The source analyzes test.lnk, a Konni-linked malware sample disguised as an HWP document about anti-money-laundering supervision for virtual asset service providers. The report lists the sample hashes and shows that the LNK contains embedded PowerShell rather than behaving like a normal shortcut. Its command-line logic searches for PowerShell on the system and runs obfuscated script content, making the lure relevant to cryptocurrency and regulatory themes while preserving a common Konni execution pattern.