Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\WW_Asset_10_12.js
- <SYSTEM32>\wscript.exe "%ALLUSERSPROFILE%\Start Menu\Programs\Startup\WW_Asset_10_12.js"
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\erau\inventory.bat" "
- %PROGRAM_FILES%\erau\WW_Asset_10_12.js
- %PROGRAM_FILES%\erau\Inventory.bat
- 'el######.service-now.com':443
- 'localhost':1036
- DNS ASK el######.service-now.com