Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\WW_Asset_10_12.js
- <SYSTEM32>\wscript.exe "%ALLUSERSPROFILE%\Start Menu\Programs\Startup\WW_Asset_10_12.js"
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\erau1012\inventory1012.bat" "
- %PROGRAM_FILES%\erau1012\WW_Asset_10_12.js
- %PROGRAM_FILES%\erau1012\Inventory1012.bat
- 'el######.service-now.com':443
- 'localhost':1035
- DNS ASK el######.service-now.com