Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'OneDriveSync_9E32739D' = '"%LOCALAPPDATA%\Microsoft\SyncServices\SyncService.exe"'
- <SYSTEM32>\tasks\microsoftedgeupdatetask_9e32739d
- %LOCALAPPDATA%\microsoft\syncservices\syncservice.exe
- %LOCALAPPDATA%\microsoft\onedrivestandalone\onedriveupdate.exe
- %LOCALAPPDATA%\microsoft\syncservices\manifest.json
- %LOCALAPPDATA%\microsoft\syncservices\settings.dat
- %LOCALAPPDATA%\microsoft\onedrivestandalone\cache.dat
- %LOCALAPPDATA%\microsoft\devicesync\sync.dat
- %LOCALAPPDATA%\microsoft\terminal server client\state.bin
- %TEMP%\th57c5.tmp
- %LOCALAPPDATA%\microsoft\syncservices\runstate.bin
- '21#.#0.102.156':8093
- 'ip##o.is':443
- http://21#.##.102.156:8093/files?pr############################ via 21#.#0.102.156
- http://21#.##.102.156:8093/files/hb/19721B084754093D.json via 21#.#0.102.156
- 'ip##o.is':443
- DNS ASK ip##o.is