Техническая информация
- '%WINDIR%\syswow64\reg.exe' EXPORT HKCU\Software\Microsoft\Office\16.0\Excel\Security C:\Users\Public\Ie7.reg /y
- C:\users\public\g2vm2s.dat
- %ProgramFiles%\unp\logs\updatenotificationpipeline.001.etl в %ProgramFiles%\unp\logs\updatenotificationpipeline.002.etl
- %ProgramFiles%\UNP\Logs\UpdateNotificationPipeline.001.etl
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- '<SYSTEM32>\devicecensus.exe'
- '%ProgramFiles(x86)%\microsoft office\office16\excel.exe' /dde
- '<SYSTEM32>\apphostregistrationverifier.exe'
- '<SYSTEM32>\devicecensus.exe' UserCxt