Technical Information
- %HOMEPATH%\documents\vjd6o0.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\vjd6o0.exe
- %HOMEPATH%\documents\etoken.dll
- '2r####.###-cn-beijing.aliyuncs.com':443
- '2r####.###-cn-beijing.aliyuncs.com':443
- DNS ASK 2r####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\vjd6o0.exe'
- '<SYSTEM32>\taskeng.exe' {EE91C3D4-0509-4F43-ABB9-03E664DF2483} S-1-5-21-3691498038-2086406363-2140527554-1000:sfnzobhrip\user:Interactive:[1]
- '%HOMEPATH%\documents\vjd6o0.exe' ' (with hidden window)