Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinTimeService] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinTimeService] 'ImagePath' = '%WINDIR%\WinTimeService.exe'
- %WINDIR%\WinTimeService.exe
- '37.##5.56.180':9001
- '17#.#9.62.159':9001
- '62.##3.216.177':443
- '46.##3.218.199':9001
- 'xm####.dwarfpool.com':8005
- '46.##1.142.174':9001
- '16#.#72.185.132':443
- '88.##0.73.100':443
- '20#.#3.223.34':80
- DNS ASK xm####.dwarfpool.com
- '%WINDIR%\WinTimeService.exe'