Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '968B6FC852BC3625698399' = '%APPDATA%\968B6FC852BC3625698399\968B6FC852BC3625698399.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- %TEMP%\968b6fc852bc3625698399
- %APPDATA%\968b6fc852bc3625698399\968b6fc852bc3625698399.exe
- 'localhost':80
- '%APPDATA%\968b6fc852bc3625698399\968b6fc852bc3625698399.exe'