In the PowerShell gambit, the aforementioned VBS script used a rudimentary Base64 encoding to obfuscate the first layer. That VBS script then downloaded and executed a DAT file via PowerShell.