((Image:\\powershell.exe OR Image:\\pwsh.exe) OR (OriginalFileName:PowerShell.EXE OR OriginalFileName:pwsh.dll)) CommandLine:\ hidden\ * (CommandLine:AGkAdABzAGEAZABtAGkAbgAgAC8AdAByAGEAbgBzAGYAZQByA* OR CommandLine:aXRzYWRtaW4gL3RyYW5zZmVy* OR CommandLine:IAaQB0AHMAYQBkAG0AaQBuACAALwB0AHIAYQBuAHMAZgBlAHIA* OR CommandLine:JpdHNhZG1pbiAvdHJhbnNmZX* OR CommandLine:YgBpAHQAcwBhAGQAbQBpAG4AIAAvAHQAcgBhAG4AcwBmAGUAcg* OR CommandLine:Yml0c2FkbWluIC90cmFuc2Zlc* OR CommandLine:AGMAaAB1AG4AawBfAHMAaQB6AGUA* OR CommandLine:JABjAGgAdQBuAGsAXwBzAGkAegBlA* OR CommandLine:JGNodW5rX3Npem* OR CommandLine:QAYwBoAHUAbgBrAF8AcwBpAHoAZQ* OR CommandLine:RjaHVua19zaXpl* OR CommandLine:Y2h1bmtfc2l6Z* OR CommandLine:AE8ALgBDAG8AbQBwAHIAZQBzAHMAaQBvAG4A* OR CommandLine:kATwAuAEMAbwBtAHAAcgBlAHMAcwBpAG8Abg* OR CommandLine:lPLkNvbXByZXNzaW9u* OR CommandLine:SQBPAC4AQwBvAG0AcAByAGUAcwBzAGkAbwBuA* OR CommandLine:SU8uQ29tcHJlc3Npb2* OR CommandLine:Ty5Db21wcmVzc2lvb* OR CommandLine:AE8ALgBNAGUAbQBvAHIAeQBTAHQAcgBlAGEAbQ* OR CommandLine:kATwAuAE0AZQBtAG8AcgB5AFMAdAByAGUAYQBtA* OR CommandLine:lPLk1lbW9yeVN0cmVhb* OR CommandLine:SQBPAC4ATQBlAG0AbwByAHkAUwB0AHIAZQBhAG0A* OR CommandLine:SU8uTWVtb3J5U3RyZWFt* OR CommandLine:Ty5NZW1vcnlTdHJlYW* OR CommandLine:4ARwBlAHQAQwBoAHUAbgBrA* OR CommandLine:5HZXRDaHVua* OR CommandLine:AEcAZQB0AEMAaAB1AG4Aaw* OR CommandLine:LgBHAGUAdABDAGgAdQBuAGsA* OR CommandLine:LkdldENodW5r* OR CommandLine:R2V0Q2h1bm* OR CommandLine:AEgAUgBFAEEARABfAEkATgBGAE8ANgA0A* OR CommandLine:QASABSAEUAQQBEAF8ASQBOAEYATwA2ADQA* OR CommandLine:RIUkVBRF9JTkZPNj* OR CommandLine:SFJFQURfSU5GTzY0* OR CommandLine:VABIAFIARQBBAEQAXwBJAE4ARgBPADYANA* OR CommandLine:VEhSRUFEX0lORk82N* OR CommandLine:AHIAZQBhAHQAZQBSAGUAbQBvAHQAZQBUAGgAcgBlAGEAZA* OR CommandLine:cmVhdGVSZW1vdGVUaHJlYW* OR CommandLine:MAcgBlAGEAdABlAFIAZQBtAG8AdABlAFQAaAByAGUAYQBkA* OR CommandLine:NyZWF0ZVJlbW90ZVRocmVhZ* OR CommandLine:Q3JlYXRlUmVtb3RlVGhyZWFk* OR CommandLine:QwByAGUAYQB0AGUAUgBlAG0AbwB0AGUAVABoAHIAZQBhAGQA* OR CommandLine:0AZQBtAG0AbwB2AGUA* OR CommandLine:1lbW1vdm* OR CommandLine:AGUAbQBtAG8AdgBlA* OR CommandLine:bQBlAG0AbQBvAHYAZQ* OR CommandLine:bWVtbW92Z* OR CommandLine:ZW1tb3Zl*)