Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-core-rtlsupport-l1-1-0] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\api-ms-win-core-rtlsupport-l1-1-0] 'ImagePath' = '"%WINDIR%\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0\api-ms-win-core-rtlsupport-l1-1-0.exe"'
- из <Полный путь к файлу> в %WINDIR%\syswow64\api-ms-win-core-rtlsupport-l1-1-0\api-ms-win-core-rtlsupport-l1-1-0.exe
- '72.##1.228.196':80
- http://72.##1.228.196/Teubx/AFPxWa3JvTG5wtx0Gn/jqN8D/LV30FinjQgvu/I6GAc5xWDXOM/xoVdkLL/