Technical Information
- <SYSTEM32>\tasks\firefox default browser agent 5bcaa6c2aa0f5de0
- %TEMP%\cc4f.tmp
- %APPDATA%\ghfcetv
- %APPDATA%\ghfcetv
- 'tw##mel.com':80
- 'la####tasonora.com':80
- http://tw##mel.com/upload/
- http://la####tasonora.com/upload/
- DNS ASK pp##pb.com
- DNS ASK tw##mel.com
- DNS ASK ho###cash.com
- DNS ASK la####tasonora.com
- DNS ASK kp###ques.com
- '%APPDATA%\ghfcetv'
- '%APPDATA%\ghfcetv' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {5F6D4051-8328-43F8-93DA-908984434262} S-1-5-21-1960123792-2022915161-3775307078-1001:fiabgvkaw\user:Interactive:[1]