Техническая информация
- %TEMP%\runtimebroker.exe
- %TEMP%\bootstrappernew.exe
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-28-079.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-786.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-814.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-831.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-855.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-871.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-29-886.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-30-092.dump
- %TEMP%\content\964-1336-bootstrappernew.exe-21-01-30-395.dump
- %TEMP%\config
- DNS ASK dn#.google
- DNS ASK cl####lare-dns.com
- DNS ASK sa##t.cn
- DNS ASK to##pi.io
- '1.#.1.1':443
- ClassName: 'Edit' WindowName: ''
- '%TEMP%\runtimebroker.exe'
- '%TEMP%\bootstrappernew.exe'