Техническая информация
- <SYSTEM32>\rundll32.exe
- %TEMP%\uieiuateoq.dll
- %TEMP%\purtfiertd.tmp
- %TEMP%\jawshtml.html
- %TEMP%\adobearm.log
- %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt
- %TEMP%\aspnetsetup_00003.log
- %TEMP%\dd_wcf_ca_smci_20200611_031056_919.txt
- %TEMP%\dd_vcredist_amd64_20151216210341_001_vcruntimeadditional_x64.log
- %TEMP%\microsoft .net framework 4.7.1 setup_20200610_200621826.html
- %TEMP%\aspnetsetup_00001.log
- %TEMP%\microsoft .net framework 4.7.1 setup_20200610_195959602.html
- %TEMP%\dd_vcredist_amd64_20151216210341.log
- %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215.html
- %TEMP%\msieb217.log
- %TEMP%\dd_wcf_ca_smci_20200611_031101_060.txt
- %TEMP%\microsoft .net framework 4.5 setup_20150506_155317844.html
- '23.##4.226.136':443
- '18#.#91.106.71':443
- 'microsoft.com':80
- 'localhost':19640
- 'localhost':1312
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- '23.##4.226.136':443
- '18#.#91.106.71':443
- DNS ASK microsoft.com
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\Uieiuateoq.dll,start' (со скрытым окном)
- '<SYSTEM32>\rundll32.exe' "<SYSTEM32>\shell32.dll",#61 19640' (со скрытым окном)
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\Uieiuateoq.dll,start
- '<SYSTEM32>\rundll32.exe' "<SYSTEM32>\shell32.dll",#61 19640