Trojan.DownLoader49.20267

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

<SYSTEM32>\tasks\proton

Изменения в файловой системе

Создает следующие файлы

%ALLUSERSPROFILE%\protonfdn\proton.exe

Сетевая активность

Подключается к

'tr#######stralcountysystem.info':8080
'tr#######stralcountysystem.info':8081
'localhost':12345
'mx##.#onos.co.uk':465
'sm##.shaw.ca':587
'mx#.###.#ailpod9-cph3.one.com':465
'mx#.###.#ailpod11-cph3.one.com':465
'se####smtp.gekue.de':587
'aspmx.l.google.com':587
'ma##.#ssmca.pr.gov':587
'mi####llstark.com':465
'pr###rty.info':465
'al##.####.email.fireeyecloud.com':587
'ma##.hot.ee':587
'se######tp.pizzafreaks.com':587
'ev####oaching.ca':465
'mx.####-elalmendro.es':465
'mx##.#spgateway.de':587
'ef#######.registrar-servers.com':465
'ma##.#999.vip.co.jp':587
'ou#.post.sk':465
'alt4.aspmx.l.google.com':465
'lu.##mcom.it':587
'sm##.#utomansos.com':587
'ma##.#oli-sani.org':465
'alt1.aspmx.l.google.com':587
'bo##t.fr':465
'c1###.mx.srv.dfn.de':587
'mx#.##stinger.com':465
'he##emij.nl':465
'mx.####roservice.com':587
'alt2.aspmx.l.google.com':587
'se#####mtp.baleines.ca':587
'sm##.me.com':587
'cr###rte.com.br':465
'sm##.##traduccion.com':465
'sm##.#isualab.com':587
'no#######.#ail.protection.outlook.com':465
'sm##sset.ca':587
'ca##to.com':587
'mx.##eoffice.bh':587
'alt2.aspmx.l.google.com':465
'sm#####.tld.t-online.de':465
'ma##.##apevinemsp.com':465
'an###########com.mail.protection.outlook.com':587
'mx#######er18.immenzaces.com':587
'sm##.email.cz':587
'ou#.dosg.de':465
'ja##a.or.jp':465
'mx.##mply.com':587
'as####.googlemail.com':587
'mx#.###ivalserver.com':587
'sm##.#asports.com':465
'sm###n.rzone.de':465
'sm##.###aleastbourne.org.uk':587
'sm##.elograf.de':465
'pi###dns.org':587
'te###oconsol.it':465
'el##t.fi':587
'sm##.ig.com.br':587
'sm##.##cureserver.net':587
'ma##.####ifieldstudents.co.za':465
'sm##.wazw.com':587
'el##mar.cl':587
'ct###ios.com':587
'ma##.#yfsas.com.co':587
'mx##.#ymxserver.com':465
'alt1.aspmx.l.google.com':465
'ma##.#orsaty.com':465
'ma##.###lmarktitlefl.com':465
'smtp.google.com':587
'ca##ve.net':587
'ni###oskiyou.de':465
'20###urs.com':587
'localhost':465
'pu####sveracruz.com':587
'mx#.#oho.com':465
'in#########p.us-east-1.amazonaws.com':465
'gr##########a.mail.protection.outlook.com':465
'eu#######nbound-2.mimecast.com':587
'mx#####2.ppe-hosted.com':587
'sm##.####oscopetrolina.g12.br':465
'af############o-uk01i.mail.protection.outlook.com':587
'ma##.#etnet.mt.gov':587
'ga##l.com':587
'as####.googlemail.com':465
'mx##.##il.icloud.com':587
'ou#.#bprod.com':465
'pr##########com.mail.protection.outlook.com':465
'mo####aroandrea.it':465
'bo###ech.com':465
'mx##.ionos.es':465
'sk####yspa.com.au':587
'ro####onobgyn.com':587
'mx###.#ail-forwarder.io':587
'sm##.luukku.com':587
'sm##.vianet.ca':587
'sm##.##g-services.co.uk':465
'ne##ares.ca':587
've##.com.uy':587
'ma##.###inorganizasyon.com':587
'smtp.google.com':465
'ar####plastic.com':587
'mx#.######d13-cph3.g1i.hostnet.nl':465
'mx.#oho.com':587
'fr#####erprise.com.au':587
'me####irion.co.uk':587
'so###chsrl.it':465
'ca#####khomebrew.com':587
'ma##.#hampower.com':587
'de####rsegap.com':587
'mx###.##tispameurope.com':465
'ac#.in':465
'vi###ltech.it':465
'ma#l.uk':587
'sm##.ziggo.nl':587
'he##########-de.mail.protection.outlook.com':465
'ma##.hkh.fr':465
'd9#####.##s.barracudanetworks.com':587
'mx#.ovh.net':465
'wn##.net':465
'ab#######thprofessionals.co.uk':465
'xd#d.pl':465
'ne####tworks.com':587
'sc######-tour-guide.co.uk':465
'ch####pencer.net':465
'en####drilling.com':587
'pp#######.#ail.protection.outlook.com':587
'st###ware.co':465
'mx#.#hosting.cl':587
'wi###dcafe.ca':465
'sm##.#atar.net.qa':587
'sl###group.nl':587
'ou#.##tclubspot.com':587
'ou#.##johnsson.se':465
'mx.####.locaweb.com.br':465
'tt.net':587
'ma##.cfc.com.vn':587
'th###ath.co.uk':587
'fu####.force9.co.uk':465
'ou#.#gms.com':465
'co##dia.com':465
'to##emp.no':587
'li#####n-redcross.org':587
'se####.alksnis.net':465
'pu##mart.ph':587
'mx#.##lecable.es':587
'ma###new.ht.hr':587
'mx#.###vateemail.com':465
'mx##.#topspam.ca':587
'al####emails.com':587
'la####eadstock.com':465
'za########bound-1.mimecast.co.za':587
'mx#.###.#ailpod14-cph3.one.com':465
'di###narco.com':465
'alt3.aspmx.l.google.com':587
'ro####.#x.cloudflare.net':587
'mx#.###tinger.com.br':465
'ux###esign.com':465
'sm##.#odafone.de':587
'mx##.######am.mailspamprotection.com':465
'se#######p.vipelectrical.com.au':465
'mx##.ionos.de':587
'sm##.##caservizi.com':587
'gw#.#over.net':587
'gm####2.gadmail.de':587
'ki#####athashford.co.uk':587
'ce####nagement.com':587
'an###yweb.net':587
'ma##.#appyisp.com':587
'ma##.#atar.net.qa':587
'sm##.#wissonline.ch':587
'ma##.planet.nl':587
'sm##.pandora.be':587
'ou#.###endshipauto.com':587
'ma##.co.uk':587
'co###ba.com.br':587
'so###phere.ca':587
'pc##drid.es':465
'mx##.###ud.vadesecure.com':465
'sm##.kabelbw.de':587
'ma##.iaai.com':587
'tr##inc.ca':587
'sm##.##ntochiavi.net':587
'bb#.cm':465
'bp##law.com':465

TCP

Запросы HTTP GET

http://tr#########ralcountysystem.info:8080/updater?fo################################## via tr#######stralcountysystem.info

Другие

'tr#######stralcountysystem.info':8081
'localhost':12345
'localhost':49710
'localhost':49711
'localhost':49713
'localhost':49715
'localhost':49719
'localhost':49721
'localhost':49724
'localhost':49725
'localhost':49728
'localhost':49729
'localhost':49734
'localhost':49736
'localhost':49738
'localhost':49740
'localhost':49745
'localhost':49746
'localhost':49749
'localhost':49751
'localhost':49755
'localhost':49760
'localhost':49761
'localhost':49763
'localhost':49768
'localhost':49770
'localhost':49772
'localhost':49775
'localhost':49777
'localhost':49781
'localhost':49784
'localhost':49786
'localhost':49789
'localhost':49792
'localhost':49796
'localhost':49797
'localhost':49798
'localhost':49800
'localhost':49803
'localhost':49805
'localhost':49806
'localhost':49808
'localhost':49810
'localhost':49812
'localhost':49814
'localhost':49817
'localhost':49818
'localhost':49822
'localhost':49824
'localhost':49826
'localhost':49828
'localhost':49831
'localhost':49836
'localhost':49843
'localhost':49849
'localhost':49853
'localhost':49860
'localhost':49864
'localhost':49869
'localhost':49875
'localhost':49874
'localhost':49880
'localhost':49881
'localhost':49878
'localhost':49882
'localhost':49883
'localhost':49887
'localhost':49886
'localhost':49888
'localhost':49889
'localhost':49892
'localhost':49901
'localhost':49903
'localhost':49905
'localhost':49909
'localhost':49910
'localhost':49915
'localhost':49916
'localhost':49919
'localhost':49920
'localhost':49921
'localhost':49922
'localhost':49923
'localhost':49926
'localhost':49929
'localhost':49934
'localhost':49937
'localhost':49940
'localhost':49943
'localhost':49945
'localhost':49950
'localhost':49951
'localhost':49956
'localhost':49958
'localhost':49959
'localhost':49960
'localhost':49966
'localhost':49969
'localhost':49971
'localhost':49973
'localhost':49977
'localhost':49979
'localhost':49983
'localhost':49986
'localhost':49990
'localhost':49991
'localhost':49995
'localhost':49999
'localhost':50000
'localhost':50002
'sm##.#ecoruche.pt':587
'localhost':50005
'localhost':50006
'localhost':50009
'localhost':50011
'localhost':50012
'localhost':50015
'localhost':50017
'localhost':50018
'localhost':50019
'localhost':50024
'localhost':50025
'localhost':50026
'localhost':50027
'localhost':50028
'localhost':50029
'localhost':50032
'localhost':50033
'localhost':50035
'localhost':50039
'localhost':50040
'localhost':50042
'localhost':50044
'localhost':50046
'localhost':50048
'localhost':50049
'localhost':50056
'localhost':50057
'localhost':50059
'localhost':50061
'localhost':50062
'localhost':50069
'localhost':50068
'localhost':50073
'localhost':50074
'mx.##eoffice.bh':587
'localhost':50079
'localhost':50080
'localhost':50083
'localhost':50085
'localhost':50087
'localhost':50088
'localhost':50095
'localhost':50098
'localhost':50101
'localhost':50102
'localhost':50107
'localhost':50108
'localhost':50111
'localhost':50112
'localhost':50117
'sm##sset.ca':587
'localhost':50118
'localhost':50121
'localhost':50123
'localhost':50126
'localhost':50128
'sm##.me.com':587
'localhost':50132
'localhost':50133
'localhost':50134
'localhost':50136
'localhost':50140
'localhost':50141
'localhost':50142
'localhost':50145
'localhost':50146
'localhost':50149
'localhost':50151
'localhost':50154
'localhost':50155
'localhost':50159
'localhost':50160
'mx#.###ivalserver.com':587
'localhost':50165
'localhost':50166
'localhost':50172
'localhost':50173
'localhost':50177
'localhost':50179
'localhost':50183
'localhost':50186
'localhost':50189
'localhost':50193
'localhost':50194
'localhost':50196
'localhost':50198
'localhost':50200
'localhost':50206
'localhost':50207
'localhost':50208
'localhost':50209
'localhost':50214
'localhost':50215
'localhost':50218
'localhost':50222
'localhost':50223
'localhost':50226
'localhost':50228
'localhost':50229
'sm##.email.cz':587
'localhost':50231
'localhost':50232
'localhost':50233
'localhost':50238
'localhost':50239
'localhost':50242
'localhost':50243
'localhost':50245
'localhost':50248
'localhost':50251
'localhost':50254
'localhost':50257
'localhost':50260
'localhost':50262
'localhost':50265
'localhost':50268
'localhost':50270
'localhost':50269
'localhost':50279
'localhost':50281
'localhost':50290
'localhost':50291
'localhost':50300
'localhost':50302
'localhost':50310
'localhost':50322
'localhost':50327
'localhost':50330
'localhost':50333
'localhost':50334
'localhost':50335
'localhost':50336
'localhost':50341
'localhost':50344
'ma##.#yfsas.com.co':587
'localhost':50346
'localhost':50349
'localhost':50351
'localhost':50352
'localhost':50354
'localhost':50355
'localhost':50356
'localhost':50359
'localhost':50360
'localhost':50361
'localhost':50362
'localhost':50363
'localhost':50365
'localhost':50367
'localhost':50368
'localhost':50369
'localhost':50370
'localhost':50371
'localhost':50373
'localhost':50374
'localhost':50378
'localhost':50381
'localhost':50386
'localhost':50387
'localhost':50384
'localhost':50388
'localhost':50391
'localhost':50398
'localhost':50397
'localhost':50399
'localhost':50395
'localhost':50400
'localhost':50403
'localhost':50402
'localhost':50404
'localhost':50408
'localhost':50413
'localhost':50415
'localhost':50416
'eu#######nbound-1.mimecast.com':587
'localhost':50420
'localhost':50421
'localhost':50428
'localhost':50430
'localhost':50432
'localhost':50436
'localhost':50439
'localhost':50442
'localhost':50443
'localhost':50449
'localhost':50452
'localhost':50455
'localhost':50458
'localhost':50464
'ga##l.com':587
'localhost':50469
'localhost':50468
'localhost':50473
'localhost':50474
'localhost':50478
'localhost':50479
'localhost':50484
'localhost':50485
'localhost':50487
'localhost':50493
'localhost':50497
'localhost':50499
'localhost':50501
'localhost':50502
'localhost':50503
'localhost':50504
'localhost':50509
'localhost':50510
'localhost':50513
'localhost':50514
'localhost':50515
'localhost':50519
'localhost':50520
'localhost':50523
'localhost':50526
'localhost':50527
'localhost':50530
'localhost':50533
'localhost':50534
'localhost':50535
'localhost':50538
'localhost':50541
'localhost':50539
'localhost':50542
'localhost':50544
'localhost':50543
'localhost':50548
'localhost':50545
'localhost':50550
'localhost':50551
'localhost':50555
'localhost':50556
'localhost':50557
'localhost':50562
'localhost':50565
'localhost':50559
'localhost':50570
'localhost':50569
'localhost':50574
'localhost':50575
'localhost':50578
'localhost':50581
'localhost':50583
'localhost':50584
'localhost':50586
'localhost':50588
'localhost':50593
'localhost':50592
'localhost':50595
'localhost':50600
'localhost':50603
've##.com.uy':587
'localhost':50607
'localhost':50609
'localhost':50612
'localhost':50615
'localhost':50618
'localhost':50619
'localhost':50622
'localhost':50625
'localhost':50627
'localhost':50629
'localhost':50632
'localhost':50633
'localhost':50634
'localhost':50637
'sm##.vianet.ca':587
'localhost':50642
'localhost':50644
'localhost':50645
'localhost':50649
'localhost':50650
'localhost':50651
'localhost':50655
'localhost':50659
'localhost':50662
'localhost':50665
'localhost':50669
'localhost':50670
'localhost':50678
'localhost':50679
'localhost':50683
'localhost':50684
'ma##.co.uk':587
'localhost':50686
'localhost':50688
'localhost':50689
'sm##.ziggo.nl':587
'localhost':50692
'localhost':50693
'localhost':50696
'localhost':50702
'localhost':50704
'localhost':50707
'localhost':50708
'localhost':50709
'localhost':50710
'localhost':50713
'localhost':50715
'localhost':50718
'localhost':50721
'localhost':50726
'localhost':50729
'localhost':50731
'localhost':50734
'localhost':50730
'localhost':50735
'localhost':50736
'localhost':50737
'localhost':50738
'localhost':50744
'localhost':50746
'localhost':50750
'localhost':50752
'localhost':50754
'localhost':50756
'localhost':50760
'wn##.net':465
'localhost':50763
'localhost':50764
'localhost':50768
'localhost':50770
'localhost':50775
'localhost':50774
'localhost':50781
'localhost':50782
'localhost':50787
'localhost':50793
'localhost':50797
'localhost':50800
'localhost':50804
'localhost':50807
'localhost':50809
'localhost':50813
'localhost':50815
'localhost':50816
'localhost':50822
'localhost':50829
'localhost':50830
'localhost':50839
'localhost':50840
'localhost':50842
'localhost':50844
'localhost':50850
'localhost':50851
'localhost':50852
'localhost':50854
'localhost':50856
'localhost':50859
'localhost':50863
'localhost':50867
'localhost':50868
'localhost':50869
'localhost':50870
'localhost':50872
'localhost':50874
'localhost':50875
'localhost':50877
'localhost':50878
'localhost':50880
'localhost':50881
'localhost':50882
'localhost':50884
'localhost':50886
'localhost':50889
'localhost':50893
'localhost':50894
'localhost':50895
'localhost':50891
'localhost':50896
'localhost':50901
'localhost':50902
'localhost':50906
'localhost':50909
'localhost':50910
'localhost':50915
'localhost':50916
'localhost':50919
'localhost':50922
'localhost':50920
'localhost':50924
'localhost':50926
'localhost':50927
'localhost':50928
'localhost':50929
'localhost':50931
'localhost':50934
'localhost':50939
'localhost':50944
'localhost':50948
'localhost':50949
'localhost':50954
'localhost':50956
'localhost':50959
'localhost':50960
'localhost':50964
'localhost':50966
'localhost':50968
'localhost':50972
'localhost':50974
'ma###new.ht.hr':587
'localhost':50978
'localhost':50981
'localhost':50985
'localhost':50988
'localhost':50989
'localhost':50993
'localhost':50997
'localhost':50998
'localhost':51001
'localhost':51006
'mx##.##rnetsecurity.com':587
'localhost':51007
'localhost':51010
'localhost':51011
'localhost':51012
'localhost':51020
'localhost':51021
'localhost':51022
'localhost':51024
'localhost':51027
'localhost':51028
'localhost':51030
'localhost':51031
'localhost':51035
'localhost':51034
'localhost':51036
'localhost':51038
'localhost':51042
'localhost':51044
'localhost':51049
'localhost':51050
'localhost':51054
'localhost':51055
'localhost':51056
'localhost':51058
'za########bound-1.mimecast.co.za':587
'localhost':51060
'localhost':51062
'localhost':51064
'localhost':51067
'localhost':51070
'localhost':51072
'localhost':51073
'localhost':51078
'localhost':51080
'localhost':51082
'localhost':51083
'localhost':51085
'localhost':51087
'localhost':51089
'localhost':51090
'ma##.nexgo.de':587
'localhost':51095
'localhost':51098
'localhost':51101
'localhost':51102
'localhost':51105
'localhost':51107
'gw#.###ordnetworks.net':587
'localhost':51111
'localhost':51113
'localhost':51115
'localhost':51117
'localhost':51119
'localhost':51121
'localhost':51123
'localhost':51127
'localhost':51128
'localhost':51130
'localhost':51133
'localhost':51135
'localhost':51138
'mx#.#hosting.cl':587
'localhost':51142
'localhost':51145
'ki#####athashford.co.uk':587
'localhost':51146
'localhost':51149
'localhost':51148
'localhost':51152
'localhost':51153
'localhost':51158
'localhost':51161
'localhost':51160
'sm##.#wissonline.ch':587
'localhost':51164
'localhost':51165
'localhost':51174
'ma##.#appyisp.com':587
'localhost':51185
'localhost':51188
'localhost':51189
'localhost':51193
'localhost':51194
'ma##.planet.nl':587
'localhost':51197
'localhost':51198
'localhost':51204
'localhost':51206
'localhost':51209
'localhost':51215
'localhost':51216
'localhost':51217
'localhost':51219
'localhost':51220
'localhost':51224
'localhost':51227
'localhost':51230
'localhost':51232
'localhost':51233
'localhost':51235
'localhost':51234
'localhost':51236
'localhost':51238
'localhost':51240
'localhost':51243
'localhost':51242
'localhost':51245
'localhost':51244
'localhost':51246
'localhost':51247
'localhost':51248
'localhost':51251
'localhost':51252
'localhost':51257
'localhost':51258
'localhost':51260
'localhost':51262
'localhost':51263
'localhost':51265
'localhost':51268
'localhost':51269
'localhost':51272
'localhost':51275
'localhost':51271
'localhost':51276
'localhost':51279

UDP

DNS ASK tr#######stralcountysystem.info
DNS ASK br###tart.co.uk
DNS ASK mx##.#onos.co.uk
DNS ASK sm##.shaw.ca
DNS ASK se####.metalworkav.it
DNS ASK ou#.##curitygate.me
DNS ASK sm##.##nzlei-oeztop.de
DNS ASK se####smtp.onit.gt
DNS ASK smtp.ekinbozkurt.onmicrosoft.com
DNS ASK ou#.###inistrosmamc.com
DNS ASK se####.103rdcap.com
DNS ASK mx#.###.#ailpod9-cph3.one.com
DNS ASK mx#.###.#ailpod11-cph3.one.com
DNS ASK sm##.hoebe.be
DNS ASK se####.jamesweil.com
DNS ASK se#######p.amzprosolutions.com
DNS ASK se####.ro-bel.com
DNS ASK se####smtp.gekue.de
DNS ASK av####-iosivas.ro
DNS ASK se####.frigotres.com.ar
DNS ASK am#####rstudio.com.br
DNS ASK mi####llstark.com
DNS ASK aspmx.l.google.com
DNS ASK sm##.##tenedesign.com
DNS ASK ma##.#ssmca.pr.gov
DNS ASK sm##.mada.nl
DNS ASK ou#.##rststudio.se
DNS ASK ou#.##albunyan.net
DNS ASK ma##.#wa-gmbh.de
DNS ASK se####.metrabyteone.com
DNS ASK ma##.#pzionib.com
DNS ASK pr###rty.info
DNS ASK al##.####.email.fireeyecloud.com
DNS ASK ma##.hot.ee
DNS ASK se######tp.tloztyres.co.zw
DNS ASK ma##.#999.vip.co.jp
DNS ASK sm##.#chloetti.de
DNS ASK ou#.##ckmasters.com
DNS ASK se######tp.pizzafreaks.com
DNS ASK mx.####-elalmendro.es
DNS ASK se######tp.ent-miramichi.ca
DNS ASK ev####oaching.ca
DNS ASK ma##.#ia-store.de
DNS ASK ou#.#bcyc.ph
DNS ASK mx##.#spgateway.de
DNS ASK ef#######.registrar-servers.com
DNS ASK sm##.#.vodafonenej
DNS ASK se#####mtp.bdhdhd.com
DNS ASK wt##1.de
DNS ASK ma##.#laygirl.co.uk
DNS ASK ou#.POST.SK
DNS ASK sm##.#utomansos.com
DNS ASK ou#.##idpharma.com
DNS ASK lu.##mcom.it
DNS ASK sm##.##qfiltros.com.br
DNS ASK ma##.#oli-sani.org
DNS ASK se####.ms.iswc.ac.cn
DNS ASK alt4.aspmx.l.google.com
DNS ASK se####.mukki.richem.hu
DNS ASK ou#.##csbook.com
DNS ASK se######tp.porschebank.at
DNS ASK ou#.###tagne-tech.fr
DNS ASK alt1.aspmx.l.google.com
DNS ASK ou#.##strade.com
DNS ASK c1###.mx.srv.dfn.de
DNS ASK ou#.##2you.com.br
DNS ASK ou#.###terthomas.com
DNS ASK bo##t.fr
DNS ASK se#####mtp.baleines.ca
DNS ASK se####.#iffestrasse422.de
DNS ASK cr###rte.com.br
DNS ASK sm##.#legg8li.fr
DNS ASK sm##.#isualab.com
DNS ASK se####.papa.com.bo
DNS ASK he##emij.nl
DNS ASK mx#.##stinger.com
DNS ASK mx.####roservice.com
DNS ASK ma##.#yxiqafuv.tk
DNS ASK se####.#rtofchocolat.co.uk
DNS ASK sm##sset.ca
DNS ASK sm##.##traduccion.com
DNS ASK alt2.aspmx.l.google.com
DNS ASK se####.dhayahealth.ca
DNS ASK se#####mtp.casaa.ind.br
DNS ASK sm##.me.com
DNS ASK ma##.####nix-fragrances.co.uk
DNS ASK no#######.#ail.protection.outlook.com
DNS ASK se####.tbi.com.tr
DNS ASK ou#.##rkcho.co.kr
DNS ASK du######msconsulting.co.uk
DNS ASK se#####mtp.high-tv.com
DNS ASK mx.##eoffice.bh
DNS ASK ca##to.com
DNS ASK sm##.##tertowncsd.or
DNS ASK mx#######er18.immenzaces.com
DNS ASK ou#.####le-in-action.co.uk
DNS ASK se######tp.mediaplus.com.tw
DNS ASK sm##.##nacys-pawn.com
DNS ASK se####.vinteks.com.tr
DNS ASK sm##.####ltransportes-es.com.br
DNS ASK se####.ascocompany.com
DNS ASK no##.#ar.navy.mil
DNS ASK sm##.#ietenau.de
DNS ASK sm#####.tld.t-online.de
DNS ASK ou#.###icatwork.co.in
DNS ASK ma##.##apevinemsp.com
DNS ASK sm##.###febagarmun.gov.np
DNS ASK am##or.com
DNS ASK sm##.qqzyt.com
DNS ASK an###########com.mail.protection.outlook.com
DNS ASK se#####mtp.dicomm.com
DNS ASK se######tp.caskandbarrel.ca
DNS ASK ja##a.or.jp
DNS ASK se####.chenbo.wx.js.cn
DNS ASK secure.shavlainez15.onmicrosoft.com
DNS ASK se#####mtp.axell.com
DNS ASK ma##.###let-pc-reviews.com
DNS ASK ma##.####ofthehill.fsnet.co.uk
DNS ASK ou#.dosg.de
DNS ASK ma##.bb19.be
DNS ASK se####.#tyleadvertising.com
DNS ASK sm##.email.cz
DNS ASK sm##.jdatech.ca
DNS ASK sm##.###aleastbourne.org.uk
DNS ASK ma##.#iconfilms.com
DNS ASK sm##.#asports.com
DNS ASK mx.##mply.com
DNS ASK as####.googlemail.com
DNS ASK ir###rrsffaq.fr
DNS ASK sm##.#90green.com
DNS ASK mx#.###ivalserver.com
DNS ASK sm###n.rzone.de
DNS ASK ma##.##alawyers.com.au
DNS ASK ou#.####earianovais.com.br
DNS ASK sm##.elograf.de
DNS ASK se####.BIGEMAIIL.COM
DNS ASK se####.philly.co.uk
DNS ASK gr###ecotech.in
DNS ASK ma##.pratex.it
DNS ASK ou#.####clobresul.com.br
DNS ASK ma##.####ifieldstudents.co.za
DNS ASK ke##lon.com
DNS ASK ta####-deguchi.com
DNS ASK se######tp.rene-hennings.de
DNS ASK ou#.####luegrassrealty.com
DNS ASK pi###dns.org
DNS ASK te###oconsol.it
DNS ASK sm##.ig.com.br
DNS ASK sm##.#rileylane.com
DNS ASK ma##.###inggiraffes.co.uk
DNS ASK ic###group.com
DNS ASK el##mar.cl
DNS ASK el##t.fi
DNS ASK sm##.wazw.com
DNS ASK ma##.#yfsas.com.co
DNS ASK sm##.##cureserver.net
DNS ASK se####.##wusstseiniminntal.de
DNS ASK ou#.###ernesante.com
DNS ASK sm##.#####rabusinesscentres.com.au
DNS ASK sm##.#ronveiga.de
DNS ASK JA##.COM
DNS ASK sm##.alicem.com
DNS ASK sm##.#nikanto.de
DNS ASK sm##.##ardiangrpco.uk
DNS ASK sm##.huy.kmy
DNS ASK mx##.#ymxserver.com
DNS ASK tu###umu.com.br
DNS ASK se######tp.soundcitydj.com
DNS ASK se######tp.stefantietje.de
DNS ASK ma##.#orsaty.com
DNS ASK sm##.####adaovariedades.com.br
DNS ASK se#####mtp.leadninja.ca
DNS ASK ma##.###lmarktitlefl.com
DNS ASK ou#.####inspectioninc.com
DNS ASK ou#.##termec.com.br
DNS ASK ca##ve.net
DNS ASK smtp.google.com
DNS ASK ni###oskiyou.de
DNS ASK 20###urs.com
DNS ASK ma##.saior.es
DNS ASK ma##.#uskmooeul.com
DNS ASK se######tp.qualitech1.com
DNS ASK se####.#anucamisetas.com.br
DNS ASK se####.channel42.hu
DNS ASK sm##.#sjunacka.cz
DNS ASK pu####sveracruz.com
DNS ASK se########.saaeirandubaam.com.br
DNS ASK ma##.#etnet.mt.gov
DNS ASK ma##.#lnation.com
DNS ASK se####.bradyheath.com
DNS ASK sm##.####oscopetrolina.g12.br
DNS ASK mx#.#oho.com
DNS ASK ou#.#kringer.de
DNS ASK se#######p.solarlightsinc.com
DNS ASK in#########p.us-east-1.amazonaws.com
DNS ASK se######tp.watchestilos.com
DNS ASK se######tp.pcs4you.co.uk
DNS ASK gr##########a.mail.protection.outlook.com
DNS ASK se####.nicolas-cadet.fr
DNS ASK sm##.jfjf.it
DNS ASK ou#.##wvdbqi.com
DNS ASK sm##.##rin.k12.ca.us
DNS ASK eu#######nbound-2.mimecast.com
DNS ASK mx#####2.ppe-hosted.com
DNS ASK af############o-uk01i.mail.protection.outlook.com
DNS ASK se####.###pearsonorganization.com
DNS ASK ou#.###egratece.co.za
DNS ASK sm##.#nmkmooepn.com
DNS ASK se#####mtp.mocon.com
DNS ASK ma##.#2active.cz
DNS ASK sk####yspa.com.au
DNS ASK bo###ech.com
DNS ASK ou#.#apl.com.au
DNS ASK ga##l.com
DNS ASK mx##.##il.icloud.com
DNS ASK ma##.gerobi.de
DNS ASK se####.packar.com.br
DNS ASK ar###jaat.com
DNS ASK se####.katano-f.com
DNS ASK ma##.###leburnpest.com.au
DNS ASK sm##.###hpronilambur.com
DNS ASK se########.werkzaakrivierenland.nl
DNS ASK ma##.#hummer.com
DNS ASK ma##.#rokertrey.com
DNS ASK mo####aroandrea.it
DNS ASK ou#.#bprod.com
DNS ASK pr##########com.mail.protection.outlook.com
DNS ASK ro####onobgyn.com
DNS ASK ma##.#akota-pub.com
DNS ASK mx##.ionos.es
DNS ASK de######dohorizontes.com.ar
DNS ASK se#####mtp.pinkmind.net
DNS ASK se######tp.viazovskiy.de
DNS ASK ma##.##anley-garvey.com
DNS ASK ma##.###inorganizasyon.com
DNS ASK tr###awine.com
DNS ASK mx###.#ail-forwarder.io
DNS ASK ve##.com.uy
DNS ASK ou#.####epatitlan.com.mx
DNS ASK se#######p.greatpretenders.ca
DNS ASK sm##.##g-services.co.uk
DNS ASK sm##.luukku.com
DNS ASK sm##.vianet.ca
DNS ASK ne##ares.ca
DNS ASK ma##.###lain-maison.danger
DNS ASK se######tp.scps.k12.l.us
DNS ASK hs##bpb.com
DNS ASK se####.etchrlab.com
DNS ASK ha###ys.com.ca
DNS ASK se####.interpals.ne
DNS ASK ar####plastic.com
DNS ASK se#######p.fairytaleslab.com
DNS ASK pr#####rchitectes.fr
DNS ASK sm##.#ngefem.com.br
DNS ASK sm##.##rishornsby.co.uk
DNS ASK ma##.#osoft.qc.ca
DNS ASK mx#.######d13-cph3.g1i.hostnet.nl
DNS ASK se####.##wanchiropractic.com
DNS ASK mx.#oho.com
DNS ASK an###sild.com
DNS ASK ma##.grdg.com
DNS ASK me####irion.co.uk
DNS ASK ag##ham.ca
DNS ASK fr#####erprise.com.au
DNS ASK se######tp.mail2vienna.com
DNS ASK ma##.#c1riccione.it
DNS ASK ou#.###ionappoint.com
DNS ASK sm##.###ficas-aguilar.com
DNS ASK se####.altnewshindi.com
DNS ASK ou#.##ishindojo.it
DNS ASK ou#.###den-bssp.co.uk
DNS ASK se####.suitecloud.vn
DNS ASK se######tp.randolphnp.com
DNS ASK vo###er.com.br
DNS ASK th###mgroup.com
DNS ASK ny#.ed
DNS ASK mi#.#12.mi.us
DNS ASK ma##.##luationsksa.com
DNS ASK ca#####khomebrew.com
DNS ASK se####.#omeomequunes.com.br
DNS ASK cn##kj.com
DNS ASK ke###web.info
DNS ASK so###chsrl.it
DNS ASK se####.tabseergroup.com
DNS ASK ea#######staurantresource.com
DNS ASK ma##.#hampower.com
DNS ASK de####rsegap.com
DNS ASK ac#.in
DNS ASK se####.ls.ofs.schule
DNS ASK se######tp.cosecurity.net
DNS ASK ou#.###solarsystems.com
DNS ASK mx###.##tispameurope.com
DNS ASK ou#.#vf.com.ca
DNS ASK ma##.paexac.com
DNS ASK vi###ltech.it
DNS ASK se####.syllogia.com
DNS ASK se####smtp.emmer.be
DNS ASK se####.#umapropiedades.cl
DNS ASK ma#l.uk
DNS ASK ma##.##mune.melzo.mi.it
DNS ASK sm##.ziggo.nl
DNS ASK he##########-de.mail.protection.outlook.com
DNS ASK se#####mtp.lunasys.fr
DNS ASK wn##.net
DNS ASK se####.aycevre.com
DNS ASK ou#.#ushed.com
DNS ASK fa##.com.cn
DNS ASK se####.gemil.co.nz
DNS ASK se####.##leshoppingservice.de
DNS ASK se####.men.wheets.com
DNS ASK ma##.hkh.fr
DNS ASK d9#####.##s.barracudanetworks.com
DNS ASK ma###omedia.dk
DNS ASK mx#.ovh.net
DNS ASK se######tp.codarchi.co.za
DNS ASK ne####tworks.com
DNS ASK ch####pencer.net
DNS ASK ma##.#ruteam.com
DNS ASK ab#######thprofessionals.co.uk
DNS ASK en####drilling.com
DNS ASK mx#.#hosting.cl
DNS ASK se#######p.tgn.em-alliance.com
DNS ASK ou#.#uijia.tw
DNS ASK sc######-tour-guide.co.uk
DNS ASK xd#d.pl
DNS ASK se#####mtp.nsrmarine.co
DNS ASK ma##.##ghtsquared.co.uk
DNS ASK wi###dcafe.ca
DNS ASK ou#.##tclubspot.com
DNS ASK se####.eusyliving.com
DNS ASK ch####rhousefg.ca
DNS ASK sm##.#seffect.com
DNS ASK sm##.###ra-travellers.be
DNS ASK pp#######.#ail.protection.outlook.com
DNS ASK st###ware.co
DNS ASK se######tp.beonsystems.com
DNS ASK ou#.#ttube.eu
DNS ASK ou#.###ne-finance.co.uk
DNS ASK ma##.cfc.com.vn
DNS ASK se#######p.youngor-sunrise.com
DNS ASK sl###group.nl
DNS ASK sm##.#atar.net.qa
DNS ASK ma##.###-de-dome.gouv.fr
DNS ASK ou#.##johnsson.se
DNS ASK ma##.##firstlocals.com
DNS ASK mx.####.locaweb.com.br
DNS ASK tt.net
DNS ASK ma##.#asco.ltd.uk
DNS ASK ou#.##sprogroup.com
DNS ASK ou#.###exenterprises.ca
DNS ASK li#####n-redcross.org
DNS ASK ou#.#pe.com.mx
DNS ASK se######tp.mywbsite.com.au
DNS ASK se####.reenberg.dk
DNS ASK se####.lspastudents.com
DNS ASK ou#.#gms.com
DNS ASK se#######p.playingjade.co.uk
DNS ASK se####.##gnoliaflorist.co.uk
DNS ASK se####.lendo.co.in
DNS ASK th###ath.co.uk
DNS ASK se###e.sdwfh.fr
DNS ASK sm##.##ststream.intern
DNS ASK ou#.##fsboston.org
DNS ASK fu####.force9.co.uk
DNS ASK se####.pauegrande.com
DNS ASK co##dia.com
DNS ASK cy####etrenan.net
DNS ASK to##emp.no
DNS ASK mx##.#topspam.ca
DNS ASK se####.alksnis.net
DNS ASK fr####elaundry.com
DNS ASK ou#.#azng.com
DNS ASK pu##mart.ph
DNS ASK ka###ia.co.uk
DNS ASK ou#.####sonsthetford.ltd.uk
DNS ASK secure.w3861.onmicrosoft.com
DNS ASK gm####amechi7.com
DNS ASK sm##.#oomcat.net
DNS ASK sm##.#drv.bwl.de
DNS ASK ma####r.fsnet.co.uk
DNS ASK se###e.rdwd.ca
DNS ASK se#####mtp.parhelie.be
DNS ASK sm##.#ail.sips.fr
DNS ASK ma###new.ht.hr
DNS ASK se########.amcecontrolesdeflama.com.mx
DNS ASK mx#.##lecable.es
DNS ASK mx#.###vateemail.com
DNS ASK ma##.###chester.demon.co.uk
DNS ASK ou#.####gamamonteiro.com.br
DNS ASK smtp.urgh.onmicrosoft.com
DNS ASK ir#####edusa-kopp.de
DNS ASK ma##.#olongroup.com
DNS ASK se####.bandmt.com.br
DNS ASK ou#.###amcapitol.com
DNS ASK al####emails.com
DNS ASK sm##.#ybergrimm.de
DNS ASK se####.HEAR.COM.BR
DNS ASK la####eadstock.com
DNS ASK sm##.###.saiseikai.or.jp
DNS ASK se####.todo1.com
DNS ASK na####laudio.com
DNS ASK ou#.#r.re.ty
DNS ASK se######tp.facade-expert.fr
DNS ASK se####.#otel.italiaabcit
DNS ASK za########bound-1.mimecast.co.za
DNS ASK ou#.###spitality.co.za
DNS ASK mx#.###.#ailpod14-cph3.one.com
DNS ASK di###narco.com
DNS ASK sm##.#heogutmann.ch
DNS ASK alt3.aspmx.l.google.com
DNS ASK se####.tachovska.cz
DNS ASK se########.pinheirosampaio.com.br
DNS ASK sm##.###ocomunicacion.es
DNS ASK sm##.#ramley.com
DNS ASK ro####.#x.cloudflare.net
DNS ASK mx#.###tinger.com.br
DNS ASK ux###esign.com
DNS ASK se#######p.vipelectrical.com.au
DNS ASK sm##.#odafone.de
DNS ASK ma##.#ataddor.sk
DNS ASK mx##.######am.mailspamprotection.com
DNS ASK ou#.##veguru.com
DNS ASK ou#.#iugini.org
DNS ASK mx##.ionos.de
DNS ASK ma##.najjzo.com
DNS ASK ou#.##datapub.com
DNS ASK gw#.#over.net
DNS ASK sm##.##caservizi.com
DNS ASK sm##.###ciacorretora.com.br
DNS ASK se########.homelandhealthcare.com.ca
DNS ASK se####.hothanh.info
DNS ASK ma##.###del-eilenburg.de
DNS ASK ou#.#sn.com.tr
DNS ASK sm##.##wcalaviation.com
DNS ASK ma##.###lcentresales.co.uk
DNS ASK ma##.###t-der-amulette.de
DNS ASK ou#.##ubon.co.uk
DNS ASK vc##mz.com
DNS ASK gm####2.gadmail.de
DNS ASK mail.yqpzm.onmicrosoft.com
DNS ASK ou#.###inmaryland.info
DNS ASK sm##.###nic-gifr-shop.co.uk
DNS ASK ma##.##myelearning.ca
DNS ASK sm##.#slebqnb.co
DNS ASK ce####nagement.com
DNS ASK ou#.##um.mit.com
DNS ASK ki#####athashford.co.uk
DNS ASK ou#.#####id.schule.bremen.de
DNS ASK se####.aaronleggett.com
DNS ASK se####.##ramicassanmarino.ca
DNS ASK an###yweb.net
DNS ASK ou#.#emacsrl.it
DNS ASK ma##.#etajpress.com
DNS ASK ou#.####-louis-amiotte.fr
DNS ASK sm##.gmjl.com
DNS ASK sm##.#wissonline.ch
DNS ASK se####.8upkustoms.com
DNS ASK ma##.#atar.net.qa
DNS ASK ma##.#appyisp.com
DNS ASK au####sil.org.br
DNS ASK de##orp.jp
DNS ASK ou#.###pstilladser.dk
DNS ASK ma##.planet.nl
DNS ASK se####.#ammikelatham.com
DNS ASK st###ardaaro.ca
DNS ASK sm##.pandora.be
DNS ASK ou#.###endshipauto.com
DNS ASK co#.xom
DNS ASK ou#.##arnmall.in
DNS ASK co###ba.com.br
DNS ASK in###asece.com
DNS ASK uh###d.co.jp
DNS ASK se####.#avidcraig-online.co
DNS ASK sm##.datajob.it
DNS ASK ou#.#00I.TEAM
DNS ASK ma##.#somortani.ro
DNS ASK ma##.co.uk
DNS ASK ma##.nuamx.com
DNS ASK ma##.s##top.fr
DNS ASK se#######p.huracanlacosta.com
DNS ASK so###phere.ca
DNS ASK ma####in-hennen.de
DNS ASK sm##.#tknet.ne.jp
DNS ASK zs##lce.pl
DNS ASK ou#.###iecreative.co.uk
DNS ASK pc##drid.es
DNS ASK se#####mtp.hanma.ilet
DNS ASK mx##.###ud.vadesecure.com
DNS ASK sm##.kabelbw.de
DNS ASK se######tp.flexprint.ind.br
DNS ASK ma##.##alpadizet.com
DNS ASK ou#.##dat.com.br
DNS ASK ma##.#studio-4.com
DNS ASK sm##.##ntochiavi.net
DNS ASK si####dstrig.com
DNS ASK tr##inc.ca
DNS ASK ma##.iaai.com
DNS ASK sm##.##elbuspf.com.br
DNS ASK ou#.#g.tools
DNS ASK bb#.cm
DNS ASK se####.##zerfamilyvineyard.com
DNS ASK bo######toassociados.com.br
DNS ASK bp##law.com
DNS ASK sm##.chl.me.uk
DNS ASK se####.edu.utp.pe
DNS ASK se####.tezzo.com.br
DNS ASK cr##.co.in
DNS ASK to###od.co.uk

Другое

Перезапускает анализируемый образец

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /C "WMIC BIOS GET SERIALNUMBER" (со скрытым окном)
'<SYSTEM32>\wbem\wmic.exe' BIOS GET SERIALNUMBER
'<SYSTEM32>\cmd.exe' /C "WMIC DISKDRIVE GET SERIALNUMBER" (со скрытым окном)
'<SYSTEM32>\wbem\wmic.exe' DISKDRIVE GET SERIALNUMBER
'<SYSTEM32>\cmd.exe' /C "WMIC CPU GET ProcessorID" (со скрытым окном)
'<SYSTEM32>\wbem\wmic.exe' CPU GET ProcessorID
'<Полный путь к файлу>' 2d23f61752ff906a23725dc01efde3820514c0b660d8487cd9e186c2e00ba0220f2100078990aa82e6ded1a663a1a701aefeccbc873fe5cf19457911cae42321177554e33bc7a2406e64c9d58ad6469d04a219915345add7caa113f943eb6dd92... (со скрытым окном)

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Техническая информация

Curing recommendations

Free trial