Техническая информация
- %HOMEPATH%\documents\9wov0h.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- %HOMEPATH%\documents\9wov0h.exe
- %HOMEPATH%\documents\etoken.dll
- %HOMEPATH%\documents\perfi.db
- 'sb####.###-cn-beijing.aliyuncs.com':443
- 'sb####.###-cn-beijing.aliyuncs.com':443
- DNS ASK sb####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\9wov0h.exe'
- '<SYSTEM32>\taskeng.exe' {1A9E6E15-DDC6-4CD7-8EAC-68E84F65CF67} S-1-5-21-3691498038-2086406363-2140527554-1000:ficpkvc\user:Interactive:[1]
- '%HOMEPATH%\documents\9wov0h.exe' (со скрытым окном)