Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -EncodedCommand VwByAGkAdABlAC0ASABvAHMAdAAgAEIAVABIAF8AQwBUAEYAewBsAG0AYQBvAG8AXwBtAGEAbABkAG8AeAB4AHgAeAB9AA==
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -EncodedCommand VwByAGkAdABlAC0ASABvAHMAdAAgAEIAVABIAF8AQwBUAEYAewBsAG0AYQBvAG8AXwBtAGEAbABkAG8AeAB4AHgAeAB9AA==' (со скрытым окном)