WScript.exe
Named by 3 kept items in this workspace.
Search every workspace for WScript.exe. It matches the name as written, so it can find other things that share it.
The items that name it 3
Used to execute find.vbs, which displays the fake 'license not found' error to mislead the victim.
used by the LNK file to execute the remote JSE script
Interprets VBS/JavaScript-associated filetypes (JSFile, JSEFile, VBEFile, VBSFile, WSFFile, WSHFile), enabling command execution via scripts
All technologies in this workspace.