Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'WinRAR' = '%TEMP%\subfolder1\filename1.vbs'
- filename1.exe
- %TEMP%\subfolder1\filename1.exe
- %TEMP%\subfolder1\filename1.vbs
- '34.##9.100.209':443
- '%TEMP%\subfolder1\filename1.exe'