Техническая информация
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe' %LOCALAPPDATA%\tempstorage_AE4pKhk.xml
- <SYSTEM32>\werfault.exe
- %LOCALAPPDATA%\tempstorage_ae4pkhk.xml
- %TEMP%\xzbjjbhf.0.cs
- %TEMP%\xzbjjbhf.cmdline
- %TEMP%\xzbjjbhf.out
- %TEMP%\csc9e93dc576be24609a8f281aa7d8110c4.tmp
- %TEMP%\res5244.tmp
- %TEMP%\xzbjjbhf.dll
- %TEMP%\res5244.tmp
- %TEMP%\csc9e93dc576be24609a8f281aa7d8110c4.tmp
- %TEMP%\xzbjjbhf.pdb
- %TEMP%\xzbjjbhf.0.cs
- %TEMP%\xzbjjbhf.dll
- %TEMP%\xzbjjbhf.cmdline
- %TEMP%\xzbjjbhf.out
- DNS ASK re#.#kjc.com
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe' %LOCALAPPDATA%\tempstorage_AE4pKhk.xml' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\xzbjjbhf.cmdline"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5244.tmp" "%TEMP%\CSC9E93DC576BE24609A8F281AA7D8110C4.TMP"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\xzbjjbhf.cmdline"
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5244.tmp" "%TEMP%\CSC9E93DC576BE24609A8F281AA7D8110C4.TMP"