Техническая информация
- C:\Extracted\Quaresma.exe
- <SYSTEM32>\rundll32.exe <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen C:\Extracted\Funny-MonkeyReaction.jpg
- %ALLUSERSPROFILE%\Application Data\DYA_PHKESGCHWQPGOMMCQ\1.0.0:$SS_DESCRIPTOR_SBXNV9VVGV1BFNKGWVB0JMWJ6VP6GRF1069BYRHFSPF7VB4VPJGF
- %APPDATA%\DYA_PHKESGCHWQPGOMMCQ\1.0.0\Data\dya.dat
- %ALLUSERSPROFILE%\Desktop:$SS_DESCRIPTOR_SBXNV9VVGV1BFNKGWVB0JMWJ6VP6GRF1069BYRHFSPF7VB4VPJGF
- %HOMEPATH%\Recent\Extracted.lnk
- %HOMEPATH%\Recent\Funny-MonkeyReaction.lnk
- C:\Extracted\Quaresma.exe
- %TEMP%\sfx.ini
- C:\Extracted\Funny-MonkeyReaction.jpg
- %ALLUSERSPROFILE%\Application Data\DYA_PHKESGCHWQPGOMMCQ\1.0.0\Data\updates.dat
- %ALLUSERSPROFILE%\Application Data\DYA_PHKESGCHWQPGOMMCQ\1.0.0\Data\app.dat
- %TEMP%\sfx.ini
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''