Contract agreement.docx
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
clean
Score: 0
|
System: Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
|
|
|
|
clean
Score: 0
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Potential for more IOCs and behavior
|
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2BB8ABC6.png |
PNG image data, 1054 x 274, 8-bit/color RGBA, non-interlaced | # |  |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\93279D0F.jpeg |
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 367x226, components 3 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\980DF3C4.png |
PNG image data, 280 x 239, 8-bit/color RGB, non-interlaced | # | |
| Click to see the 10 hidden entries | |||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E287E699.png |
PNG image data, 225 x 225, 8-bit colormap, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{60BF3DE8-1CA3-42CB-B6CA-E671C80F0F56}.tmp |
Composite Document File V2 Document, Cannot read section info | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{9D5B7132-C829-4FE2-85DD-9FE723688C9F}.tmp |
Targa image data - Map 6 x 7 x 8 +4 +5 "\011" | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C7F1C78C-1140-4E43-A415-F39DE2B8E989}.tmp |
data | # | |
C:\Users\user\AppData\Local\Temp\mso177.tmp |
GIF image data, version 89a, 15 x 15 | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Contract agreement.LNK |
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue Mar 8 15:46:40 2022, mtime=Tue Mar 8 15:46:40 2022, atime=Sun May 28 20:16:55 2023, length=178975, window=hide | # | |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat |
Generic INItialization configuration [misc] | # | |
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm |
data | # | |
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex |
Unicode text, UTF-16, little-endian text, with no line terminators | # | |
C:\Users\user\Desktop\~$ntract agreement.docx |
data | # | |
