Technical Information
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '%TEMP%\WinRing0x64.sys'
- 'WinRing0_1_2_0' %TEMP%\WinRing0x64.sys
- %TEMP%\config.ini
- %TEMP%\winring0x64.sys
- %TEMP%\winring0.sys
- %TEMP%\winring0x64.inf
- %TEMP%\winring0.inf
- %TEMP%\winring0x64.cat
- %TEMP%\winring0.cat
- %TEMP%\skin.zip
- %TEMP%\aria2c.exe
- %TEMP%\nemu-downloader.log
- %WINDIR%\temp\uddb28c.tmp
- %WINDIR%\temp\uddb28c.tmp
- 'mu##.##e.netease.com':443
- DNS ASK mu##.##e.netease.com