Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\appidcertstorecheck\appvscripting.exe.exe
- %HOMEPATH%\appidcertstorecheck\.vbs
- 'en###a.ddns.net':4545
- DNS ASK en###a.ddns.net
- '%WINDIR%\syswow64\dllhost.exe'
- '%WINDIR%\syswow64\dllhost.exe' -a "%LOCALAPPDATA%\feb6c2fb\plg\hE6gm0Yk.json"
- '%WINDIR%\syswow64\dllhost.exe' -a "%TEMP%\unk.xml"