Техническая информация
- '%TEMP%\z.exe'
- '%APPDATA%\z.exe'
- '<SYSTEM32>\wscript.exe' "%TEMP%\wslysY4Q.vbs"
- %APPDATA%\z.exe
- %TEMP%\wslysY4Q.vbs
- %HOMEPATH%\My Documents\heuheu.bat
- %TEMP%\z.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Windows Task Manager'