Техническая информация
- <SYSTEM32>\PassView.exe
- <SYSTEM32>\wscript.exe "%TEMP%\delay.vbs"
- <SYSTEM32>\cmd.exe /c %WINDIR%\cmd.bat
- %TEMP%\delay.vbs
- %WINDIR%\cmd.bat
- <SYSTEM32>\PassView.exe
- <SYSTEM32>\PassView.exe
- %TEMP%\delay.vbs
- ClassName: '#32770' WindowName: 'Windows ??????????'
- ClassName: 'Shell_TrayWnd' WindowName: ''