Technical Information
- <SYSTEM32>\tasks\updateclientdaemon
- C:\recovery\jkli.zip
- C:\recovery\cb.txt
- C:\recovery\render.exe
- C:\recovery\a6.txt
- C:\recovery\nw_elf.dll
- %LOCALAPPDATA%\crashpad\settings.dat
- C:\recovery\debug.log
- %LOCALAPPDATA%\crashpad\reports\4c0d2f87-ef23-4adc-9159-b5492d33b208.dmp
- %LOCALAPPDATA%\crashpad\metadata
- C:\recovery\jkli.zip
- 'ne##########.oss-rg-china-mainland.aliyuncs.com':80
- http://ne##########.oss-rg-china-mainland.aliyuncs.com/netos/dl.png
- DNS ASK ne##########.oss-rg-china-mainland.aliyuncs.com
- 'C:\recovery\render.exe'
- 'C:\recovery\render.exe' --type=crashpad-handler /prefetch:7 --no-rate-limit --database=%LOCALAPPDATA%\Crashpad --annotation=channel= --annotation=plat=Win32 --annotation=prod=书生ERP --annotation=ver=-devel --handshake-...