Extracted

• • Target

    emo99.xls

  • Size

    142KB

  • MD5

    151a3a0128124613ed535a0c94fef154

  • SHA1

    202916a33701b5db729211b462a6abb94f98c1fa

  • SHA256

    8ddd5a2055cae9fa9e49ac6f4827d99d40d0ca74e880f521bc33079fb0d9405c

  • SHA512

    0732461d273e576a817cd220f1e0e1830e9bf02434142a66fb7093ca9bf29f35123db59e571aad7e3d49bec67d021300955849c6224b57e958dc97f6dcf34335

  Score

  10^/10

  persistence

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Sets service image path in registry

    persistence
  behavioral1behavioral2