Техническая информация
- '%WINDIR%\syswow64\reg.exe' EXPORT HKCU\Software\Microsoft\Office\16.0\Excel\Security C:\Users\Public\nVyJgG.reg /y
- <SYSTEM32>\csrss.exe
- iexplore.exe
- C:\users\public\wr58xy.dat
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- '<SYSTEM32>\devicecensus.exe' UserCxt