Техническая информация
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinUpdateSvc' = '%TEMP%\WindowsCore.exe'
- %TEMP%\windowscore.exe
- %ALLUSERSPROFILE%\displaysessioncontainers.log
- '14.##8.63.99':6666
- '14.##8.63.99':6666
- '%TEMP%\windowscore.exe'