Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\hi
- %APPDATA%\python39.dll
- %APPDATA%\time.ini
- %APPDATA%\time.wav
- %APPDATA%\vcruntime140.dll
- %APPDATA%\aprilfools.png
- %APPDATA%\python.exe
Сетевая активность
Подключается к
- 'ru######.s3.amazonaws.com':443
- 'x.##2.us':80
- 'o.##2.us':80
- 's.##2.us':80
- 'oc##.###tg2.amazontrust.com':80
- 'cr#.####g2.amazontrust.com':80
- 'oc##.####ca1.amazontrust.com':80
- 'cr#.####ca1.amazontrust.com':80
- 'oc##.###1b.amazontrust.com':80
- 'cr#.####b.amazontrust.com':80
TCP
Запросы HTTP GET
- http://x.##2.us/x.cer
- http://o.##2.us//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D
- http://s.##2.us/r.crl
- http://oc##.###tg2.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D
- http://cr#.####g2.amazontrust.com/rootg2.crl
- http://oc##.####ca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D
- http://cr#.####ca1.amazontrust.com/rootca1.crl
- http://oc##.###1b.amazontrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEApQTAHYfewVihAe3nxBvVw%3D
- http://cr#.####b.amazontrust.com/sca1b-1.crl
Другие
- 'ru######.s3.amazonaws.com':443
UDP
- DNS ASK ru######.s3.amazonaws.com
- DNS ASK x.##2.us
- DNS ASK o.##2.us
- DNS ASK s.##2.us
- DNS ASK oc##.###tg2.amazontrust.com
- DNS ASK cr#.####g2.amazontrust.com
- DNS ASK oc##.####ca1.amazontrust.com
- DNS ASK cr#.####ca1.amazontrust.com
- DNS ASK oc##.###1b.amazontrust.com
- DNS ASK cr#.####b.amazontrust.com
- DNS ASK st####.rapidssl.com
