Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Windows Services' = '%APPDATA%\Windows Update Folder\Windows Update.exe'
- windows updater.exe
- %HOMEPATH%\documents\private fortnite.exe
- %APPDATA%\windows update folder\windows update.exe
- %APPDATA%\subdir\windows updater.exe
- %HOMEPATH%\documents\private fortnite.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK cd#.##scordapp.com
- DNS ASK microsoft.com
- DNS ASK 2.###.ngrok.io
- '%HOMEPATH%\documents\private fortnite.exe'
- '%APPDATA%\subdir\windows updater.exe'