# XLMMacroDeobfuscator
> Deobfuscate Excel 4.0 (XLM) macros — these hide in hidden sheets and are hard to detect

**Category:** [[categories/analyze-documents-microsoft-office|Analyze Documents > Microsoft Office]] | **Tier:** Rich (FOR610)
**Docs:** [https://docs.remnux.org/discover-the-tools/analyze+documents/microsoft+office](https://docs.remnux.org/discover-the-tools/analyze+documents/microsoft+office)

## Usage
```bash
xlmdeobfuscator --file <spreadsheet.xlsm>
xlmdeobfuscator --file <spreadsheet.xlsm> --no-indent
```

## Recipes
- [[recipes/excel-xlm-macros|Deobfuscate Excel 4.0 (XLM) Macros]]

## Related Tools
- [[tools/evilclippy|evilclippy]] — Remove VBA project password protection and manipulate Office
- [[tools/libolecf|libolecf]] — Microsoft Office OLE2 compound documents.
- [[tools/msoffcrypto-crack|msoffcrypto-crack.py]] — Recover the password of an encrypted Microsoft Office docume
- [[tools/msoffcrypto-tool|msoffcrypto-tool]] — Decrypt password-protected Microsoft Office documents (OLE a
- [[tools/msoffice-crypt|msoffice-crypt]] — Encrypt and decrypt OOXML Microsoft Office documents.

#office #excel #xlm #macro #deobfuscation