Technical Information
- [<HKLM>\System\CurrentControlSet\Services\afgg55] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\afgg55] 'ImagePath' = '<Full path to file>'
- 'afgg55' <Full path to file>
- %WINDIR%\temp\jias.txt
- http://br##ide.xyz/1.txt
- DNS ASK br##ide.xyz