Technical Information
- <SYSTEM32>\tasks\firefox default browser agent 379d316760e88c14
- %WINDIR%\explorer.exe
- %APPDATA%\buwsaef
- %APPDATA%\buwsaef
- 'fu###ujjul.net':80
- 'st####stitibo.org':80
- 'li####tiyyyul.net':80
- http://fu###ujjul.net/
- http://st####stitibo.org/
- http://li####tiyyyul.net/
- DNS ASK fu###ujjul.net
- DNS ASK st####stitibo.org
- DNS ASK li####tiyyyul.net
- DNS ASK bu####tu44org.org
- DNS ASK nv###kuluir.net
- DNS ASK gu####na49org.org
- DNS ASK hu####dulinu.net
- DNS ASK st###nuytyt.org
- DNS ASK nu###tnulo.me
- DNS ASK yo####umenia5.org
- DNS ASK gu####iimnstra.net
- '%APPDATA%\buwsaef'
- '%APPDATA%\buwsaef' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {FAC40008-F9A3-4DAE-B001-E9B84F2D23FD} S-1-5-21-1960123792-2022915161-3775307078-1001:efvdjcyamhk\user:Interactive:[1]