Snatch Ransomware

C:\Users\aETAdzjz\Desktop\snatch-d0ddc221.vir.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	4.04 MB
MD5	601c6f6b1d98a9627ce8c372a9a2a969
SHA1	1ebd755618055ceac4ae1c139182b2c0997d05f1
SHA256	d0ddc221b958d9b4c7d9612dd2577bec35d157b41aa50210c2ae5052d054ff33
SSDeep	49152:HgZNPqLGVfMmq1d1MRGM8Fvg9fR5HMXF9WzHrAbluBUMNk+cqG2UtBpStPvC/9fu:HgXsMfql+9Q9+B+tBpEPvCF
ImpHash	f0070935b15a909b9dc00be7997e6112

PE Information

»

Image Base	0x400000
Entry Point	0x44c190
Size Of Code	0x143e00
Size Of Initialized Data	0x19a00
File Type	FileType.executable
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.i386
Compile Timestamp	1970-01-01 00:00:00+00:00

Sections (14)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x143c65	0x143e00	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.11
.rdata	0x545000	0x161c64	0x161e00	0x144200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.71
.data	0x6a7000	0x30ca8	0x19a00	0x2a6000	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	5.79
/4	0x6d8000	0x119	0x200	0x2bfa00	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	4.83
/19	0x6d9000	0x3345e	0x33600	0x2bfc00	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.99
/32	0x70d000	0xc197	0xc200	0x2f3200	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.98
/46	0x71a000	0x3904	0x3a00	0x2ff400	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.95
/63	0x71e000	0x63e9	0x6400	0x302e00	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.99
/80	0x725000	0x22	0x200	0x309200	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	0.62
/99	0x726000	0x6f4b8	0x6f600	0x309400	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	8.0
/112	0x796000	0x3dcb4	0x3de00	0x378a00	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.99
/124	0x7d4000	0x12b29	0x12c00	0x3b6800	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	7.93
.idata	0x7e7000	0x312	0x400	0x3c9400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	3.95
.symtab	0x7e8000	0x403dd	0x40400	0x3c9800	IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	5.35

Imports (1)

»

kernel32.dll (31)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WriteFile	0x0	0x6a7020	0x3e7292	0x3c9692	0x0
WriteConsoleW	0x0	0x6a7024	0x3e7296	0x3c9696	0x0
WaitForSingleObject	0x0	0x6a7028	0x3e729a	0x3c969a	0x0
VirtualQuery	0x0	0x6a702c	0x3e729e	0x3c969e	0x0
VirtualFree	0x0	0x6a7030	0x3e72a2	0x3c96a2	0x0
VirtualAlloc	0x0	0x6a7034	0x3e72a6	0x3c96a6	0x0
SwitchToThread	0x0	0x6a7038	0x3e72aa	0x3c96aa	0x0
SetWaitableTimer	0x0	0x6a703c	0x3e72ae	0x3c96ae	0x0
SetUnhandledExceptionFilter	0x0	0x6a7040	0x3e72b2	0x3c96b2	0x0
SetProcessPriorityBoost	0x0	0x6a7044	0x3e72b6	0x3c96b6	0x0
SetEvent	0x0	0x6a7048	0x3e72ba	0x3c96ba	0x0
SetErrorMode	0x0	0x6a704c	0x3e72be	0x3c96be	0x0
SetConsoleCtrlHandler	0x0	0x6a7050	0x3e72c2	0x3c96c2	0x0
LoadLibraryA	0x0	0x6a7054	0x3e72c6	0x3c96c6	0x0
LoadLibraryW	0x0	0x6a7058	0x3e72ca	0x3c96ca	0x0
GetSystemInfo	0x0	0x6a705c	0x3e72ce	0x3c96ce	0x0
GetSystemDirectoryA	0x0	0x6a7060	0x3e72d2	0x3c96d2	0x0
GetStdHandle	0x0	0x6a7064	0x3e72d6	0x3c96d6	0x0
GetQueuedCompletionStatus	0x0	0x6a7068	0x3e72da	0x3c96da	0x0
GetProcessAffinityMask	0x0	0x6a706c	0x3e72de	0x3c96de	0x0
GetProcAddress	0x0	0x6a7070	0x3e72e2	0x3c96e2	0x0
GetEnvironmentStringsW	0x0	0x6a7074	0x3e72e6	0x3c96e6	0x0
GetConsoleMode	0x0	0x6a7078	0x3e72ea	0x3c96ea	0x0
FreeEnvironmentStringsW	0x0	0x6a707c	0x3e72ee	0x3c96ee	0x0
ExitProcess	0x0	0x6a7080	0x3e72f2	0x3c96f2	0x0
DuplicateHandle	0x0	0x6a7084	0x3e72f6	0x3c96f6	0x0
CreateThread	0x0	0x6a7088	0x3e72fa	0x3c96fa	0x0
CreateIoCompletionPort	0x0	0x6a708c	0x3e72fe	0x3c96fe	0x0
CreateEventA	0x0	0x6a7090	0x3e7302	0x3c9702	0x0
CloseHandle	0x0	0x6a7094	0x3e7306	0x3c9706	0x0
AddVectoredExceptionHandler	0x0	0x6a7098	0x3e730a	0x3c970a	0x0

Memory Dumps (4)

»

Name	Process ID	Start VA	End VA	Dump Reason	Bitness	Entry Point	Actions
snatch-d0ddc221.vir.exe	1	0x00400000	0x00828FFF	Relevant Image	32-bit	0x004386C0	... Memory Dump Actions Go to Process Download Dump
snatch-d0ddc221.vir.exe	1	0x00400000	0x00828FFF	Final Dump	32-bit	0x0049ACC0	... Memory Dump Actions Go to Process Download Dump
snatch-d0ddc221.vir.exe	1	0x00400000	0x00828FFF	Process Termination	32-bit	-	... Memory Dump Actions Go to Process Download Dump
snatch-d0ddc221.vir.exe	7	0x00400000	0x00828FFF	Relevant Image	32-bit	0x004386C0	... Memory Dump Actions Go to Process Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Trojan.GenericKD.41958732	Malicious

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.dglnl

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.10 KB
MD5	0fc547c9c5f67a4042501e1b05f22524
SHA1	c7a68ceb0d0ae3b3e8b679b0958904f1b9c6a3cf
SHA256	03579ff5c44fd9e8ef1b3543ae4dee4a0cf7f2b4d8dbc093714c289349579dc7
SSDeep	48:ThaxQ2YYfLwdjfcsT5AhoJhKQA4CzUK6gonIQwi3JdG8tl:dWQ2Ypj0sT5AhXFz2twi3Vtl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00919_.WMF.dglnl

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.30 KB
MD5	8fa74fb39db6ee763ccb11c9f769b6ce
SHA1	bd4ebc8b891867b70469c4e57640cdabd1593321
SHA256	029a2f21eb0c5c50553e27ce46111096a3c174f3e7b152ec6cff2c4e632952bb
SSDeep	192:1yfSvuF4E6tJxX+PWiHcdOKOxUWVh4QxCGu:E/mEUxWZvKkUWQQC
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099146.WMF.dglnl

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.75 KB
MD5	4ddd67af211b24f4c386556c32130c06
SHA1	b7a86afd9975a4a678e18eab9730fd9076ebb4cb
SHA256	c78d8d4ec5f05ad5466e30d126bf95590a4ea5cf7b88e605016e1de835f7c802
SSDeep	384:BfvtLaqpjsa0zJSmmfYm8CxrtY+FbnPH5r5y5UVNknmgO9zrfLC:RZdjsa04mmfYmDtY+JP5rw5aWnmgWHu
ImpHash	None

C:\Boot\BOOTSTAT.DAT.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.55 KB
MD5	a16e14b4f7acc1fe4bc723ad29010ca9
SHA1	a4683bd51f4d009fc2487b6523f23bde580edacd
SHA256	6afbec8b3f904e706b673eff61310966c01519be4b80c61c2b7e7ee09a681dd9
SSDeep	768:Q4dzN8HS0r9W+HkL+WgRJRpjt/Z+0qcLAA2+:Qoz+Hh9W+EE/Z/GcLAE
ImpHash	None

C:\BOOTSECT.BAK.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.53 KB
MD5	f99ed0235622c124c35c9e088928918c
SHA1	078e8e66383d07b0eb65afd4f948aa348b0d3858
SHA256	c7c8ca280b330714d75bbe72c6279c90e9510e301873e46a308a644890fbd297
SSDeep	192:34agn6oFc3Nw+fmfSAfph9waDIGDqRKo/m2eOOrrX1SqstyljHJ:34xn6oFCw+fmnDCyICZQm20rrX1SqsMV
ImpHash	None

C:\Program Files\Microsoft Office\FileSystemMetadata.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	829 Bytes
MD5	ff59163fa23870b8567e45c594bc9207
SHA1	1b8146c0dd37d2f010c43b74556a7af9bf759f22
SHA256	7cdba597d0dc2e77e983f394c48182bbf6c12bc2577bb89401bf6e309b9dbe0b
SSDeep	24:uT0Qnu3N8rIrnw/uMJ9B+W+Stzm5062MgZhA3YO2M:uQNzXMYW7zC0XqVl
ImpHash	None

C:\Program Files\Microsoft Office\AppXManifest.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.75 MB
MD5	bd1f37628790863ac8c12aaaacd3007c
SHA1	54b89b9ab8163a7b275cf451e1228070f17e0b5c
SHA256	3ec1b0b744c4e36be96297aa455893d8aa4f1a6717fee9dc114c461cb5ddfdc9
SSDeep	24576:MJAeAvc01PnkwN4vzz1Y5Zj9Y6AOwaWVNWWHHzRu1k/L9chbUF/Tx7mWqn3gVtiy:MOeePn5N4a3NI03NI35z
ImpHash	None

C:\Program Files\Microsoft Office\Office16\SLERROR.XML.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.03 KB
MD5	3a862c38eeb8a7fe5f295accd5dddc80
SHA1	55bfbcd657a8bea331b6749b44e757636a85fb52
SHA256	1a9fb754ceae777456e3c2ab5fcc804f368cf3d82952edd06b5c5ae57fd54d11
SSDeep	768:YNYohTGZtDu13tQ90bj8VrcRAbQ/lWjJGNAMIzqTn26bFkQN/Ls35CuVTi3WNN+:YNYos1ux1QhcRAbQEGN1ImLDTdLs35dS
ImpHash	None

C:\Program Files\Microsoft Office\Office16\OSPP.HTM.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	170.98 KB
MD5	1f275d7cb2a1c7cacac229d397e8a410
SHA1	8dd3ecdde2948c42646fcef10ddb9f0ef8d0f7bb
SHA256	c2ee206acd84664d3bea020fff08edc0a7551905e246513e3ca5e8ca416fbbf5
SSDeep	3072:mMSwcUCWBYerKqcFZThlTBgClAljUYUvPDlugQwQlM2/2uUHiRTMsRLAGCDX7E2P:Z/BdK9FXlj
ImpHash	None

C:\Program Files\Microsoft Office\Office16\OSPP.VBS.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	103.47 KB
MD5	f5a028a1054b82b99d6e83bff716cd8d
SHA1	5b95ef899f4e1a61c9ae060c63acffdecb16f8c5
SHA256	5e01b11826b7d241193044e4112ce3f678f091d8bb56a8e399cdbfc58ee26d06
SSDeep	1536:8NXRfirb4CZsQiayIgGpRrjDJkCkRFklY1X3:Wh0MWR/XgGpdDJkCkRFk2X3
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.10 KB
MD5	c475f49296c0e5d7915fb452350b9891
SHA1	f0d3c24ca38a3850638f0e15bb52260a1d180d16
SHA256	06b4478dd2cdf43a424f3181bc7fed8ea6f8bb20907fd7dcda94ba0487a33e8d
SSDeep	48:1f9o9/Uwo9FyOXua624sOXWHGjNfTZkj44l0Jtl:1fcc99siF6l4YNfTu44litl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	379.43 KB
MD5	e8317da8b622fb4830c82f84c2300f47
SHA1	f89860c47618619112cbf2f6a466a2f608d5e743
SHA256	13c5ceadfed31092e9a8ad2a9bfd6b2ab72a5e593f4cacc47ccf2613231ea7aa
SSDeep	1536:w4LkgeEz09slKdLh6eU5KHxehHTB6tJAuGGh:w44geEz6d0eTxyzBkAuh
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.04 KB
MD5	2de1d4b96d6c42fd85abd71b517a55b8
SHA1	2f16c9420e52fe81d3521d6e378d1b6f6b0590e7
SHA256	32211b75d733a01ae8aa8bdde59aad92d753a85e4abbbde4c1b830b037ffdb2e
SSDeep	48:FFytBL1Zp3vaYkl7LHb+X1gl64iWZsb9lvDqcQW3ALPGl:FEt/lkl7D964iOsRleBnel
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	a9c6afa906eb055f25d0d71a580aa65d
SHA1	cd230b9b5cc6e030bc707badef47022ceb1c6ebd
SHA256	b0a707bfb05c712e257893b08cda991ee71d03d27d7c3e140e471a0c31e64b4a
SSDeep	48:iM5D17ROWgunEm9FWvV0tduGwQkT4MttfdAfUck0eCSl:nxy4E2FsilwrDeUjCSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.05 KB
MD5	fd9081ea6efe6b7c27dafe5b362218a6
SHA1	8fbb8c385f635d9dea054a3f6eb4fb28d666875a
SHA256	cdcf905ca269d202d7ddb80484a81ad5981f00e2744dec05840f3c40fe88bbd2
SSDeep	384:/7yaOD+MJP3mO626GYaDGSrQOqHXHDlrXLxc4LUJ:/7ZOiMx3mO6GxDGSrQOqHXHDlrXL6J
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	790.90 KB
MD5	e10b07c8ea230be41d5ed7933df3f07a
SHA1	0eef96c5f575e88f4a754e633496627512f53649
SHA256	a1afb4d02a1265b5a713fbb5596c5cdbb2cccb586bedb9ca79d6197b5e1239e6
SSDeep	1536:oAKZCsKG20yPPAWZNSmkSpAZtIQ6fUrcaUdlI+UJ24knuJJxGd2vT6bMVUO380Xb:ouO20cnWtpSaUdD4kuf
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.83 KB
MD5	aedbd476985507b79f428f1903b8cc44
SHA1	77876d452776b7cf5b9a67f8b05ab830cf75b8e7
SHA256	17c11e4c426b065ba4aabe0ab56223d7165a68642dbc22cfd5a924bdd4574e60
SSDeep	48:j8g8K+yAhBS2GGu7CaXm59btuagsoTYFUIMIQceQTXVMJJ9fBVl82Dql:ItyRISCrpAzbyeQTlMJJ1BVlJDql
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	513.26 KB
MD5	57df9e815911337686a84381b6003a9d
SHA1	ed56e63f697b97d685cfbbe84b075f9a9f60e826
SHA256	abf260900f4e4a69a6b8298b62ccad4c5213250fd30d038a4130b62e0feeedf6
SSDeep	1536:NAsLMuI573JSDOdOKz9J2G1CPxxt75gq7sVXNq3Fm+Xt79yd6n4iB2+6YGWr5G5x:NAsLJK3JSDgDzEnxrU
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.96 KB
MD5	c2fe1ba63b126607ae2c52a32a2435cc
SHA1	e94bd531c1cd0aa7bc19568286fb39b991237a55
SHA256	af115d473c3a5f904dbec41840be596167fc4c3729914a244da6f3be3cbcc99e
SSDeep	48:DXG0qm+DVjpgFiiIt/woX0VqaHTqGeGtKpnWh2Kxl:DUDVBtYq0VlzqGeB9Pwl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.96 KB
MD5	1d169b9f80efa1d1e70bca39db45b009
SHA1	3f2b404be8ac46fda9da369c0788ee1bd6ffce2c
SHA256	50d3943afa27059a62b28c8d41e8c7cdd2ee4b01b5b30725c8f577d15003c0fa
SSDeep	48:b2cd8huKRxPOkGqQhptFc/9gXC3JH81InEk6+7JuX5Blx10ayq7Kxl:icMzbQhptFMgS1nEk6+7kX5Tx+1Swl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.37 KB
MD5	a873638739e2f435753c8cbc5e69dfc1
SHA1	bf7b36a72d9804c788762b317b3576af9b230ea0
SHA256	baeb86e966a1bee9be46976d7dae3c1b7c2e1e8c95aef5c1db2b8315fa080546
SSDeep	1536:Ctzosjbq8XqFzVBQz26vSwFKRDlCojgKZnhJB7PHfdHcM4:6jb7aFJ6vzgRDF7t5PP4
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.66 KB
MD5	331aa58862d8be63d7ce6507619539c6
SHA1	db7029d0c7eabf17ad3fd05dda98150ec5b329da
SHA256	f38457af18f250640f2d04b8eb4780caddbbbd419dae8d9d2fcd90df0a339c2b
SSDeep	384:UldV6HVT1Fhle3hLslNwiyooZruXp86YgHyyRocJr+:6YzXlWsLwiP58lEy
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	3643bdd073c1992b579cd913d5b012c8
SHA1	70888b2bb0b7ca71d85b868799e56c7acaa681c6
SHA256	c6b8ecd7051bbac966d489496165d587dd8215693de0ba9a397e87d914e97c17
SSDeep	48:A4vcvvx+4cPtsobZ8/VAwvzE8frVENMSl:A40+4cPtpa/ywrRfuNMSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	29beccc4c6a95cd25a973a84906b03cc
SHA1	55664ded674190f735f368f5d550a74a23c436b6
SHA256	7dd15b9043e552da08bcef0c2c93af5581e001d71db2e7db1cd29e284e3343bf
SSDeep	48:kx20z84m6IG69Bm4f0p+wSZ05jy3bd7FkeSeSl:kY0jpWs48p+w35GLMNeSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	1e569a40428941f2ec1f17438adc6df1
SHA1	0b270cc08a77d170b7625d3e460d25d9c27b731b
SHA256	da87611f3e0c2fcf48dc7d3c1791efca9b990a2ea92828f3018fc1709e15546e
SSDeep	48:TfGsseNV9idSm4+KLH/CIvne53o9ToR3OOLSl:TOsnlidSd+MH/CIvneFo5USl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	7c5a9875ad297399ac8f4e5796fb19f8
SHA1	e90f9e969ca1c06ca13bec696025989dc773697c
SHA256	956b59424b4f146fa132b49cc8a17106a1204408991b516ca4c9fcd88c7d9b80
SSDeep	24:aFdVifOm36YvMxYfjN7SV4EtCLz1YixQoI397JuPn0FgI49nt8WDo/afbYp2M:AdQGcfjN7S+EA5M1Juv0FB49cazyl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.83 KB
MD5	31376f38bd28d7019fee723294c16f7c
SHA1	0a49c07d489ae6e2b8252d7e2d735bb1a60e65cd
SHA256	bae8f62d655b62883636075156e8b03da436ac5b57f6938b194d1164c5950d58
SSDeep	48:muMrnzQGEuT3v0i/PPIv+53VSzqJQ4AJJBnahmygqlcFy//kbPL+xPOOrql:B83vVvIv+53VS+CpemygscFy3kbNOrql
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	dda32a200030fb882ed833ee1d8dc773
SHA1	acb729010404ff5a9b6a7521a89fa622a30609d4
SHA256	7a42feee6ca79d47fd38c5f0a95cd58304009756bf15eeb67a21bc047244761f
SSDeep	48:37xvwEkUjbgE8LVN2jxBug814y9gR8WnhmLDfxOl:LxvyUn98mjWB9gR1hCOl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	769.52 KB
MD5	ffc7dda4533b4625b9cd32a953864e71
SHA1	6fa30ef1c0f463f1befbbb32f3baa81f29dfa85d
SHA256	536df890c5f991e329e5fe60ed975f066734b055608affcf36cdd3e8d8f6cb50
SSDeep	3072:w1zcZNT6OXCzYJ8/4mQxyWnQKwOoPbPf52l:3ZNOSCzYJ8hwoPbPf52l
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	348.96 KB
MD5	f6a7a6c9d4e323a6df5868143c89de87
SHA1	7f59271b367be36e58df262ddac2c3a74fdc6a88
SHA256	dc248815935f8ba9a878fc13a32e60f81736e7a7b0c21d9d20247de69b1e6e28
SSDeep	1536:HhulxOf3B3WRjG8sMRMJE47vpp0nUs7Vw6Hx9JJSej/cT9TztHMKhMM5+ofTMz+w:Hslx6BG9Rw7vpp0IfK
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.08 MB
MD5	3c3a8cc531f596f980d9831b060e7494
SHA1	d5fb224a6ad8995038bccdcc370999bea7d1c18b
SHA256	0844e968e5950cd67d4ad4e7cecfa558c07207509b6b5122eb6e66e6eefbb441
SSDeep	3072:EHiARQfsGhSRDXjwK3lVwRrqfiwwPPxtgExdFlUfKa6:pvsGkRIKcRqfiwAxtgUdFyfKa6
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	213.00 KB
MD5	9d021e9b8880b0a49b581a7e8f989794
SHA1	b0069fb3022d2e630b4913488a7abce1a62a7fe3
SHA256	bbe72d608add9fc6c662af6f80eacd60bf518013603788020213a5d0a98f0c33
SSDeep	1536:a7IFi3CbFsdKVqaSvnzJovznX6/sp4o/aE7U:a7IxVwvzyX1p4a2
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	248.58 KB
MD5	73cd2929ab85bcee219243d113fefdbc
SHA1	1804f2c25f3a102a567d4d901a59d408293ce681
SHA256	1c7a606b755dddf28e43d5d7bba2430527f58eb043382f6cb5862f8aa034df41
SSDeep	1536:hPhrXD4tm75SX/YtDiEGjDcYiMu7fya9Df52HCt:7XDn0vYYpjoY3myiDf522
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	349.85 KB
MD5	b3b5caf09238651f885154a12ea5534c
SHA1	654e79b20a83ab4ad504ae07cfe0132eb90548af
SHA256	a946aaa99fc346571f75d6d1cfa46732674d7e20e4d1c1ac48769ff36591edf9
SSDeep	1536:mCgd+8wFA+Nc14qZYwRdTjS6JAKKf6EORRYJflrtpHoHA:mCgE8rIcbYMda6JAKw6EmMT
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	36ebc0fde18e0ef96f0963321af423a4
SHA1	0237a9cac8c762c43d6c8cf63efa73a20e90f83c
SHA256	9f0a092de05150bafb33edf10de0b4a9ae92ce75d9f44b76b66539f9ab4336f8
SSDeep	48:9XszHqKmyZbz5LVDQ+/Xgy//nuLuaXez47C2zIT5D3nSl:db4hk+/LaO5aw5D3nSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	a80cda5fbe6af56625f15d340a86b2a9
SHA1	d233d9ab2f2584584e7bcb258461c52568501491
SHA256	651f54f77dcb6f6f84e60f718d428e64d287ec2affc2eee4239deea5acedbca1
SSDeep	48:FbB2y6gPc8U/yBzgpYOpXauRS0dQCX35lyl:FUGPEKBzuqYv5lyl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.73 KB
MD5	987c3ffea142ea2b1f00e9898823431e
SHA1	2be2b58388dfd70e5a2f8935e1c2d96da34199fa
SHA256	4a9d32a83120a6d4bf0567677654e7bf41cf2eaf62113c0729cf67715dfb0a06
SSDeep	192:2p3uxLCBbpY2aFcAIIS2UPoO9Ci+r6xvH1EMz4H8KmXUmP5G9MPI:BLCnY2ay9/ok351QH8BHQ9MA
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	39b5fd5bd2c5658a2af14c4fe656bc17
SHA1	ced707161c6ba0dac4760b971151567501ff169d
SHA256	d16a15045ce82357cc8b2e8cc2ef3559352d06d64b0264cdb152417bbfe88948
SSDeep	48:t2WjonRJIX2pHzBaZ4pYb/AVHWVcJGASl:t2WjaRJIeToZzb4JSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.16.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	927 Bytes
MD5	c95b54d5526fb69cb148ab6268bb84f0
SHA1	0cb3ed3717e3596402d0d56f503d31a085188a0e
SHA256	dd89c3476c1bcbac7eb3988c68b13592390286e8c70502159522326897a4863c
SSDeep	12:tl5M4jESZ9vYRD/FoPK+ES+eQpR++Emqvs0TvmvJcT7CC2HY3jFrp8oZ2eHJa92t:/5MSE/NI+e8Amjfq3CJHgCGYS2M
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.96 KB
MD5	8b05cf79991115e078c845161a2f3c69
SHA1	ebf94a3d6517c355e4e9972927b4eaf36afcb25d
SHA256	624778d60962feeedb585e92cc1f5057557f706c3d68c445711e491a24513e7d
SSDeep	48:ZSZHXfEuVXpeEtowDeXQphpTCb3Hn8iSzKxl:ZSRh/eUeAphlCb3H8iSzwl
ImpHash	None

C:\Program Files\Microsoft Office\Updates\Detection\Version\v64.hash.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	654 Bytes
MD5	4f0ad346f485f674e880fadc41c677f1
SHA1	abd0b36da1427f7203c3f858dd423ae6591dc9ef
SHA256	771717e25d1e0924b0ca82ab51c81187d23d04acdb87b8265ffc1dea9cb2f264
SSDeep	12:NBO932Cw1++aZfBvJ7dJv7uES4UzYWdQcRIh2GWGHJa9+zT2M:C9Bjd4TzYWdQgIfYG2M
ImpHash	None

C:\Program Files\Microsoft Office\Updates\Detection\Version\VersionDescriptor.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.09 KB
MD5	78d1afc9bed131eb205f79316a1e096b
SHA1	9e95046715f140dd46862bc19a498669fdfe976e
SHA256	2ab3d3b2358574f9ada73cd9a65fc2e9dd673de7289b88b6e520d3fa04c682e5
SSDeep	192:9sz66/pwzCk3ifGhB9jPbDb/aNWz0piOXNIcLpIT56z3m7N2XUO/MD9Az:9sz66xw2kyfCB9vDDaNWn0IcKT56bmhi
ImpHash	None

C:\Boot\fi-FI\RESTORE_DGLNL_FILES.txt

Dropped File

Text

Not Queried

»

Also Known As	C:\Boot\en-US\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\da-DK\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\ja-JP\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\pt-BR\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\zh-CN\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\hu-HU\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\de-DE\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Apply\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\Fonts\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\el-GR\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\sv-SE\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\cs-CZ\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\fr-FR\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Detection\Version\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\ko-KR\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Download\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\it-IT\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\es-ES\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\ru-RU\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Office16\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\B843911F-CE0B-422E-917E-7E7331D1BFAB\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\nl-NL\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\A2D24017-4FB1-4B3A-9228-31FD2D620B18\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\pl-PL\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\tr-TR\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\zh-TW\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\PackageManifests\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Detection\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\pt-PT\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Program Files\Microsoft Office\Updates\Apply\FilesInUse\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\zh-HK\RESTORE_DGLNL_FILES.txt (Dropped File) C:\Boot\nb-NO\RESTORE_DGLNL_FILES.txt (Dropped File)
Mime Type	text/plain
File Size	605 Bytes
MD5	90fb0728a07baf5bc3e177ef21b175ca
SHA1	ed5e19a942c668537aa925be6c1ecc7790a63255
SHA256	3dd562e5279a9c962a95ea80cdef84bc43e94be6c0fa9d79faf875c045c4d026
SSDeep	12:a0zeGLZA5vDVMC1M8SGEXDjarsRvkEBv5VMdQpNGB1OWKtuJqFOCYvlj6G:auNZARG8HQ3GBoWKt1FOCYJ6G
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.16.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.09 MB
MD5	dd881245a46ec2bcc0057d90d6cad86c
SHA1	99cc941827333fb6ebf74c9513803223e3fbd987
SHA256	39714a18a4b7be82e9a2fe21b4b30ed46cea238f1e1b8cd5c50df866da138fa6
SSDeep	6144:6IUYo4vUZyI7jKd1anw78q8I/wSSaHSsASjS2SoMpRkppEhXUp6SPS+bS7SoSCSP:/UYo4MHOd1anw78q5R
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.16.en-us.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.29 KB
MD5	2fd85b802bc2de66fb6ace5d9f4d515f
SHA1	973251f55fa129adb723020c209618972f97bd81
SHA256	faee7d956affe6de406a983c3ca675aa1b820a7956fc57b7f134ff12bf95b96a
SSDeep	192:lUXejsXeyc63gcp8D+SeKuepNBeEsMz5K3Ww64eh78SRcnil7JI8Xzg2ISNWZoO1:lhsud9cp8D+S7ueUuI3y98YsMG82MYoi
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	5d18cc970bd3a9e554ddeb71fe9f7f53
SHA1	5be87a4628e11f7aed55337df82ad08bbaba21f0
SHA256	f75a1c830823d852b0e4e68ca5f1f4710cc6fee0d2c2305af98de299fd335989
SSDeep	24:5Kd3gPSHuPi3j3+EE56oZFLM4lY0gLHbmnl84aJY+24GUn/v+2l7uFosDnkYp2M:5g3gPiuipK3hYr7anld4GUn1uF/Dkyl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	08f0b39cc03e8c217e6a3f1b25e845cc
SHA1	bac4dcdce2843d2826984683b596ce5de790eb35
SHA256	3eb5a3025658ae2a0de57e7c586c1245f9a8629f0974b6faf6502d071254f20e
SSDeep	96:wLoOkTRF7h778GimrxGgF7XvYe0loiBXzl:wLcPx78bIxGgVwX5
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	0fcf0cca2a7da3bd438ff5ca8bed1a12
SHA1	70a8dbc95b08e3804ae82d4f6294931a478b7d03
SHA256	67c578551cd7fc6fc1e10f66ec386b755909a05d58a8ee13ffa97f32f413bb09
SSDeep	48:f8vKRfTAMU3520kVtySeVOJIKHTwGOmk43CL+S/mTDSl:fowTAM+kXH7RGmRCCS/eDSl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.41 KB
MD5	d5550f280c3289fd4ba7fb045872dc8a
SHA1	b9292dabc63b6b2ac09d15647ed94540246a6880
SHA256	37d7929d88598c04fd4abede61e98eb5052a2c975b72d22eee0f219d568e1cc8
SSDeep	96:by6mD5WgkeGwCNws4qM4g6dUMHP2f7dMRwXGjbyeeFU7l:mNcgX4z4v36eMvCdMRcGj2eyUB
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	2573d319c78fa1e067b5da078af613d9
SHA1	8eb5968f09bd36229085ee1e0278843d9868ec9c
SHA256	c16ed3b754a13eee4b533658b0132cec89bd8cd26bcfc7e69d6fe262f4abe338
SSDeep	48:HchZIcNHlp/MEkjYcmO3wEAFqNOJJt4uTyjbJyl:H9gb/1XOD04Xyl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.08 KB
MD5	967f240465899867e1753c4919be9837
SHA1	8d0dcbc49d03c28874a2367fc316e365547685ff
SHA256	5394f6bbe92c375304d4b95ff751a956aa569597df88e84f7ebbec2b8c849883
SSDeep	48:WQ21ly0uOnAKBxDLlq7myfcKpt+aqaNRCl:+m0us/UgKptFqyCl
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	537.36 KB
MD5	087dcc748b5d2a5946045dbcabddf0a9
SHA1	4bca7a27c9296aacc7f5c2f25e13c386ce81a275
SHA256	d03aba48b87994ff727b8f3bca2829e99893df17e1b0e8ac4fe168605f4f1b87
SSDeep	1536:az72Coq15vd3sUkXoU4yaXkOVPnesxJ5YuKt30lQ8654D:Ov/1sUkXrSXkOVfeIJKlMD
ImpHash	None

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	382.90 KB
MD5	f2d59630eb4686656f77cae096a807de
SHA1	aeed6c497ec040f47637129b19cce60b6add9532
SHA256	d190c7fb912f39a1ba0a4049f5c1c7566af762922a43cfc937193d8bb57144b0
SSDeep	1536:CdrR+KiG0NsH2jJv7aKc6xlFUKyjWS/xwU1h28IAyYIGS:sDssH2YD6xOpwahY5
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.45 KB
MD5	5de36f4d3759eac168e959aefdd8fa12
SHA1	a88e898200c2658ba312a1f7b63ed3a40c4a2c91
SHA256	821cfe90160f3600bb47ea485f6bcae942898f7339560722629bf5b6acf811c6
SSDeep	192:+U04XOmdSUtWikdKS3BT68KhPsN9uA8FDPZFn38XNZo2eId:CmOvcWVdP3x686PsazDPX3gNZ/
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.58 KB
MD5	0a9e65d47025ea7127eab5125cef2a87
SHA1	41c98bd630ab052d29157590b4551158bf5b253d
SHA256	feb48de97987baff473ed74417edb8f1a029f0b77ebecbf59ffd0042adbd637c
SSDeep	192:ehy4SJGp7Gpxd2//X635gvUL1HVFCMmdtdhoNyMwEyNp9:wAy8/2//XA5JHvCM6tdxMNSr
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.35 KB
MD5	ddc7458f73b8510eaede41430bcff7a2
SHA1	5f1825751da0232294b88a2426de7fe38344abd3
SHA256	f69c87d6e148e69bcb8b4358806146b95d760580e301c17b1388e4b6f20b3397
SSDeep	192:iCyFd7kmwYChjeILMtltNsdiuJ9t7xuNddvOMJuLoFmWdRLj2F373+O:iZFd7kmwYWaIM/sdiuJ/7xuNddr221f0
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.03 KB
MD5	46786aced4d978f8c272002951b2bd9c
SHA1	ab906bfea42f2b1aea6f73bfd791bca9e7f70260
SHA256	3c2ece0f3d84fd36bdd96d60db98fab2246524d7d86c56ed49980abb23f24e50
SSDeep	24:ADUN+9vMivt9nzFubkQRrvWZfMIX7z6EDQfWYmqnSzY8K2M:mc+9UKEbkcafRz3DQuYmqSzPKl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.04 KB
MD5	11da8a4c990e8bcf9304ecb973aeca27
SHA1	d6e7dd48b88fed25fd18c4237094e1152a9f2fc7
SHA256	bf0f3af8e92d73a8ea681415c96158e0feedb3efff5c210c29b824ee26dc051e
SSDeep	24:Sy+t65n13A8PGTK0Sfm8Dunyrsr6oacsrNYdNfoJhYH2M:LP5n19+Sfmqc6otse7fkYl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.95 KB
MD5	8a10f4e81cb997a65ac07d2765e13871
SHA1	8ae2b1f8e8432f6bcba1dc39c45c482ae37420d3
SHA256	556acfa3442fca71fa7006abe3d35de20c23cedd78db81526623daf7ab26d805
SSDeep	96:vOX2RgTrqUjncjrv1DC6ggy7IWSbdm6O1xK4hSWxl:WmmTrq8U71pWSJmFrhSQ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.95 KB
MD5	2be96b6d18cce5bc4b23fd1dabcdcafb
SHA1	fb1e14c4cac3b328159eeba8aedc00dff282cd8c
SHA256	6b51fe601dc3631bfd19d3bf6ebc48cd898814de44adace4eed1aae9d586fd2e
SSDeep	384:zE+ocly9NcX5lJ1ebrHSKp9ze8gOHhpxOx:zE39W1o19zeI0x
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.16 KB
MD5	6eed23c10c8d42e9b9bd6052ec203fb1
SHA1	0dd5341cf7fc9308653f8b98a9caee7bb4becc03
SHA256	c146d70422ce5084838cfff89920c33e7e3e22b9924dfb383fb5dca559c77a84
SSDeep	384:GeOpJii8yUMpdMtIDkcL210TY2TY5uLlBM:AiTipKutL21PhEi
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.60 KB
MD5	835782a16ab0f07cbcd5af8a740f4798
SHA1	0fa6409ab7d5aa3a8b9ddf101110ae46babaf92e
SHA256	d802c4e04558f6c6151a8ca57f6188c6906d4148149636d28a25775d8828fb69
SSDeep	48:AO/qbOa6jO9aGFJboozCOq7hOw2+lxdAODmmr+e5Nb7kqty11pGr11joKwGzl:SOayOvvb+cw2ed9Smr+s17/QkUEzl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.07 KB
MD5	440ac7bcbb9eb501139d12c1df4b2c1e
SHA1	75e38f969fa646e28ff6c579aa7fa8b2312aa64f
SHA256	45870203c41e9bde97ee06cc1339cd0b7a9c2f427ef3c649e7aa46439812da6c
SSDeep	384:uYmU8w/bkGssndvlpeIGroyROC1EFOvDcRubRoq1yotjOHWp:uo8w/Q1sJlpeQ6HEQlrdOHk
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.72 KB
MD5	4852e63eeb0a28704dcb2552bc439422
SHA1	903277f4aa4b0a57cb24a580720adc597e02534a
SHA256	2c7a64d7910b0c65164ce1d684e7ebfce24a30ab26c59f94e592690f143a2b8a
SSDeep	96:dZ6uL/kval7VKc+GAUiZ9jnKfzEGgpHTtrCUW86BPhkl:H6sMvaHkGAU69T8IFTBZEJQ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.46 KB
MD5	a4a62f7b2df186a12555262e0e514c7d
SHA1	bc67d17e9d970de468bbf38ac8486129c17a74fd
SHA256	877c51bfdf83e5269c60d38da8010842f213cd3cdaa6894935d065eb63692ddd
SSDeep	96:/XAlNuk1I1sGi5BgJYJoJZZtDZpQ4wq/t0YPvVXy+gXyszJDi0NCfYl:/wKk1IxyBgUKb/YMvtyjCszJDrNCfc
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.39 KB
MD5	266adeea52f0eecd2e057d0490aa17b6
SHA1	a7ec5a3ab6b217c4e23f743b73db8ad3522168df
SHA256	69c0adec572deda7401629d9178567ade661bb9d8a7ffab2f85d513e76924f0a
SSDeep	96:VED1f6Njf23co/avuYoDhuyCOE+K7ZLRGO81I4KtPs7k9axEXQtXR16UZF8Zl:VED1fOj23c4+WDEyxp0gtlXRN8L
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.07 KB
MD5	75f76bb7752716de64280654aa83a228
SHA1	56ce1b9b713caf9c20d5b9c85480af465f53fa3a
SHA256	eed7c6887935a2b6d3d2f06da6a1b707a00d722af248b2e3bdbb0f7c7aced55b
SSDeep	48:gZmWqrWb7hrHLfmSNy+VVqmPwsf+rC9Gd/ZA2XomK6Ola2chZW9w5E4Rl:/CnhHfmP0VrwsWraGdC2K6Oehkw5jRl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.96 KB
MD5	6b879cfab317b14898bf2972bd1d491b
SHA1	71068b5f28d6d5ee1fe1f1b4613bf2ba61e54996
SHA256	aa3939c32208c8af7e0355394b30a80abb8fa7f7d97294cdf6670f2fc3578260
SSDeep	192:qd9jmxkLtPocTImkn+fhSvB6AWdzF4zJ+me793e/SdZNmXMupUgU1:M9yx2KmkkhScYX43e/SX05Sv
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.50 KB
MD5	f4ae567ad1b5be14825dd1f5e5e8891b
SHA1	323feb5b4d084e5e64dab1e19b5410ae0b1509db
SHA256	2ae471b8de301750499a8d44ae706cb58fe8802b49b1a9b46fe5189a3dbb08eb
SSDeep	384:N1TU0GtLnEaX34D3JL7Gv6ja4a+DHnABaJQhOEN5Hm5mQULRjh:N1TUNYaH4NL7GgR8BaJGOYNymrNl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	55da0b58950d40f35293ab25d0a0fa07
SHA1	56e3b18d13de7e26e056107f586806b64bdabfc5
SHA256	7b0c8782c3bd0d63d0f999e7c860f6cc54e64b0ac28254a4de734ee1d5650a7a
SSDeep	96:bAcmgItdISTL7CdS6q2GjgtQoxYKUNZAU2Dt3QzCdUgIskKwd0lIZG45tGl:bqgItv+S6sgOq7UXAVDt3QkUgIskKwWV
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.36 KB
MD5	f2a7f24f82ba5cf3df6ba593b16d9f5b
SHA1	ac43aa79b9a92f35ec88df3edf27f5963b41f747
SHA256	77d2420018965e1411d43411c94cf3bdc19520ce10ddbbdc19072d12595beab6
SSDeep	192:RtNBRz+9fPpSiBtm+7xRPziFlMKaw3tXnfu:Fz+dPwOEwZ3Kaw3tXn2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.91 KB
MD5	bcd413050e787402476ac752c936db6a
SHA1	9e9af26f77cf6e975440b93a21ec1b2db9d8207a
SHA256	3736b9865d4efaa501ecff8d7275c81852f30ba76cde5812ea8e62250c305e89
SSDeep	192:j43Pjzd1ch9twTfxdLG21qE5MLYEPRkC4ep3OXVtPEeqHflYqlLBN//BK5:j43Hs7izxJG+eLYEPRH4eQltAHdYyPX8
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.73 KB
MD5	87737be9a62bb4d45db2223d333675de
SHA1	f381172e08b46b241ff028a7d14d52ea228d17e0
SHA256	a4b5dbdd45eb22d05d01dfdedf405eaed6d4bdeb965b06b71444c8e336d1af8c
SSDeep	96:kq/WhqrK577aI2Qv+7TadvRdbEJRiWdoFg3pOhEgofMasrnvnVPqZCbcGYNYJYkd:kqXrK57Z+yFEJRiCoFqmpnvlDsARcZ4
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	8127afd890cf898a00fc98dfbc54496e
SHA1	b9f56627511b20a9e644d9d658f720325d66b271
SHA256	0438fd010eb910a3fa5bc203868caf0bf5afdcb8ee50f205c35fcfd56b992132
SSDeep	24:iWDzeUT+MgG5yRzZSc8y4Z9EOKbDiRLbJ2CyOU1UPTcfdiSJjEovglHBGKFlYa2M:ZyBRzW96Ds2h1UUiSVehGelBl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.05 KB
MD5	f9821bd40aedb961bad58b015d29beb4
SHA1	c4b8df959ff6505360849b5a89879aeb157ddacb
SHA256	3c8963b0c7465c9febcf2b9269c81d55648be7514d1f90eee16a85f8bc345be1
SSDeep	192:QYSlm6xrxkXN2vkkuI0LgTLB2B543fpikHEcOHmOD6N7Y+uXbotB:1Slm6Xk92MkuIYgTl/fpitmOD8c+usz
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.07 KB
MD5	265ecb1b2c678eb156d774c2ffa1f3d1
SHA1	b61103e310db880084226cab64daf61d530a8f98
SHA256	451288c27aa959306b43b362244ec535c95ff72a175ac98404c01f65d6df3693
SSDeep	96:uN3WzOU3R6VsTLFvA4z1utr2waZDzYCXjNGH0mTXgtx2NY+rtdLu5VlfyhQIIp87:qARIs5zpnDZHxXxI0HxhVhyhCp8jwA/b
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.73 KB
MD5	2055369db280085893cc433327f20a49
SHA1	be9f2e58902b9e55a87939fbb7f59f0c44ef9a55
SHA256	fdf4b352c54b69481b83ac6d0001b18092d76e569123e0fc0c78e44f8c80fcdd
SSDeep	192:ELVi/O0mFohReg0R+5tEhPt+XVlPrq0Pr44TcskV+z/3/I0YcrG4U1HxgzYJ4OZm:vG0mIt0RwEn+TPVrZnt3rqW6m
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.80 KB
MD5	b5836b325bf690b683928026bb189e5e
SHA1	de376b59bff6f5391e4f9720c0520591802ff876
SHA256	7f2329093d0d04e4aff2256bc12f4552f5bec064a7cb5be775c6647647a82852
SSDeep	96:ooa5ZheToUz8SSWLSUeC7Rrbj6W4Y5/eiwokx3I66t5AiIqIl:tE8oU8SJtezueiwRxY6O5hIqs
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.92 KB
MD5	e0ea37abb9eefaffa82cb7362262a273
SHA1	735ca501d1edb6a8be77631c1c8128997d79a0c4
SHA256	a21d2419572324c88d26dd283e8665b514e8095aae49fedc1298e18ba4851ce6
SSDeep	192:f53ucJJEmIf77TSO8oczj8XueKKz0u+0e0tpcwwMIHkz:f53jEmMT7be8Xue/gMe0tpgK
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.56 KB
MD5	1e8f9b6cea0772757c591d8c28779d25
SHA1	b0a457984dbfc04903d0b9a0a0c0812f8fb23258
SHA256	2ed45da8b42ada5523890f8dccb71f344bff0945cddb22826f13cbb688a52035
SSDeep	192:ak0Jo2G/FYwDtfMR9DtXXNCPtH6Ual0TVcurepRRuAbOl:aBJQQ3XD2TmurwqX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.49 KB
MD5	e8e44c1455eaba1fc2ace317336f10aa
SHA1	d4e4e1f55047e6c9b8b58ab8c8aab142ff1b29ac
SHA256	ee275804c1877f88b57f9f6393795626e017b3e990939a090fac47ea4bb52ebe
SSDeep	384:34vhQ6K3PpVfvHab8IgUS61d+4Km9RotQYighY:aC/rSb8R/WdHD9RotQ7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.32 KB
MD5	88c29ef032dff9c0345a081f41c9c29c
SHA1	c80acc162357f3c10f11be0256239cfa46939b61
SHA256	df0a2049cef04fe5951d7049539e76accf3a9737a49596d486524b34135c8340
SSDeep	96:65RDb12WUOep9QLqxxOqWbt0s10K6L7CR0q2lRjA7Vpx3m2D/IZo6fOZzwnLzMMV:ERP1ZUPZybtrTIC2leZH1TIZuxwLgMAm
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.80 KB
MD5	2bab31ed494a48d6d10eeced60ee4977
SHA1	4a398c03316897985a70b5e3697447f3629e5bc5
SHA256	db67f0360fb0c29af89103bdd74d7b8036c4d74d397aa09ea225c23b807f59b2
SSDeep	96:QrsRvnBWDXaTsx4LbSGXU/a5mhyleRjwSfA7BkB5rzyL5lxAK2xEBt9z8MjgYNo7:kafBWXTeL2GES5pl+/A7BkB5rgHuytjC
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.32 KB
MD5	c748d25e0494e017cb83a483266716d7
SHA1	e5907c19165a5be0fe7fa0ced85034f9541f1ab6
SHA256	364e07ea4ccd378def4442c5045c87740b2a18d911766412a70f6187595fd5db
SSDeep	192:DuaPXMCt3gT4S6jQoE4OJDWoTVQQ71nUrn+C:DnPhu+jQoLW9ZQQ7iDl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.26 KB
MD5	4c8ce8725f80ac67d63280e21bb9c4d2
SHA1	4dc50f411b43b622e50df3c33507364574f78f3e
SHA256	0e19cc406190937e300dd9143c89fadeb6c678a8e8fd0c7fad6875e7c08bffec
SSDeep	768:JezyTLeFp4/KYTpaKY/nM8LJ5Oo0kFxr7pjLqokNm:QyGInpaKY/RJ5OTiltmok8
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.58 KB
MD5	79913954ca445ccfddc8fef8c5b866a4
SHA1	a99bc8ab12b331ae51795b914c4a54e526bc078d
SHA256	a535058acb4ef5af33d9646424f030d7c6056bf988e1ab51a71573c93322af23
SSDeep	96:1hK33wV1HNMJmjmtJ3K4fIihT0+Y6mR8udZNQvl:1hK3qcYmtJ3BBTR2ldst
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.24 KB
MD5	cbe4248abf497904861b730ac2c3c8c3
SHA1	6c93c16e783df25e87898a78e765a584be13834e
SHA256	9f7cccbb4fd041e706161993817fc7c7c4aa349a0282d95f9f3d61574a303f27
SSDeep	192:xjlcIyoReuVnsBc6bXEPi0Ys+g0UOuMcMPAtJGYw3:xUtvQ0UIcMPAtJb6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.75 KB
MD5	beea2deeea15be4e55ccdbdf4dc987d7
SHA1	8dadcd74847d6248e0116624ce00010a99a699dd
SHA256	33888d3bc94ed0a138e1bc77c6e43cb24ca2d01e1f2a4b380ce210e7d9bc0ad7
SSDeep	384:3pYPBOVXbMiQX1NOGf4WhQUDP7kpwT/wJKFUqXeuuRrjyrKyB9FE2docVp3+ma:ZYfi8NOGf4+kpIIYVeuGurSe3m
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.44 KB
MD5	397e455c95bb1029e493a9a9e9fa66f2
SHA1	53e85d4e4f94456e83a27b0cd7ace6fbe3e13fa8
SHA256	2080f18fd248eded0c766dd4c5b27a45c4f43efd0baa32df21e7e6ac10020243
SSDeep	96:MQu5rAChgUv535p3xYCHinHpOVpmTAhale+YMdp7MYizcuqQvtCkTohJa0yTOKtW:M15cChgU7pBVCJOSyGdp7MYizc3m9EhV
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.09 KB
MD5	b901aa11c8ead25cb8c4573537d48521
SHA1	a4eb2275dffd99f4bf2c762cbb95b14c75c07e49
SHA256	3c7d3e35b7bb9a46f0bcb1a51ef5739233bd14c05a8a79eab3a05f1086f20ee5
SSDeep	96:35z/unuqxFJxrU0wcPulor/bJxOsJe8EC0D8Jf2jG7x/zEuT1u3iPwvNfdVl:kFlAYuloDFz3ECim7x/gu5eiYvT/
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.63 KB
MD5	5ff5b5ad9480d448c9cee97d99946db6
SHA1	426e9832d4245150f44834c40e2443eda9266d17
SHA256	769d37476b60a96e3883df86ec5cbdbd18bb2a2a9d018950b0700c9d584a24fd
SSDeep	384:H1zyjXHlmjpH4crlNxDIFuSyVojn1i7oDgaXi2yH/f0xzv6NvhPPS+KGI9NdhWXS:VzSFmjecxDFSyVojn4EU/fovq5PtKGqb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.20 KB
MD5	1069dc6c85025a4e3587e9a37e0b4689
SHA1	c0e7e388e8438df76fb99a95dcbc684d03987bbf
SHA256	0cf9ea1d63ac1baced2dadb75a512a5381c3290ade5e0bfca9339925c1aa1743
SSDeep	96:+vcgLGZ3fzQcF/2C42X5CdJVDc+yHeicVZ3jyXl:+vcgL6rQG2C42cUHeJh+1
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.45 KB
MD5	52d54bc2e0f9658eb6b6965d96616690
SHA1	01c6e8544ce70702db014838a44cbaa752d7b2fe
SHA256	d2ba01a9072f17a39669a060c4e0fddaefdf03b9d263527585806c6d0da77cc1
SSDeep	192:GISZ1YuSuVkjIZjM0URVVeU3LiN2Ri4nCnE1tSmrX51Ge1W:IYujVEIfUMfN+oWS6bGn
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.33 KB
MD5	557c5c1152bc1ce4500dcc4aeaec8d0f
SHA1	485a8283336ee79ff68ab79f1a41920b06129303
SHA256	de7ddb4a66ebd9a7ab470fa83b037fccdecfc2b90f2f446592ddaba7ff3c4f39
SSDeep	48:OgTbWZc/tQA2M5NIzzYNwMuBpDzz40NvBzdrDNPnJJQvjql:HHmc1QA2+yzzyw1BpUK55rZnsjql
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00932_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.63 KB
MD5	aa7e4a569a5c78121352d22f53996a77
SHA1	d47dd76d8cd06227792b4c124388e1d488698f7f
SHA256	598b49720a078f67eb45954e9acff16e6bc7f90e61748f5f7f41603b76df3a41
SSDeep	384:z20oYNPCta6WYJ3cKZVH364z6GtFBK6ZgXt6:z2cAtJWW3VfH3nWGtFY8gXt6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.50 KB
MD5	9ac2ed164fade5d3b157ab88c6d583a3
SHA1	c111fa05bc21f464d7e11203262fa90cc6ed614b
SHA256	b747c86255c0726f97b18a4b04ce0db1b006c16c6c052845e3f7c1cc35de1a7f
SSDeep	96:teST0YUsZ55gcrU1mWCLR4Jl1tzemIMeMsl:teST0YUsZ5nApemteMY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.10 KB
MD5	a1e7f9519bd9a99647e5e2768d68bb4b
SHA1	628e9dc256cb3bac284f32512c50535e66bdc6fd
SHA256	dd52216a3a99f9476c1efb5472d0bf8137f038d7a6687700faee350bf611eabb
SSDeep	24:6kBzI9gqPdnWguMyOt4wVVfeXLlsKtnFwRw5TW8rcLx8Xc91efR5WbXCy7loehhI:du9flnIUtvVVkGwnFkwxcvXUWbrihttl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.60 KB
MD5	fdef5eed871f0d0c87a572acfbe97c93
SHA1	c75c09dca74ad198420c36d8c5103eb864a54962
SHA256	8c1982098547e706e7cb50299731bdf3a63be82d6fc13e7122d959b9956174c0
SSDeep	48:mmz31ZeS/xzz3UFwd9VeGfjKecFIehPT4oK4e0/l:mmzHVIgLjKec2etTtN/l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.23 KB
MD5	555966071a93d649dfbc869a56cde06f
SHA1	05ec3aa94d0677b33dacc593cc8c5d02cc7413f2
SHA256	6890133d4f72655088669d2f7d90b02b347b9ed372c2f3ee20a798832824b206
SSDeep	48:fV2pqHVBzd0e0d5zW77NlKJ7pALKS/jG+0NXwWD9i7BUtBDlYgfxl:fsq1wXdcKJ76LK/+4Jiut9egfxl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.48 KB
MD5	9386256d71e5f8f16d4d17846fafbe69
SHA1	bf36fcdafaa0b07494e2569490c4359fae3f843c
SHA256	1c238f03632e49eeb7a7af245052b996a8ca17d14c05fdc081903914055a8135
SSDeep	96:ineE001ZNbogzEav4A0kj6r5b+K+04MOL/NWyl:+eh8N8gzEaWC6rD+xL/NWq
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.43 KB
MD5	89a7a7fc3fa94dcb33864b99cccef351
SHA1	28d36dc18741e5188559a5ea1a0e3f153170cfa8
SHA256	87b029ee1319449bc729349004d7f90b2abcfde76d7a33382de2c98900b26ebf
SSDeep	96:9XeNnWR8JgcKrmUu0SSvhuGsoyrR6BzL+Bx8V5jSYacl:sNnWRCg1asvo0RuxYXao
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	225ebdb599e2707fa8251dc4cd236bc7
SHA1	6b52c77e155021f1cfc6cd9b693031ccba5cfa65
SHA256	b56d64b3290e14e7964430fbbd5029df3c24ad6bda208c9e5d182af432ea85a2
SSDeep	96:O/xAZswEmi7N8Kzc6OSFo2HzfzqPll+DuOWFQguCrguUIkxa9KLjMbGjTwnUI/l:O5V7N8V6Ow+2mQuNnkw9KvLjknUId
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.83 KB
MD5	bbd18e6da5ab5d9b7bad4195e259db07
SHA1	084d321951ca07a9c9dffc6496fabfb1101b3554
SHA256	fc7eaabd09adb81bed4c89e4aa4ca8c488d50d35a22e138a798668dccac43b3c
SSDeep	96:WP51vxbwDzTkpT3SKO5ZDtZkYemV6Y5NJnargQOvWo5HN6I6Bm5usRil:WB1kTkpT3Sh5ZBZkeVT5NJagd/Hr5ug6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.84 KB
MD5	18458ddb34c0ea50a03fedf2ce66face
SHA1	8d53bd61f5126f3bffa0217b6284d1d288c597d7
SHA256	573e510aef5f3769c54b24566148079826572f6d55f09f7f561fca1270bcf03e
SSDeep	96:ZBUmcsJualqBSJlClIH4l3SLF9QvU/T7CTf5T2c72Retil:Z2Et/JlCl44lCLJPCTp2xRet6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.12 KB
MD5	be89d5018f05be57b91276797f46822e
SHA1	1b975065b0da5ee1eeace70858f958f2f4e30e26
SHA256	dd43f307b85c46a43aa66f0de5180591be4366a81eab1fade92ccae3c3e435de
SSDeep	192:P57u1Xe+7p9eUeunKFh5F1GtatI2r0WZXZpznPe+QJSroDSrvN2feLz8U/:ByZZp6J1GtX80WdzPe+QJsIfiz8+
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.82 KB
MD5	218b672a74b74ef61d5e721dc2a94f99
SHA1	16a6ee638838d85d95b7e2dddda539130080445c
SHA256	fe5e34cb420a27d6538a56769237ffe8a115733ee9d9ade39f5e03c841f77475
SSDeep	48:tnoJzANaQqtTLSmm2CEaFDIkM2od3QU24xIjfcmWqJ1DPfifhXh1jcl:tnoJzqaQqtTLSbzEalMjdbeS41fmvZcl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.56 KB
MD5	4c55d21cfe7ea46abc0470409c53a1a2
SHA1	d1b03a0421314cff0aa3c2f476fa759458310b09
SHA256	e081c631950d7cd699d6aaff4af62e679f48a8f1016b03a2846bd767d18ef97f
SSDeep	192:XuCllTccl9UMf5Wi/xdvcfXatnBgekIH4ODLC98OXHsBfGPlxz3d:XueccDfxdEfOguH4OChlxx
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.11 KB
MD5	0cec8e80c2d624b955e1ca8dd0dea47d
SHA1	17b00d37b5aceb95e79900ad0ac08a658c856aea
SHA256	f9dba5919bfd4a999a4c87320594d0ed9d5f44d2c9c7e231648a63e13cc98d4e
SSDeep	48:lXBbUqigx/H9TGM6ctNyn1Rhr5XGTGuGhVcuw3bB+A/isp79AXLfJiqJl:MqighdT318Z9GTihVcDbB+GG7f0qJl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.91 KB
MD5	b25311abb48f452b5645111d310f6340
SHA1	8ea30506aea4b796dc9c3ebda5f885af49583c32
SHA256	b9907fea7884c75b01beee646a52d2f34d466aea7af4ac88b41f0c1e5f58ab46
SSDeep	192:lpPcycCjrXennxWbqYQZdT9bE9wyw1gZzptSs+Yn+j:XPDZrZQT9bDyw1gNp4aI
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.04 KB
MD5	37c264eb6cc3f791c9690b02bb1d9ff0
SHA1	53028ef730304db979973d8edecd885a60a10d04
SHA256	d9d1bc8e14aa30680ee81d2091ddfb1a96d8dc974781df79ec39ab571020addb
SSDeep	96:ez5B3W45GzCeoZlCcWRgiQZ9dqlBWCzi2PjkqH9TShAR4mEVLmgf3kvZl:CW45GzCePVg9dqxzi2xH92hAe1miKL
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.02 KB
MD5	c45fd08266fac4abdda7b001403151f3
SHA1	432ef63fcc06d87eae29f94040270884f0b90c3a
SHA256	b71d860ea1c2aaf01f1b675800c2afa972750c85b8b00ba02c16484fc82b6567
SSDeep	192:QomVGv3vLLASDUORgzw+CZtxSmYfnW3GhCwU4:Q3QzLBgU+MxhYfokCM
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.74 KB
MD5	89fc87227e67d306abbafaf1bf904b77
SHA1	5446152a82068d2d8c4d95513260fab456321daa
SHA256	653131ee1cafe0fc3d4bf47c5a1f22b675b6417607a6f33f751d195e06cf05b9
SSDeep	192:iwzwQ/rZzNlpj5R+o2LaZaDKAgsqEJpujLmB:pzwmdxlpj5Rz61SC
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.03 KB
MD5	47842663162398d4907b751ed55685f3
SHA1	579f1897ac96d38fc6872b296f6cee0c8e5fe433
SHA256	044f11b9a120f2323a7e7514688837eea2e3fcbb89926e3f5e943b3cbdc591c3
SSDeep	192:u2Omgf8K3dVTkzAlRYWh/lZ4Wfnv08FUW8:uxFfN3DVlRYUZ4WvlU7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04117_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.46 KB
MD5	5879df2d2fde896675ce8992653fabc8
SHA1	a029a0511d3763967bf7c46a11138c5cd6744a2d
SHA256	bb17aa4fb91cd74e601fbf24c9481b0d5d613623c1fdedd66bbfab1a789d9327
SSDeep	192:TKIAxX1qP/+OVzZE1h2RsH9F1qAAWGqLUggqYmgz182zN6WfO:TKI0XG/LVzKMRizqDiv8I2zN9G
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.88 KB
MD5	2540c2819286d6fefc859ac2d2c07026
SHA1	54a28c14497a558100e0540d7010f9e890938683
SHA256	bde41beb9471bee1d1ada3aa666a36edfa48a6dd3faa7a9581a6bcbdd43398ab
SSDeep	96:A72oZeznkSAXlRB1jHww9x99yUEHTsp1I+Sp9J7Q2sprqahl:AhZeyXlxrxryUmwp1Ip9aUE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.04 KB
MD5	4d5a6b5f2f503e2ad9016c1b32b075ef
SHA1	4bfcb8cef50958fed4f0d8a63aa3a399fcffe03e
SHA256	5f4b67bdfe45c829e237ee7f1086a069feab7a84f86416a234ecdacdec2a1a27
SSDeep	192:wPQyjnwabLrhhD8gqOmpiTC8q+qNU0aLznAp420KyI:ejnwuLrhyg4pkCBINLG0g
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.61 KB
MD5	8b0bc5e6d9d401ef1c9755d8652f4018
SHA1	75b34f04c9e6990a4a28a8545bb2f21b6a03afc8
SHA256	1986feac29eae0d9785f9d702cfc9423cc81fd8015b479cf45bdf8548d537bd3
SSDeep	96:fpu61W83UasCiIA41hRuY5j6hSpZxL8rYWsVAbJ3l:71xlZp7sSPL8rYW8AbJV
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.83 KB
MD5	d5601eab8dcc0cfa1a2be0ccca23e075
SHA1	410d13b88e69c180838d1d86410dddfd96b0848e
SHA256	cdd7db8614f5f09c089a52e80ece0217101d7fe2c8a45d7b2b5d0389b749ff8d
SSDeep	192:QzoVna+IUynnMhQxuv3kVZsDH2WxjAbfthTD3tBn0:Qz2snwjvMe6Wu7z0
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.51 KB
MD5	98787775cbcd4c754ddafdc1fa934829
SHA1	d635ef30af6214f99399dfe0ef49bc09685785b2
SHA256	328592fcd62d1cdec65e23fb9ad4fcad121034611816e009905b0c158333f4c7
SSDeep	48:Hb5vdCvVCohXaq/l4b2MfL5i9kQNddGL/Gotz8yBF6qKRwrj/QYNt+bil:9vdCvrhAa+IkQNdS/GotgY9nHIYNUil
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.81 KB
MD5	26d16d0cb2d0c192ab87dfc886030b05
SHA1	c4666e2c9aac91b8626b72f59f80ee4f7cf5e978
SHA256	a5dcc314afa52c0f7907ba5956d5b0cb3bb170a2a3e9c58e2dee3cd079719462
SSDeep	96:pOkFTsnlhSxxtuVllsP5lrtqCtH17CpPULCLrJMl:0kFT+hSjkPcr7g8mLrJ4
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.17 KB
MD5	cc133533ab087ccfa4dc026ae4707f07
SHA1	8a167624a71b12054cbcfbcc13ceb2c692487b6d
SHA256	673320cdb770ec5b2f267b048489bec78326ee7cf4e3317e28257613e376dcb1
SSDeep	192:25nJe9/MYXNFGao4bdLnnCqEWIc2bZ6rZsif29/w6F7Kf:2R49/pXNF44bdLVT84dgBFw
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.73 KB
MD5	95681667f71f48f0b5eafa63e6fe5422
SHA1	1b91b0f15e8f9424f784879545a9952a797a7eb3
SHA256	d6cba2af7d6fa3d82a6bd4edd23fe8f029642db3f9c286522e3387ff58f936db
SSDeep	96:5nZjuMKgrW7DyOztliqvr0Yl9rkmeCbFeG52CSgT7IAJwoxShbXb9lDSzvl:zjiIW64Xvr0YlNkme6ezCzPwoshbXbnO
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.69 KB
MD5	da9d85d97f1a6c1e50033cd48cb3d858
SHA1	f786597e247fd06fce07ff7b14598868a7982def
SHA256	bc2e29b79b878f288e12919c71a2e476a4bf5fecba5d04d2d8bc46c5d841ee60
SSDeep	96:7cKNi6yzY74rKBLGQr4oG8KKNvQwcpEBAYSnKM486D/ud7l:w0IlrKnk8zNozpEGYSnKMCqdB
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.17 KB
MD5	e72127987eef53a17d6aee3b2f4adf46
SHA1	6380f737b76a994fcbba14ec72a5ec31f6f7e8ff
SHA256	96092083a4e70688b9bbab569afcb8b56f55cca8a8b158a78b6eca7974b9bf9f
SSDeep	192:yG2VmQa/UIJxQQtP6+ZLfGPpg4JcYTSlfyvNAtwM/p4TeEDpNXsZhkBf:yGNL7qQP6gl4JlTSFsawqp4aqNXs6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.23 KB
MD5	b1322f9c1cbdbe787cb3af9e5055b062
SHA1	057a6e28ae136ad1b82c964084a668068f4a3137
SHA256	d5c6fdfb226f837ee63ba5e832b936c9566ebfe0ead01c99a153d2d7fa906de4
SSDeep	96:urVwackoOAZPtYbBvBaqkcAHFoA3LQG6SKFcoHz2ytANYJ1xTYfVWJFl:qmkoQockogQcC6NYJ11dJP
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	700a92d0199555fc472020fadbd7387a
SHA1	9f771b241d6fa0d6aa7bc4d2e1e89247a1e730ee
SHA256	52de5c97be4cfd2eea9360daab03f6ff2f36de2856da2e95026364ba0cc51d7d
SSDeep	48:DcO4Xfj2aSDB6rkqxYSNHk/FvCrwdhvOrnYQMnt15IP9enERfEBtoJs8Jgda4l:DofqawQsSiMrwJln544nERfyqJsWgo4l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.42 KB
MD5	709df9f264a1854538dae366ad5fedcd
SHA1	ec356c3baf9739846455ee7707f0d83cdde4ba09
SHA256	e5b430f4f1ffb88d18fa3d67c6e256a30ffc8462115ad49bea048cbeda033c0c
SSDeep	96:vOyuAXrlDEUVFcIBYahvgqYZUeKGPfegBAvfiLuU9CjBwxw6yhpHW2MRtJN0dlal:ZuAXruUVaIUqpKPfe0n41qw64HLMMdlS
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.75 KB
MD5	308015f1781fbbac55d8d94a558818b9
SHA1	1f2d6ae9e5e2b648161624a46f579a7119bfab50
SHA256	d641d99151dfe906fd01f9c33329cdcd941a1649aefe0565f382a54d276fbbae
SSDeep	192:5CSYQ8d1ufZf6Dh3YJxxWL4bN3Sicldt6PfWCm/sJrO99V:p58dQwDhwuYN3S7l76PuCm/a4P
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.43 KB
MD5	25ac8fb2ffc984a16e7cebb4d17db185
SHA1	e790ecc519da3e756aee3abd5ac1a5d9b9e3e8e6
SHA256	268aba8839c4ace0e41214a8b7cbb7fdc588109f609d8e676a253d343df18369
SSDeep	96:AZd+TrgLondUWZAEJg7JgArJHyQisUJsBNlH5x+QGtaC+6oj4rOlWiglZ4Cl:YeqoFZAE2NfrvUmB/HP++6oMrO8iGZ4a
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.29 KB
MD5	79f2758172ed96c17c7452a908b6a6b4
SHA1	a6b3a04ecb7f7a77d45e640cae7d67254e5f1759
SHA256	f3c5967d86d2b410960f4c2e59a50b3764a87d95ae6296178aeefcf9ae94fdb0
SSDeep	96:m01nRIdGTjvsrLx0rq+YOW2QRnxuBsBTlFxnZgNiT/S8X3cxAzgy9b6JH8oLkqbw:7JvX6F0rqwlQmsBpTTKosKl6NRvK/CE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.80 KB
MD5	48e200e2481c76faaae88fe2a89f2970
SHA1	2d1c443c9ff54b1caab4b0b4d259d4552c8ba723
SHA256	84cecda8149ad723110dcbde0e178186c16b945ec01b4025bd380bf9dae4ac26
SSDeep	768:jmDBM5HorCPbWAOjISzHqS/vvdGb4XEPs3Uok2:j95IrCPauSzJ4bNBoH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.54 KB
MD5	971a489b8ef23a37027e47b5f8c6c819
SHA1	2bb43ff462e0a3a6f8b049e5d499cd9f286b62c9
SHA256	5c5204c2a613c809ae2d3184445f67a5a3afa244157baed0d03399be66ea35a8
SSDeep	384:GzDu6fC0WVG8YtZRWsXW47ddlJiY+CT/Md41nhwYGkSWkfwlUqfZLXdWQgaU1A:q6m+G8Gv7XWwJivqD1h0kBJVftXdWQgu
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.37 KB
MD5	9bcfb8e5f8c8c1966d3ab115b4c84a3b
SHA1	a8776495d04e1e94a26d698b1d1d0bb74a58a8d6
SHA256	b45d8ddb9f819100055bd3742d3f553bdd787032b4671a15bef84c0cbaafc645
SSDeep	384:EBNyofOMpdkG55UlgUc92NfDzag1yWCgn/BsyxnRKk81NvZJP+a:WN7fOgdkUQLxzagcWz/BsyekmLoa
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.81 KB
MD5	a65df73699b182769d213287f3a24e38
SHA1	4ad7d9096f54e2d68dba5e310c465cac28e3828c
SHA256	7e4f8d63a52a2e334978607cb32e146058ddce9666ab6ce58464ca9ba806f8ed
SSDeep	384:v9RAnzSqDOf/IIJ5oe6LCunYo1YuR3bnVDgf+IWIuyMLO9VWEiu0wRXol5Z8JzRX:v7AzoGeOfYKLVi+jyMIRe5URLj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.28 KB
MD5	eb3c2a7f158f67009748b6d70a6d60a4
SHA1	07ab5df6f05784f4d06e5d30c986c79147dc54c2
SHA256	f401c2718b8ea330f2c0443109edc4dc53d8f0c80ae46a32c1231aa1dacee952
SSDeep	384:rVEmJnEKlnEBiRgwSAhMo0pyvqHS19GPooS:rVEmywEIRayN1wP6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	47.43 KB
MD5	476357fff8e5507d17635efdf0286629
SHA1	bce5f366d6355b0242b694d78c7b38a8ad50cf9b
SHA256	1c453d9a93d870fa8369b9b3fedd9126abaaee567f21de850a652e5bd60b209f
SSDeep	768:QhMkkKBmxaCEzJy+0N2ENmjThFX1i36/XRFCY4AjbdrHg5Y8QsNvSBtrFb:QhXv+aCWyz5ohni36/zVFL2YG0BtBb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.74 KB
MD5	62cf45a1e31afe60099797ca740a2142
SHA1	b28cf558a2e98094b27c4500251427d3e6d3d892
SHA256	404a1f73d454efe3ff4fcc95966660a20fc79cf8234b8fc1f786c846e2fdde15
SSDeep	384:lqNAOM0qphTprPVK7ngXKUOMV5OWyJCQI7HOvCUSBs+zPmJW6QhZet6QWarV6Wg:YaKWhjxBIWyJt2uJ+zr6Qh8t6QWa56Wg
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.33 KB
MD5	4926273b5080bdc1ea8866fe3173355d
SHA1	249c1812cba17aa34a9ddff8c0e1272f60fa509f
SHA256	c6a2818380adef6c5cd09568ed110bc69aec4f9887364725af911f4929ca4304
SSDeep	192:wvMzu7uh0t68vosefe2HdCEyMXM2cSgwlnfKwdMNJoy6EQBBY:wvMqu0t6oHgZHdCEjM2cSgw5KhfofbW
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.91 KB
MD5	968de2396a98484b678d3906afe3df73
SHA1	efb826987b11cb89fd367b2b7575792282593f4d
SHA256	3661a1cc6341c26b779aa1f9ae63d1d04e53fd6a885e4cefba8908101ad1bf33
SSDeep	192:9yW9nYX0YnFbCHUHIytuCJ+8HLYq49Ts8DbeztKMQz64tG9oEH8fonp7OmlA44:979YXTn8Ha2uBQbexlQzW9oi8Ap7rs
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	47.22 KB
MD5	d3cbfffc77da45dd419562d62a91af79
SHA1	dd252925b8a8709be2101081f5bccf9c2d288973
SHA256	eea49c0d494a1ab3b2f2476389b6557ba595cc5616e9ae26e261306db88024c4
SSDeep	768:yhmJVdXIraB2PTHsKW5ap6BlEx563wwcciu+V1jvx/Nn/PyXLm6v24aKFP:Y+dX12PTMKWy68e3eciuajvx/Z/iL7vT
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08758_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.29 KB
MD5	aee8aa5fde3a754a422a8972a19204aa
SHA1	81f4910f5d8a215d513df9e5290c7e0977f5c67a
SHA256	b74c76b0771580e158f83731550897995c0e13a0b58bbc3128e7fa6b0995c5a2
SSDeep	384:2QDmsSK3jMJiJaRwBTSDYsgpzobvZ+1oku2D8ouIZ13mpwDZq3Yk:2Q6snCiJaRwBTSDY/zA01A2Dt3mpV3d
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.35 KB
MD5	625ac808018fb9f6e97221c4007c6beb
SHA1	b7a906abdb54ab73462b47b425afc04396438f8e
SHA256	c7753fee44ab55050f23379606046fc85f8c938e887b11a5a42087ef040390d8
SSDeep	384:XEK4UZrFXdr7hDvaRZMAsoN2roS2bdTCV0KDUByLlKyk2N:0GDBJvr5oKn25mVVlS2N
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.61 KB
MD5	8e0e668c0ec8733991eb3aa1c363bbd0
SHA1	a3a99a800802ecc4af6871e8c69d603b62bd1a34
SHA256	ee1deea83d74cbad297f5498da1869ab2999b2347df6f9260e91fb5bd6cf020c
SSDeep	384:IIwp0mynC2xQqav1UrovqczFPVxZhPRYGuCbJUlk+zGabxJ0a5Ydn:vwp0kRTv1+BcZVx7Z3Mk+zbxJV5Cn
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.81 KB
MD5	dfba0fc09dbd03f25d93453dda2bc03b
SHA1	50dbb3e417083fe431e4e10a8f611becc57743e4
SHA256	40f4d220ec3d7fd49028585a296fa932f6b0db9b99c6c4f3e24ee422fb99b984
SSDeep	768:ziEoObBmxjX6kTRDzl7MVv3bjFWrwBjImnCw8qPcFp1ueP:ziEoOgd/wBEmCwZcFp0eP
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.03 KB
MD5	7d1992ef0495d2aa15c1d667e6e94acd
SHA1	f787dc82064f322e9d0cfe691aa1b514510b239a
SHA256	a6f20a90dc6593e1ec58560a762b1ddeb50b1703f17474624b1bb1480b33319a
SSDeep	192:1jxq24YpEhwrHQG9Es+GQiqbUCgPKrWj+q01jSSO3ugxf8dO/rjjIwvWjm:1jvpEiLQG9EMYbUCBr/qUKb/P
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.77 KB
MD5	865e30e383506297241233a24f83fdfa
SHA1	9b4ae5aff9b9b57975396a399879f183bbedafb2
SHA256	2df243ea8af8d83f831f92fec3a9956716fa6ab4905f8247df3ba629414d3b8c
SSDeep	192:qsQD92tlNmLGKlak3fZ/A+C1xwcWEtYbJ4nrf9glzuhNL2QPvv/EnqBZ3dmJbB:qsQOlNmGKw8ZntEYb8hmzuH2+N0Jl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.35 KB
MD5	ff8059d8e8e139c2b6c1208ee6d98948
SHA1	7dea2a5763880ad91009cfbfb4e44d5595222fa0
SHA256	9c87d1cf8b496f83ac85e2dedc106ae7555b29646476bb11a194c589d8252d37
SSDeep	96:mgcEjU/+OQbt7qu9IdxNIUPIT6uIGNvdqE/NxDlLB5s1ufoyl:mVEjOsxIOl6uIIdHl118pq
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.34 KB
MD5	b85a93a9df7de2ad129c77d5125fd0ba
SHA1	3ab1be54fdcfffcd74036223151dd41309051a0d
SHA256	54a78555fa0cbcf17f80d16ab97c71950df9bdf90b3a5b103336151cfb0c642e
SSDeep	192:/ucuwdbzoJBx1VzzeZ5WzAW052mtfA/B5AQBOLXwpmQnv5l8Z6ZLo39IDwveY:GGdnoPVzaZczKT9oBxALXwYMhl8ZAk35
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.53 KB
MD5	4200d01ea09e2e3014297b1d2f08dfae
SHA1	2d70e9c831756af61fc0fc6c4b167168dce1b22a
SHA256	83f94b756a38514e949f78650f98dbd6abb8c7b2891623ae3c79c3d6fe433633
SSDeep	384:wHfe1LJVuuJwtLdEuTiKUxX2pc8s7EPh28XqD/kWliFCGgP0RKlOxFFcHOf:6fGHwtLdEGewpsI3qjli4/P0RKlOxv
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.27 KB
MD5	f57e8cbc6294970b8346638ae6661777
SHA1	8be77cc1c11c0bf1c7883dbbe0108b5869687f74
SHA256	1a3d281be8060aab8c0fdad4752b26df628fd1757758098e3e7db672254bed6b
SSDeep	384:W3+epndbcmtscHtakxJMd28HKDMifNsXQCiDwMgUjxxz7RA+AU7X:W3+sd7n8GJMd28HOtLwMgU57RAjWX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.69 KB
MD5	7f1161c2ba361abb6866cdd746992c06
SHA1	b29a72e8f9cf932740d2db1d17b9b5f013f4f894
SHA256	c512d292295b3580d6d941b886ba581339bc0776082d0f04b06d29ca2fba8d21
SSDeep	384:PQFr1YpqXECz38WvXb928LBNE5DMoLrAXy8wo:PQFr0SECz3/dHkMoLrAC8wo
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.67 KB
MD5	64ef929e41f7e3b57dc25acbee21306d
SHA1	a131a9d63867c01c7b1bf66519e14e8a0be92df5
SHA256	9ded6125f6e407c02dc0168e40710c418bb8557dab0741d745db1c0c70d2fe86
SSDeep	768:ClFe8kf6UlnmU1FukfsCxzatPyBkACInX7LUvrBrK:Cre866UDcosCxQPmkACqX7LQ5K
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.22 KB
MD5	b29b6ee6117e945eda19cb5db235ff0c
SHA1	24b3f72665e6c201b65cd74b6a90e88de9ade70f
SHA256	9b7a267a54a2a4b25a37ccc7b21ea99a9b8342cc37a74eee450131fd144fdbcd
SSDeep	384:0JXM8zDLUOwkI/tuteSk2AKxFJSGPLMG4E:y88zDQkI/sHDNjhb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.75 KB
MD5	0ae30c62a8663ff1f6aba1324b903a7d
SHA1	56d22ce5f0561429144f9c382ec8b0a8778f9f30
SHA256	058ef1a6aae4a19fc3c640f33b07af90585034f6442f8a7d10cb796abc3090bc
SSDeep	192:D+mic8sWpkzc4SqEKcnnaFtMC+3yUkwP8ekx5Z4KE7bqkFNxis0mZcjrw2CdG7fV:DjsEPSpKCxC7GrkJd0Xhnj7tl3HVm
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.13 KB
MD5	247bec5b1bdf7ff4803e2378d0f233d7
SHA1	7be5cf4473dfe8215cbe04661fcde1c34b1cc6e2
SHA256	611d0b9313ffee4ca4c337c105ba46859f4202992c6991ed9f26a0d3b23bb4a0
SSDeep	192:Rj+piAZoTcMIomp3ZM2eNRFda1WCULszy0mftNj9T3qfA/rmyTIJA21ly0Qpl:Z+vIcM3mp39QRFE1Hs0mftNR3XrmyTI8
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.23 KB
MD5	4cd418d037ffb69512b929966f7f98ef
SHA1	6df01c3d8e2c3db005c1c7001cb7fbfd5ab3f70d
SHA256	75b3ae7ef5241744a19a06ab169326223fe972f1ce874c3f0608b232af7d2c75
SSDeep	192:TKkoJumY+Mey2dMOVKXXcWtAQ9j4lZEGm2IG7ajxzlRVdGYlfbR:TiJuuMk7KX7AMKZEdjLxzvx
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.82 KB
MD5	214b3101bc00d81d90846489b529c984
SHA1	e72251bb05d9199546dcb0e7cd2e2b05baafe175
SHA256	f55392b369d8228710eba9a91243c96aa3c1b9489851ce6d122c1fb50d3667e9
SSDeep	384:vH8QQj0MTgMhfmMjm5MB7PqVVMRNNMCnzlKW3dOho/lNtJE:vDMhTHB42NyUpKW3cUNTE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.97 KB
MD5	f87d2904c225b3720ac92e2aaa6b1fff
SHA1	96602204c288f17d7eaee1a5955521c720633280
SHA256	636b1b976ecf0ab0565a94027ce65d67054037bf4ad2e861fa97ae0440ac75f7
SSDeep	48:cxNid/9BxWDIEWyW+W3vX2NLHWkRvdr4JRFLD4l:sQ1zWzl4Ocbn4l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.41 KB
MD5	622b93d3a32914e085b8dac8031e8225
SHA1	33cf607123115dda9c1d25158badf422eed758da
SHA256	db4d6a84808c4764c7680810604fef8c19572e1aebbddff0020aa90e7ca9900c
SSDeep	384:jwvsFC0U2n9tMevQdygZT3Z2D1OZIzhhuj3gCoBXwwHvo:jwvE7U2n9tMDdygZTJQ18Nj3sBAD
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.53 KB
MD5	7f9f5bbe66602f861eaf5ae3ac587f4d
SHA1	0b57f556f013c5bb83d7d123e6e0352195660350
SHA256	1c33eda8d2c7a97deba07135bc8a8b7e574c42f0f5240e3717e160d90ba7a5db
SSDeep	48:h7tAsw4GDKkjuzcgf4qj/SXoBPsGJ1kvUtR5any6l:tw4MTju44j+0PsGJwwUy6l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.10 KB
MD5	7fe61cf2293e8a120fdd16b91421714e
SHA1	935dfcfda2df8682430872b6c310bf0e3d3569da
SHA256	1f9085577cd182192c19096a4949e18d20d7d88722d4e8f658bc2388e996a285
SSDeep	192:HNNUo3PrjcMSPWEHzTyLyv/c8CYfdPLkCLyvEDGvi4j7McUHE8DRb:Hco/kMOpLvUdMDkqyvESvMcUksF
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.40 KB
MD5	6c5086d67f87d474f6cc4a37f962a9c3
SHA1	81fb5e8088e7df05ddcee500359470e52a51fe6c
SHA256	c30a5993a58dfb58b5e936e014278f60ae8a9657cb7b9b30342c7baefdb7fd81
SSDeep	24:DAHqnQMS0v+aWrLbSAHRjBY4B6DxChOidebCGWCAMQEYx2M:cKQr0v8SqtBYS6DkOiYGRJMQEOl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.74 KB
MD5	daccb62bec06b8687bb719097ac5302c
SHA1	b93294deac8a363623a35a3f0ce7e8264ccd890b
SHA256	3d38d611536acd6c16ca65792f67cb0b2d7927800fd1b12b05de8690725d9be6
SSDeep	384:b8Ds6kP1IsDtQcEVhUAneyAuUslqtoGV1f4I4IOqNu6:4DVlsxhEVhTPU9tF4B9qN1
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.92 KB
MD5	f43efdc8305888aee50b86ada0e2cef6
SHA1	a0064859ccfe203fb79a00f452fdcb1fcad5de22
SHA256	d3e2de928f7593d6c40c59ab7f8c499ed2556e4d6863092c13fd1c69743fe5d9
SSDeep	384:uewxKTLCrVSs8Y7etJhf8nt3gOIytl3fqKu/PXN/yp/sEAel:exKyl7e9f6tcmJfe/yp/Dl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.52 KB
MD5	10a4df93dc96a9777979af12a6825785
SHA1	852cda1a23b3eec8ae5825a8b8c8be6b299d887e
SHA256	e092f4029cf003aa9bd89ccd114b4b551ddd1c95a81fb7510f4eb196b931b553
SSDeep	96:1NyPm/JzZR0QmxAWpQqfChVl6L6oeTYzq0ElEQl:3mm/BoQaQqfCh2xfqTOU
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.45 KB
MD5	6112a09a41586bfaddd4743dc9882df7
SHA1	3f1c24d1a7c34c027c336f37b7e49b12ff120fc8
SHA256	e29295610792ba6c4850fda565228de2297a877d75e869817209923ba3e55444
SSDeep	192:3BL1wDEzXJoQl3x/S5jb/mEDBDXQf8J6ZANN/qZKe94hG6lCEcquzLa7JOM:3F1EEzXNlh/m/m8J08JrNN/S9H61V8L+
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.19 KB
MD5	9c57daf99744d330346b4d3dc86dc9fd
SHA1	dfc87d1d57a449b9cd21f9d466e257f59ed37db5
SHA256	f23b717629f4e9a4d24d05ccc3cf7a052a3359bf3985b670fdcc7feff3269a41
SSDeep	48:NfwD8Y+z8+Aowrd44boB5SDjovK8yfB3XQ7hDohl:FwWBwKKoCnovK8ypXQtshl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00242_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.48 KB
MD5	c5bd91b212eac584de41b2ff069b5f4d
SHA1	89a425099b198dc9b83de439af06eeeb35acf107
SHA256	1da8270d9090e3ab7b8ee3693473e473ad38077e8a7d0caa34b766fa4e2a700b
SSDeep	96:D4r1HAECWVpDCwWAYEDHen/61q0QeVj18UrmcOUIhuo5QBiKmn0Zl:D4r5AECWV5Cok/61q0ZVaUYZhuo4C0L
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00234_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.62 KB
MD5	03a4894971ac72faa753d0343c4173ec
SHA1	b2ae57c81f2a4d1353e21f187ef8256587d3fcc9
SHA256	dd0daa91d8bb2809f16a9fb2c51d9fc01fb0398fbc41b4fc0d89a20cea8afe68
SSDeep	192:CVeqDvpydoysV7pUe5TpRjEAW7Jofx04mhZlzip9Mjp3Hd:CMqDxydbstp1T4h7Jw2HZl6qjp39
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.16 KB
MD5	c14baa82db300d99419281cb01bdb447
SHA1	39c7938c820f06b412e377a55996aad36f8567dc
SHA256	f85cac3b95818848b0871d4b6b97a18c0f66ede5443a7c5793a78c474fa0c4aa
SSDeep	96:i8b3hvinFZ69x+MRP1P8P3YldOI23Z+nAtrIUbrtzJn93KqqgWahuohXd+wpl:i8d4Fyxj8PIP5qyUttnJV9IaX4w7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.03 KB
MD5	360f2ac0e2932d9efd32d6f5e51d5c8c
SHA1	f4a142c1721fe81e12c3ce1b39f695b3d461b159
SHA256	999d2c8d6adabb067601060ddb84b2ee548916035dcbb2e4a648b334d028fd26
SSDeep	48:+t/n5VtYur+gWPdCs1+OhEqJcOp9AyjQZLIUpM1ZBl:+NvtSH+O7S9hZLIt1ZBl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.02 KB
MD5	4cd2866526cfe682a03882181d3bbfb3
SHA1	8f8dea760f8a1e4ae46034ceba629690cd7cded9
SHA256	bc5e1bef0dae0fe3a6bcd3493166fa3e7920f4decaf2570b71a050f83c937635
SSDeep	48:o3JfVqgd+t+gmxO2DOhRRljCf7oLCY2auNeu6+hl:o3JfVqg++gwpDOX3gTdNg+hl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.44 KB
MD5	48c823f06e2f77c546034d32e6d74ca8
SHA1	3b408aa458e8ea2daf6876095a9d1bb1063131eb
SHA256	6b9ab0a49bc2879ad6ce4319b0c80b058c4a1f2a474ca5905dff224e5c38478c
SSDeep	96:1K/i7OXiwIG/uNMk8/W+sy2wJweR85QLk09Bu8ngl:E/RXyG/uNMk8/zsJeRWeFBu2E
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00247_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.65 KB
MD5	47336645ab5ec8d05789c99a2efe5a5f
SHA1	aded33486cb1e84274db7ac4b8a607528bbf4e71
SHA256	764ea982c515829e39bc2975792e66fc9b39df4c0d92475d0de7f0ce3fdcf237
SSDeep	384:SwrMae8F15hdMRFuza3VZpFlYOuvJDwY0+bAbCkJo:SwrM3018uza39zYOGJDLb3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.23 KB
MD5	2379e15c18837176a08a776907dd9760
SHA1	e81634fbb8510cb553a402b6a5259902a9535d4f
SHA256	98bdb334ffb634a16870932291eacf5d37028b1203903953668194dcb8fbf3c0
SSDeep	48:vycSc0ASkY7jzT9uP7pyYVxkD650sWwKG/jY8AHlXA8kwJl:bLnYbZ8wYVxkOXX/gVFJl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.14 KB
MD5	59690fad667af94aae2631cbd660cbd5
SHA1	e615726e998d1ecfac5ee7d2f77ad4527ecbc460
SHA256	5bd5c0b9c39a079fcbc1d77a988b7af5a6d0263ff2de2e13685dcf879793e3f1
SSDeep	96:Io5me6HOIUkPruJB0sFAeUD+rJ+7DA5sSGRvDz63MAdk7HTQz7JF8myxXQ9G05l:Z5me6HOINjuJBtWArCX69k7czf8JQ97r
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.84 KB
MD5	67c5585f62b1a3853ed60a0a82c08011
SHA1	abdbcae2cb8b25e578709b67de0068122a4e7cb8
SHA256	2ab714b7cfd5a05e0af8454775995cfd668e62c8527d88d5eec05686e3b9f05e
SSDeep	96:isbHUd6ocaAv0JFalgeNQ38AIB4eDdPIkqggsnlHXjaDWDX+20Ul:ieUZUg+g2yyuoAkq4lHzaDWC20g
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.78 KB
MD5	b8a5ae8c56e3bb5acb9bffccd742d1f1
SHA1	c66446f07d202f99a8d5a13cef67a358d7b1561b
SHA256	126b79222ea6655cd17d1ca62df941e1470e69d2d28bf8aa9782bc99eed43dfd
SSDeep	192:ORy8vGqvpnrm2RC9R5qdfw1GGtwY0yxZgTi1HmZfnHa8StKwYSLd6PbvzcC8Kx:OgSfhrg7jOYkTaz8Stk8diaa
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.45 KB
MD5	14c27a7107bf1b814c468e4a72422fde
SHA1	5fe82c6c3acaf35c2a8e1fc96e6350d92b7b4372
SHA256	57da94908a0ed4facc07c11edc17ad10c88a1f6368af58611776191f2ceb8df5
SSDeep	768:/wv5/sKLfRwbknUsEZjO/I3kJA0d02Gi9uL7fSXHKl7JcVx0Np:YsWskUbO/EkJA0d0Y9jHKZU+
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.38 KB
MD5	0677712c6882b26162f6ea982f121de6
SHA1	82186cbd76788eb1e10b9deaefb9b0c16454cf1d
SHA256	8529db91a4ac0fab804a89cee566cd4d09affebdf49ae7108ea8f89544db38ac
SSDeep	192:x+IJ8GOJheH+1SFTBpBFpvGaFfNLBdZH4zR4pUbbRkEq:DdkUNLTluMyk
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.96 KB
MD5	2dfd8a9ebefde0d6e0c8383f844a684a
SHA1	56e6436f164a40cb347b82acf6ba9cc7fbd20f67
SHA256	6157703ae24b36d11a42a8c87b186142667b48d89e580ad07278f6ae0366cf1c
SSDeep	768:H+80ZvVCgdz+3cbl28/JZDbHhlkA/OhnfjZX/wA:HGBVpdz+3odfPHnkxfjd/J
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.69 KB
MD5	4dd145a7ebdc3993b3517dafc2f6ff6a
SHA1	dba18d212ff93931d080572acf1d48407de3e4d9
SHA256	eaeb5f6612ed457525c12f3fb675b6d0547fd711baa84be0467b274032b71892
SSDeep	96:JvDXS2x61JzapJt/SJa+OEnBkx1k9nSRvdnBhMNNe5p9V6loHl5fmepvl:JLXeRa52O0DnaJBuyp9V6loHfmept
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.91 KB
MD5	76dd24cce84f676d90498eaf50a1cb95
SHA1	7c8db24c55210c4c16d8cd4af9a602ea9def3e63
SHA256	715b4747480b32b9f9a8f3fd208767f5d8ccc94477edc44f0b776601e9a781ed
SSDeep	192:Xjoh9anZCYpFdil7Y1RDb6ytuEJ/vniuDZ4xz5Iui6xiqejkbcj4u:ch9sZDdilkRuEJXHD65hxi0cjP
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.60 KB
MD5	84af0cfb97c0245b1c940ef4d80a4e06
SHA1	6f2563e79e85a67b220e8a511410c65eb58a5a41
SHA256	dd31dc3190e215e75664b41a766a0b20a3625979a0dc7b776a8e8e0f45f1e098
SSDeep	96:pRoqbiQiIlkXM8GYLtpTyflMqs+OVzRO7NNgJidluR/l:pZpa7tAls+MzRuN28dluRd
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.81 KB
MD5	ed1455014ee1534a7698d936be299cc8
SHA1	6fbd7aa28d0d4fb721092261edb93d3550aa1811
SHA256	c3160f87330ca407e990b4bd30112ce17cf1f18903ed963af509ab8f4b245b94
SSDeep	96:yfo4vDKFx74Nlj003uFjnz7/dTGgV6ntO0eoOXbsZzCKwq+2l:yg4nNb3upvhGKHsOXIZmXG
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.33 KB
MD5	151e636e395bab3c9bb5a58519dcd509
SHA1	8552a627251416d222ad72957cf7d9ab3f319663
SHA256	a791081779578186b83b2c5c442626bdd5de7454ef0cee193b60cdf0a6b7bbf8
SSDeep	192:bFhGqwqhsl6gcFiubZ1qxzSo33MsRmIFRVbINeu3lmF75w:5hGqwqPxcubz4zJ3csRmuS4F6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.49 KB
MD5	2987dff7dbde99cde160d58b5431201d
SHA1	9e0962e8621475ab719977692deeed01fbbde518
SHA256	020817025ff9e65bb5d2bcbfa115c5171e2fb7c33d65938a571b920b61013c22
SSDeep	96:L+DNltXVu4FmY6jtqULZ6xSbQ+825jgKOl:L+PJVu4Fv6pqULZsSbQ+82tfe
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.34 KB
MD5	6c6b78620b5c83950072eec975df0b32
SHA1	fdfde9588f5ae58100b9f6c978dac02ba3746033
SHA256	30a06043cf453d63f12f7e60f0fc832530344f11507236041fb71f93271fc5b8
SSDeep	384:iSfCy6NPv+WEzvX+a8yqpn3yQKC+eoDfnQQQ:iS56NP1EzvX+y/eoTQQQ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.12 KB
MD5	14c04f344faf65ee43c52fb910be1b79
SHA1	4be208b8bfb63bb5827b2a1c765523742a1a5cf2
SHA256	b25013fa3945b74aa2082af7f464bcae9b0d408df197db8bebd120dd97746257
SSDeep	96:G0G+Yo7Ef2GL7aTjjKkckObdkb19rRKUaUyMzO94TY8hl:ZVYJtiTuk8dkHRKSyJb8z
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.56 KB
MD5	7923c453a8449a3095a4f22fb5408253
SHA1	438af27c96d9e6752f64ab822c7835e8ce150356
SHA256	2c365e5dd30512433b5a8f09be4b3e6647219842eea0b7405f771fcb6aed62b8
SSDeep	384:v8uZL9RMcbtQpSPtkRLIZx1Htmy3gwPwN8pSTGcbpIvzO/X0LQuXQyN:0qLcc4kGIZx1NmogQfETGcwzs6jN
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.33 KB
MD5	418d0d8ba8fea75c0d94c29a0130eb5e
SHA1	f33a3eab29d48cd34059fd1e2209a85d34cba2b6
SHA256	99ede945f6e543b16702129bbc07ee79b6128595350fb1bb1c374eea44bbefff
SSDeep	24:8b+8M4a+qtNVxX2dcoOQl+eBkIWO7+7bilCWJPvaubrueuuUrT2Yl2M:98Va4ioOQlpBkIYIJ3TrUuUrT2yl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00195_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.43 KB
MD5	6623e183b77ae3a6960cd601eff1468c
SHA1	9b73e1b1c7f273b56c2dd0f981d422d7d0aa0a38
SHA256	5a70231863088ecf496b50dfb68ce962711d1d7224cae0770bbbab8716429dc9
SSDeep	192:3/4VXK8Jl5Nl+bWnC7U1R7OMWb9azy6Mt8/ZeaiQ:3/45K8T7l+SfR7PWbh6Mre
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.23 KB
MD5	90bc7e1ae96e81b57d33f2d2828bef6e
SHA1	d9ca8ba7b8adc861405c7c491b13235575d3be09
SHA256	6bf380d719214b32ff6b292e8fe9c97ddba77f752751417f4c13de3f329d4ee3
SSDeep	96:0HPNnVQx6LCvwjZITktOxRSXxNuFX7Dsw9l:+PJOxkEwmkgkXxqH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.04 KB
MD5	d3ad0a02ed623ecacffe4d92214cb827
SHA1	a2715dc0db1d991a1e21fde2cbffb575a2b51824
SHA256	d69f4f60d790a4d20723a9db19f92d317847dcc6b921135ec4eb27feab7b9ca4
SSDeep	96:H+zdbRCa5taZ2VjzPDaJsgo2jCXpKB5J1saGThu1ZXn4l:eN0a5k2BuJsXngJLAqn8
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.65 KB
MD5	7deb68ed4fd9a269c557d6f6326ff3ed
SHA1	d47ce9e8745925c16e343f5e7201d249af61e587
SHA256	0a79056b65ec789a52c3e1d44a8d811708b0f2abc2f9ffa685f3947d54407880
SSDeep	192:obtZdqV4aG3UwuJbEVJ6Hs36llYchsBTB:obDdqVSUCVgH/lHsBN
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.73 KB
MD5	ae5f2c07635adfdd064d8c8eaeba3a3e
SHA1	4b930c489d021ab9d2fb5e2f39fab89eb1a9d7ef
SHA256	c2e393cdf023e627196b71115a11b9f6092d03a64af2900e98bf136c121d29eb
SSDeep	384:ZxNdMdgC3vvBLbRpG3NCChJbyRxCQRFf2phMl:Zx4uC/h6Jb+xCwQpy
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.22 KB
MD5	d68335ebf2c61ac6d6355e8763ae5261
SHA1	8993207c84299b1481dcd0d5bc447909bad8fa6b
SHA256	6edd4f8e7049ac5b254a732e8872dd6e9d10e8c2424359d2806b97c69f45d322
SSDeep	96:A4bgoQ7RkzrF+KKcULoi6SYQiug34zK1wvcJDa7iT9jsTKfVhl:Lsh7OzR+KA/6RQVg3F1wUJDa7qBsufVz
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	1fd2aef98b7b4b3c7a9869b518cabc26
SHA1	b796a2f2cae36d4528b00854523c42b087616930
SHA256	b048b145c6dbd85d5775ea90385363a430b79877fa1733e44674530d86028691
SSDeep	48:3OisqPwypJ0BYT+8Ax78jRLvR1sySgfual:6yfpJ0BIS0RLvyal
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.87 KB
MD5	c7570bd51b962544ab6eacc0b4b3359b
SHA1	3b666a112f98e05ab0319a907e5eb4937a802bc5
SHA256	6eaeee38c4fc97e5eae6db97f8dda012ce80be6a61a06daf114dc85458c66d3e
SSDeep	768:BWSBgzLkP0iw5UceCiRCSlAqWkvlZeUbtpAKLR0uEuq0cHCwk:Bh8Lpv7clpdWUbtOKL/Euq0ciwk
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.86 KB
MD5	fcb9aade30ffe2fee76f1b423c917596
SHA1	49e87a545aefcd03dcfc8eb408d1bc7a14bebcd2
SHA256	061969d4b45a8f5e79e6062420b4e57e7d22ca6b838a3e228ccb63c0b5bded00
SSDeep	48:bNFXQxsNfJRPGQpxOymPayTkRi9nQbcUdxejsD/gXOVJU4qwZ54Sevw4gXADNSml:bYONzQFPr8onO78i/gX2qwMSOHSml
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	39062ef1a9d98019a9343e7335ae5e2b
SHA1	f4dfba747b2c1d873f7f18b046d50aad068b507c
SHA256	d59e27cb8c8f9ce55c63ddaba2a70197a56fd76706420f82a42370e78375be80
SSDeep	48:vrqcF7ZWeX7IiOzK55x2WwsiBEGWHmvzzbl:mclUeX7DOW5UWwsaWGrzbl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.21 KB
MD5	a8f3af0ccbd3f491c0392909bb813fa1
SHA1	42bae7e692df47c315b505fd58f463dbb9960cc1
SHA256	6fddb03aeab57577bd145a301a598fb329498464296dfa5169155b0967c6373a
SSDeep	48:9y31POzebpewiQ6sLpqowt87eZisynFTSfav1c3fRl:M3BOSV76uhqABB5dAfRl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.95 KB
MD5	02d00d83ba4d148440707b6b775560d3
SHA1	346897e8842ebadc3892cf30db227012c2a03fe9
SHA256	f94843401885e715719f62102575a40000ecfad6e048579502899352ac30958a
SSDeep	48:mx6yQdnas3Z24VFg6PK88Jt/4cEZbbb5Hu20eLB0YLGhl:Blv3ZZVFg6PKDJt/4pZfohEBXL0l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.40 KB
MD5	3b71234fbaa510610a8542f7d17cd35b
SHA1	ce123b5dc3887d9463d8fbb502751220273d6fa2
SHA256	799d350f63cce4d8b8e3dc3ee997dda08dd738aaf894762a23e6abd644cf18b9
SSDeep	96:wN1COp6H0thng3C0OpMCsPzgeh48GQkRMvjx4aiHT9Ll8ml:wN1COsyhngS0YTWgtQkRMvd4aY9Ll8W
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.64 KB
MD5	4e45213d68be6580923e2d9cea11f6fe
SHA1	c67f499c7a9816078947e60ab3839576c10ddcaf
SHA256	2d9593cfe9e90a770f919bbe52f05b18871617d3ed7ed1370d56b3df2a885bae
SSDeep	192:Fqqmz7kVfEkUhHwuLUnagoAC8rJt5E18I1M35jNg5S7IHuIX02hKj:lfET5V4ald8rhDn9Ngg77OM
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.72 KB
MD5	495ba56d8e78e05725874e025e89a8c2
SHA1	d12bcd516be014d02c5f0cbe7bdbc537a508cc0b
SHA256	46b2a4681f24c2eec5a5a5ce250b9981b8938ba0bdf2006f1910ca5cccb9566b
SSDeep	24:Q8/O8rHI/Wc881uObmEnDDZ/sH8EjEUfyshSXCpTZo3UWxMJQYUd7TA8N+YGv2M:Q78UkEnDDZjEo8HRWKkfA8N+bvl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.99 KB
MD5	fe065fd8ee62b693bd924bf193581529
SHA1	e30625e69841e39ed664641fc4141154d604ae80
SHA256	7abbcf2bb8af0afe86cc51bc354a390b41d94dfc72f4c9f2799bdbf2abaeb0a5
SSDeep	96:x6R9xaJW+uQwIeqiftrXIRZmcJuhrUGoZIJv8/xm7ZBNByGU5JKiMzKSPHy5sEYc:x6R/mWEwIxiJ4HZyrUvIJixm73NA5lCU
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.98 KB
MD5	7575788052eebd2a126e9950bc96885d
SHA1	a413ec3724b2d8f03435d7e776f0df7d54c6c1dc
SHA256	c3edb548feff6106fe4b693d9a33122678bfe429bb195e7afc51c4348607b777
SSDeep	96:tOc6LJ7+/DpzkkivQBgP8YC2uK70rMu5s+OazcAV68c/cl:tOciJ7A2YBg3uPJOazcAg8c/o
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.71 KB
MD5	213beb119fcfef2fdd9d87f65254f000
SHA1	b65cd691b204cf18bfd707983dc3b10a8a6d73de
SHA256	7379444e70da86d7454f67b42cbca0aa83e192d9f3f6762e6f395805b0651d6c
SSDeep	192:CTp8ZtMHlA5s4/ap48KCv5fh/K9AohSuWDUGrrMbiF8hL:YQcp4/fCh5/+hSuWADOFg
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.40 KB
MD5	46936f15ab2b1ad4b7657cf74b707727
SHA1	ab684c1fe8efa7e7afb0ff55e3a80d81f4ccf9f9
SHA256	570d7b8669920c89d95a758b8f8aab4706dcebfff6ce8c4e1980ab1f21d56352
SSDeep	96:O0HI/vdBvy4kop2bZQE3KdG61VrMU1u//x7IfDsUGWfTX3A0QNLC+AMS8Zo+l:OiMvCDkb1VrM5pyIUGWfTnvH5MS8qu
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.17 KB
MD5	30fe7a7f3a365c55bab80c5e7984ddbb
SHA1	3d8d67afacec2ca7135b6db003124a2ac0c4d65f
SHA256	ade50a92dea1b76fd8419a5d034bed66eac154a1ffc07d9dc5ff578f619ab793
SSDeep	48:5DblOLXq+pm8QpxqY4Ht2bH3IzseqAbVnW5Z7ye4XCfW3Yydl:5Fu6c+VLH3XAZW5usW3Yydl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.97 KB
MD5	ad463dc245349d47e6663abc45940e7a
SHA1	1176c69d012c051d52ba702d9a243aaee5fecb33
SHA256	5d5d88c6900fcc14753a63f9848194dcec338c58726e539d539976a40c1e412b
SSDeep	48:rRk6dVPM4v3TibikTLTEdn2DIuPGe8Dfkr4HOOTvnPkWa4CXHgmT15w39O/SiqT3:1bJM4ribHW2X+jbi4uOTvnPkWa7Xt15a
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.54 KB
MD5	02169dc0caa1a435d4fb80d8242539df
SHA1	9627bf8aa9f9707e875a2347f18d3200ada4a4c5
SHA256	bd7a41dabc03e41c06870e18a1026b135a21cc28d891c4e55ae7acc540533476
SSDeep	192:miz065pUxoSpBMROOidG8QbGkqFD+jhiGMTtzLmLfbAGHSol:migUtOOOQbGkqp+9c5MfbAGHp
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.91 KB
MD5	38366d867faf2c7265b38b7c6794a16e
SHA1	2fa7bd5ac05b14eaaf2a9cf68dba8ad097f9deb8
SHA256	c4bd06015bb47d7595eb14dd8e5fa33ff42b9acd326e21d1e48cf6ea724eacb9
SSDeep	48:uNDYV3haBLuze3ghPAFaPDpjswnA47CkyTInO0FM1QM6BoAJpPQl:uW3h4KzeAUaPz2RThQu6rHQl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.53 KB
MD5	ed2749cd191f3bc7a87dd7a1ce75f305
SHA1	272be7cc877674c151c8e6c1127d96bf25281ae7
SHA256	04ad8d65c0332b1e5801024736ea569a1e2f7763af256b6d7760d2394322b2fe
SSDeep	48:4R8v2/wJV5NH5tlKK9crs91NaSI+iyalt9HtS8bgemxv2Xl:4RW2YJxH5tlKKG+aZlHtJXl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.25 KB
MD5	969cc6aebafa23a86f2a5f938a0d0845
SHA1	2794f2cf470bd263b03b4571ed04f01f623d443b
SHA256	2750c6c4dbeb589e7ac8aeb3510e60472758eb4d2ea5015678429bea4e00ad39
SSDeep	96:zyooCHyEVsfZqx/1alZ5a7el9y8mG/86KqIKNygznJWl91tl:zd99x/1alfa4LBIKNygzJWl91X
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.21 KB
MD5	e472b69250e9f2fdb7f4e845ad937518
SHA1	f07ada1d29a0b98092472d76bf30836db057459c
SHA256	6aee1a601d38523516581a91a0f09fc690008b88d08ec432a3b1a892765d6774
SSDeep	96:abOXwCZ1kgw7he2PLoi6ExtNWFLUzQxpl:UCPmheuYExtNWFL+Qx7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.75 KB
MD5	fdc64089dfc3485b77618f8666a59756
SHA1	b14a5fbc7077e54d730237ee0d0dba0db42d6c2f
SHA256	a95452b76305999f7ef6c77901311014192e604465722876413df278e4487a9b
SSDeep	48:gs77BhVC/CDWn2YSI8YJk1mayMNcLaW5h+xOuaJ60FWp8IG+ffRwLXud2JTN5h47:9yCCnTDFJgQ5j5JBEJfRWXu0heP5l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.91 KB
MD5	9cc5dc1b82fc9c32efad3cafa74d0d52
SHA1	3f040d98aff7b41d5f31a6fad5cb6a68c2277890
SHA256	bb032c62bc878e05d92d4c8d6451f195f141f8fb9b8a2450b063bcea664c12cf
SSDeep	48:PrIr5re08IgdWloMeuucgy6gFqEAMMYnHgmm+wQ+hRlGGgTfbU6ac9NldcmM0FaJ:PQSsgudNgyHFqXMMYnAOl+mjf97JMxvx
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.56 KB
MD5	8bb4d9d75d8625526d949d8b52c10bc0
SHA1	6c2f8555cd9d292bca8ea2818f9bc9de177759bc
SHA256	32bb490b3da335bdb07452b1bc006bd517c0119bc5ce04e9067a8243b155f842
SSDeep	96:9KnAWf/hm4LN0KQxLda9htr9AncLICmJyxJ+Z5sy/l:onBf/hm4p0Rxs9Dl1Cyx65ld
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.09 KB
MD5	1b80717beff5c527f85e0dc444e08216
SHA1	aebdb0ccd0eaf80d08e6950e5b6967009239f2ff
SHA256	7fe9c630e38b0c5a018e3a315ab230520fbc5332070b0a2a5a810305c5b56e1c
SSDeep	48:4uNjgKBi6JgQ2YR1QDUNQdphNTfImwopzU+mFl:4uNsyRSYNYDNTxHQFl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.19 KB
MD5	51ca8f7707a6246c09be89640585e985
SHA1	684fe834ed9d554fc10cdc5f787c6b248732cded
SHA256	5fa14aa2d4acf85318fd2272ed7d1b4dddd706a64cd830446aee4c6b864b69fc
SSDeep	384:nuaOExjW/Mp6TmJHGOtq0vYRVvg16WAiXzx+GtGKRZE:utExjWkkKQOtvovgkWAooGzRZE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	83265ae332aa38a5ba58759af4884b29
SHA1	f13e12c92eea438b26c017b835727d20c21819e0
SHA256	b769580043f035a1e5b0d9937a3eb693b02f7b106bc045556672c426d98df987
SSDeep	48:jlikKK8lLc9NGXciUuxwmZz/qI1dx4r4G0ruy887Yl:jlikulLcXKc3uxwmZbqdYN887Yl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.04 KB
MD5	ae1e99e0ea93218f7fad422af8117db1
SHA1	7015e3c9e43c810c3a12c5fb11fd02a1168321de
SHA256	471b2a2115693c29184fb47ddf9efc67f50172b4f1b826bc898da1e5f99e6136
SSDeep	384:Z0Xuf+DbavfLBuq2XeGBdOqeBH7gjyrSJumk:Gk+faXtuFdgBH7geI2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.83 KB
MD5	5ee3cdf526d254a1cb77cbb81340d6ad
SHA1	0a9af19487f948df6add420b59897cfc10fcec38
SHA256	385cb015f7cddc452b234ab0c6c8ded37e2c98556e8c7397a4e0eb4c9c79e634
SSDeep	192:TtendxiyKST33WkBRQun1Nkmj1MUaYk3gdb3+UndGJeExO495MKK9Cy7x7lg1vOt:EKET3MunoE3SwYgdGJmc5Wxdu1WX9
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.66 KB
MD5	1cf791fca7d100d8bc25d9de413c5ad9
SHA1	d84969b656b407e23ca06e55d4361003d9adc6e7
SHA256	bfc675f46b2463b712fc599563e9677c8cbb8d1338388dd0ff8720e5bf0db73a
SSDeep	48:pVLo33Sq5LmROa6I1jIkFd6IL0xF5FiqwnOnqgtRQL0ZfkxPlClFTZl:M33rwl1kckIL0Liq/rkIZePklFZl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.03 KB
MD5	109e3e4871a16a3e259faa0b180dca1e
SHA1	6e3a9ffac3d614b46c20b38fbe58057fb01af63b
SHA256	5c53d42d0dd131a26d1e197a18ee9862228ab17408df5a68a496295b43845aed
SSDeep	96:qWfZxbY5ippVfRiDexrWwA7L5ujv3Jg2ihSXopstUl:XZxU5I/fESxqwAH5uj3agX2yg
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.96 KB
MD5	98a78cd308a5b30023c2c9f0727247f7
SHA1	847dd7a2609d4aa66c2e90aea2b2ccd2f4107eb6
SHA256	d55d179b459cb2466ae489ec64bd92830fcad1058bc0c5ca194cefe564a0312c
SSDeep	96:59OmVPUde+0NNwFMVDmIPU2I9izzusfMz32pmv9lAcfOl:5LVxNNK+N82I9iPusM3Im8cfe
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.67 KB
MD5	05102eb886081656b748ae2fe5974fd6
SHA1	947c3ed68a935e70af0f1b9b1fca6816a0fbccb3
SHA256	71bb30bcc887ad700549bc58953be3fa4a71011bfb5ab6f97798c9cc9b613d48
SSDeep	96:/XA93gEmW5Ke15y7ZkGA283/GYj6e1esJC4rz3eCxlX1xbEWKF3cuQNLIPjEWnl:Q3gEmWp5y7ZkP9/GYjZ7/tfgdiNLIrEK
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.35 KB
MD5	cd6538b41493668482c212e0551edabe
SHA1	254633468713bbd15ac152fa1ffa8a381d015aa4
SHA256	71d211961936e2159bb3667ef89ed905b29ef6b890b1314763c267b2109f62fa
SSDeep	96:qMu6Wpnvce43CjTIAf0o/2g3movG/GJUgg3f7G20Zl:qMLav9HHIAf03g1vG/GJ5Yf7r0L
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.75 KB
MD5	fb922d9fff87fed01bd8c857bd2f9fdc
SHA1	7e7ab3d4406e213dcb23d4de16062233605f7aab
SHA256	e1718ed9a38e0ae7a81183604816aaba22176b7fcefed4efebea79aa6f7765f7
SSDeep	48:0kzyWlpE0IIuhGjBEg0FM6zJ/bhldOtK9qTM8DacVxI4ba++6NIx9ig/tvRl:jzyLXQjSxFM6zJ/VlQoSDjVJba++rN/J
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.69 KB
MD5	4b86bf3a818a899a0d5c2229afc1a44c
SHA1	c0efa1cf5b4cfcfb0a6a40bf5761fd9afc7cdce6
SHA256	53dd93191f3b330ab85785d706146eba8c2313a801bcd644e33062ae8badc7de
SSDeep	96:JD060h5GGfpZKtEB2pZk5tFCjcvat+AuO6bOa2xgFRj+IRanEddl:JDM5GGfpS82kdva6BZ2xgFRjRR+Edn
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.23 KB
MD5	49b696cee52ec7093d419cd737a979f4
SHA1	33e2b3be1b95e8245d7650ae3bebfcd9bd0df6f4
SHA256	9c9c88c44af2afa8d7c3db261d4d00d71ccff8ed30a2f182622bd4ab15b7a7e0
SSDeep	24:j9WYels3LiIV8a9X4dPJglR8D2pefWrTwSdOVIqkLrV6JQyt3DYK2M:hWqX9lRtjHPOtkXYt3DVl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.83 KB
MD5	6e63319dfa1ee96307da1c8e859aae44
SHA1	2577df05cc65877067b7e58859a3c4c7c31ef6a3
SHA256	67fdf04ec9dea79f79817599e3b94d08ca3b300832fbb2050f3e55b431b17d52
SSDeep	384:OtWE9LafGw6dFABc1fScNvpcGZuAGrTEP228avpk02x7jRsissO4lmcK7MgOCWX:6W3y/AmKctpc3cLIF7aisskMgzWX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.71 KB
MD5	9f8fcf33ff417a7963e4cd9da04b169f
SHA1	e4c2695a3ebe4d8ca768eb8684804eab45068aed
SHA256	676e36f0fc174dbbb5dde934cb4215723abf193964d5a48f2a1506082eac72d9
SSDeep	384:0Kk7NHCluVXijLJRn+hPmJCDCJdd549Jv/nA4kzCS8m:dwMrznum09vvAH8m
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.19 KB
MD5	d4ef3cca60f4d0f56c422b066e27dac8
SHA1	cdd6d999e12f2abc074b97abb7b106b2eb76a7a3
SHA256	b18cc8ceace1f8f6b6143a20e3296aa2e089fda65d5756c99de508bfe96638d0
SSDeep	192:+L+t3LjC6uJbnSy8rB1YfQV0vfNyylLTI6o5GHenUXfHgd0/NjH:+LmLjCR9nn8rBefQVkfNXl3o5GHGUPHJ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.15 KB
MD5	4a1d7be524f63c2e4f55ae8e32a26b60
SHA1	85a1de619d84a682025e7bf2494c5a82c1ee2f2b
SHA256	3f58e5bb0a62f5ba1ac80d0a9b26bd7ecb5e282c538c2ad87d9403adeb56be56
SSDeep	96:orMu6Tw68qKLlTM6wooZI0TdGA9Esu3RptbknGPhXcb1l:QMxl8qwwooHpJGtbMTbf
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.71 KB
MD5	bae3ae838eca39c02b3006fb989de67c
SHA1	8726a118a310de1a2402ca96925f41a151dfc85d
SHA256	b7a91dff48cd116d0e4f7b48c5d489c2136d087bb19de88e39dd2590370a1486
SSDeep	48:mLbVTSAf6cUvnbHtVd0Vik1syj7Iyiqx5q1QZeCHhgPYqXVcIhIh3LYjNbuNtl:mLbwW3on2N+AIyiA8c+Tc6gYjNuNtl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.02 KB
MD5	ffb68df14d2bcc1b02c53e67dbfd8d5f
SHA1	617e38422a6f0f95b33d8a61ced39fc1009e7616
SHA256	a27d7690dc4e37e9f52181c7cea316af3b6675da67d4573e41e378e9a6329aac
SSDeep	384:4/Lslkge46BC5lOd8ptVNarI/XHZOUdlAZ:qYlDD6BC5JbNar2OUdlAZ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.55 KB
MD5	19a5b2587cbcc010a026ebd312355716
SHA1	cd00824eb56a5c9130ae36cb9235c1b1e7f172a4
SHA256	9ae3170cc98e95a449114ad7d9d4462cacbfb06f91579d83264a5d9289643505
SSDeep	768:oQJ4TAR7L+Zmy/S6WLPeCSvAoU0evXXcqiy4mc6:oQ+TAxJFVLPeCS7UN/XDXc6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.43 KB
MD5	6d294bc32040e5d16b8b18cb1059566b
SHA1	2fbcdd64049c7e569143a61951c88b383b23f32f
SHA256	45e8176c525f670357135367bdf9bf8ff58ebd20f5f9267562a36fb23270a137
SSDeep	96:X4G2xbASa/m5kTWwozE9PCeK/pXf1x9Y7hml:D2hASwm5kT4zE9I/pXfj0W
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.26 KB
MD5	956257a97a9846e28409e4d965d4c939
SHA1	1e4561765c26967331886d6eba00b7115bbf7452
SHA256	72f7cf95c3b7ecfbe6e77824eccd0d7c1fbaa48da62ea034e0562a950fcda5aa
SSDeep	96:dsA8ryrkSLGLf3bYuhRSCbKX2JctA5K45l:N8ryo8Mf3EubS6KX2Jci5K4r
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.27 KB
MD5	3fa4f3fa158f06a75f1e1b7e28e5ccf7
SHA1	81176de9424bc50b14bc16914e2fee095ca54d28
SHA256	4d564165e34d83be4a2561320422e86871fd7de544dab2582ee1c9d1a18416f8
SSDeep	48:aDmlqtQUjLazS15x/+es4M7BvtJI2M1tw+Uhz57LRGwhyg3t5Xpg0iPPMyQ4pl:mm1U6zS15x/vVzi+azFrpyP0yQ4pl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.04 KB
MD5	ddea67820a74a6b314b342de625573a2
SHA1	c55040239d163137ec7622888bf1378bfd569737
SHA256	0bb354ea1313e07b6cb664484d4e400dacc94fafd342bd178361e996c880c05d
SSDeep	96:2bQdpKcMfoucfK/ZBqL/doR9+QhmptUgqiDz9l:GceopfKhYJE+qJiDzH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.71 KB
MD5	5ece59c5bcde2aa6e039790664e53f2f
SHA1	f902e5312466b98b8251ab21917b611076d9d26e
SHA256	e4d16bc52ecf160c51a8ed0310e61f07a4cdc864678686acd2f33a4eb412f284
SSDeep	48:9880uRjqPdSzLj9n7y6+Nata3NMpsUNU3CN2jK7c2+nl:9NRmlwVmApsoUyNGKY/nl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.43 KB
MD5	a9cafebed11742561898185f624ed88b
SHA1	966ac0a887be26adfa3db9bb1ced8a193417c14e
SHA256	6e07ee928648216d4f27f3d07205e4bacd83f3136f8f882b274dc390b504c72e
SSDeep	96:k0cX1E1gz+r9W4ql8grBk6aLNJ3DruXoJ9Iml:k0OHAcqMkzNJXuXoJ2W
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.56 KB
MD5	eb473a59516b693fb7eca4cef80f0e9a
SHA1	68a4566d476aa415834fa79d8d9c0e02ae4deacb
SHA256	37fb6d28add007aabe5caf6775cff81ff128b95bec034ab864f2659f28c78cdc
SSDeep	48:+ytHwjUm//Nfkt1cLM5yoHpkZdpuS2zaIAjxpf8a4J95WZkSMA7ZEhAbl:+jUW/DoZHpkZmVajpEiA6q2bl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.07 KB
MD5	ab1280e145e767e42d07ba97e5018fc6
SHA1	225859aa1407edf6f29e5f8c38b9a265d1dce370
SHA256	14b68c17cbd20df9b9767e29fa261052976362dd5207c7a3479e565d1bb3d889
SSDeep	96:IM50RDhO9HZP6xvxUgx1p800gUuvkLnh09bZl:IFlU9HZP6teTgbxL
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.79 KB
MD5	b8d3ca438c956adde8534fa57d798536
SHA1	a2031f485b02b5dc605ed8e4fbf2f981cd5203c6
SHA256	3be4db14ef39060512cbe28eb4dc7e8d45fa1aea9a431dc15e69f717beb07b6e
SSDeep	48:7YjKCEfuqXXEjpzQiEwc2yTyqQUreed+C7Y7vG3iZyF/0d2RY+s5/l:ku/uAXE9zQddFWUylSY7u3zF/MV/l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.63 KB
MD5	6ac971ef3c85718e33ed1f0d9670f170
SHA1	b935607ce2447fedb802d34461b87060b7e3ce02
SHA256	60fac4ae7e31d617dc9fb15ac02312adbca244a718af9d2687c16598c2967826
SSDeep	48:cnxDTQmLCRHkD/2veLtIhBiWxbQsfxmwOxTjibAxI6aYlxfl:cxxuhkD/+eBIhBRbQ11TjiM+afl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.56 KB
MD5	0528fc0ce4b12e6d9997060ac79e90c8
SHA1	92ea475bdbeabbcda72e102a6d1466e1f7268fbf
SHA256	65de4f3aa875ae45e190275c9d003d0e49fa33e275d0baf7bf2f86de8c734602
SSDeep	48:k3DZff38rsJCLvVAf72x9PvTMLIgIHmrjuw6h86J9TWPj4IcfqAifpKZbl:8BMrswLdy0pTMLRIIjuZeb4AA2p+bl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.79 KB
MD5	4a3ae0e3f5ed6c9abaa0efe109087fc9
SHA1	95622a7908eaeb9c05e91e1b68ce2995faa4b603
SHA256	bf18871e870fed3a62adc057d3c9a15e2f4d0dab938a161e82c064d0f784469f
SSDeep	48:qYmW+3WEFuBAz5OgwLh5u5OAFfnsGosvbPBeCMs3/l:TmW+3Ip5sxfD7bPgk/l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.30 KB
MD5	4295c22a391fb6cc8dd92ec1cc455189
SHA1	697c4a6d2b7443898d328fa95610e68b151ab8c8
SHA256	6669e61a213b97e40b29ba0779e42317d1285dae7459947a2ac76b480758358c
SSDeep	48:2732EgqLtotQMAZepwHSuspWP7rl/pijavmbxVCPWuwDOl:27Jgq5otTlpw9iYZojVVT7Ol
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.52 KB
MD5	cc7d806de050673385e7695060b573bd
SHA1	4412b1a258739b7cac4d02bb2ffb6acb6137cb6b
SHA256	17711a458f28f8b12852af6a26c0ad6e98b1cb7bf365dc07f72b74cef7e0857a
SSDeep	48:OYWMtCyJQtOoI/Ly8SbRlKc1BsaOmWo9u2vhPjQgW2W1NUo21Gl:OYLboWKbWQBszmWo9XV0xRNuGl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.72 KB
MD5	216f91c94c61160026c7cc93e9b70ca9
SHA1	6cf8b11e7714c9cd9ce48747086199563cf998a9
SHA256	0afbf1c6a0e0f07628e4b89373ee3a2982fc90baf86ab997b00bea72cbc202e4
SSDeep	48:yPZLsiRUIAdJeS2hQzJXE/oCBFXocZ84Ow5hDgTUkcPtotzHseDjl:yxsOAXeS2hQtXioCB9ocsUFFMHseDjl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.42 KB
MD5	7ba04a25571bda4b37ab84250218a39f
SHA1	50cbceb016cbb3a3a55d6a3a5d1605a059fb1775
SHA256	1fe9442ce1411b5368bae4bad32009bce027bb7b62c696c699217c797abe9e9e
SSDeep	96:m94YXh1rZGzGY8UTFPtbjke6aN9CPj8nHUazkv/Ol:7YXLdm2etb3XNAj8HUazkv/e
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	e8c3a5ba0e09a57cf3d26e19ee152561
SHA1	dd531938ca60da93ceacbeed87deb4c1e371e22f
SHA256	2105eccbed0f94f3a59db71c05b553915c413448bdce8be077a6a8d9fa009932
SSDeep	48:SFdGyACyxWqgoOptkVuoT1MYepNHYH26kKyaSIWf8JWl:UdGDC+2/a1WTH56OavRWl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.53 KB
MD5	7cebb451e8cb04e2d2fcdab0b16b453b
SHA1	da5fe2dd0048ceab676359a9025ea18335b280b9
SHA256	49c886742da0758c60332c5c426b93863ea74da4d7bd1e457405d69b0b196084
SSDeep	48:IJf39a4aKCV6jyem/9JNA0cNviBx/WbdNWYKC17bLaIor/rtQoXl:75KCEjynA8v/odNXTbmLvPXl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.38 KB
MD5	5e9220cd2c148cbd46b8506f0cd7f113
SHA1	7787773751589234a18b60d2a672d2dcbc260cc0
SHA256	ca59454865d2204c7bd27083a8d816549e11e0ab57d3d3f27cfb59dcec12de96
SSDeep	48:7DwTyNAohrcEi9BeRLCMFeKZ2cim0mz4UuPDtP0B8YlNTAlnrOmmxnqVfil:noyNAogORueAJvmpuPBMCYlNMYxeil
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.52 KB
MD5	b8f5a2ef66308087f9756473f48c2d4d
SHA1	9359796b9a08017e46f0cdfe452b1b4d48b100ab
SHA256	d2d34600091f904e734c3765a35a29aa641c8c601803b29f6a3bbc07063c2f52
SSDeep	48:fpOcynVPLgVNL7j3QK7ONDN8iTvfS6hIXG3y1tHAAXUeyql:xuVPAL7juiiTHm23IHAAkeyql
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.89 KB
MD5	da3eaee66f8ecf7acb112380e18626d0
SHA1	915d38d33c6286879e7d671041c3346e4ddac6ed
SHA256	1a0c958c77d3b4107fe6fb58c6d401fd183755b83a1cbf5c334c370cf74a8159
SSDeep	48:g3DEWX39zQMZFghK8SU7tffUFajQrEjZo2tLa3C4P/BmFTWw8kIfm5WK7twl:XG3NQoYnSU7pUFEQmo29a3Bz877twl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.08 KB
MD5	2087926f5e6710fc675d9c4e3e50647c
SHA1	6815963309048074d01ce5b8f2ca7d234f308e48
SHA256	94cffaef7ebf8a892ff3e503ba5b31da5385d9146215a24ca39b1f54fb391d0a
SSDeep	96:+wMf/ZVjafAXJru83fM3Ewxio8GTIUoM2lRJl:+w8VjDu83fM3PxioN2M2lRb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.25 KB
MD5	ed5b87e5d28218e1e047fabf6c89684a
SHA1	eda68aebe3f0ecd8920328010e1c951eb7711a08
SHA256	ca0d4dee4f22c4777d4c2677481515e739f8c23e0cf605203a4ed846a13b14dd
SSDeep	96:ECEFzHML/kBNZdAH1xFDm7H3D2sbXYubjd76NmDsHBzgHMtl:JEFzHg/kB2xl+T25uozRgsX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.46 KB
MD5	55a82f55efc7e63ffe8ef29d8f9083ca
SHA1	ddefd2795f3e9547a9d1bde287bb8cf2163f223c
SHA256	9388db36810dfe41ec019147166b4ff1d846ff46d0c4a1b175f964a7713fb01e
SSDeep	768:qOF9opXFv9MTbyMi4CGE63Sd2Gipyv9QnNOltQfhan0bacNve1dYbiMWS:qgcVTFfa3Sd2jpwoIlqMcNve2iXS
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.90 KB
MD5	c41918e5f5bac28c0955a313d95444d2
SHA1	4c9feac41f3176f61c6d47f48c5f46e8e1a2b088
SHA256	345f6c76a7524b417d50e6f737b0afec675d95f37519e93e20266d55ad49cfdf
SSDeep	192:KPnSrss2WZQjUfU8h6lTx+3Rv3lLc19d6G5B7zRqiB6Xxew/8:aS4sJ68UuMTxsVLc1yGz7d7cXPk
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	8034b17f8d89da1bf90d3b5aaacaa267
SHA1	ceda07ae826dfe3e60c2d78df358c08d1ba5dcce
SHA256	ac1782c77567bb7fd3d160c349f1bdab12127b77aae40030351bf1c14aac9bac
SSDeep	24:20Cq8TUXJmzUgqffWQcvFYiB/fuyELQgvuWG8xifh0a5VaAzt81YtY92M:20HTJmAOvF1B/fIQbV7fdHzt8Kql
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.10 KB
MD5	401909a9da3be2e3b3e53497f32722e8
SHA1	03bfe609d8f0f120839713b2696164e707667c7c
SHA256	b6fff3eaee5db927b964c844c39127ea61d1508f16408e88412c9aedc584bb28
SSDeep	24:BX7gDKnYizIuWb0G5o0GYufTjjB+4S2tJRJb6ddXwjBYu2M:NgeLIuWb55qrS2t964Vpl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	841 Bytes
MD5	b584853ddeb558ce31933bf801b81c88
SHA1	7f5904e4ecdf5104b23be4dc9f276c8a81f624f1
SHA256	84be71a08977eaaf43c1376e1fbbda643f0ccb452335b007e66d30bc9bd91d71
SSDeep	24:NzfWusqfCGhUQU9Cnu9ifZHjgb8/3tEGzx7w+UGGvYP2M:NndXt2EfZH84/3tEGxw+UGGvUl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.07 KB
MD5	d132944197375ae5566a7cfc1a783776
SHA1	c0ee0ddd914949811b8b553b13bf564bf4554af7
SHA256	53716d3691f4050441245083612191ab1545deafa354aecf2d4a553ca3463955
SSDeep	24:Dl8hDvXU2PVJ5bvDO+B6J8r6EymVLUDj5P4Cb38GxrpBwp1CogjUdQkYq2M:Dl+vE2P9DOuL6N4Cb3N4pXB1l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.30 KB
MD5	928de6b25e92724ee7cebf47e3b4f997
SHA1	f7a78b720593b8dc84470bd9234c71ff9bc2177c
SHA256	5e9f75cf5c5fb80d38a49f25e10f688853ed4cead34aff1f840645e412f63273
SSDeep	192:8z9u/qGbRjscfhtThZKXMiHfg33E4FRTTJhNNMlvy1QsFDFgC:8zI/ldTd0Mie7slvu55
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.01 KB
MD5	fd846703135a96b4d83c3a1a72fdda80
SHA1	16c4284840f17767de9d777f0a0df9734bc5b7a3
SHA256	08f228352df73d685bd2c640096a8985b6de3fbac2b87284870492d89d2d8e47
SSDeep	48:KtAIpWu3OrPDe+5yVt16dhDxw0x1L72SeOlT6I1Siag5Qa7WQCrpAQl3tYl:BIpzOX5IINnfeOR6ENkZp1dYl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.17 KB
MD5	ed245ac4c8f7970ebb92ac533d06ef61
SHA1	95261917c5e38974afd62dfc2d41d0569b880a4d
SHA256	81f08f152fbcf64feabd8f3a3046b2f6878346f8f2119c89634990141ca430a4
SSDeep	384:RLcKjjUBbEJ2E4t361V7wZ8QEw7I3F7JA27w2rzUyeJvfroR/shY/RBm:RLTMFEJ2E4tqr7wHI3F7JAqNnUyeJsRo
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.80 KB
MD5	69626a84beeb758539fcc9b9ed05b27d
SHA1	8acb7d3c229c7f7caf3754ad72cf1046951cc173
SHA256	1e977193ea2c51551016a8f1ffdb9e920f50c6766f449331d5674b0af87d8d8a
SSDeep	48:aFn+lHjs53BpZHuY0L6TNTcojwRAjHIO8ACzyo+Imv6yYuhM44PAl:aF+9jWRnhssPjwR2cNWo+Iw6ynPiAl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.59 KB
MD5	57fc0f075c712963fa4fb96917d5d0a7
SHA1	3017b4983f253251a8d53cea8d89f60e2e1d470c
SHA256	e23ceb6a0193990e46e2654e8f4d7229644a62491284744cd1378c83941a9bed
SSDeep	96:ZIKwYwdtyMbYXdpT3uoob3LrYJl2LN2Wf4o/iHjvl:+bOuOdpbDosJl2Bff45jt
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.57 KB
MD5	929ece39a847c29b275b82bf302f74a6
SHA1	c30c443ee45db09904a1d6c6abf40c74a054d94c
SHA256	61589998790dde5c858178fa516d7e747ed9241af546aa07766caa279b65064c
SSDeep	48:l0DMYBKZd97p7juZsX9RhT0wWNd13xgpjF6rKi4ib9Kvt+WV+5j9QZz3l:JYBKZX97yZst/0wWNd1hgpIr7KvtbVmq
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.27 KB
MD5	dc29acf6724d79603d0f11c3ecd23e90
SHA1	a418c7574dda60ac7e68e3137faf5684acb253e6
SHA256	b712af022e385c57813f77159cc8b350951db773608b5aaad24b0432293db4f7
SSDeep	48:MkvsGxYPIMgOc617ROFF2i70xOY/2dAFerapl:FBxgIqsFe3Je+pl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.95 KB
MD5	3e101fdb68a4fd4f32ed6c1b13ce0a0a
SHA1	bc0a5410501689bfbd23863cbd81d19cff873ea0
SHA256	ac637cf0cc70035ac92413178a104b4fe26b9aa09eb3e917ac84bdaae90465c4
SSDeep	48:EOJU2TWe2m6/H11DcgNPx09b/NaLfuNFIl:EITA3DHNJ0N/QDuTIl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.79 KB
MD5	ce25f93bfa273caac2bca538b31a296f
SHA1	8e46f4326c9bf7c248ef7259b01398cbb9f5d26a
SHA256	c2c268fca58ed9565f04ead806e2a1bccd9ae14a00de3496e709e2d25d3397f9
SSDeep	48:fZcZ/lPW17mkln7DuBg+jP/qqTJkMPxt5QXZs9m0lV2ils/l:fZC/luljPN+jNVkMBQJiV2iu/l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.78 KB
MD5	6b6e4cac477c29ee009b8a712bf8177b
SHA1	f9baeb61976e35f1f90dbb6507cee2b60ca963ee
SHA256	003461947ff06859006d6dfafa42a6fd569fda7093bcc044453211c946b0fa38
SSDeep	48:zEoUp/hP8A7C82bGh2qEEFHxowc1aE75+HpoSEQAWk7Nso0xGjl:YXrfDHwBaE74H3EQA/H7jl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.72 KB
MD5	9b28d467cc94d44b0b475a132c64a0f9
SHA1	4f9ceafd53134a8ba944077cd0e8544b9f0f3125
SHA256	ecd48cb4e5328fb559b613f04f3955f950ac6c509f48c60e00546530afce3928
SSDeep	96:fehH6s0Az7Q678Iv+lpWVU/DjWVL1M/Dl:fehH6aXVlv+jWKnWVL1kp
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.47 KB
MD5	7329d63131c6dc7d1733bce6f5e3cc03
SHA1	7560ee1ec84d18a7c0ae695602f6ee21107550ae
SHA256	b0050cfd6fabf53344994a3271aafe675a73d37dac9aff32feff58c15b1cea5f
SSDeep	96:26DJ82TURCUFnEV567KonVUAI0jEwCjCl:7JtKCUFny56/jElja
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.32 KB
MD5	38561391a40984c6f689a2ff68e449c2
SHA1	708534a190db996161a5862297df5de98ea9b44e
SHA256	6c48836e395399ddcaeb928b6143b436b6abef3975d855908b3280c18ef6e447
SSDeep	192:YI57qmW3ifzZ2PNvQT1b5BobBDU/1fyYSong:B4mWoSIxbLgBYdyYST
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	3c5a4b756bf34a9f742367d613529c1f
SHA1	07e9d6d9e8f6e00164190652f1a60e3ff80785e8
SHA256	0ddb49c57635714e7a53ccb8eb4429cec185d030d283ece9e31f1259b3c433d8
SSDeep	48:W5O730nFHBLTTuo2lLPqWXNaDBNDWfVMz7sLRw8w4ul:WAEnFHJT6oPEorWmz714ul
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.56 KB
MD5	9867b2de1743890b6f7a8597ba89bf01
SHA1	816f4dc4a703360ce4ef911ffc4af6bf74c1111c
SHA256	3d4e0504deb433849a4666d61812a1fb4fbefc9f025028173b511c464f9c015f
SSDeep	192:E6AC2GyBMSN++N2kMj6x5MxE7yttjNPvka6:Er5GydM+9Mju++7yttlkx
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.34 KB
MD5	711feb32238188e20440798423eedd63
SHA1	6da11a2cba57f60fdf0562fdefa96ba22ca2b569
SHA256	066cc74ff5006cde136f728c13375afe2913d6cd5eb02f0db4e0ee1bee0d81e1
SSDeep	192:4kZhIwtJA8trISvQJmtgsCd+ooxNJ+j1cT7TjbldDK68QdCXTw0:4kQAi83vXGUxK1cT7T/l5do
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.17 KB
MD5	be1c3069e2ab04f566d733dd8dbab8f1
SHA1	654425f39c63e2ebc6c0ff7bf70670e8fabacd1d
SHA256	6e26a9292d5b0bfe28ba41860c6d44e7bd16135d494d9bd632b5d8a5f0b1699c
SSDeep	96:rZwFOMPhO9M/5gIBxHzEECHaMVAUwoaupaalEFQ3W+92aWBopqTVT+TsZZs7Upl:twrPhgMhgM2kUw6l73WypkVT+TM7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.28 KB
MD5	23e1fb350d45d171c3d0631adc25a4f3
SHA1	a3a874015cbe62ae87e41d5b6b53240ed37f5195
SHA256	3c42414e062b1947c762e66de760712f7161631e9465ce579045c05c72410232
SSDeep	384:1q3ACVB6g64c6+dCzrGdCLk4OJzJStJIWCacY5lUPUhO7:IAC3y/k/k46zJA3ailO7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.17 KB
MD5	8b11d6a5a6da50b530cacac68df37450
SHA1	47da6cd881a422823fc94327b5656577c2275e4a
SHA256	b5be92bb8dc5f0885f97ad885f4887d62993939373faba85a66b554ded795bce
SSDeep	96:+Sf5kuA6JTXmmIGidD859U1+u5UCuVtPCu/Jl:+Sf5kuAaTWmI98EZFuVtPCSb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.76 KB
MD5	c6abde35136fa1a6c83ec0e17bf4a90e
SHA1	402fd034c541359c16b305501b948e66766a5dce
SHA256	90ff5d865d12312ca2cba61ec230a485ef2396f7cea02cda936124080ff4b6eb
SSDeep	48:M5FDnXGEFNQz5VkWWmXIw761D0FZbqGXlGTdSI0fg3ide85j/HYDdnS+kvX1YaF/:6FDX85+WWm3G1D+NN1GL0IgeLDdS+kvj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.54 KB
MD5	acfefe2a8427377b21f4d4dfd2399bb6
SHA1	e4c2db0fbef2db8f0a67e42472df6caaf99d8f53
SHA256	59cfddb61b96a2731745e239ac80a8968ffd0c6ca3efabb60b9ee877d01afc0c
SSDeep	768:KQQ0bIAEGhML80t/0IfiAHcRhBp2qKZvXve6LeZ2Yk/WG3jnivobg9Y0ZBmmI:KQ4Ayoa/0QiSOBQzge/2vQg9YAUX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.60 KB
MD5	a3590b85de0db4d29792ac31dd8b82b1
SHA1	f379fe5a85b7ac98d6c1b091ba98d66debf4456d
SHA256	afd17914366070460be3e5b91de25225d8924785a1ba18330d5952402d5cbaa0
SSDeep	384:BgLfPkwsK9L3ycDQXy1GklfLjNN50OpolXjkXb:BgLfPkw11PQXy1TNzh60b
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.41 KB
MD5	ae886d40fe2e41c9ed9f88589e01c5aa
SHA1	fecde37e5847d3498b658b2db915ebc009a5f7fc
SHA256	471d438945924856ad9095e6160d5dbca0d1af9e3f0d38547820ed1e05aa6fc5
SSDeep	384:N4olQrxpD6j1DnDN9T0cVjr2IT9UsRgME6RccvtMXqu9Pz:N4olQ76dR9T0c6ME6GcvAqs7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.94 KB
MD5	12913520479ac3c89c16a9723608c26d
SHA1	1795313c3422dda659d71803b7017d2ddc9dcee1
SHA256	9fb0ef58b55c40dd56ab803d435546b93766712da0dd6056bdf2e637a7e464a5
SSDeep	384:GVKIm81SCnE/Ske+i7s+gFyhv5VDdTcSVk1T2JnkGTVEojFKWKcCRIVDelMQG3xE:sKI2/YrVvjoqJYbVuFaGhGZR0B/sEK
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.25 KB
MD5	dac86baa766d0a0ab0f2d8b7a9f9c13c
SHA1	850b29c4a7b210101a7065e6871e973753c0f5da
SHA256	32df843f672401dfb7e8ff47d12b8b1d530f3f6ddfe45e36d1e0d9c5a31ac93f
SSDeep	24:a3hiI9NWn8TrbR/z3lrcM38K5CJ/xFAyFzp9r19Qn3EunJ1i+t6dYi2M:w79NawxJcM36FAyFpw3Eei+wdtl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.43 KB
MD5	4c3a74879b786099a90c3f27c0ac1e7b
SHA1	c6778af5afa754882b36c7cfd8718cb09dd4e0cf
SHA256	de3321c712a5b10225870857becb1c75f4117b6dbd62e825c69d2cc1ef89f657
SSDeep	48:gp9Etw4WfKVTP9hnoeVEk//xhgz4+ckDQJ93DXo+FLNajnOl:rPHb9ugxhg8jkUzX1Fx+Ol
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.30 KB
MD5	b4593247b9c95d9e327b234738d8b86d
SHA1	2d3723584a60ca0c397b3c789c0c11c46787b2dc
SHA256	aeca545c84e16b9ce129767e4cfe9388d04c0deb0cec03c8b93b1df004c3457e
SSDeep	96:bWYYeCKkkngpXl1UEhYae6VdVtzQbGvml:bmeCKkkngVl1UGYT6Vrp3vW
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.45 KB
MD5	96551b5d1b236c7af66806c1e72b2f03
SHA1	06e1419edfa7dbd5ac0e5931d01ed43a82f849fa
SHA256	b7fe550f5e576fad95470eb0abb7a71e6f377a6406295d146df14e9afffa2695
SSDeep	384:zw1w4TgG8G6+Mb/0VZkhRlI0JPYSyBgmFlpmWgmgBNv9RvXH:zWrTgGfcwVZk6owVgmFlpm5mmL3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.35 KB
MD5	2fb2f07199a498b89b30e0a73f478cf6
SHA1	6e5fac01f6277c0e78fe9997a0a8dbc7df3930b6
SHA256	fb94c6b01e72080bd8f078c916d0bbb0e635c66ab570cbd94efeba3a91eab31d
SSDeep	192:XMlxnnt6f2MmWJoNISeaoQRkw583yQKNqRBCpnA:8vnu7mWJ/oHMaNqjH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.62 KB
MD5	f1daa20caa22476a7ee96d9eebd8a429
SHA1	01739cb7b93910595bb3aa3c16940a5e5b254d3b
SHA256	c49b49bac53131487396e40dd5153221cc3b932abdb30edae29e417ed32300eb
SSDeep	192:qwtm6Thr4AF2tb4qGeiX1Y/NJxz09QgHLJvVWXpS48Q5QMwrHNMYOBO0vsFXjExO:qODd4y2tc3FYlJxIOadVWZr8QyHrkO04
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.31 KB
MD5	8f510e5fc38ec07d313a694929552baa
SHA1	13273ddc22b752022ae7a47da7ede5c631e17431
SHA256	0f71abacda8ebba79574bdc91ee280afa7fab0be687a46f670edcebe000126c2
SSDeep	24:/9PKWj5CetuazEPBt9jx1zCqANy3r6qp7UxBBu+CZoJ+YGYZ2M:lPKzSN4NCNNy3Dp7U/ABZosYG2l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.64 KB
MD5	d6732b60337d21de96f5cf73785cb3a6
SHA1	731969876f109dbd70f7871f5a97cb3cc5305336
SHA256	f7069957456f3b4a680ddf49504451f171805b81cb24aac6ecea4be6c5d0af40
SSDeep	768:lRi5QaB6hMPCgaCDFQLGQIH2Y74+2hUPOQKtVkBJ3BbaC5d1kJG5lCb:lRi5Qg6hQCgbQLeWYjFPOoBJoCeG5lCb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.59 KB
MD5	6a32028c042dffb1f010ecaa7ff9c94d
SHA1	d9a6c7772f29f642ff0aa53949ac02f611580d23
SHA256	ea89e34ef89aab31100c4ed24b2082a49746a09f36d2fea92452f84c3a08d2dd
SSDeep	192:n8089sqsRL/MP0fMD/Vn8adI0Lg3EISH6UzBhUUuXZJ:8N2RL/MPNF8TnI5zfUUGH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.63 KB
MD5	d66e3c824a2b409a50638c686b351753
SHA1	cfb41eb3d62b9f12622141a727b73e13a45051de
SHA256	c9ad945bb7af6445f9e82bb4af06727d3d2d17bac509957070ac2b4cae0723ae
SSDeep	768:9ziY2fZIlvV9XG9dUDezq1IXEa8XhR9m+d45upqWhg5JLIgSQdf6:NiY2G5HW4SzDChR9m+PpP8Jd6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.44 KB
MD5	522275f3aeac869d5e0f80557eeb656b
SHA1	498e3921ea3c3724714dffe66ef164bce15216ce
SHA256	8c0d9152eaab9a3bcce23cd0f6c502e3f4635c5f429a71b85ca9b765436007b2
SSDeep	96:vMRQ0GDrdraLGyS5hRGIGo5oXXBcbL7pVXUx/Yl:v0e1ykaHBodVmc
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.49 KB
MD5	5244db86684128e35ea382cc4392329b
SHA1	ec21a1d6638ae8bcbc351a2fecb41701dce5fe32
SHA256	7403e40266fe129bb0d07b51b66d430f0a5b80f35d9a64f213b15387d40ba60f
SSDeep	384:oNlO1i24MSvzlm31/DFSug+4OxOvLEBZI35hfcvFz0ANRxwKNZ3Kc6HFPgKGdQ7a:om1AJlU/D4ZvuwMDz6JIKp7mNuY9
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.85 KB
MD5	fcaf6b60d4da3e4064fd891f0fec89b8
SHA1	8ddc9859238d85ddd4ffb69c860d5f4a4d5353c2
SHA256	bb165be3d329f76fb0f142d24e83632e9baea1ed29dd20323094e4ef04d3c742
SSDeep	192:44TfOJCgUKca8I37T0cWYSJH/px7LtW6gK1Bl8y+VKJQTi3DjXWjarF72+954S+:VfaxcM7T0cmtRZLtuKjXUyQTeh72Me
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.16 KB
MD5	de04f320e783309fb63d46058ae4f9d7
SHA1	4adf379b8250c958f872bdad3febf789375e86c6
SHA256	0d3ca09035d8c419830421ca10710c789b9e94e19d122919dca76a9a66c5fedb
SSDeep	96:9q8bHELScEDUY/egsscsJpoSJX3rMFjHe3abSWcM3rvl:9nbH9U6yZsJBrQwW7rt
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.30 KB
MD5	a3112f795435dfaab418c125b5a8d2e7
SHA1	1ebd411a0c56336b551a1582e8bbfcec3de6e884
SHA256	550d78b1d3eb4706436c72eeaf28c7e0d02297feb6c016f3e4b8d1d365ada124
SSDeep	192:3vqqi7v/bQ/By30lUTbJJIIpknwGOvnzQf2n+0f08/NtMLOpWeVZ3a:3vqqi7v/beByPJJ/xGyW2n+oxTMapx0
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.15 KB
MD5	03dae8f110d69f8689efba205cd8cdde
SHA1	63300bc7c419123aa13be5a32dd5f387dae571ae
SHA256	61c80216b38c85ef3ef15a6dde416afdf4a8f135ac711108815d9d78d138ead6
SSDeep	384:dcGl7DtbPaQDxryumi1OuL2hIWb/Gazmg691:dDlVbPaQNOumi0uQ/N61
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.03 KB
MD5	694967253f60c18d6b47dfdd755f96c3
SHA1	32b81677a0b864e63ef0a62176fd535b79e4a157
SHA256	df30d851515ecc7b6639fa74a994746d9fbbec3dbfd6ca0de8334c0156108fa3
SSDeep	384:pX2Ojy8Dhj6XAeaLe9+g2ly2vVMdyS1mi:l2gDhBeaqUl7VMdysmi
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.26 KB
MD5	0d86ae4461c8e1c6d939acf0936cdc10
SHA1	75b30395d8b7f6c8b734040a70174b3bcc2f215f
SHA256	dc8e5ddefc285b9160ef72f87be4f1fafa79de1ba92941b9d03e044eb73ae19b
SSDeep	192:820TWKgRosJK4p6nrNp8088QMSatLshWv2TcLFkGhaV3ZTTaLRjVB1BUr9:8fMby/D5NKhWvAcLmNpT8RTn+
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.98 KB
MD5	0570dcd05345c5c00df7c7d57cd2294b
SHA1	e77e59f5aa5683fa0a532ba531d209af23c38080
SHA256	aca4be0b660ac131b039ed0e9a64cb3e31ea4b0119a375421b5b01e75ae0aef7
SSDeep	384:XYWDnoMIilLuTOLsNm7t715xMH3bcO0ypPBQz0HV0yJ0Kyl2n7Kch:XYHMtaTtXbPPBQGhyl2n7d
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.28 KB
MD5	a40592825ccb3da33e1076e437f21fec
SHA1	55a4cbaf0a421e0589b428997f08a1ff84f50337
SHA256	109de2435690435a43aa27fd85a4b58f2804718802f8c33b8e8560d41ec08d6d
SSDeep	96:Lw2nV91Dd1IaNPGMQIrwJpFQwInHkLQuKU1PL9gzxqgRiqf+fWGDMZyTv8d5vl:LV50BVOlwIH4KWPuqWv+FDKY8d5t
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	48.93 KB
MD5	25ff7ab79b33a90f7394267921a3ff4d
SHA1	af8d88b53a7a9c1e2cab2d1a9cf0d2b7b93309fe
SHA256	77407293ce9d78b45074d93effdd2a8f39abf664ecb26bbf886fd75532c31bd3
SSDeep	1536:TwwVXkXB6JDBLGF7BsNTxCKXT2I/nicXjQw:TfV0XBSDJGFBwT/j2IPjB
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.07 KB
MD5	4842366ccdc2cef5b2887775c9c25292
SHA1	c40396047656e29aaf834e7a0dfaaa915ae491c1
SHA256	4f1d415e449871e5ccadb0fe6e99d2e33a3914db0a13473fd588d536f3fb01a2
SSDeep	768:Ekr8bfQFumfYQSupZC1phH/8N5NofAMM18+vvZi:EkyQFcupZM74NMLWvw
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.06 KB
MD5	21f62cd05c2a7a35d9949d809abcbff6
SHA1	f068d248eca07e9f9e5a6b5720962ded1286e715
SHA256	9d71476deac4c57ebbbeb43bd5e8399099207690704b9a0576ad67c96cc46f65
SSDeep	768:ovHK7pynhE+KnWv2bQxXlwwRBd9yxXbTdZlZm6V+/7O1:ov5hKnWebWwwRBd9yJbnHP+K1
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.53 KB
MD5	abf2b2e7914faee01887e1851c16494b
SHA1	a4850ba43e176912b763a80e0747353a6ccfe57d
SHA256	cba77faf448ac228abdc937eb67b832a16ebb552ff3cb19d0e9290f048ed1afa
SSDeep	96:GaGZsZm6PRdawvDHL76LtLHX4KBDQdQUWlIUFrPTK4PMAovepQmkc1bsl:Ue46PR/rLCpHICRIya6ovep1NY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.54 KB
MD5	f997508d8f1e721582b2d3a8ca940e53
SHA1	9a8274ddc5105b48621e6c1d8bfed23622d96985
SHA256	b90f2f9419eb7b2db2dee029d3e49c9ba500b1189ab89364051dab65ff29f9fa
SSDeep	384:7ZeQQoKCFevBP5xy1Jk4zTyw9atI9j53dDzKITZ:7DQM6Nfy1JlTywIcjPCITZ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.24 KB
MD5	560a91eae7efd01cff821e99d3f76298
SHA1	b0161e42ea89149ae06fd82a1a59dfd42cca7859
SHA256	769e1567e66deee24beddde75d53b6031725ce16e2a1d288f9122ae55d40524c
SSDeep	192:cQ23ykQ56cqvs76rN3DORgm0RYwsXKHLNPc/vWoVXg2xDtCTd1HqB:t0ZO6fv26JD0gMXKrNPc/uo+2SPHm
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.29 KB
MD5	fea953017987fe1a23bee5171a430b50
SHA1	674303defa2de905866746d1806e6c1d7955b3c5
SHA256	17cda41ce2e11a0a071c10b876194739eb303dcef63a50707c3fde86b61c0a57
SSDeep	192:aSgLt4Ux/DNPcBG6JIS0Fea+i7iqlgNtFWujUWyO6qRYRBIf/GyBVmzlWt4pJXGI:9PUxxPiG6KS2eK7iqlaUWyO6UYsGWJAl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.55 KB
MD5	ed8fd6137c714fdf5f51fcb445eaac93
SHA1	ac3a3a1151cf3000ea708b5650b053bdebaa0929
SHA256	32c33bdd9d2829f0191595622b33032b783af276390b99f05e19ae7cae5f3f83
SSDeep	384:8jZbw5snuYVS0/9UXTUCoxjgaM75cM7ZMf/vOuENEs1rTq:u85sn1VyDURxjgN75TO/Gucre
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.31 KB
MD5	29c13e7662e0ae94ceda7ba343fa4247
SHA1	032eb24758c2b7059a5986065727efb5557542f9
SHA256	b0cff2cead772213a19eaf978cf0d9b38efb6973ce034154b3a5c972fceb7ca6
SSDeep	384:WvVdnCR7186JsEqZsFeewNmbOQXsuAs3Ld9UPzkay:UfCRp86JXqZsF2ZQXsbs7fUPRy
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.76 KB
MD5	6181f0173d62d34817901119329f388d
SHA1	5eb1be728f714fbb4f54309054ac4dbabdee538d
SHA256	72da4d3d4deca59c175bd20e7450f74ba3d5679d8e513f39c1c9f1dee306fba0
SSDeep	192:iL5gv6xYxWcdYMZqiqQrlxscvvcS8uSnVoFSweIg3OgrMHtG/VK+Cx:E5gyyxBYQq+vau2WeIDvHtG/VKJ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.47 KB
MD5	2836ca1dd9d6e9c68b076f7736e836ee
SHA1	d092c5d94df38c53724f9724ea73b0b711684bad
SHA256	e94e885a6c4939dff3aecb4179addd3ab5a2ad5f9f7a6129d615e5df7953eb4a
SSDeep	96:1oKAk4GiK3qu+CSZ8vVBzfUX67T103xDrjg8EiAZccoJUa1JUgT3hcr+AVxfe672:1o+wK6TtUVdUXAQ0LiCcTJ7Ncr+kx2w2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.10 KB
MD5	59c005080853e06c02cb86f811905da4
SHA1	253c35fb7f6f563dd03a571a0ad280ac8221ebb5
SHA256	b53f565d65690a2585bfc9ce83d22488bac6196d3da03c241ff156e9f06cee28
SSDeep	192:AF2suwP7DyJkMZxqZyWa1qPlrtwQBL0gowSWrMj/JdAaD7bLH57R9f7GOFahbLHc:ynyiPZyWa1q4KhrMj/DvZ7R9jGO/
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.53 KB
MD5	b2e48ff41b4a33cc6e455258a30ff206
SHA1	6318ee922c4e6d4150cc9c4349e19568dadcebe3
SHA256	164a1f4c7faf11c7a0ed0d3e4c81a771fac3e7caf7aac153da8b7dd49026037b
SSDeep	96:cAstOHroy3yD4fqw8pLb4wC8s5OeSVtxS6aZPhV14ol:7sIHroyCD4wkwC8DxxS6aZzmM
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	4356b5ae8b42ed5fce1c9e9513769ede
SHA1	364c7d00837f8d99f2c9007d2cbf607bd7011131
SHA256	eaa144fd5530cf531745c638c7bb6d3dc0597037e7e678155b7cdd3d67413f67
SSDeep	96:iNILHU7Ta0w6wiJByZis8aDaVIepzp3/PR/+Hfh11bzl:iv7uoZCZn8aGVIefZ011b5
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.89 KB
MD5	2779240554905db08151abb7f717114c
SHA1	43d673198d348ca3ba423ad92043ed3ba45c0940
SHA256	f590d35a8eb7b407b5b944266162d43a8633d4922ef730e730c4917a0014fc0f
SSDeep	192:2vVU31ujFODIMEoJNW7z+U60xmnbf0sILkxA:wiMZOt/W+zfE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	d817b26a16b8f27c6ae38f766d506d9c
SHA1	47af960d0896f4f46c47b6297f643b9cf5660eec
SHA256	a2f0b0ae1a2f9f199535af53c24cdb4909896f628d37b3a9ee97bb4d4bf7ba5d
SSDeep	48:qKcaNTDw3ow/gaHlq9RAv0rMUmcOcGkX2ryxGg58rTDY5DbPUIIl:PTs3/g+A9RKYBOhRvg5dsIIl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.36 KB
MD5	ad23f2b3f82d136c29884dda561298f2
SHA1	cc21ca77a0600a275378f864d559a02202f77b69
SHA256	0406a5dfc6fb7042511b78cd804277c5d79055a3a6794c600f0323069c7e279c
SSDeep	384:1GPL6+89lJJe/UaAkPN3wo18ELOc490uG/w3Uo:Qz61FaAka+8ELOk/S
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.41 KB
MD5	6884b8e093a193dfda213af286758889
SHA1	b7048c3a95227af8421389a54de82874a557c5fb
SHA256	e2bb49a3e27faa1cc72aad61d52df78ed7ca230a2fde8b43ee58c0605dd0446e
SSDeep	96:5XDUsMsJoQqO1hV/mrgN5Ct/mWQ387q8mXaFwRmgUXR8/0MIBhml:5XFtakhVOkf+/m938+LeYUh/BW
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.07 KB
MD5	0a459972b06e1a6b3c7136f5d415328f
SHA1	eec9fb1513dd5d38059a6036c9886ea339c427df
SHA256	4b14ba1e0b85dd4880579d307fd7c3a6b10dc2e43a331e806cf568ff9bda55d3
SSDeep	768:3fEObp9SgFINltXwRhyRskhfhOCVhGwc8W:3fEinSgFINKhMskGCVMf8W
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.42 KB
MD5	8532ebc925e21f551570d924f03f534e
SHA1	69d6e76af9be274e893a7affcfe5df11945a4a95
SHA256	6d3bd468eda3ad5fcff0fd0325dfe79bedb32bbdb4eb543cfea21df269c718bc
SSDeep	96:WDDDoeeE0X2eqQYCuLROiT2vbp+Hzc5zFuO+MavHCTr5rmWl:WHDoeH0mbRdvT2z0HzSMOTavu5rmm
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.28 KB
MD5	050ebb4ea7fa897c6fe0d7a3647f3c78
SHA1	954d6df3f41fef514a4170064b0d7bb48d886fe9
SHA256	cf98d2371408eb371ff1ef51bef70feb4ff117c37a262238b3deec37249556b1
SSDeep	768:HQlFw6OgRfR9hVT7Y6l5/iS7KLA2qrc364qqzuAojWyIrZW/qGhRvKeehB6HUTHd:HV6vRZtnl5/isKk2H6UhojVIrZWj5ghV
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.83 KB
MD5	20e3cdcf81736ef3cb9da90b11a9260a
SHA1	bf8407a65891e0256970fe3db985a491f4dc14f5
SHA256	aabf02922209379b48b1136698014c77a2b8acc72a27cc215e853c8f9f74522c
SSDeep	96:5pN2hUSsMQgHlXBy2GsULwLMILQ3zZBVYtiI1220q7gw+0Al:n8UXMjFo2Gs6wFEz6EI4208gj0k
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.04 KB
MD5	b819ef479a1a7542b48d2fc8226892bc
SHA1	8588c4e12b4fe8a82e9fc0e94b5fd17988c982dd
SHA256	a2282ea60ebfbbd9d278003f63134bd87914dcd914f5f7d81e5a3ba3343cde41
SSDeep	384:izNaqXXO/1F9JgfVbR62z4TyBpDkL8nnHfNsVn2ftDtSX2SRFNul:izMqnA2R9bp4uNeWGGSRFW
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.23 KB
MD5	af32a2c4bd7b2021a0ace8f76f62a547
SHA1	3b32002b5c65f65fd3454c403c531c32f4cfcf8d
SHA256	d0417928079c63aa5a23adecbe82c913da4369081d532c6fbe78baeeb7832e99
SSDeep	96:6RTwpHd1BASHY+o/qz7UdKaxp1KefVAk/i3NuipWRjE5iEtqxl:0sFHE/U7U/p1Ke5/i9ERjE5iEcj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.67 KB
MD5	14b6baf77d256b87e908395f012ab732
SHA1	961ef06bbb38df0f638ea9baf246193dfb2683e7
SHA256	f410ac76a99eb18845cd83d6d00e41ff715fbbc74163c8d0baf9fe2d529e06e3
SSDeep	48:EhGJrQGZT1IkcK7p2urHICMRwD0zHWw85rrO6kxH42Q9Dv19y8pACXiFr0qNRWbL:EiTOIF2CMqQz2w85rrDkB42KvjlptXO4
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.61 KB
MD5	2d180715cca69d5bbb3391dc3f90b63a
SHA1	d102935a83da00efdea906b835e54abf17764ec2
SHA256	086f57379626bd9da5d81f270276f231a52cb7be4b6721729c6a354a34e64373
SSDeep	192:QRfBUb21jRzCjUbkZQ2eNPoUp7SqMrroCQ+HCRBzoRL0qi5Upr+n9m1UGf8nN:QRy2bCYbkyb+oT0RLIx+UYO
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.26 KB
MD5	3a9568a07b9943149b5f57608c7a788a
SHA1	5c09dad1b31e592458d1defa8223595274f4944d
SHA256	9fa50098008d33d89d06364da865a25f7562e426b8fba154e15101b685c2bc98
SSDeep	192:Md2Dwnm+TefhiHu4x4uz672pFIId61r+AKnfjhatC9O9N:M1GMO4x4uz6KDXd616AKndaKe
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.20 KB
MD5	8f44d9b35596acc6430a9fc5e4bf1bcd
SHA1	79adea1493ab71cdf4bd84dd3bdbe1413db468a5
SHA256	257128f37167ef2a7d2b63566f99197a25e34580622c9f3e6893813d4fee4d97
SSDeep	384:dQD4m8WpnJZ4SOuMRn7RMnHPPgvLzqXzCZu:dE3pnP1OuMR7RMnHPSzqXT
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.59 KB
MD5	ebbce2d7c395d9ae2863a4391bae5392
SHA1	4647cc54e359d3f371a5c3b8a2a0d49124eded2a
SHA256	2f5a14584cab7137dbbc151750d61ed0f7a5f90a5942d51dbb2977fea7411707
SSDeep	96:VecsaYVxs/XIiYwWBzp8aBkCc0kqFqSTwQ22yHl:VTHWcFbWBV8YkCc/qcJn2yF
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.60 KB
MD5	482f5d61a71fd74e1cbef41330b7eabd
SHA1	16f9c09660fbce404bbb82f3970c118c5a5ff04f
SHA256	f45639ccca4c0433bd991c6a27cee41d02aae64db7dac4f194482a7be329c8b2
SSDeep	48:0lkV4uU7/O0IXj7BhyhkIYJTWNhFEM4yN2ZzugHdl7bKuAN3y3Rs14oyiB/l:0mV4fbOFQheTWNjEON2ZzvdeG4/l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.67 KB
MD5	1701bb6d9ca57b908b8ab84243589e92
SHA1	18773fac3b276b1bec8ec5de182f77efd04ba67c
SHA256	62fc9183e36c100270401a2c02b86202062b1e4530c9f02c5c9eb3fdbde83da5
SSDeep	48:K4PjuMRXQ9KpE2MJSFlbeHtHH6XBZHyvl:VjGWjMJ4beHtHHm/Svl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.44 KB
MD5	724d8a18ec6a3ccd7e1a6eabd51e8995
SHA1	dbb1f8a28847eb44cfd2e21f4ba7c619678f8e28
SHA256	7528c62b5fbd9d838af4940af8f1a0e1711c6e5253bee09ed6b3f9c299a0746c
SSDeep	96:LKaoAYobUS3fm0zQ4dFgAVNlbIyDy7xGwvEUBASonYel:LTlZTDjgAV3bIAy7xGwcsgnYO
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.22 KB
MD5	01d62b43572b94f619ceb3833a3d16f3
SHA1	1544da68ec243baefd5d01b08a17dca4ade4c6bb
SHA256	e56bbc97a055da13511149388e67190d35ea44e41dd9b59d44621e4ade8bcd7b
SSDeep	384:Q1/ZWYanj+fZwx+jKfJtKUIyxyblNWptF2Zq:QSY7wkoJQUI+yDWpvJ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.25 KB
MD5	666cac5549c0c215e2981ebf190693bc
SHA1	ac39f48d0d5166a98e8b83da02eeed04f24418d5
SHA256	094939df631d42c17656a37ceca83971bc8b0b6d22f4be116b0c6f58dd751181
SSDeep	768:sN4/1K9BNEbgqt8kwy/OFtjAvfOenjkZplaw7uj:sNEQNEbgo8kwy/MtWOewZv7uj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.82 KB
MD5	708393b64fcbaa5254a33903dcc5c086
SHA1	35a469cba05c14a79f06fb015409afc9198f6a95
SHA256	268d8ef824fa5c8ed2c4a4d69b2dc045840d75e4332ee0151dbab6d496aaba9a
SSDeep	48:amwy2kSkOYFfH+7xHswQVqu545Bk7r3nsKB7FMaC0VPdb9zNqPBhqctCTwZ9Sm5c:3wy2kfhRiUh7rXsU7FMaCil9cSc7zYl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.80 KB
MD5	2e9836f909bac56f5d810e70f686eaf8
SHA1	6202b8c9a9ae3b0ca4b246e20bdc790b8c55f7f4
SHA256	eea60329dca5c05044ddca20c35f70fe6ca3af474812fc78739a372b40ffa247
SSDeep	96:H9hXHlO98HdrmYCgyP4VkDNfUYJtjUewalgfy5Hj9dC6BRKDvtbFk4/OCUkF5eFL:H9mc8Y8P4CCYJttwaU0BB/I1xk4/OFkM
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.15 KB
MD5	22b9e3bb87bc35b03d5d911c48d28ebe
SHA1	08319c4c883c3047fc587aa2baeb2c4bf9474e4d
SHA256	21cf1ec3f50ab7b58922046fb337b6ad1064d50ed2dab828c407e919a69c2490
SSDeep	48:AlnS/XXRYqqL4jfNGvd993x50O1iFTBCa6b3rUSUpzU2j3xxpRl:OSPRYhLZ1i56b3oDzUA1Rl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.72 KB
MD5	17098e169d364b82e6b124ac69c62037
SHA1	854e8c1f1b0b86387cbb0953816142279cbe2da7
SHA256	28be42634958a1e3e155e3b8b4f388b41343c912f590bbd7fe20f641c41b17ca
SSDeep	48:jyY1q+uj8zEji2X/DP0Tc9Ugob/DjchItrytq690CqJAOgGUPmkjl:F1N6iEji2IQ9nu4Gtry869z6AOtUekjl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.11 KB
MD5	b737488d3cfcaa84585ec53659638ea0
SHA1	f2746925d4bdb4485f57f1a0b5394b3cbd7a1e34
SHA256	a0117ba5c0f759db97d568243a861cc7dd2a67e9f11b8ed27a6e42ae2c30611f
SSDeep	48:hCJJN1BqvhTQojsUxRaae81h/6D3fCdKgqLA5VHD9PqDR9IdvP60Q/OYvvn2Jl:hyivrj0azxMLCjZUcvy0ZOvn2Jl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.56 KB
MD5	75fd079448c2dcf2ad05ca4b928947f2
SHA1	93df14144f93c5eb280fc6618852954fd3869e1c
SHA256	6d9ca151d6ccd9fcbf144f50d232bd81d23573157f0ede3101b7490af2f27905
SSDeep	48:kFGKtjo+ExevULF5XRDXWv4navpEYgHLiJzUiSQhg3Qixvm6DQZZgtmUg/e5l:kce0xEULF5BLZnQEHmz+HBxewkOv2e5l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.94 KB
MD5	09d7e7a2f79d559c41eecf750ce2204d
SHA1	e5e1ebeae3d5721eb9486130f73954a89949860c
SHA256	728ebb87e26caf589f3ae6b17490d275731114d403da66e82a1194144c1ccf25
SSDeep	192:/aReOp2LR+TSly8s01h4i1/AGV8C1b3RcYVT+AFF:/ue+WN/4i5VT9G2Cu
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.53 KB
MD5	12047ef3bf7ee17296d79ecf1a9c3123
SHA1	dde939ba775b1a620e8e8f6ad5b1bcdcecc24b9c
SHA256	336f70da4418eac5b8c98b55dae894ff1277cc8aa91f9502a2ceaa9674d610d2
SSDeep	24:5uPdavBcaLqZOTbtLnSTU2EL8R/YseZpwy4nVAx39THmpP9foeGYi2M:5uFkm/SbtmT6LC/YtpwPqR9THmpa3Jl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.12 KB
MD5	e7e3e3637725a50cdaa60122d6fd51b0
SHA1	53d3a94c3ee72dfdb53fa8e9c1945dece56bb46a
SHA256	965ac859bda2c0c884a9f723fe8eec5e3b063bbb9261471b2feffe7098e0688e
SSDeep	96:dbzArtU57PhkK2IEjvHpiTkEY0duSoYKjl:dbzApU5ThkHFCbY08tYKJ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.22 KB
MD5	5f29c83f9475c0b648d28918bbccf9b6
SHA1	03e65db734766363cc4fdb15f1d91ba9e4f9b991
SHA256	e163a30d01121df35f5c49099b2534ae3400530c9a42f210d9d3a985bc8b095e
SSDeep	96:s6F8MlQFmtJNNRYYlxdKEIv43T714muL27YyJT3knxtXeogNl:P5lQKJbxERa714m627YgTOdeV3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00241_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.46 KB
MD5	22a929b940abef26b440f0db6d7a09ea
SHA1	913493c6a1c7ca162418a88c5d09678718b75596
SHA256	11790ca72b2168d5f802e749d7b78aa328c679afe4ba20f3b622022418d887e8
SSDeep	48:u4vQ6if5JVw7MqSEaG4NrHTB1gdDM8pwpQBBQi9LuABCs9OMqWKE06uR4K0ZmdLQ:3LAVE2hNrHTBWmcwpQBBQiVlBNOPjVRA
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.49 KB
MD5	1936808f0d4c43f8e1a946797a8ee63d
SHA1	b4330c04a129bacbe1d6d489b828cca989924ea3
SHA256	dd224c4eb347e044afb9d9a4ff898a2194bf9d13b6bcf1a2ffc7f22ad3173e9e
SSDeep	96:rmKvnFoo7QBim3rmV+FsMG4I2m5HcEkQ+Ol:rtvF/7QBiWBFsMrI2NRe
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.95 KB
MD5	59e362a9644f055f3ede206357f61c32
SHA1	e665b97658a6183f437f37a41ce4e4d6203177e3
SHA256	2aa4789eb3bd9d17ad941a09802ab8209186dc4ace49596f4b266c0cccdad6ee
SSDeep	48:nA8deSEVyCVdT6sH2GxBhn+jMZPRfokf4od5w77BHPkeFP6sYpJTq8M98xAZOpB9:nA8de9VyCV0w20P+jIPRfok/bwnBHPvY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.15 KB
MD5	1ec405f0f778662222da280f85c0c569
SHA1	b40b6b6241b9aa06950f8984462ac12a819b0d00
SHA256	69088e84a6735c8026a243cac88e8eed74dccd1595ae7160812d193484524f10
SSDeep	96:0s/wGWpPtngHQptGxDuYDcdCzK7RrbxkmvR65SmHWRDa/yJl:0wgpBgHgw8uc51ZooW6b
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.73 KB
MD5	dbadb934dcd9dad07d44470211c27a35
SHA1	afb5bc2f3dfdce1a5fb507501e21d16b789a29fa
SHA256	d8e477323494d6a97a572b2b565d427a7bebef2b0f1964a300e82e5a4a49377d
SSDeep	192:aUMoQi4DIDRggMwhTfO4vj5DbM1kHHtW+E:dMoQXGRggRq4bNMGc
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	31.00 KB
MD5	bfdff1baf254e4a591530b9c591a5634
SHA1	eb1f7476225b9711e923e085b4649d556b5278be
SHA256	9b33e2c564ee553ebf2a347bb5e36600efff3fa1d9b05b589523ffe65c38dbfb
SSDeep	768:jpuw+4mciKJ7pqK3AmDcpV2u9SWmflnM+PY:jfmsJdlQV4u9pUMAY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	b86886b6fff6756dc4af4df0fba762e7
SHA1	aead09307742e79506894771613f52c7a9f60dab
SHA256	f3864b2e9bc66ec4b3ae0c125cb723bb15aea55727f227782288ec911941c742
SSDeep	96:UGIhLHHwCzA1DF76R/3fslVfSsarsyZy1qWLY6xqsx+2V+fTFASGCYyGGjZoMl/p:U/5HXzuF7G3fslosarsrBY6xqsx+TFAO
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.07 KB
MD5	cca463b07d5e55621350e0118026f529
SHA1	0dc63bbf26cddf7fd5eaa8de9d2bf75284887b78
SHA256	cc844ea834b9917163cec27cd3de1c5ac313075afd396854f7df3f9320e5e787
SSDeep	48:zhv+ewEZpPkBBmlx2hBOimhuYIPbdDavN6QfofwW/3ANl:zhlwEjkBa2hBOimhuYIPOIQPW4Nl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.09 KB
MD5	a1ce805fe0a08793fd4f0da0f2088036
SHA1	ffac9e68e6c735e5595cea26630e3f0e4126207f
SHA256	e4cc2d19d80d2c71bc931d05017403d3c81e4f184790619648791d22a18122d3
SSDeep	96:nKOhGiT4U0yuEEFcqvvFAOkF0yjaeNXgp5V9iYUfDrgBMiu3zG/r/px2SGE3LRyb:XV0yu7cq1ABBRXgj3iffDcGF6bGi9yb
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.34 KB
MD5	1eda54ab9a2069786c5ca7559ae820e6
SHA1	5fedb67d8c06c3df050165400c885eb2c95cbf04
SHA256	7c1b3309bc001e326605023c9f3fe7a03e2ee8821f0ce09646a6efc8482614c3
SSDeep	192:yqmvikbS1QjlfLLLB1snfTDwal4ZwB+VedGxVLSYv7EdzMYasRQ:yFvTUQhzbfnZpVe6Zb7Edrs
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.64 KB
MD5	b0af1bd232b1d86563ad0be14642fdef
SHA1	c2a85a80a3073cbff30f2a7807313dc263bd7b28
SHA256	03a147f5dbc85d2459077c31d58c296669c232559f295a64567f590dd8d283fb
SSDeep	192:Yp2xDq8dCW2PuEfJooQWs3CVhEKL16kz72oqO5+8fQIrVNAB0tn:Y8DzaPKoQrZY164xaw
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.18 KB
MD5	51c03ccea54a660db1ea10878c814d3f
SHA1	52b326ab3334199901ded38032d27289cd5c46b9
SHA256	1f6c6536453c784db7c36f7cb9328683e60765bcf0b962c37fde2ed0a5e711c5
SSDeep	384:meD+WwJyqV1DCIElWSkKHKHOzCi9AbaGU:PSyqV1sWBKHKHaGU
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.04 KB
MD5	900d9c668bb38541f4328b4b24dac85f
SHA1	f43bc608936322445b45e05c7b498f39d88507ce
SHA256	d7a07bfcc91e19b6ef57709b0f512a1814a19fd1cc27562d9390b1813f18925c
SSDeep	48:8Q60217p3MXL3nYsEPKDV+kghfx/jnicvsGYSD/a06cNsCxl:h2coyDV+Nhp/ucvJa06ssCxl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.75 KB
MD5	610bdc8e2035b7eef7bc94ea3273d199
SHA1	6e7b8301e71b22c33e97f186047cb9b0ee20c937
SHA256	1fddc3190e1b9c4343a60cc11e9beaa9dd29fef9e3b71f4d7430b9aba075791e
SSDeep	96:iPpJQO2fBl1qeGDO5fw9XFGeSeAlM4Ysgsb1Fl:QGJHqe8O5I1FGeS44YsgGP
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.97 KB
MD5	15d40aeadc17c77a10223ae7936191d4
SHA1	cb3dffe695707f1bd204b6b042142ae9d2717d13
SHA256	a61111ee71a5d42ca383af996b7fbdac7cb81146c9fdabe118dd39b55d68b5c6
SSDeep	48:yj5ZwrTsDrXE51zYw6Pfq/N3QtPbhIIJGrC5HInAjpraFYX+140+puw6MMl:w52rYDrXu1zV6Pi/Ng1bhzJGrfn6js44
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.43 KB
MD5	32c32b3336ddc0c90ad6404e124ec73d
SHA1	3b69308454c4222dc6e37f20b9a6a9f237353afd
SHA256	fae5ed8679893c24b6851f761e8a48a42b030ec1d979e95a1ad263b8002f1683
SSDeep	192:Jjqy11r3t6GgSeTp0ViGclTKkJrivkp16IHnkkwdXK/ucHzO5sawWEV+0jzsgx2r:ZrEGgSUpxb+sb6IHhwdXeuzlBmsWO
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.27 KB
MD5	3af52e2f0cbf998b3ac65366746ebf09
SHA1	51d92f9bad8e46813781b4854509259518643d9d
SHA256	8692f81a2dfdfc3a4d48594673ab4ef6499591f6bec2824a6bfad47e234d1773
SSDeep	24:1GsFYt7hiHY48K67szqFAU61UHT2zy1+A5YLpU3V1OkP4Yy2M:dKhiHY48KAsPQz2zy16NUF1adl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	864d725bbadf561e83409ce0281aead5
SHA1	b1ac21f760d108fee0ce030380302dabe3079dcc
SHA256	ccee2ef7246b3e71f78f64949a40f72b4788a22fc27b400b6c9622a0653ba2b2
SSDeep	24:D023IHuFsvId3lLD6S2nAzlNtVOeyOz03nFv5nwYurFaevdvYB2M:womuFsgdVLfho1CYurFaIdv+l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.97 KB
MD5	e9eeefb707e761f31350f7580dd723f0
SHA1	7d2f3e324eda01f2a23f6531f56cb4a995ade1e1
SHA256	68da002e198d48f3a2b1a9c346399b5a6f59ff87f17fc35502eaf5144cbba8bb
SSDeep	48:F6OpJ2VEL9ncPTRQRPI3s/hhWXGe0ELSdiwULQQnjgl:xMEyrqQ8/MVtO7W/jgl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.76 KB
MD5	9cd481d5ae066a08213e9beca9a4fe5e
SHA1	9ed698b96f77e42c7a6a3638e557c1dfa0370875
SHA256	58c04acaa97f5edd47ee97d062dd3ef92f5fd6f05ef600055b3ab757e4fe0b80
SSDeep	96:hiMjPXaiIWki/0LY4dZG/Qm9ARaM+dpKwy1awVc0JNV7oUxl:hiMDRtki8MUcQkXcSU5NTj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.25 KB
MD5	91de0b047a12a9031d4d2eb396234bde
SHA1	5509e058e2ad43f3fa6ebb8172f59bbdc6083748
SHA256	686d8963cc5c48cd1429393db63178745fcfb5a30274082c583a275fff17c20e
SSDeep	768:qVmQoGKZ7430HzOs8fOqGPaZtpzB61GRfydKruOi/YxBHiNyav9:IpoGaSGOsyGCCM9rjiAx4MC
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.34 KB
MD5	6d7228f93378d52b65d12fb6dc84e6c4
SHA1	3741a96e5df9ce45fcd0e8fa62f7551ea466d73c
SHA256	564d2cbd419c1b103a68b8727ead99fc21abd0b64cdbbc52606fe7083acf01b3
SSDeep	24:PU0Whg9Ue4frb4cVMeiYBPj87BfpkzpUth9L5c3wJI2GXYT2M:806g9qfrb5icuBfpkVUf/0wJIJEl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00623_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.94 KB
MD5	ecfa5098d1cffab1a81001b113abb2e8
SHA1	8dae964e68df7b733c31066b6a4903f63ba6e5ed
SHA256	837070b30e8ca1036ed60f77dbdcbbd2d9d9718cd1daf97a3436a6712c16c007
SSDeep	192:eUdOKT4K/hfQDXFNMUduPEOwQcVrrJRFRF3mZmSvBKA28PpGwqbBJrGE:e/KThBQr1dPOyZFRF3UB7P2lJrT
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00693_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.48 KB
MD5	c0fd3588b1e50e14c280c3a61fb8d067
SHA1	c8e6e9cad5229da9323f3ef00f5133f3c436d89f
SHA256	b8a11be7410c4b34ed1118b698ec294dafe8d602f33934fc8470ce5aa8c6b8df
SSDeep	192:EgACmT9OjTJyNMUCvL2gdXSQETOzboy5nXliia4HA:ZqEXMNM7vbGU1ha4g
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00688_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.46 KB
MD5	5af5abc0c4b4470550c98a46d4f38715
SHA1	d963af658892c5a66f3bde3d5aae268e49e955d1
SHA256	5ab180daa4efcee1f50d78ddc9dddc50105a6ffe9f2626534ed3849dcad40b6d
SSDeep	96:f2F5wN/9oRsLcOsoGOCm0usiNmL0HzOtO/Pv8HrFPYjYK7PCBzznvXuXJyb0XRPN:f2JRwcIfb0aHzHPGFSwznWhSBRXPS
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00687_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.78 KB
MD5	0cc2815c0e63face61ce04ae412cb713
SHA1	80accced4ee2c4f139ea818e2d43b3d9e0b4c354
SHA256	5fae4cc84025cb85e32ca0c5a7b000c3dd3a600aeb78f90957cc659ef8b24d6b
SSDeep	96:TeQ69bo/1rrJg6J2lciLfSGsOhn2h2piJNqqaf858OOYvl:Kw/JJtAlciLSGsU2kc55OYt
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00625_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.60 KB
MD5	38c6f367319a30b64559b8a65c13af91
SHA1	3f93eb280a1090ba8a75459daa02692f6beb3066
SHA256	334482499e8def048d3d6d6ef72f48c15dd4fb9c9ae5b6b623fee5ec19b5c0f0
SSDeep	48:UYNAO0Yc4LVzDn1Stf8EbQ637zUOdQakk9JHXPmRG/Pfo8cVvr1PCP0HkpU38QXl:Ugo4LVzJIf8zmjdQakSJiGraje00W8Q1
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00636_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.06 KB
MD5	15b975f1ee4de55f1fb5db5c6eb15dde
SHA1	2aab6ca787fdc966e2aa0a31de5eb8b9bf7271c4
SHA256	b5e6e9a9965b0ff3e92253e68c96d79509944baf3890b645aa85a221661da0c5
SSDeep	48:fh5XaFcdRyM7IDp1P/HQDDrJ+/A+cmZQUueou4bryW2hl:ZYFyRHZJucmO4ouLhl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01291_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.99 KB
MD5	f3b8f7da1fb1de71bb418326f8f5aeaa
SHA1	05207668702af334da5ccac5d86d9cbe8ef6b017
SHA256	50c2a91c5301d84c2b7fc6dceb0675d6a21c4556fe1e426dd5ba9bd1ed8f68b2
SSDeep	384:/qJCTPlIutC+LvJ8vwUT3/9cHx2E3AuJGri6HZYs3:/CMPl5tC+lqwUT/MdAuJSB73
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01013_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.32 KB
MD5	48aa665e53cd1b290868715dcee33fb0
SHA1	42ea0b5d9194a7100668a3cd909dc182bd9fb9db
SHA256	f69d6a5bbdb550c6f601a9ce061ac2a684fab864312523bc37841b14dc5512b9
SSDeep	48:W38llcIvGLbG5dsHp3QDNeneDLuYdQ+H2laYC/6s9xzISWl:WQlc8dw0UniLkdUWs9+SWl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00669_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.76 KB
MD5	34530a0be4b2359e5592d57ec8ffc3af
SHA1	18a7b331900f17e173febc4e9b588dc3d49c84b5
SHA256	33ffea475d4e608be9a7700de465f5ced7c044f4d678857288643587e7c012fd
SSDeep	192:2TbSXlM0griR5AuN3Xn9CF0fhlWisjaN06KAquk1N3F+D3aNAX1DTLQD6kMED:2nSXQGeupXndhlfEabqZn3FQqGXVED6g
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00527_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.21 KB
MD5	7ab165d403b29cc3758ce8fc267d3e94
SHA1	5955a0d7371ba8fd56502f4f984ef774d92259b9
SHA256	0fd0c377c841356e0f1a0bdd9b399d218899be592256daef1ea2f9bc0f148a9c
SSDeep	192:3103aoquyT4XPaeV7ekXaJ3uDriOD0Z4KLM3L3fB:lojyT4//7DFDR0uPbvB
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01242_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.71 KB
MD5	93fa1cd9fdb9cc18eb6367483eba5cd4
SHA1	76d2363a18a7694691e56a80e5ce431cc5c88e40
SHA256	3435bdbe082c74e925ac78e1649e7081ef6b9995702c5641f02323ae8dd92ea9
SSDeep	192:ScfFYdCm3RbFXjI8mbFJiQLHnPy3LBN0V6Ytl01iC2oh:SqYd3hXjIXhJi+m8C2k
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01461_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.36 KB
MD5	a4f588ed5a7e57b3a17238ef75179b34
SHA1	eed66172c1ce002fdc030396433d282b276d38b0
SHA256	9981d41b9415f64a91f48a4766c0e204d31b33b3175bb6913143b360f2be19c9
SSDeep	192:5tTnwdoFrJhjGcLzglpdPkRdkkcTfm6TP1nY:7JhicLzsPacC6TP1Y
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01329_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.41 KB
MD5	59d32cfe9bbebb1a8c67dcd5b85bb396
SHA1	669e095aea7a3cb1d17815b7ae2312e9d93f203a
SHA256	458dad9279912192b11db032e89081c8cf2fb402658e50f7b8d93896dd7c7d3e
SSDeep	192:PaY5Jnf4LRSFQSqTjZnUettcbvKENZd0AwmQK:PaYrf4lCQ3ZLtcbvR2A5v
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01015_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	39b71d8a1af19eeb1433f09cfbb610cc
SHA1	23c80d799882d0dd54b99dbde189a6f68db42235
SHA256	cb7ec224b65a63e8e9504e3ae5eef3138c1d0dffdd8b15db94d6a43dcba00e31
SSDeep	48:MQE3Kn0yHvP8qfvF05ZJHlMdtHiMPmQx49EGjl:MR32GSFWsdhnV3Gjl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01058_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.23 KB
MD5	57f4634800bb24bbc3b805e1609bca06
SHA1	735c85daefbdcef233fce3024c10f46051b1f079
SHA256	6d96f15807d94ad380b79911b3725fc5ab037960f95c36145f9745c029e9fe8d
SSDeep	96:VvMahlnN45MU4MtJt7Px7EEPlGSfPOzPhxl:9lnC5mmJtLx75lGMPUJj
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01065_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.78 KB
MD5	c84c5fc07e15e9c29e126e52def6d62a
SHA1	cf5a8a10a6603ace2ee526cc4c179a767b1cd625
SHA256	c662fc239e1f1b30cea0bd05549fba0c37b356162a7d21f153257bab82865a5d
SSDeep	48:MDDVt2Zjg0u86Kv4g4uWUdgnuWjV3JFM1IeuD7l:MiZEz86un4uyjhJEN87l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01080_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.42 KB
MD5	14fa5c44be9aae949aba2fc01996a05e
SHA1	7cca88f8fe912311b065a2032fde6011be195a9f
SHA256	19afca39144de936e87698b1041265e4e17e0a51be027cab8da63c3471467b43
SSDeep	96:ZJrNtNprvD2PVxVaOjOs0nJnoqZgvVqwLrlMt7ZhtuosYv9hFVP2l:ZJrNtHrvDs4kOs0JoqZGfl68/Q9lG
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00546_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	a88a9641288f298fb16c204a2b1dac2d
SHA1	2eae049c1611741508c91f8cb8009271c4a0c567
SHA256	54bc8ac3bca6f6e9e467478fc4412e3eec28e118906ad56c3656af3bf1e16497
SSDeep	96:gC2xQ73XsQzOdiM4sgA4b0rBktfecCNY/rvl:W63XsQzOQMzgvQrBS3jt
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00602_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.91 KB
MD5	9a897d60df9a48ebfd8182f0c211fe12
SHA1	5f4f027b6254c771f19cf5267ba942b91c04454f
SHA256	d13cf232a3e60366badf6e3947bd4dbe45d5c325136d24dfeeb07b6bc4c0544d
SSDeep	48:t/ofIkco7pZZ38C3i59QQ/7lG1yw4yqJOfL+AdR4l:2kgh059Q+u4yqJW+UR4l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00612_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.88 KB
MD5	b57787bb6df6b69db06391b6ec64b951
SHA1	6de2e47472010ac23b644abe59ea27357a562c1f
SHA256	84068b05e1f92fc8aea98266851531987dc00ff6438710d483beae5d8ba014f1
SSDeep	192:e0GrIVJS1mjiHFpGGFHz1OwxpvotkDzEzmcTTpvkZx7XVFcjNxSF5Vkvr5wM3g:rHaFHhOUDzEVFs3X8pMyFwV
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00526_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.76 KB
MD5	c6dba57c2db4bef68510b6c01703f687
SHA1	88b7565021526a22c140d67ae97bf3a8cfe6eb57
SHA256	3742c17bfbbc0dbdc75d254488b888f1ea6885a4fcdd77925fb5c9e88928e7da
SSDeep	192:emFcVKiwb+yphijVmK+Z/LYaC6C3csISRUQw9g2s62XN4sRShM+CUWIVHnr:eTDC1phijVmK8Q3xQ5s6EnYdVL
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00601_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.98 KB
MD5	56a406c4a12b7067799e3d7fac907b53
SHA1	c4ef4cc1f3900bf115521add8ba03ce45fde0ff1
SHA256	afb195737485d42b87869eda80718f72eb68cc7537ee14024ca87e4efbc5cf8a
SSDeep	24:PPd+2tXTA5R3R3lst6zsbLwMaOQCRhHkdBOk5YUkoOHGIvaYohvVxDr2T625ADCI:Xd+fWtDR7HkVGZhGXxP2ICLG0Huhl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.88 KB
MD5	baf6329e243c2d32baa977a9884e97ff
SHA1	ad743477fc0c6fee16eec67a7d8e1542c89cc45c
SHA256	625b2d9e703fa630bb1e94df9fcd1bb4be7302859298159ca816556f60d95b49
SSDeep	384:mhwMZjU1BTRtu2CNehxbpVWEgbd/vMrD8:GwwU9g2CNe3bzWp6k
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00681_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.62 KB
MD5	33051db15aa163fa73bef572ec5d4c82
SHA1	07d2a1ed3a0d6242d680d178fc36714103fc41aa
SHA256	a538343d67212b8b3827cb2ab0b2a70a39508fdc0118ae2b459c7b3fece1e6ef
SSDeep	192:s6B8OlBiFrcArOqjpArBLSazJTOkBF6dTr5qpqAixQ4MxYb1VB:s48OlUaIljpYjzXb65r5SqAixQHYb1L
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00685_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.48 KB
MD5	23a947d62bc528a2e7c416a7c3ce2f5f
SHA1	cb54d99a6f2838b01bef0f7389495ff66626a777
SHA256	a79dc794c514e3851ffd8419f8ccbae2cb1f395b1152ef1bc1d66c7071f8df57
SSDeep	96:0XHIkOsjkmxUVpHUCzddabDjKl7pR19ec9HrR2fIduWzrr9qT0Lv6L6l:0YkrjkIUV506TfFR2fIJD9qCiLy
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01759_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.83 KB
MD5	74f44c745d12c866f284a18518d07e0e
SHA1	91ab616ab0916bad818fe8965528ffa73fe5b3c2
SHA256	eada83200aac8f93f37e32c4d752966454bdefb37c0047bcbdc4a4fbcced69b7
SSDeep	96:UyG0IAcfVPv3VXpkQQFJgL2wCm5BT8H4VPekalK8v1zj4CfDFYZyphIg6MwYlY5n:hGBftvFXaq52KO4sDFYZLMY5TUK4O
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01923_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.62 KB
MD5	e82436528b6f5683f0b0983d83e30fc8
SHA1	6641c719218a99d844e91c9867cff976307174e3
SHA256	c2eee62727439b3b8134491b1c54a27faa807360f550c9ec3c19942213f33639
SSDeep	384:6xpTQgMVAPEMzFqz/mgnyF0mUstmnVHgLJZgChl7rO/apklZyfVu+w1B:6fQuEMzFx2wc0JZg+G/4GZyfVuN
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01875_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.09 KB
MD5	82dbca44236f577c149fa9165dba45aa
SHA1	59a54a1e7b891bd931c4ea272f36ea7437ce625c
SHA256	38d5fe3a12d585abaf91f47610c68c8f6816a8b39a7df50b93955cfc9977ba1d
SSDeep	96:H/Arykz0JWlYP09aAYj8oqpw2iAtcVeOCvR9Btl:fArbzc5swAYgT6AtcVexxX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01618_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.66 KB
MD5	2ca0bdaaae4b9566cb280cf088977cb2
SHA1	29a77108a13c276bdc83aac04e8102cabb365ef0
SHA256	97a9ed383eab25fe7cd372bd616db794ed7b98f39c11b1213a27e74b0a5f8e0a
SSDeep	192:0yGELC7J173bdXCObbGaRjRTRBnw7a3kTbh2t:0yGEir73pFGaFRl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02155_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.18 KB
MD5	fe21715a3559a311b889f94ea8100644
SHA1	cf22a58ac3ad35dec336311142de7c1459d86079
SHA256	b3c23069984043bca49c9382da5b01c90e971fe726ca3a1ba5983b3945560406
SSDeep	48:nJNlhLX7gyDjs45/243uXUvhOiCi1/uJurVGzAW7ZhfSavk4jdM5GN7oV4mxmrHZ:JNllrgyD4V4lwuxqAWZBkYb/fHR1l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02298_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.96 KB
MD5	b3cce6c6210428613861198904cb015a
SHA1	ee8f778e84132ba7e367f1b76405eefdf57ce209
SHA256	671415992eb876c2c6520e3917b083afd74694d01c3d7253a5dd933b15806111
SSDeep	96:itPDMI74RWLzb/YDyHv3Adz3WrzfdKkuZMZn3Ka06I7ePF+oa9Lfgl:iBDMIEWLz7YI0yrrdxaJ7edVaNfE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02166_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	381754ddd2bf9900c9607d17507f05b7
SHA1	6944df028b4c969aaaf9058248b9795d75754f86
SHA256	fd719fea2cd2d92ab76debf14acb43a2078658b910062186f916214b96cac97d
SSDeep	48:AooM30CDuOU3/3nTWGhzw7LjzZFOr9pjA+8ycl:noM7qn/niGh8/jzjYF8ycl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02312_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.40 KB
MD5	605972760c11a2098fd310c4efa43fc0
SHA1	db5e66437b8e6e1ce200ade2180ffc7fa5effb81
SHA256	d7bf69bc76c17989d8d24706003079b69289d68b35c9c1c076ef13a68768749a
SSDeep	96:hm4C/l3hPEKw8vR6y9EWkCkLcq8OMps+j0ABdTtjPcsGxE0PfQd7wq9WGHHsl:dSFEqZ6uupMprl55PcsGxbfu7wq9WsY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00118_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.31 KB
MD5	8fb5869b476bcd1abb1144c8456dfc30
SHA1	ed709da2799a5fae8b5cb7d38031eaf8b37b8dcb
SHA256	8a04e16a9187763a30ffb596c56fc8a2970ec6b4e82d74ceb52f066e908e999d
SSDeep	24:ROK7mKheN7Pekac1dKL6vpAilhCk98Vq2TBHQSJjx/xSbtkoYZ2M:ROcmkedhac3KLYp9lMkmQSqtko2l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00116_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.03 KB
MD5	eaa11c8cd77683a144c46b76f4d43e5e
SHA1	a6545c0e353429df0a8b4e55f7ad80c7d12ba10f
SHA256	e5a1757f2fb49fa4c8ae780eb6b5d05df46ce43a6c18d5b9f25568dad6eba265
SSDeep	384:3W1Bsxqi3dX8l8DBTlJa8wD8p3hJ0T+d0BsSFppt9hI6JF0xeAKAyLcL4zw2qL+:3yhi3dXlk8wD8pRqTbsSPjg6JFaKAWc2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00172_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.30 KB
MD5	98a892766e70a93f7907ae97187ee571
SHA1	7c4d7239056c0f0a18fb4febb02b90d5bbbea6e8
SHA256	aaddf0a53ad026eadc0d6d1eb2d8f000abdd538f8db5559131a997fec6356af0
SSDeep	96:6dFnsZWyREwta2/7MqE5div+J/4XzPiB5X81mMasai8ml:SFsckjJ5v+6j6B5wzv8W
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00046_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.67 KB
MD5	5bf995ccc8d7ed437dd4d794419fc0ec
SHA1	e2687929bbe21b867a50b7a1d6ad214d819a4450
SHA256	d06c0d0c3d7e8e7709ecb488a1e4ec414e8ec7ae2f79fdc9d1c5eebbed4c28fa
SSDeep	48:a6jUCEgK4/y/HGiaO6YvN+UlzkZXIl8y6ARvL+XkQ/Vl:njpEgH/y/HGZGN+Ul4ZYl8STQ/Vl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00177_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.58 KB
MD5	70523889b4802c84e360400f8f28c712
SHA1	49223c3dff2a0432fba499a9a2d754a4bb037e23
SHA256	894808c186873405fc1319e2788d28528d034f630b0b3317ec9262f805d8c875
SSDeep	24:EzHb8umuPU7WuVBLFu159wVVTOeypqkLBl1nuppa+DOULO0YTJ668K2YS2M:O7rmqU41kyko8Ta+5LxYT0xZl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02282_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.30 KB
MD5	76c34768ccb15e4c28d9ee78bba554b6
SHA1	2538c23e450f2bcd53132de617cd8eab973eb7b9
SHA256	9293f9898a93ec90f6fcc03fce3e6d98d20b2b499654dee60ba0b64175aeca05
SSDeep	192:neazwf/eLRIumdr29+LLCuMNBwscmiaUb9dk9BlykZi+xf:eazCIOXC1Ni0UMPi+5
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00426_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	67.72 KB
MD5	901c001d530044c9477a261c00076c47
SHA1	a6d69364d1d25092276c729c4f94ec9bc01f9365
SHA256	55b79c1b7978b2cadab53f9664e63e19efc419b90eb2541c092f5c327785b51d
SSDeep	768:5mUymcc1n/WNprJ2IexpDnE70sTmP3TQGeavDoiplcRuSJ21SXn3:5mUrn/cpC5nE4sTmP3b93cR72SXn3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00005_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.29 KB
MD5	20ce1af4076c2a431ba40c3ccedf8e9a
SHA1	b691bcb11747e048e1b58657f5829a5e656e9535
SHA256	8caf27578a44f5e1c0119596b7844b742d1504c5cbe68318af8a99b66d8772a4
SSDeep	384:t2Ue3C4nOdip2gFkpMkn9U2C0DO/GyhZQn5GF40V32+Ac1MoMztyRmJkGj1KK5cH:tUnOsptIU2zDO/1TQ53A6uMRztysBIzH
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00204_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.35 KB
MD5	3ccdf2ff85733351190e7c131404f779
SHA1	cfd1ece6fa30325e66c38c2532657fb4554783ad
SHA256	5aea03a16b85775166bf0c21f5df77b8dc79ee013e50a08f6e85417cea472297
SSDeep	48:YfG7J6UwWn3qr2GFftq0fFejdyoQ6/kLdpvS4hEi9lal:Zd6UwC3LCFtsofdtS4Ei9lal
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00233_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.48 KB
MD5	1c83f9dd13657f3bfa1406ad439e7e9e
SHA1	bfbbd825b5d1cd00a9788d45e3434a2a558eb4f4
SHA256	ee19233427ef2ca027371dc8fba4130c4a88daad8264773e2d4c9f43aca0ea78
SSDeep	192:h8OQoo0ta39w9XAa6sjRrflQSZOmk0ZjDt+6lwuc/5UqRT5i972zOOLyS6Dc7zRj:habNw9wabVlQSZOmxbwtxUqBtLD6Dc71
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.55 KB
MD5	cd2cd778da6428beec50b3a9eec87859
SHA1	9e7433987f74c094ad581ad7ff20a4a9cef75506
SHA256	932d1c5ec7d3f1a4ca370016b75af4228d5d8836e9bc5b7f956533057350c3ac
SSDeep	192:2XPMX7dUOPBlI1OecU4/RdPUUDGlY4aKxY0u0xzTUwYL:2XPMX7d35W1ONU1UkB59zz6
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02313_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.54 KB
MD5	8220e2b1bf88a540e4704c7e297aceee
SHA1	7037035805435cf93e276be909694d2f64306e5d
SHA256	d87195f5729f154b88423bcd36a8895715c0dfa163ed7c57364bcec3b22d0ea0
SSDeep	96:dOszWxVcwBIVF9IEAsrFwTp0r4W0d75JSwnI7Epl:3z2VcwBIVFGsrFo64W2rwE7
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00114_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.14 KB
MD5	cc5a9524eb78a1e23a35dacad97326e3
SHA1	e97e1bebace42401c77338522497b6787be64304
SHA256	726b98061aabed8d8a618226d7c80cc8aff3e8fd1d608ab73d21e1536c48dd0e
SSDeep	384:5hzz43ssjXQ6rLmoM9SLYWkgmMj+LrnMje+dIWkn/++DXtxPiDz3BJc:mjAltSEEOrAeuE/DXC3Xc
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00343_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.39 KB
MD5	143725ebfc1ab8d516af50a16436102e
SHA1	7c8520ff9a157c3fbd89f48eaca51fd63379333c
SHA256	69fb7ea8f3b17cafd6e5b95ff47e1f5aa89d51b1641012d757676f2f29871ae6
SSDeep	48:iHR+TpmEMd/wy10icvxCgj48eGNisjxP0ig+NyrO1zGBKttB9eM9aMGGl:iHqtMdB1gn4/uia0iXyrCmIB9ZcGl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00351_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.42 KB
MD5	73a22293b4bea4f85094bda4ea3b2507
SHA1	df16b7d4dc73181a6d3b5ea447fc1a531631ae06
SHA256	da221349a28bd20292dee628e744badd7b0ca0dbb78ad3f2b683e63093cfbfa5
SSDeep	48:4nxcROsVqdm8GUtgYAAGAeGblUfASJcD80Bx6SkGBhhv+a4t6hUZ7+ABg4lHXs8i:o6cVxRAAGAeGbSfFMzBx6SkuHvOvRU8i
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00346_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.22 KB
MD5	241717e4732a49678d18b16e0c0509ce
SHA1	936a9d81ac2cde8d435767eb1b8433b3edfb2b4a
SHA256	4e347875b4519485b7b70ec7826475227a4643feb4a6ec7167f850ef8660c8b9
SSDeep	24:Mcl6bfQhC1FWvdnkIiL1Qyq5/bzB/nDNvKy3iQy3pDALY62M:f0jj1FodnkPAzBbNvKuy3pSll
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00957_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.41 KB
MD5	99e4bff133e73f43ea406cd72525b02c
SHA1	f3629e52ffe3121b1d9a51fa2f16c538813b1df2
SHA256	052b217211e8c3f61b5d92fc1572df037bfc2576fcced1290f5b439a4b7f8843
SSDeep	48:H0fryCzgZTJCXiTBhbTXzbihy/qvju+hhCQTqIKjLddnGf0Z5lCDwtpd614Z2Wqs:lBEyTXbdqHHTqHdRGfolCby+2l
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086432.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	33.19 KB
MD5	c8b9f0008721fec0ec3e5a43a278d262
SHA1	850e9e60892fd95011c1c48670707aa790c723ca
SHA256	439d205b8f312839b037b20d6aa0806f75c75c7fde4f623a770a881c474f09c2
SSDeep	768:RdFmzF4p1TR50XW8zYihuXdWAGaTQNiQC04T5XYhE:czCp1d5QW8zhhm4AsEA4T5XYhE
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089992.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.85 KB
MD5	1b5b2ac2810a87be9737e2081641db02
SHA1	2f88af22a837e41b56511dba5e587614b6663e2f
SHA256	36fa9d427adb0de797b5a013feed7e623289d7de2a3001c382ca4ae104505be1
SSDeep	384:qHkFxL4rq7DWQkWtmOD0KxlmC2+yul5Ozj5OIu:QOuraDWlWtm5KxnCkO4
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086478.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.39 KB
MD5	f49f406b9545561d7753f2ff52c3bfca
SHA1	e01e082572cdf9f5549d80845c42c20b9bcdb1e1
SHA256	a00902dac174e0f08a180fa5d5b95820f83cad02b5061b9edd32892ffa998b1c
SSDeep	384:vmNUs34Lspm3JcYQFDo0BSho8vXQuynxaqo0B0WccIS:eXgspm3JcYCrSho8vRAxaqh5fIS
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086428.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.06 KB
MD5	3220cbb2aed044be9e6817522a922314
SHA1	d91a2fac2580fa3c9c5261e7847b7c0d623e690e
SHA256	9f319eee5e67a337011006e7c11842709bf5055ea375ee089b97d7a9d51bd4cf
SSDeep	768:kEUSv7Hp4YY6iMTAnXqzjiEiepUZX3TEObxTnVxr1s/f2:HUSDHXPJAXq/+qUCOtjj1Uf2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086426.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.82 KB
MD5	5a7d77d4590509782e514c9ccf59c819
SHA1	d1d42644b792eb5484390ac82bb724dfb8fab502
SHA256	f289d3c552585e06bbbd5b6077003d174f8880d6e449155a33ab52ac629879dc
SSDeep	384:PemQffTArF3fdxMlGv5D8XI4zTS1xD6L1zOlgY/IGmHjA4jf:PemQf7ANdgWZeI0TSrDcO/IGmDv
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089945.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.98 KB
MD5	3f308dcb5272e3746a294d18a7fcacd1
SHA1	06a8d2af2a241d8b204d92360d200fdb1251de51
SHA256	95e0589b3cd3460fbb7d2629c77075792a4ff919d27874bc39949e678c232191
SSDeep	384:GNvp9ugSO+Bx3GWKNVgt187tKi5Df7VXi2ohFTS0vKM+MXZGu3y:wHujLxWWKzmyd5Df5Xi/rSMFppy
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090777.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.79 KB
MD5	7971b77af0867d0d6bffbce808898a80
SHA1	c3d9c8f68bed90f22f18e5c8bb0023034523b5ce
SHA256	fcd80425035aba7c11c2e383b37c97913f48aab24fede55ebc274648217aa4d6
SSDeep	96:yM7NSJbElunmr+pvbIXT041Q35jSOB6X1m51tqQEYYV4cl:yM4JgluHp8XT0R5WOB6X1mwYO4o
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090781.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.73 KB
MD5	5f18c8bf78e377964b33305e8d3da463
SHA1	5f94ac82e5a87daa7fb48a6674127682e1e12d55
SHA256	19ea1c5042bfd4d805ad144a78176d6e5113b9e3227ebfcc687cf4c6fcb76db7
SSDeep	96:cmlugno6SwstStMon4DJHPwgmoZDVDBvC3CBd1//x50b9QreL9uB3tVAmuWUr6Dg:Zugnjhsi4DJvFBNB91xOxQreL9o3sJvh
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090087.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.39 KB
MD5	ca9857b86bd0f78a7683549f7e7f187a
SHA1	609a5cffaf3bbea776a3cd3c25ab0fb7c4f6e78a
SHA256	a06909d511224ab225c0b678b47c1fcd6f9aac9c863087245407852e1845cb24
SSDeep	768:NI/xk/e/FsQZHqrE8OFXsMgZ4fvdrEhngkK/3ZztHM2IzhkC1PLbXqTXZ:NIJk/e/FsFE8qsMg+dIJgH/TV67PHXqd
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090149.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.10 KB
MD5	75325c01cca207e7ec0d380729994cea
SHA1	348063a67157ad1a320b8ff528a337d1ccf0448f
SHA256	e9f941f034bae1fae5242c13dadf79dd8249c7ccad98d04e55b69d306cb051a9
SSDeep	768:wC/lxPnbeFPa0BqPO3jF+hnW/0wHcjisxU+h:wC/lxPaFC25F+hW/RHcjPZ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.91 KB
MD5	89311501c26a8e5198f8ad9f606111fc
SHA1	c62d603c404b7f30fd0210fdcfa1ccfc17e30513
SHA256	2d755c8b06e8985e5bacf684d519d8ca368d53c90745ed2060bd2c14a9b8a51f
SSDeep	192:L0w/lzrnURAylFWx1hC2vr/iBolaibbRlbsjsfcYI5Q:L0atzUR578dr/iBolaQ/DUBG
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090783.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.32 KB
MD5	b29c5698f02e5650187c15568320dfbf
SHA1	bc66a13b3f445f1cd5d97ab5862dcf0cbf2cecbd
SHA256	a0d25143a3aad5692b350bec21671901b85bae5c95387359d0a7696f2f868434
SSDeep	192:tnwxvThADSlDLGxTX/YHOv1fdCSMY9+oK/eRwi1M:WxvdjFLGd/Jv1fdCM9yX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086424.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.16 KB
MD5	cea496c2d10db977eae596b1565eb97f
SHA1	1370d28c508cae407ebf451ca51ea17f6f4784f7
SHA256	724b5352c1205eee8fb4b3de362b36a16cb1e91a2bdda75098eab4158817ebd9
SSDeep	384:03mI2PLeXlsvv/sZn+fctheO7ZXI576toBGI9mtH8HQPjw:03ke1H8fcjeOC6mCAl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090390.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.77 KB
MD5	9028ef8995bfdd644ef4fdf107300c08
SHA1	b62ceed8c651240f02c2a5ab5e466926e96b4c83
SHA256	368a8ffadd1cdc85f13c4184c99777d49c14b042252ba48c39a40d7c21a4d0b0
SSDeep	384:kJjily8rrCA7ANWcYXoNfJDxWEs11OF4UDfx2RtcGb2X7owP7ahZgeC:UiZ7VRX+RD5qO5DZut32X7RUqeC
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086420.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.92 KB
MD5	08c81cfbb2d01993114c4550226bc9b8
SHA1	8f63095dadf20c2f40d87eec06a11b50a1e45a71
SHA256	efbbf6c403e34b913989ba0981577da1909e48884d1cc698e301153d1bbbde55
SSDeep	192:RRxdF2JN6au0I9yIj0Qs7pV8M+QHekb3H9GCfigD9vaObkcFGPc9nGf6fzN3DzFX:d2JNT8yHQsjLt+kb3d1qgJdhFGUcyNDR
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090779.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.96 KB
MD5	0f6724ed27ed25cc1593f1628ee40bd7
SHA1	5fe6eb3e01b7031d6f42cef864eaf3b3b869e05b
SHA256	3ca418f343cffab3f1aca38519a7422be9102a559d2504314ebd52812360fc56
SSDeep	48:ZqNi8Q7dLpl/V6vGnfhiarCTcDUNax/3EoKxl:Ci8Q7dxFfRUcDUN0/nwl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00557_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.50 KB
MD5	0775a5627ba11ab762b555909233a6a9
SHA1	c959ab5d3fbf2818e5c1c342aeafad0a01791d6e
SHA256	6fc076b154780553e375932ce0b4e1f7eef3511392723c83efd958506faaaa7d
SSDeep	192:ugjlwQWVHvTFBY8bPHLNP8PCanSlCMikAabhiLjy:HVW9brNP8KGSlCMidz2
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090089.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.93 KB
MD5	fc97e1b19ea14f2dddd4d04de5ce7000
SHA1	cd30605337a8d17b7d10b06beb957d0093cff25c
SHA256	a2d5bff069ffc05e4cc4846aadcb7f655b816db3c120a725414f825d72e11e2b
SSDeep	384:yCp/Y0FxZhoFm3peqDzIoXVOFXyZseg1sRAAm:yCJY0FxZCYZNDzZXVm1mRAAm
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00915_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.99 KB
MD5	c28786e0a3c41d299cfcf1f9b9464dd3
SHA1	e52be7269803530962696e498d91c46eb15ef39c
SHA256	df261a258a7b42b23b8e41e5d934b189acddaf3c7645ee9b28512afe50021667
SSDeep	384:twijBgYETj0U2QKBshhdnqN/IGi2cVaOjOyU:iidTETMQashHnqpmB8yU
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0093905.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	41.61 KB
MD5	32b7a60f62969f992e9b4eb09c4837d6
SHA1	b8b19fbb9c4d02e30c36565f0d40ff77b3cca924
SHA256	fc7d80f14821f63aa0f3e1e9c95e5fd60b0f50f33b3216f631fe704a2ad6a4c0
SSDeep	768:4+jUgiLWxCuY1ytkY269MZUP66qZLsKuc8PqL2MMwKCXAYP9UvvlE8MELay5:4+jbQy2qM+P66qtAH8X/24UvvVMKf5
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.73 KB
MD5	4ab322432d8ced201cfd382c78f76971
SHA1	f08b701f08d0daabd61a2a2fd7e912e04af1b01a
SHA256	de0ae355fdd1136406374a710d6c76d3d1f029e956aabf26710d2e1e78a43d1a
SSDeep	24:5DOiGMpcTYG77QBH9rk5hEeR1h0Qkn2CzTgz6QNx4D4mDOeyYOv2M:5UMpcTYMsg5hEscnh0VuDdhyrl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090027.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.31 KB
MD5	b4fa154aeaaacc48516c4e09b896c444
SHA1	b680bff17ef809c6c78b915dcb8d693b203942d0
SHA256	1836e86b6a76fbb87edb09f3c84f1e91e2c7e117bf11cf3ab0e4dcf3020e1681
SSDeep	384:smYZRbeU3BiFXyQFV5grerKV/FOJIzpv0xfPA5n1HWJIm4bPOab/PJHV:2RbeEOFAVtO4s1Y91219ab3z
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0098497.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.40 KB
MD5	e7f7e8df1393ee21106433bcaf94c83e
SHA1	a8ce5772b083bf31de97a834fb5256e9965cc863
SHA256	743e0f262c02a23d49a977219dcb2b454999bdedf19b975b5d079a54faf6bfdb
SSDeep	96:cOKWM0+EwFZcHwWTpRLQ8IALrYqEYd54vCeM44snKHzuysIrgvtqTqs7yKRex/8S:cix9HtrL/3ZJ4v76scuysrvtuyIptpVY
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086384.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.04 KB
MD5	3199691c4c2282595c406d87228ed838
SHA1	4688c1fab9b8a0edceb1aa5ba555b0e52385265b
SHA256	a9665e09b94a655911f7ff6aa107498486e0ae19d94cdc79f6eb36459089c059
SSDeep	192:JyWlyynw095qGTBvFjzSBHG3y1trF8EYYZaG+yFfKbPOOP6TDe2Umi5:JjPr95qG19+HG3yT5NZaG+gybPhkDe2o
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00956_.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	87bcb99d7ee4b1e6da0cb2618e567a20
SHA1	c531e366500865b8b35febe944eebb9f8916bbdc
SHA256	547d94907ff9ccf906b8ec488769e9b8f5096b7823ed79c5e47eee97de5ea281
SSDeep	24:2TFUKqm7eu0pC7bv5+7tqt3sOXMHjKy8SjFg7BbCSn8QtGZMoaJUuUTAyYU2M:yFUKqmiuJnmo3sOPhdY88QtGd6RU0yPl
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099151.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.02 KB
MD5	10b89cb787b54007fb798bd167aec918
SHA1	f7c8f5dea970bfa79631708b930702d8fecab361
SHA256	c18d9fa07db3976718c72535b713605591857b48ce75ee7c3834b231c20e20b2
SSDeep	768:f0hLeEqkK80JeJsyBTDmYQNrZk96bxx1ubmjLJH6M8XcddlFS:filzKcUa96P1t6M8XM4
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.31 KB
MD5	2912c2bd30f336d7a6719cf979c4d331
SHA1	858c36a01cdc04d454f8b7fcb07f77df158cc651
SHA256	16684a4d22f1c7de4edfbe8b3188dde1da47f96377136213a7559920adc9be08
SSDeep	192:L3+iqvr5K+hG0ygV6y47UoBb57amK4Mhca9PePsx:alKQGSQAo3o4ScaIPs
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099164.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.98 KB
MD5	26fd8d77f3d95b9dbec024304941a9d3
SHA1	5947d414e3c93681529c327924d4ad33889b6eb2
SHA256	f0e27e388f3f91063551b6cfcbda3fd95b5bab8dd04d634d32e92007c17fb497
SSDeep	384:8cPm6pwlHj/s5qZNVnICmtdm9IZHnZJQ225ZO+xuLgu/Fnl9uhxxaXG5hMXfmw:h6N/46NCvtdmIHnr1+Oh7BlUhCG3SN
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	49.86 KB
MD5	f2f084aedf9e4253790bdb7f9151b6b8
SHA1	32189b34339f320481045466d70e8954d3ce45fb
SHA256	aef7147e6b050b6ea7efb4ed29fe6b4468645c7afc0794d2166fce396e49c522
SSDeep	1536:FZGaM5zLr9Q9Q6DsSmTGsu59mqOV8szTRGF:FwaSXr9AQ6WTGn9mqg8KTRGF
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.34 KB
MD5	f315d25fd13da1c1a0602734246df733
SHA1	0cf8148cb24c54c199f53baa1cbf31f0a9856484
SHA256	378871a34b0fbf1120085239e69b96bb8e1173007695385aea4d5445c853437d
SSDeep	384:XLD/7M9JQ/kRcnwarThdDCtKQGlf0SogGiWaTy:XLb7uJQucntThZZtlsSogLy
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099163.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.38 KB
MD5	648d39a7f4dc87eb39f2a85392d15e26
SHA1	4bb976c1d1689b9196c16e131c00f1cd28632d27
SHA256	1e337641c541b52eed786949b4f0074289ad6fc2bb2e3a888aa6febc715040a5
SSDeep	384:X27u4Ordgt+8ov5oVjSe1VFOjbYocfsjj4AFUT5QJvVgJ5ApS/RjwkfF0y84:X8t+8O5cEjb6viUGVgSTkfKy84
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099159.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.45 KB
MD5	b394dc3e976b3ca969b98876dd4585d2
SHA1	365d0f15a5ed81b5b75bac030a496325c98c136d
SHA256	7cf898df35667d1bdffe91995bf19364ca8d0d56ca9bda4dfa12db1a94341748
SSDeep	384:h9oiZQIQE9x/zoYtX+Zve8edXiu4yOqVEeLOs6M03AoaDaujCglyqSBNt/AVcicn:kiO5Ej/s8uZvRciukGJLf6MDY4ltSHtD
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.74 KB
MD5	d600abd1c7eaacca164b47d9600d5ba7
SHA1	dd815dd852cfeaf06091eb9c806a6d5c7202bf22
SHA256	0611bba5a02f2019b8aae102cd754045d362a2f1ebd573dabcdbf2fada4434cb
SSDeep	384:7pAbaMOWWfKVzruK66OwbvJ3X+MWiXjSXVir1ANDJQ7aYMjBXv9wA37rf:7TiWfKNru36v7J3X9W3X78qjBXa63
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.99 KB
MD5	e86ef96d29d2e36e8b8bc8fd2a010e8b
SHA1	2b8bbd0f324fea6a56f5371a50f6bcb5532fb766
SHA256	4496ea282b183a61dfb7623f60353151c0a02c5e28e0305ac6f21c098aed06a1
SSDeep	192:ytFfrTEvTpSQVk6WdqHhGNwjhpT+Ye254wMdlK5htBCSgcHxjl:DvTpSQUdqHhP+SzMdg5haS3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099158.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.09 KB
MD5	456449369d88ab95b67b5635db25930d
SHA1	7a6c65d3c4b6742aec9b17cab65ef6a53ff3497c
SHA256	7e817b585d246f39ddc90bed32cec73e7f4c83f8088ba9396224c4758705b6ed
SSDeep	768:94gYsTFiJ2e2dEwaeQ/jiglyq3LxTFieE:mHwe2dueQJy0L18P
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.95 KB
MD5	5588246c07df81ba426855b7fcbea520
SHA1	8087faa6b55f3d3fc808a693471cffb03cf51b11
SHA256	784df316d6363df5efaad4257ce8386ce10893831b691aaccdb83edfca81c412
SSDeep	384:9avTW45xbZoOcm1fNMszCTsE+QdMe8NJriDENYlISpbo6la6oXlbvw3w:SW457Zd1fNyT7oJrIEWlIWbelb4A
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.17 KB
MD5	6fa28a4109e6a037bb42b35855c6dd52
SHA1	c3485bf4d1b895ffcf3102a1571c7ecae0d9e86f
SHA256	4c5f570a761a61647ff12c4783ff86292a8dc41ca8ac6c00a8ef4bbc4f82fb4e
SSDeep	384:ESdmGA+vOSmPhGL9jrobm/HmWz5zBqrp8C:9AGAOOSBtobm+Wz5If
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.36 KB
MD5	4a52c5c2cf4b6cb94edf080e57aed791
SHA1	97d1bf9b8501f6ff1a5cc06cd3b3debeb09ade19
SHA256	0d0079f380710bac2e15cd482f1569753eda4d7c215e5ee32fa60060909a4a46
SSDeep	768:wf9V3VT/HPt8LzFBE/gvO14qsON2MvJIGX:wf5/F8vLxv44qsOAMqGX
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.37 KB
MD5	5d2c9f2f1f8e693686909d12bec275f5
SHA1	e8b77a3accb34490e3f4a5ad6b8fd7dd39496c66
SHA256	86f13f3cd3cb2774158e61c8b63cdab43943c4db2408965d5e183eeaf207db81
SSDeep	384:L6VfDjZFk+HwX1XOicuUYSvKowV7PD6sOqx9ww+kiV2y:sfDPwFtcuUYSvKoMr6Zcvo2y
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.73 KB
MD5	4924e43672112a00af000c1b5aad1935
SHA1	55a5a2eaae33d565be4cc399d126941f1afae1c8
SHA256	f7d46d2b2023756ec2fb49f6399b1c5ee8bf93ad95fd94c2db8251feaf6d3ca6
SSDeep	384:t+YDnaZCK/514z31h/Sv13TEZ2OUvmrAyCxve6gfIOykKt99XMLATeZx/ZMuHITU:wrZrRAd01txvms4K99jTeZx/ZMuoTOfP
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.54 KB
MD5	e24e1027c53eb556b69625329ec8b8fc
SHA1	5bfd4b12c43b376908a33b8183af5f0b7afa166b
SHA256	25d54d398a137efe9b33f8b306631aa53b69ad99ae7053daf79a7e203d0c4a37
SSDeep	192:/JLlLGyfLy3ep+Fvgu2K582cKoklFOvVbR04Do:/JLpVfLpBu2YxoYY8
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.16 KB
MD5	eb159f158c158f06f1ee7e19a4b51613
SHA1	be6c028fb3e0b7cd00859f2d789f56cab939367f
SHA256	b81cfc76365d17017d17e36ee1c7e1867c122288bb45321310a2fbb14035f335
SSDeep	192:xrKJHtfJHqVw+oHQBPrR5pLaxSz4tgAE5PHSYPoLzq/cTWJ:YpVDeP95ZQ5gtPHzkTi
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099153.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.09 KB
MD5	f9764ce4e59a0ebe280985eaa349237a
SHA1	88385978ff8fc6485ed7fa177d6cf749eae25627
SHA256	4e91c0662048b4cbaf92f0c4b0f624790fe9fd95ac0dbd43404d05a96474ffcf
SSDeep	384:QhT5dez+y02XBqzNAg80MuuEECbsD59t14fwObo2PV:QhT5GQ2RAVuE/EJgN3
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.97 KB
MD5	55d7a31a3568d00f9d75e9311e559771
SHA1	5030978b7d80d8c4c532ea4e4b77307479252e07
SHA256	d7242e5ab6986bccbff2e095662ac4a07c39c30c8f1666d064adaa19d2e788d8
SSDeep	192:KRkrZdt9mNeyuDjcMbE+2QEEyWhfnXyJv3MfGWv1HPFVylswZbdqR2pG/FXC+vaY:KRkPtQLcbz2LOhfnXcW9v3yl5ZBqR2pQ
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.47 KB
MD5	74f71ca24a755db695873460845016e5
SHA1	37e3bca66266c224a7470b558df7258eadd7ceb9
SHA256	c347ceaf94ce7b8d4ff861357519b69e5ae0932bfd4b7683f59b14d204c1b986
SSDeep	768:gF55LblByyDTbW2OhUGJ3LGgWu6wK8ly4TfqKaV6y8KXy/FbaNFIRim0Kil+be:OBvHC2Rs3Lvt6H8lhfqd8ugeflKib
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	63.82 KB
MD5	ba194fd2c38d22f6550604bfde6ea2d2
SHA1	2ae78b5c8d929d30252b1ab92f3711791d7d884f
SHA256	37640e02efaa0cd9af667b5d74bf946299b2396602e6a09ac12a687280df6c92
SSDeep	1536:/BP60ABV8tkfXrMkDJNAJHYXQLmcZMKx8ZzD7Mgaf1Qnz:/x6LB+OokDva4X2FD6F7Mvez
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.26 KB
MD5	2b9c38102abb109f2e0ab5b564842105
SHA1	72c7bf3186691ed6812008536261b3cb59a4b178
SHA256	b1d6f34c32b39517dea67034f255ace0b925937013887f1a66e7fb01806d0975
SSDeep	384:UqNdkEh0NAPg7JhKSvIzsrSmXzbEELwsmpDm5R7tzrf1Mg4YmGHZ8s:th0Nj7JhDvIg2m0ELwFm5R79Cg4YmGqs
ImpHash	None

C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099169.WMF.dglnl

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.50 KB
MD5	24f044ada76c10810c0dbfbae14d8ab2
SHA1	b1c4560c2874c847f9b8b190ee9097b4caf1862a
SHA256	cf2217253f95dbf5f875fd14f88eba9bfe22d9c6addbf0e955b5de6641a01068
SSDeep	192:WqsYHpGrhOSts222GWeZKh1V73G3ivkoGYEvEss6rY+HX0K0BTd1T8jxil+lK:WQYtF22GAjF2yLGYEvEerZ+dt8jxE+I
ImpHash	None

Remarks (2/2)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After