Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Start Up Name' = '%APPDATA%\Among Us.exe'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Start Up Name' = '%TEMP%\Among Us.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cd5d85d45be119efd1dcf984025780ae' = '"%TEMP%\Among Us.exe" ..'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] 'cd5d85d45be119efd1dcf984025780ae' = '"%TEMP%\Among Us.exe" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\cd5d85d45be119efd1dcf984025780ae.exe
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Among Us.exe" "Among Us.exe" ENABLE
- %APPDATA%\among us.exe
- %TEMP%\among us.exe
- 'hp##.####hk3b17f.xn--3e0b707e':5000
- DNS ASK hp##.####hk3b17f.xn--3e0b707e
- '%APPDATA%\among us.exe'
- '%TEMP%\among us.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Among Us.exe" "Among Us.exe" ENABLE' (со скрытым окном)