Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{MC1W2WM2-BV1L-5KUW-MQ72-C92GKIPQWDNN}' = '"%APPDATA%\x86_microsoft-windows-photo-printing-wizard_31bf3856ad364e35_10.0.17134.1_none_de4a...
- %APPDATA%\x86_microsoft-windows-photo-printing-wizard_31bf3856ad364e35_10.0.17134.1_none_de4ac11f8ddec198\msidntld.exe
- <Полный путь к файлу> в %APPDATA%\x86_microsoft-windows-photo-printing-wizard_31bf3856ad364e35_10.0.17134.1_none_de4ac11f8ddec198\msidntld.exe
- 'ip###ger.org':443
- DNS ASK ip###ger.org
- '%APPDATA%\x86_microsoft-windows-photo-printing-wizard_31bf3856ad364e35_10.0.17134.1_none_de4ac11f8ddec198\msidntld.exe'