Техническая информация
- %APPDATA%\word.exe
- 'fe#####sit.uob.edu.pk':80
- http://fe#####sit.uob.edu.pk/ekr8L6VCw7MAc.exe
- http://fe#####sit.uob.edu.pk/attend/admn/student/depositer_form.php
- DNS ASK fe#####sit.uob.edu.pk
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding