Legacy WordBasic macro-virus markers

Historical Word macro viruses often stored WordBasic macro content in legacy WordDocument structures, with strings such as ToolsMacro, MacroFile$, fileMacro$, globMacro$, Wazzu, RSN/SIRPA, WM.Colors, CAP/CAPut, AAAZ/PAYLOAD, or similar family markers. These are not modern VBA projects, so standard VBA extraction can miss them. The finding detail names observed sub-families/behaviors when possible, and the scanner carves a readable legacy WordBasic text excerpt for analyst review.