Техническая информация
- '%TEMP%\1.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\1.exe" "1.exe" ENABLE
- %TEMP%\1.exe
- 'localhost':1177
- DNS ASK crl.microsoft.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK ct###.#indowsupdate.com
- ClassName: 'Shell_TrayWnd' WindowName: ''