Техническая информация
- '%TEMP%\bcfcabffgcc.exe' 0-1-0-4-2-4-9-2-3-6-1 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
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81422213302.txt bios get version
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81422213302.txt bios get serialnumber
- %TEMP%\tmp5.tmp
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\81422213302.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp4.tmp
- %TEMP%\bcfcabffgcc.zip
- %TEMP%\insHv41.bcfcabffgcc
- %TEMP%\tmp3.tmp
- %TEMP%\insHv41.exe
- %TEMP%\81422213302.txt
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\tmp3.tmp
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\insHv41.exe в %TEMP%\bcfcabffgcc.exe