Техническая информация
- <SYSTEM32>\tasks\firefox default browser agent 4c1b23fdf05ed61a
- %WINDIR%\explorer.exe
- %TEMP%\cc4f.tmp
- %APPDATA%\hggctuv
- %APPDATA%\hggctuv
- %TEMP%\cc4f.tmp
- %TEMP%\cc4f.tmp
- '4z##r.com':80
- 'zy##s.com':80
- http://4z##r.com/upload/
- http://zy##s.com/upload/
- DNS ASK 4z##r.com
- DNS ASK zy##s.com
- DNS ASK at##a.com
- DNS ASK de##e.net
- DNS ASK ds##tt.com
- DNS ASK dt###see.com
- DNS ASK ye####gles.monster
- '%APPDATA%\hggctuv'
- '%APPDATA%\hggctuv' ' (со скрытым окном)
- '<SYSTEM32>\taskeng.exe' {2A8D0870-5786-4DEB-83D6-48AC5250987B} S-1-5-21-1960123792-2022915161-3775307078-1001:stymdwprt\user:Interactive:[1]