Technical Information
- [<HKLM>\System\CurrentControlSet\Services\GetscreenSV] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\GetscreenSV] 'ImagePath' = '"<Full path to file>" -elevate'
- 'GetscreenSV' "<Full path to file>" -elevate
- %ALLUSERSPROFILE%\getscreen.me\logs\20210224.log
- %ALLUSERSPROFILE%\getscreen.me\settings.dat
- 'ge###reen.me':443
- 'microsoft.com':80
- 'oc##.#ectigo.com':80
- 'ge###reen.me':443
- DNS ASK ge###reen.me
- DNS ASK microsoft.com
- DNS ASK oc##.#ectigo.com
- ClassName: 'GetscreenMeClassGetscreen.me' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''