Техническая информация
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\yjfgewrwrm.js"
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1364
- %WINDIR%\temp\yjfgewrwrm.js
- %TEMP%\741425.cvr
- 'tr###micro.com':443
- 'tr###micro.com':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- DNS ASK tr###micro.com
- DNS ASK ye###eroun.com
- DNS ASK ev###siand.com