Technical Information
- 'id####.###-cn-beijing.aliyuncs.com':443
- 'id####.###-cn-beijing.aliyuncs.com':443
- DNS ASK id####.###-cn-beijing.aliyuncs.com
- '<SYSTEM32>\taskeng.exe' {9ADF8E1C-3D9D-4B8C-888E-A0FA250D301F} S-1-5-21-3691498038-2086406363-2140527554-1000:dekwpk\user:Interactive:[1]
- '%HOMEPATH%\documents\lru4r2.exe' ' (with hidden window)