Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\pcalua.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\pcalua\pcalua.vbs
- %HOMEPATH%\pcalua\intelcphdcpsvc.exe
- DNS ASK hi####.sakananoko.io
- DNS ASK no####.sakananoko.io
- '%WINDIR%\syswow64\dllhost.exe'