discovered 2026-07-08
Decoded multi-layer PowerShell loader, executed with -ExecutionPolicy Bypass and a hidden window.