RareWolf Trays.exe launched with -tray from batch dropper

Subhankar H@Andrewsec57

•updated 2 days ago•0•0•2

Detects Trays.exe started with the -tray argument from a Trays subfolder or a batch script, as observed in the RareWolf BAT dropper ahead of a silent AnyDesk installation.