Malicious Office (OOXML) — malware analysis report

Static analysis result for SHA-256 2f2d9dadc9ad18a3…

MALICIOUS

Office (OOXML)

174.5 KB Created: 2020-01-28 12:44:00 UTC Authoring application: Microsoft Office Word 16.0000 First seen: 2020-11-14
MD5: cb25054d8329256c2526d1a849e647c8 SHA-1: 4fd8e5f5c0a2bfd66d233b90c7f2ee6a93fc0849 SHA-256: 2f2d9dadc9ad18a356fff38802fef6c6072a419fe8646acb3b765092ed5d626e
230 Risk Score

Heuristics 6

  • ClamAV: Doc.Downloader.Emotet-7566122-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Emotet-7566122-0
  • VBA project inside OOXML medium 3 related findings OOXML_VBA
    Document contains a VBA project — VBA macros present
  • GetObject call high OLE_VBA_GETOBJ
    GetObject call
    Matched line in script
    Set Riqxvkpq = GetObject(Dhcdohihne)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.microsoft.com/office/word/2010/wordprocessingCanvas In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2014/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2015/9/8/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2015/10/21/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/9/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/10/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/11/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/12/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/13/chartexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/5/14/chartexIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2016/inkIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/drawing/2017/model3dIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/mathIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/wordprocessingml/2006/mainIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2012/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2018/wordml/cexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2016/wordml/cidIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2018/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2015/wordml/symexIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingGroupIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingInkIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2006/wordmlIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/word/2010/wordprocessingShapeIn document text (OOXML body / shared strings)

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source from OOXML) 40802 bytes
SHA-256: e6f57d013564f409953f5ca6d0cb1853b189b1954108b6693cef18dae82b1374
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Shpmuvwbprw"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Onsfbsilrahos()
End Sub
Sub Ozpdeazkpo()
End Sub
Sub Wpnlmjvdr()
End Sub
Sub Wakhrmzxjv()
End Sub
Private Sub Document_open()
Call Rqsfpgbo
End Sub
Sub Jvgzwodcq()
End Sub
Sub Lwepvewvst()
End Sub
Sub Dusiyqrpklhe()
End Sub
Sub Kyoorvtny()
End Sub

Attribute VB_Name = "Rrpeexbifzm"
Attribute VB_Base = "0{A5EE92C6-4AD3-41CC-9680-1AC7E6985D49}{29810A06-4768-4A61-B4E1-4EA492520ABA}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False

Attribute VB_Name = "Tfgjclatozecb"
Attribute VB_Base = "0{A22C7C8A-6333-4B41-89AB-27803FE3ED89}{27040400-6B66-45DD-844D-2BD32BAC5E8F}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Tlkyuudpoa()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Jwzpgjrbup"
Attribute VB_Base = "0{2436E0C0-8D3B-4B74-B3D7-599F8E3115B1}{253C465C-2A84-4713-A4CD-CA84C8ABBC8D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Njdweotecztmw()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Eqpsiezrxpk"
Attribute VB_Base = "0{8482DC6B-1E21-4849-9608-307E56A5F043}{4CCAD392-20D7-4301-9410-7D53D752A669}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Knpebmllqhlz()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Jjdmslumlewa"
Attribute VB_Base = "0{ADCFFD34-8227-4776-949A-0E4A30D006EC}{14318283-B34E-4379-80E3-325E80499B35}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Rgguqbtojpl()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Dojesbkqhu"
Attribute VB_Base = "0{F38FCE93-23E0-4FCF-9FFE-FE7F22518008}{00DF43F8-666F-4D5B-93A5-28EF4E362E26}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Myxclhbsxtka()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Fauzoahbqy"
Attribute VB_Base = "0{9B026B75-666F-4F87-B7BC-20531BDFE457}{264DB701-0CCB-4623-934E-7FF437805D3E}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Dyixkmcc()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Vmyhjrmk"
Attribute VB_Base = "0{3241DC65-70A7-434C-ABE9-2909A3E2B2CF}{A4B1A66C-B80C-442F-B8A2-8911F27690FC}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Mjwkvhgck()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Zaldckajy"
Attribute VB_Base = "0{B27ED128-45F9-45D6-83C9-77380F6510A8}{234BB91C-207F-4A01-8987-3EE3FC42DE9D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ecehbgrqogu()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Tcybcgarsvw"
Attribute VB_Base = "0{FCF4F5D3-875A-48BD-B538-463EABE240D5}{0F688A70-3567-4220-B283-C93FB080444E}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Dhhmbfkxfug()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Zluwbehxj"
Attribute VB_Base = "0{893C8F61-FE03-4291-9201-0F4965F8CC41}{6D6C2EB6-379C-42EA-8E66-FE5BE95EC3BE}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ygsxxmghvo()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Icfoiqoisn"
Attribute VB_Base = "0{73BC6A3A-7936-43F3-930F-F5654DF52D58}{5131F1F0-8E9C-4EEC-A1A7-07B1E532DE28}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Oxvurfptg()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Unmatnysrwb"
Attribute VB_Base = "0{8C0C5C64-ED1F-4B7A-BD0D-D636475B812B}{7D3DD93C-51DA-4C21-B938-79CB2B842982}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Vqyhvstkjljz()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Qqyidmokbw"
Attribute VB_Base = "0{927F78FC-3ABC-4E61-A79A-524E58FF3B15}{A50D5288-136E-487E-B4DA-32F00CC32FAF}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Uuvfjnlbybgi()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Cckbdacbhbs"
Attribute VB_Base = "0{B17A8252-7F6F-42B8-BF16-91A2EF83152C}{DE5B9E2B-FA13-43D9-8837-9F9ADE3B09C0}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Yflocraxzpebw()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Mpjqkokmzzs"
Attribute VB_Base = "0{92F781AE-23AE-440C-A0F1-05EBC3BB91F0}{5E6AC3BF-E78C-4258-9A68-56B2109FFD08}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Smtmvomvnmer()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Dngahmnosrc"
Attribute VB_Base = "0{240C21DF-1531-4F59-BCDB-19F90AAC3158}{4532D011-D55B-46EC-A3E2-83990D477005}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Otlpjbhemv()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Hbtzcfzlx"
Attribute VB_Base = "0{16D0CEE2-4F70-464A-BC65-F676D29EB258}{13B524E5-C97B-45DB-811B-B4EF437F1E42}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Tzldfdubkrfyb()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Uprmqrotzltpp"
Attribute VB_Base = "0{80B5D013-8BC7-43D9-9458-B648E1587F9C}{B76EDA96-A2FC-480B-B189-9F417B6D9E38}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Rmhurpyy()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ruhoccrx"
Attribute VB_Base = "0{C3CD336A-3277-4EFB-B9CD-376AF79414D5}{155C976A-8AC7-4437-8F98-48917E36CFD2}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Julqhfflrl()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Oiasrhjhw"
Attribute VB_Base = "0{BA428EB3-4138-4BDD-BBE8-81D1EBE7F18D}{45D67C55-097C-4C2D-869C-7B499ADAA2FE}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Lzwhfxibrkc()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Bqmmjnhqmmfzo"
Attribute VB_Base = "0{89103014-52B3-4F77-8397-08F2E84C7317}{44A22564-9C02-42A8-9466-57744CE626A7}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Knxotfzrky()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ijwumpcraux"
Attribute VB_Base = "0{A8C7537D-FEDA-4BB0-ACC3-9621200ACE8B}{8EFC23E4-5D92-4EEE-9AF8-2108F302B20E}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Jyzmriqnx()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Nnzrbzbo"
Attribute VB_Base = "0{85CED7A6-DE39-4107-89E6-0502C9A40DEF}{F941B4F8-4BEA-409B-83EB-45C8D7330DB3}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ygpssjlrlpqzf()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Aftpjzlst"
Attribute VB_Base = "0{F3303D74-6A74-4627-82F6-C8C3D0261427}{B6A729C3-09CB-4453-B370-9869A08B314B}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Plqbtioilrjuz()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Wlbmoiqjb"
Attribute VB_Base = "0{3E166A3C-C3CE-49B2-9612-123D8F4E8E1E}{16EAA708-0D7F-43F2-9385-283842BCB8E8}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Yazmowltt()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Kwikwxqq"
Attribute VB_Base = "0{AAFEB18F-03BC-495B-853F-41C763C8866A}{63ADDC3A-2C6A-4C87-8AAD-AD0599B52147}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Rddzqgsqzcog()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ojycmifegu"
Attribute VB_Base = "0{C3788D2C-E676-4F8B-927C-785A524E5C06}{22113E0D-FC3A-4F05-9EC4-01C9BD4D1E36}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Edlstkioh()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Nxqscuxmdlywn"
Attribute VB_Base = "0{5ED1D18A-DA7B-4B54-87D8-1556FFE48922}{D56B2720-C40C-49C6-8AE2-246360443000}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ecomxixmbpf()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Eywcrmlfvq"
Attribute VB_Base = "0{BE60D049-1C42-4CFD-8B36-D23CFA38BDAE}{B033B633-88A2-4CCD-859F-8770ABFC7D3A}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ihysggxtfg()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Uynplpdwonifp"
Attribute VB_Base = "0{84A9A00E-200A-41D5-8592-C2358113A327}{AFBCD1D8-E4AB-4A2C-9C73-4F482D4712D0}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Aniimlcoa()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Uiimdxrxiszv"
Attribute VB_Base = "0{95491AB4-091D-4E41-9018-5A6A9D6D498C}{EF260799-69E8-4CF5-9FDD-B0E35E66A33B}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Mgvvztdlb()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Xxunrjmps"
Attribute VB_Base = "0{04BF5405-C3D8-494B-B2C1-4332CBEBADFF}{81F4651C-8A30-4C20-898C-B4E860AD51A1}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Objlnrnmbrob()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Htbgpjhlg"
Attribute VB_Base = "0{506A167E-B047-4478-9427-D4DC867A1B31}{2F081143-0E1F-40F5-8A71-D51D9E52F47E}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Wjqjmgbm()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Tloflyovojvu"
Attribute VB_Base = "0{AB8BC768-1094-4532-B90E-263CD740F932}{689C35FA-5363-4936-A9B5-BC9DF0736544}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Qkjclndvdk()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Wdolmpion"
Attribute VB_Base = "0{5F458683-4CBC-4697-894C-2C2B2A6761D4}{3A4BF753-1E0C-47AE-870B-CC9887B671C1}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Adlsqrwecbg()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Wzadoxid"
Attribute VB_Base = "0{4027FF47-7CE7-4BA4-B9FC-1A3C8AC9EAB5}{DBD3933E-A841-418C-B0B3-C70E1916F786}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Blgdxfmt()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Xiyzvmegg"
Attribute VB_Base = "0{F3D95341-FF35-4D13-BB22-9D0155593A32}{AC69A7BA-1707-4BAB-8232-699196209522}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Pknomoezq()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Majgjozyqh"
Attribute VB_Base = "0{C7D11B46-880C-4108-957B-63624ACD6770}{84BE19B8-4111-4FDF-91F9-470AD7DE1EF1}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Eoabibtbwa()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Atokqhtgim"
Attribute VB_Base = "0{0693FD27-4F8D-45AA-811F-A9E7BB373051}{5BEB210B-01FA-43BB-9C02-4A3D1364D397}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Qocpgiyzfaiam()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ywyomdxgqaphi"
Attribute VB_Base = "0{A53FE5BE-C2A1-4EE0-9330-D9267EA5E895}{5B2C641B-B333-4454-9D69-82EAA003CF81}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Brsbktyd()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Bxgaknxdkvj"
Attribute VB_Base = "0{0231CAB4-1C7A-4BBB-8279-A32A149B8435}{8AB0C639-203F-4605-A43C-40924722E3B0}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Jusimprbplbyr()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Cdatdakgrf"
Attribute VB_Base = "0{FC819D12-39DA-4D2A-8323-0826E548699F}{C8045E7D-C968-4769-972F-26CF57F76F4C}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Rexsursigs()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Odmllebtfm"
Attribute VB_Base = "0{4BD388D8-3EFB-4A01-998E-108D558FF35A}{969A1223-E2F6-4A70-A864-EDF454C827A6}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Vqhyynbcg()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Xrtghzzeksofz"
Attribute VB_Base = "0{7F1ABF54-6A8B-4BF5-AEA6-74E8323F206B}{6481DD75-7480-450A-BFDD-0F9B4B7B0361}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Vmemgedqwejuj()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ifkdptryutf"
Attribute VB_Base = "0{6E233385-B649-4B8B-8378-B31E95C3189B}{847796DB-002E-4383-B422-1C5D4D5E032B}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ohlikzspytw()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Bwbxeqltjiuv"
Attribute VB_Base = "0{FF225D1C-CFC3-46B7-9CEF-BAAFF07B7C7C}{7328FCB5-8D90-4509-9D73-FA1BFD5F7E60}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Enjtbwnbp()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Jkabkloi"
Attribute VB_Base = "0{F435934A-14A4-4A99-ABF0-2688C2467507}{96D5655A-1D8D-49CE-8246-CFDED64717D3}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Uwwppxvfyqml()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Boauzgzghvv"
Attribute VB_Base = "0{F1CF6B75-E286-4541-8F08-546C8BABE45A}{5CC156A4-5E93-4C0B-89E7-EA5A11BB82B6}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Szwfmdnjrm()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Yrwrcpyqmz"
Attribute VB_Base = "0{962AA918-1E1C-40B7-95E2-150101BCDB0A}{391F049B-FBB6-47F1-993A-332CA23D2F3F}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Tjpsoobtjn()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Bkzhgfkcw"
Attribute VB_Base = "0{E9A25866-652B-46E5-B0FD-78B158EB4CEC}{8BDCF02D-8363-49F4-A33F-F604DF473270}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Odpegwpx()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Lmdouvcl"
Attribute VB_Base = "0{3893ACCC-65E5-4A76-ADE2-ADEC773C664F}{4F02CEC6-CB55-4788-8D3E-F8284E445C46}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Loqqrprj()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Tokibpzjuxt"
Attribute VB_Base = "0{7B34D1F8-BE7A-4181-A6D6-3330EC12C4D2}{571977F8-4DF4-42F6-A4F6-D070BFE4D6A4}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Bpywsmkhqm()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Zmymqfgqdkw"
Attribute VB_Base = "0{57667161-2BBB-4B0A-8D30-F0BFD1066508}{6646EB1B-8B2A-4731-B573-1F6AF93EB71A}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Newtqmjveoat()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Wxiccftbdawes"
Attribute VB_Base = "0{41F19CE2-14B7-4D36-AC77-28A10C72355D}{5F2C4095-E202-41D1-95AF-8ADDB690638D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Hqtxbfiooaawt()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ytxgjtuiuwblb"
Attribute VB_Base = "0{2C37C54B-E47C-4390-9CD9-3923FD339EA7}{53500774-095D-4B81-9A90-91F6000075BF}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Muwwxxhvstoju()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Izgfccgl"
Attribute VB_Base = "0{92EB5B06-0A17-4297-B232-C0B0A320792A}{E6CE15CA-B334-43BC-BE08-D748327F4B96}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Mizbatgsr()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Axxzqyenv"
Attribute VB_Base = "0{1E744D04-5303-4294-841A-DEE8565427C6}{1FAF454C-E151-4C7F-B956-32F4FA17124D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Frncfvtt()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Srkphtszh"
Attribute VB_Base = "0{D53D2BCE-1832-4645-847E-9FE4BC21113D}{B811E416-22FE-4B32-83CF-A6EF3C607616}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Owhbjfle()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ivmchnxokyyhx"
Attribute VB_Base = "0{EC8D4AB3-9C75-4456-BB4C-C2FBBC410F4A}{65A87B12-CA39-4BC9-95D8-D45C6F2D5649}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Nkiemnnsy()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Gavqipdjkvyna"
Attribute VB_Base = "0{D665A50B-D747-439A-B56C-AB68C6863298}{B7CC06C7-9B52-4520-9091-AB80ABFE16F5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Lwsdhyzvwvcz()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ucollhxsuq"
Attribute VB_Base = "0{3E4C8A16-EA44-4D65-8071-5BA797439595}{D9EE5085-F863-4CE3-AFA1-E57BD0747981}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Nxkoxizs()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Aukxhezvfqo"
Attribute VB_Base = "0{64EC4194-2F0A-4043-B50E-CDB34EABA675}{A7A0666F-A6A2-438F-B988-90367E16D7D9}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Skbpywscbuc()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Khxuawid"
Attribute VB_Base = "0{70C69373-3CC1-4022-AF9E-645C565537CF}{9B6FAF56-F376-44E8-9762-DAAB41B97CB5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Boatszktpohs()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Tavjozzhmfts"
Attribute VB_Base = "0{4E94F45F-7C5E-4BE2-9BA5-4C9690B0F33C}{D7D4EE59-8839-4C73-AA2A-D98FCE29A548}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Prqmqqabyd()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Qbnvuscc"
Attribute VB_Base = "0{B0F08684-147E-40B3-9850-7136446328F3}{EC4D1DE5-4D9E-4F7F-AA8A-752F48BD169B}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Bzoctubuzabzd()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ucnvscriliytq"
Attribute VB_Base = "0{C9C9441B-F112-47E3-BB9C-E1F0D95A7546}{662FEAFC-C13B-4AED-98BB-4E15DAD8D4BB}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Pvkqqqyn()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Zdeabryqx"
Attribute VB_Base = "0{BEA660BF-76EC-4328-8CF3-206EFE3DA672}{08A62F8E-288E-41A6-A3BE-A33645B8A8D1}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Pgjxjrcuvak()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Kfomghwoqosyn"
Attribute VB_Base = "0{86E4AE35-F5AE-4BFA-AA5B-E9405922DD08}{963C188F-CB39-4AE5-B303-7AD33055F0A1}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Qzdsllaobt()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Vsbfpugqvcmjq"
Attribute VB_Base = "0{15D50A4B-19C5-4273-B23C-70BB8EF0FAF2}{B7736A63-BDE2-4D35-B447-91A5EEA41F50}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ysqyvisd()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Rxmjrntyhawoi"
Attribute VB_Base = "0{A157BF97-831B-4626-90B3-43DF4258D62A}{FF53D0FB-322E-4916-B78C-0749F2643EB8}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Hsoontci()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Wkumrdpf"
Attribute VB_Base = "0{9AE73586-73AB-4D18-BE7A-B6896919B679}{7F0A25E6-AE29-42F2-BA6F-BDE8D2443685}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Xugeptkidejjn()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Qepidppbhuc"
Attribute VB_Base = "0{CF673B28-EBAA-43E2-BB66-1B7FB16DCC63}{4199DF97-D0DB-4F16-8F6C-846C4D86AB49}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Qwgjafgnlj()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Jtfgsnxayazz"
Attribute VB_Base = "0{3583CD5F-E343-43E3-A27B-477C8F80728B}{3A931940-D0C6-487B-A95C-294687921961}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Ihszknuys()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Ajhnafurotvkv"
Attribute VB_Base = "0{5FE6B0DA-49BC-432A-9E66-C02FE8919DD8}{BF73B87A-1FA1-4E3B-94EC-48A706EEEA12}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Eynqxhmuw()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Lzkzkbyisepm"
Attribute VB_Base = "0{BEE44AED-8F63-4662-BDA8-97D199DA2CF9}{C0DFBEE6-22E9-4043-92B5-3740B67235E2}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Eiilnxxkciwk()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Qnokogtvgp"
Attribute VB_Base = "0{25CE6ACD-91AE-40E8-A46C-899E8D3C98E0}{3C59F100-CBF3-4CBB-A480-C16DDFF7DA1A}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Lnwdolqutydi()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Xawccayq"
Attribute VB_Base = "0{E06A84C0-F0D9-4650-8308-DBA2F7D4B953}{26CC8DC6-9CB2-460E-862D-2AA7C20D3F15}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Pexrbictc()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Joztlthprk"
Attribute VB_Base = "0{77405BB9-0C2D-454A-8AF4-6C958DD6C5EB}{899A0B02-8BDC-41E2-A556-CE044BD18072}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Niszdmjv()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Rnkoztkwjgrp"
Attribute VB_Base = "0{D7EE3FF0-EA29-48FE-B3BF-6E57BF00101F}{ED26FC84-A96F-48C7-809B-61F1F51E85D7}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Wiqgraaukd()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Jiygtxrow"
Attribute VB_Base = "0{6FA527EC-2BFA-4FE6-A8D0-7CEC907BFA23}{52B2D3F9-CBE9-4F98-9607-A3A1C1929E9F}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Sub Xuofvayjyv()
Debug.Print "Putin.V.V" + gg
End Sub

Attribute VB_Name = "Vvcduvxd"
Attribute VB_Base = "0{79416371-E9B6-4EA6-A889-FB4A3C6E698A}{ABF57E53-FB91-42F9-888F-15A48BF740DF}"
Attribute VB_GlobalNameSpace = False
…
vbaProject_00.bin vba-project OOXML VBA project: word/vbaProject.bin 321024 bytes
SHA-256: a12ec719b5a626725068e160f85761d2c4d30b4fbf33a716353dd45dc72242a9
Detection
ClamAV: Doc.Downloader.Emotet-7566122-0
Obfuscation or payload: unlikely

Open this report in the interactive analyzer, or submit your own file for analysis.