Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Windows Explorer 64-Bit' = '%APPDATA%\explorer64.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Windows Explorer 64-Bit' = '%APPDATA%\explorer64.exe'
- %APPDATA%\explorer64.exe
- %APPDATA%\explorer64.exe
- DNS ASK ma####ocentrs.lv
- ClassName: 'ConsoleWindowClass' WindowName: ''