Technical Information
- [HKLM\SYSTEM\CurrentControlSet\Services\uWYQEhAUmasijJrAr.sys] 'ImagePath' = '<Current directory>\Bin\uWYQEhAUmasijJrAr.sys'
- 'uWYQEhAUmasijJrAr.sys' <Current directory>\Bin\uWYQEhAUmasijJrAr.sys
- <Current directory>\isocket.dll
- <Current directory>\isocket.dll
- 'localhost':1103
- '51##l.com':80
- '51##l.com':443
- http://www.51##l.com/
- '51##l.com':443
- DNS ASK 51##l.com