Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Update Service' = '"%APPDATA%\efe4aa15\lsass.exe"'
- '%APPDATA%\efe4aa15\lsass.exe'
- '<SYSTEM32>\ping.exe' -n 5 -w 1000 127.0.0.1
- %APPDATA%\efe4aa15\lsass.exe
- %APPDATA%\efe4aa15\lsass.exe
- ClassName: 'Indicator' WindowName: '(null)'