Техническая информация
- '%TEMP%\bcecabfdcib.exe' 1-0-5-0-6-2-1-4-7-3-2 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
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81422341185.txt bios get serialnumber
- %TEMP%\insHv17.exe
- %TEMP%\tmp3.tmp
- %TEMP%\tmp4.tmp
- %TEMP%\nss2.tmp\nsisunz.dll
- %TEMP%\insHv17.bcecabfdcib
- %TEMP%\nss2.tmp\xor.dll
- %TEMP%\bcecabfdcib.zip
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\tmp3.tmp
- %TEMP%\insHv17.exe в %TEMP%\bcecabfdcib.exe