Technical Information
- [HKLM\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '<Current directory>\WinRing0x64.sys'
- 'WinRing0_1_2_0' <Current directory>\WinRing0x64.sys
- <Current directory>\cert_key.pem
- <Current directory>\cert.pem
- <Current directory>\loginfer.log
- 'fi.#####um.herominers.com':1230
- 'fi.#####um.herominers.com':1230
- DNS ASK fi.#####um.herominers.com