Technical Information
- ClassName: 'FilemonClass', WindowName: ''
- ClassName: 'PROCMON_WINDOW_CLASS', WindowName: ''
- ClassName: 'RegmonClass', WindowName: ''
- from <Full path to file> to <Current directory>\ûîûîûññà ûûåà ñîäà ñòâç.exe
- 'localhost':49172
- 'localhost':49174
- 'ke##uth.com':443
- 'cd#.##scordapp.com':443
- 'microsoft.com':80
- 'localhost':49172
- 'localhost':49174
- 'localhost':49175
- 'ke##uth.com':443
- 'cd#.##scordapp.com':443
- DNS ASK ke##uth.com
- DNS ASK cd#.##scordapp.com
- DNS ASK microsoft.com
- ClassName: 'File Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: 'Process Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: 'Registry Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
- ClassName: '18467-41' WindowName: ''
- ClassName: '' WindowName: 'IDA: Quick start'
- ClassName: '' WindowName: 'Memory Viewer'
- ClassName: '' WindowName: 'Process List'
- ClassName: '' WindowName: 'KsDumper'
- ClassName: '' WindowName: 'x64dbg'
- ClassName: '' WindowName: 'HTTP Debugger'
- '<SYSTEM32>\cmd.exe' /c @del /s /f /a:h /a:a /q C:\Users\%username%\AppData\Local\Microsoft\Windows\INetCache\IE\*.* >nul 2>&1
- '<SYSTEM32>\cmd.exe' /c start %WINDIR%\IME\DRK.TMP.exe