Technical Information
- <SYSTEM32>\tasks\nvngxupdatecheckdaily_{baa59cc1-9cc1-9cc1-9cc1-baa59cc19cc1}
- %TEMP%\3550.tmp
- %APPDATA%\ghujffv
- %APPDATA%\jsfvafs
- %APPDATA%\ghujffv
- %APPDATA%\jsfvafs
- '05####5-2465.com':80
- '30####25-43-253.com':80
- '32####-32432.com':80
- '35####4532-34.com':80
- http://05####5-2465.com/login
- http://05####5-2465.com/index.php
- DNS ASK 05####5-2465.com
- DNS ASK 23####-23-423.com
- DNS ASK 30####25-43-253.com
- DNS ASK 32####-32432.com
- DNS ASK 35####4532-34.com