Various versions, including "modded" or cracked pieces of the source code, are frequently found on platforms like GitHub. 3. Indicators of Compromise (IoC)
and schedules a task (often named "Nafifas") to run every minute. It checks for antivirus products in the root\SecurityCenter2 xworm 3.1