Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Corporation.exe' = '"%APPDATA%\Microsoft Corporation.exe"'
- '%APPDATA%\Microsoft Corporation.exe'
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 3
- %APPDATA%\Microsoft Corporation.exe
- %APPDATA%\Microsoft Corporation.exe
- 'se######3456.duckdns.org':1194
- DNS ASK se######3456.duckdns.org
- ClassName: 'Indicator' WindowName: ''