Техническая информация
- '%TEMP%\9738.exe'
- '%TEMP%\4127.exe'
- '<SYSTEM32>\systeminfo.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\9738.exe
- %TEMP%\bm3.tmp
- %TEMP%\nsv2.tmp
- %TEMP%\4127.exe
- %TEMP%\4127.exe
- ClassName: 'IKMON_RSNA_INVALID_SUSPEN_EXOEEDED_LIMITTED' WindowName: 'PROCESS_DET'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'