Техническая информация
- %TEMP%\nsncd2e.exe
- %TEMP%\nsncd2e.exe.config
- 'ap#.##zymount.com':80
- http://ap#.##zymount.com/v1/install/0
- http://ap#.##zymount.com/v1/geoloc
- http://ap#.##zymount.com/v1/event/0
- DNS ASK ap#.##zymount.com
- DNS ASK 19#.###.211.95.in-addr.arpa
- DNS ASK ho#####by.leaseweb.com
- DNS ASK 1.##.#.10.in-addr.arpa
- '%TEMP%\nsncd2e.exe'