Техническая информация
- '%WINDIR%\syswow64\taskkill.exe' /f /im Pretenses.exe
- %TEMP%\nso701.tmp\nsexec.dll
- %TEMP%\prisons\runtimes\win-arm64\native\webview2loader.dll
- %TEMP%\prisons\runtimes\win-x64\native\webview2loader.dll
- %TEMP%\prisons\runtimes\win-x86\native\webview2loader.dll
- %TEMP%\prisons\microsoft.web.webview2.winforms.dll
- %TEMP%\prisons\microsoft.web.webview2.wpf.dll
- %TEMP%\prisons\microsoft.web.webview2.core.dll
- %TEMP%\prisons\pretenses.exe.config
- %TEMP%\prisons\pretenses.exe
- %TEMP%\nso701.tmp\nsexec.dll
- ClassName: '' WindowName: ''
- '%TEMP%\prisons\pretenses.exe' ""
- '%WINDIR%\syswow64\taskkill.exe' /f /im Pretenses.exe (со скрытым окном)