File name: | C:\Users\admin\Desktop\d48b94900e0875acf5d9c91ca3b36219 |
Full analysis: | https://app.any.run/tasks/38c36e96-35fc-4fbf-9182-18f6928614ba |
Verdict: | Malicious activity |
Analysis date: | October 20, 2020, 09:28:40 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Tags: | |
MIME: | application/vnd.ms-excel |
File info: | Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: Kvi, Last Saved By: Administrator, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:17:20 2015, Last Saved Time/Date: Thu Oct 8 16:19:52 2020, Security: 0 |
MD5: | D48B94900E0875ACF5D9C91CA3B36219 |
SHA1: | EDC915F97C7CA3693C99D24B10F0F87633CC5967 |
SHA256: | 01D6425B3651941EA13E0631B333304582027BE3092136CDD9624904E3C9A006 |
SSDEEP: | 768:EmQk3hOdsylKlgxopeiBNhZFGzE+cL2kdAJKhRsJObBYx7Ol0AJfRBVZNTRD:ak3hOdsylKlgxopeiBNhZFGzE+cL2kdj |
.xls | | | Microsoft Excel sheet (78.9) |
---|
Author: | Kvi |
---|---|
LastModifiedBy: | Administrator |
Software: | Microsoft Excel |
CreateDate: | 2015:06:05 18:17:20 |
ModifyDate: | 2020:10:08 15:19:52 |
Security: | None |
CodePage: | Windows Latin 1 (Western European) |
Company: | - |
AppVersion: | 16 |
ScaleCrop: | No |
LinksUpToDate: | No |
SharedDoc: | No |
HyperlinksChanged: | No |
TitleOfParts: |
|
HeadingPairs: |
|
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2840 | "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde | C:\Program Files\Microsoft Office\Office14\EXCEL.EXE | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Excel Exit code: 0 Version: 14.0.6024.1000 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2840 | EXCEL.EXE | C:\Users\admin\AppData\Local\Temp\CVR5345.tmp.cvr | — | |
MD5:— | SHA256:— | |||
2840 | EXCEL.EXE | C:\Users\admin\AppData\Local\Temp\~DF2E7B72F53CB6F51A.TMP | — | |
MD5:— | SHA256:— | |||
2840 | EXCEL.EXE | C:\Users\admin\AppData\Local\Temp\d48b94900e0875acf5d9c91ca3b36219.xls | document | |
MD5:94ED9FE30F7A123737D56FA7887C6A44 | SHA256:F4D4AEDECB22DB8A70E178657E53DE8CE1BC432FF0B2A8DEA39CA376660DD23B |