((Image:\\powershell.exe OR Image:\\pwsh.exe) OR (OriginalFileName:PowerShell.EXE OR OriginalFileName:pwsh.dll)) (CommandLine:anonfiles.com* OR CommandLine:cdn.discordapp.com* OR CommandLine:ddns.net* OR CommandLine:dl.dropboxusercontent.com* OR CommandLine:ghostbin.co* OR CommandLine:glitch.me* OR CommandLine:gofile.io* OR CommandLine:hastebin.com* OR CommandLine:mediafire.com* OR CommandLine:mega.nz* OR CommandLine:onrender.com* OR CommandLine:pages.dev* OR CommandLine:paste.ee* OR CommandLine:pastebin.com* OR CommandLine:pastebin.pl* OR CommandLine:pastetext.net* OR CommandLine:pixeldrain.com* OR CommandLine:privatlab.com* OR CommandLine:privatlab.net* OR CommandLine:send.exploit.in* OR CommandLine:sendspace.com* OR CommandLine:storage.googleapis.com* OR CommandLine:storjshare.io* OR CommandLine:supabase.co* OR CommandLine:temp.sh* OR CommandLine:transfer.sh* OR CommandLine:trycloudflare.com* OR CommandLine:ufile.io* OR CommandLine:w3spaces.com* OR CommandLine:workers.dev*) (CommandLine:.DownloadString\(* OR CommandLine:.DownloadFile\(* OR CommandLine:Invoke\-WebRequest\ * OR CommandLine:iwr\ * OR CommandLine:wget\ *)