32db24cc...7877

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\important company update september 2019.pdf.exe

Sample File

Binary

Suspicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	260.50 KB
MD5	11b3c148dcf59f09753bba161cea5f23
SHA1	0845259c5e685dbd19ab9f15a7c2b38d60b8d07f
SHA256	32db24cc3456965ba75319617ef2094c9549874533b5fc6c13769a994dc57877
SSDeep	6144:j5iK5J6Va/R1k1uNIMXvdBAXossEqG3Z6eILaxUIrltrNiQ8:j5Aa51k8IMAXossEqG3Z6TaxUIrllNiQ
ImpHash	f34d5f2d4577ed6d9ceec516c1f5a744
Parser Error Remark	Static engine was unable to completely parse the analyzed file

File Reputation Information

»

Severity	Suspicious
First Seen	2019-08-31 11:47 (UTC+2)
Last Seen	2019-08-31 12:00 (UTC+2)
Names	Win32.Trojan.Atraps
Families	Atraps
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x44800a
Size Of Code	0xea00
Size Of Initialized Data	0x32400
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2019-08-31 07:13:29+00:00

Version Information (11)

»

Assembly Version	1.0.0.0
Comments	Microsoft PDF Document
CompanyName	Microsoft Corporation
FileDescription	Microsoft PDF Document
FileVersion	1.0.0.0
InternalName	Encryptor.exe
LegalCopyright	Microsoft Corporation © 2019, all rights reserved.
LegalTrademarks	Microsoft Corporation © 2019
OriginalFilename	Encryptor.exe
ProductName	Microsoft PDF Document
ProductVersion	1.0.0.0

Sections (5)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
5BA4F;	0x402000	0x246d4	0x24800	0x400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	8.0
.text	0x428000	0xe678	0xe800	0x24c00	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	4.68
.rsrc	0x438000	0xd9d8	0xda00	0x33400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	6.88
.reloc	0x446000	0xc	0x200	0x40e00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	0.1
-	0x448000	0x10	0x200	0x41000	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	0.14

Imports (1)

»

mscoree.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_CorExeMain	0x0	0x448000	0x28894	0x25494	0x0

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming{00000000-0000-0000-0000-000000000000}\HildaloliLOVESMHTandVK_Intel.exe

Dropped File

Binary

Whitelisted

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	152.09 KB
MD5	e189b5ce11618bb7880e9b09d53a588f
SHA1	964f7144780aff59d48da184daa56b1704a86968
SHA256	97d27e1225b472a63c88ac9cfb813019b72598b9dd2d70fe93f324f7d034fb95
SSDeep	3072:Adp01i6vcHV1LI5FLV0pZeZKfOJizjrBnNtRg+uro:/1i6UHVyLV0poZa1jrD3
ImpHash	d7caa1d72871c092dd85c4a3c5aa93bf

File Reputation Information

»

Severity	Whitelisted
First Seen	2013-02-24 05:59 (UTC+1)
Last Seen	2019-04-15 04:49 (UTC+2)

PE Information

»

Image Base	0x400000
Entry Point	0x40524d
Size Of Code	0x1c800
Size Of Initialized Data	0x7a00
File Type	FileType.executable
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.i386
Compile Timestamp	2012-01-14 23:06:53+00:00

Version Information (8)

»

CompanyName	Sysinternals
FileDescription	sdelete
FileVersion	1.61
InternalName	sdelete
LegalCopyright	Copyright © 1999-2012 Mark Russinovich
OriginalFilename	sdelete.exe
ProductName	Sysinternals Sdelete
ProductVersion	1.61

Sections (4)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x1c644	0x1c800	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.57
.rdata	0x41e000	0x637e	0x6400	0x1cc00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.34
.data	0x425000	0x2ce4	0x1000	0x23000	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	2.4
.rsrc	0x428000	0x4d8	0x600	0x24000	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	4.52

Imports (5)

»

KERNEL32.dll (103)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetFileAttributesW	0x0	0x41e038	0x238f4	0x224f4	0x1ea
DeleteFileW	0x0	0x41e03c	0x238f8	0x224f8	0xd6
CloseHandle	0x0	0x41e040	0x238fc	0x224fc	0x52
GetLastError	0x0	0x41e044	0x23900	0x22500	0x202
CreateFileW	0x0	0x41e048	0x23904	0x22504	0x8f
WaitForSingleObject	0x0	0x41e04c	0x23908	0x22508	0x4f9
GetDiskFreeSpaceW	0x0	0x41e050	0x2390c	0x2250c	0x1cf
FindClose	0x0	0x41e054	0x23910	0x22510	0x12e
FindNextFileW	0x0	0x41e058	0x23914	0x22514	0x145
RemoveDirectoryW	0x0	0x41e05c	0x23918	0x22518	0x403
FindFirstFileW	0x0	0x41e060	0x2391c	0x2251c	0x139
DeviceIoControl	0x0	0x41e064	0x23920	0x22520	0xdd
ExpandEnvironmentStringsW	0x0	0x41e068	0x23924	0x22524	0x11d
SetFileAttributesW	0x0	0x41e06c	0x23928	0x22528	0x461
GetFullPathNameW	0x0	0x41e070	0x2392c	0x2252c	0x1fb
GetCurrentDirectoryW	0x0	0x41e074	0x23930	0x22530	0x1bf
CompareStringW	0x0	0x41e078	0x23934	0x22534	0x64
CompareStringA	0x0	0x41e07c	0x23938	0x22538	0x61
CreateFileA	0x0	0x41e080	0x2393c	0x2253c	0x88
GetTimeZoneInformation	0x0	0x41e084	0x23940	0x22540	0x298
GetLocaleInfoW	0x0	0x41e088	0x23944	0x22544	0x206
HeapSize	0x0	0x41e08c	0x23948	0x22548	0x2d4
SetStdHandle	0x0	0x41e090	0x2394c	0x2254c	0x487
WriteConsoleW	0x0	0x41e094	0x23950	0x22550	0x524
GetConsoleOutputCP	0x0	0x41e098	0x23954	0x22554	0x1b0
WriteConsoleA	0x0	0x41e09c	0x23958	0x22558	0x51a
VirtualAlloc	0x0	0x41e0a0	0x2395c	0x2255c	0x4e9
SetFilePointer	0x0	0x41e0a4	0x23960	0x22560	0x466
VirtualFree	0x0	0x41e0a8	0x23964	0x22564	0x4ec
WriteFile	0x0	0x41e0ac	0x23968	0x22568	0x525
ReadFile	0x0	0x41e0b0	0x2396c	0x2256c	0x3c0
FormatMessageW	0x0	0x41e0b4	0x23970	0x22570	0x15e
MoveFileW	0x0	0x41e0b8	0x23974	0x22574	0x363
GetCommandLineW	0x0	0x41e0bc	0x23978	0x22578	0x187
GetProcAddress	0x0	0x41e0c0	0x2397c	0x2257c	0x245
LocalAlloc	0x0	0x41e0c4	0x23980	0x22580	0x344
LoadLibraryW	0x0	0x41e0c8	0x23984	0x22584	0x33f
LocalFree	0x0	0x41e0cc	0x23988	0x22588	0x348
GetVersion	0x0	0x41e0d0	0x2398c	0x2258c	0x2a2
GetModuleHandleW	0x0	0x41e0d4	0x23990	0x22590	0x218
HeapAlloc	0x0	0x41e0d8	0x23994	0x22594	0x2cb
HeapFree	0x0	0x41e0dc	0x23998	0x22598	0x2cf
GetSystemTimeAsFileTime	0x0	0x41e0e0	0x2399c	0x2259c	0x279
EnterCriticalSection	0x0	0x41e0e4	0x239a0	0x225a0	0xee
LeaveCriticalSection	0x0	0x41e0e8	0x239a4	0x225a4	0x339
Sleep	0x0	0x41e0ec	0x239a8	0x225a8	0x4b2
ExitProcess	0x0	0x41e0f0	0x239ac	0x225ac	0x119
DeleteCriticalSection	0x0	0x41e0f4	0x239b0	0x225b0	0xd1
FatalAppExitA	0x0	0x41e0f8	0x239b4	0x225b4	0x120
HeapReAlloc	0x0	0x41e0fc	0x239b8	0x225b8	0x2d2
HeapCreate	0x0	0x41e100	0x239bc	0x225bc	0x2cd
HeapDestroy	0x0	0x41e104	0x239c0	0x225c0	0x2ce
GetStdHandle	0x0	0x41e108	0x239c4	0x225c4	0x264
GetModuleFileNameA	0x0	0x41e10c	0x239c8	0x225c8	0x213
TerminateProcess	0x0	0x41e110	0x239cc	0x225cc	0x4c0
GetCurrentProcess	0x0	0x41e114	0x239d0	0x225d0	0x1c0
UnhandledExceptionFilter	0x0	0x41e118	0x239d4	0x225d4	0x4d3
SetUnhandledExceptionFilter	0x0	0x41e11c	0x239d8	0x225d8	0x4a5
IsDebuggerPresent	0x0	0x41e120	0x239dc	0x225dc	0x300
GetCPInfo	0x0	0x41e124	0x239e0	0x225e0	0x172
InterlockedIncrement	0x0	0x41e128	0x239e4	0x225e4	0x2ef
InterlockedDecrement	0x0	0x41e12c	0x239e8	0x225e8	0x2eb
GetACP	0x0	0x41e130	0x239ec	0x225ec	0x168
GetOEMCP	0x0	0x41e134	0x239f0	0x225f0	0x237
IsValidCodePage	0x0	0x41e138	0x239f4	0x225f4	0x30a
TlsGetValue	0x0	0x41e13c	0x239f8	0x225f8	0x4c7
TlsAlloc	0x0	0x41e140	0x239fc	0x225fc	0x4c5
TlsSetValue	0x0	0x41e144	0x23a00	0x22600	0x4c8
TlsFree	0x0	0x41e148	0x23a04	0x22604	0x4c6
SetLastError	0x0	0x41e14c	0x23a08	0x22608	0x473
GetCurrentThreadId	0x0	0x41e150	0x23a0c	0x2260c	0x1c5
GetCurrentThread	0x0	0x41e154	0x23a10	0x22610	0x1c4
WideCharToMultiByte	0x0	0x41e158	0x23a14	0x22614	0x511
GetConsoleCP	0x0	0x41e15c	0x23a18	0x22618	0x19a
GetConsoleMode	0x0	0x41e160	0x23a1c	0x2261c	0x1ac
FlushFileBuffers	0x0	0x41e164	0x23a20	0x22620	0x157
SetHandleCount	0x0	0x41e168	0x23a24	0x22624	0x46f
GetFileType	0x0	0x41e16c	0x23a28	0x22628	0x1f3
GetStartupInfoA	0x0	0x41e170	0x23a2c	0x2262c	0x262
SetConsoleCtrlHandler	0x0	0x41e174	0x23a30	0x22630	0x42d
FreeLibrary	0x0	0x41e178	0x23a34	0x22634	0x162
InterlockedExchange	0x0	0x41e17c	0x23a38	0x22638	0x2ec
LoadLibraryA	0x0	0x41e180	0x23a3c	0x2263c	0x33c
InitializeCriticalSectionAndSpinCount	0x0	0x41e184	0x23a40	0x22640	0x2e3
GetModuleFileNameW	0x0	0x41e188	0x23a44	0x22644	0x214
FreeEnvironmentStringsW	0x0	0x41e18c	0x23a48	0x22648	0x161
GetEnvironmentStringsW	0x0	0x41e190	0x23a4c	0x2264c	0x1da
QueryPerformanceCounter	0x0	0x41e194	0x23a50	0x22650	0x3a7
GetTickCount	0x0	0x41e198	0x23a54	0x22654	0x293
GetCurrentProcessId	0x0	0x41e19c	0x23a58	0x22658	0x1c1
RtlUnwind	0x0	0x41e1a0	0x23a5c	0x2265c	0x418
MultiByteToWideChar	0x0	0x41e1a4	0x23a60	0x22660	0x367
LCMapStringA	0x0	0x41e1a8	0x23a64	0x22664	0x32b
LCMapStringW	0x0	0x41e1ac	0x23a68	0x22668	0x32d
GetStringTypeA	0x0	0x41e1b0	0x23a6c	0x2266c	0x266
GetStringTypeW	0x0	0x41e1b4	0x23a70	0x22670	0x269
GetTimeFormatA	0x0	0x41e1b8	0x23a74	0x22674	0x295
GetDateFormatA	0x0	0x41e1bc	0x23a78	0x22678	0x1c6
GetUserDefaultLCID	0x0	0x41e1c0	0x23a7c	0x2267c	0x29b
GetLocaleInfoA	0x0	0x41e1c4	0x23a80	0x22680	0x204
EnumSystemLocalesA	0x0	0x41e1c8	0x23a84	0x22684	0x10d
IsValidLocale	0x0	0x41e1cc	0x23a88	0x22688	0x30c
SetEnvironmentVariableA	0x0	0x41e1d0	0x23a8c	0x2268c	0x456

USER32.dll (9)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
DialogBoxIndirectParamW	0x0	0x41e1d8	0x23a94	0x22694	0xaa
GetDlgItem	0x0	0x41e1dc	0x23a98	0x22698	0x127
GetSysColorBrush	0x0	0x41e1e0	0x23a9c	0x2269c	0x17c
EndDialog	0x0	0x41e1e4	0x23aa0	0x226a0	0xda
SetWindowTextW	0x0	0x41e1e8	0x23aa4	0x226a4	0x2cb
LoadCursorW	0x0	0x41e1ec	0x23aa8	0x226a8	0x1eb
SetCursor	0x0	0x41e1f0	0x23aac	0x226ac	0x288
InflateRect	0x0	0x41e1f4	0x23ab0	0x226b0	0x1b5
SendMessageW	0x0	0x41e1f8	0x23ab4	0x226b4	0x27c

GDI32.dll (6)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SetMapMode	0x0	0x41e01c	0x238d8	0x224d8	0x294
StartDocW	0x0	0x41e020	0x238dc	0x224dc	0x2b0
StartPage	0x0	0x41e024	0x238e0	0x224e0	0x2b2
EndPage	0x0	0x41e028	0x238e4	0x224e4	0xf2
EndDoc	0x0	0x41e02c	0x238e8	0x224e8	0xef
GetDeviceCaps	0x0	0x41e030	0x238ec	0x224ec	0x1cb

COMDLG32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PrintDlgW	0x0	0x41e014	0x238d0	0x224d0	0x15

ADVAPI32.dll (4)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
RegQueryValueExW	0x0	0x41e000	0x238bc	0x224bc	0x26e
RegSetValueExW	0x0	0x41e004	0x238c0	0x224c0	0x27e
RegCloseKey	0x0	0x41e008	0x238c4	0x224c4	0x230
RegCreateKeyW	0x0	0x41e00c	0x238c8	0x224c8	0x23c

Digital Signatures (2)

»

Certificate: Microsoft Corporation

»

Issued by	Microsoft Corporation
Parent Certificate	Microsoft Code Signing PCA
Country Name	US
Valid From	2012-09-04 21:42:09+00:00
Valid Until	2013-03-04 21:42:09+00:00
Algorithm	sha1_rsa
Serial Number	33 00 00 00 9D 1E 8D 27 AE B8 F3 D8 38 00 01 00 00 00 9D
Thumbprint	AC 1F D0 92 2A 4A 2A 6E 57 79 AC DD 62 87 47 C2 83 94 B0 B9

Certificate: Microsoft Code Signing PCA

»

Issued by	Microsoft Code Signing PCA
Country Name	US
Valid From	2010-08-31 22:19:32+00:00
Valid Until	2020-08-31 22:29:32+00:00
Algorithm	sha1_rsa
Serial Number	61 33 26 1A 00 00 00 00 00 31
Thumbprint	3C AF 9B A2 DB 55 70 CA F7 69 42 FF 99 10 1B 99 38 88 E2 57

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming{00000000-0000-0000-0000-000000000000}\nflxcoreupdate_WOW64.exe

Dropped File

Binary

Unknown

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	56.00 KB
MD5	9cb75dd4712556a195d20a7c7c596b98
SHA1	e71c90afd5aaa0c1589897db046501d6b1811afb
SHA256	ab7f1cfb462e8616e6cf4822688721518f9755ae3c4e571ee9e6ef55ec218e4c
SSDeep	768:9brcVquHqDnxnNsjbL6EZ0GKtnYGsJS8rCp/fvXMGI/tT4t0tYV:CVVD6pGsnY7NC9fv8Gg4t0tYV
ImpHash	f34d5f2d4577ed6d9ceec516c1f5a744
Parser Error Remark	Static engine was unable to completely parse the analyzed file

PE Information

»

Image Base	0x400000
Entry Point	0x41400a
Size Of Code	0x7200
Size Of Initialized Data	0x6a00
File Type	FileType.executable
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.i386
Compile Timestamp	2019-08-28 03:56:05+00:00

Version Information (11)

»

Assembly Version	1.0.0.0
Comments	Helper For Windows Update Service (32-bit)
CompanyName	Microsoft Corporation
FileDescription	SelfDel
FileVersion	1.0.0.0
InternalName	SelfDel.exe
LegalCopyright	Microsoft Corporation © 2019, all rights reserved.
LegalTrademarks	Microsoft Corporation © 2019
OriginalFilename	SelfDel.exe
ProductName	Helper For Windows Update Service (32-bit)
ProductVersion	1.0.0.0

Sections (5)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
QW.3#"u	0x402000	0x5f64	0x6000	0x400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	7.99
.text	0x408000	0x6f58	0x7000	0x6400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	4.84
.rsrc	0x410000	0x6d8	0x800	0xd400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	3.72
.reloc	0x412000	0xc	0x200	0xdc00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	0.1
-	0x414000	0x10	0x200	0xde00	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	0.12

Imports (1)

»

mscoree.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_CorExeMain	0x0	0x414000	0x88ac	0x6cac	0x0

C:\BOOTSECT.BAK.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.60 KB
MD5	c2201cf2b125021f37c9b0dea757d3b7
SHA1	2be48976e5ec3c1a8351c43ed88efada408fea3e
SHA256	6d91c76c7ed1564698e9f4674509c5c5c7a1162951f6890988dabd2afc200564
SSDeep	192:IEWi9oaVD13KU8PvPgm6XaXDfKjkjibnEVfvd+AFzp9qlmnBauWM:XWdoYFwm6XaXDfKnEVcANLqlmnBqM

C:\BOOTSECT.BAK.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.60 KB
MD5	488a7798853ef3984938b834fbb17c98
SHA1	e2e0209ca8ef6e035e1691bcfdcc977a5af386b0
SHA256	38b0153aa4f6deafb211930677065615ceaf90b9d7771f497e1ea3ca64369933
SSDeep	192:j/+nkAG+r/2Ai9oaVD13KU8PvPgm6XaXDfKjkjibnEVfvd+AFzp9qlmnBauWM:b+Q+tdoYFwm6XaXDfKnEVcANLqlmnBqM

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.12 KB
MD5	986a9b18a7ee7a4bacc383c48e6e230e
SHA1	aa4304fa4f0e764bdc80859c7e12524afdb25835
SHA256	8ea1732ce8ebee6b1e43bcdda08fa8ab55b430a1de61e0c038b2cba51be342a7
SSDeep	48:msd76sMe6BqjMTbKakRXEOSdbXwhb6jOp1nx:mXqMTbKaXLOZP

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.12 KB
MD5	131b1884e48f8e82474157b30852293b
SHA1	6cd7c7abcdb46c61c479bba28fc92a3a7b724705
SHA256	84641e6967ab567d965d12c7c94f3100c4486229fb44ef244f98847266b3bb90
SSDeep	96:nhz628CiC06aqecR2iboy0kVcyVuVlMTbKaXLOZP:hOCz57MZyvVMV8KaXLG

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.84 KB
MD5	b866c9ac09d6583b5d80b216f37c201e
SHA1	786db71bbfbbad68425e51974d195bc41acf7731
SHA256	8c74f98e9c48f25d5e1d7b24c3604a2d7626bbab046402a5603187774ea9f3eb
SSDeep	48:etIfUp4kzx8YEw87tIctF3Z5KjGEhYdi1md4KtPifL:QIi4kt3Ew86ovKSSwww4KtqfL

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.84 KB
MD5	34d94a0ce27bdf4b748b5f2f189b66ea
SHA1	a30b666c8161fd3940f2c84961fad95c914011a0
SHA256	42aa5bd83f482180f687e8a165a6a91ba313b0b9adf3d882c3d46a0407877cc6
SSDeep	96:VV3ScERMsVzSo+lWDybM8I8Ln4kt3Ew86ovKSSwww4KtqfL:VVCcERbSVMDYYA4Y1ovhLwYtqD

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	2933a16ea130da1acff6201630a25c0a
SHA1	39211348eaf74bfe669d632ea598b31ae431b05d
SHA256	e62433eac2e24e368e6428dbc25eb93ab17eaf4560fd48fd0dd290873ed8206a
SSDeep	24:xfo0B24b/cmJwN9N8K7uGvc92pRVBJHUpnN/o6e3YzOavkxPT56:xfr9hYqKFc+VBJkBTed6

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	e1a02840421ad9c64852c61b0177918c
SHA1	57863995aca853de19e391a0092303f7d022a11f
SHA256	c142db23535c0c8dcb2120f9402248859d698fa86fc59a5cddd9e46b4b88258a
SSDeep	96:4Cj6tGwK05r+9lKEOntz0mDZ3tblHVPVzkwd6:Xt05rilKvx0QtZHhqwA

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.43 KB
MD5	282943e4e3014abab2105322172544ad
SHA1	f3bfac44222e57c1dd95b1ca51d2bd3641fda954
SHA256	02abe5d24bf3491f0aa202060b2da5f19660c83456f26c20da554d60a9496602
SSDeep	48:91GPIFH6BTI7xLvysZaxNs5ihyE3CNoax0zjBhuju6:ZH66LvZUiiRSeaF

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.43 KB
MD5	ba33f61251a90812dfc5decbf9bc10ad
SHA1	1935bd4eb08664547f92258553070318802e569a
SHA256	4fac6e79a46f3a1c485a8cc0f137edd0936e8dac6febe291cf306fdedff6897f
SSDeep	96:wBK+N4n4nXKg9f/udPV+C2vfCwqmDwsvhu4dx6LvZUiiRSeaF:wenqjVKPJ2wq5vUBUiQSF

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	396ae1354ff40f74b424b4c813efb444
SHA1	2e4987a7a296293b16c5c152e0c791f95e2556bb
SHA256	5ff1a10f0ca52358d3047591c3fbc2ab2e1b589776db6ae0c2618878abaedf98
SSDeep	24:hb48zIKzGxywr3lF0eMA4/UDSx/IRZJGEPrbBXICEnj94A5mZisPsyou:hb48zIK4r3fOODSqRZJGWb5ICYuKpuOu

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	bfdae2cd83510fdde362f801e7ae23ba
SHA1	74af37c497d4620f5acb63ec398d0e17c1a13b19
SHA256	124e16fa546c652db6d25a6c086ccac43d789f4a7a292f06f9a5e09d9bd3687c
SSDeep	96:yS4GQc2njQmeAHwBylLXFhZAAQibqg9kucTu77i9l3ln8OiB/cuKpPu:ySFQNjQmet0lLbeAQS91j233lnsqpm

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	c70991a0f51d26e420f53cef45689eab
SHA1	209c925f1e71bbe416e8fd10cdf83305b982df74
SHA256	6ec8b8d57db4c9255a28b21b62417563b9877bf5e810502814f50896123beca5
SSDeep	24:CAKOi5OXwo3epXI1p80IDDdv1djv0mdoQJ3TAB/0qmMrVqcxBK5tIT7I27Im0hyF:C9awoOpSapVj0bQJ3QxvxEob7IzPfI

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.71 KB
MD5	814d7ae278c9baeaa7785077226de17f
SHA1	ec6273cb3a301e8490f68a69aaab30eb41b4f539
SHA256	dd103777dd972134ed0bbe267520697ef1a24d3ce56cc1dee8d68995822816d0
SSDeep	48:7/Yh4i8tFV0N5HleyvtIIIb5lTOwkkhPQt6PKh0CuexRjnZ+p0c4aw5guAp/JzlQ:j64i9n7vtk0wmQypX+pfMep/hlpnl98v

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.70 KB
MD5	4ed391b9b31c8cc8fed96dfb4fb64f5e
SHA1	b52818c630929024676f68dd0c2e5bf82f02e4ec
SHA256	2aa7b81d446fc85eb80712588527a28836d43ee103d6daf728d82b9d939a2bcd
SSDeep	48:h0msRSNDt0DNsWy+MAFUjmbFIgKcgXV+GoAosRXJbkDwXLQjJ40fLMVkQ1h+08U1:hrewtSNh4uFUckVX12AyJ+kfYyE1EFwT

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.70 KB
MD5	07522afddbf2f755d64103b2c4169398
SHA1	db0cd19de7048f9efaf8044b46ac032ab7a10383
SHA256	2b82d9604e721b1293b44a3e12994f231573a88c2d5be5bd2b466ad9b48d263d
SSDeep	96:1mjSLMX1TGLvrYH660mqeVKwtSNh4uFUckVX12AyJ+kfYyE1EFwT:kaMXyvrYH/0mgwMNh4TL518JwKFwT

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.35 KB
MD5	3be76ea3e909c3679206ae613811a2db
SHA1	bb50b43dab4f5015e2f6d1184c72427a5999957d
SHA256	623504c832f223d4ba0cf6f9adaf6b43db3a2d4b355d46aef447eece61ee14d8
SSDeep	96:3vxkbY1fXoizS/MPqCRwqOFqmo0fcN7OreW0A3FK43DqP:3vuUN4qDOFqAfKaSWZTqP

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.38 KB
MD5	38d5cf27bf4896ee07b685022c7eb35a
SHA1	13b71cb54a2ce17b0d10740cab9045c90ac4be39
SHA256	3af9957a5fbead2532fb6b8499ea3c7eca77c3bd1bf5d3b28b4714c33ee6d4ff
SSDeep	12:AdY91tj9RKfEhD/mOGbCQEuPDtpXGZgr5zKMOq4To00HVRx22bQb:4Y91tKUD/mhxEAD3Rr5zKTE9h1A

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.34 KB
MD5	fe988e33be536c03d78cf6bf3a37dfc8
SHA1	2558e90376f0dff7f5e2ce3bf7974e85baa4e01f
SHA256	c6f273cd0baae948d4a1445c8dbfea7073a3d34c7a045a8f737105b839b93ffa
SSDeep	192:33rgXi6lGeBXSCgnFZncytNnNHsLibgSofF6Z:rkCR3tXMLQufFg

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.34 KB
MD5	b7e7e3df45812818860291dabd6cb3ca
SHA1	4b81c798532791cf98d73799fe18856c8a10a158
SHA256	2b6785f5b17270f6b99aa2b7b65670c3c7a5ce1070affa67c172a25183249002
SSDeep	192:61xYhpl3OsMnB9ttgXi6lGeBXSCgnFZncytNnNHsLibgSofF6Z:61xYhpt6PkCR3tXMLQufFg

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.92 KB
MD5	cfd0a412a03475c58c5d808f327d09d9
SHA1	1e4cd155288050513c7a8829488dace29b5039e6
SHA256	1dec00fc2d5608622532c2288f99b6b7b9a4ac2e3ab8382c1c8d1e34fc8dceaf
SSDeep	48:paGlvOMFsFG/npS5FGjHOydUc1SS+PK2f:paGlv9FsaS5F8bHSy2f

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.92 KB
MD5	452cae12d22defd3d9ec391506716843
SHA1	edd1e7abb7c7d1b927e1aceaa08ff243af32dc8a
SHA256	dde0275f227c1eaf20741b9834cbe1ff11bd59a94d9029ced1eb21a14f8636e9
SSDeep	96:iau/FkrImBhVvJa3Uz0anUjFSsaS5F8bHSy2f:ij+HVvJakAR9

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.03 KB
MD5	85705890d958233206c551842217aa73
SHA1	027cebf1ddf8769609418ce851e43a2346da72a8
SHA256	d26e6cea2d61ff8d2b6f503e1c417cee735221761aac45cc440d190b4d815031
SSDeep	48:klEwLLCfpwY3RFc8aCE09mztzaUOFNLDFAJOZ8:kz6fHRFFacktz9OFJDasZ8

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.03 KB
MD5	1440bba8ad6bfed278183b5f5e2851b0
SHA1	1dc56b2f367700205cbd437e7041ff34898dd207
SHA256	45519e4f6f6410578f630555799b044aefaf6a397a794d3beb247331df7a2724
SSDeep	96:Mji0NaRw1A6atn0jasB2zpP0f0HRFFacktz9OFJDasZ8:WNCwCtGB2zpkURF4dtZeVasZ8

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.03 KB
MD5	f66bad14e25505f89a9ca4714ed26a12
SHA1	4d20e31a85e1b4b87da0d81fe39638f60a8ca265
SHA256	0bdb7fdc45d4990290b77ee0f8f30ecf5de33df079cdbd41a71d1d5e6aa033c7
SSDeep	24:ZNf+eFrT3e3dTGTxuUNUGzk6TdRHKVJ553/25eIjJEHEnMTMxu2v1LU:D+eV3etixuUqUjxRu3/7IVEAv1LU

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.95 KB
MD5	390afe52ec628f5b5c1404dd58b34def
SHA1	dc71369998302126dc79b4fbf6b25b65318b3cfa
SHA256	069430e0f9d7b8813abc30f6de029c81a2d28f6a1aadaad004677a0ac528312c
SSDeep	24:c56SEnpN1d/fuOZctuj3WNGIU0h6HC2h9/Fa7rKWbUrelEpITUFTldBLkvU4iv:46RPd/fubtuj3WNG42gqWbfuITUtScLv

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.90 KB
MD5	3505cdfd00526153a616e7e2e8072206
SHA1	09430d7e741f96b435fa69d601a2f59e203ec6c1
SHA256	3d6703d59a8719930be435c0d96651d51e4aad91a3b01f0809e7aa36e278266b
SSDeep	48:2rOg0i8TPCReqCnI9HywRwWFLWnQNwH0+GLYKqMia:u0i8TPie9nStRwsWnUwHHGLYKqba

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.90 KB
MD5	2267abc18f51b53494af1b898a562c0f
SHA1	b4e4b4be686bfe5a9bc1fc200e4d6eb95bb5c713
SHA256	fe844bb9bf3f1bb25736260ff58a441410f3d5b824a2de5d5baa1d115357eca2
SSDeep	96:kaS3EN/RqKyYHgDun+ZYPRyFavKVPK98TPie9nStRwsWnUwHHGLYKqba:kaSg0qn+Z4gF4p0PznS/0nUmmkKYa

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.40 KB
MD5	ec96e5c081414b1c13c1f89eca57e6e5
SHA1	4855f61017567b1ec8ca876b92918ab270f057b7
SHA256	2c0b9c46b74ee279cab298f4bc672fd3584f4aa37dcd50b90022aa7f0e7c8a24
SSDeep	48:2X5h68r1kXCdUI8BJdtTpvqynxJQtw4rBHEwKx6M:s5h68rC3I8BJrxnbQlpdKxJ

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.40 KB
MD5	75f5906f6f9b52dcaceff50b4ef9d648
SHA1	2bfd0f16d51004bcee0897588ed5d08074f55506
SHA256	f214ceaf777a3dba74da8c63236a3cc0ce09667c856d268aa6b5d9b16badda06
SSDeep	96:++0zYG6iScXwIXs4bxwDYpVbHczmythC3I8BJrxnbQlpdKxJ:30zYG6i13lGDY7bHczmyOI8B5IcxJ

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.87 KB
MD5	53dbfbf111245ea44550eca9ce376c49
SHA1	0834c780e336d1dd1867da2e571b484f8ee5c86d
SHA256	3c1a0dafc4fc32fcb18cb521f602ce9b2deb77bccbc44d202d7180b7d806a5ad
SSDeep	192:5fp5hF+DOFCaXIBzJLR4RBhIskfGL8tYPVPE5fyQCTRN2m9LLewoShbwxyoRZN0x:RXho4pYlRORjWGQtS1IyQCNUML5oShbD

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	b6c0873d1dd199c6571e0116f9ce9c84
SHA1	a601000855015b7b1530765760b04ebae7446fd9
SHA256	9ee84976e00b3c5e2019aecd9f2c626d04e66b3df3f8336f81eae4ee60e1e432
SSDeep	48:yO064D7n/CioYqTUQ9+fp+dIPUdFO453LO2LrlS:yOWXHo9TUQ90hc9acc

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	071f575b734405a606ffcadb0888609d
SHA1	df1f32a952c22c4d86f9efeacc741ec30a121615
SHA256	bf50039d34a3598c33c285f546b6d906deed9f3e61029bdccfcf28197ab58bf2
SSDeep	96:aklrt2Z+Xhy/j44HooL08tUW1HYHo9TUQ90hc9acc:Hi0oL0EHYIBUQ90hwax

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.54 KB
MD5	d939e05c54dc8ec755e95f26872c5255
SHA1	d43bea44c115be861b5a77889194d0f228991051
SHA256	e66206f250da11da7463fd6f9bda6e82aecfca13cf888e0623aa8148709ca176
SSDeep	48:PPIOip+t+B7ZN/pg9DyN/KqQGjKiOGO/Q/:op+sF/pyWKqhjKiOGO/U

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.54 KB
MD5	00494259b15b0d3819d5714312c5c496
SHA1	b70f405675069acacf4b9ced74c46c98f3bb9efd
SHA256	f586fd84c0fe92672a46e7b94396900b0477603e974574c42acf4913a57445c8
SSDeep	96:o5G8cTPmqFJn850dTJrZl5UmS7fkZrL73p+sF/pyWKqhjKiOGO/U:o56TPLFO5CJ35UmSGL73IgdjKtM

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	10f349a96047186401fca4f2f750dc77
SHA1	ae901fb19a7c105bc1d9dbc689f3888d8b852dd5
SHA256	c44a79ffb6b5424809ed3dc82c8c8835fd81c4117a4c72a951d47bd907f4c89e
SSDeep	24:fYVlM2ej+cOZfZhuRTFD8e8ezTOs55EiXas2iYgYF/Li/1tWnGA:faJcO5frszBy9etwnGA

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	a73d466efde4614ab725765c94301fb1
SHA1	f0a7e2e90fd029397956d3c0ba2772205bf013ab
SHA256	36347694023ddbfe9d98c71a55e8df8a4b562dfd2f0a73501eab6b8f1b61ab20
SSDeep	96:xGbq1YgdlTKK41UaQHbyZLvabOAjEwetUGA:xSqtdZKDyabNabrgwetUGA

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.43 KB
MD5	97a51ecfd354817d7aeab384f1953176
SHA1	23c86040268662e95a8c1258d92bb793ab2295fb
SHA256	1d4c3a0550b045577f4036e1dd8ef7ffa2c7013605a857dc77c446ccc4486158
SSDeep	96:cHiif0R1KYmIChVzVlXYr+L0kf8/bJsINM:PAoK5hpVlxfwNsINM

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.49 KB
MD5	2190b5517117e066aa91d1abdfbc3dd8
SHA1	b5524ad7b302786d2a43eaa70849fadde4b3f883
SHA256	bde056d5feff62fdc8a81170aa149f5181fc56b31535e11a07c774e3f016d58b
SSDeep	24:8To7LJvU/XxttnynkUyZUORmxF2mYmVAPLMd9h5s/kD:8T2hkhznSkvUfF21zPLA9hOK

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.49 KB
MD5	787c07f252313e076ca5b70d0f49f2ba
SHA1	f86b6602c4ce4ff1859f2c90e0e520d9074d69a3
SHA256	c6acf3600ecfcc3410f37ffe60e2f06ea8b3a5ce99790490798877d3b2a752a9
SSDeep	48:jYZgVeBvHAqqAhXFdRAONYFam7BvMqm+Ncp5PNVBwyHGKb5OxaUkkvUfF21zPLA1:1kvHAqzhVkNmqN0NVykHK8fFo7NK

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	f32f37e36f58bdc192c07dfdd08ba64f
SHA1	cfdc9928d2cdeaf15ca00b46874412c8ece50434
SHA256	614b08112597a23ff379b7ff6a1b75cbd97c8af37d7d8f5e6568d38f791c1619
SSDeep	48:YHzvQgXymwxfb4YeYZ+2r37/DqjCYXEMHXI:YOVFeYl37Gu613I

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.01 KB
MD5	19cbf39afc019304ae83d0206d91260c
SHA1	ee18dfd2678729b5fcea2c857ecf62bc53ca21d2
SHA256	05a27e8f3cc55a83ca98ea70b19844e94b70ea79b61206515a664c4ec563ffe7
SSDeep	96:DCa9YB23rjx/i2JzTKaofFE8CRNwVFeYl37Gu613I:+aU27jIWQENw2Yl6u614

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	242.96 KB
MD5	39e937603b1826d8a1beb9316539b5a6
SHA1	8c36b0ba04c6d74f154d0ec91daa27b2bb410a67
SHA256	aa07d3f477f5ad571fc5626408adcc481f5a942ca359f6a748a6d19249089c53
SSDeep	6144:f1fbgZgyMI3HtQrm1Cg1P7F2StaLO+JPp:f1fbgeyMI3tQrm0yDkPRPp

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	585.87 KB
MD5	0ac4b608c05aa21ef4719057e32d31cd
SHA1	fc1a4c21a20f08f3b9d5e69e30d3399dbb91a831
SHA256	49feae8a9f90143d310ea7f9404f9f0e4f1fabb43aac1e48b67e4c82e3c495e3
SSDeep	12288:31fbgeyMI3tQrm0yDkPRPK7X7xHsw8j+zEW1fHkb8m8SuI:V0eyMAQ60yoPRP8X7xzzfHkb8m86

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.03 KB
MD5	7f75ed79721af90d92f72e5402a2f512
SHA1	7a2fdea8fbc877c943d4d91142268e69affd8692
SHA256	4c98da227f64e06e011a0abdd38acb6e4c5f36a7138ca91c7893e4ccaa583310
SSDeep	96:1ijdQhybpasQyX2P+Q60GvdztAsVTivFHQIn9C/ozUVY8xiRszPyho51rCfUuh:1ijdTGP2FnAA+WXY416YS

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.03 KB
MD5	c1377f10fe9d1edeb71a4c73ed027db5
SHA1	1e573e7382de34dcf740b95f5bdb5852b96356fb
SHA256	570a68d6ed747f8afa2b3b36594df60f2e9b23fff8f50f34a737ddb150210cd3
SSDeep	96:Iw/lQbbdMkBl8gsHyEJ3gzijdQhybpasQyX2P+Q60GvdztAsVTivFHQIn9C/ozU2:A64rsHye8ijdTGP2FnAA+WXY416YS

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	1f4353d4b6b8ca618a1602ad3b0dbb26
SHA1	957da4da04cf1e5c1f69fc5759f79a2d4d114314
SHA256	78399859b37c23bca9803e86c8150fc594fd95ef13f67e9b465075414a2b467d
SSDeep	24:75MOyd/rptgJfX8SJaktDxIMxos6lqJk/5hlia:7Or/rV6aUxIXnDQa

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	9145a6bc30af61b3553ee8aef906d45a
SHA1	36a336a9e54e394caaa5e0609095da92b5b0a63c
SHA256	ce165204dfe589ca4004c494abfb77bc25cf1cf2d0ffd286068b14bcd4f4386d
SSDeep	96:WE2IziUHfa4PXFQl3JCJsGmHfPRUNcaDQa:WqzjS4P6dMrm/aGwQa

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	482a707580ff751f50384fc3b9f72637
SHA1	1be1b0d8dc429eb0a58c9901084b7fdc3f35f3f9
SHA256	7fd1543eb2bdc348896476519194e3b73f12d3f864396b604a567101e8e0e626
SSDeep	24:9EqIcH7GWcgeA3yhyWzHyVNI7QoUwUhPGDgU:OqIcH+cWbJCGEU

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	7c528fb42bbb3e1c3d5c0ed951a9e01e
SHA1	470650689ae6e716a0f8af0061eb0a1a2ff887a1
SHA256	109ec883a625b7de6993a879e8b49676fbed80ec0a1d00310f39f6ba696e35cb
SSDeep	96:dQFNFE/URyrCVTv60T6r5gZ6yKtwvZqnPMSg2v3u1h:iKUYrCVDBOVAb8yI0Sgrh

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	5fa1428106c6306428bdc82709c98f4e
SHA1	c42f8815b7136ea5ee4b6a3ac7831f7d1c04434a
SHA256	68bd5e3c908448f048071cd152a64cda1dd149c68740cb186ba844380770b30a
SSDeep	96:Iq0zRlWp+TKBMljBCC+tNVIRJ/K9MeBYcqDimZVPFE/URyrCVTv60T6r5gZ6yKtm:UugTN37P/bkYNDnNKUYrCVDBOVAb8yIU

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.92 KB
MD5	6374db8ee50013bc74f2b3270d7bae1d
SHA1	dc285ee59a3b4196354f590bf1d6a3df69ece25e
SHA256	f66f9d5b3c5ad546b566151972629f91532b3d2a84d2e870634616f7272620b2
SSDeep	96:GhHtRxCtFGg07q/bNHswIRSfoxl6KWwXmlullUQ0jFRX2zfix3u0NQ:4tytFjFRswI9jHXljQjOqhu0NQ

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	353.13 KB
MD5	abd41ba6a75552fae50c8fedd95d0b13
SHA1	aa538a216f386021ccfa2b4e90701dcaa4df3e26
SHA256	db5359d413cf3d4d13d76a326d31c88f9099d534168e4efec81a79ad3f355afe
SSDeep	6144:wOF/i9TpeKuHTWgv4h/e3mffMiz78YS2JyIkYR2m5ArxTVVbt7IBWsmELgZZERZ5:wsgFuHTWgEm3mffMc8WbR2m5QZVbt7IF

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	585.87 KB
MD5	1dcc1ccc56d7e3d9df0fdd4318e98ab9
SHA1	14ab4621c473f70d808b4117378131fc0157a09b
SHA256	e62fe3ea9c1882d51ff8d88bb68b561d0e9164993562e622e71d5c26ca4c5a99
SSDeep	12288:NsgFuHTWgEm3mffMc8WbR2m5QZVbt7IWsrQZoZ35BSGrwFZImQncn4+pi:NsgOVEkm8c8A9QZVbt7IWsfZ3LS2w3ID

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	fc93a0745d384e3a6aef3a9d0111356c
SHA1	3e877e5e8d6d87ed1097cbfad6567270b045a29d
SHA256	9d19a70d85b305ae48bc26bfc383495ae1e7c6e3f17645fa157a91f3919cd6f2
SSDeep	96:YeCzGucvTsHPb6lnxBmGY2uln9iKunlbXjZbXDCcMuj3rho9ZdVLa+LSs:7JRvTsynHmZ2w9R0JDC+5o9ZHa+LH

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.07 KB
MD5	3af196705bb9b3105efd07ad7c8f7f7d
SHA1	727ffea7841c641a75a2c9f8bd05c96d8ec56b1c
SHA256	d9b976f3aa010608bfc5c3b966f994be8b6926cff5b4a3355d611735a2950c53
SSDeep	384:6qgHLp+6yfFSf+tQ9nvCm7CDsx+WgaV+7U+M2rAqkxwBPXdW8jz:FgHdjyfAf20vCm70yVPQSxaY8f

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.07 KB
MD5	8a97b12d646f6e64862fe758985912da
SHA1	485b6cf52ad1e62f7879cc689cdcb69c25286da0
SHA256	76195db210a7547b4406b280c027f3d377927272bd7b10efc50ee88f5589be30
SSDeep	384:xTEtMvgHLp+6yfFSf+tQ9nvCm7CDsx+WgaV+7U+M2rAqkxwBPXdW8jz:muvgHdjyfAf20vCm70yVPQSxaY8f

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	33.01 KB
MD5	ffb1ab9f21af1d3cf0afe3e796cd1e1f
SHA1	7ac0edad2a18a034b0ddc3787a42e441dcaee44f
SHA256	d4c53bb612dacd76358246dfe755908494ed70e8e56d77b7aad86b1595782957
SSDeep	768:Oj0zl4ZTu3kAoli2toaCWgQwhceltfhmNXPCncfKvnd93:OJZTOkTDtolWgPV4XNfKPd93

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.90 KB
MD5	b7c22e43b9b5bb5b5d4524f192253775
SHA1	614e62dc3610182b447e86883718bbb47feff466
SHA256	218ad3abedd8c32148b2c6a450dbb11c132dd59931a20e99da6f843c5c5d4f50
SSDeep	384:cmu0tI/XuSoMTiTvLHMkBhvAZ9qDcOQRRiE9OJyBpA4Ga/5:cmMe1MuTZzvAC5E9u0h/5

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.90 KB
MD5	41df78a7c0ac128506c0cf6a5b87a44e
SHA1	12badfc20071bf537c3e62ed3f85ced7ad6f9e32
SHA256	7c3584eab3b0f7bd92959394d33b808c5cc3a2e3a7f606b50d140eab3c83aac1
SSDeep	384:h7fqA35BJmu0tI/XuSoMTiTvLHMkBhvAZ9qDcOQRRiE9OJyBpA4Ga/5:dq6xmMe1MuTZzvAC5E9u0h/5

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.12 KB
MD5	4406f0f29625f579f7f9ed99723ca316
SHA1	033b5e54ee9c3563eadd424a0dec11c35770e3cb
SHA256	edba4b3a2faf13032f5d5cbc157913b9884183be1870ee1e58206f127fec91bb
SSDeep	192:PFZHUWGXPJaS2hb/M+8HddxG4bMw10FxLvU2Uaoz/g5vVbrCZ2bp:Pn+/Upgbx1uXMrgjbrCMbp

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.46 KB
MD5	719e28a5301d2c219f5de82aecaced98
SHA1	e1b4f8d535d4d118e6df21e0372dc42ddd594d78
SHA256	d6ec208e4fdbdc6699050bb8aa56f5d6f11f8f6c8b53c91f0b2d4cad00839c9c
SSDeep	48:Tl3v2dixMwos/Nr9zwmtSnJgnX+q3ktBWNoHqgO3e8yeUTnp4Tbn:TlediGhs//fkGXvktB+LFyBWH

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.46 KB
MD5	84024945b9622385bbfd5948e3b63556
SHA1	900e19786ddf0efa025423eefe47364aa534a29d
SHA256	fb9eb51810d1699f6635b36c39ab5b5dbf7377853faa184906d57926ad55f4f1
SSDeep	96:E4E0dXGcN1D+v5uhdFjSqZYbcdMJiyRKGpmhs//fkGXvktB+LFyBWH:Ej0dXj17F+qZYbcdMMyzpmGX/XvsB+L1

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.32 KB
MD5	814a090f63639209b913bb236ae36f63
SHA1	f1b5858c8741b67161727497bdff8e47044f9f15
SHA256	6551bd527cd65f6f820894c49e67440acbf204122ec51879c5c547fcc6875334
SSDeep	384:FrH6rm7ddljcfGG/vrdlIJ9s8O0rqj/az+Thr9JAQzAyS+e9:FrHWIofGQvrdlKseyazoxJXMySR

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.63 KB
MD5	7708c269bf463fa25b5aca08d892b1fe
SHA1	2334707b6405cf53707588e4497b2bfb5613b726
SHA256	2bc9f1bb33303d98670d25f5f390d3d5b5fd51b8c604643d226926a459dd098a
SSDeep	48:166Ak8HRS0YMeCPRBdBGEGx5pSOC3ROwn:06Ak0xHeCHeEGUhV

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.63 KB
MD5	fab8bb15d540aa9faa1ee777e439b6bb
SHA1	71c6bf4aaa4c592ef1ec2e3598589badbb97f15d
SHA256	8b20770fe9476987d1c98e9cf5f0cab44c2df9ff181a29b517eac449f66202cd
SSDeep	96:glC8r0CauRjRn1PAdp3abyM3mfQBeCHeEGUhV:Lw2sjRnCahVQC+EGUhV

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.24 KB
MD5	130d793b4b1e621d1802c90aec6eafe7
SHA1	8c0f5515082ba318117e77a1ffc37f1d51084818
SHA256	960b29e092197b08d51f6da2c5aab209006dbf3515301d42f546def47c0d25ad
SSDeep	96:9vbvxJ7bimEwqquX5GMaz9w1BPoac94FWik8P1Ocz:9vmmEeuYpzwyNGk8oE

C:\READ_IT.TXT

Dropped File

Text

Unknown

»

Also Known As	C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File) C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\READ_IT.TXT (Dropped File)
Mime Type	text/plain
File Size	1.31 KB
MD5	68184e81161c4b0a03647c9d3ee7ca88
SHA1	92341614daa2f55f76d3ac01dfbabf8a97eb5fa0
SHA256	3f718f7588e5d93d1bf7ec8f00ff8a33588746c5185c85742f33fb2e88f5bbb7
SSDeep	24:v4/IFCMZOQJ3DV+FPZ3b2/HhhtqVWDbF3Hm4C+okCrN2vhXYLMl8tEf:Q/yROGDVBHoIvNHTokCZ2vXutEf

C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	693.67 KB
MD5	35ce86802d246cf2d75a6f1b6c241e07
SHA1	218cfac185bdf4add888cbdcb959887124ee3f7e
SHA256	1eeb771ebf14455bb157180d84b23ae3e9c8dd9da60a41f6301b409129d14e41
SSDeep	12288:MljOhhmbj30jtxR1hOY6GsFAbIjm4zbb4MkTn/B+JjWXtlxiI57t48D7d:oOhAbYjV1iAsjRbynAJjqleWd

C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.04 KB
MD5	de36c62b569feb4d7e2da275cff68b45
SHA1	72a12235e045999b516b92c4cced491b5f7239b4
SHA256	5e5f2eef90389d0f80d82767a88acfcfe2d953a67db40d10b244fe022460ec0c
SSDeep	384:VxQUyvCT69utShVGRja+MLlaqZXwn9r7IuHOfdRF3qA0XYLt2quMMfmdq9tYld:fQ/v0JRe+MLllwn9guuFI2Q6MEq9aP

C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.04 KB
MD5	a16e548d6828a7fb41777211fad1bc11
SHA1	dab8b2fde4961672dfe8c8530eaf40a7b4331af4
SHA256	0d22b91f67b76f51d930baa7213551d79f5270f0e982b662b59e4b9fdf90a0b4
SSDeep	768:uvfCQ/v0JRe+MLllwn9guuFI2Q6MEq9aP:WftweLLY9L8Ml4P

C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	423.24 KB
MD5	d45270a582ff390383b0b8876a5cad08
SHA1	45146491ec3aad8930746bdac4de92139f0eab72
SHA256	b131542fcacb1e8e12b624c2fde3554d13f164e76046d9bc24b89c13c1021106
SSDeep	12288:7pbxJT23qBXC3JhzdZQF0omve/zn0t+bvBnE:Vi3OCLzdTeW+bvq

C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.53 MB
MD5	17e321c2a10239500f0d3a7d67e040d7
SHA1	5d01afdd4a38466d432d613ab6ea377a0d5cc85d
SHA256	bd3f72128ed532e2726510c358a0263302b7221458d8da50166d98acd73d4367
SSDeep	24576:Wi3OCLzdTeW+bvHDo8vYHL1wa5/p+zevrIrl7dhuXSaaOQu0IeacbDgYY/OlQDvx:L5CD9eLKa5/YqIrvhNaaOmauDpYWqDvx

C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	c75c9d36d00ff029cc4688c369fb06f6
SHA1	56555192deb5430422fc22d22991960ead001e14
SHA256	c35acd82349865c230e377b1cf56aba0939aefe43510f6b454657ba36bd486a8
SSDeep	48:t2QVdxWKH7QR9n0fQZejIOmmzWwhFyH2j9Lc:QQVdxWY7+9n0fQZa7m+Wgy

C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	c56f35f88136e0ac2ca75164af2e1cea
SHA1	2f6699b5bc3eb4fe56438ea94103dde19874a6b1
SHA256	08800abf4c9f9587d97a422f3132c3a7e01c5af8f841348fd6e4b2e461ba1428
SSDeep	96:njaxPAACXU7OzEpAdfDcoWmeuGZyxWY7+9n0fQZa7m+Wgy:+xP1iU7SEpQ0H3ZyxWYinhZay+ny

C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.99 KB
MD5	be81990b6cfc387bc35238a4d276090b
SHA1	0f2670660c46074dbe491a0ccda2784f5d9b292e
SHA256	3e1e2e611b4216e30b534b5869610ea3adc7ab3bc7a5c092919b2bab432b7380
SSDeep	48:3j8BCsf2Iyvs7UV7tgLmQZztH+0bp05YOod+XtD14o5UJ88+U4nC:zZC2vqztH+6/9oXtx4sO8C

C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.99 KB
MD5	320bd3a730513fe428872e10793fbacb
SHA1	c8268f0d567ec9ec7e98c43423f58853025c0445
SHA256	51ec869bd7929e23ed6f2f0249f35d96ae8c36e5b1bdcb6a2fd8af92421b50ce
SSDeep	96:4rcZWbmly358QDa9aDdOMXgXwkcdQjC2vqztH+6/9oXtx4sO8C:4kWb1a9aDdeXTuQRvi3CIsBC

C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.98 KB
MD5	e42e0d7661d866524a726ce40224d154
SHA1	f31cc1c59fae043912404a9304d0375faa596225
SHA256	ce4c9bed564abc14ddfc583cea9bfeba1731549d2d20fc6f6338c7be7c2bd8c2
SSDeep	48:JohXakWVBqVPXCK8V5vxOFxs3BasYz9vIb8O5+hxPo93wC6s:kuI9SKMFBaRvIb8OUa93f5

C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.98 KB
MD5	e2fb01c8eaf351cf68976eaf2bd9ba9c
SHA1	107080887621667b95507ba2cb97ba2f53b364f7
SHA256	4129aa546130b1e5d6d026abc74c6649b640b71e13e1ca5a42062d7a65ffe786
SSDeep	96:jnL1v1Beh2AV2Dmg/3npeh7/8S80/nRjI9SKMFBaRvIb8OUa93f5:DL1vG0Cg/Xpe6x0/BmlJ68On

C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.09 KB
MD5	17a2982f4305d76ce6a564f66eab2ad7
SHA1	4b272dd58952439e3035c450fea24119f9d74355
SHA256	b0c3cadde348d39df40a9e3a3b91e4da6ae22371ff174258aa67911d61e05bfb
SSDeep	48:IoFCx8JFg71aZm5kSMpBOQK3Nbv/9USpDSR+VjVJp9+1xO7Vn:Jq467gZmeBOT3tlfBVJpkwVn

C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.15 KB
MD5	55988f975b39c6753820577288b90000
SHA1	0ad220f523d8cb20936e8a69fab4e764b558fff5
SHA256	3289cce39bfa6bf7bddcbf4f16ea829b40946f31be36eb158edda20233989b68
SSDeep	96:u1vOlCJj+RkmZ+1uYRUh6BKa6TgfTTiYcNztjOT7ado04:gvO2j+7QIYRUh6D6Tgfrc9tBdoX

C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.12 KB
MD5	fea557fa4bc4086027bce7a1330ae586
SHA1	7e3518ec0165594206fdf358fe6eb04819369176
SHA256	8f0f4c0cf9af2314e7de3925e0830a2409902ef8d46514c928dc14e2d3058cf7
SSDeep	96:4GNc5Z742tjOlm3c+QgKZvj5f3NyYrSL8jTxwWt085XGFyl5:4ScLNqlmBijiYrSL8jVw+2E

C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.56 KB
MD5	d0fba7c7da25427a3fcbccf96212596a
SHA1	9a4b61397767a8405b532320adfe257ddc86b113
SHA256	3c5de365114b82ae74adf803174a35d2f21eff1df0c8a717d6eedd9028e4799f
SSDeep	48:4y+aaxP8UgcK4/J6Mha+bqgBl3HRmlUqK5QBwwS/U3snq3Rkl9np+r+SSWc1IF:tfm54MLzB1RmljK6Oy3il9pecg

C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.56 KB
MD5	3bed3b6e8b22f924b2db2727b1937cf7
SHA1	6800348c811e0390bc2291406d3fc63d4de9a41b
SHA256	e55ae20594b434078296b17fe53333f2d2058e7ce3701358635df3396b3ebcd9
SSDeep	96:IvJDbtGhxY7zyBxFwx8Wk1go4g7VXhNERj4MLzB1RmljK6Oy3il9pecg:CJDhGUOFc8WEgo17xEF5PJgOGkAcg

C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.20 KB
MD5	04c3c14211db92912433ff0f407057db
SHA1	6dba24d5a7ecbf019db64ccaf50388ae6aa70b5a
SHA256	99eea7478ae0e08d5e44f0e4f6ee0597a2c58899ef62c863ed02439f6893947b
SSDeep	48:bd6HdZ4ISwPDR2a9GsNWqwyYrkbyDT9JPsWUfrllvwav/9cbLyc+SjNxebw9Fp+3:xKgUDR2a0PyCdTnA7Ql+Spxqoat+bY

C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.20 KB
MD5	1c220d61105ea4ee8986dd2035d2f7cf
SHA1	26705b7687fdf06765186cf0505e5556ed0567cb
SHA256	5ab7620ecf7c8b484e05a915a9cfbddf258c72331eabcbb261581ae321787787
SSDeep	96:oR6tsmjZ7wvz9yAy0JyotqUYFT6Je+oMYPUDR2a0PyCdTnA7Ql+Spxqoat+bY:oMzZcvJyAy+tqUYx6Jv0PgRroywTnNfS

C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	e89b2fd3172a9ae9354cc328a519e932
SHA1	14281cf0a1d8d0fc604f554431b4bac9c73c57b6
SHA256	d4ffc1c9553ac92409725943ff25ecd65b2105232f5cc8128e746918d79a208b
SSDeep	96:5aylQEk9tJe3ofQv1U/4j+3T+Q3l9mluD0UtNiqwV6eta4QBFufPpOuk5F3kTrMS:wylQNtgoS+j+Q37kugaNiqg6esBFIoun

C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.18 KB
MD5	4cfd57c319a071d086eafad16baf8f43
SHA1	0d98a011efcaa4e01aab0957aea6404a8c90e7a5
SHA256	517ace925fd7c9fd1dd5ec39ea3c257de946bfe29e5c9fd1811dca257a67fefe
SSDeep	96:99cgd3ZAf0P51ILB3FpQtN46sGKJNqT5Qm3iZt:NhxtzB76t

C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.18 KB
MD5	f1e39727867ba9c5ed61b8589ebfd005
SHA1	4012c40668faee24f119bb8ded2ecad919babcd2
SHA256	4351649bac335b654bd94a3db2e9a44c3b6190ec9b7cc7db9e03ab8f6946220c
SSDeep	96:Nw7BazyqZOxp7r77YPhXRgSf0P51ILB3FpQtN46sGKJNqT5Qm3iZt:NCqZOzP78R4xtzB76t

C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	07db1ef0adce99d29aef97ecba50d11a
SHA1	66b5e351807b4c2621f87aad9a52265bc251d913
SHA256	91cb39ce1936675d59da504512ac8fc412ae0ed7656907973e782eeebae55099
SSDeep	96:vStX+EAelAwiVOPDTLmViVBWAQrXRfOXbdX4m7iSYZ1nmazoZ+eSH8LG:vWB1igP3LU3lr5OXbGmTGEUGG

C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	c71340ff9c54502d4d9c729910a463a4
SHA1	7d67699d2197f57c482ed4c7305ffd488ba83a9a
SHA256	cdb7d2a58486e0f5ccae30dbfd88fe42ed1b4a2d11f4af7961c0822ea6cb8662
SSDeep	96:I4UVlZgAmg1zEyiOCHXgJPs39a/+d9mT3kogc4TcmfpIG:I4UVlZUqzhiOCHwBMaGd9mzZz4jT

C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.10 KB
MD5	fa421d46885159069d3f97e296085212
SHA1	9c708531d7004746b81779b00b906d32c4f82880
SHA256	674ca89540149956c8bd8d08d3a1244b470fc76a9fda7447a83707da14f7838b
SSDeep	48:gZsn5puC2n4GWC81O0sOHMVDQmaD47xyqRfaYnnHWCdwPepfXLe3Mtg:i65pIngRRHMVDQma07x7s+n2CqP6/Liz

C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.10 KB
MD5	dcf5615db3cbf7900de32f3e25237da4
SHA1	a9e9df71cb5445b90f75ac00901f35d90964b4b8
SHA256	d06b3186d8a1d1249ff5c6e72683abedbb2d0e57e2380adfaee5812b1e278bfd
SSDeep	96:WgN4UQv/rmAS0ySSROxa+pfhRdBTTrRRHMVDQma07x7s+n2CqP6/Liz:VNUaA5KyNBTpRHMVUma07NsrCqS6

C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.12 KB
MD5	e7d54e7829284e3bf7dca74016b30467
SHA1	fef4ad988e807501aea0742a614d97d41db90bff
SHA256	32cbd8004258e1cb9465873533354c13f0c35e9ea332fc9d0b55e5aed4a70ad1
SSDeep	48:cEFotJnin2pW64WhQo2AwaXo2DW51J1XQZstgyMwx1w/2zGo:cttho4QkwcomEZQ+M01wYGo

C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.12 KB
MD5	6c860c9fccae23535a906cb1e2141c65
SHA1	e5618eaec7360cc04d508b18ad0f9879b360fe05
SHA256	ed3143315a1892cc2fa8f2df0087fff035b4c49a6d2d7ca59db13235c758402f
SSDeep	96:euDFAFvzzbG2IxvglARo4QkwcomEZQ+M01wYGo:e1NDfIU4gceZQ+5x

C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	2e768c49b36dd6c85f6346d02d4644a0
SHA1	ef7059b3a9484c0f64698e93bed29cb5eafeeb9b
SHA256	af0af53a04a92754432ce90abec0b934401d237c5d6eacd9e791f38a3b515910
SSDeep	48:cPp1tB/jOWaBMCzLQr3Zp+68yui91R6MwQbT9GmmCO9qVv2Ck8ZuCxNJW+/G1:cPpLRWQr3n+LiUZQlnqqVv2R1CE+/q

C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	f66c3c30c42a723645365264386ad47a
SHA1	7faf7c3cee9e4f5588906569ed5292ca9f7c2f18
SHA256	d196b3918f959b5020cda9b3e8ca8a06b1c89560afcd39557395429f832daabc
SSDeep	96:AUKKvOj5VAC73c1xGVqLc+hMftNpS9MjWQr3n+LiUZQlnqqVv2R1CE+/q:ArttVZ7pNzfX49Mjdr3+e+QUqVO/D

C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.79 KB
MD5	bf563ab2f5fde048f19fc0e95fe9b412
SHA1	fb25ca94392e8eaf9dc7f55c7f24a3d06e913fb9
SHA256	4a2546178287a7199cded5fa9fe42856704ecf84ec9fd65e1d6ef497ed87670d
SSDeep	96:pDwTiy3cmTE8I9tQpvrv7/1YmFgl1Uz0lrliyCHsPpbTzdoNFIKw:eNmJQpz798Uzeli1H8pb3qIKw

C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.79 KB
MD5	c05db617548ff94fde6514e6e6132835
SHA1	91e892cb2d0ab737cc6d7280427f316bbd7e670d
SHA256	d4d0e863895a7c3d8ad17550c385dc2a9b1c94de92005734b7a3bca5c974aad0
SSDeep	96:1p2lYJ0XhVYZNRNhW8guwyd++ECtcFHWN:1MmJ0XhVmNRrtRwHfWN

C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.79 KB
MD5	b250cdfe0f2cfb331f019c6033c4ecf8
SHA1	e48b070271f48c53f6ee41d6ee6a8251c7521a67
SHA256	545a3c4e070ecc229d9c1c0df715d24e4f232e3d42bf165d10710ed03686853e
SSDeep	96:UyP0xHYQa3MgJQWBtZHYDyTtLHEYJ0XhVYZNRNhW8guwyd++ECtcFHWN:UyaYH3JJQMyDWNJ0XhVmNRrtRwHfWN

C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.18 KB
MD5	c7fb05bd8166936104ff17c9255061a9
SHA1	569e0a77ce4368839aa32b008f85aff4515b8753
SHA256	1bc49d070dc27cffc6ca6a1e0f0e019b5ceead688bdbdfffa734939d56bb859e
SSDeep	96:o38VzAoIwaV3J/HVFLgACFppNYWwj2Ve6aWZrAGo:oYzlIz9HVFcFpNYEVdQ

C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.07 KB
MD5	34966c83dac32a8ef405f6f09970fd8f
SHA1	a4425a8035f3c66e34fe612a69f3e40eeda3d5b8
SHA256	974939c04d8c8ee7a759493f067c4c19477793d14d89f543a6c12b72e19f9dbd
SSDeep	48:cQsm5Xmf7YGYzlsmp+yTf41LCOfFjsa0H+LiVpYHv+fz6qd/A6YL:cQseWEhNdrwLl9jsa0H+LpH/6m

C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.07 KB
MD5	9fc4972137befd18b9feb5fbc1446714
SHA1	3412586befcefd76e35b493ab8b8c55e90c132bf
SHA256	ccfeaab0046fb659e976170a46be8127243032e40e6c73da75a97eb443b0cca9
SSDeep	96:x+uJPbjCKYUkxQjMa17ofCb0vz9G+fj+EfOJEhNdrwLl9jsa0H+LpH/6m:FrY8jMEfQU+IJE7dELka0HUpSm

C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.10 KB
MD5	eb17bcbd64d5361c7beb942a9592162c
SHA1	40ea0424a67682472f5556983ef977afb5dc2761
SHA256	efe6c7f04c58132be90f6646b880ba89258bfb3e346384389895f26b5f6711eb
SSDeep	96:HAvkVi0z5sP/fw6+2bh+JW/UgEiSyhQQojvA4yP8z/nBJ+997iTG9DN8v:HzVi0m/fw6lM2vvGNj44BB8T7hxqv

C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	be3a60774bafcf08cfc2d0d555cf38cf
SHA1	4b1ec05361ebd39b47bbc6586d0f0f539ae196ce
SHA256	3c9e2cc1c1caee7d081a54c1909fdca28aa9343617900e4df99c35e19402f082
SSDeep	48:ExB/p/e/MnUoGv+o0RDc/cE12h4Jz7aoBy7hKheOIECTx2RM:eD/tUooA1cBAh49pBy8heOIECh

C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.13 KB
MD5	63566cd46b370a728a2bdca63b9ef038
SHA1	2cb6688dc5dcdc4a141a7b9ec161cde84668f0c0
SHA256	5ac36a022acb9a9c44879f4680e6100b48577fd263bbe99c5a09b55192245e06
SSDeep	96:sr3hcI+wVIhIXy2kYAlFqLpd/1MVXCPUrvrUooA1cBAh49pBy8heOIECh:sr2INGhYkYLptM/rvrUE1cBAy9ry8/dW

C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	30d2ce8f5d6f72e9cb3ca8fb0d6fb38e
SHA1	e6149a1c9ce7f3c42e89c50663895b70b8a6285f
SHA256	f23c05b000aaf70b74458739241a9a38464fd8bcc05bee33a11fce64e0eef98d
SSDeep	48:IjhZm+r0df1vIc+IVrgguVpWPQ9qNb8Bn9iUNM9HRAsNiN9Esp5ljgu:IjhZrQ/IvIVrhuXINb8Bn9QoXRp5lR

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	90.23 KB
MD5	39def810695d93dc812eb005aeb71797
SHA1	4196d365e6c9c1022b086ebe7452d1ce6a086fbd
SHA256	3b0f91a8ea434258d8421ddb2435b1089bff506252942c2cc4963cdcb1904b7c
SSDeep	1536:Ej9e+hCrFHrxZq2X/wwAk/ilmoYv+DRloEnHAgviPLT2FS3saDKI7UC4qoU/:EQ+srFRVATlUv+DR+Egep83NUKb/

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.63 KB
MD5	e1c6def78c07544a2522eb09cfbedca1
SHA1	4ebb63971f72998262425c87a69c998d6d8462bd
SHA256	c13432b2d713b5825bbeb5fd9e09010db47830c2e45f470f94db133ad9232929
SSDeep	768:bfVOKGIDOErzfAhQoKlX7OcGf+PLlyIo4HzAISBcg+7BXBEEMg:5OKGIqkzfuKFinYo4M7Bcg+7r

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	33.65 KB
MD5	7017d9b6c209ba6db964cee552821437
SHA1	3bb2015ca0995aee72c81e26029c7293906319c5
SHA256	208cd0d800647012e9720cef0f79f719faafa91d48498a2cd21d777f292425ab
SSDeep	768:60FcMUBpOKGIDOErzfAhQoKlX7OcGf+PLlyIo4HzAISBcg+7BXBEEMk:6lMUBpOKGIqkzfuKFinYo4M7Bcg+7P

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.15 KB
MD5	f2b7ae049303b0e4352fa2c8906a2d94
SHA1	e1554fa904cc50e87adadb4456a9d131242d3cc2
SHA256	3c988af176b17bc5bdf195bb6b053e634774763d0da590375dd2adc38b940386
SSDeep	768:7aRFp1bkkpJ18e/qUcD/qp/BPUQForuS0fWpQ0NSP+KalIH2W1F:7ateMyUcbWSQ2rupSFNSPCcF1F

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.15 KB
MD5	f13ccc1a13af217a841f5645d7f5fec7
SHA1	d74b4b13e573a7bf62b3ac58ee599681ddca335d
SHA256	6dc65b6a17b8223ea9593b54032ed3b6d042a1f55f3f17f7e6f2e09d3cdb3e5d
SSDeep	768:+5ZRFp1bkkpJ18e/qUcD/qp/BPUQForuS0fWpQ0NSP+KalIH2W1F:GZteMyUcbWSQ2rupSFNSPCcF1F

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	62.68 KB
MD5	eaf92b7b08a0cdf0d550d833d6a5b1c8
SHA1	6b3cc7f7dd73b6cd2b7688752897f671bfcd643b
SHA256	ce5cd42e9dac5f1122284cb720ec93fae62be18160ecff12eaa0226fd58f95e9
SSDeep	1536:UiWOtSJrMeXXTNwd58frl2pyB/LmIZpKS:UiOJ/nTNwEw0d1p9

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	64.20 KB
MD5	82075ff92267ec436ee357d18523ce85
SHA1	2127661c7541049f8a6565897d507dec42bc7af3
SHA256	d369e311cd7e23a3462c106a865285ed4d665f192ebcf5eb293b938b67366d9a
SSDeep	1536:TX8iWOtSJrMeXXTNwd58frl2pyB/LmIZpKLzDZ:TX8iOJ/nTNwEw0d1pW

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	142.81 KB
MD5	b5a3db3d37f72e830a3fe4442987fbdf
SHA1	acf44860a1236b65848bf713fd72a7a241cab906
SHA256	23b05258af80aec8dcc9837ad7e8ffd1c77a98f067d0b49bc215a64430eab3a4
SSDeep	3072:HevrWbTzY2IbaJembfRY5MXAUya55IIm+/Fjs/7s1bHaWC8WxZ6x:HeYzY2QRmbf25CR55IImOMsVaWi+

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	195.40 KB
MD5	444d9970d8fff92e35905cb688162e0f
SHA1	6ee2b9fa9e0adb0ddf9a5601ab4ae8229cca197c
SHA256	9bbaec3a391572ea82db667e8db896a088ad3ed829ca53a9ea068c9c082a5c15
SSDeep	6144:seYzY2QRmbf25CR55IImOMsVaWik4JK/wjYK4:seQXLlBMsV7iBn74

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	142.81 KB
MD5	3081b6de688b37c280dbf8b58e16fea6
SHA1	13885b6fcfd28313c1c09cc9194977f5136bda65
SHA256	4f65c12e94bb7548763d25564c4cc585adde1f06ac8d2e213ab1526fb068410f
SSDeep	3072:ftHC/OwpplhvCHPVkMOwQ0naRtFu4gS88Cq6zXgc/GkrQ:foplhvCHtkMq0a7FBJ8Tq+Xv/Gk8

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	221.93 KB
MD5	d9aa1724dd8305f8e45597f14bc06624
SHA1	4341d61e471a1aa1f16f73eb29852dd9812dde8a
SHA256	8b144ecfd7b174c3f66e03241cd5d309d4c000e5b1a4a2bf6af86485a2c4ca2d
SSDeep	6144:hoplhvCHtkMq0a7FBJ8Tq+Xv/Gksy4/8lIcHxgwkf:apltOXDux8HGxT/0lHxgwU

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	142.81 KB
MD5	8ac6891a866221080294d8c73ef7ec25
SHA1	db53b2ba5da647523c28a52947ac2aac710d6b0c
SHA256	34f87c9f58652bf0b857d5238fe1c4e162359f82abe112520669420048c382e4
SSDeep	3072:h410D26NY/xKvdFObrpvoUm6pOQ5rZh53NfHcyl9UXOIq:hi6264KlWrVNm6OCttFl9vX

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	192.38 KB
MD5	1d76fdc6c08af23f578415d491c08f94
SHA1	f5fabcff7175269785fa48e5f9df0e6e1afcb558
SHA256	c48fec6950d28e2e64c98d167cff77e690439f851b2f53a875031d416ebdbf35
SSDeep	6144:kOuWyaMV6g3JgVPzhnj0tnjTDULPMFLxYoC1LPtWj814/:kFwSJaPtj2e0FLC1LV/a

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.81 KB
MD5	8729ecea1879a651a1a5a0930e842631
SHA1	26550d1c997f3f9a1ca327b0f9718afefb96b08c
SHA256	5b7cede2870394bf7322f7ea1124a13121cf63667448f74fd5140e5a482a9810
SSDeep	6:RV3Rok38KViaf1ArMtwLmk3Fb5iRdipKJ4na6zO5Jd6bgwn:RrokbfS7b5iRwkt6aJd6bgwn

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	4210877c838fa7eed1cfcea72d285644
SHA1	8e1fa028f034565400fca0479a3a0df9c668880d
SHA256	419a9e1a300537eb3c89f088c7df74c4ec487c837afeace67142f189433712dc
SSDeep	48:j0UGVnolsnkV2KFU28eVvV5TaC+W0WUnqAV8k7R36Gj/uppLAv/o7aS5:DG1AlVZpDl+IxAVyGTupgQ

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.31 KB
MD5	3079334c71f9c0843648d59672e014ee
SHA1	8f9d671004406bf01b58897e2c0212562780c78b
SHA256	bd6a44133b24a0f0ae53b8b4d1f3b96c8fe7efac9fe9491d2765323221646637
SSDeep	96:szUqLHm/Cwozm3rkTZGOiID9k/pzeTdBCTObJ:shHmKLm7k9zBSJTON

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	40.23 KB
MD5	ed72fdbbf7faae2c6b6014c05e910cd5
SHA1	1ba877e44372192275baf93df4bc286b7973ee30
SHA256	c2e13ac87449bb07f0746023286e06a982415383e84e180f744e26802bd4a9d7
SSDeep	768:Qh7JsZLwSmI6zFYol5dm434DDZ2WIA/8pKnLTWYEcwnyKZTn1fABR7Z6J7A:eJs4SoU434HZ2308pKLTWYOyKh1W7gJc

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	40.23 KB
MD5	f9d624ea1243c8ddd7211ce0ae5c6f2d
SHA1	d97e84171bb3aadf97fb4c411e5d25bb7c85ebe7
SHA256	cef9b095d71c629b303dd08ca6b2288e19e045c0480a39e0f49175a9282d6acd
SSDeep	768:/owh7JsZLwSmI6zFYol5dm434DDZ2WIA/8pKnLTWYEcwnyKZTn1fABR7Z6J7A:hJs4SoU434HZ2308pKLTWYOyKh1W7gJc

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.81 KB
MD5	38d75cfce8e1350760b661b8ef8bef14
SHA1	072c32673ffeaa06c94c20c2aa83dacaa1151d39
SHA256	8ce32dfd8b324b6f9c8051e3a0f1531f9ec530737029d0a4dfc03b38984f74b1
SSDeep	6:aR/FkCcWyDYOIYVrw4uyD8w+vd7D4WpXcmD5A/eMUMIJGvC:0FkzWyDjIYVrwVFl7j5AeFJn

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	20674ba4d3e5f10a54bb4f9b878e1e61
SHA1	d481edc8014cad243cb1c2165c1e84ff9bf36674
SHA256	9c30d94a9583b7532928a9f5bb96c2271133fb35cc7732e92130d9068d7a6a64
SSDeep	48:jnBk1+jLIDwDiAcLrWTslYSMxJwg/3UuApbsaZaj1waorcO3xeIhGAgtrFIxUfTD:TBhuPB/WTEY9/V/3jAlsnwaorcO3xe5R

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	62039c3b5b147b4429d31d766e3d5ea2
SHA1	d2b3dfaf8d2e73a414c0df936a46a85ba010e5d3
SHA256	b557620ac7267487dbddac5f5e72961dbcb0192bd0713123fbb6ba7532ccec8c
SSDeep	48:jJUqscDCYxp8rC8FQe9kniMatMtWA/iCr115Z9qgyOaT5:BDCYxOr1/dnM71TDyJ

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.81 KB
MD5	d8c869073cb444784afed14d08fb9db0
SHA1	aa808259e5584eedd52ef544646b006cfaaf93f4
SHA256	58d419df4e817d742acc576d0d7561f3c87bacc50ce6d6922edb408ede5e7f89
SSDeep	6:pCdb0T3Qta07kK6GyxyjXQJ7Nl9xo71r3WD:a0T0tjRjgJ7NJo7Zi

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	11ee22eab6f533c3150920e7e3889208
SHA1	3d3109243f07db9cd7fb2740f2e29aa46ae08bab
SHA256	3605aefaa203687b204016316b12423427f9ce1bf443747bdf140caf03cd0e2f
SSDeep	48:j/osq+SjRlOE0yOH0HfygJq0haNHOAxm0xA/tdHXorcPecwwaX5:cJlOX7H0Hfyg2t3iHX+KAf

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.81 KB
MD5	eaefc3801c48c0c5b2424053fc493208
SHA1	2d42d65b607da5f5f0ef9e8365352d36c068b552
SHA256	b976ed331f5afd85400c3c0203cce48a96eee5d408e678981647233cca9dc2c7
SSDeep	6:I0o1ZujHjQ+ej92O8WTShAFAQgO+rC+Qc8L+gMn:I0CuDkKWTQp8c+4n

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	331c229957d8515bb398a2e8641a8a4f
SHA1	d3d0820a991bb0ca2d72596a170d7df3f674fce8
SHA256	5f6046f32cc1f7026e59812a2833a17caa318fd030cf4109c9c85057d3a654c0
SSDeep	48:jw63p9JqbwSlbg/j9ovkawP/SMAzh5abJeXzltL3woQkW8rpyf0zUZjcSgXPS5yg:86Z9ZS6/jWvOP/STzh4ejbwE+DZAfS4g

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.17 KB
MD5	18843e266a94350cfd241623a8f64fd7
SHA1	f91e3a5e852299eee5df5f2eb1d0b524aec5e76d
SHA256	8e4471e7fefa5e3355a5b1676102a4c1c85b913f3eaba93abceec2f2873f7cf0
SSDeep	24:Q4/FzBQUKGiAp8gtFBCA9ua/Qpj8ns1+Kt:P9BQt/sTH1Fc

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.17 KB
MD5	dba669fdf22efa4c5ec54fe0f3a1faef
SHA1	243a4c1e0735025eddae683ac5014f0266d66c2e
SHA256	45da3b4d714855abc13e3854a431058b2010beeb17c9c9774ca36ed79b8b443e
SSDeep	96:xvllF7SLsbZaxaoORge4YcRbS5HcBzibik:xFXgcSHNS58Jk

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	e75cffd7c3bd3629317718e24f1eabf1
SHA1	02323ec9297b7a7df7cbc6e00e93c3fe30fe4b2b
SHA256	dc0f99512156c6c7fb3c7cf58604cf3886774ae10760c24722560a51ce3c3c37
SSDeep	48:jJrwQabxw6HmcEPyMx33ao1ZpcEHY4oVdaZ2iObNBG+GTnVf5Hj+rwWr/5ECJwc9:1Z0Vmc2x33JZp1442iOpw+GTN5HnWNIC

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.99 KB
MD5	4e72553fc978481cce8e065f37246687
SHA1	f20faf91a6defdd42aaded88d7bcec0073aadcb9
SHA256	e5d6ce5ad524af988dbb009f6c2cecfa726b6e13cdce6328deb7e11590f9feb5
SSDeep	24:A2kUYZg1pd9A/oiEMG4ksHMYGGqY4VgkBmno+PbDE1Txh5tA:NN1r9t94ksHhGGN4Kaao+PnU9hU

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.99 KB
MD5	d3af5a003dddab21259a4bbf5b2d9b37
SHA1	ddf6c7d88b40ffca94cb1ff5274f3b0b6795931b
SHA256	a4d2923f81c89bc1d17c4a8a8809fdd26ece860d435fe1c9788737efecf64143
SSDeep	96:H63/wk94zm7R6zcSNJYgKgBeoy2vikyZIo+Pnv:Hq9Gm7oASDZ9yAk+

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	5298d47efead190b7f1535b6432fc227
SHA1	9f8966039c9019839d7f6399c528f25282d5c002
SHA256	4b022f87fa026a786b1df38d973faa25729d910f37613a5527fbee5069580f4d
SSDeep	12:h38HRSNGt9i7D62/PMNWXlnOOIRh5cI3f:hMgNEA7D62HMg1ORP5L3f

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	66e3c9d48c4558962c8723a639c2e9a1
SHA1	ebb1125b2167693f76e3cda7369e874c6007154a
SHA256	66f7dd797898e37499fd98aa4dca420c75cf41dfa1ad81800625ede6fee59b6e
SSDeep	48:japsxz1lFBG7h2f5AR4iyTl584ae/x39nN5YdMQxITx7ajThUk0xZU9Kjaw/5bf:GsxzPp64x59fYGQ6sUPvU9m

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.68 KB
MD5	b10dcdecb8ae5193474a28d6fa4d580a
SHA1	7540f5f86c409bf4320427c8a639c63ab02549cf
SHA256	f006b8bd6a45a67dacc09f6c91218b8e379a3c36dfabef3fedbd111d28d598d4
SSDeep	96:vlyDEX7hy6G8q32Ce73/eGAoXmzAyK4veSN4sM:vxLA6g2Ce7P/AoWBK4veSxM

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	00686c7691759110e5f93877ac441e0a
SHA1	161679495f0c986f9dc418bc7a5cf24ddc8f3238
SHA256	24baf0b51280366cec40d290cff17bfc9187c1ec97b626a490603fb68e27c95a
SSDeep	48:jMVfej2SJ5qBFApYJ4iJO8WmRFd7JV8EiTUg2dcYaYz0NehzK5g+RJMl7isCKS2z:6fe6SaBX4iJ+o7L8EiTUg2dc40NehQgP

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	2ed7ccc5151d9dd1a1fb63da00d716c7
SHA1	2cefdcd5562edbe4d0f9c54007d4d1ac62638d4e
SHA256	818139d7f602419a2c518e257073802ab42dc4d1f320222bb791c991ff8f5669
SSDeep	96:51z8KNGyPbg0aYr4zf01qyhYFVQjq4bNNqZmxCdJA0AvdNMQt7Pg68/Bv9D:5B8KlggmMAyhBH3qZmxCmvnMOgFD

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.68 KB
MD5	3cd03d28e054bf9ba0cff8d9469966b3
SHA1	a78389c279d0f84194c4becd6162aaa09ada0981
SHA256	3a8f454de0c3618e064e2f700d9a3c6c430f61b876b4172ee50d6a0b27af23e7
SSDeep	96:NgABlG5Gla9PB1ObZtF7Bozmzb931DaulZ27HBFrGsrNZ0vcQKxImia9EnA8K9Qd:+EG5G651OVeq11D6hFDbqeImi1nATqIs

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.68 KB
MD5	d752715175a9bba98057eaee15bf11b4
SHA1	1838b1f07c5cd85137f8e23f1c9ad380cf5269a2
SHA256	5d6629653c4c7425ba48536b7129edad342b691f363cf8b5dcc05ba08f114fe8
SSDeep	48:7LMixkwenyhUtqIKbSHMCoAjVRY4ho16rasVi6Zm//4N0bAofYK3+7J0us:fMMzXpCTjVVhgiasA6ZHoZfYBs

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.68 KB
MD5	e59342e7bae8ab7842069bd52e4fe3a4
SHA1	4f1038f406260b8bc02549b5c9b0aa221201c3b9
SHA256	edd09bf023a21273b8a69df656b204e41c1a9ada41f62163bfe90dbe180a54ee
SSDeep	96:u1/dV0qr0P2TVsHHKOpQLnM3ROQjsXpCTjVVhgiasA6ZHoZfYBs:Sf0qPTeHHt+TmRz5jVXgie6ZHoZfYBs

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.32 KB
MD5	80f3d4ebb4614eec163a9d8732c1abe8
SHA1	534e336b30e5b425b6212bb94579be141980e7e4
SHA256	48d08ffb981866eda3e98d3909b21dd94a56fcae665e1cf34a2b29c28d395d8f
SSDeep	48:jFWr4Iuv6BxVzF6FB0VVp1nkmaeTENyLicEVMKw6Yu8yIEZCcTXRgptaCQRH0JPc:JWr4Iuv+zF6FB0V5VqVMKToj0WpLVc

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.38 KB
MD5	5782f72948c3b58b4da6bd623dd1db0d
SHA1	1ef032e78f8fb16e1d403a4b4647d17873516426
SHA256	1b4568dfa544a0f265929ee5dd435d5fc83169f8895565a19f6ed54caddf8620
SSDeep	96:Up2Kc5FZWYYXcTsGCXRVxEGVLMBzjP/0OvOKe:VZcZ9XRV7Lgzr06e

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.07 KB
MD5	7db808974d4a4ec1e0495cbf8c484489
SHA1	7a0c118b10a3e668cecc3824161860a73f944017
SHA256	aeeff7f726dc44e430cf3149fd95e5158be745dd163b64a800ecd10bed02a025
SSDeep	6:DCpUTL3iuBMZmjGk/PRlSd3KM4xqSeRmibeil+FZnCMg4jErPeUkQraX4Z9+Xleu:DJTL9joaMKvcwJf6eUkeoX0uGluD

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.07 KB
MD5	0f0ce191467a641af586bbe58cad2f35
SHA1	a6e867a98f5a41a937bf470f84f1ebd6d84cba44
SHA256	1845915167a322b649975539c7ea6afc50daf765bc0ce3c1b4faedd550de982f
SSDeep	96:FQ9Vhqmny8a0vZEjJ29TWjbij//6JSNGm2bTPz:cva0hAgT6eDSJSNxuz

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.20 KB
MD5	860bf5246a35255184b274850fccccf1
SHA1	43be74f47d21ef7b82efb03338f03aba8b708217
SHA256	cdff2714182d183aee44cf4c7dd32400bc6e59f3b36d49fa6363d4bf5e8a48c4
SSDeep	12:kW/5dHn0A1AJDvFWUXBKnrhfWlJZ+3Wuz0+naf7cQNrRUv36XZ3HnA6yZvyh:VxV12DdzXBKJYkn2jjUAdHA6mvS

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml.HILDA!

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.20 KB
MD5	2c3f4daea43ae9165971725aa9106399
SHA1	50190e93538122adf3cfb168cb44ea84036501e9
SHA256	6d677ce3f159a45c8664070a8c1cbd5ce06479055e37c8649b4c06772bf1eefd
SSDeep	48:jzUf9K36LfvNC9a4c55h+3aQDKIZECwIAzIqIFn2BC9lXdHFma1y05Hn2US5iS:HtOfvKauMMEqNWiS

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.17 KB
MD5	ecb9109ca636c92a3448e6848b03ca89
SHA1	beeeed3a9d0700496a4c6dacb6af95a8e1be81d3
SHA256	361c817ca46428ad2718160c3ea13ebc3a591875d395d32b0aa3a83de9308e57
SSDeep	96:bZKy6uhjf/hwSuXdri+FluqLkPW6wNj+3xYDb2JB7I7I:9B/hwzxVTgVwjexPJ27I

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.71 KB
MD5	3db7e5b08dffb673c75d1f65a6357409
SHA1	4ef4dd426b01abc07e331e4f101ddc5c01f1a2fc
SHA256	52137dc5c827bc8f808248b6d751533d00adfec447ccb37a9eac0c1ded5f5fac
SSDeep	96:8KfjdfVVhBfIQVfTboV71mp/M+jtvtk0wmQypX+pfMep/hlpnl98v:8KfjVH/4V71mp/Mgt+XypX+pfnJhnnW

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.35 KB
MD5	ae9847149c222ad59ba80c5a388379db
SHA1	bbfccac4e208c822355ae31495131609a8aa11d8
SHA256	e43110fa07679db50ca909959b7b4000f53e8b2ae865c53f674090be38047c92
SSDeep	48:N5oUhoqcN7S+oreW/9QB1VRcCjlnA3FK43DqulswQwe:A4fcN7OreW0A3FK43DqP

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.38 KB
MD5	0489b0eba126cfbe3ff899d2a5c1c552
SHA1	0ad4b2b559a315077f2ba57e5a9bae9f041609ca
SHA256	937b76589965ab61ba6f889b807789faa414572e3c01e401ca6749e6da4aed68
SSDeep	48:jhhYV4ULyONsE8xUlVvlBbXKS4aqkOUz766SC/pQ3tV0q1qhzF45qD/aqrE1xqif:4Ly7WVdB+SskOUz73SDdm7znro+iQtFA

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.95 KB
MD5	c5e77daa93eaafa4eb2e1f98b3e33ddd
SHA1	59d9643ec47a8bbdfc522e8343b148b818f89081
SHA256	4e1ad1249acdc4d2e091cd9853d72b62f717cbea212d27f5fb4151916f935d20
SSDeep	96:8KzxfVKa2qjgpjF5w88CuVkunND0vEtu7oIWrWtBv:/Jb2qjujstkunbkDtBv

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.79 KB
MD5	364c375357dd1263ee9c73a00c9e33f6
SHA1	803f455febc89c4a002bf1f0a09d5d92a44aadd4
SHA256	5091ebe596c2f2de53fa2992a86d039e97e8eb13a001997cadca5ba9e1b8bc5c
SSDeep	24:4hNyX6w6GYTl8WoZoBY/T6kVgm5Hrvm9GBKOd+u0uCciqoPr++GYXGXy9:4hEXCGYTDoZoBYmkVl9MXu0ukfTfGMF9

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.79 KB
MD5	a120c052db57a161142faa8cd9276cee
SHA1	ea44fa6d3de93421cc6cc6a2572e8517451360d8
SHA256	2960d62d30d005323579764e6b6aeeb1661f73e8e1a924ee3e5683b610890db3
SSDeep	96:nm8ZYc3RLQQc4hJX/4h6oRHsqhHHrIooWm29MXRuwTOQ9:n//4ooRMmVoWm2yXR/TJ9

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.70 KB
MD5	9a3c80c68a9d92760645b1a2f36717cd
SHA1	82934ba1b155db261e2b8e5288e0d41142498faf
SHA256	aec1c35507ee0bb3fe44ed5b714cb5dae2db02d1f517f01871081b18c545a95c
SSDeep	96:8HLD8nNHXDO0rAN5MlugYBdSkIR2fYtj96Xk0KICYSoI+o5YVOtl1Pc+pKmt:EfStXXkMoRfwRR6yloITY4zPgmt

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.70 KB
MD5	3c931b284adb03256a9dcc68b55ff5e8
SHA1	0cf33022cf119cc08d8e4895f00de66117cb27ca
SHA256	b57339f9b5301d48af89467f2b20aaaa0ec73ace98e9b8688d585da7475264ab
SSDeep	192:Fl/aHBIKyDfStXXkMoRfwRR6yloITY4zPgmt:FlyyfQXXkK6dITT4mt

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.87 KB
MD5	f77f6c2ec450df7bd4f69829bda9f7b1
SHA1	e0944a618f58fcf3dcbe1c389c3219b2f7f6cc0d
SHA256	843fd1c6efbcde1daffa437129861d4c31d706f783829c4b05316d08044fb2cb
SSDeep	192:aJLR4RBhIskfGL8tYPVPE5fyQCTRN2m9LLewoShbwxyoRZN01z:aRORjWGQtS1IyQCNUML5oShbwxjRz01z

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	66f35e4fd0b6762645a3bf44e2b730e7
SHA1	a99a97882e5dd258e2a7196479a788f0a76b1e44
SHA256	15e2ac77f5efe050b40ef311ee16845ca82912bf640d4484d01d3620cb711e57
SSDeep	48:j/cIG52nWxn65aDRovqVKcfLDlMowzREaNcAukbcDLmZiOR+FZia12WbJCGEU:LR5nWx6+kqFjBMowtsoCmZzRQyFU

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	667c5c02c02195546169f8b7f1630337
SHA1	5beb90670bc10ca95c1fe0f7c9e914980c255c04
SHA256	aa0ae4975c34ec541b952c7b71e2c9b4e4f8a897c4763777d0fabe8b79f9c696
SSDeep	96:F1UCiCqaln9iKunlbXjZbXDCcMuj3rho9ZdVLa+LSs:F1Piy9R0JDC+5o9ZHa+LH

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	33.01 KB
MD5	fb867fd038a79ad79909b4fd9d974951
SHA1	2a9e02bd53649ca07cf635d38bf00601a556f5e8
SHA256	de80b85ba0689719e7cd2241e0249f7914c2374fd4bf16eee3831441a59e2790
SSDeep	768:nl4ZTu3kAoli2toaCWgQwhceltfhmNXPCncfKvnd93:OZTOkTDtolWgPV4XNfKPd93

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	17e87f5b72bbc6fa592bf2f3fb7e0116
SHA1	4a82c552fe248d9c6dc2a09407fab6e222f4bef4
SHA256	18f2c3ac61514df53141c583fa1ec70264d2d83520272b21e250298b80223c0b
SSDeep	192:kO/jI3EvAN2E4hPABOlns4hHdZRtFVqkx:kAI3kAN09ABOlnLVdTtF8kx

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	a8db0e24f992b0bc3e20235d5c3e8a52
SHA1	42e1ab3142d0cfe56cfe5283ecef960cac748dc9
SHA256	5cdbd83c1066039e03a455c4fd57ce6837012df6d93b66a1160a38a145e328d7
SSDeep	192:zdY/24TszMnR6zZwF5Xq3EvAN2E4hPABOlns4hHdZRtFVqkx:zePsQnR2I5Xq3kAN09ABOlnLVdTtF8kx

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	be8f6ef8b301209fbad72a9aee674bc7
SHA1	8418060ae46a00275195df1669b7f2517286f9cd
SHA256	1085672dd0519fc9d45196c10b25c05a6d965e95af345baa93b8905c4d9b6867
SSDeep	96:9+ZVvHmKXzt9TGKnijXDTsp9ZiStobynX2xrmBBBZgcxPI6x8:oZ9tUjXD8JmUXQkBFQ6i

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	9893340c2173567b9a2c47010df49f29
SHA1	bf8ff7bb41aedab7158fe3b6bd4ef0acebb185aa
SHA256	50edc1d6c747ae6291aaec20c4e8f2e330453cf2cf11654226083075c8ef180f
SSDeep	192:DekjLfKgLgto7/eyzZ9tUjXD8JmUXQkBFQ6i:D7jLf7cKPzZ9aD8PXQkBu6i

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.12 KB
MD5	5f55a6e5aa3e40f00551c1c17e46e84e
SHA1	50bd5c7140389517c29da5febdf96fe613d2006d
SHA256	78e2431fcf182ab70a0a2b330518dc6477b3a112c776a6fe1380ee9a430e3ffb
SSDeep	192:vBXHhJmCcHUWGXPJaS2hb/M+8HddxG4bMw10FxLvU2Uaoz/g5vVbrCZ2bp:pBYCU+/Upgbx1uXMrgjbrCMbp

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.32 KB
MD5	349443c079e4c1506f5a29461b69a94e
SHA1	136157d77c02884d996b154f51f36cf46968f1ca
SHA256	206cd21dbfc70338c76fcb5b1024f2e8b460a2b270f614ce003678bd760ea57e
SSDeep	384:HddljcfGG/vrdlIJ9s8O0rqj/az+Thr9JAQzAyS+e9:NofGQvrdlKseyazoxJXMySR

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.24 KB
MD5	eff21db0dff193ea6828ba2e5f790aea
SHA1	4955d5ccfb25e48df911cd06c4036bc06d3b846e
SHA256	62a013eab291e55a69b166f571962e77e6e4bc0dfa551cef42496b0e38876c41
SSDeep	48:c6EmTNKVpboaGDnsE4FWi0UyAvO8PjEfOO9ez:vEmYboac94FWik8P1Ocz

C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	776.93 KB
MD5	6e0da6c0d4b3851b0e46c8d7c4627541
SHA1	0a0782f4dd7f9048a391de19dcc2dfa29bc29c76
SHA256	e67043572500d46e8ace9e88c4a5bcb9969f1f1f853ae0be35d8f8ff4b80ccea
SSDeep	12288:yaljOhhmbj30jtxR1hOY6GsFAbIjm4zbb4MkTn/B+JjWXtlxiI57t48D7i+lJqoO:1OhAbYjV1iAsjRbynAJjqleWRbFy

C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.09 KB
MD5	0f58c41be22acaba61ec17aff757a0e1
SHA1	402029685d20e8304eb5f30402d8dce1021ad476
SHA256	7fd96e1488435ed326393ed1d67fddbc6a62f46b69cea091d4a9821bac546cbc
SSDeep	96:nLoeIrZnCD9Y+1DCOoNWGR9HQAHG7hiDj67gZmeBOT3tlfBVJpkwVn:EpD0CLN7Qx0agZv6WwV

C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	d7b8d17bf32d735c977eccc6ef0df060
SHA1	99562749f420e19761c4ad6c398065407995e3fb
SHA256	2d0b725d2437f67fc48e053c886f91fe93444f7dd2619b9028bb945defc35b6f
SSDeep	48:mSW0WRMl2ZJ2d7Gtxl6O/pKYBjp4Cib4kOTfNN99ljX+ljUwvJOR:myW/2I5rhhdp4PafNN99RSUwvJOR

C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	970c3db5cae4fd4a09909cc97db51f34
SHA1	079433d90fb9e1089082f8044f7e6b091bd20286
SHA256	769c7c6fe27150ce9263f9974560255fdc69d5660fc0ffb45e6754dfa3e01a13
SSDeep	96:b8/ncx7Ild1dEBW5YgphtYCY2mbQF06q36W/2I5rhhdp4PafNN99RSUwvJOR:b8n8Il3iBWO1x6q3z/2uvpcalN9FwROR

C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.15 KB
MD5	5e7a417d2fe4cd1a47f4dc2ffdd277e9
SHA1	b4c213ce25f2c9f524e6aebed1d26a3e42cbbe46
SHA256	cabae3956598860605ded59d25f7f7d9cdd0c426b1e45de5883da64ed88e40a2
SSDeep	48:HtAJtCk6TgydhoTTtdAZmyuVaDNb/PhWjctjSLT7adcDn0Pgb:HtOCk6TgfTTiYcNztjOT7ado04

C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	ff18203ecbb35cdb67c3b3b42391e5e5
SHA1	7861caf77573ad398f683b50c2c8f83009e19f65
SHA256	4cddc1c1dea0f19d6925f5ecfe0d1291097f379d895f215e6d12449c9091306a
SSDeep	96:f0RX6d9mluD0UtNiqwV6eta4QBFufPpOuk5F3kTrMMVv:f0IkugaNiqg6esBFIoukXkrx

C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	ecbc0c7c661c6d426b151f5b27637e41
SHA1	ee5d31ac83598f77eedf2c7b93901258f90582c8
SHA256	e4b1b3c185acf1a40d157d896050bfe831bd741c10d2bcaf8d543cb8aa44cdae
SSDeep	48:kKP6cG5gW0XLUmwNrbOV8SYZgcdSR6tmcVzoQbgZ+eStkkEVLG:kKiV5UX4m7iSYZ1nmazoZ+eSH8LG

C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	0d99bd20e2c36eef7c3352bf94efeef3
SHA1	6a33f4fe68b1cd73bdbac1a51a0bc9795f3e2b85
SHA256	68790ad15f91f9997e98779b58fac357f72001b02c41748115224355e3488ecb
SSDeep	48:HTNtClQWLFLqbWOKZI8XrF0mTJZVySUaHDUc4C2cjO5LrpIba:zN6/+d9mT3kogc4TcmfpIG

C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	aba2c9de8a2a3ccc83691a3c65e51d5e
SHA1	d861db9fb02501ed37eeb6b45adb786d095922e5
SHA256	0589626f26bfb79689b6a8b43a6b65d83aabf7516aeff259dd94fcc95d1e0dde
SSDeep	48:BIto76qo1qB5s2e79/EGn/rMJe4H9JpLe3FmzxeotxC3XSYLikr9Ny1xmXbbwCCh:C66T4DMFNF4HIIeorq5DuAbCh

C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.17 KB
MD5	295bb86316dbdc627a99b7c68ee2ef2d
SHA1	4c9782e610dd4321064c6b1c3eb626d6f8d48dea
SHA256	8ca966bd4565121325e9d3b377fc55d5410e0cb0fa0359172ba21aa65c94753e
SSDeep	96:Vxs3MJtz/VUEwvIxevMVwKMOlnon7AD0mojuKMFNF4HIIeorq5DuAbCh:T5zdUgGGwyln0AD0HuKgqIDN5DHc

C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.18 KB
MD5	5b3097e63dc53bd9b4d4983a8a5ad1d2
SHA1	0dffa2b63e4ae90185010915ff2ecd236bccfe4b
SHA256	daf0e22acdb5d560f8213583f1b2e7135568896d1f1bac1d6be317ae4fa5b7fe
SSDeep	96:gxHV4ocgTyD40LKsFZyW0pPgucHlJ+ehbnwo8kIwaV3J/HVFLgACFppNYWwj2Ve1:iuhgT240pydIT+ehbfIz9HVFcFpNYEVK

C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.06 KB
MD5	7623d7c43908f1581c8500e09e08aa87
SHA1	72ed6d53484d0431a0c23aa132f96b60a2d409b3
SHA256	10e3299a106aa4995180f5dfad34463b179ba5e01d304d79b8ec33eb450a0661
SSDeep	96:fbbWhoJzXRKdMRb7+n8u5IvIVrhuXINb8Bn9QoXRp5lR:fbbWgDR8MN7+n8u5kyEcQt+Epl

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	90.23 KB
MD5	33a60bfcfad33e7d11074e920ff4499e
SHA1	9edd9f42dac8737d921ffce4402f284faebc82e3
SHA256	0c39f8adeb59b70f2ab92992e94f5dbe3adba0288a2486210483291d6f029c22
SSDeep	1536:XhCrFHrxZq2X/wwAk/ilmoYv+DRloEnHAgviPLT2FS3saDKI7UC4qoU/:XsrFRVATlUv+DR+Egep83NUKb/

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	219.93 KB
MD5	545456393a656cb8626236a7e6442b14
SHA1	33ced5ce6d3a85a8931981be374ba1d51f987707
SHA256	e3e7d35556f2803745653aa01a139a0f2f85270b19ad7c6b84ac59564a793d86
SSDeep	3072:s410D26NY/xKvdFObrpvoUm6pOQ5rZh53NfHcyl9UXOIXFX7HlOHnhy81fVky4W:si6264KlWrVNm6OCttFl9vUt8Hn5Vkyt

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	132.79 KB
MD5	2bde56f366228b5c07c42bf2946ebeb5
SHA1	d111cb1e0c9f8c4faafbda4d0c3a8c903dd86f1a
SHA256	af8aa9e732350f84d92a60e1c961678fe726e89c81e72a42d2f723e0881116d1
SSDeep	3072:m9p2clWM1tYFAMu2nMV6g3JgV99zhYGnje3tEIjTDUgEPMFLxsnoz:mOuWyaMV6g3JgVPzhnj0tnjTDULPMFLT

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	ae5a8f2c2485e1ee9884a9bf8e50c4ba
SHA1	239de3dfa435b67ae23ac5c35fdf6e26a8518ea9
SHA256	d93d3a229e103b75f6da171f0e10f1795bacab95435320290946d65875f1abe8
SSDeep	12:vLjkQsAuRirT4YgB+lBWekUfpneQc0YcT:vLjkD1k41KBYce8/T

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	f930b73f9cb95e28cc95c3c90941b664
SHA1	c1e1ff74fc7ac42c19687ec53c986a12cb249d1e
SHA256	e15f01ff5dc75aad83f7a97ee44ef0e8fdb40360bc7936fd84f1689707200c92
SSDeep	48:Bpluho5GCpMTqmpAc/xCjBxHA0MNvvVWHLcad76jtcg64b81kg2UU8/mivKHED:Bpkh22qZmxCdJA0AvdNMQt7Pg68/Bv9D

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	6d20a96cd950fb5801344bd0bb830e7f
SHA1	20ef2a450b168c43bbdac69aa3614c336ca25885
SHA256	75f98711323ba8468b02b566b4e5a397c9eb09e33708724049a1a31dbbb24b14
SSDeep	48:j+JLrKFcQ+pzAjFbbPnwHpPah50GjeLYn/7tjWrNl4kai55:SJLrXFpze2Y50GGS/7xWUO

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.68 KB
MD5	4ae5ed816047b3f7b6f1838b940e9ef6
SHA1	c12c660bed4765d5b8eb9ef0b7d07f2ba7651f6b
SHA256	a3e0fdd7db620906f8f1734e84343f3052aca829ea841876c6d46a8ec68a42b1
SSDeep	96:atXZ27HBFrGsrNZ0vcQKxImia9EnA8K9QgFFaKmoZO:atShFDbqeImi1nATqIRO

C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.HILDA!

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.32 KB
MD5	734d655c497795b8b7ab839db474edb4
SHA1	f40ac9016e05b3658e3f42297f1005431d4d5337
SHA256	3e9285c0432764e5097614c25cee5c4886b011cdcc2fe8b0f4f56c35fdc516d1
SSDeep	12:lD+/kCsVOM84HX+y3cVLzzoHjTCRMK2KpeQYSRDS9hdvYe3ha0m7b97v:lu5+hmz8OR6NudSP+ahajZv

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.HILDA!

Dropped File

Stream

Not Queried

»

Also Known As	C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.HILDA! (Dropped File) C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml.HILDA! (Dropped File) C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.HILDA! (Dropped File) C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.HILDA! (Dropped File) C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.HILDA! (Dropped File)
Mime Type	application/octet-stream
File Size	2.59 KB
MD5	4546dfc2a27a644533ef58022236c1b4
SHA1	4c9d166c84a7c4e1a9efb04efa6d9f9ef2b63bb9
SHA256	4551b8baec05d94b8a55b0bb31ab10b8521ce44b178c3ad9a2b760c708e463a4
SSDeep	3::

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After