Trojan.Siggen33.58618

Техническая информация

Вредоносные функции

Запускает большое число процессов

Читает файлы, отвечающие за хранение паролей сторонними программами

%APPDATA%\opera software\opera stable\login data
%LOCALAPPDATA%\google\chrome\user data\default\login data
%LOCALAPPDATA%\microsoft\edge\user data\default\login data
%LOCALAPPDATA%\google\chrome\user data\default\web data
%LOCALAPPDATA%\microsoft\edge\user data\default\web data

Изменения в файловой системе

Создает следующие файлы

%TEMP%\_mei13322\crypto\cipher\_arc4.pyd
%TEMP%\_mei13322\crypto\cipher\_salsa20.pyd
%TEMP%\_mei13322\crypto\cipher\_chacha20.pyd
%TEMP%\_mei13322\crypto\cipher\_pkcs1_decode.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_aes.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_aesni.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_arc2.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_blowfish.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_cast.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_cbc.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_cfb.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_ctr.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_des.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_des3.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_ecb.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_ocb.pyd
%TEMP%\_mei13322\crypto\cipher\_raw_ofb.pyd
%TEMP%\_mei13322\crypto\hash\_blake2b.pyd
%TEMP%\_mei13322\crypto\hash\_blake2s.pyd
%TEMP%\_mei13322\crypto\hash\_md2.pyd
%TEMP%\_mei13322\crypto\hash\_md4.pyd
%TEMP%\_mei13322\crypto\hash\_md5.pyd
%TEMP%\_mei13322\crypto\hash\_ripemd160.pyd
%TEMP%\_mei13322\crypto\hash\_sha1.pyd
%TEMP%\_mei13322\crypto\hash\_sha224.pyd
%TEMP%\_mei13322\crypto\hash\_sha256.pyd
%TEMP%\_mei13322\crypto\hash\_sha384.pyd
%TEMP%\_mei13322\crypto\hash\_sha512.pyd
%TEMP%\_mei13322\crypto\hash\_ghash_clmul.pyd
%TEMP%\_mei13322\crypto\hash\_ghash_portable.pyd
%TEMP%\_mei13322\crypto\hash\_keccak.pyd
%TEMP%\_mei13322\crypto\hash\_poly1305.pyd
%TEMP%\_mei13322\crypto\math\_modexp.pyd
%TEMP%\_mei13322\crypto\protocol\_scrypt.pyd
%TEMP%\_mei13322\crypto\publickey\_ec_ws.pyd
%TEMP%\_mei13322\crypto\publickey\_ed25519.pyd
%TEMP%\_mei13322\crypto\publickey\_ed448.pyd
%TEMP%\_mei13322\crypto\publickey\_x25519.pyd
%TEMP%\_mei13322\crypto\util\_cpuid_c.pyd
%TEMP%\_mei13322\crypto\util\_strxor.pyd
%TEMP%\_mei13322\cryptodome\cipher\_arc4.pyd
%TEMP%\_mei13322\cryptodome\cipher\_salsa20.pyd
%TEMP%\_mei13322\cryptodome\cipher\_chacha20.pyd
%TEMP%\_mei13322\cryptodome\cipher\_pkcs1_decode.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_aes.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_aesni.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_arc2.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_blowfish.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_cast.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_cbc.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_cfb.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_ctr.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_des.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_des3.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_ecb.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_ocb.pyd
%TEMP%\_mei13322\cryptodome\cipher\_raw_ofb.pyd
%TEMP%\_mei13322\cryptodome\hash\_blake2b.pyd
%TEMP%\_mei13322\cryptodome\hash\_blake2s.pyd
%TEMP%\_mei13322\cryptodome\hash\_md2.pyd
%TEMP%\_mei13322\cryptodome\hash\_md4.pyd
%TEMP%\_mei13322\cryptodome\hash\_md5.pyd
%TEMP%\_mei13322\cryptodome\hash\_ripemd160.pyd
%TEMP%\_mei13322\cryptodome\hash\_sha1.pyd
%TEMP%\_mei13322\cryptodome\hash\_sha224.pyd
%TEMP%\_mei13322\cryptodome\hash\_sha256.pyd
%TEMP%\_mei13322\cryptodome\hash\_sha384.pyd
%TEMP%\_mei13322\cryptodome\hash\_sha512.pyd
%TEMP%\_mei13322\cryptodome\hash\_ghash_clmul.pyd
%TEMP%\_mei13322\cryptodome\hash\_ghash_portable.pyd
%TEMP%\_mei13322\cryptodome\hash\_keccak.pyd
%TEMP%\_mei13322\cryptodome\hash\_poly1305.pyd
%TEMP%\_mei13322\cryptodome\math\_modexp.pyd
%TEMP%\_mei13322\cryptodome\protocol\_scrypt.pyd
%TEMP%\_mei13322\cryptodome\publickey\_ec_ws.pyd
%TEMP%\_mei13322\cryptodome\publickey\_ed25519.pyd
%TEMP%\_mei13322\cryptodome\publickey\_ed448.pyd
%TEMP%\_mei13322\cryptodome\publickey\_x25519.pyd
%TEMP%\_mei13322\cryptodome\util\_cpuid_c.pyd
%TEMP%\_mei13322\cryptodome\util\_strxor.pyd
%TEMP%\_mei13322\vcruntime140.dll
%TEMP%\_mei13322\vcruntime140_1.dll
%TEMP%\_mei13322\_asyncio.pyd
%TEMP%\_mei13322\_bz2.pyd
%TEMP%\_mei13322\_cffi_backend.cp311-win_amd64.pyd
%TEMP%\_mei13322\_ctypes.pyd
%TEMP%\_mei13322\_decimal.pyd
%TEMP%\_mei13322\_hashlib.pyd
%TEMP%\_mei13322\_lzma.pyd
%TEMP%\_mei13322\_multiprocessing.pyd
%TEMP%\_mei13322\_overlapped.pyd
%TEMP%\_mei13322\_queue.pyd
%TEMP%\_mei13322\_socket.pyd
%TEMP%\_mei13322\_sqlite3.pyd
%TEMP%\_mei13322\_ssl.pyd
%TEMP%\_mei13322\base_library.zip
%TEMP%\_mei13322\brotli\_brotli.pyd
%TEMP%\_mei13322\certifi\cacert.pem
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\installer
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\license
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\license.apache
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\license.bsd
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\metadata
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\record
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\wheel
%TEMP%\_mei13322\cryptography-41.0.1.dist-info\top_level.txt
%TEMP%\_mei13322\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei13322\libcrypto-1_1.dll
%TEMP%\_mei13322\libffi-8.dll
%TEMP%\_mei13322\libssl-1_1.dll
%TEMP%\_mei13322\pyexpat.pyd
%TEMP%\_mei13322\python3.dll
%TEMP%\_mei13322\python311.dll
%TEMP%\_mei13322\pywin32_system32\pywintypes311.dll
%TEMP%\_mei13322\select.pyd
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\autocommand-2.2.2.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\importlib_resources-6.4.0.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\inflect-7.3.1.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\jaraco.context-5.3.0.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei13322\setuptools\_vendor\more_itertools-10.3.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\more_itertools-10.3.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\more_itertools-10.3.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\more_itertools-10.3.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\more_itertools-10.3.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\ordered_set-4.1.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\ordered_set-4.1.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\ordered_set-4.1.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\ordered_set-4.1.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\license.apache
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\license.bsd
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\packaging-24.1.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\platformdirs-4.2.2.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\platformdirs-4.2.2.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\platformdirs-4.2.2.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\platformdirs-4.2.2.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\platformdirs-4.2.2.dist-info\licenses\license
%TEMP%\_mei13322\setuptools\_vendor\tomli-2.0.1.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\tomli-2.0.1.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\tomli-2.0.1.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\tomli-2.0.1.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\tomli-2.0.1.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\entry_points.txt
%TEMP%\_mei13322\setuptools\_vendor\typeguard-4.3.0.dist-info\top_level.txt
%TEMP%\_mei13322\setuptools\_vendor\typing_extensions-4.12.2.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\typing_extensions-4.12.2.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\typing_extensions-4.12.2.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\typing_extensions-4.12.2.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\typing_extensions-4.12.2.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\license.txt
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\wheel-0.43.0.dist-info\entry_points.txt
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\installer
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\license
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\metadata
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\record
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\wheel
%TEMP%\_mei13322\setuptools\_vendor\zipp-3.19.2.dist-info\top_level.txt
%TEMP%\_mei13322\sqlite3.dll
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\installer
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\license
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\metadata
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\record
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\wheel
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\entry_points.txt
%TEMP%\_mei13322\typeguard-4.3.0.dist-info\top_level.txt
%TEMP%\_mei13322\unicodedata.pyd
%TEMP%\_mei13322\wheel-0.44.0.dist-info\installer
%TEMP%\_mei13322\wheel-0.44.0.dist-info\license.txt
%TEMP%\_mei13322\wheel-0.44.0.dist-info\metadata
%TEMP%\_mei13322\wheel-0.44.0.dist-info\record
%TEMP%\_mei13322\wheel-0.44.0.dist-info\wheel
%TEMP%\_mei13322\wheel-0.44.0.dist-info\entry_points.txt
%TEMP%\_mei13322\win32\win32api.pyd
%TEMP%\_mei13322\win32\win32evtlog.pyd
<Текущая директория>\error.txt
%LOCALAPPDATA%\tempwpufucdlek.db
%LOCALAPPDATA%\tempwpncdnrsqj.db
%LOCALAPPDATA%\tempwpodnfuroq.db
%TEMP%\wppassw.txt
%LOCALAPPDATA%\tempwpcqsmxsud.db
%TEMP%\wpautofill.txt
%LOCALAPPDATA%\tempwpfvwrcybg.db
%LOCALAPPDATA%\tempwpklfhhcnz.db
%LOCALAPPDATA%\tempwponuguwry.db
%LOCALAPPDATA%\tempwponuguwry.db-shm
%LOCALAPPDATA%\tempwpjudihyce.db
%LOCALAPPDATA%\tempwpfdyqnnwb.db
%LOCALAPPDATA%\tempwpdorfbiml.db
%LOCALAPPDATA%\tempwpzvfgsmpj.db-shm

Удаляет файлы, которые сам же создал

%LOCALAPPDATA%\tempwpufucdlek.db
%LOCALAPPDATA%\tempwpncdnrsqj.db
%LOCALAPPDATA%\tempwpodnfuroq.db
%LOCALAPPDATA%\tempwponuguwry.db-shm
%LOCALAPPDATA%\tempwponuguwry.db
%LOCALAPPDATA%\tempwpjudihyce.db
%LOCALAPPDATA%\tempwpfdyqnnwb.db
%LOCALAPPDATA%\tempwpdorfbiml.db
%LOCALAPPDATA%\tempwpzvfgsmpj.db-shm

Сетевая активность

Подключается к

'ch#####.amazonaws.com':443

TCP

Другие

'ch#####.amazonaws.com':443

UDP

DNS ASK ch#####.amazonaws.com

Другое

Перезапускает анализируемый образец

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /c "ver" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "<Полный путь к файлу> -m pip install requests" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "<Полный путь к файлу> -m pip install pycryptodomex" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "C:\\Program Files\\Windows Defender\\MpCmdRun.exe -RemoveDefinitions -All" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im opera.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "powershell "netsh advfirewall set allprofiles state off" " (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDesc 2> nul
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im Chrome.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im brave.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im yandex.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im edge.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im p /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im h /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "ta"sk"ki"ll /im d /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "taskkill /im firefox.exe /t /f >nul 2>&1" (со скрытым окном)
'<SYSTEM32>\cmd.exe' /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name ProductName" (со скрытым окном)
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Get-Clipboard -TextFormatType Text"
'<SYSTEM32>\wbem\wmic.exe' os get csname, description, installdate, organization, registereduser, numberofprocesses
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "netsh advfirewall set allprofiles state off"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней