Техническая информация
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\6514D49585E42555\winlogon.exe
- 'e0##########184z3e16r7822e8i36.ipcheker.com':80
- 'wh##.amung.us':80
- e0##########184z3e16r7822e8i36.ipcheker.com/
- wh##.amung.us/swidget/26n2qf7pnk0x
- DNS ASK e0##########184z3e16r7822e8i36.ipcheker.com
- DNS ASK wh##.amung.us