Техническая информация
- %TEMP%\svchost.exe
- %TEMP%\1b783.tmp
- %TEMP%\1bcf2.tmp
- %TEMP%\1c1e3.tmp
- %TEMP%\svchost.exe
- %TEMP%\1a60e.tmp
- %TEMP%\1aa64.tmp
- %TEMP%\1b198.tmp
- %TEMP%\1b783.tmp
- %TEMP%\1bcf2.tmp
- %TEMP%\1c1e3.tmp
- %TEMP%\1a60e.tmp
- %TEMP%\1aa64.tmp
- %TEMP%\1b198.tmp
- 'da#.#hedan8.com':80
- da#.#hedan8.com/DownLoadListEx.txt
- DNS ASK da#.#hedan8.com