Техническая информация
- %TEMP%\11954c.tmp
- %TEMP%\1195ab.tmp
- %TEMP%\1195da.tmp
- <Текущая директория>\hpsocket.dll
- %HOMEPATH%\desktop\<Имя файла>.lnk
- <Текущая директория>\hpsocket.dll
- %TEMP%\11954c.tmp
- %TEMP%\1195ab.tmp
- %TEMP%\1195da.tmp
- 'mu.##486.com':55552
- '98##u.com':80
- '98##u.com':443
- 'st#####.##gitalcertvalidation.com':80
- 'microsoft.com':80
- http://www.98##u.com/yun/leiming.ini
- http://st#####.##gitalcertvalidation.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRJrF0xYA49jC3D83fgDGesaUkzIQQUf9OZ86BHDjEAVlYijrfMnt3KAYoCEAgi3rjufD4XUGDv%2Fmul1h8%3D
- http://www.98##u.com/yun/biaoti.ini
- '98##u.com':443
- DNS ASK mu.##486.com
- DNS ASK 98##u.com
- DNS ASK st#####.##gitalcertvalidation.com
- DNS ASK microsoft.com