Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\ruon.serveron] 'Start' = '00000002'
- '%PROGRAM_FILES%\ruon.serveron\serveron.exe' service
- <SYSTEM32>\(null).log
- %PROGRAM_FILES%\ruon.serveron\serveron.log
- %PROGRAM_FILES%\ruon.serveron\serveron.exe
- <Current directory>\(null).log
- <Current directory>\serveron.log
- 'ag###.r-u-on.com':443
- DNS ASK ag###.r-u-on.com