Technical Information
- [HKLM\System\CurrentControlSet\Services\TaskKill] 'Start' = '00000000'
- [HKLM\System\CurrentControlSet\Services\TaskKill] 'ImagePath' = '%TEMP%\Иисус.sys'
- 'TaskKill' %TEMP%\Иисус.sys
- %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\v4.7.02558\setup.exe
- %WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe
- %WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe
- %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe
- %WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe
- %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe
- %TEMP%\иисус.sys
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\v4.7.02558\setup.exe'