Technical Information
- <SYSTEM32>\tasks\nvngxupdatecheckdaily_{5d7c6d5b-6d5b-6d5b-6d5b-5d7c6d5b6d5b}
- %TEMP%\9a26.tmp
- %APPDATA%\hsirfru
- %APPDATA%\hsirfru
- 'lp####eliren.fun':80
- http://lp####eliren.fun/index.php
- DNS ASK le###jekam.xyz
- DNS ASK lp####eliren.fun
- DNS ASK lg####osbann.club
- DNS ASK fl####nitev.site