Техническая информация
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath $env:APPDATA\WinHelper
- 'f0####01.xsph.ru':80
- 'mo#####.map.fastly.net':443
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- http://f0####01.xsph.ru//00.exe
- DNS ASK f0####01.xsph.ru
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '%WINDIR%\syswow64\cmd.exe' /c %APPDATA%\WinHelper\WinScpSupport.exe
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath $env:APPDATA\WinHelper (со скрытым окном)