ThreatExpert Report

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

%Temp%\docProps\app.xml

991 bytes

MD5: 0xA001A74C77418C6A28C68CA7569BFDDB
SHA-1: 0x98F9793B25589C9E653D605A110B6F660B657FA7

%Temp%\docProps\core.xml

761 bytes

MD5: 0xF5252F115344AE3F09772D18D51D6E07
SHA-1: 0x3F86A321E7B91BC1997869E8C9D3A893457438CC

%Temp%\word\document.xml

208,416 bytes

MD5: 0xEABEDE031B510CF5A1E7D401AF1D7E72
SHA-1: 0xDD2B96A890DC900067A89C3CAA89B91697C0CB94

%Temp%\word\fontTable.xml

3,293 bytes

MD5: 0x72FBB27B45BFEBDDFD1260CDBBC23919
SHA-1: 0x7C07E54C03705874B5B44931F059178502DF3EB4

%Temp%\word\media\image1.jpeg

30,066 bytes

MD5: 0x0D0FF8419687ED8307DAF7763BB176E6
SHA-1: 0x5F27A7356A40C0008567BE76F756930FA63C4005

%Temp%\word\media\image10.png

47,187 bytes

MD5: 0xA637953A5D73C36B57117D02DD5F9F7D
SHA-1: 0x757719E5B932BC377890168EB47466872519722A

%Temp%\word\media\image11.png

9,344 bytes

MD5: 0x24CC2AF960A2A24CFE63E368BDC96F15
SHA-1: 0x00DF03F5441CE496330D100B5D2A022628289647

%Temp%\word\media\image12.png

12,630 bytes

MD5: 0xE5266435CE35ECF103496DA37895577B
SHA-1: 0xF15ABF2D9806B96D6F792FF5DFD9D30F77E735CB

%Temp%\word\media\image13.jpeg

9,658 bytes

MD5: 0x978A1D68571702EC684CFB380612CD78
SHA-1: 0x75CF3C7FDBD91FB1B7155A3B25C15E23138603EB

%Temp%\word\media\image14.png

20,524 bytes

MD5: 0x73D4573728C190A07608AC7B2F916A92
SHA-1: 0x1CF29B6FAD7B7D2D81158C633BEB0AC6EBDED31B

%Temp%\word\media\image15.png

14,061 bytes

MD5: 0xA0365591637263707AC599141A702BAF
SHA-1: 0xD703057E835DC573576734BF32C411BC3DC0CB82

%Temp%\word\media\image16.jpeg

4,076 bytes

MD5: 0x65CE24004A2D50EB242A9151C07585FB
SHA-1: 0x638233C8444E7B81E465FFDFE44BC0C963C73965

%Temp%\word\media\image17.jpeg

5,519 bytes

MD5: 0xA070976866B04E638CE2340C236A39DE
SHA-1: 0x32D2B2A5B1DA082DFF695375D99C0366CA9D1E91

%Temp%\word\media\image18.png

11,115 bytes

MD5: 0x23A113D7CD91C599798EF865B2EF7674
SHA-1: 0xDBFE2124F533654058EB969EFEF06C840A35802B

%Temp%\word\media\image19.png

11,089 bytes

MD5: 0xBD0BA5FF57C76A6F246A4FD1C1ED9501
SHA-1: 0x598FD4D863CDA4CE2FD658BA3F8EA65DC14FED16

%Temp%\word\media\image2.jpeg

10,235 bytes

MD5: 0xA76F6826792D2B108396BD10E5EC6840
SHA-1: 0x2D5FF734320C3F98D9B6790BDD6B0B68F25C78AE

%Temp%\word\media\image20.jpeg

11,042 bytes

MD5: 0xC183EEF7F189B7484005335B73141251
SHA-1: 0x3D62FC5E8D38976305C95ED5C3F27C1B7C0CBCDC

%Temp%\word\media\image21.png

23,951 bytes

MD5: 0x6E9D0BC0C48C0A115ABC790953DB52FC
SHA-1: 0xF12C7F363A62233B13813029D86D8840F5434F56

%Temp%\word\media\image22.jpeg

4,211 bytes

MD5: 0xA347E1716268EE051035FD7A26A37591
SHA-1: 0x326201C07A20F2EF92FFB27A78FF09542B78B909

%Temp%\word\media\image23.gif

7,925 bytes

MD5: 0xF975117F1F4C454488582A2121CF8743
SHA-1: 0x270AE4C1DDD55C711EC3BF09F49CB508C5CEA0B2

%Temp%\word\media\image24.jpeg

8,151 bytes

MD5: 0x261E7E3C2EDE89D7F0688B5B5527685C
SHA-1: 0x11A04A753BC4B3F366F76F8299EFECA64EB8397E

%Temp%\word\media\image3.jpeg

45,376 bytes

MD5: 0x76FE0745D778B5A422184896745752A8
SHA-1: 0x0F98BCDF0FEF027A67DB46026FCE343957CB5363

%Temp%\word\media\image4.gif

6,921 bytes

MD5: 0x567341BE3D0EAAAF54CB42300ECBE594
SHA-1: 0x9FBC130B36E09BE7D785A02041EFF6A3C3631379

%Temp%\word\media\image5.png

14,313 bytes

MD5: 0x97DBA74A3074E7EB4E4EDE76D2EA815A
SHA-1: 0x69822E4DBE9B9987D1D196A7D0AD8DB0017B4FF1

%Temp%\word\media\image6.png

80,599 bytes

MD5: 0xFA3085C23531B0526054392AB3D4D5BA
SHA-1: 0x411D715D0D6A58D54EF712B7BEA55843DC2B3F82

%Temp%\word\media\image7.png

19,671 bytes

MD5: 0xCF0B47AF83B4F2B7284767AD1EC269FC
SHA-1: 0xC267AAABEFF2D701B2C9814A969E8BC99FB33934

%Temp%\word\media\image8.png

44,248 bytes

MD5: 0x12B29851271E79CA3FC83CA2AA2293DA
SHA-1: 0x298730D258F19DAB9FE7C7093327FDC46888825C

%Temp%\word\media\image9.png

42,173 bytes

MD5: 0x2221AA74BEA9878C329B4F5E69E5D56A
SHA-1: 0x05A7FF2CBD5B406004D8B8EBD535EFF8BB26DB9F

%Temp%\word\numbering.xml

78,186 bytes

MD5: 0xBAC5E8DC1359B86106F65557458FE001
SHA-1: 0xB8D48D7C6E0B27FFA62BCF3D7B638389199B3312

%Temp%\word\settings.xml

4,554 bytes

MD5: 0x645F4619069E756E60FBA840AD5CB030
SHA-1: 0xEDBFDA8AF68B69767930FD550D647F132FF88B7A

%Temp%\word\styles.xml

33,552 bytes

MD5: 0x6E5F7FD532189EA51AB780FA93207C46
SHA-1: 0x1D4FFDCAFD333F3D20863131A77DCDF320A3F376

%Temp%\word\theme\theme1.xml

6,795 bytes

MD5: 0xC0347B16CAC6D6312C9E2C8154C808EA
SHA-1: 0xD6C25533BB9AE3E856FC47CC112E39EF41452985

%Temp%\word\webSettings.xml

9,563 bytes

MD5: 0x925D08E427151A0F777A7F9F4D805D09
SHA-1: 0xCD99E8BB55EF26F722362F25162C6B9526C3BAB0

%Temp%\word\_rels\document.xml.rels

4,888 bytes

MD5: 0x3C19FF62CDEFBF9F8153CBC938C0E64B
SHA-1: 0x4446D9D16E5AC7C5CB52E5C4E6F70C7DA890A242

%Temp%\[Content_Types].xml

1,597 bytes

MD5: 0x4AE7A2C40365F498ED42EDC1A1885224
SHA-1: 0xDCC0D2EA749B162898F9D29E001A1F7A644BCC63

%Temp%\_rels\.rels

590 bytes

MD5: 0x77BF61733A633EA617A4DB76EF769A4D
SHA-1: 0x9D7ABF0EE4EFFCECAD80C8BBFB276079A05B4342

[file and pathname of the sample #1]

533,276 bytes

MD5: 0x8DF8AA8585A914BB3A5CEB6840C0B5FB
SHA-1: 0x56434D7CA3E6CDE61C93CD77FF4264409D5E8567

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directories were created:

%Temp%\docProps
%Temp%\word
%Temp%\word\media
%Temp%\word\theme
%Temp%\word\_rels
%Temp%\_rels

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: