| Name | 36dd5d49581f6636_~wrs{1786e930-ac7b-404f-a55a-16203f2e5367}.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1786E930-AC7B-404F-A55A-16203F2E5367}.tmp |
| Size | 7.5KB |
| Processes | 1372 (WINWORD.EXE) |
| Type | data |
| MD5 | 148e61eac7e6edf3e19cf77ed5b2235e |
| SHA1 | f49f04d64108a1aa8984fac4fc9220f0c4a54fc1 |
| SHA256 | 36dd5d49581f66363293c07016848b223f40877307b3d87095aabab496e722c0 |
| CRC32 | 8F31C810 |
| ssdeep | 96:OEyxlsbraqy8dfXO7trt8UzSNavbuDjrxA77Qf4niGyLWXvuA0drpzTqtW7C72kL:OEYlsCSXO7J/zVbuS77QfH+7s1q4kL |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | bb2d452d07235053_~$mlhistoryclearner.doc |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\~$MLhistoryClearner.dOC |
| Size | 162.0B |
| Processes | 1372 (WINWORD.EXE) |
| Type | data |
| MD5 | 9b1f6fc2fadda15def98cf8f3470761b |
| SHA1 | a8c90499f6d31ce3a6397f092ef7df9cdb3c0e80 |
| SHA256 | bb2d452d07235053c3431ace2643d097ffd7cf7530ce1f4135762525758c9611 |
| CRC32 | 44F9C8E6 |
| ssdeep | 3:yW2lWRdnvW6L7UdK70atKFIt+TWAXn:y1lWbvWmUK70eKW+TWAX |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | cfd63d8fc5111728_~$normal.dotm |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm |
| Size | 162.0B |
| Processes | 1372 (WINWORD.EXE) |
| Type | data |
| MD5 | 7194fbda1d4c7ff48cb7ea1aa0233ba9 |
| SHA1 | 8e7e510431f98af4c74077a04607fc96cb284093 |
| SHA256 | cfd63d8fc5111728a612bec06afeb1ddeb75d480bac331abc542b0111619c7d6 |
| CRC32 | 353D2468 |
| ssdeep | 3:yW2lWRdnvW6L7UdK70atKFIt+TseXn:y1lWbvWmUK70eKW+TseX |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 4826c0d860af884d_~wrs{31d35729-5cdc-4ae5-9630-1138e3515487}.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31D35729-5CDC-4AE5-9630-1138E3515487}.tmp |
| Size | 1.0KB |
| Processes | 1372 (WINWORD.EXE) |
| Type | data |
| MD5 | 5d4d94ee7e06bbb0af9584119797b23a |
| SHA1 | dbb111419c704f116efa8e72471dd83e86e49677 |
| SHA256 | 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1 |
| CRC32 | 23C03491 |
| ssdeep | 3:ol3lYdn:4Wn |
| Yara | None matched |
| VirusTotal | Search for analysis |