Техническая информация
- '%TEMP%\bhcabfceba.exe' 4-3-7-7-9-3-2-4-1-0-9 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
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81420657147.txt bios get version
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81420657147.txt bios get serialnumber
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\81420657147.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp3.tmp
- %TEMP%\nsh2.tmp\jjff.dll
- %TEMP%\insHv10.bhcabfceba
- %TEMP%\bhcabfceba.zip
- %TEMP%\insHv10.exe
- %TEMP%\nsh2.tmp\nsisunz.dll
- %TEMP%\81420657147.txt
- %TEMP%\tmp5.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\bhcabfceba.zip
- %TEMP%\insHv10.bhcabfceba
- %TEMP%\tmp4.tmp
- %TEMP%\tmp3.tmp
- %TEMP%\insHv10.exe в %TEMP%\bhcabfceba.exe