Technical Information
- %HOMEPATH%\documents\gr6vh2.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- %HOMEPATH%\documents\msmplist.dat
- %HOMEPATH%\documents\gr6vh2.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- %HOMEPATH%\documents\msmplist.dat
- 'fy####.###-cn-beijing.aliyuncs.com':443
- 'fy####.###-cn-beijing.aliyuncs.com':443
- DNS ASK fy####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\gr6vh2.exe'
- '<SYSTEM32>\taskeng.exe' {309D6D06-CA87-4254-AB66-FE07CE9F69B2} S-1-5-21-3691498038-2086406363-2140527554-1000:lnctkjzbtnw\user:Interactive:[1]
- '%HOMEPATH%\documents\gr6vh2.exe' ' (with hidden window)