Static | ZeroBOX

Original


                                        Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    
[Content_Types].xml
_rels/.rels
xl/_rels/workbook.xml.rels
xl/workbook.xml
=:AS|D
xl/theme/theme1.xml
w tom'
G.R(:-
26PsFnJ
"]$C<&
dB|UtvaD
xl/media/image3.emf
2N%\`'
4e?GSV
v:L"rq(2
>2l7"d
qH&ocv
]<GtIy
J(ocvu
-kW<<}
tOX[K3
gwpoX;
{b-@Mb
]!y5}i;H
xl/worksheets/sheet3.xml
xl/worksheets/sheet2.xml
xl/worksheets/_rels/sheet1.xml.rels
k<ESNI
xl/drawings/_rels/vmlDrawing1.vml.rels
xl/media/image2.emf
4v&E
iL|zUm~|g3q
35b;]B'
AxW}Rv
o$!4uAz
8dFKz9jA
LubbS(O
@QH68KE@
}e?mD)h+
Exy\2l
(ru5pa
PBFFD5Q
yE3B"@
YwAhw(E
ARWCwF]
`tteOfUf
jnbMGK
vY5Isft
Y|d7$hP
uuc_7}
#=Z( z
Ts'A7ik
aG_ic
xB2@`;
R4BHi9um
~.x-Xk
Z7v>`[
4j/.?>
+wFSm&-E
i!r<NC
3L#-DO
~#AIVd
X8<K4h
`lC{'n
e;9I hp
gh((o7j!
Z=y"v
>=GPN(
.*41:E
(p_Qf`
FTZD}Z
wS8FjYk
V6X>0kAb
,(T5i
xpj!>pp
;ofU5T
Ej-%{I<
p{wxh=
$.sG__k
;{-C#n
\lK$6+*
<oPj$>
.[x.Dm%H
C/nW&j
ozn<3r<
v_^VE~q9iMk
xOfN(}
}(yyCN
.1]4>
aF|qkg
@g(0sF
dRbl '
G3%2jT
.J/Ug1
xl/media/image1.jpeg
=,.$2I@LKG@FEPZsbPUmVEFd
;!!;|SFS||||||||||||||||||||||||||||||||||||||||||||||||||
aq"#2S
S"bA;V
4ezPi#4
"Fi#523
TUip-"p#a
,_icZ\*2
YToV@Tq 8
xl/embeddings/oleObject2.bin
NPE=OS
~4`~`y]L
{IP@:>
8QlM*,8
Jb>>Z}
ViHRI
s&qvUd,
xG,7R"K
LgH]r[1
v+l}&x_<mV
6q|9OPo|
G1jj`/P
40R-cO
T>3#P9
0i&80fa
RN*f)Z
>s(i}pqsP
s$@32|Og
'M;GCk
T<OJI=
&mT-!{
8Z:dV)
]%F-0*
wp;Tgj"
O>P63n
1@uq_i
"<YS%WtF
rg=FG0
zu6s:s
?-~^Z
bz@#D8
MC{\6iGerJwM
R02o$/
z&KO$Bw
\BL vBO (n
xl/styles.xml
XlzeE|
xl/worksheets/sheet1.xml
BG:].J#
xl/drawings/drawing1.xml
xl/embeddings/oleObject1.bin
6Mw{Ogm
-@6??W'M
mSsGgWwOo_
'hZD[JY
?S"<bW
q0%9bRU
a"W;52A
6J:*g=X
Nv&"F%
~$M`1c[C
VLF65a
10d3
G&3NJYl_j
< <2Xc
ziTwiR
TH[O]>,H
,'`.un
642&;E
0_izKD
;Q&`=(l+%*
+Iaquq
u%8iY%
fP-v<M
|:kh ,u@Sj
yG-eIC
[sL|u})Ca
txOu]@f
Az"adN|
YewF??
+s&9Gm
HlLg~:
`d!ae=
JU8/*i
h~t\-AR
3|-5b
[t5iVjg
B!*fZn
P$Ie3E(KS
F?*:B
i3!FMM
IU?S[?
h5X+9
[^,QQH
{m,;aV
5xR'/jC6)
IyOBkU
GdWksi
-F!#vj<3
xo^4p
RCSU,,
{mSbdX
Z5K2W
:DiY-e[P
T=A#zd
ngoSJo
b^]?4jdc
s8EV<s
Q{/Fx19h
3cEy53Q
`K@*HY{
\}&Ar-
`r5Fn
l17i?Jj
56Uj#w"
KR/5x8
w C!4{
6!t+!R
<7gSgJ
j6,5]O
}2.wKo
o\Nr+p|k
YRCmf
, )6X(vJU
%a?2a-
A'd8"E}
z+MOAE
$P',Y>C
McEJ"i
FN%a?~bH=
d44Y5`
tgEgupv
G@'&VS
5BU'Vh
M*Ew*I
)%%\wI
UIdmCe
*6!"QZ!iZ`1
ojLQ.B
!BbM1X
*x+3FL\
-[2zpD7riG
9!,^S\j
mYKh''
[58x:Vt
Z5;}+cQW
Mr]C}C
Iw] n`
m&/D{=
Yg8n&n6
AB0A*z7
@]Un'l
"v4 }
%BuMOYl
Yx>R<e
/Ddwf^zb`
gA~Yv2
_C\Hj/R
=>#%>>J
C~c=8RJ
Cy1S\{
[j3Li+
]%uSz{V&wwm
_sGEOJ
:Zdp*4
ejft#3vx
zkI76]
af:?6S
PA7{6a
KN-lBU
Jkl5"Q
1if(-l
Pk9B31
"dl9!)
Ock,Q?
GbMf*,
,C`0:NB
]) av!
HYH/Z3
u^[Ym.
-XqDql
::`,lU
c]~fvdX
Lyg`?3
H^IBVJ
>gXr_
+:/V,N
vWom g8
t-U^u)
2!*i@g
7yuU[DW
$*$*SQ
imYG>(
Ei0#o&r
p>v5#y`L
Qq~2vC
{C@9gf3
V|rI#px
B'*G5h
FYz+9<.lR
ztQo~0
?=MwjT
X[.6| :
Onm=#,
>%.^Le&H
e8*[B`
p~{%2#
8zY!*{
5$5z["
Io!D;D
[M*q^z
1gJ;GK k
JM).j7
%"b|S7
k8>R'E
}\^*Wq
run*{m
.b TGQ
sgOt,|
4c=gLPM8.4A
~zD<@Yi
9^fPiP
Fd:!ZO
3-tg0#
)TLZn~g
hO57q9
;D>pfW
qQUy|5S
S_;U~V
K]J[n^
S?@9v^
UNKhH'
xl/drawings/vmlDrawing1.vml
HC,KYA
xl/printerSettings/printerSettings1.bin
@_"+b)a
docProps/thumbnail.wmf
Rp})^m,
_J[^c_z
>rV~2"
r9TXW
e4FVG3"$
l$GU\I
v28&FH2
z9paQc5,
V$c7)pQ/
Uq,:$*
;S7x4
=f[?^J
i/D&f@
docProps/core.xml
DmJi%Ia
GUG?`]
DtFJ1"
docProps/app.xml
[Content_Types].xmlPK
_rels/.relsPK
xl/_rels/workbook.xml.relsPK
xl/workbook.xmlPK
xl/theme/theme1.xmlPK
xl/media/image3.emfPK
xl/worksheets/sheet3.xmlPK
xl/worksheets/sheet2.xmlPK
xl/worksheets/_rels/sheet1.xml.relsPK
xl/drawings/_rels/vmlDrawing1.vml.relsPK
xl/media/image2.emfPK
xl/media/image1.jpegPK
xl/embeddings/oleObject2.binPK
xl/styles.xmlPK
xl/worksheets/sheet1.xmlPK
xl/drawings/drawing1.xmlPK
xl/embeddings/oleObject1.binPK
xl/drawings/vmlDrawing1.vmlPK
xl/printerSettings/printerSettings1.binPK
docProps/thumbnail.wmfPK
docProps/core.xmlPK
docProps/app.xmlPK
Microsoft Office Excel Worksheet
ExcelML12
'LQS;o
[Imbi@Yd
\KL$,V
4mqM'C
J))|jkl"
DPqP:LJ
otTaOxHV=x
Lvh(Q\"s
ZRQ{y#
e_6p07:(}
XUZ;6:
[ Ioaw
t U3DY
&\$6/S
v^q!xT
s?RfO/
[H_htt<
FHQ+3FLdn
c8X5Z"
pBA_HP
2A|XCOoQ
vM#jA-
-EGHH#
)S"({f
v_KK}p
<3x|/)"
jRUjbW3[
Ky1P:a3
Glnt{z;D*_s@9
oWVpksQ
b\(co1
V)kf1l<fv
O$s8l
^29vbH9
^s;xTR
.BRg|P.
1RCNwExc
T8odxm[5
q"3u(D
z\^0^P
X)_8)[
gpZpOj
6fT3GU
(#ker<G
RKi/)n
E%Ok6[
tg+$`y9/
#[Z>6J
$F>j3fK|
Ce`:X
hs&>(5r
sUXLQN
f+{C@i,
gfe\#P
uR/-8-
oV/&UgE
auslnJA#
:5KqGd
StJ-3BX
46XoHQ
}Vut;%
c%u,7R
0nG(7c
bIJJZ1
^ ~S A
9""'7,
#:NsbJ
gEs{m].NzM.
gnF%X!
O^MRu@l
|217!M
/K'<T~f^
\#.^H)~F
F;]rzu<
'm%MTM
CDA\th
.-!i>i
g4tr6s
VIo+m\
q4;V7Q;
*I!|t
h+_GL2
g\p]ry
(eDI~P
(ce6:A
d<!^Rb
[^:Jv
8E0_>;
ty};@/#
/+?bE&
J[G$3M
`&IcZU]m}
o/Ftc^
F&mO@wJ9
5jfsSEw
:t?c>P
q_5*OE
eC9sc:
uSm]7X!
B@4)|4`
MpwW,,)
=kmc8I
7u9;Q Z
1xfU-?
@~:1^f
whs("7,
q6A|1+
W;UnEt
57:3a?G
k/IjEu
txnQ8v
)1+V]a
!*i%9x&_*vH
iQ6{kjHf
GM}.W%
T8qRx
sdZN0Ka8
S6YgwRwC
Z:[VG_
I9q#C/
"e~t3j2aO
HJK2`b
2Z<l!
doqZ]{
FWqBO^
4`s%OLQ
(R;bYy
x55m{@n
:7{\4
T0Pmbkx
M#$QV-
0kk"w&7w
9(yYwr
]|Wr7t
F.W%>`
jI.{&zbZ
(FZE*f_
G(e6XE
ztMyz@
}n5Y/_f
af^9fje
h9>z2t4
)H'FSZ
%Bc7J6
}Fr+9u
B}J<{bOQ
$ CQOh
-B7~hl"
#8JiVv
l2A<,cj
'/]_KI-"N
z=*<85
()]t='
3|3<h'
F73<MA
vsrhxY
DE*<"Yu3
J_k0IX]
:3*.Za
-XrH~C
B~wW(Y
\Y-)8J
G'< 0!N
eh8'VN
5|_x8oc
,^:Z;n
17d0|\
A-cTsP
YV6cpt
wocMsNo
"J^sj/
5?Ia@%
nUsDII
ZQ8[1b
RoUF&a
(F0Vx@R&-
/-*npq
D975h]
pI#cHNa"
$I<[~n
-rz+#l
y]j-<Ah
x"H\$
'zb&Ce5
:<ZP:=
b.1Y_]
CrVLcY
@J",}D
Z.poA%
OL_Z-F
wVz&:f
OGjLS9
momRWP
cl@EAx@
m?{>3pO
}\KA{-J
wl[cBb/
qK=gz
^@O43K
8excE49
}{xT<f
}?)A'v
uFU&Lm
2s|eKx
H6KN)T
2g,Zf5j
L99RkPC
H?60B
3]_feEvk
YESC{/
<ot|y8
v=o2c\$#3
]-DT)E
N>##8F|
2%*LMn
aK<6#f+
>.s-~9
xTot2i(Ga
+`hty
.e/QzlJ
p#RNjT
Ytt*[xW
IXa3]^
'utx^2
KN<A0}
_8C59D
j 0oOR
G0W/6B
p*YnB|
tD+V~
7?fVc
ysTm-aiJ}
1`wXg{
<"0c4*
nM$6e5
ai7/ox-)
+oEz5c|
^B7<^B
aX7j$=:
`3!S`A
ZU`p}G{&?
-6/90h
(-}GhWA
(]z.J]zQ'
Mj.%jM=
ES]W6S
vQ7GN3
WnSFO^
-/?C14v5
=Ck.?'
1(YQe;
+N=H|5
^YL<;M1
/l,u?1
Tt'\!Y
'IqV=r
A,6Y5F
Yj$)H\H
]&wjXU
6=fSR!
.3V-LQH
Q9]t?T
S3Xx:.`T
OOB]0&.
b]6WOz
8g?e<C
#R9J{ya
XG;r5P
@EA/.H
I@qxeq
l`3:Uo/a
u[%*#
TS4zlC
SW:` J`I
\fLbr|
elAt4<d
(%!%%
HAE14kC
3bV~W!
{@q.7;
5Y/}J+
SF3_X+b}t){
@4z|[
#D4sAZ
^O?r+#
Cs&Qz)
;{SKc=
v5F^65
?-]Kl0o|
v|Yw+`
yrE,qo
,4jAUb>
.i66uLb\/
~W4y-x
w44I|[o[
AD\B%!
]+e6d'L
a+w/)c
_pv]fesyh
#!9thN-#
$j^{[5
e_c"Wh
e<f`k
"M=Xa+A
E|%hB|
<<Mw&/
~]7tQ\
LGR>Q
"N^Z52
"8;S34#
]S3l0=
>V gKv
M*"LT1
::]<({
djT p_
lCD)A3G
9BKebc
$,Xfs|
"wPNX+
Attribut
e VB_Nam
e = "Thi
sWorkboo
0{00020P819-
$0046}
|Global
dCreat
ateDeriv
Bustomi
Attribut
e VB_Nam
e = "She@et1"
t0{000
20820-
|Global!
Pre decla
lateDeri
Bustom
Attribut
e VB_Nam
e = "She@et2"
t0{000
20820-
|Global!
Pre decla
lateDeri
Bustom
Attribut
e VB_Nam
e = "She@et3"
t0{000
20820-
|Global!
Pre decla
lateDeri
Bustom
Project1
stdole
VBAProject
Office
ThisWorkbook|
_Evaluate
Sheet1
Sheet2
Sheet3
Worksheet
Workbookk
VBAProje
stdole>
*\G{00
020430-
6}#2.0#0
#C:\Wind
ows\SysW OW64\
tlb#OLE
Automati
EOffDic
2DF8D04C
-5BFA-10
1B-BDE5
gram Fil
es (x86)
\Common
\Microso
ft Share
d\OFFICE
12\MSO.D
ThisWork
}ShePet1G
ThisWorkbook
Sheet1
Sheet2
Sheet3
ID="{878BD17D-D72D-448F-BB5F-14EB4493CE25}"
Document=ThisWorkbook/&H00000000
Document=Sheet1/&H00000000
Document=Sheet2/&H00000000
Document=Sheet3/&H00000000
Name="VBAProject"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="ECEEE6631AFA1EFA1P
EFA1EFA1E"
DPB="87858D14B3344F354F354F"
GC="222028B1C2B2C2B23D"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
ThisWorkbook=0, 0, 0, 0, C
Sheet1=32, 32, 1537, 407, Z
Sheet2=0, 0, 0, 0, C
Sheet3=0, 0, 0, 0, C
Microsoft Excel
Sheet1
Sheet2
Sheet3
Worksheets
Microsoft Office Excel 2003 Worksheet
Excel.Sheet.8
RooT Entry
Workbook
_VBA_PROJECT_CUR
MBD000E057C
MBD000E057D
Package
CompObj
http://172.245.208.126/SSH/MicrosfotEdgedeletedhistorycachecookieentirethingsfromthepc.Doc
YSTb2EoR3WsgRzrGdIYIjmQJhsVKXeCSKTrUweF1rLLTHs8iQ63Wq0Fk8PEidqcPQwrpi4sNmTkwmnOGZpkQsx3QE9oskeBmDMLU66GfrVt2GN22kYVPG8gZ9sT2JvABvQGm3AT8sKZJWeH8jZGTaiaLOUXpA8Q6dtYAoF8wQydaRVdOmD2whgRpX4PJNOOs6qCo20HvtXt9FKIjDBfZsKorjsT1OQuwrPA8Upf9LLEdX
ThisWorkbook
Sheet1
Sheet2
N0{00020819-0000-0000-C000-000000000046}
N0{00020820-0000-0000-C000-000000000046}
N0{00020820-0000-0000-C000-000000000046}
Sheet3
_VBA_PROJECT
PROJECTwm
N0{00020820-0000-0000-C000-000000000046}
*\G{000204EF-0000-0000-C000-000000000046}#4.0#9#C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL#Visual Basic For Applications
*\G{00020813-0000-0000-C000-000000000046}#1.6#0#C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE#Microsoft Excel 12.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\SysWOW64\stdole2.tlb#OLE Automation
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.4#0#C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSO.DLL#Microsoft Office 12.0 Object Library
ThisWorkbook
0D6772738b
ThisWorkbook
Sheet1
0E6772738b
Sheet1
Sheet2
0F6772738b
Sheet2
Sheet3
0G6772738b
Sheet3
kThisWorkbook
1Sheet1
2Sheet2
3Sheet3
PROJECT
SummaryInformation
DocumentSummaryInformation
CompObj
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
DrWeb Exploit.Siggen3.44056
Cynet Malicious (score: 99)
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Scr.Malcode!gen59
ESET-NOD32 Win32/Exploit.CVE-2017-0199.VO
TrendMicro-HouseCall Clean
Avast Clean
ClamAV Clean
Kaspersky HEUR:Trojan.OLE2.UrcBadur.genw
BitDefender Trojan.GenericKD.70679578
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.70679578
Rising Clean
TACHYON Downloader/W97.CVE-2017-0199
Sophos Clean
F-Secure Malware.W2000/avi.Malware.dggcy
Baidu Clean
VIPRE Clean
TrendMicro TROJ_GEN.F04IE00L423
FireEye Trojan.GenericKD.70679578
Emsisoft Trojan.GenericKD.70679578 (B)
Ikarus Trojan-Downloader.Office.Doc
GData Generic.Trojan.Agent.JLDOK7
Jiangmin Clean
Google Detected
Avira W97M/AVI.Malware.ytrhi
Antiy-AVL Trojan/PDF.Agent
Kingsoft Clean
Gridinsoft Trojan.U.AgentTesla.tr
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm HEUR:Trojan.OLE2.UrcBadur.genw
Microsoft Exploit:O97M/CVE-2017-0199.RV!MTB
Varist CVE-2017-0199.A!Camelot
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX malware (ai score=84)
VBA32 Clean
Zoner Clean
Tencent Exp.MsOffice.Cve2019_0199.11022681
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.