Technical Information
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath '<Current directory>\'"
- %TEMP%\44e4.tmp\44e5.tmp\44f6.bat
- %TEMP%\44e4.tmp\44e5.tmp\44f6.bat
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\44E4.tmp\44E5.tmp\44F6.bat <Full path to file>"
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\44E4.tmp\44E5.tmp\44F6.bat <Full path to file>"' (with hidden window)