Техническая информация
- [<HKCU>\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN] 'updating' = '<Текущая директория>\WindowsUpdate.msi /quiet'
- %WINDIR%\explorer.exe
- %ProgramFiles%\UNP\Logs\UpdateNotificationPipeline.001.etl
- DNS ASK go.microsoft.com
- DNS ASK share.microsoft.com
- DNS ASK settings-win.data.microsoft.com
- DNS ASK maps.windows.com
- DNS ASK dl.delivery.mp.microsoft.com
- DNS ASK ar#.msn.com
- DNS ASK im##########-rt-microsoft-com.akamaized.net
- ClassName: 'MS_WINHELP' WindowName: ''
- '%WINDIR%\syswow64\dxdiag.exe' ' (со скрытым окном)
- '<SYSTEM32>\devicecensus.exe' UserCxt
- '%WINDIR%\syswow64\dxdiag.exe'
- '<SYSTEM32>\svchost.exe' -k netsvcs -p