Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\virus.exe
|
MD5:
522c274387693978d9f02023686c8a42
SHA1:
78b2de9b1ae81c527c7611b6b25748b81747a8fb
SHA256:
37ea59b18a45a3239d667aaf63e1bdbda5672acd00a95938d019c1b18d166baa
SSDeep:
24576:MLGUzbee6rtfiixAyoYFedyV3Gky3wfM:ze6rMxZ0/y3
ImpHash:
a3581bfe28e762682dbc13d06bf2fda0
|
Access, Create
|
Sample File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
MD5:
a5528149f2df83d8ddd0094747f580ff
SHA1:
1340d506fed2473920d8b8abeb8ec8dd904eec93
SHA256:
2452fcfaf1df0853314832c4dfc0ce4ddcca5f6f907bb3a6ebedc6166d61e794
SSDeep:
24:3nAg9yBl+EO68aiem0iSEULunEm3u4SCjGZioGUw9Kj:3wBS6dDiS9jm3zSiGcvUw9Kj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
MD5:
8e347cc7e51dea0b8def4f8476b73eee
SHA1:
1b97e400a9090cfa327b04e5d247a93d02d84cb4
SHA256:
36e840643b4436ab70f98675da86b0584b6bded45424294040c18767a540b137
SSDeep:
24:ve/6X5t5be8GdBnuEPl5veTzDTbeCzF2/h6Dz:Zo3BnzBGDTbXF2J6Dz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF
|
MD5:
017c4e0e340f938d1ff5ea7a90014f89
SHA1:
292ed6086d79572ecaa78d545c0f23a347184d4b
SHA256:
30fc998475ee8da84d350aa07e030bde93073b6ac519b20d7292717259898196
SSDeep:
48:VrbUcd8AfvW6v4Z4wPffyQwKR4l3F3fs3mGPvtyVgdItqWKaYXltxUCzOYarQ2SQ:VXdy6f4Z4wPSQwKRM3F3fs3mYty+dI0w
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF
|
MD5:
6392b3c5d0011fd86efd119013fd1a54
SHA1:
71ae0ae3bedf7380ea3a2e59afbe82bd4f1caf77
SHA256:
0c906184466985a1d98e0381ffae6bbe8baa1b2938466be7fcf9991c18ed9fa0
SSDeep:
48:3KMpZxEpBqPdAJybLjIzR1QSI8G98afl0km7EMxkrHXEwipQle:532XOHbLjMQSIn8aNFm7K0RQle
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF
|
MD5:
9aebaab9b417ff077a83c9e0b290452f
SHA1:
15a97278bf0ace01b32e27c6ada64999076caf45
SHA256:
c950be9ddf12f737f5b8054cb1ed9b6d7c1763b5a38d56647bd4f626080b12b1
SSDeep:
48:CuHOGbNBMGZcGIoVU/aAVUoF86qVxKcRbkm:uGbztZUoXAVUoFVqVx3RZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF
|
MD5:
1847c296cd7e3e6eab48e9089c6f577f
SHA1:
5cfaf17cf504d6459591dce32330ad93f2edc9f0
SHA256:
4a16dc8253615943c524fcdf19267b1bf3bf1f52dc0b7645cf90020070ee3f6a
SSDeep:
48:3KMpZxEpBqPdAJybhRtGOORQy/oWtz65hceQF6eMjVV6BI:532XOHbhHGOe/d65hcVbMye
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF
|
MD5:
d80ec10349782375738a5a1663b9795a
SHA1:
f186bec84b91141875a1141cf6081b2b692d1786
SHA256:
38ca34383869fcae4d36214f84d029df02d248507bc98b5093ccb46f0fab9d6a
SSDeep:
96:532XOHbclnIHBNFrq5ecH2ScxtMGASgP9:NRIp2FQee2f2Sg1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF
|
MD5:
4dcb164f2a09270a494673682234555f
SHA1:
c94a5da1eea4e5c3b99d4e50284aa335ed47ad86
SHA256:
783bad75eb054d1668c0daff3f9d03110c7cb0397c80eab3a9680ab8264d1656
SSDeep:
48:ZbN+ktvqa3hsn8P28qy+0wa0pavTYgH3fcXJaGAD26mk3Tc7ZhpnDKcK6NIt:Zbsovqz0+406YgH3fcZNAi6F3w9nDs6A
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF
|
MD5:
faba9a22dc30217b9494b0c3ace3b822
SHA1:
e545a9da831809061fb1c0ae81d397088b0e7dca
SHA256:
c99b66e81f8f6088cc09a3f95d4ea20e49db46ae161289dae31c6d641d3dff75
SSDeep:
24:vmnSB0i9RebLBanUDIkng/tieV0qdMQGWZ:v10ivnd2BeqqdGWZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF
|
MD5:
89e85836638968e7068f1bfb823e02d5
SHA1:
2165432f1c34c4b42082bb2c04ae650ddd9521b7
SHA256:
d2ecf23182514cf7f553f209df470c140bbba41994629a67b7fb10149ba37533
SSDeep:
48:3KMpZxEpBqPdAJybA43cvhHsrY3/nzFC7FzUNj79xn:532XOHbP36srYLH17n
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF
|
MD5:
008a18f23fec62374dc7c92d7460b162
SHA1:
add536ddcf52c76f9343beb698cc76b9c8af6b20
SHA256:
e866df66a5552df78d9ad6d0be5f125887f69ed2dad8865d0be7f3ef824e5604
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHqCR0oZOm1CRgMGstRwLy3T:3KMpZxEpBqPdAJyb5OYcR3BtRwL4T
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF
|
MD5:
703ae5ea486b56ffd2096d4a4a1d3006
SHA1:
9f64ec0a2a449d3cc5b157d413b6b191db1449c0
SHA256:
2438383e0103dba35ce5efca8cbe43d592bd183101cccf73db8c6e301ec8024f
SSDeep:
24:leP3BZaO+hBlYRrGobx4orjwb0pnsVhR9sxvt5nle:le3bN+lobVUEaZsxjle
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF
|
MD5:
868ddfb58b5153c1cd19934a2664f419
SHA1:
34a7bc441c3018a0e1fc22c0ea5bfe0b173d49e8
SHA256:
3e54b24cba35f70256828147ac1210365930ab010f218c01f7fbedab50d63e04
SSDeep:
24:cB9wsw+BZaO+oKYkmbZ46BppW2N0Lss21+ebIw0CIbDQdHKZ:cBt5bN+oXk4FBG2N0gsgITCIbkEZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF
|
MD5:
c6210b88e2fb762c7f011e63f00b4ac3
SHA1:
4f42255019d5d6eee0be39e14a4016cd9704f208
SHA256:
cd660276b3317de68974fcc533a692f2eed6b8d4429a3214ab6a8850bf084645
SSDeep:
96:FAoeG4Z+i68ALX/gAaM5jTAOGjYfsYjxqIQ9VjOpogx6pNhjXLoMPnKE:F/Ih68AWM9TmUqIQHOpogspN9DSE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF
|
MD5:
930e78334ab0b1ad215a9f417f8a40d3
SHA1:
dd1c6cdb909954564499f463d0fe7484b081f2f6
SHA256:
1ee137b845a373c6950543b924392135af725274dd6f8a4277211c6514f4793a
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHlRiCDhxUzE1yE9Zb6j:3KMpZxEpBqPdAJyb/iimzxA+j
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF
|
MD5:
a65eb564a2256eabbe20ccbee87696b8
SHA1:
43311eed8e9678f7211971330d9aa6db9a9f4ac2
SHA256:
14f0d3c726dad348f22c5f1f15fc7caef7220167f5527bbcdbdc65fb6c27e3e1
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHwMFvDIhWQgILu4LJ:3KMpZxEpBqPdAJybbreWQgk9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF
|
MD5:
6601723059cc42a2547830bbcc7c07b1
SHA1:
0f443a3782ffddf3d5d2ec882ee81bc3c598ef31
SHA256:
cbfd6ecc7b5f89a7d58e8a5f4a989d0da148a014f73d2900aa41a53ae7fb6a93
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDH+wUhaN0W3BL4ftBUgsoVFq/WseB:3KMpZxEpBqPdAJyb+tQ3iYgZBVB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF
|
MD5:
0baa16293a6c63c4061a20f8543ab5b0
SHA1:
060f103fde8321d0f90cf5f70271d389428cfce7
SHA256:
5148d817934a666c33c47e13bb84364556bd9839496457f23e41b1fd49465452
SSDeep:
24:eTw05BZaO+yacdiCR86EZUkMZC+rkmrj+M2dcJlG5Ko/bArcFyTT9M4G/siX/n6h:eTP5bN+Adiz2kuCijx/lUKWnSRM44sVh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF
|
MD5:
44885bf195ea488f259cb2233b730ce1
SHA1:
368b221d7a8aa680211aa95511e7db489bef514f
SHA256:
5f11c4cadb236f93299b7e2589ceeb9d9982de14cb95edd6d546005d0dfc5e57
SSDeep:
96:532XOHbecf0NCH91oJBgaLdwFqRmJVhak+0PwR1yuSlxr0enx21Y:NRthgBgaL24Rshak+N7clxrpnx2a
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF
|
MD5:
e4b05e83c6279194248d143c5820bb74
SHA1:
13b8cb2a5261e5dbe71a05c7255abe1937a2d9d0
SHA256:
14a2581e24001ef127a3df11d41a10206b0d5ba0c47357925202f986664ca9a3
SSDeep:
48:pVW/hbN+o1Vi0GrZ+kdQnDzL0fTS2opX06F+ppoNUgQWbNLCl5H7rlsUEz4RIb6:pOhbso+06FaL0fu2mX06FWghbtCl5HfB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF
|
MD5:
49dbf6fe2b872916c418ac5fa4525d77
SHA1:
e4535fa4efeec2b3400fab92cf32543cb86c2006
SHA256:
aa5c89c46429c7cc9432303c8bac4af370ca522cf73ae0226035a39f1757cddd
SSDeep:
96:532XOHbOnTgG30xV1lPGLRen1pzI41zF/aAJ8g/Zw4nrczRzDqQomQpA:NRi0G3VRYBogxwI6RzJ3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF
|
MD5:
f435c99182f2e4044f7d0340ab79cc55
SHA1:
55abd5826a272adb89d539b0bb16d2d57ccdf039
SHA256:
237c7c9c33876aedeab70b46e397eb9572514421e4d12dde5e9ee2d920bf8875
SSDeep:
48:fCB14Z4RSLvNsF00M4QN1SQssioz9h+wg/sbgZrdCk5361wC:E4Z3aF09vdioD+w8sburNli1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF
|
MD5:
3d65aaad50dd2e8dd4d0bab61b8e53fe
SHA1:
3c48c826db15663d85c1700bee4d862c45fe33e0
SHA256:
51c1c89cf5a3cd5847af9b12b6f46508989726dec4760e69d4dac607d5a4d013
SSDeep:
24:/AlX/3NByokfiT3BZaO+hjUZK/m0YRhwyraJ5F3xBUpLelziI76b3Gg:/WFESbN+je0ydaJ78pLeAi6zGg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF
|
MD5:
23468dda94e60477bd8a46ea65fbb407
SHA1:
71f0591a35d6ad159cb468e37258f811fb40c1a0
SHA256:
90cba951cf602650236c5e98a2da391193c67da95f91c49c171be0c820e06e1f
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHOJnHZd6knsOWIimfJP1ChqdGP:3KMpZxEpBqPdAJybSHQOWYJ1Lw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF
|
MD5:
894b1629f4f4efc25a642719101a2fa6
SHA1:
d2e83028b7ca7ac7f94a434ca17cd3f95eb12840
SHA256:
334d881495a00363cad7cacc2c64e58ebd65bba9765555bf114cdc2163bae7c5
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDH+wUhaUD78K8vzqlU0Vg02qEV4Z:3KMpZxEpBqPdAJyb+tRDGlrXVo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF
|
MD5:
833aea6b2b37566bef74ed8c8f24dead
SHA1:
d251fe5433a999b48304e4f91d5231f0d6b66f22
SHA256:
47f4ffef7bb188a3d52bbd33b65b251eb68def38ded4f6bf193e85aefbb1adbe
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHTcWZ9Q+dpOmQcE9Ly5:3KMpZxEpBqPdAJybTFQUpbc9LU
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF
|
MD5:
334deadd54b026d22e071dbdfe0e2f2d
SHA1:
02bc1262b9e65230f83a011718afe32778934505
SHA256:
f13f538c90c49d4eb3bdab9af6e22e9978af061eb0302ae8d89a3178e7848aed
SSDeep:
48:AYMDc6DbN+WXvjyQHzlT8o6fIdOg+a4zbMfZc++SB8wEGPuMFyL8Bdr5GL3hE++:96xDbsWVTt8o2Id+a4zofOfJGbyYBB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF
|
MD5:
e03fafe78084d1391b98f7b5229af8f2
SHA1:
9fc8ec1f256b7024c1a8b3ab4d16011bacedcb13
SHA256:
4bddbe60f40487d58b646a5989c6fcd228ecc467340bc3b7256264751158ee5b
SSDeep:
48:3KMpZxEpBqPdAJybcUBeOAr0z8yOzcaTq+0:532XOHbcUsVr0z8zca+x
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF
|
MD5:
35e96eb02d75277512844a71d435239f
SHA1:
2a892b5e4e947adbee7fd2aef44bfac58fea1205
SHA256:
f25df1baceabdc1d57ae9c0a6a2b30103e3ff7a9abe6b38f6cd592847bcfab57
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHlXNNM/DtL0CF9Dv8upQAU1:3KMpZxEpBqPdAJyblqD9zwoDk
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF
|
MD5:
6600b83a4f989e4b3c031c23d5dfc256
SHA1:
4cba22d81c522c1becd5399e35d3f27cbb3281b5
SHA256:
48028583ac91ad816799d76f028589c89bcea00a88b33126956bcf3234655932
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHyMV5WUaRVWevTGczb6zlAzQXoa8S:3KMpZxEpBqPdAJybyMVQU0wDUbelNXoK
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF
|
MD5:
f7cd66e8e4aabb81000ce9d538484e5b
SHA1:
0b298841aa93ba18895e90e2fc5e0f2df749a0a7
SHA256:
09844d307193a9a286a31ab95784cc792c656d98abb56c59eb85e5f712eda3c0
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDH2GF5311aApVMG2MhftQEuL3TeDDeaiWOUM:3KMpZxEpBqPdAJyb2QjXpV5Q3cDBov
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF
|
MD5:
ef4db71307e3ada9317a7e53eaa83286
SHA1:
5a01735ce11d75980f753cb800d4fefd85bc40bb
SHA256:
f54be636d5fb9382f6c197e0054c990dad067612dffcdd1f0b8b817d770d0e0b
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHoAQB7eNrjnzCB5FmIj5HcURXefOYX5:3KMpZxEpBqPdAJyboAQB7eNff0tROfOG
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF
|
MD5:
219d86ab0ba13b9ea7ee6c5b9f6a0c2b
SHA1:
95bc2ac0192c3c01547d6f6478fc7de4ab4ee324
SHA256:
244aec2e30a4c75968390029c8297f7ddca8b0c78e61096d301878ccb62dc22b
SSDeep:
96:532XOHbVxMnmcCuBgyzpxKbM7iZUHZ7k/6:NRrYzCuBgyzDKwsUHVk/6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF
|
MD5:
62284d3c58037b8e1932bcd128bc43aa
SHA1:
911f08e9cefb424d766ff2d81fec512b142f09a8
SHA256:
1a1b7a1bf69dbb26b32c5a5773611101e0b667adfcb771c94d212a19b5ad485e
SSDeep:
48:WweVbN+8VQGzLa4qIZWmo9dU+873mqJSsuqTAJ47RQQrRuCoNXT04:lQbsUZzLfqIcx9LoW6uL/4uCoVj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF
|
MD5:
551c1d9031d14321b93187caaac0e16a
SHA1:
a007e9a99cfa7258aa245ac69c1224da83fb65e4
SHA256:
92083d0e2b0e9883db7d2f15d240e4d852177eea486286067ad018bec13a70c7
SSDeep:
96:532XOHb+BCzEZ9Fk1qpiBL4Oj2gXvdc6jf0h:NRWCLB7j2YF1j8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF
|
MD5:
588bbcb94b17459722b6a3c44d297771
SHA1:
fca6ffcf89f770ea987e5aff603743557382a1ab
SHA256:
1854c2d0fd2b73927f1d0886ef4b0db84a7c9e703b966d0555af25d7b44dd79e
SSDeep:
24:zOsWIqk5xOwjNPZAVNLTJmZr7gxea3E+Q:zmINOkZAVNQrEH0+Q
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF
|
MD5:
b8137a481169e663a1d1fb3eb4b05c9c
SHA1:
3c5924d7803161e15cfbc1cc4327096b104779a4
SHA256:
7f7cb8b057ff723301162f3b42a17636392dadb474c5787526b6436258b83530
SSDeep:
24:eT4B00noo4W9MDdBdBzUN2+LVInmgH+kxsLwMa6:e200noeWEs+5JS+kaEg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF
|
MD5:
a2a287605492965e7e6e3293195c9f1a
SHA1:
e013da848e5726beca5fdf16c5ef1e57afcbae95
SHA256:
07fafbd3629f37957195a88b37317dc3be7e0b7fbfa7264e9c21a03507df3f66
SSDeep:
48:n2BRbN+BQ5TazNVjaTW1josYLKwn8lC3N1mS1AVXkXZJXeZ:2BRbsM2jaKjo3Hn8lC3Z1AVqYZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF
|
MD5:
e2817f3e582eb07c9744e1bbf762e85b
SHA1:
6f6ae60b6ebae779a36d7123e2188f3a341e6622
SHA256:
01997bcae17fb6267c0c43b6b5ea409871ae6d563ac78b48c7706542b5856ae1
SSDeep:
48:6NKJ4Zy6jwqgE6fAc0WQxt6b2zPpXbaIzXoIZv+8ri9aLk9C7:3J4Zy6jwqgEe0J35hr3zXoIZG87O0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF
|
MD5:
2880082d8815a65b108f334ee97070a9
SHA1:
ffa3b70aa2769a063acde94e0e555bcc2aab4b18
SHA256:
7f9290c8cfaef03a6954dacb394bcaf78ff1d941950cecbc7c09a074c08daabc
SSDeep:
48:3KMpZxEpBqPdAJybCDdwAaN+DsK0R3jP1A2:532XOHbCLa60djt7
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF
|
MD5:
5c5f691af0e9200ff205462cba7dafa2
SHA1:
449ae3be09a4a3c0b52c378cd5c990ffb4e5af33
SHA256:
6ff14e595a5c8215a094f8e8263607257f99f6863b805763891a7a38879943bc
SSDeep:
96:532XOHbjawZFGx7LbHJUGbfdGvZz2ksg6LcjifDgOi/2fj4Rjb3:NRShxCGbfdcZz2NRIj8EVKG3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF
|
MD5:
d7c687a1bc949afd371c35670da519cd
SHA1:
2d5eb35592f6a4f073fe228f2e4a491c1996f606
SHA256:
17333f500523f3f2c08d62d5ff80f13916ebe3316d4f72f25ae3b540ffd6570d
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHX4trWvNz8N9yUh0zW4vSjrXgHahTGW:3KMpZxEpBqPdAJybXjlQuW4KvLTGW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF
|
MD5:
5af2f25a2569a22fd4e587ba51587e7c
SHA1:
f5671e84491c763c21e655ebf280f687d2a64088
SHA256:
57b5312f595ebe521551c4923ec683b597f2d82fc1761c7f8c70534c780f3552
SSDeep:
48:0IHaeLjmABpOKLI2pgVG9vTi1yHBycos+om5YXTbIqaPW/4/lZvP:x6e9BpORYg0ri1yF+o0OvIqA/fP
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.wannacry
|
MD5:
658705dce1c1428a80bdcb9dac5c72fc
SHA1:
e33b88fb4b83260096ba58f8cab000d9b1193f6f
SHA256:
2952f9b56e83c2056e991908ee082a7b68bcc82b1e6fbe6f840fa0b9fcd8bb41
SSDeep:
96:qW+mUGUXI6cVQ80Qwt4f/gW0oIGnMwA9KoH0IAwlYuBAhpEwBlDWeR4cZ5u9LP0:p+a13f/J0ZGMwA9he9a0p54b9b0
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF
|
MD5:
37f446e945f0c72b84e15669b47e3444
SHA1:
72e63a12060ebd2f0abae44a834def203823e7da
SHA256:
43b44c95f14ce96387db05065a0fae86be2236e4072d620c9c8ddefd5488da75
SSDeep:
384:kOksWbcaoe1kMFHLhlQtqNTQDJNGwl3XEJk6:kOknYao8kM9LhK8TiS80h
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF
|
MD5:
784006022020a01e61feeae4b8e77fbf
SHA1:
b03a544344e442985c4744b30a045551e2824a65
SHA256:
9752b78ba92424aec7e38fe28862cfcf706587ff1a2ecd8c8345b2c632aa6f51
SSDeep:
96:vZ1frX7Oz2EQ6N3+H1AWHri1LOFDYrTl9U:PX7Oz2EIH24ripXs
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF
|
MD5:
e6ac439f91ccdfd631a93c11a0371c03
SHA1:
1aac0f43265aac311de483713b3f0d925e0f39c2
SHA256:
5d6cb72a2f587b40985950d99f3f0a02b55266249f3cfd67b741c980b1e549b1
SSDeep:
192:bjS/Ho3TJQl9A5WdWMHnu1RDn3G1yGlNbe1hIg7lhY7:b2/HoDJQw5WhCRn3GPlNK1hI2vW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF
|
MD5:
63d2293818c53b7a70fea494a7b19c88
SHA1:
51bcfe5ce1599442e22c108aa18f3350c8c698f1
SHA256:
5408e224a433acd9c70c4123d6f49ff094ca20870b3127f5ce0326ab3d44968b
SSDeep:
96:tB2E4SDfMJeZMbMqVs63UclSQGKJKv7+BzRMeDuccjPYQKa5AInNSQ2I4byXYwTI:eNCzZMg29PED4zRMeDvSPlKaHSQZzs
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF
|
MD5:
2110e98a6a51822aa2aec750f0a809c2
SHA1:
4f55826bee1b95a5fa4509b3ed079be16591208b
SHA256:
649e75d65ab090a605982933e67741456e8f6cfc4b0c3e2522c3a7f4ab215784
SSDeep:
192:k2v7oACckVyzNNDm722ZMwLLW7amRm8dFYUWFlM8NR7Gehhh5+ZDz+:kzATkIjm7PZ1LL4aN8d+UQDNdcZ+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF
|
MD5:
8a1e4c9513735f8404a4683ecdad8eca
SHA1:
dcdcac2d28147a4eb2a9d82fc4bbba68b65ad0bf
SHA256:
1af631cc5626e7aa62815f0d9a4ab4120b4af5415ad758262e68769e13eb1434
SSDeep:
12:y/TSs6wKfzGNL9jxZr8sHKyb41gbybu3rGiqCsxmcAhkkGtV4yengjjLP:w6pz+dzb41gWbu7RqHxvkaVVe47
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF
|
MD5:
b944c2b1934f4bda2a2088731d0c28cd
SHA1:
1adfe8efd677618db79373f0a8e6f258753f13ac
SHA256:
8e1a336e5407f19bef6b201f662261c6c866c629f91344be60ac374314f44410
SSDeep:
12:KDTSs6wV0IBZ/6r3KPRv06iwmVGd4j2Xk/IlzmYKVZD9AQT:K768FBZ/3RLPew4jOkQliYKmC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF
|
MD5:
d3c66033ed4099f918035571004cb105
SHA1:
156b4e87e902009746b205ab8164a96b9f55a64c
SHA256:
08d39cd016845774c11b0ae2ca8396c19c92661c595b7d4f279b5cdb76892e4c
SSDeep:
384:8NDDUHHEwDzQ/PZD43PbRGuei32h+GV2Pkym:85UHHEwDzQZD4/A9imh+GcMym
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF
|
MD5:
616036ede36af074702b6f7d284fa7e6
SHA1:
69e371968a0dbb058a2feeae5b1ef2d50a71911b
SHA256:
55198aefcfb5aace6b6cccd2d211756a28aed4665d5844991855cb4eac5a370e
SSDeep:
96:0ewHiqN5ongxdmN3xT9HgRgtFOqTgFz21V5:0ewv5qDT9HgRoTgkB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF
|
MD5:
e0f528ddbecff0986f05ed56ffd0f807
SHA1:
5f6ec1236b1ada66b4c5e47a193689d069ddaacc
SHA256:
bb7491f9e8c843219f878f380e9f9844c6d066383ff4b1c343d0b6603b321f24
SSDeep:
48:3Zt1P9vTmjDYZcUeIumiOfmmsBD3Z6AXyD0YHxcmdQBNbUXSb9OQ8/LVBWeETiYs:31aucU7sFJ+DVRboRUXQ2jTWe3LyY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF
|
MD5:
35209fe1370fae72dac9e44ee5cb79f8
SHA1:
6913a48a6f70752e56a97bf8f4fc9a40e936ecc6
SHA256:
3a68f2dd02b8f10ac4848795fd54599040aa8b89e8b69ff41d5742b1267f6432
SSDeep:
384:ky5mIqjRg5NrGqQEF0L+Ce+zBBfr0KM0DPyV30:kPbjRqHluCCNfr0KM0zyi
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF
|
MD5:
168f0bbd9476f120d4534cc584361b63
SHA1:
e451569e476f89f9201244acab6c72ea18977597
SHA256:
ad2d516a4574879ce830ce70eae7be83feba8853725ad02aa7075810fc8e68ba
SSDeep:
96:DSRxCNhggK67CIsFwl8/Uir+zeImwq3cZZh+DFHYZTX6KjQ0qeHLhqsF8GuO:DSbCNhgDJImwl8AG34n+DAX6Kkt0L7Fn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF
|
MD5:
aeb9d39de3af71b2f4ac861d175253ca
SHA1:
e28dbafebbe39264a557e7fa70dcb942a22d79db
SHA256:
19b17918ba9665b373f7e7ef933d094537e2c0bfddf2a1d284c3d1ff528b79df
SSDeep:
48:66VO43ODCC5U1iwy/JcQlKXBA8OPN3t4cZizRZyu2x6YbiUimJqyL5d+QTOvIm:AFRwyxcqKRAtdZizDyJxbiUNJq2dDTwx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF
|
MD5:
077eca98a97a1d736cb750e779edef34
SHA1:
2b47221d2694b12e53be5cc8e6ab534c8064c7c8
SHA256:
e3bf5e7b1a48df2afefde80c523cc48c5978745aec8dda48c7042ca607a8650d
SSDeep:
192:eTnM30TGBZi2ES6P44ZiQbtvETRcuuP44FglTQ39:oM30zU34ZiIt4zr4e5Qt
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF
|
MD5:
64fe4c9ed71cba0d1049dfe375d20f09
SHA1:
8713195cbcd3f594e38de7d75afbff78f7f358d1
SHA256:
192cbaaf99cf59ee22a7bfe34416632d84683dc9181f620b70d99838f77548e6
SSDeep:
192:p1KvlbQODyDoMRUUcAwiBqYxiAnrxoG5v5vPk3ZY7s6r5+SAVwqESLMV/frHLS6o:po9bsDoyUUhMYtDsmx+jHLw/THjo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF
|
MD5:
695c9a4550d368bda7cac63c8c82644d
SHA1:
3149a83f6c8974f7dce015b378c719f02d6d08c4
SHA256:
998c609fbfe717a2237403046289598fdee57ca6022aecb9fb64be80e124a616
SSDeep:
96:Kx86UATB+8EynvuY2SlUCl+cnhJmVbvZNXj7TGwav/PtZWRvXxu:KxeAFtvnvL0YJebenPXWNhu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF
|
MD5:
689f64f2b790e47cc306c33bdeb5f6a0
SHA1:
f6b1219c005c4ddafaf58ccbf2604a9e8ded4d30
SHA256:
baf80edbe59153094abed2c1c2a7a201057118c4d2da7331398ef092d330162e
SSDeep:
96:z2gRE31uCpxRJF0njZKS4gjpm/WTRS45i1PNAEB8fAusC1zYR5sShEAGW:al1jcj4sPa9BIFzYUSuAt
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF
|
MD5:
0333f9d111165856171c751b17ae2267
SHA1:
7fbc17cde645be6dcd6209d542abb195662d82e0
SHA256:
e7872b1d26e617c58660c4cb694c98e2a3f660bff553f32c4866aaf8cf8b5196
SSDeep:
96:NuMBpe3h5NlZJxEK8GmzLPtE95y7vNRrf9hg1Vmz5J+:zetl8nXQCRAzmz5I
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF
|
MD5:
06091b42a049bb915e5045e923718317
SHA1:
dfb5553eaaf750ebeaf5cc438a98afad3392fa82
SHA256:
30fd70dc6d874fa00de4c1c8c4554fecef00c3b2cb138129a783d73bb8524fbe
SSDeep:
24:Es6llTWXigfchEoPB/PFwqRYMzWx2/j4ywneDs48uVcSecoP:CiLEiCBVBzWI/j41qZthB4
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF
|
MD5:
60647376692955d4089487b7f2625f64
SHA1:
cf218975ef783bf19d405e1c2f544f6859b7f606
SHA256:
2a30e1bdb06c65af27bec0d3cb9dea682a3f031aa176d502ae07415e6644de5f
SSDeep:
192:mU9taxix2Q15loHPlPJYcXCYp0K4xkg4e3:D9t2iv1/abYcXN4xL3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF
|
MD5:
c5570addebf4687676ad135b2657d3bc
SHA1:
8d95fafacd70c3c934cb942fbd65a3e4f88ae6c3
SHA256:
f45de6d8766b698ec08a9ad710dcaeaab41656da4c0face640e8a11cda721ff1
SSDeep:
96:dAeeEDQjschtaE+R6CtTQUApAoVRj40ZmITQxMstX9duI3ZKHUe6gdRUonahZs46:hDka9R6CtZAmYMwE2lIXe6gdRUoahyo6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF
|
MD5:
f08d77106f3befaf652c76c0a8eba2ad
SHA1:
fe96df3708565a561f8a3ad0aa69ba04113746af
SHA256:
688618a43d4493eee4f75a7ea26f397e259502bfaed0c695a9f7d2d190251590
SSDeep:
384:pwqy8xXIX7rFxniAvQvunQf9kMPwNXY+PM6T:pTzt+Hv0uhMPkYeB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF
|
MD5:
361d24bef4d489f9c99f1b33a5956b6a
SHA1:
ed256943316fa614af3525ae951db4cf97e40b73
SHA256:
355e25600f1bb2558bf551533b8b3dfa8ff9c6a1964ff0b723221f0791da6220
SSDeep:
192:8gxrWINOvg5Xku3XRjJz/zGuobasreJ0dAsWx6Zb9:vxrf75XkYXRlz/zG/hIma6ZR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF
|
MD5:
5c3a73f692e181a70b6c710f7e1425ac
SHA1:
953d454584a2a1c93537d52b080840b92106a958
SHA256:
0fd4503056bea0a96c7245e6ff5ba10c62f045d26e70f68b43679f1111f8d13d
SSDeep:
96:1OAeeEDZPgTdaNX641q8IDg+Vfn+fzAe90EcDP7M0YqX9pVMnX/:w5gTdaU4g8IFwFWbWX/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF
|
MD5:
1bd35d074764c36026bbe9e8f04ce59a
SHA1:
7543d63578a17d195043a9ed83e684523b3967d9
SHA256:
c8942c4fb74dffeba0265e0f2eb95fec3e32c4eee374bbf183a69de54b961614
SSDeep:
96:4AeeED2m6WkMNPcswF1R3x8DrFwTrEmXAsFZSzSS7Klxlt4yMNhOpe:sylSqFsZwTrEmXAsFA3Klxlt4/NhUe
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF
|
MD5:
00b7568ec9a4eed812709de4d34d0bc9
SHA1:
2ae7659ccaabef79e949534bff0f95203c641f79
SHA256:
a3bcacafab85002e9d12aa691fdb3bdf4dd7acd16d3d47c1c379a00bfc78b08e
SSDeep:
192:8MnmlC7b/O40pnyJZFDvtgup/f6P5yZkev4UvSXCLU0aMRBlq:82MubBSyJnDvfpqskeCelq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF
|
MD5:
30c2403a89b80836ca64bf02902e4786
SHA1:
2caf680642809df676ed9da4aaa1630ee5740008
SHA256:
3184c9d23b78c56114dd4ca13795f295f11bc2895cae788c28544735275348dc
SSDeep:
96:1AtekA9wvTObefsBvyOA9wvTObOhXM+J0QnRqqpH4dhdUHiezcdus:+tjTO8ovyOjTOi84d4hd0RAus
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF
|
MD5:
b67af6845d97551dc3c19833d5996111
SHA1:
cbdb5fa43fba885a45defdf893304b37cb9ddb5c
SHA256:
363e1805180f677bc4183d80b993813f8e4974f015dff840cba928b2330fad75
SSDeep:
96:vAtejRyPHOrwsQHqbUd0dUrZxPYNFIShEh:QjP+UZ0K3YNFVeh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF
|
MD5:
4cf4fe4afa4b1e60b3d26399e810a478
SHA1:
be4b991e0111fcecb80772e3b3caa634a99c312a
SHA256:
f4351ad56d2116909ce4277d11bfdbf9c5e8a4abfa0247bdccef970479598f93
SSDeep:
48:maoriXUtC3nmIe+ye3Et9yDTigCl68Mo8xxLM0o4aBEd9l+w4D3L+loq2V7ziB8M:FE8nmIeOU+CgC0M8xxL0t03Qqw7zIzP
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF
|
MD5:
12ac1dfeb10da9669ff36e5a18afda1b
SHA1:
c5e283bd538dfd09e850e51146438c4a385d1472
SHA256:
a4e10fd448459f98bae4307f646242a07439310768cd05eca79f962f45461b01
SSDeep:
192:e3pFANXaFCesxPwfuO5gdhp95io0EVuzmWZ/Nx9pFFJ/uAV05ljvjzqJ7Ipr8yTK:7NXn6uYghLioImkFxz3xuAy5Z+JWP5k
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF
|
MD5:
3456ce59f0966795afb4dc958081b63f
SHA1:
449c0d64fb79bf5e7092f5681e5b2cbb2b0d2f7b
SHA256:
782ef712ee0fbf8e76bcf4a4474ec74711c09bcfcfd73cc2a7f87db33f3dcc44
SSDeep:
384:XDmglckoyYZ1bs2EBmwTxg6GM/vJb0QFaKCcFM5hob6KYN:XDmgPYZy2b7+ccFeKY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF
|
MD5:
908007ff1414f6c7d69dbdb28be80611
SHA1:
2be9195a47511fb697bf8983e4041387a12adea8
SHA256:
191793de0136a4be8bbc6b1cf4c175889e2dcf0ab571ec26cef1fd7db96b7258
SSDeep:
384:haLfq7hxybsrIEuUDgHN68WW8TDRtI1AvEhG+GLloUaPvh856L/xMIECbw:hae7D3BDgtJ8TbITo9pLa3hnpXECbw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF
|
MD5:
54a32a1daa70d868c9abd412c38ad2b5
SHA1:
b0c62fc3383733c1cfe3552600354d102c0d118e
SHA256:
bcc68e60948d56866ee10a50d00713a048d6cbb59f6294a87806de113633e722
SSDeep:
384:hvK+Jxug/i0fpCcDh6F9q0RmxLPPy5QWhnjGVl5Xk+j0a:hvK+JxuqXpbDhsgpny5QWhjcl5X6a
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\ELPHRG01.WAV
|
MD5:
148952376ca88c31bc2c7371da3bdf34
SHA1:
412be056837f51e52104d8f8a145379cad591cf7
SHA256:
d12fdd862abda4c379719348604212a19db1d544e73d1435320c8bd908a1f3f2
SSDeep:
96:K8X1eZ/K6w7lNQGO3kynUeoAp3kJgjIzLfELe5hNxPF90ApsZHAocXlJafRP3C:K8X8/IMpnVoa3kAIzLf5hR90ASZHEqpC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0214098.WAV
|
MD5:
1e5ef9258b15f5f2e5a35ee451fbfbde
SHA1:
e40db2ffa69976dc26d87a072813d089f899eebf
SHA256:
dc1cb565152b17450f9ee4f7378582a5c104e36cec3a14309c169eadf12398fd
SSDeep:
768:ZbN+2pI/YexRU1oxgwi+i6Q4qVG/GxlxzROJXMgoLHY9uteEtjZ:5N+2pIwe7mogwiW4IGxfzROm3LSoD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0234687.GIF
|
MD5:
ccba571347f0eedb26595cb63c1f9030
SHA1:
e22038779aac75d4dccf2900306d2c445b50b6a9
SHA256:
ac90fe2f265abe71da6421973709b7e32b8ab023d2ed141e7c7b06bd0ef157a1
SSDeep:
48:3JrxO7FAMa3LVNbYxJYbs9G54XwLi3YBhMP6U9MBF49QZyqk0V6K4qYIyE4KUwMy:mFAtuJvvxYBop8F4Lq4K4IqKUwll
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0283209.GIF
|
MD5:
b33127fea903e45c0f6110c7d0ba2d88
SHA1:
ecb95f891cc3c595f2eff1ad9bdde10ca8acef96
SHA256:
3a6066fee2ba62ef25094a8d76d8dd3f85ad20861f92e57a204647938830cc03
SSDeep:
384:Ao0zLbejpsATK8GX9G4Pz/nc4VZzK90dmEk7CtoExSlPtXf1Za6OhdynnKvO1oEu:D0X6jXTiNLPz3hK9nEk7CiEstP1Zajhd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0284916.JPG
|
MD5:
ba3726c98507026a29ebe91f3ad47980
SHA1:
07fc6d4b30ce7576d24192d77b03649b496dad95
SHA256:
d114dee305416ec85920278aa7909624b7cc27001b2aaa34f477f8d341d01643
SSDeep:
384:QpAroM0iWVg8duY4NZa63BIaSt8lUz+pHZv5IvezttQIsrS8cVKHCM5:UAEfQYuBIar5xQIsrS8cVq5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0295241.GIF
|
MD5:
f8c02abdeb37ef57f6f9b4372ffee56d
SHA1:
c156d61e602f12d5ea61f18db4cea999a0e4c03a
SHA256:
ff078e77915c25c34df9844dac7ec17ead00f554b2ee0a1f10f868ac5877b4b1
SSDeep:
192:FBsSyFqEXtR3ciyQRuAG/HkWxrIX2m5Ic4VWZhchd8fhm:UnAEdtHRo/382hc4qA80
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0300520.GIF
|
MD5:
a638f0a32dcd6b6dbe6c888fe392f2eb
SHA1:
f7c045c71e9f8acd4dd23a1ccdf5266ce2e5a21c
SHA256:
926991874f43ff3c012c7cddd87222c7f78e2f28b0bb3f221f1e57931d02dee3
SSDeep:
384:xuASq+1/ydF7L5FvyPsuKChYKP3zwsaw73:45p9c7LXoswZt73
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0302827.JPG
|
MD5:
7ac33d3c6170b9a266b5b3d24ad66c55
SHA1:
0265242846a462a711e552035c17e3c97ac64c74
SHA256:
df2616113e846ac31e1073cf881d9abc78218d40445571b93dd93ef4397b8c12
SSDeep:
384:oAdQ1WcxvhkHzmuFX1DqdWEbNP3dGjtoaa1+ObZS9wykMznLsb7QSQThVvNzy:sWcMzm+FqbNP3UBo51+yA9wy9FSQTzN2
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0302953.JPG
|
MD5:
a261c9cadf8a2b3c775ba5feb8905f20
SHA1:
949b95c0d7cf74a5b2bc8ed613216e119079f3f2
SHA256:
bb22b878190490049dfb19dbe161e303a1789679204d187944e379d19959ce3c
SSDeep:
192:wIGSuhf9BHz/cwJBssnGhOLrHR2ZYkw30DENtKhSiz:XKLz/csBssnGha7R2rwkDELKh7z
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG
|
MD5:
40b545b3d416a410823ffe3a9e8fbd8a
SHA1:
f174944167b9bbccbcee26a31e0c5d29f6a5e25d
SHA256:
03b95e9b564bffb9549f37f7673e64f0ba669b0f78f59a440c718f7cedde9311
SSDeep:
384:M+b52fnPxy6yE1r5YxQg12XD/2MwIpQODHPcFg9UiWRqKUajF07AJuGJNN4I:7d2fgVE1r42XDDwUQgPcuzWgCF0h8N3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF
|
MD5:
40c42d9091dc592f18db06a2146a8f17
SHA1:
03ea8a9c6a72e56544732a9402af18232fb8b445
SHA256:
5553023df8937faafbb9db897806a24613172f3478c01c8e0a387c68203012e5
SSDeep:
48:0+k6bQNk0857CJoJZ4Y7Sw2lmeVbss9GX3XOiDI+9TlHMJ9xiF:9Bb2D85WKr2RV9G+iDZloxiF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10254_.GIF
|
MD5:
ec29c9c712e666296923d420f2066e0f
SHA1:
169320df20de6229310a0ebcac5ab9c55c8da932
SHA256:
f4646bdc38afeaa6d7e7b8738229e89e16eafbdd60b36dea666d17b8dba79e58
SSDeep:
6:HlrYMcq0RNaxMcx0XckpxMcxbV3/wsQE+NgNcRKEgCzSRwyeH5/G:HlrojAxhkFxd/wsj9c4azwwPBG
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10263_.GIF
|
MD5:
eb14b6982600f97c8deb0d2148f141f8
SHA1:
8a063634056ea6da51a34c3fe6b62235e9c9af6a
SHA256:
61c77c13b334be9e420a4711b0ad5572098aaf5f5a027e0a4e9971da9518ca6b
SSDeep:
12:PlrojAxh4bxdtTLMoenwp/SW+g1DvuFzw7zw7zw7zw21Bj3uN5:trPsTTLMoiySyvu9uuuXm
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10264_.GIF
|
MD5:
45267c594f60ef8e8e1e13b2497231b4
SHA1:
7424a867f9a2957d9b2012887d4d68ed638131be
SHA256:
d5744863a9ef7c7fd3048c44cdcf9124fb99c18e787973c0801ba02b045ab58d
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+Opk6XRU+mV35VTa/b:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/wsx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10265_.GIF
|
MD5:
25eb7f858ee06273a5f3c6cf59399510
SHA1:
1b4298541a209c06828852085af23a4c9da1a3e4
SHA256:
a23538583357af57fc5577a7e97b3817b0e8687e5c274d2e722f44157d41d76c
SSDeep:
6:HlrYMcq0RNaxMcx0XcNnucMcxbV3lhOEj+NgkB4hIllG2PSTHgfBgI/Zpwq9HK3:HlrojAxhNnukxdDOo0lMHu/jXW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10266_.GIF
|
MD5:
7c10c2453539f0bb607eec2d835f953c
SHA1:
699fca949ebbb5e771ae36a3dca6941886f208a1
SHA256:
991eeb61ffd5ea8d2b7e023bf1d0e5d78c88a830b2c58b11e1e774599e1526dd
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmB4stE83+xB+n:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10267_.GIF
|
MD5:
0887556774be947a5d5cc28ef5103f6b
SHA1:
6fdd99b0d24d1ad3b1d9d894c35dd7b441b4f0c7
SHA256:
3b881b9f468f3bff2af610200398eb508b1266814ac3cae5812cfc009ebf975a
SSDeep:
6:HlrYMcq0RNaxMcx0XcNnucMcxbV3lhOEj+Ngkyng7Z+EDrTt0icUJw3c3m//T3U0:HlrojAxhNnukxdDOo9gl+sOY73a3U0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10268_.GIF
|
MD5:
6b6eddb99200b31334c50c9982901993
SHA1:
777d37c4462dcc572f34d6c9ae5437182dd3a76d
SHA256:
eff501af993b35cf94e168d69fb277d46a0f4f61b4fc06ac0789a5f91f59d02f
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmEHvSE83+xB+n:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10297_.GIF
|
MD5:
ea12ac308b50a9291f2cba67920377a4
SHA1:
1c61d374f1cb1e66363f889363b291efb8c824ee
SHA256:
095281433e52aa34b586083e4023e6e3882389c67450e4516e7bcfcbbd8d0352
SSDeep:
24:trPdDUUUPVXbmg8FIxkKAKgOfuuuuuYd1ZRhNczLJ6cTxl:wUIC7ukfKBfuuuuu6wN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10298_.GIF
|
MD5:
1934f52ed43f9e2ec87fd3f1575f53a7
SHA1:
f0891007b114bc868e71a9dc4442a5f6fbb7790c
SHA256:
ace0e1f582ed00dc8dad2599dd9ef2286edaba22f38fea854c03086e5c43f50c
SSDeep:
24:trPhCR23MuiKk3SON5u9MVFQ1ExyVFSLL96JY2uuuuuxbAELYFUIlmNp6Z0:LCEtiVzru9MIExGFSn9IuuuuuKE2fmNn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10299_.GIF
|
MD5:
11d7c342cdb6e8df20ef900337edddee
SHA1:
bfa5bf5e45f25942123e1d8d696e819c0d427b9b
SHA256:
a5d4ee9dc78c8c02d56526c904d8a5524db50746068bb1f813629458aa420e04
SSDeep:
6:HlrYMcq0RNaxMcx0Xcb0McxbV3/nCrkuE+NgkoaiqPRCLFsfr6CzSR+9xFThh1yb:HlrojAxhQxd/nCoYRPRQYzw+pb1yglE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10300_.GIF
|
MD5:
f5c5de053d9fadcc88ea484b07fb2f03
SHA1:
40145d55aea0b6245ce9e2f286c5c8b8d6730bf6
SHA256:
44e294e3ae5ff341a5fc0b1be7612c50fdfbdfb356d3b9d773062c37af50ebaf
SSDeep:
6:HlrYMcq0RNaxMcx0XckYMcxbV3/IGggbCzTrzaSRwKvS0eEVmn4L+CmsZRPn:HlrojAxhkoxd/94zawZiHnLsD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10301_.GIF
|
MD5:
022085cac39f2c776832cebb07339fd8
SHA1:
82d0836685dcb089ba40a34c5a9d85929ba2172e
SHA256:
05919a642519ac65530f7895049c64abb3bda342dabe5df42617c5c17bb39461
SSDeep:
6:HlrYMcq0RNaxMcx0Xc/TMcxbV3/K+NgN4HiifL8mls07Usu3+F:HlrojAxhpxd/K94HdnsMUduF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10302_.GIF
|
MD5:
d20b85b1d001476967e7f316734a52b8
SHA1:
9cefa5f2991325df80de95454be8c4b65055603c
SHA256:
5ac74c710cafae15821c40e49e7a62e674d2858f29751055cf683a5fb7d1cf9c
SSDeep:
6:HlrYMcq0RNaxMcx0XcmLMcxbV39n+v6NgrxgrRLv5LQCzSRl2mQNXs0U3HL0J:HlrojAxhmJxdMWrRLp9zw0mQNcHL0J
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10336_.GIF
|
MD5:
6bb2549ee2519f14e8c3830764b8b99f
SHA1:
9bd13ed62825403fd6292f875eb7d4025ea09726
SHA256:
bef07414e2c5c2b514a669d03277359a6b2702491d5a83f1f9a6279b8153d2c2
SSDeep:
6:HlrYMcq0RNaxMcx0XcZGlEaxMcxbV3//6Ng2u0JopJen:HlrojAxhZyfxd/4opJen
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10337_.GIF
|
MD5:
0e47f558fed4133ed2b74d5ed1675f4c
SHA1:
67b4c77b5272879efbe745568afbf28d33088fd5
SHA256:
c3f9272d6b9c58c3ec1c96ffe760eecef778f3404a426a12fdeb77034413ab12
SSDeep:
6:HlrYMcq0RNaxMcx0XckpxMcxbV3/wsQx6NgDbgrCzSRQn8Q6vfa:HlrojAxhkFxd/wsLOzwQz6vfa
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14513_.GIF
|
MD5:
2c55c1327fed00b26b260f3245b1358f
SHA1:
12ebcc256d9126bad030cf2cc8fc6e51cfd5152a
SHA256:
a093e8b47238bb1a9d6fca4686c7dde112fccefe38cb8f5e9300b0693364503a
SSDeep:
6:PnlrYMcq0RNaxMcx0XcNcGMcxbV3/wsQE+WfDQzPSxpvj/e4:PlrojAxhNcKxd/wsj/QzYp7W4
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14514_.GIF
|
MD5:
d2b97eb48486a368a07f6ca845270e32
SHA1:
66d6ad7d6307223bf0cffd509cdeae59d5169998
SHA256:
e80c3148fe9a43a08f4c69d8c9088da54073a8a1a7f404a043de947bc89b7e86
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3sm6bE+NgmE6w0RKsMJg7n:HlrYMcq0RNaxMcx0XcdxxMcxbV3wE+NP
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14515_.GIF
|
MD5:
317270cc32442a699f43f8195f7db254
SHA1:
9445889f6394201b77fd75d93b4b81f57cdeb372
SHA256:
2edfa560903737094adff798ad51118dc2b35d8255d19c3f22c024c7942ddcd2
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3sm6bE+NgmrQ0RKsMJg7n:HlrYMcq0RNaxMcx0XcdxxMcxbV3wE+N9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14528_.GIF
|
MD5:
6e674d3a71817fb53c5058d966a4295b
SHA1:
03038b23264ae4711582f112d1fefa8f8d9d39b3
SHA256:
87052a35bb2e10dc2409c336cfc908548bfd6c347cc400c0e9f36c031f262fe8
SSDeep:
6:PnlrYMcq0RNaxMcx0XcHMcxbV3/wsQE+/38ZCX0XHHCkmvtbTDZ5y4Xo:PlrojAxh9xd/wsj48ZC0Cbnjyp
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14529_.GIF
|
MD5:
3e50278ac1923bd319df0364f053c84e
SHA1:
35000803c151a52fa63630d4a1a7bab4ddc01f4f
SHA256:
adb2acfebf481db7cf25302954e6f66213a49d2253cb6ca14cc111eabffd8ee0
SSDeep:
6:PnlrYMcq0RNaxMcx0Xc79YMcxbV3/PuRdQEPe/GLJYQylBHTEe8Z:PlrojAxhGxd/POF2/GWhDb8Z
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14530_.GIF
|
MD5:
32cd97f66405737386df91f4fd60c3e5
SHA1:
2ea261e8caf7df71c1638424d410f7910e48ba59
SHA256:
0a0b1382ef4e54fff4c3f32e8847281d572653049d0b49280eb97499bbf1e119
SSDeep:
6:HlrYMcq0RNaxMcx0XcuQUy2YMcxbV39n+I5vjdhquCzSRYtsfIhpqU1VGR2KxRuP:HlrojAxhsy2oxdMIZozwAhFPGR2Gu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF
|
MD5:
9bb5594bc9192bd1182958b45a9c0011
SHA1:
b5a9d3c7d3a70936c0bbd89126adb9ea44da135c
SHA256:
0ddf27332854fbc5b2d718e79c5bb711db45923682d72c3fd18f22fbf384b463
SSDeep:
6:HlrYMcq0RNaxMcx0XcmLMcxbV39n+IQaqnSOVFf7jPUG9jyJK1K:HlrojAxhmJxdMZVl9uE1K
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF
|
MD5:
19cca6b4d2f9c4914dc64526b4700a83
SHA1:
5155d49e98c556d279148ce88c222c6de87fe0d4
SHA256:
d42307fffd5dade79ed36c4271ac5747acfe0d5d6e1effaaab70aacb700f725e
SSDeep:
6:HlrYMcq0RNaxMcx0XckYMcxbV3/K+NgNJWRJtEOSR9rLeoEGj:HlrojAxhkoxd/K9JgjEOwJizC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF
|
MD5:
ebc9170719306d07513f809f148e3efd
SHA1:
0d484bc97f5acc1d92eff39a58d92e4252f11c64
SHA256:
3334dcc63e85b8cacecb138d93fa12e720b317e5bbefcd2899f87d4d090d7ae2
SSDeep:
6:HlrYMcq0RNaxMcx0XckpxMcxbV3/K+NgNJdQCzSR9rRNrNCH4Tp:HlrojAxhkFxd/K9Jd9zwJI4Tp
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF
|
MD5:
644d36e18fdc4486dcfeac56598b06b1
SHA1:
949113224b1a2a01b3da09903eb973e9c302c2fb
SHA256:
d79f83c2461e515e6140d08a2f747313dfdbb80da09347b1ad2beea543e8fc38
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/L2QE+OpORAjE8Dh4ky4nd8g:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/++M
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF
|
MD5:
c6113200e1693ccfa9387135f9f1cc6d
SHA1:
5cd6bb718f25ac0198b2c5d7d564eb077faf23e4
SHA256:
1e5de26fa9adba0a8247816e4a65f6a6f98fc754313fbf640aed4c8d6ab29772
SSDeep:
6:PnlrYMcq0RNaxMcx0Xc8MYMcxbV3/K+LGP3chEk:PlrojAxh8Moxd/KmUshn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF
|
MD5:
edcd16c1f25899e30ae07c7443caf5ad
SHA1:
fcbcca8fa940a2de99bab319eeeecffed3f6addc
SHA256:
ce7580e073d7df35d52d3be94b6a5c5262ae1e79349eec09f289c51677cb0a03
SSDeep:
6:PnlrYMcq0RNaxMcx0XckpxMcxbV3/K+FGjnrdXxQrCzSR+4uipFb+Kdxog:PlrojAxhkFxd/KsGN9zw+4tpdxB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF
|
MD5:
d35844c6e9146e2805efdda87e1b58a8
SHA1:
724554fbe2eca3c60a52b2fc8268b1e39b2bd4c5
SHA256:
e357a6729903a916ff3e461fd9068a7e160c0e541fcb492a585314f81e9b33fa
SSDeep:
6:HlrYMcq0RNaxMcx0XcZGlEaxMcxbV3/wsQE+Ng2o7lBsktR55/2c4c/n:HlrojAxhZyfxd/wsjmml/rht4u
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF
|
MD5:
38753f938f14ab5aa0666a4fbf9c274d
SHA1:
df718fcbee30482e30df70bc050f7bc3e7c82bc5
SHA256:
3bb6b156d6eed29d7f3995a3ec96fbfa139ed1ca5aa1aa71ef775d301d5f5331
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcW7zwqjMcxbV3/NE+Ngmiil1QdsRzxeJzhlzO:HlrYMcq0RNaxMcx0Xc8MYMcxbV3/K+Np
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14583_.GIF
|
MD5:
467284a5dfda70d6d53bcb777634a2f7
SHA1:
f7ba099d18cf11313c05205586967a7435736076
SHA256:
a6ad857c03ba1c4fa22c95af42df427c97dc0b13d7991a0c28bda36693e43a9d
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+NgmEtvNsL+m4FAwa:HlrYMcq0RNaxMcx0XcdxxMcxbV3/nCrV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14654_.GIF
|
MD5:
762806ac1f62de7c91e3dbb9153d3a6a
SHA1:
0cd554e1740d11dc18397744dd788c650c9307f4
SHA256:
3a0ee07765033c18e77da41501cfea66d620d2cf8049f9635eb052d7c03ed06a
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+OpOEtORBFRU+mV35VTaT:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/wsg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14655_.GIF
|
MD5:
9c243a6e4393f209cba6e1cd51b3d496
SHA1:
e8d2e2072ae65b711bd9c181a0c19d84deba476d
SHA256:
3aef13677ad6dbdce8a07cb0ec5b3465ab4db9e9faf4fff46faf3f6b47b5ed29
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmE6wGREbzw:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14656_.GIF
|
MD5:
5077332c0455b6fd27f893f8dc399ed8
SHA1:
9940b53c4564b3f71e0583fc7e4a742bf8427a91
SHA256:
dcf7b114a7f7864ed5af97fe9f2bc370ca49117bac3ce0ff4d9d25a52b4ec90b
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmitORBRREbzw:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14691_.GIF
|
MD5:
b80872645f6a523e374b4366e06bd743
SHA1:
756da2ada5b70afac70efd92a4b0a92954dbdd76
SHA256:
f05b80130f368e06cf5b06c1b0a724613668d0045e7d9c981eefb4a667e9af7a
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+OpM6hqIRU+mV35VTa/b:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/wsJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14692_.GIF
|
MD5:
d6e544e30f721dacfc209ae35397e3b9
SHA1:
914014cac19e5e31a342216ebb4f5ff8a66c1a75
SHA256:
b2188ddec90be5beb35aab7aa6e846ea7da5d00464e4439bff5a4508102d335c
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+Ngmiu6hqgE83+xB+n:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14693_.GIF
|
MD5:
79ad2b9df86e012d6eac10e85dc5f99a
SHA1:
65b635e1a5a3fd0894b943ab556909f59b61cfd7
SHA256:
088807768ee3d8568b5bb64c90b39db911827e22030d5a17eb13002ce25c255c
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+Ngmiu6hq8RM/WO:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14752_.GIF
|
MD5:
37f7106cccd7ac0effb889379eb98956
SHA1:
24d7a8eae09611779a66fb55e3abd635796d73cd
SHA256:
23ad15a1d33035ad37a2e4d018caa991dc0a9ebc58cac6431dd1c661809d221a
SSDeep:
12:PlrojAxhUfxdMaCVjfPit42CoxSqzXnCezw7zw7zw7zwS645BTFvMwThUqgOL2P:trPU+aqLPit42xbCyuuu7x5BkHOL2P
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14753_.GIF
|
MD5:
1296f26845058ce181423b4ed8af26e2
SHA1:
1ca5e3fcc456f76d3f63f1da37f2c35f684e1e31
SHA256:
fc1dc455c3db88b5e0ca65c63992a7764ae0a3115c2235e26f49481f98987855
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+OpH2hE8DOwr6BsH1q:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/nCO
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14754_.GIF
|
MD5:
ee83ef967ddde83243864b867a474d21
SHA1:
edaf88c72de053f1caba2ac602b1d0b2ba7cf5b9
SHA256:
9c60366cb012a26de36f076d539072e6e2fc3908a3ea757f3d0d8ec6bde89cb2
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+NgmdE6hRQ+81Zxf5i:HlrYMcq0RNaxMcx0XcdxxMcxbV3/nCrT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14756_.GIF
|
MD5:
0bd603d240e5a5923390924cd946b1e0
SHA1:
568cb8671952c800c0a57e608a1eec335f2e2840
SHA256:
9b42c848ef61dcee2e8507338a3118f3602e80d6961f8dd551d7b91649dad735
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcW7zwqjMcxbV3/NE+Ng2FSQeI6yTFxn:HlrYMcq0RNaxMcx0Xc8MYMcxbV3/K+NH
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14757_.GIF
|
MD5:
70a01ae25439c91f1fcb9c700c6b2e73
SHA1:
c8a40c5694401e4ae5541430e41f996107ef12d6
SHA256:
04c1ff074c7ab0a4cbf8452c3f9c6977e64efb93a43eaa6d64c4fdb5074615c8
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+Ngme1RP3XE4IB5Mz0:HlrYMcq0RNaxMcx0XcdxxMcxbV3/nCrB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14790_.GIF
|
MD5:
efe3123f654409fc6d705c7033780993
SHA1:
1b2e90c2474fac022959b85aefb117ca3ee99075
SHA256:
78108f0e8d7f6de030b94ee3442be540cdfd612fa88ca6beb48ae6321eca312b
SSDeep:
6:PnlrYMcq0RNaxMcx0XcHMcxbV39n+a+c3v/SB/kmmyK67d7ZQiZBjxMzz3RBX:PlrojAxh9xdMalIf5d1BYrX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14791_.GIF
|
MD5:
68679909b8b21bdc4ffb2e8ef16631f2
SHA1:
4914b8082ea28fad589761542886d6f830a08743
SHA256:
a14f62a5d256d4f61866371e4967ad445ff2843f38b68559488c91301b609157
SSDeep:
24:trPY9cHmIDYhV3CbM4Ho+GeUgccHuuuuuuEZ3IMSBYCGd:6qtYhVSbDI+lUgpHuuuuuuEifA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14792_.GIF
|
MD5:
b0fd2be26596d4b2354332a0ed692013
SHA1:
d62b0e56a4901d868020ecf3199ed3beea461ebe
SHA256:
2d12548dc5d31f7205d221e899c5315afc7363309144ac499b0f21fc56a3bf3a
SSDeep:
6:HlrYMcq0RNaxMcx0XckYMcxbV39n+YGgs5Bp4KaSRRB6bmz7Nyn:HlrojAxhkoxdMvQKawj6bmzAn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14793_.GIF
|
MD5:
1ba30921f7719411bdfec699538e807a
SHA1:
754f56230f7bb12c323cf07d7de5a6a5a2f6fb20
SHA256:
a3375f3dd96782dbc1ee82383b1dd38ccfa4f4e9bd782f8852191a6ac9103cd5
SSDeep:
6:HxZ0LlKxMcq0RNaxMcx0XcI/SiPhCXKjjSNgv/NJVd7LmDn:HNjAxhI/PhCXW/bv7LmD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14795_.GIF
|
MD5:
680bf2e4524ec0944623fdefd5ae5b71
SHA1:
00f4bc29ef40561f0d72b0e04f7fb909d8efcb36
SHA256:
fffc0810fa98953eadcf3278232529b74d60dd38f2a2047ca5a11fd6a28b7657
SSDeep:
6:HlrYMcq0RNaxMcx0XcyYMcxbV39n+a+Ng2Hz4vpWsWu:HlrojAxhvxdMamHUrWu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14828_.GIF
|
MD5:
e25714cbdf02762d2bf10349ff7505fa
SHA1:
d93b574b6f1f511698efc4cd877a5df391625721
SHA256:
a5b6f91973ecf5c952fd3be653c2edf5ff9f3132e223acb02cb332b77f981cb5
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+OpMKYjVx4zEJhPw2I:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/nCS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14829_.GIF
|
MD5:
8d025bf7caf288fd8526a53b61ceb08b
SHA1:
0011064a2a8c7dd4932bb6f5c48568284f0b3ad0
SHA256:
c18446fda0eb3acc08cb5e6519b5ca7f9a1d91bcaa83d929a85d7ebbee3cccb6
SSDeep:
3:CciElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+OpZHQ+J+zJWGpREzl:PnlrYMcq0RNaxMcx0XcdxxMcxbV3/nCg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14831_.GIF
|
MD5:
74d7829202a97358077022674a963e73
SHA1:
2c1f4555b487767f706aa6f8060e636c51d36ba7
SHA256:
41ff45f0028448be30212759d937c9d8e64d53039b2ac5060488972cdcaaf23b
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/nC1hkuE+NgmVBHRMsgYEpL0:HlrYMcq0RNaxMcx0XcdxxMcxbV3/nCr5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14832_.GIF
|
MD5:
60726485c9384526a6a406b4197e9d33
SHA1:
99170da2fa18600c455a53096f14d13e97bdcffd
SHA256:
de0c90a9f543cfbe25bd14a0d63acaf759a7e754877e60d9dd05d60916e23324
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmVBOMxBGsMoIZY:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF
|
MD5:
2ed5f966afe4e1494f4250dfcd213293
SHA1:
c9777f110690771310718cf6920b6ab44752c8f3
SHA256:
4ead14114fae25c0530a7359ea972a57aac42c8c8dfd14c43a82b077d1c21362
SSDeep:
12:PlrojAxh+bxd/wsj/7iBvmmyjhKgpXzw6ezvM5+8w8D/ko:trPY9lfj/gmfVnBd+X8D/1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF
|
MD5:
7d2fc8be707055ca198987fee4aa5224
SHA1:
d3efeaa10b7516be7092864827bffe26ea7a4961
SHA256:
fcd41a4385890e15a970f73f3970d40a5107801b762a4fc12ec2374f1f1fb833
SSDeep:
6:PnlrYMcq0RNaxMcx0Xc79YMcxbV3/BE+AHZVgk+BFx85lgEUI4e8:PlrojAxhGxd/BEl0k68zgFI4p
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF
|
MD5:
c1e2c6419284b1c9c9003ffc5b36a62e
SHA1:
f8cff83207c9f9f37da77cf0087ac865397bcc14
SHA256:
99b121f09c2084f59362a6fd40cb445603c9db49ec926dd876b50409dd1ce83d
SSDeep:
12:HlrojAxh1xdMaLyzLTEDO4AZ8oVzw7zwgm3OgmRkvYy:HlrPN+aefTEDOZuXAOgmRkvYy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF
|
MD5:
b35f4ed67b25484520be50cf3998fa8a
SHA1:
6e596a374b91de947f95af56f93fa05999824e69
SHA256:
8ea351f135eb0f7f4031bc6dde105c6811843626a91a740f1ec385299741256b
SSDeep:
6:HlrYMcq0RNaxMcx0XcNcGMcxbV3/K+Ng2LNwFYA2y:HlrojAxhNcKxd/Kmqi3y
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF
|
MD5:
38b0a473e3e67d5ac214a5a87d75b98d
SHA1:
9b4a4d32bc57eb24e2e53a62e461f1c90d07aa62
SHA256:
65d9b396863dc9cd013506c22419a5c2bbda20cb3257442517955bed4eb8f20e
SSDeep:
12:HlrojAxhC2oxdf1Qhvtq3BaQ9zw7zwZqTlyFJAJyM:HlrPA2KbQhvtEwQ1uYtFJAJZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF
|
MD5:
a658185eb74594ba73b5e02ca456d647
SHA1:
a5b4572262cd8fa389365c28c74a8ffdf22e3a24
SHA256:
f7f4084347cda91241d93c5a21e09355c93dbdc121545cbbbafd8200b1c7408f
SSDeep:
6:HlrYMcq0RNaxMcx0XcNcGMcxbV3/nCrkuE+Ng2mmyqYw:HlrojAxhNcKxd/nComP6w
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF
|
MD5:
db5f68a41c53c5e5f8544e139b937bb4
SHA1:
52badf3cbb28c05d77a637e079aa3be1eb7bac74
SHA256:
63407709aa98674802177a3b9520eba7efb270472d0d1e2eaaa6bad469383e42
SSDeep:
12:PlrojAxhC2oxd/Bw3YStLXF+gbIuXzw7zwx7fP3aSZW:trPA2KlBwoStLXFHNDuMP3RW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF
|
MD5:
7b6e860a83b1ed6d072b95f9c892b551
SHA1:
478ebc4e005dc342604a75e6a72dd1498beed20a
SHA256:
edcdf132b2addc433bde06af45db90188fb2c9e9d223147062cbe578b944ad33
SSDeep:
6:PnlrYMcq0RNaxMcx0XcBYMcxbV3V/wRZjAFAF4HGu4kO2grCzSRAaSWpNVesWJHq:PlrojAxhBoxdVkZjAF3LZgOzwLVeRgn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF
|
MD5:
2ffbfee0d36f7bd22c2e0afd4236bc3e
SHA1:
e42492a2cafbc8bc6723559323c125db3111ca6a
SHA256:
59922e88766da2673c298fc0b2bf23eaa20f73a3c4b7f614f98ea0a76af1753b
SSDeep:
3:CkMlpg7gXhQ+gjvvelX/lbylQxlthzzpRDUT7GJHT7olKBRqerq:HMlpg7chgvWlX1jT3pl8GJHQlXerq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14984_.GIF
|
MD5:
765a40de22dc4e6fb776a139d30ca201
SHA1:
26394a5524d2880832d3ee709d18742cafca87b7
SHA256:
a1d5de855d6d7d5fc18facb8996895fe14a373a9479ba15f5d9c0692cfaa6d90
SSDeep:
3:CkMlZcKSCerkjn4YUQ/lO1lNyljrFFYARi6tJdMex2cSv3RXsSi:HMlZcjq4AtgAvdOvRXK
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF
|
MD5:
8be588126cfde3b6486b1a2e7c93fcfe
SHA1:
ddb82976177c363148aae7905774ce54b25c523f
SHA256:
9f72b622934f50ea7b0810fba4a2d103786fd738d17a1753f8f15414d3518e70
SSDeep:
384:ys5763cPKAWOKQ2Y63QjUZXThfW2cjWZJOKAg22unt630pjUZXMg:9tBCAWOKQdnjU5Th+FWZJ7AVPt1pjU57
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15019_.GIF
|
MD5:
5947a7c4cc4091d3d98a34822f34b36e
SHA1:
39f5aa209c178b43d56bf44965b58a7b84d6e20d
SHA256:
1523818f84e39002ad6db0f7265ed9688fa8c9dcee662c527cbf7c593e0d9871
SSDeep:
6:PnlrYMcq0RNaxMcx0XckpxMcxbV3/Id6ubeCzSRYZTGs6IfWH:PlrojAxhkFxd/YzwYtGsPfWH
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\HOW TO DECRYPT FILES.txt
|
MD5:
c27096a4caf115a67f9678fc07e995b2
SHA1:
a276830bfe9c922b1951d27467c809b1d5babf41
SHA256:
dea72b06de87a9da29dab4ea2de63bb478a5825521b0267392e2ed08fb2e4eeb
SSDeep:
24:FSimHPnIBNeNmFRqrppU3VC+VWkA+0biM0H1E3:NmHfsMPLSVbVhD6D0H1c
ImpHash:
-
|
Access, Create, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF
|
MD5:
87300db3dd7e017ffd33dc9fe679e405
SHA1:
f032ad4459ec68645ac4c6cfaa5e2e19a2db1cd0
SHA256:
01012485b2f140b26d4c0ea31c1fc956ba9c87d8ac627c42674e824831bc9cad
SSDeep:
48:3KMpZxEpBqPdAJybVZSpyFRSO9cqVnzxEPORsVm3SvBjk/8TWJJyEDljnn1WKl:532XOHbVrFRSOGgzxKORem3Wjk/oWT95
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF
|
MD5:
d3db3ce8f44aeb5d3e10d3727c6fa4cd
SHA1:
b12bd72d934cad4f0de4ae9373fc8b3121ec1f12
SHA256:
fe19869c30e04c8d7645c96e5c09613c7dbb4e795b57b591ab46811dbc23602e
SSDeep:
96:etdbJ+lDSItaRiUqSRAHFjCvpxrEq3MR/wZUzjH+:e3J+rSBqSejCvnX8nj+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF
|
MD5:
940f56be2598698bc07c88121f0e951a
SHA1:
ac72493723644393d381e200d15dbde02d3f3d3b
SHA256:
d078f185d80e05857919b115c41b537f64c1c926331e7df26fda7a293f46d849
SSDeep:
24:3KQXHz6UZxE82BQiPrGPdEVXCCyDHTfojBrVQa3vOh85URiwi4ZgEJuiyl/fJ:3KMpZxEpBqPdAJybzojBrVAjR7iw4nJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF
|
MD5:
29e5fc5132b86d16e2495a8af7b94d6d
SHA1:
0741dde5518d3d3dfab78c24f71ac5f155faaa60
SHA256:
b6821148cd5517352f62f8464ddf60d3088ee84e510f279c47726b674c345e82
SSDeep:
192:C0tQrw3QAt+WjYENff41vlCrOng6YGyw4v+2mMX3sAt:C0SSQ/WjYEqCrlkmmMsAt
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF
|
MD5:
a1101a68024fa9fc3fb4c69084344ecf
SHA1:
245a45c3eb5861bc625527940b56a9702eacc0b0
SHA256:
cf0bf1d574a4a58b4128bbca5cf0c31eaacc8c3067ab5423db51bd5d6a01cfa0
SSDeep:
96:JAeeEDxjlfdhaLZwUoX11M/mmAxfcBWHSxCAdgqeVDAGYShEmQ:VIZwUog6qexAGlemQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF
|
MD5:
b2795d6413a848f8ecdd6c4bc31d2094
SHA1:
0b2af7627f0ff6ed9dad441cec3ad765b9d9453c
SHA256:
aad845048b68619ca89c90e2128576163d25d565297bd9276dba2bff86c3a7f0
SSDeep:
96:nNokYMOwtX5ECyHfVKhY2jyq6rV/zSE25ECWA+AnTcLSwt1b8xa:NokacX5ENwWFNNzSX5EU/cLSob
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10255_.GIF
|
MD5:
244e3a71b9b45b506b82dc9c39e479f6
SHA1:
48f2cbc8de47f3e85d629a40135d9a26e69e04ea
SHA256:
f86323d8ef9a9975189aaf9d1793e3b09755c3b551712b9d14029a27ade520ca
SSDeep:
6:HlrYMcq0RNaxMcx0XcJ7xMcxbV3/BE+NgNJPJU6CzSRkXaqH2u:HlrojAxhJ7bxd/BE9BezwkX/HJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10335_.GIF
|
MD5:
6f147c2c2ca2108c3a8fe4621ccdfa91
SHA1:
0c922b8d7f17d54aa31e0f411f246f3480887be0
SHA256:
7671c956f8cad3528c7dd10a270987aec400cc01115c13f4c0937851d2dfed77
SSDeep:
6:PnlrYMcq0RNaxMcx0XckYMcxbV3/O+rS45zL1SRMY8kZgNF2lF0E:PlrojAxhkoxd/OMrthwM19NF2lF0E
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF
|
MD5:
a53df91bcebeb2bcc127ae15c2e0b28e
SHA1:
6f06765cb350ac2473e54f8bb390a16b18c4e2f8
SHA256:
f1ca52044505e8ecc8870701a2221db63f772245d73814fbd9f83a40f325a24e
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcW7zwqjMcxbV3/NE+Ngmi0UtYsrzxmJQVJPwQ:HlrYMcq0RNaxMcx0Xc8MYMcxbV3/K+Nw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14794_.GIF
|
MD5:
e2f7f935036147257641f37311b18a00
SHA1:
1ae93786f568551ac5147511009db5380a4cac28
SHA256:
582b42a43b645748f2ac66ed4bb63a01784f2fa056180dcb0ce3b2b62cc1f0fa
SSDeep:
6:HCbcCvVxMcq0RNaxMcx0Xc2iPjX4NgMVTfCxUEJX+sn:Hw9jAxhLPjKVTCZJusn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14830_.GIF
|
MD5:
b45a7b96fad35072b82fbbf2eae5d6b7
SHA1:
49f004ac8e16832856bdbc5cd897ad89a8e6aa7d
SHA256:
68a071fdbdd42497ec18dea2dec877fe0779c5ab7e17f39585e897ce73a64a39
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcW7zwqjMcxbV3/L2QE+Ngm8QljgYe1n:HlrYMcq0RNaxMcx0Xc8MYMcxbV3/++N+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF
|
MD5:
e7c37553df8bf98d292764a3c055f75a
SHA1:
8594faeefbdcf58321d2612b292dedd29e86b13d
SHA256:
c3463fde70a1380f070311efc285a9ca2f387a6fa155bc307bcbe6de550acb34
SSDeep:
3:CkiElrqjMca/0LtNanNjMcxJH2XcdxNjMcxbV3/wsQE+NgmVBW6PxnkNcn:HlrYMcq0RNaxMcx0XcdxxMcxbV3/wsQh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\HOW TO DECRYPT FILES.txt
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\HOW TO DECRYPT FILES.txt
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Services\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\bl.gif
|
-
|
Access, Delete, Read
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\bl.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\br.gif
|
-
|
Access, Delete, Read
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\br.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\create_form.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_all.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\end_review.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\info.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\info.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\pdf.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_email.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rss.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rss.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tl.gif
|
-
|
Access, Delete, Read
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tl.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tr.gif
|
-
|
Access, Delete, Read
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tr.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\trash.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\trash.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\warning.gif
|
-
|
Access, Delete, Read, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\warning.gif.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HOW TO DECRYPT FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Dynamic.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Faces.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Pointers.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\SignHere.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Standard.pdf.wannacry
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
For performance reasons, the remaining 3584 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|