Техническая информация
- d5866ddf-ce8f-4aea-b28e-d96485a20d3d
- e4a6b256-3e47-40fc-89d2-7a477edd6915
- 24357373-078f-44ed-9ac4-6d334a668a11
- c4829330c9ba2d66bc17b72d0dbfab93f71ed704921e245f54a93059375ad0ea
- cbf93e5d-ca6c-4722-8bea-e9119007c248
- [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%APPDATA%\runtimebroker.exe'
- %APPDATA%\runtimebroker.exe
- '%APPDATA%\runtimebroker.exe'
- '<SYSTEM32>\reg.exe' add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v load /d "%APPDATA%\runtimebroker.exe" /f