Technical Information
- [HKLM\System\CurrentControlSet\Services\Gaia] 'ImagePath' = '<DRIVERS>\Gaia.sys'
- 'Gaia' <DRIVERS>\Gaia.sys
- %WINDIR%\syswow64\drivers\gaia.sys
- %TEMP%\ev2tw
- %TEMP%\jtpbq
- %WINDIR%\syswow64\drivers\gaia.sys
- %TEMP%\ev2tw
- %TEMP%\jtpbq
- '255.255.255.255':80
- DNS ASK zg####oy.88miao.com