image.png

Extract the link

image.png

Read the string and base64 decode

image.png

Get the file, powershell used iwr

image.png

image.png

https://github.com/TargetPackage/batch_deobfuscator

Use this tool to help decode

image.png

image.png

In the decoded text there is a PowerShell base64 encoded value