Техническая информация
- <SYSTEM32>\tasks\firefox default browser agent 505618f70a77fe4f
- %WINDIR%\explorer.exe
- %APPDATA%\vcwsavw
- %APPDATA%\vcwsavw
- 'th###mmum.com':80
- http://th###mmum.com/upload/
- DNS ASK au###ney.com
- DNS ASK th###mmum.com
- DNS ASK at####pingtrips.com
- DNS ASK ku####ualaman.com
- DNS ASK re####zarazua.com
- DNS ASK na###mutlu.com
- '%APPDATA%\vcwsavw'
- '%APPDATA%\vcwsavw' ' (со скрытым окном)
- '<SYSTEM32>\taskeng.exe' {3814B4E6-4DB4-41B5-9391-B735F9AE6D5F} S-1-5-21-1960123792-2022915161-3775307078-1001:ekqbnyppr\user:Interactive:[1]