Техническая информация
- C:\users\public\1.txt
- %TEMP%\xicavxdy.0.cs
- %TEMP%\xicavxdy.cmdline
- %TEMP%\xicavxdy.out
- %TEMP%\cscb85f7fd452c042d3a961d8668ea96c.tmp
- %TEMP%\res1109.tmp
- %TEMP%\xicavxdy.dll
- %TEMP%\res1109.tmp
- %TEMP%\cscb85f7fd452c042d3a961d8668ea96c.tmp
- %TEMP%\xicavxdy.0.cs
- %TEMP%\xicavxdy.cmdline
- %TEMP%\xicavxdy.out
- %TEMP%\xicavxdy.dll
- http://16#.#29.67.39/inc/z.txt
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\xicavxdy.cmdline"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1109.tmp" "%TEMP%\CSCB85F7FD452C042D3A961D8668EA96C.TMP"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\xicavxdy.cmdline"
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1109.tmp" "%TEMP%\CSCB85F7FD452C042D3A961D8668EA96C.TMP"