XM97/Phone-A may attempt to hide the Excel application after 8pm, or exit the application if the time is 01:01:00.
The virus will also change the File Properties information for infected files, setting the Comments section to "Tia Ivanka " or ". .TwentySiX ==> .".