Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows googs ivityManager OderbWindows Test My Se tivtyManageervic memoryService] 'Start' = '00000002'
- '<SYSTEM32>\VirusScan.exe'
- <SYSTEM32>\VirusScan.exe
- 'us####.#oogservicegent.com':443
- DNS ASK us####.#oogservicegent.com