Техническая информация
- <Текущая директория>\c7f64d5117b068
- %HOMEPATH%\desktop\qcyprasa.log
- %HOMEPATH%\desktop\jtlvlfcq.log
- %HOMEPATH%\desktop\kjwpounm.log
- %HOMEPATH%\desktop\uizacmdq.log
- %HOMEPATH%\desktop\vyjvfbnm.log
- %HOMEPATH%\desktop\oqwbzgyb.log
- %HOMEPATH%\desktop\oavwcmtx.log
- %HOMEPATH%\desktop\ochfdbao.log
- %HOMEPATH%\desktop\ongaghvk.log
- %HOMEPATH%\desktop\rnhfseph.log
- %HOMEPATH%\desktop\ccvkjlqh.log
- %HOMEPATH%\desktop\nbyvwdgl.log
- %HOMEPATH%\desktop\ogjwwmvl.log
- %HOMEPATH%\desktop\hiwwuxbw.log
- %HOMEPATH%\desktop\hyqzhhct.log
- %HOMEPATH%\desktop\ypmbnkgl.log
- %HOMEPATH%\desktop\euuocasm.log
- nul
- %TEMP%\yulm0eln1t.bat
- %TEMP%\zjzojrfjog
- %ProgramFiles(x86)%\windows photo viewer\en-us\7a0fd90576e088
- %ProgramFiles(x86)%\windows photo viewer\en-us\explorer.exe
- C:\kms\f3b6ecef712a24
- C:\kms\spoolsv.exe
- %WINDIR%\prefetch\27d1bcfc3c54e0
- %WINDIR%\prefetch\system.exe
- <Текущая директория>\886983d96e3d3e
- <Текущая директория>\csrss.exe
- %ProgramFiles%\windows defender\en-us\0fc223bdacedc3
- %ProgramFiles%\windows defender\en-us\firefox.exe
- %HOMEPATH%\desktop\rhzhhpra.log
- %HOMEPATH%\desktop\ohdtncse.log
- %TEMP%\zjzojrfjog
- '67#####m.n9shteam3.top':80
- http://67#####m.n9shteam3.top/VmTorequestSecureAuthDbLinuxAsync.php
- DNS ASK 67#####m.n9shteam3.top
- 'localhost':123
- '%WINDIR%\prefetch\system.exe'
- '<SYSTEM32>\cmd.exe' /C "%TEMP%\yULm0ElN1T.bat"' (со скрытым окном)
- '<SYSTEM32>\cmd.exe' /C "%TEMP%\yULm0ElN1T.bat"
- '<SYSTEM32>\chcp.com' 65001
- '<SYSTEM32>\w32tm.exe' /stripchart /computer:localhost /period:5 /dataonly /samples:2