Техническая информация
- [HKLM\software\Wow6432Node\microsoft\windows nt\currentversion\winlogon] 'userinit' = 'userinit.exe,<SYSTEM32>\ntos.exe,'
- %WINDIR%\syswow64\ntos.exe
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net