Skip Task Manager, enable a hidden Windows setting, and force-close frozen apps directly from the taskbar.
A victim was tricked into pasting a one-line PowerShell command (a "ClickFix"-style lure). That command downloaded and ran a PowerShell dropper. The dropper fetched a password-protected RAR archive ...