Техническая информация
- [HKLM\SYSTEM\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '%TEMP%\WinRing0x64.sys'
- 'WinRing0_1_2_0' %TEMP%\WinRing0x64.sys
- %TEMP%\pld33cd.tmp
- 'po##.#upportxmr.com':443
- 'po##.#upportxmr.com':443
- DNS ASK po##.#upportxmr.com
- '%TEMP%\pld33cd.tmp'