Техническая информация
- svhost.exe
- %TEMP%\file.txt
- %TEMP%\svhost.exe
- %TEMP%\tmp.exe
- %TEMP%\svhost.exe
- '0.###.ngrok.io':19945
- DNS ASK 0.###.ngrok.io
- ClassName: '' WindowName: 'Exit and close tabs?'
- ClassName: '' WindowName: 'Close tabs?'
- '%TEMP%\svhost.exe'
- '%TEMP%\tmp.exe'
- '%WINDIR%\syswow64\notepad.exe' %TEMP%\File.txt