Техническая информация
- '%TEMP%\gine.exe'
- '<SYSTEM32>\wermgr.exe' -queuereporting
- %TEMP%\gine.exe
- 'ar###sign.info':443
- 'lo####tpress.com':443
- 'www.ce####duquesne.com':443
- DNS ASK lo####tpress.com
- DNS ASK ar###sign.info
- DNS ASK www.ce####duquesne.com
- DNS ASK dn#.##ftncsi.com
- ClassName: 'OleMainThreadWndClass' WindowName: '(null)'