Техническая информация
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath \"%TEMP%\nsc1F63.tmp\""
- %WINDIR%\syswow64\explorer.exe
- %TEMP%\nsc1f63.tmp\nsexec.dll
- %TEMP%\nsc1f63.tmp\alimoviy.53mb
- %TEMP%\nsc1f63.tmp\fwslounqxv.exe
- %TEMP%\nsc1f63.tmp\fwslounqxv.exe.config
- %TEMP%\nsc1f63.tmp\selfdel.dll
- %TEMP%\nsc1f63.tmp\alimoviy.53mb
- %TEMP%\nsc1f63.tmp\fwslounqxv.exe
- %TEMP%\nsc1f63.tmp\fwslounqxv.exe.config
- %TEMP%\nsc1f63.tmp\nsexec.dll
- %TEMP%\nsc1f63.tmp\selfdel.dll
- '%WINDIR%\syswow64\explorer.exe'
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath \"%TEMP%\nsc1F63.tmp\"" (со скрытым окном)