× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c
File name: FillDocuments_v2479.xla
Detection ratio: 12 / 53
Analysis date: 2017-01-30 18:32:58 UTC ( 6 months, 2 weeks ago ) View latest
Antivirus Result Update
AegisLab Vba.Gen!c 20170130
Arcabit HEUR.VBA.Trojan.d 20170130
ClamAV Xls.Dropper.Agent-1476923 20170130
Cyren X97M/DownldExe 20170130
F-Prot New or modified X97M/DownldExe 20170130
Fortinet WM/Agent.D28E!tr 20170130
Jiangmin MSWord/Downloader.h 20170130
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi 20170130
Qihoo-360 heur.macro.download.gen 20170130
Rising Heur.Macro.Run.a (classic) 20170130
Tencent Heur.MSWord.Downloader.d 20170130
TrendMicro HEUR_VBA.E 20170130
Ad-Aware 20170130
AhnLab-V3 20170130
Alibaba 20170122
ALYac 20170130
Antiy-AVL 20170130
Avast 20170130
AVG 20170130
Avira (no cloud) 20170130
AVware 20170130
Baidu 20170125
BitDefender 20170130
Bkav 20170123
CAT-QuickHeal 20170130
CMC 20170130
Comodo 20170130
CrowdStrike Falcon (ML) 20161024
DrWeb 20170130
Emsisoft 20170130
ESET-NOD32 20170130
F-Secure 20170130
GData 20170130
Ikarus 20170130
Sophos ML 20170111
K7AntiVirus 20170130
K7GW 20170130
Kaspersky 20170130
Kingsoft 20170130
Malwarebytes 20170130
McAfee 20170130
McAfee-GW-Edition 20170130
Microsoft 20170130
eScan 20170130
nProtect 20170130
Panda 20170130
Sophos AV 20170130
SUPERAntiSpyware 20170130
Symantec 20170129
TheHacker 20170129
Trustlook 20170130
VBA32 20170130
VIPRE 20170130
ViRobot 20170130
WhiteArmor 20170123
Yandex 20170130
Zillya 20170130
Zoner 20170130
The file being studied follows the Compound Document File format! More specifically, it is a MS Excel Spreadsheet file.
Commonly abused properties
The studied file makes use of macros, a macro is a series of commands and instructions that you group together as a single command to accomplish a task automatically. Macros are often abused to perform malicious tasks when working with a document.
Automatically runs commands or instructions when the file is opened.
Automatically runs commands or instructions when the file is closed.
May read system environment variables.
May open a file.
May write to a file.
May perform operations with other files.
May copy a file.
May create additional files.
May try to run other files, shell commands or applications.
May attempt to create directories.
May create OLE objects.
May enumerate open windows.
May execute code from Dynamically Linked Libraries.
May try to download additional files from the Internet.
May try to interact with other applications, for example, by sending key strokes.
Seems to contain deobfuscation code.
Interacts with the Windows Registry.
Summary
last_author
\ufffd\ufffd\ufffd\ufffd\ufffd
creation_datetime
2016-06-22 15:10:06
author
EducatedFool
title
\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd (Word, Excel, TXT) \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd Excel
comments
==== http://ExcelVBA.ru/ =====\r\n \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd \ufffd\ufffd\ufffd Excel \r\nICQ: 5836318 Skype: ExcelVBA.ru\r\n======================
last_saved
2016-06-22 15:10:12
revision_number
2479
application_name
AddinUpdater
code_page
Cyrillic
Document summary
version
917504
company
http://excelvba.ru/
code_page
Cyrillic
OLE Streams
name
Root Entry
clsid
00020820-0000-0000-c000-000000000046
type_literal
root
clsid_literal
MS Excel
sid
0
size
116928
type_literal
stream
size
536
name
\x05DocumentSummaryInformation
sid
250
type_literal
stream
size
476
name
\x05SummaryInformation
sid
249
type_literal
stream
size
13915
name
Workbook
sid
1
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_About/\x01CompObj
sid
235
type_literal
stream
size
291
name
_VBA_PROJECT_CUR/F_About/\x03VBFrame
sid
236
type_literal
stream
size
207
name
_VBA_PROJECT_CUR/F_About/f
sid
196
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_About/i02/\x01CompObj
sid
234
type_literal
stream
size
1148
name
_VBA_PROJECT_CUR/F_About/i02/f
sid
199
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i04/\x01CompObj
sid
205
type_literal
stream
size
1008
name
_VBA_PROJECT_CUR/F_About/i02/i04/f
sid
203
type_literal
stream
size
7372
name
_VBA_PROJECT_CUR/F_About/i02/i04/o
sid
204
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i05/\x01CompObj
sid
209
type_literal
stream
size
660
name
_VBA_PROJECT_CUR/F_About/i02/i05/f
sid
207
type_literal
stream
size
1676
name
_VBA_PROJECT_CUR/F_About/i02/i05/o
sid
208
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i12/\x01CompObj
sid
217
type_literal
stream
size
444
name
_VBA_PROJECT_CUR/F_About/i02/i12/f
sid
211
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/\x01CompObj
sid
216
type_literal
stream
size
381
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/f
sid
214
type_literal
stream
size
1038
name
_VBA_PROJECT_CUR/F_About/i02/i12/i65/o
sid
215
type_literal
stream
size
620
name
_VBA_PROJECT_CUR/F_About/i02/i12/o
sid
212
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i13/\x01CompObj
sid
221
type_literal
stream
size
224
name
_VBA_PROJECT_CUR/F_About/i02/i13/f
sid
219
type_literal
stream
size
248
name
_VBA_PROJECT_CUR/F_About/i02/i13/o
sid
220
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i15/\x01CompObj
sid
225
type_literal
stream
size
908
name
_VBA_PROJECT_CUR/F_About/i02/i15/f
sid
223
type_literal
stream
size
1268
name
_VBA_PROJECT_CUR/F_About/i02/i15/o
sid
224
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_About/i02/i97/\x01CompObj
sid
233
type_literal
stream
size
416
name
_VBA_PROJECT_CUR/F_About/i02/i97/f
sid
227
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/\x01CompObj
sid
232
type_literal
stream
size
341
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/f
sid
230
type_literal
stream
size
304
name
_VBA_PROJECT_CUR/F_About/i02/i97/i99/o
sid
231
type_literal
stream
size
680
name
_VBA_PROJECT_CUR/F_About/i02/i97/o
sid
228
type_literal
stream
size
488
name
_VBA_PROJECT_CUR/F_About/i02/o
sid
200
type_literal
stream
size
96
name
_VBA_PROJECT_CUR/F_About/i02/x
sid
201
type_literal
stream
size
56
name
_VBA_PROJECT_CUR/F_About/o
sid
197
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_Greeting/\x01CompObj
sid
101
type_literal
stream
size
411
name
_VBA_PROJECT_CUR/F_Greeting/\x03VBFrame
sid
102
type_literal
stream
size
411
name
_VBA_PROJECT_CUR/F_Greeting/f
sid
65
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_Greeting/i24/\x01CompObj
sid
100
type_literal
stream
size
636
name
_VBA_PROJECT_CUR/F_Greeting/i24/f
sid
68
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/\x01CompObj
sid
74
type_literal
stream
size
320
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/f
sid
72
type_literal
stream
size
2080
name
_VBA_PROJECT_CUR/F_Greeting/i24/i26/o
sid
73
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/\x01CompObj
sid
91
type_literal
stream
size
204
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/f
sid
76
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/\x01CompObj
sid
90
type_literal
stream
size
176
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/f
sid
79
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/\x01CompObj
sid
85
type_literal
stream
size
136
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/f
sid
83
type_literal
stream
size
15276
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i41/o
sid
84
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/\x01CompObj
sid
89
type_literal
stream
size
136
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/f
sid
87
type_literal
stream
size
12669
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/i42/o
sid
88
type_literal
stream
size
180
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/o
sid
80
type_literal
stream
size
48
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/i39/x
sid
81
type_literal
stream
size
1254
name
_VBA_PROJECT_CUR/F_Greeting/i24/i27/o
sid
77
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/\x01CompObj
sid
95
type_literal
stream
size
472
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/f
sid
93
type_literal
stream
size
11648
name
_VBA_PROJECT_CUR/F_Greeting/i24/i28/o
sid
94
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/\x01CompObj
sid
99
type_literal
stream
size
584
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/f
sid
97
type_literal
stream
size
2192
name
_VBA_PROJECT_CUR/F_Greeting/i24/i64/o
sid
98
type_literal
stream
size
220
name
_VBA_PROJECT_CUR/F_Greeting/i24/o
sid
69
type_literal
stream
size
72
name
_VBA_PROJECT_CUR/F_Greeting/i24/x
sid
70
type_literal
stream
size
620
name
_VBA_PROJECT_CUR/F_Greeting/o
sid
66
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_Progress/\x01CompObj
sid
62
type_literal
stream
size
292
name
_VBA_PROJECT_CUR/F_Progress/\x03VBFrame
sid
63
type_literal
stream
size
479
name
_VBA_PROJECT_CUR/F_Progress/f
sid
60
type_literal
stream
size
380
name
_VBA_PROJECT_CUR/F_Progress/o
sid
61
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_SelectTable/\x01CompObj
sid
245
type_literal
stream
size
362
name
_VBA_PROJECT_CUR/F_SelectTable/\x03VBFrame
sid
246
type_literal
stream
size
1215
name
_VBA_PROJECT_CUR/F_SelectTable/f
sid
243
type_literal
stream
size
1934
name
_VBA_PROJECT_CUR/F_SelectTable/o
sid
244
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_Settings/\x01CompObj
sid
193
type_literal
stream
size
339
name
_VBA_PROJECT_CUR/F_Settings/\x03VBFrame
sid
194
type_literal
stream
size
963
name
_VBA_PROJECT_CUR/F_Settings/f
sid
104
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_Settings/i02/\x01CompObj
sid
114
type_literal
stream
size
332
name
_VBA_PROJECT_CUR/F_Settings/i02/f
sid
107
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/\x01CompObj
sid
138
type_literal
stream
size
1492
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/f
sid
136
type_literal
stream
size
3684
name
_VBA_PROJECT_CUR/F_Settings/i02/i125/o
sid
137
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/\x01CompObj
sid
135
type_literal
stream
size
1140
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/f
sid
133
type_literal
stream
size
3650
name
_VBA_PROJECT_CUR/F_Settings/i02/i126/o
sid
134
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/\x01CompObj
sid
132
type_literal
stream
size
120
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/f
sid
129
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/\x01CompObj
sid
165
type_literal
stream
size
192
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/f
sid
161
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/\x01CompObj
sid
179
type_literal
stream
size
956
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/f
sid
177
type_literal
stream
size
2704
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i341/o
sid
178
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/\x01CompObj
sid
176
type_literal
stream
size
636
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/f
sid
174
type_literal
stream
size
1972
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/i342/o
sid
175
type_literal
stream
size
336
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/o
sid
162
type_literal
stream
size
48
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/i339/x
sid
166
type_literal
stream
size
0
name
_VBA_PROJECT_CUR/F_Settings/i02/i133/o
sid
130
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/\x01CompObj
sid
128
type_literal
stream
size
3476
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/f
sid
122
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/\x01CompObj
sid
160
type_literal
stream
size
541
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/f
sid
158
type_literal
stream
size
412
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i238/o
sid
159
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/\x01CompObj
sid
157
type_literal
stream
size
877
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/f
sid
155
type_literal
stream
size
3156
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i256/o
sid
156
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/\x01CompObj
sid
154
type_literal
stream
size
601
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/f
sid
152
type_literal
stream
size
1740
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i265/o
sid
153
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/\x01CompObj
sid
151
type_literal
stream
size
713
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/f
sid
149
type_literal
stream
size
2162
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/i362/o
sid
150
type_literal
stream
size
12154
name
_VBA_PROJECT_CUR/F_Settings/i02/i149/o
sid
123
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/\x01CompObj
sid
121
type_literal
stream
size
296
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/f
sid
116
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/\x01CompObj
sid
148
type_literal
stream
size
425
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/f
sid
146
type_literal
stream
size
528
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i209/o
sid
147
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/\x01CompObj
sid
145
type_literal
stream
size
245
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/f
sid
142
type_literal
stream
size
115
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/\x01CompObj
sid
172
type_literal
stream
size
261
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/f
sid
167
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/\x01CompObj
sid
189
type_literal
stream
size
448
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/f
sid
187
type_literal
stream
size
648
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i207/o
sid
188
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/\x01CompObj
sid
186
type_literal
stream
size
360
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/f
sid
183
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/\x01CompObj
sid
192
type_literal
stream
size
445
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/f
sid
190
type_literal
stream
size
644
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/i288/o
sid
191
type_literal
stream
size
780
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i208/o
sid
184
type_literal
stream
size
110
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/\x01CompObj
sid
182
type_literal
stream
size
56
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/f
sid
180
type_literal
stream
size
0
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/i211/o
sid
181
type_literal
stream
size
288
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/o
sid
168
type_literal
stream
size
60
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/i205/x
sid
173
type_literal
stream
size
0
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i210/o
sid
143
type_literal
stream
size
112
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/\x01CompObj
sid
141
type_literal
stream
size
637
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/f
sid
139
type_literal
stream
size
1080
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/i219/o
sid
140
type_literal
stream
size
1024
name
_VBA_PROJECT_CUR/F_Settings/i02/i195/o
sid
117
type_literal
stream
size
388
name
_VBA_PROJECT_CUR/F_Settings/i02/o
sid
108
type_literal
stream
size
84
name
_VBA_PROJECT_CUR/F_Settings/i02/x
sid
115
type_literal
stream
size
1305
name
_VBA_PROJECT_CUR/F_Settings/o
sid
105
type_literal
stream
size
97
name
_VBA_PROJECT_CUR/F_Templates/\x01CompObj
sid
240
type_literal
stream
size
315
name
_VBA_PROJECT_CUR/F_Templates/\x03VBFrame
sid
241
type_literal
stream
size
987
name
_VBA_PROJECT_CUR/F_Templates/f
sid
238
type_literal
stream
size
1012
name
_VBA_PROJECT_CUR/F_Templates/o
sid
239
type_literal
stream
size
1951
name
_VBA_PROJECT_CUR/PROJECT
sid
248
type_literal
stream
size
956
name
_VBA_PROJECT_CUR/PROJECTwm
sid
247
type_literal
stream
size
9234
type
macro
name
_VBA_PROJECT_CUR/VBA/AddinSettings
sid
47
type_literal
stream
size
26147
type
macro
name
_VBA_PROJECT_CUR/VBA/FWF
sid
14
type_literal
stream
size
34914
type
macro
name
_VBA_PROJECT_CUR/VBA/F_About
sid
33
type_literal
stream
size
10218
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Greeting
sid
29
type_literal
stream
size
4552
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Progress
sid
21
type_literal
stream
size
9090
type
macro
name
_VBA_PROJECT_CUR/VBA/F_SelectTable
sid
43
type_literal
stream
size
22985
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Settings
sid
20
type_literal
stream
size
9776
type
macro
name
_VBA_PROJECT_CUR/VBA/F_Templates
sid
42
type_literal
stream
size
9488
type
macro
name
_VBA_PROJECT_CUR/VBA/Letter
sid
37
type_literal
stream
size
12165
type
macro
name
_VBA_PROJECT_CUR/VBA/Letters
sid
38
type_literal
stream
size
20568
type
macro
name
_VBA_PROJECT_CUR/VBA/ProgressIndicator
sid
24
type_literal
stream
size
16740
type
macro
name
_VBA_PROJECT_CUR/VBA/SpecialControl
sid
53
type_literal
stream
size
4793
type
macro
name
_VBA_PROJECT_CUR/VBA/ThisWB
sid
4
type_literal
stream
size
40144
name
_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
sid
55
type_literal
stream
size
40535
name
_VBA_PROJECT_CUR/VBA/__SRP_0
sid
57
type_literal
stream
size
8403
name
_VBA_PROJECT_CUR/VBA/__SRP_1
sid
58
type_literal
stream
size
32448
name
_VBA_PROJECT_CUR/VBA/__SRP_10
sid
18
type_literal
stream
size
4902
name
_VBA_PROJECT_CUR/VBA/__SRP_11
sid
19
type_literal
stream
size
632
name
_VBA_PROJECT_CUR/VBA/__SRP_12
sid
45
type_literal
stream
size
525
name
_VBA_PROJECT_CUR/VBA/__SRP_13
sid
46
type_literal
stream
size
5440
name
_VBA_PROJECT_CUR/VBA/__SRP_14
sid
30
type_literal
stream
size
680
name
_VBA_PROJECT_CUR/VBA/__SRP_15
sid
31
type_literal
stream
size
4626
name
_VBA_PROJECT_CUR/VBA/__SRP_16
sid
9
type_literal
stream
size
214
name
_VBA_PROJECT_CUR/VBA/__SRP_17
sid
10
type_literal
stream
size
15732
name
_VBA_PROJECT_CUR/VBA/__SRP_18
sid
34
type_literal
stream
size
1948
name
_VBA_PROJECT_CUR/VBA/__SRP_19
sid
35
type_literal
stream
size
338
name
_VBA_PROJECT_CUR/VBA/__SRP_1a
sid
40
type_literal
stream
size
1527
name
_VBA_PROJECT_CUR/VBA/__SRP_1b
sid
41
type_literal
stream
size
3318
name
_VBA_PROJECT_CUR/VBA/__SRP_2
sid
12
type_literal
stream
size
1755
name
_VBA_PROJECT_CUR/VBA/__SRP_3
sid
13
type_literal
stream
size
2406
name
_VBA_PROJECT_CUR/VBA/__SRP_4
sid
15
type_literal
stream
size
1501
name
_VBA_PROJECT_CUR/VBA/__SRP_5
sid
16
type_literal
stream
size
888
name
_VBA_PROJECT_CUR/VBA/__SRP_6
sid
5
type_literal
stream
size
260
name
_VBA_PROJECT_CUR/VBA/__SRP_7
sid
6
type_literal
stream
size
2662
name
_VBA_PROJECT_CUR/VBA/__SRP_8
sid
25
type_literal
stream
size
1906
name
_VBA_PROJECT_CUR/VBA/__SRP_9
sid
26
type_literal
stream
size
1392
name
_VBA_PROJECT_CUR/VBA/__SRP_a
sid
22
type_literal
stream
size
302
name
_VBA_PROJECT_CUR/VBA/__SRP_b
sid
23
type_literal
stream
size
542
name
_VBA_PROJECT_CUR/VBA/__SRP_c
sid
51
type_literal
stream
size
433
name
_VBA_PROJECT_CUR/VBA/__SRP_d
sid
52
type_literal
stream
size
1830
name
_VBA_PROJECT_CUR/VBA/__SRP_e
sid
48
type_literal
stream
size
643
name
_VBA_PROJECT_CUR/VBA/__SRP_f
sid
49
type_literal
stream
size
2384
name
_VBA_PROJECT_CUR/VBA/dir
sid
56
type_literal
stream
size
178015
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_About
sid
17
type_literal
stream
size
82966
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_BaseForSheetFunctions
sid
27
type_literal
stream
size
7441
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_CommonFunctions
sid
28
type_literal
stream
size
37835
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Documents
sid
50
type_literal
stream
size
21820
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_FieldCodes
sid
54
type_literal
stream
size
65300
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Functions
sid
11
type_literal
stream
size
19405
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_InsertObjects
sid
44
type_literal
stream
size
19913
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_Main
sid
8
type_literal
stream
size
2926
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_SendMail
sid
36
type_literal
stream
size
18881
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_SheetFunctions
sid
39
type_literal
stream
size
11745
type
macro
name
_VBA_PROJECT_CUR/VBA/mod_TestProgram
sid
32
type_literal
stream
size
996
type
macro (only attributes)
name
_VBA_PROJECT_CUR/VBA/sh1
sid
7
Macros and VBA code streams
[+] ThisWB.cls _VBA_PROJECT_CUR/VBA/ThisWB 2099 bytes
exe-pattern url-pattern auto-open obfuscated run-file
[+] mod_Main.bas _VBA_PROJECT_CUR/VBA/mod_Main 9912 bytes
url-pattern environ handle-file obfuscated open-file write-file
[+] mod_Functions.bas _VBA_PROJECT_CUR/VBA/mod_Functions 41547 bytes
exe-pattern url-pattern create-dir create-ole obfuscated open-file run-dll run-file send-keys
[+] FWF.bas _VBA_PROJECT_CUR/VBA/FWF 14026 bytes
exe-pattern url-pattern create-dir create-file create-ole download enum-windows environ open-file run-dll run-file write-file
[+] mod_About.bas _VBA_PROJECT_CUR/VBA/mod_About 81965 bytes
email-pattern exe-pattern ipv4-pattern url-pattern auto-close auto-open copy-file create-dir create-file create-ole download enum-windows environ obfuscated open-file registry run-file write-file
[+] F_Settings.frm _VBA_PROJECT_CUR/VBA/F_Settings 14588 bytes
url-pattern create-ole open-file registry run-file
[+] F_Progress.frm _VBA_PROJECT_CUR/VBA/F_Progress 1624 bytes
url-pattern
[+] ProgressIndicator.cls _VBA_PROJECT_CUR/VBA/ProgressIndicator 10338 bytes
url-pattern create-file create-ole environ run-file write-file
[+] mod_BaseForSheetFunctions.bas _VBA_PROJECT_CUR/VBA/mod_BaseForSheetFunctions 62475 bytes
url-pattern obfuscated
[+] mod_CommonFunctions.bas _VBA_PROJECT_CUR/VBA/mod_CommonFunctions 4428 bytes
url-pattern obfuscated
[+] F_Greeting.frm _VBA_PROJECT_CUR/VBA/F_Greeting 3810 bytes
url-pattern
[+] mod_TestProgram.bas _VBA_PROJECT_CUR/VBA/mod_TestProgram 6562 bytes
url-pattern open-file
[+] F_About.frm _VBA_PROJECT_CUR/VBA/F_About 15048 bytes
email-pattern url-pattern create-ole environ run-file
[+] mod_SendMail.bas _VBA_PROJECT_CUR/VBA/mod_SendMail 1214 bytes
url-pattern create-ole registry run-file
[+] Letter.cls _VBA_PROJECT_CUR/VBA/Letter 4878 bytes
create-ole environ obfuscated open-file run-file write-file
[+] Letters.cls _VBA_PROJECT_CUR/VBA/Letters 7220 bytes
exe-pattern url-pattern create-file create-ole environ obfuscated run-file send-keys write-file
[+] mod_SheetFunctions.bas _VBA_PROJECT_CUR/VBA/mod_SheetFunctions 13283 bytes
url-pattern
[+] F_Templates.frm _VBA_PROJECT_CUR/VBA/F_Templates 5338 bytes
exe-pattern url-pattern create-ole run-file
[+] F_SelectTable.frm _VBA_PROJECT_CUR/VBA/F_SelectTable 5432 bytes
enum-windows open-file
[+] mod_InsertObjects.bas _VBA_PROJECT_CUR/VBA/mod_InsertObjects 13338 bytes
url-pattern open-file
[+] AddinSettings.cls _VBA_PROJECT_CUR/VBA/AddinSettings 3008 bytes
url-pattern
[+] mod_Documents.bas _VBA_PROJECT_CUR/VBA/mod_Documents 24739 bytes
exe-pattern url-pattern create-dir create-ole enum-windows send-keys
[+] SpecialControl.cls _VBA_PROJECT_CUR/VBA/SpecialControl 10157 bytes
url-pattern obfuscated send-keys
[+] mod_FieldCodes.bas _VBA_PROJECT_CUR/VBA/mod_FieldCodes 13378 bytes
url-pattern create-ole obfuscated open-file
ExifTool file metadata
SharedDoc
No

Author
EducatedFool

HyperlinksChanged
No

LinksUpToDate
No

CodePage
Windows Cyrillic

HeadingPairs
, 1

ICQ
58-36-318

CompObjUserType
Microsoft Forms 2.0 Form

ModifyDate
2016:06:22 14:10:12

TitleOfParts
1

Company
http://excelvba.ru/

Title
(Word, Excel, TXT) Excel

ScaleCrop
No

RevisionNumber
2479

MIMEType
image/vnd.fpx

CreateDate
2016:06:22 14:10:06

AppVersion
14.0

Comments
==== http://ExcelVBA.ru/ =====

Security
None

Software
AddinUpdater

FileType
FPX

CompObjUserTypeLen
25

FileTypeExtension
fpx

Skype
ExcelVBA.ru

Compressed bundles
File identification
MD5 50f802fd5801882461f7d54729576c1e
SHA1 fa32bb359c6c6002f0a3c2a42e153a7eb3845860
SHA256 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c
ssdeep
24576:/kFYF7TO09urobdn/xMuT8gvhs8flh9hFovxqeLyMQQsFJ17bjrS19xxy3RqMh9Y:hv0ro5rJ

File size 1.0 MB ( 1054208 bytes )
File type MS Excel Spreadsheet
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1251, Title: ��������� ���������� ���������� (Word, Excel, TXT) ������� �� ������� Excel, Author: EducatedFool, Comments: ==== http://ExcelVBA.ru/ =====� ���������� �������� ��� Excel ��ICQ: 5836318 Skype: ExcelVBA.ru, Last Saved By: �����, Revision Number: 2479, Name of Creating Application: AddinUpdater, Create Time/Date: Tue Jun 21 14:10:06 2016, Last Saved Time/Date: Tue Jun 21 14:10:12 2016, Security: 0

TrID Microsoft Excel sheet (36.8%)
Microsoft Excel sheet (alternate) (30.0%)
Microsoft Word document (old ver.) (23.3%)
Generic OLE2 / Multistream Compound File (9.8%)
Tags
obfuscated open-file email-pattern download exe-pattern url-pattern macros auto-close ipv4-pattern run-file auto-open handle-file copy-file registry send-keys create-ole enum-windows create-dir create-file run-dll environ write-file xls

VirusTotal metadata
First submission 2016-06-26 16:13:11 UTC ( 1 year, 1 month ago )
Last submission 2017-08-16 07:30:57 UTC ( 5 hours, 43 minutes ago )
File names 3120232a53fae755ce5296c8c16b2a4d45944f6b8486cbf990410c0614c23e1c.exe
FillDocuments_v2479 (2).xla
FillDocuments_v2479[1].xla
FillDocuments_v2479 (1).xla
FillDocuments_v2479.xla
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!