Техническая информация
- <SYSTEM32>\tasks\windows security checks
- <SYSTEM32>\sihost.exe
- <SYSTEM32>\taskhostw.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\runtimebroker.exe
- Процесс vbpex.exe, модуль Amsi.dll
- Процесс vbpex.exe, модуль ntdll.dll
- %APPDATA%\microsoft\windows\services\winhost.exe
- %APPDATA%\microsoft\windows\services\winhost.exe
- '62.##.226.159':80
- '19#.#51.107.130':80
- '19#.#51.107.104':80