Техническая информация
- '%TEMP%\beddcdfhce.exe' 0|8|1|2|3|0|2|8|5|1|2 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
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81433289303.txt bios get version
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\81433289303.txt bios get serialnumber
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\81433289303.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp3.tmp
- %TEMP%\nsf2.tmp\apkeejq.dll
- %TEMP%\beddcdfhce.gccabfbcecai
- %TEMP%\gccabfbcecai.zip
- %TEMP%\beddcdfhce.exe
- %TEMP%\nsf2.tmp\ZipDLL.dll
- %TEMP%\tmp5.tmp
- %TEMP%\81433289303.txt
- %TEMP%\tmp3.tmp
- %TEMP%\tmp4.tmp
- ClassName: '#32770' WindowName: ''