It downloads a lil executable called "systemmanager" from tor. I did not need to analyze the binary or script to know this is malicious.
https://aur.archlinux.org/cgit/aur.git/tree/.xsnow.install?h=xsnow https://aur.archlinux.org/cgit/aur.git/tree/.xsnow-bin.install?h=xsnow-bin
