Техническая информация
- '%ALLUSERSPROFILE%\Application Data\Yui Hirasawa\GreenCrypter\1.0.2.1\cvtres.exe'
- '%ALLUSERSPROFILE%\Application Data\Yui Hirasawa\GreenCrypter\1.0.2.1\cvtres.exe' (загружен из сети Интернет)
- %ALLUSERSPROFILE%\Application Data\Yui Hirasawa\GreenCrypter\1.0.2.1\cvtres.exe
- 'ic#######otnet.altervista.org':80
- 'wp#d':80
- ic#######otnet.altervista.org/ICryptex_Update/cvtres.exe
- wp#d/wpad.dat
- DNS ASK ic#######otnet.altervista.org
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'