Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\WrpprSrv] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\WrpprSrv] 'ImagePath' = '<SYSTEM32>\WrpprSrv.exe'
- %WINDIR%\temp\cnxt_wrapper\wrapper.ini
- %WINDIR%\temp\cnxt_wrapper\new bitmap image.png
- %WINDIR%\temp\cnxt_wrapper\kingston-flights--6.43.19.17.sfs
- %WINDIR%\temp\cnxt_wrapper\info.txt
- %WINDIR%\temp\cnxt_wrapper\hyperx.ico
- %WINDIR%\temp\cnxt_wrapper\devicefirmwareupgrade.exe
- %WINDIR%\temp\cnxt_wrapper\buildit.bat
- <SYSTEM32>\wrpprsrv.exe
- '<SYSTEM32>\wrpprsrv.exe' -install
- '<SYSTEM32>\wrpprsrv.exe'
- '%WINDIR%\temp\cnxt_wrapper\devicefirmwareupgrade.exe' /cmd="%WINDIR%\TEMP\CNXT_WRAPPER\INFO.TXT"
- '<SYSTEM32>\wrpprsrv.exe' -install' (со скрытым окном)
- '<SYSTEM32>\net.exe' start WrpprSrv' (со скрытым окном)
- '<SYSTEM32>\net.exe' start WrpprSrv
- '<SYSTEM32>\net1.exe' start WrpprSrv