Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-core-handle-l1-1-0] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-core-handle-l1-1-0] 'ImagePath' = '"%WINDIR%\SysWOW64\api-ms-win-core-handle-l1-1-0\api-ms-win-core-handle-l1-1-0.exe"'
- из <Полный путь к файлу> в %WINDIR%\syswow64\api-ms-win-core-handle-l1-1-0\api-ms-win-core-handle-l1-1-0.exe
- '17#.#02.106.124':80
- '18#.#35.109.128':443
- http://18#.##5.109.128:443/gx1DzjBqE/DQnS2m04if/yCfhircUGiXmpxIBJv/8GXd1oYk5ufuVOT/ via 18#.#35.109.128