Technical Information
- [HKLM\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '<Current directory>\WinRing0x64.sys'
- 'WinRing0_1_2_0' <Current directory>\WinRing0x64.sys
- 'po##.#upportxmr.com':3333
- 'po##.#upportxmr.com':3333
- DNS ASK po##.#upportxmr.com