Technical Information
- Windows Defender
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{5EAAE535-4022-49E0-A763-B4896AD89758}Machine\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions] 'exe' = ...
- [<HKLM>\Software\Policies\Microsoft\Windows Defender\Exclusions\Extensions] 'exe' = ''
- %WINDIR%\syswow64\grouppolicy\gpt.ini
- %ALLUSERSPROFILE%\ntuser.pol
- '94.##2.138.113':80
- '20#.#7.104.60':80
- DNS ASK ip##fo.io
- DNS ASK db##p.com
- DNS ASK ma##ind.com
- '<SYSTEM32>\raserver.exe' /offerraupdate