It looks like a malware injector implemented in browser JS (but requiring ActiveX, as pointed out in another comment). It shows that in certain systems it is po

It looks like a malware injector implemented in browser JS (but requiring ActiveX, as pointed out in another comment). It shows that in certain systems it is possible to infect executables by having the visitor load this JS in their browser. In other words, a way of escaping the browser sandbox on systems with that "feature" of ActiveX enabled.