Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{8C737402-B7B8-B2B5-ABD9-A6E1A9E72FD5}] 'stubpath' = '<SYSTEM32>\bifrost\explore.exe s'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\bifrost\explore.exe
- %APPDATA%\addon.dat
- %APPDATA%\addon.dat
- <SYSTEM32>\bifrost\explore.exe
- 'in####357.zapto.org':81
- DNS ASK in####357.zapto.org