Техническая информация
- '<SYSTEM32>\wscript.exe' "C:\badsamples\testfile.vbs"
- '<SYSTEM32>\cmd.exe' /c start /wait c:\badsamples\testfile.vbs
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1488
- C:\badsamples\testfile.vbs
- C:\badsamples\matchcrips.dll
- %TEMP%\1262984.cvr