Техническая информация
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\tnafmpmcof.js"
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1404
- %WINDIR%\temp\tnafmpmcof.js
- %TEMP%\764358.cvr
- 'tr###micro.com':443
- 'tr###micro.com':443
- DNS ASK tr###micro.com
- DNS ASK li###siver.com