Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '%TEMP%\WinRing0x64.sys'
- 'WinRing0_1_2_0' %TEMP%\WinRing0x64.sys
- %TEMP%\7z.dll
- %TEMP%\com_blizzard_diablo_immortal_background.png
- %WINDIR%\temp\uddb436.tmp
- %WINDIR%\temp\uddac49.tmp
- %WINDIR%\temp\udda46c.tmp
- %WINDIR%\temp\udd9c8e.tmp
- %WINDIR%\temp\udd94b1.tmp
- %WINDIR%\temp\udd8352.tmp
- %TEMP%\nemu-downloader-nine.log
- %TEMP%\aria2c.exe
- %TEMP%\skin.zip
- %TEMP%\winring0.cat
- %TEMP%\winring0x64.cat
- %TEMP%\winring0.inf
- %TEMP%\winring0x64.inf
- %TEMP%\winring0.sys
- %TEMP%\winring0x64.sys
- %TEMP%\config.ini
- %TEMP%\crashrpt_lang.ini
- %TEMP%\crashrpt1403.dll
- %TEMP%\crashrptprobe1403.dll
- %TEMP%\crashsender1403.exe
- %TEMP%\msvcp140.dll
- %TEMP%\7z.exe
- %TEMP%\com_blizzard_diablo_immortal.png
- %TEMP%\com_blizzard_diablo_immortal_logo.png
- %WINDIR%\temp\udd8352.tmp
- %WINDIR%\temp\udd94b1.tmp
- %WINDIR%\temp\udd9c8e.tmp
- %WINDIR%\temp\udda46c.tmp
- %WINDIR%\temp\uddac49.tmp
- %WINDIR%\temp\uddb436.tmp
- 'ap#.##muglobal.com':443
- 'x.##2.us':80
- 'microsoft.com':80
- 'mu#######al.fp.ps.easebar.com':80
- http://x.##2.us/x.cer
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://mu#######al.fp.ps.easebar.com/file/629826fd70d9a954fb99416cdiUqouvr02
- http://mu#######al.fp.ps.easebar.com/file/629826f9d448e3235dc7fdefPwT1PYIR02
- 'ap#.##muglobal.com':443
- DNS ASK ap#.##muglobal.com
- DNS ASK x.##2.us
- DNS ASK microsoft.com
- DNS ASK mu#######al.fp.ps.easebar.com