Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows' = 'C:\Users\%USERNAME%\Appdata\Roaming\Mahmud.exe'
- <SYSTEM32>\cmd.exe
- C:\Users\%USERNAME%\Appdata\Roaming\Mahmud.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'