- %APPDATA%\btadcjv
- %APPDATA%\btadcjv
- 'gu##ntas.at':80
- 'ki###irate.ru':80
- 'ki###irate.ru':443
- 'pk#.goog':80
- http://pk#.goog/gsr1/gsr1.crt
- http://gu##ntas.at/tmp/
- http://ki###irate.ru/tmp/
- 'ki###irate.ru':443
- DNS ASK gu##ntas.at
- DNS ASK pi##6.ru
- DNS ASK ro###iauto.com
- DNS ASK ki###irate.ru
- DNS ASK pk#.goog
- '%APPDATA%\btadcjv'
- '%APPDATA%\btadcjv' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {8AFB6634-47F5-4148-8531-8C2E725FB1C4} S-1-5-21-1238866942-1249195528-555854008-1000:lvjnpanlxf\user:Interactive:[1]