Technical Information
- [<HKLM>\System\CurrentControlSet\Services\vsperfduck] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\vsperfduck] 'ImagePath' = '"<SYSTEM32>\vsperfduck.exe"'
- from <Full path to file> to <SYSTEM32>\vsperfduck.exe
- http://18#.#73.113.67/srvc/mult/ringin/merge/
- http://20#.#23.101.90/glitch/devices/ringin/