Техническая информация
- '%TEMP%\bcbjcabedghd.exe' 9-4-1-1-0-0-2-6-1-2-4 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
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81429685942.txt bios get version
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81429685942.txt bios get serialnumber
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\81429685942.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp3.tmp
- %TEMP%\nsh2.tmp\ccf.dll
- %TEMP%\insHv21.bcbjcabedghd
- %TEMP%\bcbjcabedghd.zip
- %TEMP%\insHv21.exe
- %TEMP%\nsh2.tmp\nsisunz.dll
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\81429685942.txt
- %TEMP%\insHv21.bcbjcabedghd
- %TEMP%\bcbjcabedghd.zip
- %TEMP%\tmp3.tmp
- %TEMP%\insHv21.exe в %TEMP%\bcbjcabedghd.exe