Technical Information
- %WINDIR%\syswow64\tcpsvcs.exe
- %HOMEPATH%\desktop\hythty
- %HOMEPATH%\desktop\hythty.kkk
- DNS ASK ec#############55.ap-southeast-1.compute.amazonaws.com
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '%WINDIR%\syswow64\tcpsvcs.exe'
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;