File name: | 6df6d6a87c5379996b0b9594577167a3729e0eeea1f94c6e5ac1b78689d08292.xls |
Full analysis: | https://app.any.run/tasks/2ad4b724-47d4-4d4e-9ee9-238a0a452b4c |
Verdict: | Malicious activity |
Analysis date: | November 30, 2020, 06:00:22 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Tags: | |
MIME: | application/vnd.ms-excel |
File info: | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Create Time/Date: Wed Nov 25 23:14:17 2020, Last Saved Time/Date: Wed Nov 25 23:14:17 2020, Security: 0 |
MD5: | 4440FC855EA5697248DB2B90CDFD5FD2 |
SHA1: | 866470B3A37603A53E6A9CB9B277784066AAF067 |
SHA256: | 6DF6D6A87C5379996B0B9594577167A3729E0EEEA1F94C6E5AC1B78689D08292 |
SSDEEP: | 3072:7k3hOdsylKlgryzc4bNhZFGzE+cL2kn/8b83yVFNXD10nsH/QcRk8oR/x+f1:7k3hOdsylKlgryzc4bNhZF+E+W2kn/8r |
.xls | | | Microsoft Excel sheet (48) |
---|---|---|
.xls | | | Microsoft Excel sheet (alternate) (39.2) |
CompObjUserType: | Microsoft Excel 2003 Worksheet |
---|---|
CompObjUserTypeLen: | 31 |
HeadingPairs: |
|
TitleOfParts: | vxagoxggy |
HyperlinksChanged: | No |
SharedDoc: | No |
LinksUpToDate: | No |
ScaleCrop: | No |
AppVersion: | 15 |
CodePage: | Windows Latin 1 (Western European) |
Security: | None |
ModifyDate: | 2020:11:25 23:14:17 |
CreateDate: | 2020:11:25 23:14:17 |
LastModifiedBy: | Dell |
Author: | Dell |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2632 | "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde | C:\Program Files\Microsoft Office\Office14\EXCEL.EXE | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Excel Version: 14.0.6024.1000 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2632 | EXCEL.EXE | C:\Users\admin\AppData\Local\Temp\CVRD24F.tmp.cvr | — | |
MD5:— | SHA256:— |