Техническая информация
- %WINDIR%\syswow64\backgroundtaskhost.exe
- %ALLUSERSPROFILE%\notepadpro\unluks32.dll
- %ALLUSERSPROFILE%\notepadpro\cache.pmt
- %ALLUSERSPROFILE%\notepadpro\task explorer-x64.exe
- %ALLUSERSPROFILE%\notepadpro\task explorer-x64.exe в %ALLUSERSPROFILE%\notepadpro\notepadpro.exe
- '10#.#18.243.73':443
- '10#.#18.243.73':443
- '%ALLUSERSPROFILE%\notepadpro\notepadpro.exe'
- '<SYSTEM32>\tieringengineservice.exe'
- '<SYSTEM32>\svchost.exe' -k AssignedAccessManagerSvc -s AssignedAccessManagerSvc
- '%WINDIR%\syswow64\backgroundtaskhost.exe'