Техническая информация
- '<SYSTEM32>\rundll32.exe' "%TEMP%\ins1.tmp",hwivwnxkd install
- %TEMP%\ins1.tmp
- 'st###s.ce.ms':80
- st###s.ce.ms/haafcJzS1dripP0PLSFCIFt7SR9E7y8sSXA2TzJRvhhVLXhkWHn0dPKLutQPwYoTEF62rQrMLq230opZ22hIEFkZr1BiJpJtrLEl5ri2/OrpJQ==
- st###s.ce.ms/ToRCPVEHkOakBx8HBPk3vEMVjXLBv9Sy5g+UyfgLYJgFVCUBIORtswbqRwFNFXadhsiPQ7ZjKaUNVj8bzEw2I/roTBXCCOt9kCtEUYgNi6rRZHose+OPFqmG+otKJ/mgWx3fZt6sE93bX6WBdKBXD04ewUEA7sGXnIHK/zjgkoP+bFHMfSUxAKqHE00GBp8dQN2afVcX0Ic=
- DNS ASK st###s.ce.ms
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'