Техническая информация
- '%TEMP%\Odin3_v3.11.1.exeOdin3_v3.11.1.exe'
- '<SYSTEM32>\schtasks.exe' /Create /TN "Update\cLEIMvwAglsARWQL" /XML "%TEMP%\z945"
- %TEMP%\z945
- %TEMP%\Odin3_v3.11.1.exeOdin3_v3.11.1.exe
- %APPDATA%\Imminent\Logs\25-10-2016
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
- %APPDATA%\imm.exe
- %TEMP%\z945
- 'ca#####.digicert.com':80
- 'r3##.ddns.net':9002
- 'wp#d':80
- 'www.download.windowsupdate.com':80
- http://ca#####.digicert.com/DigiCertAssuredIDRootCA.crt
- http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK ca#####.digicert.com
- DNS ASK r3##.ddns.net
- DNS ASK wp#d
- DNS ASK www.download.windowsupdate.com
- ClassName: 'Shell_TrayWnd' WindowName: ''