Technical Information
- <SYSTEM32>\tasks\firefox default browser agent b2850ec9188469ad
- %APPDATA%\wvhavtv
- %APPDATA%\wvhavtv
- 'ta##i.at':80
- '01##roy.ru':80
- 'gr###grad.ru':80
- 'gr###grad.ru':443
- 'pk#.goog':80
- 'ki###irate.ru':80
- 'ki###irate.ru':443
- http://pk#.goog/gsr1/gsr1.crt
- http://ta##i.at/tmp/
- http://01##roy.ru/tmp/
- http://gr###grad.ru/tmp/
- http://ki###irate.ru/tmp/
- 'gr###grad.ru':443
- 'ki###irate.ru':443
- DNS ASK ta##i.at
- DNS ASK 01##roy.ru
- DNS ASK ma##net.com
- DNS ASK gr###grad.ru
- DNS ASK pk#.goog
- DNS ASK ki###irate.ru
- '%APPDATA%\wvhavtv'
- '%APPDATA%\wvhavtv' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {009BA0AD-4DAA-401C-9B31-9455105F75D3} S-1-5-21-1238866942-1249195528-555854008-1000:xcvylg\user:Interactive:[1]