Техническая информация
- %WINDIR%\syswow64\windowspowershell\v1.0\new.start_launcher_sa.exe
- %WINDIR%\syswow64\windowspowershell\v1.0\start_launcher_sa.exe
- %WINDIR%\syswow64\windowspowershell\v1.0\launcher\zos.exe
- %WINDIR%\syswow64\windowspowershell\v1.0\launcher\newtonsoft.json.dll
- %LOCALAPPDATA%\microsoft\clr_v4.0_32\usagelogs\start_launcher_sa.exe.log
- %WINDIR%\syswow64\windowspowershell\v1.0\updater.exe
- %WINDIR%\syswow64\windowspowershell\v1.0\new.start_launcher_sa.exe
- %WINDIR%\syswow64\windowspowershell\v1.0\launcher\zos.exe в %WINDIR%\syswow64\windowspowershell\v1.0\launcher\qfghfd3.exe
- 'la######-new.strikearena.ru':443
- 'x1.#.lencr.org':80
- http://x1.#.lencr.org/
- 'la######-new.strikearena.ru':443
- DNS ASK la######-new.strikearena.ru
- DNS ASK x1.#.lencr.org
- '%WINDIR%\syswow64\windowspowershell\v1.0\new.start_launcher_sa.exe'
- '%WINDIR%\syswow64\windowspowershell\v1.0\start_launcher_sa.exe'
- '%WINDIR%\syswow64\windowspowershell\v1.0\launcher\qfghfd3.exe' GHFD3