× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c
File name: FillDocuments_v2479.xla
Detection ratio: 12 / 53
Analysis date: 2017-01-30 18:32:58 UTC ( 1 month, 3 weeks ago ) View latest
Antivirus Result Update
AegisLab Vba.Gen!c 20170130
Arcabit HEUR.VBA.Trojan.d 20170130
ClamAV Xls.Dropper.Agent-1476923 20170130
Cyren X97M/DownldExe 20170130
F-Prot New or modified X97M/DownldExe 20170130
Fortinet WM/Agent.D28E!tr 20170130
Jiangmin MSWord/Downloader.h 20170130
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi 20170130
Qihoo-360 heur.macro.download.gen 20170130
Rising Heur.Macro.Run.a (classic) 20170130
Tencent Heur.MSWord.Downloader.d 20170130
TrendMicro HEUR_VBA.E 20170130
Ad-Aware 20170130
AhnLab-V3 20170130
Alibaba 20170122
ALYac 20170130
Antiy-AVL 20170130
Avast 20170130
AVG 20170130
Avira (no cloud) 20170130
AVware 20170130
Baidu 20170125
BitDefender 20170130
Bkav 20170123
CAT-QuickHeal 20170130
CMC 20170130
Comodo 20170130
CrowdStrike Falcon (ML) 20161024
DrWeb 20170130
Emsisoft 20170130
ESET-NOD32 20170130
F-Secure 20170130
GData 20170130
Ikarus 20170130
Invincea 20170111
K7AntiVirus 20170130
K7GW 20170130
Kaspersky 20170130
Kingsoft 20170130
Malwarebytes 20170130
McAfee 20170130
McAfee-GW-Edition 20170130
Microsoft 20170130
eScan 20170130
nProtect 20170130
Panda 20170130
Sophos 20170130
SUPERAntiSpyware 20170130
Symantec 20170129
TheHacker 20170129
Trustlook 20170130
VBA32 20170130
VIPRE 20170130
ViRobot 20170130
WhiteArmor 20170123
Yandex 20170130
Zillya 20170130
Zoner 20170130
The file being studied follows the Compound Document File format! More specifically, it is a MS Excel Spreadsheet file.
Commonly abused properties
The studied file makes use of macros, a macro is a series of commands and instructions that you group together as a single command to accomplish a task automatically. Macros are often abused to perform malicious tasks when working with a document.
Automatically runs commands or instructions when the file is opened.
Automatically runs commands or instructions when the file is closed.
May read system environment variables.
May open a file.
May write to a file.
May perform operations with other files.
May copy a file.
May create additional files.
May try to run other files, shell commands or applications.
May attempt to create directories.
May create OLE objects.
May enumerate open windows.
May execute code from Dynamically Linked Libraries.
May try to download additional files from the Internet.
May try to interact with other applications, for example, by sending key strokes.
Seems to contain deobfuscation code.
Interacts with the Windows Registry.
Summary
last_author
\ufffd\ufffd\ufffd\ufffd\ufffd
creation_datetime
2016-06-22 15:10:06
title
\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd (Word, Excel, TXT) \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd Excel
author
EducatedFool
last_saved
2016-06-22 15:10:12
comments
==== http://ExcelVBA.ru/ =====\r\n \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd Excel \r\nICQ: 5836318 Skype: ExcelVBA.ru\r\n======================
revision_number
2479
application_name
AddinUpdater
code_page
Cyrillic
Document summary
version
917504
company
http://excelvba.ru/
code_page
Cyrillic
OLE Streams
name
Root Entry
clsid
00020820-0000-0000-c000-000000000046
type_literal
root
clsid_literal
MS Excel
sid
0
size
116928
type_literal
stream
sid
250
name
\x05DocumentSummaryInformation
size
536
type_literal
stream
sid
249
name
\x05SummaryInformation
size
476
type_literal
stream
sid
1
name
Workbook
size
13915
type_literal
stream
sid
235
name
_VBA_PROJECT_CUR/F_About/\x01CompObj
size
97
type_literal
stream
sid
236
name
_VBA_PROJECT_CUR/F_About/\x03VBFrame
size
291
type_literal
stream
sid
196
name
_VBA_PROJECT_CUR/F_About/f
size
207
type_literal
stream
sid
234
name
_VBA_PROJECT_CUR/F_About/i02/\x01CompObj
size
115
type_literal
stream
sid
199
name
_VBA_PROJECT_CUR/F_About/i02/f
size
1148
type_literal
stream
sid
205
name
_VBA_PROJECT_CUR/F_About/i02/i04/\x01CompObj
size
110
type_literal
stream
sid
203
name
_VBA_PROJECT_CUR/F_About/i02/i04/f
size
1008
type_literal
stream
sid
204
name
_VBA_PROJECT_CUR/F_About/i02/i04/o
size
7372
type_literal
stream
sid
209
name
_VBA_PROJECT_CUR/F_About/i02/i05/\x01CompObj
size
110
type_literal
stream
sid
207
name
_VBA_PROJECT_CUR/F_About/i02/i05/f
size
660
type_literal
stream
sid
208
name
_VBA_PROJECT_CUR/F_About/i02/i05/o
size
1676
type_literal
stream
sid
217
name
_VBA_PROJECT_CUR/F_About/i02/i12/\x01CompObj
size
110
type_literal
stream
sid
211
name
_VBA_PROJECT_CUR/F_About/i02/i12/f
size
444
type_literal
stream
sid
216
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/\x01CompObj
size
112
type_literal
stream
sid
214
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/f
size
381
type_literal
stream
sid
215
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/o
size
1038
type_literal
stream
sid
212
name
_VBA_PROJECT_CUR/F_About/i02/i12/o
size
620
type_literal
stream
sid
221
name
_VBA_PROJECT_CUR/F_About/i02/i13/\x01CompObj
size
110
type_literal
stream
sid
219
name
_VBA_PROJECT_CUR/F_About/i02/i13/f
size
224
type_literal
stream
sid
220
name
_VBA_PROJECT_CUR/F_About/i02/i13/o
size
248
type_literal
stream
sid
225
name
_VBA_PROJECT_CUR/F_About/i02/i15/\x01CompObj
size
110
type_literal
stream
sid
223
name
_VBA_PROJECT_CUR/F_About/i02/i15/f
size
908
type_literal
stream
sid
224
name
_VBA_PROJECT_CUR/F_About/i02/i15/o
size
1268
type_literal
stream
sid
233
name
_VBA_PROJECT_CUR/F_About/i02/i97/\x01CompObj
size
110
type_literal
stream
sid
227
name
_VBA_PROJECT_CUR/F_About/i02/i97/f
size
416
type_literal
stream
sid
232
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/\x01CompObj
size
112
type_literal
stream
sid
230
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/f
size
341
type_literal
stream
sid
231
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/o
size
304
type_literal
stream
sid
228
name
_VBA_PROJECT_CUR/F_About/i02/i97/o
size
680
type_literal
stream
sid
200
name
_VBA_PROJECT_CUR/F_About/i02/o
size
488
type_literal
stream
sid
201
name
_VBA_PROJECT_CUR/F_About/i02/x
size
96
type_literal
stream
sid
197
name
_VBA_PROJECT_CUR/F_About/o
size
56
type_literal
stream
sid
101
name
_VBA_PROJECT_CUR/F_Greeting/\x01CompObj
size
97
type_literal
stream
sid
102
name
_VBA_PROJECT_CUR/F_Greeting/\x03VBFrame
size
411
type_literal
stream
sid
65
name
_VBA_PROJECT_CUR/F_Greeting/f
size
411
type_literal
stream
sid
100
name
_VBA_PROJECT_CUR/F_Greeting/i24/\x01CompObj
size
115
type_literal
stream
sid
68
name
_VBA_PROJECT_CUR/F_Greeting/i24/f
size
636
type_literal
stream
sid
74
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/\x01CompObj
size
110
type_literal
stream
sid
72
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/f
size
320
type_literal
stream
sid
73
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/o
size
2080
type_literal
stream
sid
91
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/\x01CompObj
size
110
type_literal
stream
sid
76
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/f
size
204
type_literal
stream
sid
90
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/\x01CompObj
size
115
type_literal
stream
sid
79
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/f
size
176
type_literal
stream
sid
85
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/\x01CompObj
size
110
type_literal
stream
sid
83
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/f
size
136
type_literal
stream
sid
84
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/o
size
15276
type_literal
stream
sid
89
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/\x01CompObj
size
110
type_literal
stream
sid
87
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/f
size
136
type_literal
stream
sid
88
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/o
size
12669
type_literal
stream
sid
80
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/o
size
180
type_literal
stream
sid
81
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/x
size
48
type_literal
stream
sid
77
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/o
size
1254
type_literal
stream
sid
95
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/\x01CompObj
size
110
type_literal
stream
sid
93
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/f
size
472
type_literal
stream
sid
94
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/o
size
11648
type_literal
stream
sid
99
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/\x01CompObj
size
110
type_literal
stream
sid
97
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/f
size
584
type_literal
stream
sid
98
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/o
size
2192
type_literal
stream
sid
69
name
_VBA_PROJECT_CUR/F_Greeting/i24/o
size
220
type_literal
stream
sid
70
name
_VBA_PROJECT_CUR/F_Greeting/i24/x
size
72
type_literal
stream
sid
66
name
_VBA_PROJECT_CUR/F_Greeting/o
size
620
type_literal
stream
sid
62
name
_VBA_PROJECT_CUR/F_Progress/\x01CompObj
size
97
type_literal
stream
sid
63
name
_VBA_PROJECT_CUR/F_Progress/\x03VBFrame
size
292
type_literal
stream
sid
60
name
_VBA_PROJECT_CUR/F_Progress/f
size
479
type_literal
stream
sid
61
name
_VBA_PROJECT_CUR/F_Progress/o
size
380
type_literal
stream
sid
245
name
_VBA_PROJECT_CUR/F_SelectTable/\x01CompObj
size
97
type_literal
stream
sid
246
name
_VBA_PROJECT_CUR/F_SelectTable/\x03VBFrame
size
362
type_literal
stream
sid
243
name
_VBA_PROJECT_CUR/F_SelectTable/f
size
1215
type_literal
stream
sid
244
name
_VBA_PROJECT_CUR/F_SelectTable/o
size
1934
type_literal
stream
sid
193
name
_VBA_PROJECT_CUR/F_Settings/\x01CompObj
size
97
type_literal
stream
sid
194
name
_VBA_PROJECT_CUR/F_Settings/\x03VBFrame
size
339
type_literal
stream
sid
104
name
_VBA_PROJECT_CUR/F_Settings/f
size
963
type_literal
stream
sid
114
name
_VBA_PROJECT_CUR/F_Settings/i02/\x01CompObj
size
115
type_literal
stream
sid
107
name
_VBA_PROJECT_CUR/F_Settings/i02/f
size
332
type_literal
stream
sid
138
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/\x01CompObj
size
110
type_literal
stream
sid
136
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/f
size
1492
type_literal
stream
sid
137
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/o
size
3684
type_literal
stream
sid
135
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/\x01CompObj
size
110
type_literal
stream
sid
133
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/f
size
1140
type_literal
stream
sid
134
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/o
size
3650
type_literal
stream
sid
132
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/\x01CompObj
size
110
type_literal
stream
sid
129
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/f
size
120
type_literal
stream
sid
165
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/\x01CompObj
size
115
type_literal
stream
sid
161
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/f
size
192
type_literal
stream
sid
179
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/\x01CompObj
size
110
type_literal
stream
sid
177
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/f
size
956
type_literal
stream
sid
178
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/o
size
2704
type_literal
stream
sid
176
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/\x01CompObj
size
110
type_literal
stream
sid
174
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/f
size
636
type_literal
stream
sid
175
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/o
size
1972
type_literal
stream
sid
162
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/o
size
336
type_literal
stream
sid
166
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/x
size
48
type_literal
stream
sid
130
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/o
size
0
type_literal
stream
sid
128
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/\x01CompObj
size
110
type_literal
stream
sid
122
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/f
size
3476
type_literal
stream
sid
160
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/\x01CompObj
size
112
type_literal
stream
sid
158
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/f
size
541
type_literal
stream
sid
159
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/o
size
412
type_literal
stream
sid
157
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/\x01CompObj
size
112
type_literal
stream
sid
155
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/f
size
877
type_literal
stream
sid
156
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/o
size
3156
type_literal
stream
sid
154
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/\x01CompObj
size
112
type_literal
stream
sid
152
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/f
size
601
type_literal
stream
sid
153
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/o
size
1740
type_literal
stream
sid
151
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/\x01CompObj
size
112
type_literal
stream
sid
149
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/f
size
713
type_literal
stream
sid
150
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/o
size
2162
type_literal
stream
sid
123
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/o
size
12154
type_literal
stream
sid
121
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/\x01CompObj
size
110
type_literal
stream
sid
116
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/f
size
296
type_literal
stream
sid
148
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/\x01CompObj
size
112
type_literal
stream
sid
146
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/f
size
425
type_literal
stream
sid
147
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/o
size
528
type_literal
stream
sid
145
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/\x01CompObj
size
112
type_literal
stream
sid
142
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/f
size
245
type_literal
stream
sid
172
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/\x01CompObj
size
115
type_literal
stream
sid
167
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/f
size
261
type_literal
stream
sid
189
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/\x01CompObj
size
110
type_literal
stream
sid
187
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/f
size
448
type_literal
stream
sid
188
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/o
size
648
type_literal
stream
sid
186
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/\x01CompObj
size
110
type_literal
stream
sid
183
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/f
size
360
type_literal
stream
sid
192
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/\x01CompObj
size
112
type_literal
stream
sid
190
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/f
size
445
type_literal
stream
sid
191
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/o
size
644
type_literal
stream
sid
184
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/o
size
780
type_literal
stream
sid
182
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/\x01CompObj
size
110
type_literal
stream
sid
180
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/f
size
56
type_literal
stream
sid
181
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/o
size
0
type_literal
stream
sid
168
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/o
size
288
type_literal
stream
sid
173
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/x
size
60
type_literal
stream
sid
143
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/o
size
0
type_literal
stream
sid
141
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/\x01CompObj
size
112
type_literal
stream
sid
139
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/f
size
637
type_literal
stream
sid
140
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/o
size
1080
type_literal
stream
sid
117
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/o
size
1024
type_literal
stream
sid
108
name
_VBA_PROJECT_CUR/F_Settings/i02/o
size
388
type_literal
stream
sid
115
name
_VBA_PROJECT_CUR/F_Settings/i02/x
size
84
type_literal
stream
sid
105
name
_VBA_PROJECT_CUR/F_Settings/o
size
1305
type_literal
stream
sid
240
name
_VBA_PROJECT_CUR/F_Templates/\x01CompObj
size
97
type_literal
stream
sid
241
name
_VBA_PROJECT_CUR/F_Templates/\x03VBFrame
size
315
type_literal
stream
sid
238
name
_VBA_PROJECT_CUR/F_Templates/f
size
987
type_literal
stream
sid
239
name
_VBA_PROJECT_CUR/F_Templates/o
size
1012
type_literal
stream
sid
248
name
_VBA_PROJECT_CUR/PROJECT
size
1951
type_literal
stream
sid
247
name
_VBA_PROJECT_CUR/PROJECTwm
size
956
type_literal
stream
sid
47
type
macro
name
_VBA_PROJECT_CUR/VBA/AddinSettings
size
9234
type_literal
stream
sid
14
type
macro
name
_VBA_PROJECT_CUR/VBA/FWF
size
26147
type_literal
stream
sid
33
type
macro
name
_VBA_PROJECT_CUR/VBA/F_About
size
34914
type_literal
stream
sid
29
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Greeting
size
10218
type_literal
stream
sid
21
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Progress
size
4552
type_literal
stream
sid
43
type
macro
name
_VBA_PROJECT_CUR/VBA/F_SelectTable
size
9090
type_literal
stream
sid
20
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Settings
size
22985
type_literal
stream
sid
42
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Templates
size
9776
type_literal
stream
sid
37
type
macro
name
_VBA_PROJECT_CUR/VBA/Letter
size
9488
type_literal
stream
sid
38
type
macro
name
_VBA_PROJECT_CUR/VBA/Letters
size
12165
type_literal
stream
sid
24
type
macro
name
_VBA_PROJECT_CUR/VBA/ProgressIndicator
size
20568
type_literal
stream
sid
53
type
macro
name
_VBA_PROJECT_CUR/VBA/SpecialControl
size
16740
type_literal
stream
sid
4
type
macro
name
_VBA_PROJECT_CUR/VBA/ThisWB
size
4793
type_literal
stream
sid
55
name
_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
size
40144
type_literal
stream
sid
57
name
_VBA_PROJECT_CUR/VBA/__SRP_0
size
40535
type_literal
stream
sid
58
name
_VBA_PROJECT_CUR/VBA/__SRP_1
size
8403
type_literal
stream
sid
18
name
_VBA_PROJECT_CUR/VBA/__SRP_10
size
32448
type_literal
stream
sid
19
name
_VBA_PROJECT_CUR/VBA/__SRP_11
size
4902
type_literal
stream
sid
45
name
_VBA_PROJECT_CUR/VBA/__SRP_12
size
632
type_literal
stream
sid
46
name
_VBA_PROJECT_CUR/VBA/__SRP_13
size
525
type_literal
stream
sid
30
name
_VBA_PROJECT_CUR/VBA/__SRP_14
size
5440
type_literal
stream
sid
31
name
_VBA_PROJECT_CUR/VBA/__SRP_15
size
680
type_literal
stream
sid
9
name
_VBA_PROJECT_CUR/VBA/__SRP_16
size
4626
type_literal
stream
sid
10
name
_VBA_PROJECT_CUR/VBA/__SRP_17
size
214
type_literal
stream
sid
34
name
_VBA_PROJECT_CUR/VBA/__SRP_18
size
15732
type_literal
stream
sid
35
name
_VBA_PROJECT_CUR/VBA/__SRP_19
size
1948
type_literal
stream
sid
40
name
_VBA_PROJECT_CUR/VBA/__SRP_1a
size
338
type_literal
stream
sid
41
name
_VBA_PROJECT_CUR/VBA/__SRP_1b
size
1527
type_literal
stream
sid
12
name
_VBA_PROJECT_CUR/VBA/__SRP_2
size
3318
type_literal
stream
sid
13
name
_VBA_PROJECT_CUR/VBA/__SRP_3
size
1755
type_literal
stream
sid
15
name
_VBA_PROJECT_CUR/VBA/__SRP_4
size
2406
type_literal
stream
sid
16
name
_VBA_PROJECT_CUR/VBA/__SRP_5
size
1501
type_literal
stream
sid
5
name
_VBA_PROJECT_CUR/VBA/__SRP_6
size
888
type_literal
stream
sid
6
name
_VBA_PROJECT_CUR/VBA/__SRP_7
size
260
type_literal
stream
sid
25
name
_VBA_PROJECT_CUR/VBA/__SRP_8
size
2662
type_literal
stream
sid
26
name
_VBA_PROJECT_CUR/VBA/__SRP_9
size
1906
type_literal
stream
sid
22
name
_VBA_PROJECT_CUR/VBA/__SRP_a
size
1392
type_literal
stream
sid
23
name
_VBA_PROJECT_CUR/VBA/__SRP_b
size
302
type_literal
stream
sid
51
name
_VBA_PROJECT_CUR/VBA/__SRP_c
size
542
type_literal
stream
sid
52
name
_VBA_PROJECT_CUR/VBA/__SRP_d
size
433
type_literal
stream
sid
48
name
_VBA_PROJECT_CUR/VBA/__SRP_e
size
1830
type_literal
stream
sid
49
name
_VBA_PROJECT_CUR/VBA/__SRP_f
size
643
type_literal
stream
sid
56
name
_VBA_PROJECT_CUR/VBA/dir
size
2384
type_literal
stream
sid
17
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_About
size
178015
type_literal
stream
sid
27
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_BaseForSheetFunctions
size
82966
type_literal
stream
sid
28
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_CommonFunctions
size
7441
type_literal
stream
sid
50
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Documents
size
37835
type_literal
stream
sid
54
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_FieldCodes
size
21820
type_literal
stream
sid
11
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Functions
size
65300
type_literal
stream
sid
44
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_InsertObjects
size
19405
type_literal
stream
sid
8
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Main
size
19913
type_literal
stream
sid
36
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_SendMail
size
2926
type_literal
stream
sid
39
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_SheetFunctions
size
18881
type_literal
stream
sid
32
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_TestProgram
size
11745
type_literal
stream
sid
7
type
macro (only attributes)
name
_VBA_PROJECT_CUR/VBA/sh1
size
996
Macros and VBA code streams
[+] ThisWB.cls _VBA_PROJECT_CUR/VBA/ThisWB 2099 bytes
exe-pattern url-pattern auto-open obfuscated run-file
[+] mod_Main.bas _VBA_PROJECT_CUR/VBA/mod_Main 9912 bytes
url-pattern environ handle-file obfuscated open-file write-file
[+] mod_Functions.bas _VBA_PROJECT_CUR/VBA/mod_Functions 41547 bytes
exe-pattern url-pattern create-dir create-ole obfuscated open-file run-dll run-file send-keys
[+] FWF.bas _VBA_PROJECT_CUR/VBA/FWF 14026 bytes
exe-pattern url-pattern create-dir create-file create-ole download enum-windows environ open-file run-dll run-file write-file
[+] mod_About.bas _VBA_PROJECT_CUR/VBA/mod_About 81965 bytes
email-pattern exe-pattern ipv4-pattern url-pattern auto-close auto-open copy-file create-dir create-file create-ole download enum-windows environ obfuscated open-file registry run-file write-file
[+] F_Settings.frm _VBA_PROJECT_CUR/VBA/F_Settings 14588 bytes
url-pattern create-ole open-file registry run-file
[+] F_Progress.frm _VBA_PROJECT_CUR/VBA/F_Progress 1624 bytes
url-pattern
[+] ProgressIndicator.cls _VBA_PROJECT_CUR/VBA/ProgressIndicator 10338 bytes
url-pattern create-file create-ole environ run-file write-file
[+] mod_BaseForSheetFunctions.bas _VBA_PROJECT_CUR/VBA/mod_BaseForSheetFunctions 62475 bytes
url-pattern obfuscated
[+] mod_CommonFunctions.bas _VBA_PROJECT_CUR/VBA/mod_CommonFunctions 4428 bytes
url-pattern obfuscated
[+] F_Greeting.frm _VBA_PROJECT_CUR/VBA/F_Greeting 3810 bytes
url-pattern
[+] mod_TestProgram.bas _VBA_PROJECT_CUR/VBA/mod_TestProgram 6562 bytes
url-pattern open-file
[+] F_About.frm _VBA_PROJECT_CUR/VBA/F_About 15048 bytes
email-pattern url-pattern create-ole environ run-file
[+] mod_SendMail.bas _VBA_PROJECT_CUR/VBA/mod_SendMail 1214 bytes
url-pattern create-ole registry run-file
[+] Letter.cls _VBA_PROJECT_CUR/VBA/Letter 4878 bytes
create-ole environ obfuscated open-file run-file write-file
[+] Letters.cls _VBA_PROJECT_CUR/VBA/Letters 7220 bytes
exe-pattern url-pattern create-file create-ole environ obfuscated run-file send-keys write-file
[+] mod_SheetFunctions.bas _VBA_PROJECT_CUR/VBA/mod_SheetFunctions 13283 bytes
url-pattern
[+] F_Templates.frm _VBA_PROJECT_CUR/VBA/F_Templates 5338 bytes
exe-pattern url-pattern create-ole run-file
[+] F_SelectTable.frm _VBA_PROJECT_CUR/VBA/F_SelectTable 5432 bytes
enum-windows open-file
[+] mod_InsertObjects.bas _VBA_PROJECT_CUR/VBA/mod_InsertObjects 13338 bytes
url-pattern open-file
[+] AddinSettings.cls _VBA_PROJECT_CUR/VBA/AddinSettings 3008 bytes
url-pattern
[+] mod_Documents.bas _VBA_PROJECT_CUR/VBA/mod_Documents 24739 bytes
exe-pattern url-pattern create-dir create-ole enum-windows send-keys
[+] SpecialControl.cls _VBA_PROJECT_CUR/VBA/SpecialControl 10157 bytes
url-pattern obfuscated send-keys
[+] mod_FieldCodes.bas _VBA_PROJECT_CUR/VBA/mod_FieldCodes 13378 bytes
url-pattern create-ole obfuscated open-file
ExifTool file metadata
SharedDoc
No

Author
EducatedFool

CodePage
Windows Cyrillic

LinksUpToDate
No

HeadingPairs
, 1

CreateDate
2016:06:22 14:10:06

ICQ
58-36-318

CompObjUserType
Microsoft Forms 2.0 Form

ModifyDate
2016:06:22 14:10:12

TitleOfParts
1

Company
http://excelvba.ru/

Title
(Word, Excel, TXT) Excel

HyperlinksChanged
No

ScaleCrop
No

RevisionNumber
2479

MIMEType
image/vnd.fpx

FileType
FPX

AppVersion
14.0

Comments
==== http://ExcelVBA.ru/ =====

Security
None

Software
AddinUpdater

CompObjUserTypeLen
25

FileTypeExtension
fpx

Skype
ExcelVBA.ru

Compressed bundles
File identification
MD5 50f802fd5801882461f7d54729576c1e
SHA1 fa32bb359c6c6002f0a3c2a42e153a7eb3845860
SHA256 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c
ssdeep
24576:/kFYF7TO09urobdn/xMuT8gvhs8flh9hFovxqeLyMQQsFJ17bjrS19xxy3RqMh9Y:hv0ro5rJ

File size 1.0 MB ( 1054208 bytes )
File type MS Excel Spreadsheet
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1251, Title: ��������� ���������� ���������� (Word, Excel, TXT) ������� �� ������� Excel, Author: EducatedFool, Comments: ==== http://ExcelVBA.ru/ =====� ���������� �������� ��� Excel ��ICQ: 5836318 Skype: ExcelVBA.ru, Last Saved By: �����, Revision Number: 2479, Name of Creating Application: AddinUpdater, Create Time/Date: Tue Jun 21 14:10:06 2016, Last Saved Time/Date: Tue Jun 21 14:10:12 2016, Security: 0

TrID Microsoft Excel sheet (36.8%)
Microsoft Excel sheet (alternate) (30.0%)
Microsoft Word document (old ver.) (23.3%)
Generic OLE2 / Multistream Compound File (9.8%)
Tags
obfuscated open-file email-pattern download exe-pattern url-pattern macros environ ipv4-pattern run-file auto-open handle-file copy-file registry write-file create-ole enum-windows create-dir create-file run-dll auto-close send-keys xls

VirusTotal metadata
First submission 2016-06-26 16:13:11 UTC ( 9 months ago )
Last submission 2017-03-22 07:48:14 UTC ( 3 days, 23 hours ago )
File names 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c.exe
FillDocuments_v2479 (2).xla
FillDocuments_v2479[1].xla
FillDocuments_v2479 (1).xla
FillDocuments_v2479.xla
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!