Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\csrss.exe
- %WINDIR%\temp\csrss.exe
- %WINDIR%\temp\caba63d.tmp
- %WINDIR%\temp\tara64d.tmp
- %WINDIR%\temp\caba63d.tmp
- %WINDIR%\temp\tara64d.tmp
- 'google.com':443
- 'localhost':49178
- 'di###rdapp.com':443
- 'localhost':49179
- 'di###rdapp.com':443
- DNS ASK google.com
- DNS ASK di###rdapp.com