Техническая информация
- '%TEMP%\6427.exe'
- '%TEMP%\6308.exe'
- '<SYSTEM32>\systeminfo.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\6427.exe
- %TEMP%\bm3.tmp
- %TEMP%\nsk2.tmp
- %TEMP%\6308.exe
- %TEMP%\6308.exe
- ClassName: 'IKMON_RSNA_INVALID_SUSPEN_EXOEEDED_LIMITTED' WindowName: 'PROCESS_DET'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'