Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'SEPTEMBR' = '%HOMEPATH%\ULTRAMICR\CRIN.vbs'
- crin.exe
- %HOMEPATH%\ultramicr\crin.exe
- %HOMEPATH%\ultramicr\crin.vbs
- 'drive.google.com':443
- DNS ASK drive.google.com
- '%HOMEPATH%\ultramicr\crin.exe'