Техническая информация
- <SYSTEM32>\tasks\drcex
- %HOMEPATH%\documents\ehe13o.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- %HOMEPATH%\documents\cache.dat
- %WINDIR%\temp\aceprocted.sys
- unc\localhost\pipe\atsvc
- %HOMEPATH%\documents\ehe13o.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- %HOMEPATH%\documents\cache.dat
- 's1####.###-cn-beijing.aliyuncs.com':443
- 's1####.###-cn-beijing.aliyuncs.com':443
- DNS ASK s1####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\ehe13o.exe'
- '<SYSTEM32>\taskeng.exe' {437FC3E5-2B52-4FB4-B29D-DB1C74E1863D} S-1-5-21-3691498038-2086406363-2140527554-1000:aremoqjymgc\user:Interactive:[1]
- '%HOMEPATH%\documents\ehe13o.exe' (со скрытым окном)