Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] 'QQMin' = '"%CommonProgramFiles%\Microsoft Shared\MSINFO\QQMin.exe"'
- %CommonProgramFiles%\microsoft shared\msinfo\qqmin.exe
- %CommonProgramFiles%\microsoft shared\msinfo\qqmin.exe
- '255.255.255.255':8010
- DNS ASK hi###.vicp.cc
- ClassName: 'TAppBuilder' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\msinfo\qqmin.exe'
- '%CommonProgramFiles%\microsoft shared\msinfo\qqmin.exe' ' (with hidden window)