MultipleIssueTest

[konata233]

calc

[NyonAneki]

The token will expire on 2024/06/07

[konata233]

calc

[NyonAneki]

The token will expire on 2024/06/07

[konata233]

calc

[NyonAneki]

calc

[INFO] [2023-06-08 18:08:48] Success!

[konata233]

taskmgr calc explorer

[NyonAneki]

taskmgr calc explorer

[INFO] [2023-06-08 18:08:48] Success!

[konata233]

load_module test

[NyonAneki]

load_module test

[INFO] [2023-06-08 18:08:48] Module successfully loaded.

[konata233]

run_module test http://github.com/myhsp/CirTrojanBackend/issues/2

[konata233]

shit

[NyonAneki]

shit

[INFO] [2023-06-08 18:08:48] Success!

[konata233]

color 35

[NyonAneki]

color 35

[INFO] [2023-06-08 18:08:48] Success!

[konata233]

title 114514

[NyonAneki]

title 114514

[INFO] [2023-06-08 18:08:48] Success!

[NyonAneki]

The token will expire on 2024/06/07

[NyonAneki]

The token will expire on 2024/06/07

[konata233]

echo 114514

[NyonAneki]

echo 114514

[INFO] [2023-06-09 08:33:12] Windows PowerShell 版权所有（C） Microsoft Corporation。保留所有权利。

安装最新的 PowerShell，了解新功能和改进！https://aka.ms/PSWindows

PS D:\CirnoTrojanFrontEnd>

[konata233]

calc

[NyonAneki]

calc

[INFO] [2023-06-09 08:33:12] echo 114514 114514 PS D:\CirnoTrojanFrontEnd>

[konata233]

title 114514

[NyonAneki]

title 114514

[INFO] [2023-06-09 08:33:12] calc PS D:\CirnoTrojanFrontEnd>

[konata233]

load_module test

[NyonAneki]

load_module test

[INFO] [2023-06-09 08:33:12] Module successfully loaded.

[konata233]

ps explorer.exe

[NyonAneki]

ps explorer.exe

[INFO] [2023-06-09 08:33:12] title 114514 title : 无法将“title”项识别为 cmdlet、函数、脚本文件或可运行程序的名称。请检查名称的拼写，如果包括路径，请确保路径正 确，然后再试一次。 所在位置 行:1 字符: 1

• title 114514

• 
  + CategoryInfo          : ObjectNotFound: (title:String) [], CommandNotFoundException
  + FullyQualifiedErrorId : CommandNotFoundException

PS D:\CirnoTrojanFrontEnd>

[konata233]

ps explorer.exe

[NyonAneki]

ps explorer.exe

[INFO] [2023-06-09 08:33:12] ps explorer.exe ps : 找不到名为“explorer.exe”的进程。请验证该进程名称，然后再次调用 cmdlet。 所在位置 行:1 字符: 1

• ps explorer.exe

• 
  + CategoryInfo          : ObjectNotFound: (explorer.exe:String) [Get-Process], ProcessCommandException
  + FullyQualifiedErrorId : NoProcessFoundForGivenName,Microsoft.PowerShell.Commands.GetProcessCommand

PS D:\CirnoTrojanFrontEnd>

[konata233]

ps pycharm64.exe

[NyonAneki]

ps pycharm64.exe

[INFO] [2023-06-09 08:33:12] ps explorer.exe ps : 找不到名为“explorer.exe”的进程。请验证该进程名称，然后再次调用 cmdlet。 所在位置 行:1 字符: 1

• ps explorer.exe

• 
  + CategoryInfo          : ObjectNotFound: (explorer.exe:String) [Get-Process], ProcessCommandException
  + FullyQualifiedErrorId : NoProcessFoundForGivenName,Microsoft.PowerShell.Commands.GetProcessCommand

PS D:\CirnoTrojanFrontEnd>

[konata233]

ps pycharm64.exe

[NyonAneki]

ps pycharm64.exe

[INFO] [2023-06-09 08:33:12] ps pycharm64.exe ps : 找不到名为“pycharm64.exe”的进程。请验证该进程名称，然后再次调用 cmdlet。 所在位置 行:1 字符: 1

• ps pycharm64.exe

• 
  + CategoryInfo          : ObjectNotFound: (pycharm64.exe:String) [Get-Process], ProcessCommandException
  + FullyQualifiedErrorId : NoProcessFoundForGivenName,Microsoft.PowerShell.Commands.GetProcessCommand

PS D:\CirnoTrojanFrontEnd>

[konata233]

ps

[NyonAneki]

ps

[INFO] [2023-06-09 08:33:12] ps pycharm64.exe ps : 找不到名为“pycharm64.exe”的进程。请验证该进程名称，然后再次调用 cmdlet。 所在位置 行:1 字符: 1

• ps pycharm64.exe

• 
  + CategoryInfo          : ObjectNotFound: (pycharm64.exe:String) [Get-Process], ProcessCommandException
  + FullyQualifiedErrorId : NoProcessFoundForGivenName,Microsoft.PowerShell.Commands.GetProcessCommand

PS D:\CirnoTrojanFrontEnd>

[konata233]

ps

[NyonAneki]

ps

[INFO] [2023-06-09 08:33:12] ps

Handles NPM(K) PM(K) WS(K) CPU(s) Id SI ProcessName

---

222      14     3300       3896       1.22  14612   1 AdobeIPCBroker                                               
170      11     3060       7476              6488   0 AggregatorHost                                               
232      20     3800       3452              4376   0 AppleMobileDeviceService                                     
417      24    23664      34908       3.55  20004   1 ApplicationFrameHost                                         
160       9     1932       2780       0.00  18876   1 AppVShNotify                                                 
318      16     4188       7476              2088   1 atieclxx                                                     
195       9     1580       1604              2912   0 atiesrxx                                                     
 46       4      556        464       0.00  14140   1 CCXProcess                                                   
140       8     1552       1632       0.05   9424   1 ChsIME                                                       
145       9     1448       9112             20028   1 ChsIME                                                       
215      13     5376       1624       0.02  13572   1 cmd                                                          
123       9     1488       1108       0.00  14160   1 cncmd                                                        
106       7     5344       1100       0.00   9548   1 conhost                                                      
109       7     5360       1108       0.02  14192   1 conhost                                                      
109       7     5332      10700       0.00  27336   1 conhost                                                      
727      26     2208       3112               560   0 csrss                                                        
849      27     7948       5616              1084   1 csrss                                                        
950      38    73280      61116     149.94  10012   1 ctfmon                                                       
221      13     3788      14004       0.13  19060   1 DataExchangeHost                                             
802      15     6468       5724              4440   0 DAX3API                                                      
175      10     2740       3172              7028   1 DAX3API                                                      
139      10     2368       9020       0.39  14620   1 DismHost                                                     
328      20     6120       5996       0.47   9252   1 dllhost                                                      
417      17    10040      18484       7.00  17440   1 dllhost                                                      

2020 98 223044 104660 1724 1 dwm
493 18 7828 7432 54.14 5292 1 ETDCtrl
161 9 1904 1448 3056 0 ETDService
9513 418 238892 243472 469.45 6600 1 explorer
1320 56 48876 125132 1.05 30436 1 explorer
450 18 7668 13596 16748 0 FileSyncHelper
202 10 1920 2356 4448 0 FMService64
40 10 9316 23320 1392 1 fontdrvhost
40 6 2268 688 1400 0 fontdrvhost
49 4 596 3000 0.13 19796 1 fsnotifier
183 11 1784 984 10476 0 GoogleCrashHandler
164 9 1732 628 10504 0 GoogleCrashHandler64
546 50 184216 126812 5360 0 HipsDaemon
417 25 11240 16856 118.02 12044 1 HipsTray
128 9 2044 2788 2768 0 ibmpmsvc
0 0 60 8 0 0 Idle
289 18 8892 4336 4480 0 IpOverUsbSvc
1236 59 82624 68072 7336 0 Lenovo.Modern.ImController
554 32 22260 42072 13444 0 Lenovo.Modern.ImController.PluginHost.Device
523 35 25480 14040 5.73 23452 1 Lenovo.Modern.ImController.PluginHost.Device
733 44 43448 69320 27264 0 Lenovo.Modern.ImController.PluginHost.Device
145 8 1684 2056 2776 0 LITSSvc
592 30 15980 35696 7.19 1312 1 LockApp
1756 34 11444 17504 1244 0 lsass
180 15 2472 3992 4396 0 mDNSResponder
0 0 2500 374548 3116 0 Memory Compression
286 18 36452 73356 0.69 4912 1 msedge
199 10 2100 9276 0.02 6652 1 msedge
292 18 26884 59908 0.31 10704 1 msedge
207 13 18052 29972 0.02 12148 1 msedge
238 16 15956 31596 0.02 17628 1 msedge
215 13 8580 20076 0.08 18460 1 msedge
400 34 15448 39648 0.81 21912 1 msedge
846 43 210224 170440 7.09 24168 1 msedge
380 19 60316 115032 25168 1 msedge
411 22 148076 211196 9.33 28188 1 msedge
269 16 9088 26064 0.03 28572 1 msedge
2049 103 108476 230616 8.78 29080 1 msedge
384 21 78660 141864 0.58 30116 1 msedge
1307 44 32572 16200 9.67 9308 1 msedgewebview2
215 13 10476 76 0.20 10880 1 msedgewebview2
722 35 101624 4684 6.36 11188 1 msedgewebview2
149 10 2092 1944 0.08 12928 1 msedgewebview2
290 17 12384 6988 3.09 15468 1 msedgewebview2
376 19 155536 764 36.33 16984 1 msedgewebview2
170 11 1824 10572 20060 1 msfeedssync
932 42 36580 49960 17968 0 MSOfficePLUSService
2452 39 31976 35236 53.36 14152 1 node
797 28 40480 41084 11092 0 OfficeClickToRun
1138 61 57092 46280 17.30 17316 1 OneDrive
161 11 2160 10252 0.02 29520 1 OpenConsole
929 98 51784 146572 0.33 17860 1 PhoneExperienceHost
321 19 13660 7608 47.17 1228 1 PopBlock
390 20 3988 5476 9.08 4516 1 PowerMgr
651 26 54060 67140 0.11 19636 1 powershell
607 31 107752 123528 0.48 29844 1 powershell
1277 104 2164668 2332800 203.06 10976 1 pycharm64
157 22 23776 34916 0.22 28832 1 python
364 38 50440 60628 1.64 21624 1 QQExternal
455 30 16348 11996 4592 0 QQProtect
339 19 8248 7000 4.92 4928 1 QtWebEngineProcess
2545 76 183560 20000 19.61 13472 1 RadeonSoftware
0 18 14068 37408 144 0 Registry
451 23 4896 5388 4620 0 RtkAudUService64
377 22 3376 3804 9132 1 RtkAudUService64
404 23 5028 3800 1.19 13908 1 RtkAudUService64
148 8 2148 3432 4632 0 RtkBtManServ
394 19 7508 30588 0.34 316 1 RuntimeBroker
473 22 16632 23644 27.30 3844 1 RuntimeBroker
464 24 10124 30004 3.03 8396 1 RuntimeBroker
767 37 15152 33852 3.63 8500 1 RuntimeBroker
270 15 5632 24876 0.06 10572 1 RuntimeBroker
573 24 7764 32236 0.31 16692 1 RuntimeBroker
143 10 2108 11632 0.00 29748 1 RuntimeBroker
1680 117 139424 182632 9.58 8264 1 SearchHost
985 23 42680 62508 25076 0 SearchIndexer
337 12 2708 14776 30404 0 SearchProtocolHost
596 23 8356 13624 11956 0 SecurityHealthService
179 10 2028 3576 0.14 11936 1 SecurityHealthSystray
795 12 6052 7588 1160 0 services
113 8 7148 6696 15088 0 SgrmBroker
773 39 27316 59332 0.13 17136 1 ShellExperienceHost
230 12 2836 3816 7184 1 shtctky
990 31 16444 50588 38.13 5304 1 sihost
166 10 2424 10880 0.02 29120 1 smartscreen
58 3 1088 400 600 0 smss
472 24 6244 10968 3548 0 spoolsv
141 10 2080 1560 4660 0 sqlwriter
765 42 52652 72436 6.92 2948 1 StartMenuExperienceHost
1772 108 144228 105044 913.95 17036 1 steam
252 14 7068 3188 2700 0 steamservice
516 25 24260 7184 0.13 3840 1 steamwebhelper
910 41 48740 60552 189.47 5140 1 steamwebhelper
898 40 270788 154316 5.42 8720 1 steamwebhelper
281 16 8088 2896 0.05 16072 1 steamwebhelper
620 41 209888 170692 41.25 16828 1 steamwebhelper
409 24 19856 19764 5.17 16852 1 steamwebhelper
556 31 82208 29840 2.36 17700 1 steamwebhelper
583 30 55056 74124 0.22 23608 1 steamwebhelper
328 21 9388 8176 0.27 24172 1 steamwebhelper
409 17 4288 19780 648 0 svchost
390 7 2444 2936 1068 0 svchost
1971 26 19348 32520 1360 0 svchost
446 22 9676 24668 1460 0 svchost
1529 20 12964 17536 1548 0 svchost
321 11 3004 4136 1596 0 svchost
160 32 7132 7088 1712 0 svchost
441 19 7032 10320 1836 0 svchost
193 10 2384 4764 1884 0 svchost
256 13 2936 5844 1892 0 svchost
320 10 2448 5096 1900 0 svchost
863 11 3684 4760 2024 0 svchost
175 9 1988 4388 2032 0 svchost
390 11 3024 8556 2044 0 svchost
1044 22 16824 17988 2128 0 svchost
244 12 4560 9544 2332 0 svchost
328 16 5192 7228 2500 0 svchost
115 7 1388 1488 2616 0 svchost
324 15 34112 21836 2688 0 svchost
508 15 21672 16788 2904 0 svchost
229 12 2740 6700 3048 0 svchost
260 8 1300 1280 3064 0 svchost
228 14 2368 5592 3156 0 svchost
222 10 2116 4588 3184 0 svchost
196 12 2388 5372 3192 0 svchost
509 14 4172 10604 3508 0 svchost
449 33 14148 16988 3540 0 svchost
160 9 1532 2944 3552 0 svchost
565 34 11976 14904 3616 0 svchost
163 9 1696 2948 3632 0 svchost
238 11 6404 4780 3636 0 svchost
467 13 3604 6404 3648 0 svchost
194 10 2168 4288 3824 0 svchost
530 28 8512 14336 3976 0 svchost
249 13 2644 7012 4036 0 svchost
227 15 2156 3860 4080 0 svchost
181 11 1956 2648 4116 0 svchost
653 28 30516 13356 4384 0 svchost
597 26 25508 33464 4416 0 svchost
251 12 5528 6996 4432 0 svchost
375 20 3124 6620 4464 0 svchost
151 42 1648 1192 4568 0 svchost
436 23 24184 28068 4580 0 svchost
204 12 2440 4168 4640 0 svchost
439 16 10772 14816 4676 0 svchost
137 7 1348 1660 4684 0 svchost
421 20 5888 13884 4752 0 svchost
262 13 4632 14676 4780 0 svchost
421 25 3928 5832 5204 0 svchost
480 19 12432 24612 16.56 5416 1 svchost
167 9 1712 3208 5424 0 svchost
131 8 1592 1640 0.03 5816 1 svchost
1013 21 9160 22076 17.25 5888 1 svchost
412 20 5284 12980 6208 0 svchost
668 47 79648 65988 6296 0 svchost
843 81 25128 55956 6912 0 svchost
258 11 2592 4580 6976 0 svchost
145 9 1924 3840 7220 0 svchost
534 23 144956 29728 2.50 7396 1 svchost
218 13 2504 6428 7480 0 svchost
395 12 2724 8936 7828 0 svchost
193 15 6636 2356 8052 0 svchost
218 12 2580 6600 0.14 8684 1 svchost
477 23 11356 17288 10596 0 svchost
2628 69 36940 33464 2.05 10812 1 svchost
598 17 8068 12824 10940 0 svchost
162 10 2204 4408 10948 0 svchost
165 9 1652 8184 11184 0 svchost
356 15 4176 9256 12704 0 svchost
358 19 6272 20160 13368 0 svchost
321 19 5784 6616 3.48 13460 1 svchost
253 13 3744 6552 13484 0 svchost
232 19 4400 11232 14304 0 svchost
102 7 1176 1296 14496 0 svchost
412 25 5152 10452 0.44 14888 1 svchost
317 14 3332 8232 15300 0 svchost
142 12 2500 9644 17084 0 svchost
122 8 1456 1076 17964 0 svchost
142 8 4112 3596 18456 0 svchost
160 8 1648 1092 20696 0 svchost
159 10 1936 7744 23836 0 svchost
176 105 2136 7708 25208 0 svchost
119 8 1760 7680 25428 0 svchost
116 8 1312 6672 28536 0 svchost
5587 0 48 12 4 0 System
1139 55 36348 1572 0.09 16364 1 SystemSettings
427 28 8632 24124 0.88 14288 1 SystemSettingsAdminFlows
549 25 7116 33244 0.13 12108 1 SystemSettingsBroker
317 32 8300 13420 4.27 6112 1 taskhostw
400 23 9660 10096 1.73 17644 1 taskhostw
2175 153 385564 106888 119.38 2260 1 TextInputHost
2138 511 359620 399568 188.39 12732 1 TIM
301 17 4812 4704 3880 0 tphkload
175 10 1924 2276 1.23 7164 1 tposd
175 12 4140 3536 0.08 8212 1 TXPlatform
723 33 32344 22568 18276 0 UDClientService
200 12 2612 1448 12852 0 usysdiag
1153 38 17416 37716 8.22 8436 1 Widgets
358 17 4508 14900 0.34 10784 1 WidgetService
624 37 30764 79820 0.39 15120 1 WindowsTerminal
143 11 1488 1044 1076 0 wininit
273 12 2480 5268 1188 1 winlogon
175 11 2960 11136 17828 0 WmiPrvSE
173 11 1740 4852 3596 0 wsctrlsvc
219 8 1468 1920 1436 0 WUDFHost
227 9 1532 1612 3172 0 WUDFHost

PS D:\CirnoTrojanFrontEnd>