Техническая информация
- '<SYSTEM32>\conhost.exe'
- %TEMP%\PSE11\php\modules\php_bz2.dll
- %WINDIR%\Temp\MPTelemetrySubmit\client_manifest.txt
- %WINDIR%\Temp\MPTelemetrySubmit\watson_manifest.txt
- %TEMP%\PSE11\F0CFEA1FE014895EBCA2A87496C80601\php.ini
- %TEMP%\PSE11\php\php5ts.dll
- %TEMP%\PSE11\php\modules\php_bcompiler.dll
- DNS ASK wa####.microsoft.com
- '22#.0.0.252':5355