Техническая информация
- <SYSTEM32>\tasks\firefox default browser agent a8d28cbf014022bc
- %WINDIR%\explorer.exe
- %TEMP%\cc4f.tmp
- %APPDATA%\twffwrs
- %APPDATA%\twffwrs
- %TEMP%\cc4f.tmp
- %TEMP%\cc4f.tmp
- 'at##a.com':80
- http://at##a.com/upload/
- DNS ASK 4z##r.com
- DNS ASK zy##s.com
- DNS ASK at##a.com
- DNS ASK de##e.net
- '%APPDATA%\twffwrs'
- '%APPDATA%\twffwrs' ' (со скрытым окном)
- '<SYSTEM32>\taskeng.exe' {A45F2BFD-9CFA-4386-94C0-467C6FE676C5} S-1-5-21-1960123792-2022915161-3775307078-1001:gomacp\user:Interactive:[1]