Лог антистиллера

[Hr0ma]

Ребят, ответьте пожалуйста тут все ок?

[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[PATCHED] > [ZwOpenProcess] > [C:\WINDOWS\System32\KERNELBASE.dll] > {DesiredAccess: 4096}
[WARNING] > [InternetOpenA] > [C:\Users\mcrom\Desktop\a\crashes.asi] > {lpszAgent: Mozilla/5.0}
[WARNING] > [InternetOpenUrlA] > [C:\Users\mcrom\Desktop\a\crashes.asi] > {lpszUrl: https://raw.githubusercontent.com/Whitetigerswt/gtasa_crashfix/master/LatestVersion.txt | lpszHeaders: -}
[PATCHED] > [ZwQueueApcThread] > [C:\WINDOWS\System32\sechost.dll]
[WARNING] > [getaddrinfo] > [C:\Users\mcrom\Desktop\a\moonloader\lib\socket\core.dll] > {pNodeName: maksq.ru}
[WARNING] > [GetAddrInfoW] > [C:\WINDOWS\System32\WS2_32.dll] > {pNodeName: maksq.ru}
[WARNING] > [URLDownloadToFileA] > [C:\Users\mcrom\Desktop\a\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\mcrom\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\mcrom\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [getaddrinfo] > [C:\Users\mcrom\Desktop\a\moonloader\lib\socket\core.dll] > {pNodeName: maksq.ru}
[WARNING] > [GetAddrInfoW] > [C:\WINDOWS\System32\WS2_32.dll] > {pNodeName: maksq.ru}
[WARNING] > [InternetOpenW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; LCTE)}
[WARNING] > [InternetOpenA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; LCTE)}
[WARNING] > [InternetConnectW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [getaddrinfo] > [C:\Users\mcrom\Desktop\a\moonloader\lib\socket\core.dll] > {pNodeName: maksq.ru}
[WARNING] > [GetAddrInfoW] > [C:\WINDOWS\System32\WS2_32.dll] > {pNodeName: maksq.ru}
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dllC:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }] > {buf: }

[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dllC:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: ] > {buf: }}

[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll[WARNING] > [send] > [] > {buf: C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll}] > {buf: }

[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Users\mcrom\Desktop\a\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [URLDownloadToFileA] > [C:\Users\mcrom\Desktop\a\MoonLoader.asi] > {szURL: https://maksq.ru/uf/dev-PRyCe7m.json | szFileName: C:\Users\mcrom\AppData\Local\Temp\dev_.json}
[WARNING] > [URLDownloadToFileW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {szURL: https://maksq.ru/uf/dev-PRyCe7m.json | szFileName: C:\Users\mcrom\AppData\Local\Temp\dev_.json}
[WARNING] > [InternetConnectW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {lpszServerName: maksq.ru | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [[PATCHED] > [getaddrinfo] > [C:\WINDOWS\SYSTEM32\WININET.DLLC:\Users\mcrom\Desktop\a\moonloader\lib\socket\core.dll] > {lpszServerName: maksq.ru | lpszUserName: ] > {pNodeName: - | lpszPassword: -f0492734.xsph.ru}}

[WARNING] > [HttpOpenRequestW] > [C:\WINDOWS\SYSTEM32\URLMON.DLL] > {lpszObjectName: /uf/dev-PRyCe7m.json}
[WARNING] > [gethostbyname] > [C:\Users\mcrom\Desktop\a\samp.dll] > {name: LAPTOP-804JT0Q6}
[PATCHED] > [getaddrinfo] > [C:\Users\mcrom\Desktop\a\moonloader\lib\socket\core.dll] > {pNodeName: b96842e2.beget.tech}

 

[NES]

norm

 

[Hr0ma]

а ну значит стиллеров нет

ну два я купил, это рванка за 50 рублей и у maksq тож за 50 рублей ультрафак

 

[kin4stat]

Лог чистый, только запросы к серверам авторизации и автообновления