× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 239942748da63d13b679edf04d3b955f6979d03cf2d5f53b0e10871c9717c6eb
File name: Recibo-2019-0515-05-02-2019.doc
Detection ratio: 12 / 56
Analysis date: 2019-02-14 16:15:27 UTC ( 1 month ago ) View latest
Antivirus Result Update
Avast Script:SNH-gen [Trj] 20190214
AVG Script:SNH-gen [Trj] 20190214
ESET-NOD32 VBA/TrojanDownloader.Agent.MRP 20190214
Fortinet VBA/Agent.MPF!tr.dldr 20190214
Ikarus Trojan.VBA.Agent 20190214
K7AntiVirus Trojan ( 005464381 ) 20190214
K7GW Trojan ( 005464381 ) 20190214
McAfee W97M/Downloader.cqc 20190214
McAfee-GW-Edition W97M/Downloader.cqc 20190214
Symantec ISB.Downloader!gen92 20190214
ZoneAlarm by Check Point HEUR:Trojan-Downloader.Script.Generic 20190214
Zoner Probably MacroXML 20190214
Acronis 20190213
Ad-Aware 20190214
AegisLab 20190214
AhnLab-V3 20190214
Alibaba 20180921
ALYac 20190214
Antiy-AVL 20190214
Arcabit 20190213
Avast-Mobile 20190214
Avira (no cloud) 20190214
Babable 20180918
Baidu 20190202
BitDefender 20190214
Bkav 20190214
CAT-QuickHeal 20190214
ClamAV 20190214
CMC 20190214
Comodo 20190214
CrowdStrike Falcon (ML) 20180202
Cybereason 20180308
Cylance 20190214
Cyren 20190214
DrWeb 20190214
eGambit 20190214
Emsisoft 20190214
Endgame 20181108
F-Prot 20190214
F-Secure 20190214
GData 20190214
Sophos ML 20181128
Jiangmin 20190214
Kaspersky 20190214
Kingsoft 20190214
Malwarebytes 20190214
MAX 20190214
Microsoft 20190214
eScan 20190214
NANO-Antivirus 20190214
Palo Alto Networks (Known Signatures) 20190214
Panda 20190214
Qihoo-360 20190214
Rising 20190214
SentinelOne (Static ML) 20190203
Sophos AV 20190214
SUPERAntiSpyware 20190213
Symantec Mobile Insight 20190207
TACHYON 20190214
Tencent 20190214
TheHacker 20190212
Trapmine 20190123
TrendMicro 20190214
TrendMicro-HouseCall 20190214
Trustlook 20190214
VBA32 20190214
VIPRE None
ViRobot 20190214
Webroot 20190214
Yandex 20190213
Zillya 20190213
File identification
MD5 557be43dd4e3459c88da00f93742ee16
SHA1 f3860e2fd2956de2d3f50ccbef0a1046b6edcd01
SHA256 239942748da63d13b679edf04d3b955f6979d03cf2d5f53b0e10871c9717c6eb
ssdeep
6144:4igvdMekCZ84iPG25djmMzSVIhl9EKRDqME4yanMjdn/NQVg+D3Do8oRtxQwvVA7:Dgv76BPl5Vm8SVIf51E4K14o8Iu7

File size 467.4 KB ( 478593 bytes )
File type XML
Magic literal
XML document text

TrID Microsoft Office XML Flat File Format Word Document (ASCII) (65.1%)
Microsoft Office XML Flat File Format (ASCII) (31.0%)
Generic XML (ASCII) (2.3%)
HyperText Markup Language (1.4%)
Tags
xml

VirusTotal metadata
First submission 2019-02-14 16:15:27 UTC ( 1 month ago )
Last submission 2019-02-14 22:36:44 UTC ( 1 month ago )
File names eBILL_201902141461.doc
eBILL_021420196453227.doc
eINVOICE_021420190592.doc
Recibo-2019-0515-05-02-2019.doc
emotet_e1_239942748da63d13b679edf04d3b955f6979d03cf2d5f53b0e10871c9717c6eb_2019-02-14__162001.doc
eINVOICE_021420192013.doc
eFORM_201902142991601.doc
eFile_201902142042.doc
eBILL_2019021415211.doc
ExifTool file metadata
WordDocumentFontsFontPitchVal
variable

WordDocumentBodySectPRPictShapeType
#_x0000_t75

WordDocumentBodySectPRPictShapeStyle
width:468pt;height:349.5pt;visibility:visible;mso-wrap-style:square

WordDocumentDocumentPropertiesCharacters
1

WordDocumentBodySectSectPrPgMarBottom
1440

WordDocumentStylesStyleNameVal
Normal

WordDocumentStylesStyleRPrLangBidi
AR-SA

WordDocumentBodySectPRPictShapetypeId
_x0000_t75

MIMEType
application/xml

WordDocumentStylesStyleTblPrTblCellMarTopType
dxa

WordDocumentBodySectPRPictShapeSpid
_x0000_i1025

WordDocumentStylesStyleRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypePathConnecttype
rect

WordDocumentBodySectSectPrPgMarRight
1440

WordDocumentShapeDefaultsShapelayoutIdmapExt
edit

WordDocumentBodySectPRPictShapetypePathExtrusionok
f

WordDocumentShapeDefaultsShapedefaultsExt
edit

WordDocumentBodySectPRPictShapeId
Picture 1

WordDocumentStylesStyleTblPrTblCellMarRightType
dxa

WordDocumentFontsFontName
Times New Roman

WordDocumentBodySectPRPictShapetypeFormulasFEqn
if lineDrawn pixelLineWidth 0

WordDocumentStylesStyleTblPrTblCellMarTopW
0

WordDocumentFontsDefaultFontsCs
Times New Roman

WordDocumentBodySectPRPictShapetypeLockAspectratio
t

WordDocumentStylesStylePPrSpacingLine
259

WordDocumentDocSuppDataBinDataName
b9_10__8

WordDocumentDocPrZoomPercent
100

WordDocumentBodySectSectPrPgSzH
15840

WordDocumentFontsDefaultFontsAscii
Calibri

WordDocumentStylesStyleStyleId
Normal

WordDocumentBodySectSectPrPgSzW
12240

WordDocumentBodySectPRPictShapetypePreferrelative
t

WordDocumentStylesStylePPrSpacingAfter
160

WordDocumentOcxPresent
no

WordDocumentStylesStyleTblPrTblIndType
dxa

WordDocumentDocPrRsidsRsidRootVal
005E6EE1

WordDocumentDocumentPropertiesLastSaved
2019:02:14 15:33:00Z

WordDocumentBodySectPRPictShapetypeLockExt
edit

WordDocumentBodySectSectPrPgMarLeft
1440

WordDocumentBodySectSectPrColsSpace
720

FileType
XML

WordDocumentDocumentPropertiesPages
1

WordDocumentStylesLatentStylesLsdExceptionName
Normal

WordDocumentStylesStyleTblPrTblCellMarRightW
108

WordDocumentDocPrDefaultTabStopVal
720

WordDocumentDocumentPropertiesRevision
1

WordDocumentBodySectSectPrPgMarFooter
720

WordDocumentDocumentPropertiesTotalTime
0

WordDocumentBodySectSectPrPgMarTop
1440

WordDocumentStylesStyleUiNameVal
Table Normal

WordDocumentBodySectSectPrPgMarHeader
720

WordDocumentDocumentPropertiesParagraphs
1

WordDocumentBodySectPRRsidRPr
00DF1904

WordDocumentBodySectPRsidR
005E6EE1

WordDocumentBodySectPRPictShapetypeStroked
f

WordDocumentBodySectPRPictShapetypeCoordsize
21600,21600

WordDocumentDocPrCharacterSpacingControlVal
DontCompress

WordDocumentEmbeddedObjPresent
no

WordDocumentStylesStyleRPrRFontsAscii
Tahoma

WordDocumentStylesVersionOfBuiltInStylenamesVal
7

WordDocumentIgnoreSubtreeVal
http://schemas.microsoft.com/office/word/2003/wordml/sp2

WordDocumentBodySectPRPictBinData
(Binary data 366950 bytes, use -b option to extract)

WordDocumentStylesStyleTblPrTblCellMarBottomType
dxa

WordDocumentFontsFontCharsetVal
00

WordDocumentDocumentPropertiesLines
1

WordDocumentStylesStyleTblPrTblCellMarBottomW
0

WordDocumentStylesLatentStylesDefLockedState
off

WordDocumentDocPrRsidsRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypeFilled
f

WordDocumentBodySectPRPictShapeImagedataSrc
wordml://F951_7.T325106.C83118_

WordDocumentBodySectPRPictShapetypeStrokeJoinstyle
miter

WordDocumentDocumentPropertiesCharactersWithSpaces
1

WordDocumentStylesStyleLinkVal
BalloonTextChar

WordDocumentStylesLatentStylesLatentStyleCount
375

WordDocumentDocPrAlwaysShowPlaceholderTextVal
off

WordDocumentBodySectPRPictShapetypePath
m@4@5l@4@11@9@11@9@5xe

WordDocumentDocumentPropertiesCreated
2019:02:14 15:33:00Z

WordDocumentStylesStyleRPrRFontsCs
Tahoma

WordDocumentBodySectSectPrPgMarGutter
0

WordDocumentDocPrViewVal
print

WordDocumentBodySectPRsidRDefault
00FB3006

WordDocumentDocSuppDataBinData
(Binary data 77386 bytes, use -b option to extract)

WordDocumentStylesStyleTblPrTblCellMarLeftW
108

WordDocumentMacrosPresent
yes

WordDocumentFontsFontFamilyVal
Roman

WordDocumentStylesStyleRPrLangVal
EN-US

WordDocumentDocumentPropertiesWords
0

WordDocumentStylesStyleTblPrTblIndW
0

WordDocumentFontsDefaultFontsFareast
Calibri

WordDocumentStylesStyleRPrSzVal
22

FileTypeExtension
xml

WordDocumentShapeDefaultsShapelayoutExt
edit

WordDocumentBodySectPRPictShapetypePathGradientshapeok
t

WordDocumentStylesStyleRPrLangFareast
EN-US

WordDocumentShapeDefaultsShapedefaultsSpidmax
1026

WordDocumentStylesStyleBasedOnVal
Normal

WordDocumentBodySectPRPictBinDataName
wordml://F951_7.T325106.C83118_

WordDocumentBodySectSectPrRsidR
005E6EE1

WordDocumentDocPrPixelsPerInchVal
120

WordDocumentDocPrIgnoreMixedContentVal
off

WordDocumentBodySectPRPictShapetypeSpt
75

WordDocumentStylesStyleRPrFontVal
Calibri

WordDocumentStylesStyleTblPrTblCellMarLeftType
dxa

WordDocumentDocPrSaveInvalidXMLVal
off

WordDocumentDocumentPropertiesVersion
16

WordDocumentStylesStyleDefault
on

WordDocumentShapeDefaultsShapelayoutIdmapData
1

WordDocumentStylesStyleType
paragraph

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!