Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\tyglplpu] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\tyglplpu] 'ImagePath' = 'system32\drivers\imrxdxho.sys'
- [<HKLM>\SYSTEM\ControlSet002\Services\tyglplpu] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet002\Services\tyglplpu] 'ImagePath' = 'system32\drivers\imrxdxho.sys'
- NtOpenProcess, драйвер-обработчик: unknown
- NtTerminateProcess, драйвер-обработчик: unknown
- <DRIVERS>\imrxdxho.sys
- <DRIVERS>\imrxdxho.sys
- 'im####.ghome2019.host':80
- http://im####.ghome2019.host/2001.gif
- DNS ASK im####.ghome2019.host