Техническая информация
- %WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe
- %TEMP%\protect544cd51a.dll
- 'pa#####klematurei.pw':80
- http://pa#####klematurei.pw/api
- DNS ASK pa#####klematurei.pw
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe'