Техническая информация
- [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = ''
- %APPDATA%\runtimebroker.exe
- '<LOCALNET>.190.1':5173
- DNS ASK mo#####.map.fastly.net
- '%APPDATA%\runtimebroker.exe'
- '<SYSTEM32>\reg.exe' add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v load /d "