Technical Information
- [<HKLM>\System\CurrentControlSet\Services\_ServerGrayPigeonServer2.0] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\_ServerGrayPigeonServer2.0] 'ImagePath' = '%WINDIR%\G_Server2.0.exe'
- '_ServerGrayPigeonServer2.0' %WINDIR%\G_Server2.0.exe
- %WINDIR%\g_server2.0.exe
- %WINDIR%\g_server2.0.exe
- DNS ASK 10###.huigezi.org
- '%WINDIR%\g_server2.0.exe'