Техническая информация
- [HKLM\SYSTEM\CurrentControlSet\Services\Themes] 'Start' = '00000002'
- %TEMP%\content\3920-2344-<Имя файла>.exe-01-08-41-008.dump
- %WINDIR%\temp\content\2672-2844-svchost.exe-01-08-41-030.dump
- DNS ASK ra#.####ubusercontent.com
- DNS ASK cd####uestacks.org
- DNS ASK po####.###rosoftportal.workers.dev