Техническая информация
- <SYSTEM32>\tasks\systemupdate
- %TEMP%\test_download.exe
- D:\aaa.exe
- %TEMP%\test_download.exe
- 'ph###atc.site':80
- http://ph###atc.site/test.exe
- DNS ASK ph###atc.site
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net