Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\winword.exe
- '%ProgramFiles%\microsoft office\office14\winword.exe'
- winword.exe
- 'pr########dr-64.breakandpray.com':8443
- 'pr########dr-64.breakandpray.com':8443
- DNS ASK pr########dr-64.breakandpray.com