Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '是太太泽希.exe' = '\是太太泽希.exe'
- 是太太泽希.exe
- C:\是太太泽希.exe
- %APPDATA%\app\vemo.exe
- %APPDATA%\app\vemo.exe
- %APPDATA%\app\vemo.exe
- %APPDATA%\app\vemo.exe
- http://ip##pi.com/json/
- DNS ASK ip##pi.com
- 'C:\是太太泽希.exe'
- '%APPDATA%\app\vemo.exe'