Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-service-management-l1-1-0] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-service-management-l1-1-0] 'ImagePath' = '"%WINDIR%\SysWOW64\api-ms-win-service-management-l1-1-0\api-ms-win-service-management-l1-1-0.exe"'
- из <Полный путь к файлу> в %WINDIR%\syswow64\api-ms-win-service-management-l1-1-0\api-ms-win-service-management-l1-1-0.exe
- '73.##8.254.236':80
- http://73.##8.254.236/akzmYj7nW6lr1uaV/zjuXAD0ujT8/3P6G30QRTFzsKRtzQ/lHA4y0p/Kg9rXPwtQpB3yuOuM/