Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{9988G342-I558-QV29-T95K-57TKB3IXOG4K}] 'StubPath' = '%WINDIR%\methoer.exe'
- %WINDIR%\methoer.exe
- 'ca##.#tsofta.com':80
- 'ca##.#tsofta.com':443
- DNS ASK ca##.#tsofta.com