Техническая информация
Для обеспечения автозапуска и распространения
Создает или изменяет следующие файлы
- <SYSTEM32>\tasks\drivermaxagent
- <SYSTEM32>\tasks\drivermaxwelcome
- <SYSTEM32>\tasks\drivermax notification
- <SYSTEM32>\tasks\application starter - f1375f225883e83d52e8db9690775c3c
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\xsandbox.bin.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\sync.dll
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\sync.dll.__meta__.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\operation.log
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation.log.__meta__.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\operation.log
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\operation_header.log
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation_header.log.__meta__.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\innostp.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@appdatalocal@\innovative solutions\drivermax\agent\restore\4w010792p9003ecb9eqo55q8sj6p9606egm4cmcx14ny5xov7t\battery\acpi_acpi0...
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\innostp.exe.__meta__.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\1131390.txt
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\1183062.txt
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\x86_jr.inno.setup@1.0.0.0.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\operation_header.log
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\jr.inno.setup.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innoupd.exe_0x7e85450eac411ce499d8142c95217d3d.1.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\drivermax.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\drivermax.exe.__meta__.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\amd64_drivermax@1.0.0.0.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\drivermax.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\amd64_microsoft.windows.dpinst@5.1.0.0.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\microsoft.windows.dpinst.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\ddinst.exe_0x14b0edca300315ab0abfa7b7426d4f3b.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\drivermax.exe_0xa3ce774ab4ec4477191cbf919fe958f6.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innostp.exe_0xe700b02cdf6ba1e6b9dee40142a621fd.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\patch.exe_0x6d8c6b17c45558987297ae7db5abbbed.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\innovative auto stp.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk32.exe_0xfbdb19bc6521442a2bcaf8962ff7d232.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk64.exe_0x0cebf7d65c8577ca4281fe596d82efe4.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\unins000.exe_0xdda56268c2b003ea0ecf68982e950f9e.1.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\ap.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\x86_ap@0.7.5.0.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\drivermax.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\x86_drivermax@1.0.0.0.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\innoupdater.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\x86_innoupdater@1.0.0.0.manifest.__tmp__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\x86_innovative auto stp@1.0.0.0.manifest.__tmp__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@appdatalocal@\innovative solutions\drivermax\agent\restore\bfde22237ec24108674ca2fd928639dd.zip
Удаляет следующие файлы
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\1131390.txt
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\1183062.txt
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@appdatalocal@\innovative solutions\drivermax\agent\restore\4w010792p9003ecb9eqo55q8sj6p9606egm4cmcx14ny5xov7t\battery\acpi_acpi0...
Перемещает следующие файлы
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\xsandbox.bin.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\xsandbox.bin
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\x86_innovative auto stp@1.0.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\x86_innovative auto stp@1.0.0.0.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\jr.inno.setup.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\jr.inno.setup.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\x86_jr.inno.setup@1.0.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_jr.inno.setup@1.0.0.0\x86_jr.inno.setup@1.0.0.0.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe.manifest.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\sync.dll в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@programfilesx86@\innovative solutions\drivermax\sync.dll
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\sync.dll.__meta__.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\sync.dll.__meta__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\operation.log в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\operation.log
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation.log.__meta__.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation.log.__meta__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\operation_header.log в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\modified\@programfilesx86@\innovative solutions\drivermax\operation_header.log
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation_header.log.__meta__.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\roaming\meta\@programfilesx86@\innovative solutions\drivermax\operation_header.log.__meta__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\innostp.exe в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@programfilesx86@\innovative solutions\drivermax\innostp.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\innostp.exe.__meta__.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\innostp.exe.__meta__
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe.manifest.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe.manifest.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\innovative auto stp.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innovative auto stp@1.0.0.0\innovative auto stp.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\x86_innoupdater@1.0.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\x86_innoupdater@1.0.0.0.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\x86_drivermax@1.0.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\x86_drivermax@1.0.0.0.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\temp\@programfilesx86@\innovative solutions\drivermax\drivermax.exe в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\modified\@programfilesx86@\innovative solutions\drivermax\drivermax.exe
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\drivermax.exe.__meta__.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\meta\@programfilesx86@\innovative solutions\drivermax\drivermax.exe.__meta__
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\amd64_drivermax@1.0.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\amd64_drivermax@1.0.0.0.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\drivermax.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_drivermax@1.0.0.0\drivermax.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\amd64_microsoft.windows.dpinst@5.1.0.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\amd64_microsoft.windows.dpinst@5.1.0.0.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\microsoft.windows.dpinst.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\amd64_microsoft.windows.dpinst@5.1.0.0\microsoft.windows.dpinst.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\ddinst.exe_0x14b0edca300315ab0abfa7b7426d4f3b.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\ddinst.exe_0x14b0edca300315ab0abfa7b7426d4f3b.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\drivermax.exe_0xa3ce774ab4ec4477191cbf919fe958f6.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\drivermax.exe_0xa3ce774ab4ec4477191cbf919fe958f6.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innostp.exe_0xe700b02cdf6ba1e6b9dee40142a621fd.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innostp.exe_0xe700b02cdf6ba1e6b9dee40142a621fd.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innoupd.exe_0x7e85450eac411ce499d8142c95217d3d.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\innoupd.exe_0x7e85450eac411ce499d8142c95217d3d.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\patch.exe_0x6d8c6b17c45558987297ae7db5abbbed.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\patch.exe_0x6d8c6b17c45558987297ae7db5abbbed.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk32.exe_0xfbdb19bc6521442a2bcaf8962ff7d232.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk32.exe_0xfbdb19bc6521442a2bcaf8962ff7d232.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk64.exe_0x0cebf7d65c8577ca4281fe596d82efe4.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\rbk64.exe_0x0cebf7d65c8577ca4281fe596d82efe4.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\unins000.exe_0xdda56268c2b003ea0ecf68982e950f9e.1.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\manifests\unins000.exe_0xdda56268c2b003ea0ecf68982e950f9e.1.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\ap.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\ap.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\x86_ap@0.7.5.0.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_ap@0.7.5.0\x86_ap@0.7.5.0.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\drivermax.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_drivermax@1.0.0.0\drivermax.manifest
- %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\innoupdater.manifest.__tmp__ в %TEMP%\spoon\cache\0x6ae516172768b6d8\sxs\x86_innoupdater@1.0.0.0\innoupdater.manifest
- %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe.manifest.__tmp__ в %LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe.manifest
Сетевая активность
TCP
Запросы HTTP GET
- http://www.dr###rmax.com/promo8//Inno/_v5.xml
- http://ip##fo.io/json
UDP
- DNS ASK ip##fo.io
- DNS ASK dr###rmax.com
- DNS ASK st####.rapidssl.com
Другое
Ищет следующие окна
- ClassName: 'MPWClass' WindowName: ''
Создает и запускает на исполнение
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x156cf9e17cab9a13\drivermax.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0x208f80b1b626b1e1\innostp.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xfd3f1d9795673249\dxdiag.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8' (со скрытым окном)
- '%LOCALAPPDATA%\turbo.net\sandbox\drivermax\11.18\local\stubexe\0xbe6b63de76c2cae4\cmd.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8' (со скрытым окном)
