Technical Information
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '<SYSTEM32>\WinRing0x64.sys'
- 'WinRing0_1_2_0' <SYSTEM32>\WinRing0x64.sys
- <SYSTEM32>\svchost.exe
- 'xm#.###l.minergate.com':45700
- DNS ASK xm#.###l.minergate.com
- '<SYSTEM32>\svchost.exe' -B --donate-level=1 -a RandomX --url=xmr.pool.minergate.com:45700 -u organicforte@protonmail.com -p -R --variant=-1 --max-cpu-usage=25