Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0145857C-D7D4-26C9-0703-040801060007}] 'StubPath' = '<SYSTEM32>\test.exe'
- '<SYSTEM32>\test.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\test.exe
- <SYSTEM32>\Document.rtf
- '21#.#8.159.228':3460
- ClassName: 'WordPadClass' WindowName: '(null)'