Техническая информация
- <SYSTEM32>\tasks\m-7-5-41-1337768767-1186134089-1344383237-9738\{souuiarq-rge-wzho-iowo-8gvusdg9bbo}
- из <Полный путь к файлу> в %PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216\mosstorage.exe
- '%WINDIR%\syswow64\cmd.exe' /c icacls "%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216" /inheritance:e /deny "*S-1-1-0:(R,REA,RA,RD)" & icacls "%PROGRAMDATA%\amd64_ne...' (со скрытым окном)
- '%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216\mosstorage.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c icacls "%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216" /inheritance:e /deny "*S-1-1-0:(R,REA,RA,RD)" & icacls "%PROGRAMDATA%\amd64_ne...
- '%WINDIR%\syswow64\icacls.exe' "%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216" /inheritance:e /deny "*S-1-1-0:(R,REA,RA,RD)"
- '%WINDIR%\syswow64\icacls.exe' "%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216" /inheritance:e /deny "*S-1-5-7:(R,REA,RA,RD)"
- '<SYSTEM32>\taskeng.exe' {578553A4-DA34-4595-B085-123875B4437A} S-1-5-21-1960123792-2022915161-3775307078-1001:thhgrs\user:Interactive:[1]
- '%WINDIR%\syswow64\icacls.exe' "%PROGRAMDATA%\amd64_netfx4-system.speech.resources_b03f5f7f11d50a3a_4.0.15788.0_ru-ru_ef451d23ee04b216" /inheritance:e /deny "user:(R,REA,RA,RD)"