Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{2F57f934-A3E7-0C1F-7113-B1DD49E25B23}] 'StubPath' = '<SYSTEM32>:sysfomtiger.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:sysfomtiger.exe
- 'qq#.##thostt.com':443
- DNS ASK qq#.##thostt.com