Per another Meta it came to our attention that there was a user posting potentially malicious code. There's no real rule about that, but, for unrelated reasons of moderation, the account that posted it was deleted.
They later recreated the account and posted another question, which got a bit more decisive response because of the unrelated moderation issue they chose to ignore. The question was a bit less kosher as well (obviously the bad parts have been redacted, and I did not code format so it's all readable in a block)
I tried decrypt this base64 hash but i can't:
IO.Compression.DeflateStream ($(New-Object IO.MemoryStream (,$([Convert]::FromBase64String("A really long Base64 string here")))), [IO.Compression.CompressionMode]::Decompress)), [Text.Encoding]::ASCII)).ReadToEnd();") else (%WinDir%\syswow64\windowspowershell\v1.0\powershell.exe -NoP -NonI -W Hidden -Exec Bypass -Command "Invoke-Expression $(New-Object IO.StreamReader ($(New-Object IO.Compression.DeflateStream ($(New-Object IO.MemoryStream (,$([Convert]::FromBase64String("A really long Base64 string here")))), [IO.Compression.CompressionMode]::Decompress)), [Text.Encoding]::ASCII)).ReadToEnd();")
How i can decrypt it?
Given the prior subject matter, I was disinclined to keep this question (the fact that it's calling a base64 reversal to then execute a PowerShell command is a giant red flag).
But it does raise another issue: Should we allow questions where the user merely wants help figuring out what obfuscated blocks or commands (where hackers have inserted malicious code) do? There's not much value in people just searching for help, and if someone wants to revert it into text and then ask what it does, that's a bit less problematic (because the troublesome parts should be considerably more obvious).
Obviously, please mod flag blatantly malicious code and we'll take care of it. But making it off-topic means it can be removed by the broader community as well, via closure and deletion (since red-flags would get confusing without context). The goal here would be for quick removal by the community.