Technical Information
- [<HKLM>\System\CurrentControlSet\Services\GetscreenSV] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\GetscreenSV] 'ImagePath' = '"<Full path to file>" -elevate'
- %PROGRAMDATA%\getscreen.me\logs\20200617.log
- %PROGRAMDATA%\getscreen.me\settings.dat
- http://oc##.#ectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEDmOFlEUW2hkOrR5lqKMIlU%3D
- DNS ASK ge###reen.me
- DNS ASK oc##.#ectigo.com
- ClassName: 'GetscreenMeClass' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''