Техническая информация
- <SYSTEM32>\cmd.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\alg.exe
- <SYSTEM32>\drwtsn32.exe
- %TEMP%\WERf4d4.dir00\alg.exe.hdmp
- %TEMP%\WERf4d4.dir00\appcompat.txt
- %TEMP%\WERf4d4.dir00\manifest.txt
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %TEMP%\WERf4d4.dir00\alg.exe.mdmp
- 'pr####.fling.com':80
- '21#.#08.252.185':80
- pr####.fling.com/geo/txt/city.php
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- DNS ASK �#�8>)
- DNS ASK �# �@�
- DNS ASK �#�1
- DNS ASK �#9�V�
- DNS ASK �#�n
- DNS ASK �#�J(
- DNS ASK pr####.fling.com
- DNS ASK �#&�u�
- DNS ASK �#v�5