Техническая информация
- %HOMEPATH%\documents\cuazwp.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- %HOMEPATH%\documents\cuazwp.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- 'sa####.###-cn-beijing.aliyuncs.com':443
- 'sa####.###-cn-beijing.aliyuncs.com':443
- DNS ASK sa####.###-cn-beijing.aliyuncs.com
- '<SYSTEM32>\taskeng.exe' {CB8FDDC1-A166-4DD7-A56F-F942168204AB} S-1-5-21-3691498038-2086406363-2140527554-1000:qtvatpzbpct\user:Interactive:[1]