Technical Information
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -W 1 -C powershell ([char]45+[char]101+[char]110+[char]99) YwBhAGwAYwAuAGUAeABlAA==
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -W 1 -C powershell ([char]45+[char]101+[char]110+[char]99) YwBhAGwAYwAuAGUAeABlAA==' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -enc YwBhAGwAYwAuAGUAeABlAA==
- '<SYSTEM32>\calc.exe'