Техническая информация
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\rwinsta\MusNotification.exe
- %APPDATA%\remcos\logs.dat
- 'ta#######lga1974.myq-see.com':7100
- DNS ASK ta#######lga1974.myq-see.com
- '<SYSTEM32>\schtasks.exe' /create /tn dmclient /tr "%HOMEPATH%\rwinsta\MusNotification.exe" /sc minute /mo 1 /F
- '<SYSTEM32>\svchost.exe'