(((Image:\\powershell.exe OR Image:\\pwsh.exe) (CommandLine:\ |\ iex;* OR CommandLine:\ |\ iex\ * OR CommandLine:\ |\ iex\}* OR CommandLine:\ |\ IEX\ ;* OR CommandLine:\ |\ IEX\ \-Error* OR CommandLine:\ |\ IEX\ \(new* OR CommandLine:\);IEX\ *)) (CommandLine:\:\:FromBase64String* OR CommandLine:.GetString\(\[System.Convert\]\:\:*)) OR (CommandLine:\)|iex;$* OR CommandLine:\);iex\($* OR CommandLine:\);iex\ $* OR CommandLine:\ |\ IEX\ |\ * OR CommandLine:\ |\ iex\\\"*)