Техническая информация
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath 'C:\'"
- %TEMP%\rarsfx0\test.zip
- %TEMP%\rarsfx0\bat.bat
- ClassName: 'EDIT' WindowName: ''
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Expand-Archive -Path '%TEMP%\RarSFX0\test.zip' -DestinationPath '%TEMP%\temp_zip' -Force"
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\bat.bat" "