44a96120...b0d5

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\B221.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	21.50 KB
MD5	384c8470e59de327922bc5b8bc70c5f7
SHA1	2ba02f43a3c869319675e2e3561b6f5f723ff465
SHA256	44a96120480fb86c0feba1353072ee1b93dcf5e96542e24a6d3d428af51cb0d5
SSDeep	384:KsjvlGKCFb9Chu8zbNRg9bfS8gYYmnf3Ik076UU:djIKCCh7b6YmPJ07W
ImpHash	f34d5f2d4577ed6d9ceec516c1f5a744

PE Information

»

Image Base	0x400000
Entry Point	0x40630a
Size Of Code	0x4400
Size Of Initialized Data	0x1000
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2062-12-28 01:29:35+00:00

Version Information (11)

»

Assembly Version	1.0.0.0
Comments	-
CompanyName	-
FileDescription	B221
FileVersion	1.0.0.0
InternalName	B221.exe
LegalCopyright	Copyright © 2021
LegalTrademarks	-
OriginalFilename	B221.exe
ProductName	B221
ProductVersion	1.0.0.0

Sections (3)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x402000	0x4318	0x4400	0x200	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	5.96
.rsrc	0x408000	0xca4	0xe00	0x4600	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	2.92
.reloc	0x40a000	0xc	0x200	0x5400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	0.08

Imports (1)

»

mscoree.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_CorExeMain	0x0	0x402000	0x62dd	0x44dd	0x0

Icons (1)

»

Memory Dumps (10)

»

Name	Process ID	Start VA	End VA	Dump Reason	Bitness	Entry Point	Actions
b221.exe	1	0x01200000	0x0120BFFF	Relevant Image	32-bit	-	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00136000	0x00136FFF	First Execution	32-bit	0x00136012	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00321000	0x00321FFF	First Execution	32-bit	0x00321068	... Memory Dump Actions Go to Process Download Dump
b221.exe	1	0x01200000	0x0120BFFF	Final Dump	32-bit	-	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00321000	0x00321FFF	Content Changed	32-bit	0x003216F8	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00322000	0x00322FFF	First Execution	32-bit	0x00322004	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00136000	0x00136FFF	Content Changed	32-bit	0x00136062	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x01095000	0x0109BFFF	First Execution	32-bit	0x0109B1FC	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00322000	0x00322FFF	Content Changed	32-bit	0x00322657	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x00136000	0x00136FFF	Content Changed	32-bit	0x00136052	... Memory Dump Actions Go to Process Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Generic.Ransom.Small.E850116C	Malicious

c:\users\5p5nrgjn0js halpmcxz\appdata\local\gdipfontcachev1.dat

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	106.27 KB
MD5	92e128dcb152d05f07faf5da64bd1c91
SHA1	2174814ca563fc2b9679fffbf1b40bdf3ac9abec
SHA256	11437a99f5f9c0a6df09c64abc8828ad3ecd8cf4fa601340ded86b8945edff43
SSDeep	768:i8HrbdvVyZHgTl7ho5sZWN/Ys9byFRQ+AwqGuGyZoVyOF7rrlqTIyMnm:/pVyZHgTl7h6tKR7AwqlGyZQVO1Mnm
ImpHash	-

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.25 KB
MD5	f754e09efd6266cf06b45523ce37394e
SHA1	15a9de79d88929ab9684ea103b8ff1a628ff1a64
SHA256	9f621b0bf286ede01816a215ec1dee0195c53b4db532d0b9d7cb1db757245963
SSDeep	48:USAg1wgf4uhL13602ctNAOE+9wJUJG7dxyn6spFU/it:USA+wgLL13602GNAOkaZZU2
ImpHash	-

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	980d49fdebe89be148023da880447f04
SHA1	fa55464c3237b08ab4abf8eaa51d11fa5066a7bd
SHA256	1e5d3b65a21930c71742ef3cef9e9b2940f1397e0c04dd34e2ad94c93620399a
SSDeep	24:UsmpH4agT8tPnilMGUwLBbdIKHeDQ70mZ15S1y+2KXLSBhMKQ8ffF+YlMT4+Gt:Ubp4agw5n8JudQ/1Mo+2KXLSBjJF+Yye
ImpHash	-

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.11 KB
MD5	1c1c06fe9392eb969e950c71c10126e2
SHA1	cf65696935e05e7dca7519554041d0a5ed9f200b
SHA256	d5a687ffb5d0daa4422bc964db42436d73eb6a2da3c34d9d4e5751f0ae1ff12c
SSDeep	96:UbFNbyUnxtQx21aTarAmLCB7fuxslHNyHFft:UbFNBtQx21uaRafaEtyHZt
ImpHash	-

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.38 KB
MD5	262a8f9652f27b9efbe7aeaca8ee22fb
SHA1	07f682db7b096cd2fb98e89c8eef24cfd763617e
SHA256	f46f9be14cb58ea95a8d92e8f2fe7e17fd0f0e29e9f829b15c9d6bf6c9cc1485
SSDeep	48:UT11u1V2atki81YVWI8dSJZL/Iz6PpLA8iQj91ohMpYFVRiNBJX84Zf:UT11u1ttBvVWISM/1PpMhSvohruBWo
ImpHash	-

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.33 KB
MD5	6bd6228a9eaa2e2bdfdc4371fe7d0577
SHA1	0f98871e22424b73af72469308b093341bafb298
SHA256	6219a8239f00419fc96ef72e4746a41e7a95e3f09b28a9e9403b7edbb4f1f260
SSDeep	24:UspW11lBzv5hmTN/DrvTxequfJDhooTuofH7FQwl2QwiePzv0H0PXAaY:UcoBzvHmTRvTIquFhoo5bS4wi4zMkAaY
ImpHash	-

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	ad77ebfca0850315979e60546c3c9f53
SHA1	41466106c225a6dcb35d6564c1af9dc199a259e6
SHA256	ff0e20f96538a24de0e1dbbe4bc30e58862d5444a02011c2668c1797857ddc2d
SSDeep	24:Us1lw3QX/BNIJsa50ontdNZCZXB32F7H/NBQLWbLSWGByBmqcua+:UytHC2otNCR+fN6L6oBykqNT
ImpHash	-

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	832 Bytes
MD5	7e131e74dd88bf0eb1761f182cab4b2b
SHA1	d920cefaa31abd2453689a1ffb39a2828b26b6d7
SHA256	1c813e8a71e6a00c6a115473b07293d898bfc8db425bd64b8dd46843c25d37cb
SSDeep	24:UskvCL5Ey+TuoTYVMbOT62ExRS5HCYLWJXu6qo7PxCN:U5CL5L+TtTYKbW62dSk6qGC
ImpHash	-

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.58 KB
MD5	d0dbacda84a1896671ea572c5f329446
SHA1	c7166d4cf2a568ed031072b3caeacef3bb791ecc
SHA256	d18a7da0f851f5f0f1dd1bc13166f5503f69c392ee202e44e5473c2b0e169e64
SSDeep	48:UsE+JECSuDuGUV84Hs0DQBdHlL0uhppQpk/GIRRcwGRPJww9luVU6KqIuWvpPX:UmqCSVrbEBF13nknwGRleU6Kq7iX
ImpHash	-

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.47 KB
MD5	261164d1c2ac0c8c03a9144f8eb6ffbd
SHA1	93281a0d628a000c960bb768ec2476b0895cedeb
SHA256	e14f5eac456a1852e2465adcd690e7936294a92b36e8b02ce64eee10af37c066
SSDeep	384:U3NHmiurlu2kDat7TeVh4eTu8oi1aj71yOGOEI1cEB+tbJMzy+:U3VShhYpL4sHo9jZyOmI1cEBqbI
ImpHash	-

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.30 KB
MD5	35fd3d43ea4fc45ca7146938e6b4f903
SHA1	15a1efb6ed5652c37a8732c75326fb1c3df7ef2e
SHA256	00d387564000c5e8ecc8864da7df7829ac0b9449eccfae38dbaeeb0e385e64a0
SSDeep	384:Un8WFXN4RVVenOnUw78s3XeqO9LVWUSnfUe2M+ATsaner3N8l:UnRFXNYgOn778s3ONVynfRDXTstr8
ImpHash	-

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml

Modified File

Stream

Unknown

»

Also Known As	C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml (Modified File) C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml (Modified File)
Mime Type	application/octet-stream
File Size	4.19 KB
MD5	668d4682ff50bb4202e843250c34fffa
SHA1	7cfda17269a45e0e862348f9e30d7e137b52c043
SHA256	068673ddc1ba125d93505c486508d02c2ef6f4981846261ec5f628a655423811
SSDeep	96:U+QJAETfyTr92dhlSazUSGNpmURGaGdSaW0fa/kPUgUiQCcp:ULSEOTh2d/SaoLbTKfa/2VRlw
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml (Modified File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	6e426e21917ec66127899a80cac4d207
SHA1	212902b79061c6c579f3f73bf01968cb53fd8996
SHA256	6dbb16eb74fbad12c65ff72144c7788d057949d2a93c9518628becc638209532
SSDeep	24:7gcyUbHJu55ABfxZd9o2pYa4R/KDU6M3MzLm8u:7ymJOaxoBacKYxsm8u
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml (Modified File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	d6b46b023216ee17d24020db06546989
SHA1	c67f0fa7bc8b428e1383eb77e6323f4502f1999d
SHA256	7e67bfdb0c0c9549726201018fa5ba56a6d04fa1aa01e74ce83dade35aba6b76
SSDeep	24:73jOW35k/+XC+RLrS2fuScR5XqkrqdCcXye2WSWgsM0:73a4KVYoLJcXR22H
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	040055d51a81fbbcb68e47326cc46d48
SHA1	9f7b9027ee63b233384897c98d28edee6afcfdfa
SHA256	04611818dfeea62b3a0dcf31574ceddf30c58ecf86b1ddb7743afa052432fb39
SSDeep	24:7W4+wndSQJ0Se/Z8LeVMu4uNcBQfOqrAEOWG:7esdSw0th8LeVMuP8EyXWG
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	32ebb57416477d915e31568d362c11f2
SHA1	578134fa289c829e06fdea47ba2a14c130809a2f
SHA256	f7e205ee0d7570239638a5fb42282f5f85da44769beac756fe80ece06ad52793
SSDeep	96:7Clc4u88B2uITld0GWjuKQ+3vJsTqWNYp2KLnVPpHs+:7v4NKgTH0GWjuo6TDLKLnVe+
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.45 KB
MD5	a6963cdf1bf9d23fd67d440bb6535677
SHA1	3283fb29682af277c4e007f9bce25deee5112451
SHA256	88ced5dd42fdc0415dc809467e73b29214a4f3268a0cf94bda24e3b263cd2f45
SSDeep	96:7CCd/iy9Gax5M53HUEifGlYdeautemjMau3dN5G:7Jd3oUEifGpthAvU
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.75 KB
MD5	881b0c05ad1b5bd6ee7e5fe6ccc67d6a
SHA1	f45fc84f9ab43a667123b3ceeb616d16aa3ba308
SHA256	7f11eaed05fb491aa30e7c597a9f4dabd6b509ccb647f2d262f4722ac55ca5d0
SSDeep	96:7ChiIAvom2HjH+N5dSOs1moYJAO1XQX9GBcJyPf:7yiIAv47+NmL4o3iXQX7yPf
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.55 KB
MD5	cd2fb00c1e9904de7b1b1544848c61d9
SHA1	b3897ffdaf864ad78e7916144568ef902a6880e4
SHA256	7d7e81e95b1fda0f5ed1fcb52b4f06cb3beaa53694fdce9ebadfe2fc5ee93785
SSDeep	96:7CBml4CxOdHOCskPhtJmfWd2WoZPeLLji9YDZTocrByWPz:78eInPht4g2WoFeLL+9EPyAz
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.59 KB
MD5	47c2bbcf52458d366a984d20c58e0b9f
SHA1	41a1785569ec99e58107fc3b5502a78f1c00faf8
SHA256	42992dc10e7935cc57dfa3a7dce62efcb004c59abf03dd03449d9f404977ef4e
SSDeep	96:7C3kbm3ea4sJv3tM0+3nfmjiThF3JacLMgtsjfjvsSm:78k8RA0+ujiVrLMgtsHQ
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.73 KB
MD5	ad33dac145157cac5ebe5875e4b03dee
SHA1	7596e5e3d718bbdbdbfcba651ea67207cf3a29df
SHA256	f7233bf2bee7d0ced73807d23bee5cfb7543fc2e97c158628fb558eb8d514495
SSDeep	96:7Cbc/CxzbZSh+PHqCbIFlgdG2G9wnvdQxCbQ:7xokh+gFFIvECs
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.55 KB
MD5	6c3565597cbce3698152942eeae1e4b0
SHA1	ccba2c9e14e095f8c6591a8b18af94af8f1cea86
SHA256	11d51dbf5cf1c3001d4f5ee33f3f2d76fdfb7a76c4c40c9a08f39de94bd718b3
SSDeep	96:7Ci9oDDxmPt2whgdHjHyFU38Opj2UplXpJl/VBJ:7LoD9ml2sgdHj/Ppj2ApJl1
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.62 KB
MD5	35576e97951f5ed5628b0fd42f5df8c3
SHA1	006d6f9b3c3546821bca65383e000fa85c879dee
SHA256	7bb8d1105a22bd226a404f71d3c781868d5217190c729fb858797066826be2be
SSDeep	96:7CqeBph+xYJSKDz9cGeBoGuyyztizWwAEimcbOh6W:7bwlVMS9tidAJU6W
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.73 KB
MD5	861788864d76af6e58baa497abdb3fe6
SHA1	e5bce87a4d6c2a72bf92de2b7ada68be0576494f
SHA256	ef00fd327ed88c27f3344d256210bd44b44b95ce4446b438247798e38bbbe295
SSDeep	96:7CL+kIMy3flu/D/jWd6Gv95iL6i2eY1migPCcHIKz5pHMT:7Twsflu/udEImVXIgET
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.75 KB
MD5	2179ee542797969ae71920ac74b70011
SHA1	894b09a5b0fc7fb8075eb8304b317401b7e869b5
SHA256	00fe28f971759de1244cdd2806436d2fa91242197e5baac4487dbb8e841eca6a
SSDeep	96:7C/+LA/7lpgwRyZK7j7K9ya/bEevdL9jChDT9bZtI41akx:7xL0pg42KO9ykvp96fVZt15
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.55 KB
MD5	92bcc33faafc4fcbfb06d15ff657d408
SHA1	52310619b6554960eb9ffb6a6b3539a0f06f831b
SHA256	87b462d3b0425bc884bf699a122164739770ca071a63605dd3dd9a4071e01355
SSDeep	96:7CPk2GEvbke67TA6b6SSuQeQGFzDHRzWuDRMW4K+Y:7N2tvl6/AY7QPQ4lDK+Y
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	7b2a0fd4067ff46c827daadc90663238
SHA1	0b706f10edffbfc096a3d5197cc69de6549a2aae
SHA256	6102be3da9ab600b62c3f315e2e7b7237a9d5602b13a0b262163a430d3f92c9f
SSDeep	48:7CCeD+g3DvMs4ty+w2j9T+PdIx+oP4VemcrRDp+GJbvhHnmni0R65qm4HNSNOVU/:7CCw+gTvMp5KlXZcbV1JmV6kpUu+l
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	788.61 KB
MD5	9fb8dd86524f4ce5b70890044162a8ea
SHA1	0d72d5f7969ffb1285158ba37f1a46ee77acdf5f
SHA256	c7b2c6bcb612305caaba0c5d1a20e0b90529dfe244e171cb1147559962b33935
SSDeep	24576:5kBTpAhc5+WSa6daK8IYm27XOWlXWnoFogguyF2:5kshc5+WSXL8INmuo/HyF2
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	196.44 KB
MD5	44ee07fa119ef1c3d41b05e5f3386e75
SHA1	5045c3bcf65bb06c33ed2dd7abbe7e810d137752
SHA256	c2407113441bc6e4a752ca7bbc2a3fed1d802e1c24804eef6ae8befeae91a00f
SSDeep	3072:LrrBLKJV7lu/XnsrqaYSx0Q7krfCIAzj2ujOpYsbeLJiO3cUGKaLx5zPwrJ:LrrBA7w/cfvxJQdCvaimfO3cUGK6xF4t
ImpHash	-

C:\Program Files\Microsoft Office\Office14\SplashScreen.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\SplashScreen.bmp (Modified File)
Mime Type	application/octet-stream
File Size	92.98 KB
MD5	12e20f233083840da86d6065373f1a24
SHA1	e40872fca04322c5e685383cc30f2ed3517992a6
SHA256	7b2d8860f1e21125d7a075e1b4cbc2bcdfa0eaadd6ea53d34937c824c486c49f
SSDeep	1536:WQJrFUgwEraHitKNsm1CQ/zKcA0yVO8oEngweHXqnIbPTOGHLBYr1ThNRx9c7t4:WzlIAitwpLKcJ6ougXHXxbPTRk1px9k4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.19 KB
MD5	688b9307151fd7705f2cd755a4d40564
SHA1	f4502a0cb91a8438f22173bfec10c8e7d570a7b4
SHA256	57cbfbd38c63b34516f0ddc6b38f5565e13564365122506a46981550d3cc3ec5
SSDeep	96:kHiZdTlHn9TDTqDBuqqz+cnfWZy5jUQD8o1:1bTNn1oZqzZnfd5PD11
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.78 KB
MD5	c2daf03a21d695e23a8de13f7f3963f2
SHA1	9c25ab0be9839a66c5b46d31171b1904689f4973
SHA256	30a45d954364e39551c64c62271e8e023870b8a185abad49b75300530a7df344
SSDeep	48:LUl5L8ioJ30WekvFWRWZvHmJejuZlw3UiLc1XuDzk:w3seMFWGvcSm4Cus
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.39 KB
MD5	34151497e4fbb8d8f76a70d791407d88
SHA1	f37b55419c2f24fc7c229633627325c365995d8e
SHA256	7551f1cdf59f77371e8bbd85ac06efdef6c003993eaab130b9fd1f57a7a31294
SSDeep	96:kHi5s5Yd2ioBe5rEGGCuCGfPFVMoce3txR93ASuMcgSwJ3YBm:155G45rsCGfLMocKv3wm3YBm
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css (Modified File)
Mime Type	application/octet-stream
File Size	3.27 KB
MD5	ae30331a4cc2e835390310721254c7cc
SHA1	e60fa190233c970b2b771ced999e1a8aa650c4d2
SHA256	232d3f6f30bfc72b776c093fe77985ce668edcbf9e6aec33d4f8d4c93653d79e
SSDeep	48:di3XinF7dD125lb80Lsy91CA2iSIUzFbMHKTzFsiIVtn4pVU1UgGnS3AQp5iRNEL:kHiF7zu8U9jT6NhTzajZGwF6R5ORLE4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css (Modified File)
Mime Type	application/octet-stream
File Size	1.86 KB
MD5	f03b8bef4113dd7fb732e01a0c6b5971
SHA1	ff18b6f0a6972db5b2f6ba01d39a4527f6f33a3b
SHA256	a9faf1e48d5eb6a669119991eb294a409a0f0bdcdcc2df4f15742b552db4a086
SSDeep	48:di3XiDSvIErCpvcQ0LgIqkPEgXLKoOx5VHgCUpI3ntZo:kHiDSvlrKvcMkXLKoPhGo
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css (Modified File)
Mime Type	application/octet-stream
File Size	2.77 KB
MD5	53384a7fceddb7a7bf4370a55423055b
SHA1	7d294634d821cd8382fc253fc7918ec17a2bc836
SHA256	79ec552fe0e7c16606a6fd213d0cf70076fd81591d4f4ca504d6418273200163
SSDeep	48:di3Xieu5jU0agYVBgLMqvDaQeP0j3NqL+jDfp61L44lIkfiQV77w:kHiegPm1qvjjdB56e4Sk9w
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css (Modified File)
Mime Type	application/octet-stream
File Size	1.78 KB
MD5	6963b3e573801185e33a22d7ebe43c16
SHA1	09bb98b9304bf40b069f790b3e4c614637cf560c
SHA256	d2c60dadb5cc450c7259a9a3e9b378738569d870a867da6f545635ee6ce4a7d4
SSDeep	24:df/ixXPFjJsIq/DpcKBnBc3/qrMfsEy3/z1AFMv9LA1vFHz6xZj6Io8TmAyBQR1Q:df6hLdQDZFBeCrOmLAFwvq8yM1wd2s
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.98 KB
MD5	d2cd447dacebc72827bf02ac86a40c5e
SHA1	8ee61409a15ee1c61cabe6adb1d32f1b2e33a04e
SHA256	f70ed8b1c026ac04e61fe3ba1c595603e6579e28b9056a8cda31e0f710574b0e
SSDeep	48:di3XiT+0H6ivmFnYAqNj2Wt4PagjXGUpDI0B8t+ec6irTZ1CbPd8teclvPW6tkma:kHiTffuFnYPj2WSPagjXGUZZR6irTZ1g
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.84 KB
MD5	5ac206c302f5320377b2ca7cac7fe84f
SHA1	eb38b87fd81a8571911b9ca41ede39a07b18b128
SHA256	07e54aac810b7997f7f7c47c2ee53f492881fff74c9f4fbe066af6b9c7333e55
SSDeep	48:dGnvVI3buL4Jrvhyf6IK7kW22QU3ZRoCKKv+yi:4vVqbuLEGr42293ZRtvi
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.70 KB
MD5	0969f9a5524f09adec3c11c49fd62204
SHA1	0833a5057f388f77fa8a2f52c3d944e992cb3cde
SHA256	3c9fe6988937af049af8c826961b322f5dc95bc3f794aad55b76461c0a55ad78
SSDeep	96:kHiTd8aRi8j79feBVufTQ6Zl5PTlYjumhUBTJ:1TpjpGBcLQ6pZ0iBTJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	256 Bytes
MD5	0d7550e800fefd2312f45ebdde8ff5e5
SHA1	5a5d447175666281d5a1b7cb19ff061a05dea484
SHA256	471d866a5223ee4c1e7362c7bf7586f88002f725d613c8a18063d70fe9516313
SSDeep	6:NWHkdER9PZONly1ki26tZ7FJHuUxvLZr4X+m2vaZHwmK:0kdERpsNIT/xRE+XaZHA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.34 KB
MD5	ef7410a2e528454096e247e4022624b6
SHA1	6161a5bdba9c928593b1b887098af860bd2047d1
SHA256	9a664e518abf940200f328e93824061881b579c9763606c25c48463ff60d9882
SSDeep	24:03DEral3ZTRJQPb8hWODtLzNcZR8duL/66GyLpcmlsoLxM36:0OaTRKP/+tLzN6SduLy6bcmli36
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css (Modified File)
Mime Type	application/octet-stream
File Size	3.27 KB
MD5	b90e91576c054a9e14dfc82bea129f5f
SHA1	f3ccfe6d8917e7f2792b682098a23975d7bb510a
SHA256	d9a906ec4b0e7c3de074e6923d73f71118d93470069c397a7bb797685e1e67b8
SSDeep	96:kHih1H3X9buDSBCKu53FrUJIy1cRf7xeo1lo2X74X6dnWi29TL:1hZN6DShJ/cZko1lo28X+2H
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css (Modified File)
Mime Type	application/octet-stream
File Size	2.50 KB
MD5	f52e956b382176dad3b4a70f9ebc30a2
SHA1	308c9ee64c7de8b276ed6e4f3919060eb8a3f70e
SHA256	f38362c121751c36dbbb02f0cffd4e1f34e85400fdc16399c7bb74012117e93b
SSDeep	48:di3XizNkGVotSPsqd8f332mzibkmS5yBps9swgxsxc5:kHiyGVl3d0f7mScBeGsxc5
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css (Modified File)
Mime Type	application/octet-stream
File Size	3.27 KB
MD5	ee8737923d5e2a54ca1555031fe554c8
SHA1	abe59d239f7201297010e9427313277c4463c560
SHA256	b487f94a4fe4aca2be31b62f88f26957631cb572708bf902d25a163f85f32198
SSDeep	96:kHiLFlqUY5WrY5zcVA/4SuT9Lk0aPRdA4:15lqLKY5YVY4SuTpkLRH
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	944 Bytes
MD5	ec1c68bcf598caa7156021b83e78105d
SHA1	482c70c2af75f44f8860bbedea92473c161f3695
SHA256	14ecafb993aead0a2e9f3f2906e0b77681e9de469a8462a7d915214abd6369f0
SSDeep	24:H0yEeJHHoOu92yvtRJEaimbNuePMYIy635dgN+d9DW:XEeJn8vtRqsgeP1SJdgN+d9DW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css (Modified File)
Mime Type	application/octet-stream
File Size	2.38 KB
MD5	be26119a6cb378eca88baa9122d12ef6
SHA1	18ddcee15384b5dcf23f70f6b204cc142dc51f6c
SHA256	fecf1dc319f13bfcdd20f05399f17334dd8086b5b35a377ed2b2614733eeaa93
SSDeep	48:AIT5ZOiiqmD716NjFnaxNSv2o/fowqBSR/D9dAfErO4/pvVo:AsZO3X16jIAv2AqgdkB4/Fm
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.25 KB
MD5	f84cae707466b384135cc369955a058a
SHA1	933c148b6c1a9c94cde6a05b739745d6d8b380dc
SHA256	347f03857c0dd560225c2c84eb2cc36141910a16518899dd3881427b91817152
SSDeep	48:GAMqjHI5wrofTXRzcE42Ictihc76cV0ev6dEqRiuOLBxTTC9w9Hm6Sqff6nX86l0:G2H8HmEbIcQiHmtdHYTTC92kqf+8sDz2
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.00 KB
MD5	61dfc4dbf6dea311626a59258bf29f86
SHA1	359a182de51bbf2a0a6b59016a7767971c6b29f3
SHA256	7d508fb3e67c56e2d47f48661b6e7c7635cbb83af283872871b040aa2c9ea978
SSDeep	48:Bj+iLAX0OhL0hzEmsiwyKFBGD9ucw3EcEyNZuYyGIhKNeGHbCYxmhgdXve:hBI0ONnmsfShKUJybuPKNe6CYAhgZve
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	848 Bytes
MD5	2a8d68b74f3fd87e9915d7adc1314a24
SHA1	37b7be5025eadb2dc2b12a995e79783488fbb534
SHA256	38ebeabe628820e6f1bfb0e78631568427b2e18952ad2ab244fd301240064b38
SSDeep	24:H26TOhdfBPPks5TPuPryblfRgcyAWGaShAVC38ggbefIN8:TOnf1D5T4r4pWAxauAY8ggbefIu
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.05 KB
MD5	10c4653283f8ed7c467631eab18c24cb
SHA1	61ef3254afcf414a6d641976dcb97818595f02b7
SHA256	96459dfa039d2833aa075c6197457ab915bb0c3485125bd0cfb80a05b03790e7
SSDeep	48:2c1ZDVHq6CoEXvQhIxwqE4ssHskdB5UNM7dtwWDafPWbYFW1EUaQ0qRmjTKVG87z:2c1DYRohIqWXdBdhDuFW8rqMZ87QiiS
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	17.75 KB
MD5	d4c2d2f3350911a5704f9404dcf6c241
SHA1	3e2d3a6de70db3ecf5ca328c053ff591a0a9932d
SHA256	dcf54f4455c6c03de3ae8d9a719a59897bd06f20605b444413eabfd69c9e168b
SSDeep	384:TLK1Zk/bZTHfonGgiQPKvcdl4/+SQSC/9hlte+qfyoDy9YDk:fKMbxHfdgh+cT46erywNDk
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	17.77 KB
MD5	4bb97ff1d66c6ee2516f31ecb071ee6a
SHA1	fc19f174e0a91b2108ed9a012f71b9d6ebcb7231
SHA256	0c81015c7d41a58936cc7a2c2387b25f5a47e35ebd68e01a899924644dc7f2d7
SSDeep	384:TUGChyQazqe3KUgbYARq5phUPSf5nCr3c75AlXdVumt:AGCszqe3595pa25nXuNwmt
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html (Modified File)
Mime Type	text/html
File Size	1.44 KB
MD5	36b1daabeb7822d5a9a8d08c6b718d88
SHA1	e0d4b80b66f58edfc57d309b249cc72489dc10ba
SHA256	2fb69b75dd8558d324ff8b9635c65bf0075603c2ab0f5de6f787497e959d6c2e
SSDeep	24:/0aYsSyNB0ndcZwwchK0WdiBtDRV5iMBci7x/qACvZDtRryJCRmUNpW5Xn:/LYsJB0nL/Kd4C+ci7cACjkJCRTTsXn
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	1.45 KB
MD5	b9b00dd06d7312e0a5736a2da8cdfa53
SHA1	bdad2548eb251db1d1ce34fb2c56ba0687b4bd9d
SHA256	e45af1e4d8730a20b2bb3b9ed4c6a72310831ddfa0659f748c48ad95396bd858
SSDeep	24:/0aYsSyNB0ndcSQ+AKwTk/VR2IfEFaRqcxPcYL5DQCxGGRpbm:/LYsJB0nPATc/2IsFaR3RN53pbm
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg (Modified File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	5.16 KB
MD5	ad790bf4c06c5cc6b1998bcc9161ab78
SHA1	bdffd65b7348c721d3ae41075e07a29d8a33b914
SHA256	77f8f211009e8e892b03e4fae529bf9ecf2b0f98c7713570d745181e20684bf0
SSDeep	96:scRuipceihzrIdOdzdqKZ8mA1Dzn1t0T7aZS8C4Jx93eQPgE7WNOxCdWNmwJH1IM:s8KcOdzdzLA1Dzn16Havtv4wxnrB
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp (Modified File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	2c39a4308c2270156c41d0491130ac24
SHA1	bec842971224db435318cb15ea7a458936b13157
SHA256	176055635a4a5083f2d316ff1553ffdbf90b240429d2afee2aa36796e2e56457
SSDeep	24:RnJoyWuESzUeIHTyozCo5fJSLK06/zgIQbNYE0qQ4ZXbaOtxLEDJt63vjnR3uv3N:RnJoDhSSHTWWfWK06LmbN22dAr6/VhW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg (Modified File)
Mime Type	application/octet-stream
File Size	5.02 KB
MD5	b59e35bf7224a7a0597e2b3500492194
SHA1	623c0472e1adfa5bef9d750b06dfccc419f23e15
SHA256	31fee7f3a26b3893a5bd2e1b432c72e925549a57fc970a44b4b38e7530f33e0e
SSDeep	96:tTLqIuTD+T2mZ+vm/t/jPSLBFcuCgPsq9kWOLc7eSLQLZzxiHj7Tpv:tnfS+T2hv4/D6FP5fOhoQdxit
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp (Modified File)
Mime Type	application/octet-stream
File Size	3.88 KB
MD5	bb2772f394675ef1aba1b0d82ce5cb3a
SHA1	46ca5fadd01bbb3309a135a30fb073c5dfe47f69
SHA256	98c8a5c0a2436fabf0bb353e0640f581924b6fcdae014fd500048378c08752a4
SSDeep	96:8ZSTprPVYJM3xUnnhELYMIocIj+jy4Uif89:8ZSTld93xUnhELYZocIjxn
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	8.02 KB
MD5	e4b820ce1a755ca9e0657fe66e896391
SHA1	0740f9804d1acaf8c8c2dc0b2c7f3715ab3b1b4d
SHA256	702b3cd753bf68aa995c7a061927981cc6ca76aa3fb16effe3c646d4824ff6ae
SSDeep	192:/LDnRH0jD3K8lRq8K7s6lKPgM3Tu5l7dbO:/LDFc3R9KsJP5af7c
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp (Modified File)
Mime Type	application/octet-stream
File Size	1.91 KB
MD5	28b10192904b802d2da309605ee38522
SHA1	f0eccff03f3e604a310696ce0ba7d86449a4cb89
SHA256	b1e31d1196b7d798e29dc9f81e56841bfb2b3e778446ed65df07923c227b5f11
SSDeep	48:Sr9G0dSNdtE7V9bU8IFsiqWmprOJdbx7sWSgiS2aQxkgP:S7SNkjbsrqFedbxLimQxkgP
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	19.77 KB
MD5	483ddfce3282dd13f8000d45136eceb6
SHA1	bf6e41aed04842523e267412a8a1455edccf9773
SHA256	8241db9958068fe81eaefa3b2c1b947fadb0267fdd4ba6767944d05d2a8819b9
SSDeep	384:McHb3WbDEaxCSjIOlQ1pSJ15acD3NoGdH5OxBeua7QKXupHC+:7bmPEIMOKaJ15aKD76Ubun
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	8.81 KB
MD5	e1e4d00d038be1d3cf91b01e91821121
SHA1	cd51eae1d937f7bca543d8e5b75697f6b22f92d6
SHA256	aa557af0310bdfa5a9beb508eebf8f38e9cc41dcefb5ddc55e93e1fcb374df40
SSDeep	192:YeHhk7D5bkTloBQfZcu4lpRJ5YlQmuY2K7e0TjHqbJU:dHhkJkTlXB4DtY6m+KK0PqS
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	23.77 KB
MD5	3c1dc2119749d6179faabd42e5f90cf9
SHA1	bd219ad00b846f8d02e820c19aebfe16bd75bd9f
SHA256	0fc11792ea9d7b556cba68966541049bd80b25383939bf0c31e78f56ef607d73
SSDeep	384:S2Ajgs6VA6X72qL0M1TpUpTxFOZ0mBLiP3qxWK19G5VExcjZ7TTolyqmbxCfuKb+:jcg/ACjLP1tUJ+ZxBYKjxcjJTUlHCxCS
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	19.38 KB
MD5	de10b2a13d7de1de480f2d89f606c092
SHA1	b98392a473def15e5e68815aeef943b8db20c972
SHA256	b563b7d576d362d1d024d25a14d5fb03762020d0e60e5f6bdf90d3c5c9726396
SSDeep	384:PuIypAe+FnOAhkKumEtNppodKB682msdVE18rM3ZVKOdcMH5BZRfpKdl+zsOD9e:2XAnn9ulrrZmu18kgqDQS5D9e
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg (Modified File)
Mime Type	application/octet-stream
File Size	3.09 KB
MD5	709df97201f5cad3248af4b3a05294cd
SHA1	16de3d98caf4a79d3be9ec59e1eab4155d1859f5
SHA256	06360d66f2f1fc8e505da65cd0a4c481f21b4cee3b9d6eb6142f1357373d5147
SSDeep	96:wk+ic27rFMfazh8v2UJRuIB7XmXo0QggpCaPrGrWoABX:wsrFMfaVO2ULB7XCo0GTGrWoABX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIconsMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIconsMask.bmp (Modified File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	92790a26fbe2793d3732192b08170309
SHA1	ca5f576fddbf46ec16647fc67d596f03c9603e92
SHA256	6d55b16745dd6820e96495e2f10c8e4eb80f9d9656a90d9004c3519514a5545d
SSDeep	48:RXfs8WysHA4DX9b5laQKzO01pBkRDRS+gCiGbd:51kh+Q6gDRS+hP
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImagesMask.bmp

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.56 KB
MD5	2c8a20753e6d700e9f3c1cd59fa38a46
SHA1	48e0471fa6db7e9394f92471270b0244fa133105
SHA256	34d89085c0d8bdacf1154a34cc3e993e0d2603607e27dac729998d093c69adeb
SSDeep	48:T47gSuF0JnWeFQScZdYOstVCCPMqhoI3C1i+0aKhGqvgLCbaxCEWpn:TTQ0eK1xYltoIai+QvgLyn
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\XML Files\Messenger.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\XML Files\Messenger.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	336 Bytes
MD5	3c7e080291588094acac5e08f4d02b1f
SHA1	1bd0fb20e014103489c471a674325185360ccd6b
SHA256	1a1dd6e96b7c8bc2813f2a48d3b7cd6890a66cd823b77e15ed1d7e8156ef2d6c
SSDeep	6:XIJIY5I575OyPKiGBB2stmwMCbtZ8QWKcFB94arrg0HoibcShxowbSGn:XmIY5I9O8KsSXtZbWKseIrvbxQISGn
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml (Modified File)
Mime Type	application/octet-stream
File Size	95.55 KB
MD5	3ce07e87b88e7285a15844e747f6df91
SHA1	9314437492cc75e130cc565f799a14b047516a84
SHA256	ad8c5e5f365df5013e2fb293145a2fa147f45be811b7c31aba95ed1a787c26f5
SSDeep	1536:BTrop1xqqqr0Zq/HnSrPqVLQfgxHlc3rrtSPgb/JzwS18NwDmHEzNw72S6JdPWYi:BTcV9qrTsQHlcFLzjHDmHwNw72Sdh
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterNotificationDescriptors.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterNotificationDescriptors.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	110.12 KB
MD5	187155ea72f6a39081035f74d72c02f7
SHA1	12c4904f171fd69c824d870ffb828b01c015e0df
SHA256	af5ab096d6454f06e60428a2d1188483530e978be7301dbacf48c758172cb568
SSDeep	3072:dvE0xUXwFClFhbzBLizkZGMIDK069c0acqw2UFbR0KdLi8:dvEngF+Fhb0gi569GTubRbe8
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterToolTemplates.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\XML Files\StarterToolTemplates.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	105.34 KB
MD5	3a555aef10c5bb7107194e2203ab25f6
SHA1	e6e42738aee61d22084933d2fcdcfdffae669eb3
SHA256	48562b9bdc7a50445bd6cd7c7025eceb7224d90598487980b972bc69da059655
SSDeep	3072:Z/wJsWLw5l/9Y0eUV5t9IBUezcuvpI3p1r:Z/wJc55e6ZGvpETr
ImpHash	-

C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml (Modified File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml (Dropped File) C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml (Modified File)
Mime Type	application/octet-stream
File Size	247.47 KB
MD5	eac8a4f5d0310af7c0887c0012f5f851
SHA1	07664a6106e6b585faaa8cce6ae87d3702a696f1
SHA256	298e7a183738a8e6488d38fe945888ffcdd74b27fd931badc0cd7dff0542f4ea
SSDeep	6144:OTPD7JOIMoq6gX7eM5Ehvp+BlELKh4fQJ/b:OV/MFDV4wPz+CD
ImpHash	-

C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf (Modified File)
Mime Type	application/octet-stream
File Size	107.97 KB
MD5	f2bcd9089fd64242a3a49f31bc5e852b
SHA1	6492beb9fade197892999f5875b6a698746fd426
SHA256	548915354ec44e6f5c8ee5821ef3dc3e1b8319909522cabe8ddfbb25d6bc6759
SSDeep	1536:Z7XLkrG1Pgv6hfdJoNn16Dbe+zJu7Uf/st6Uiwx4FNJ2795wjrP24U7WXmsuus:VXSGpyesGCyY7lt/XYLFrP24UZv
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	72.00 KB
MD5	c77d4a55d90462397562dec8966e8f79
SHA1	13ddb44dc49903238f7a3a49a3eb751c45273da6
SHA256	3292fec0c2e5d37433c91a3b085d0f4d03eeef62011e81c9caa5bece49ce074e
SSDeep	1536:q1BkOpxV4kVr7Pm3PNaqbsknkOPILNSj8YuNa1hTMcev+HN2a/ukEQs:qrkO/VfYouXoSgY9rM562kEQs
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf (Modified File)
Mime Type	application/octet-stream
File Size	69.39 KB
MD5	71c2a04a7b8d893d09736e91963fa344
SHA1	a1b261f1cc911863a546f8d312e5b842c7df0203
SHA256	559d2ecdf4f5303b0047f09db57089c6a59d79a384e7ca5d3b9f0a3b3a0da508
SSDeep	1536:Zkq7PgDXDwiMvAht/2aGaOb3NhARn6s54eaKv3jWFolSvGHM:OqDg3vMY/X5O/u6hcjWFolSvGs
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf (Modified File)
Mime Type	application/octet-stream
File Size	129.94 KB
MD5	0c97dbbb0f75c5e0f06d28a67157299c
SHA1	1681edf816e7f2f491ac0f92404d97a5a5e30d1e
SHA256	5ef203fde9094cdaeb56101dc8b9ed4b36be4ed4ad640438090843f4376f8547
SSDeep	3072:8LojOIy+n232FviCZiue01nJxEotZOstDJAkKoPY1I5d:8LojOIy+n6Ie01fEEZDBJTNY1I5d
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	21.53 KB
MD5	e9c3e7ba0ee7722eab00b72cc2d2ec54
SHA1	d5d2e6aeb26ca210687bfab12fb664e70308732f
SHA256	0131b5e7d8c6cd662b2f51067b7d0087ec7e11ec9351d801391d3c3e1a927b58
SSDeep	384:WWsqPWAuT7iMkSHervNeEcz5+x872FLHDgu+PI1RhI35REY+mCCFTQhB4eEsQ:WNiLmKtFO72FLHj+PIPhW5jtQhCeEsQ
ImpHash	-

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.44 KB
MD5	e02a80cc14d985f7398ffd59737401c3
SHA1	3180f33b20241edbb73db0a43c2affd32876181e
SHA256	b2b3e656a16a29f999d757bb0c7fa13e894568960fdab14cffcb333459cc9171
SSDeep	96:UPI7jGkuGnHHuVBw9bG05ANSB4XdXgYk1nlM2KHGGwSNEIw3Eh/SIu/FX7MIyfOq:UPA1jHOVm9r5AC4XK3JGwQEIwS6Iu9XK
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	944 Bytes
MD5	301ff244b5d9f30ad95093bbdaeda7c9
SHA1	4f842002929c61ef85bec82ecc9362e724483b1e
SHA256	89e6eb4262fecece7df866879841a1cb97b8514a1029f9c9962ebd15ab197fbb
SSDeep	24:7uLA7E7iKj88k1Gy0FyB1LD2+voEVbtzq+J3ZjeSatW//:7uk4+Kl9eJiELq+J3ZKSKK/
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	8129490d290586892795bca947dae207
SHA1	5d170240afee86bc469a577f6c3ab0bf5218987a
SHA256	752ad408fd45804e3b671873df1eb5f88f15a2db1ba15f04bc3007ad7ad8a0ca
SSDeep	24:7nRIf/w8dRGKiG0YeZUBWi3HwG4CLZUpCE5jJFqFriuq:7RIf48/iG0JZU9AG4MGpCE3Wil
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml (Dropped File)
Mime Type	application/octet-stream
File Size	928 Bytes
MD5	00e3711c093361ee8ce82dd61f8e2480
SHA1	3257f65c564afc6130c86551013dc70660878df2
SHA256	044e03bbfb5d2192e3b87de40ea18f0828e795ab97d242699c5739970300896e
SSDeep	24:7i0MwjalcflEPXRDT6zZlLegopd+6xJYVUPS:7NnulN/RHafMvxJYH
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	014d8641d7e8af757d06983ff22d4af5
SHA1	4d66f3ade3b613dc5e9fb1784131365ca8dfaae8
SHA256	46118a9551ab65fc15c6b5ce09e8156020b0ee3c8b8ebd9ed17b619133c79d44
SSDeep	24:7knbxW4Kn3gm5U0fEvJhoXlfMIGhsPVah9ac2pt0Rn:7kwLRC0fyfqMjhsPZc2Sn
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	d69f732e9fb76b124150a5052dc8510a
SHA1	a93060777ac9df979f1f9ddd57963fb70250b2fb
SHA256	43a7183ac95b58d1dab3b4d060681b93c83ffffcc4103102378a0f7a098d6ff7
SSDeep	24:7qil4aQm5KdvuM0+DRbNJhtP17xPv6oCzCW+KIPavD/rKzXUjFIBq:7Pl4zpdmiD7Jhv7xaVl1IPyGABZ
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	854e6f89ce32286b9cab2c5102b28c5f
SHA1	9fc93ec8aa5940b78b9b08cfd943c8f7240990de
SHA256	9101bf8598914517e7619a914995e9d092e24c88dd9e4ef6bddd478efb2a38c5
SSDeep	24:7riDFWXJw/y3ZxbMhXlUqGbilfRlBm3t+HXeuPX+7:7uDg+wMXlgbs43tyFX+7
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	c689984228b1c30edd41fe333080db36
SHA1	8ce4e3008f3cc93c0a61be918246505231cd58b9
SHA256	1760a2382abc4b192b1c4926a79073a244509fbf1271f2c5c2e41bd5f6c7dd2f
SSDeep	96:7CP4Uh8au451Vd2JxWjVQ7OKmJWsWFTmu2hr1vY:76L5f4JSVHzTWFTr2plY
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.73 KB
MD5	3b989f6fd36ef7c52bd523567ba43a8e
SHA1	20ba250d3b72cb042e57f57accae90edbbcc0000
SHA256	4b6065448c745afb4895479df54bfb97f95d02a7a265e530ce4bce4c8505cb04
SSDeep	96:7C/+LAJyV2+RBN1rGZI2JTBvZYhCFNoaJM99g8C+nao62XDp:7xLJ9fiI27ZGC7iK062Tp
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	60a36e7efb66a4bf7f5e0f772ddc4f28
SHA1	a98bc2ebb95194fd146b26cdef91a49a129443c4
SHA256	d80791e96144b68bc386cb27e880eefe13094ac3a34e28a1fc168357093dd718
SSDeep	96:7ClVxMmnLXSnJiMT9CA6hV3Y7SGorYvM4k+DMYG1SBFJ4g:7SxMkLmTCTV34SHrYBk+DM518Gg
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml (Dropped File)
Mime Type	application/octet-stream
File Size	3.55 KB
MD5	ead1526908030db020d3dba14d6cbd3b
SHA1	3a59b5849f640d484d37c798068403f34fd4d3c0
SHA256	e136259143f1bf035637b90dc18305fbc567a765e9eebb3b29d6f56779263a2a
SSDeep	96:7ClKfsN6MY+VVcAJCGundYC8CVLlZzSxHh9cF:7ZfsN6YVckYizh9cF
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.BusinessData.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.BusinessData.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	361.86 KB
MD5	bfee0e56b10326361e640003f31c9ec3
SHA1	7e07b1b68b1521d04b0ee5ef3cdaba6ba66ddae8
SHA256	0c3575e1b73a9fdf88efdc3097e058dd010b745ea95468d17ca6b7212b02eaa7
SSDeep	6144:0Na2IlraKxZEphjNthl1kAV42BJzGYbSco97X0CQCqSk4oMT4xRReZfHvAzsRp1U:0U2I9Hs1DGYbSjFQCFJ4xEP4uENs7e
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.39 KB
MD5	7d549af183445625c5efca964d98174c
SHA1	bb110663ea7e1b8cdd1f5c3970b8de20b82a3b0a
SHA256	79e7e65cf68647aff2559f8129428d11a6ad92fef5372cab1a6ecc4d7e9e9ab2
SSDeep	96:kHicQ5I/V1yFEfOJErqL6Tx652H3eB6UGEB1cFi4:1cP1ffPrq6Txol+i4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.83 KB
MD5	994cf83551cdeab6578b11f8c9cd7950
SHA1	ff8f4e47feb1d6b68f93406e6e322639a7546402
SHA256	6e8dff968ab03664742fd32dbb16fad79f5889bd36e86835435be3695b2066eb
SSDeep	48:di3GjhmlPx5NU8WTeP/x2TW62Vu3HB1E7FOGFEl2bQ:kWaPx5bWTeHQTWNEh1EWlKQ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	4e1b2639710e088018f7c79f833dd2a5
SHA1	04a6df1ecc4b6ecf357ad38b094b5ecf20fa356c
SHA256	08cb22a768ce4bb7e599585c5c67fa8b330713d1767788cc1684a1261b4c188d
SSDeep	48:dXtQ8EPCbUvjudKMJTLRrQVxGlYHNIfSP76Q0L:c5CdZJfRrU8Y+fW76
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png (Dropped File)
Mime Type	application/octet-stream
File Size	240 Bytes
MD5	badd6a329e98f1a8ce1473e107a43234
SHA1	a1840c8a3db29a6a99300815a11d51e18effcb3b
SHA256	ab214ca1e77080b3d00553781a14f235e12945f4a529631a8abf3b8cf5b35f2a
SSDeep	6:vITXJsC0ISEQgJBXhik/atQorFnl/QnDdX:vITXeIsgJS2zoYRX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	28.77 KB
MD5	086d8176271e1374f5308ed37276de37
SHA1	240458a4386412ecd28f6878b60c1ef17fe8f708
SHA256	4d034f6a94dbcacbc0ab540bc50234b36f4e5ba56e59b16685c450fa3d17dab5
SSDeep	384:GCfQULN48Qt0LbF1qlb9cJW0lBrnJunWKkmFiR0whC/XxWZzDYgL+6pBX1B5FwxD:rZ48QWLbFElWpsnWKtVwGXx2j1B5GQg
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	3.81 KB
MD5	951ca872722eb8f8ec5023e7839e37ba
SHA1	9a942c4a4575c3b31313f5c52c42be564f863fac
SHA256	8a8c534abb53ceb20decdcfb81ddd945c375a7a7b1871ded7cbf68620f72c7b3
SSDeep	96:LIvyhgiWCdq1QjGGd6IXsHlZRjjPDBOksmIN+stGOToa:xfdq1Qa2o5P48S
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.77 KB
MD5	c3347ca842f2ea8f2f7d32d4ba6e42e3
SHA1	04a5fc896e486c9040a6b3acd886036e71d92996
SHA256	ea85b990da7d5111f09a87d04211c5f1e315f13703da0bce382e03d244fc7346
SSDeep	48:n98fdvU5ociFsuB6mU2Fu89FMC15zrBC8tPF1X6Pv:nuSpiCuUB2bVfzrBCQ91X6v
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	5.70 KB
MD5	3108a186cb2262f831220e5a84cdb76c
SHA1	3bdaa6b088ccf564afcc6a9b2e82ccc4a3476da4
SHA256	3a7b8cfe0ab2e2f25fc3ce69cb9a002be32e739ebb451f8d61e64f328d6a1def
SSDeep	96:zADtovr22VVwkPFb76zUlH6hEC87NTaPjBIr8g9kWLGrYGMlg781bIfnYwbY:0tejKwx56uL8FIr8kkWjranYJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	bfafa590cb01128394171a1804c8cb87
SHA1	750a18803d4a131370f1012285db5fc3c55ad3cb
SHA256	c89c05fd9f3d1846cf6a543f72c0d537969684dc4442e305cc1281df9a99728c
SSDeep	24:RnJoyWuESzUeIHTyozCo5fJSLK06/zgIQbNYE0qQ4FYqsOmNpFYn8n3/CX2RymBr:RnJoDhSSHTWWfWK06LmbN22FfXUDBxB
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	10.52 KB
MD5	1f320965b316228d60180143eb3c8f7b
SHA1	8128e42691945a7f9cb6b19d448e6c7a4e8e8092
SHA256	bf24382393a924e5b915dd305a783d7a551f5e20818f427b268052cf8d5ef39b
SSDeep	192:exxy/lsscUDBaGgJnWP++O/hByBUVvzypgfAE3cKS5u8zWD6K7ZmFEMITHZHCJ8v:Ey/kUoGgJnm+JBkUFznfAE3LmaD64ZMq
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	13.53 KB
MD5	e65f809a439bc8bf7b6336efc77bc1a8
SHA1	61df5188f1e16916f791502257ca27d8abf29b59
SHA256	80f68e8a3e860cf29e2e5d5cef91c787c2ea9b6dfcf944165e1463b9dd7c9069
SSDeep	384:Db+KcJX/awxDgbJYF/THQxxZgjLuZMuLAI4qIm:Db+KcJX/awxMbqF/THQ7u/uZ16qN
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	7.66 KB
MD5	ceb18b7273ee630274f2f168fc55b0d0
SHA1	0482af5716644628c38d135e50a3f4282fc3d86c
SHA256	c2ef28db4c5b6eedf7ee59a798a273b2af89fb731d639470c48e0a13a01d7b0b
SSDeep	192:jHx4+rG9YOP2fXBN8XMjLDr7J8ijx8G9Di/EhZeoS:jR4+3vXfuM/DrV8Ox8Ei0a
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	720 Bytes
MD5	b462f017512910a8c1629c1297b89853
SHA1	16b06a191a6768244fbe577c76fdb810b93bcad6
SHA256	82dad5dd44deecc4c13d649111774eb64dd657741a230de66fc0c9451d853298
SSDeep	12:M3nTBIwWD1zVznhda3HbFQF+3T/AbNaNxW5JL5doVXlC2DRn7WzhjuPY7IA9Qr2i:M3nTqwWRVzhda32F+D/AcWXoVXE2Ddg0
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	7.56 KB
MD5	469844e1c6c9273f0f6ee970ffd00931
SHA1	9610c1a155f706815b3010af9e168ab762102445
SHA256	51577cf2bf9f6715a66942684502543b0bcb2d012108f3ab77742c550201ffd3
SSDeep	192:El7AoNAItkMYxlKYbg4vJvKExS0yGD/W/mSwko:EtAoNKM8lKYktExieOo
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	20.52 KB
MD5	319f16d0a1e01c1e084fe18730d99a43
SHA1	1234c41ee464450d25c1d9dbd1b622fd46b510e4
SHA256	c084f0760eec744b9540fea5b7dbc6f7bcfbf39da9aa3bf7595abb5c5f551306
SSDeep	384:KL31+p06JhwAODrJ93QLjVrv6H3rhWt5PYPLjcjJ32JkCIOjiqzZZb0aW0CHFM:Kf6J0rJ93iIX12APiQa0jBZZbW0QW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	6.36 KB
MD5	357139ebe93a3b103945fc1ac9b104cb
SHA1	6e8cfff874ca395d6103f0858067b141830890ea
SHA256	cca51ac1a12e2d15085ad84f9d4f422461883c0c8deb267fb7d8139f7b06193e
SSDeep	192:vibCvxRjSe10b4UsCcf/zqrpG1DZPmfRlpEZ:vib6xRHmbtIerpGfPmCZ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	11.31 KB
MD5	8e017c98e16610990b907432602cf1ab
SHA1	15c22eac8144c24b18349a3daa8f0855d363b7a3
SHA256	13017ae946bb7c3e2d22a351c8b1e3b542665d1d98e1b5bb2f0339aa660f5936
SSDeep	192:lbS4DhFJz+s7xKQtVph0DhEjkARvGI41nfUSMNG2ZQanYZSNddEBPFeP:lbLjJzZkmVv0DmkAdGXfUSqG23pNd29M
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.41 KB
MD5	fafe71568dda97d4a48a74ff412ff0fa
SHA1	893dba246b8bb597023e18b290b16ab11ef85017
SHA256	957299cfe3a4d6420d0bab04580a5fc21e1db5adaf9c82d79cf0a7eaa24dd35b
SSDeep	96:vmNCNnWG1eUHBF+OLel3oAXbL4qcq0Ys4axn:lN9Bal3oAXbL4qw4Y
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	3.81 KB
MD5	e81f8f5bf4c54ecc11ce230cf6867a03
SHA1	045fc8b1c70024b660b5e2dd0ce1f76ee9d6c425
SHA256	7e24ad00065b9570653a5ba8c9068c7e351270022fe8c8e8211b4cf70fb4dea3
SSDeep	96:DstLyq4+gtGNleoZU71QUEV6tjBnodJXxZi:AtLy7+Dleoa71QJKnozxI
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	1.09 KB
MD5	24c250944d6e91547db372825b2f7c97
SHA1	1127642518593936b10662e11ec17c7bea972325
SHA256	f6b89832f45d9406972d438854b12271762b1a1884d16c3d4de67064950ecc00
SSDeep	24:M3/UpEBTxBKM+BQX8nS5tylOAV/zj89yK8J:M8KBTxBVC/nwteV/zj89yXJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	21.06 KB
MD5	32039425f8c39e235067d8d239ac72f5
SHA1	4864eb0e2a6cd946d085fbfa551121ae6f0b69ac
SHA256	48ff904293dd2397b1e526f9db6fca1ed3a885d60eaec51150bf907915570f6b
SSDeep	384:PzPn+N7b+lhDS0e1onahRVrOrzdq7CpLXywxt9IBo/g98XewVmT2UTY:Pz+Ngh207MRUrzdqQqQewVKTY
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	84865cfb9011548cc99766ebde307bd6
SHA1	2c679eb4fb0510b0492130f25385898b8ae389ee
SHA256	1e98c65a16e3611b31b57bc15c82aba22c33de16aae53a49f9e97cc38b09a788
SSDeep	192:SY8FoKLewvpXgxTR7bUL/GHzIu9Hh1Qp53YXk5Na++8oTE:3WoKSwBwd1bUL/wMiHh103V5CZE
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	c488159c8f59701efb845f0853675dc3
SHA1	3e2b627cdee9d27d07a0704c9d2b327c0183ecba
SHA256	97a2a98a82971214c3d60f65cdf7d32a866bfa2090547d2f24f02e1abaf37d0a
SSDeep	24:l+J2dMzQ4+iLzbInliPfWxTa1kC2U6XD9biZCggu4qtG81D:l+GMzkIzbMlQaTaWC2U6T9biZB4l4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	f9258612bc28e2f54af88e49c55c8026
SHA1	a23347a662d6669cc759f1e12f842137215ebdcb
SHA256	bec413c95326064db6969851fd5bb47f76e45e0bd6380cf6af9e15c5df60e414
SSDeep	48:l+GMzkIzbMlQaTaWC2U6T9ummdhBJ4zaJ:qzkI/MWajPU6vYqaJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.42 KB
MD5	654184d63536dbcf65c1d29dec1c7080
SHA1	6be0308694a976a2d8a42ac069e364e1711ec8de
SHA256	579f760d0e76716607b0ba0c8df70b7259aa407463762a85ce2f8093b1b22514
SSDeep	24:9QqEKbBUQIs2/NH76x0avM3fDIK2C+WmC10xPnviwgSoYpyX7cTK89WBvI70iPSm:9PeJ2x7v8fYWmC1ovPpo4gqT9wAwixKG
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	14.31 KB
MD5	c2cb1cc3903bb3c6e57219a4e72cb61b
SHA1	c9f424ec6078cdb578f450f0cd355b4fa1122c70
SHA256	8818bbee978d4834214f2d15190e20f9fbd7dd0868215ac800550a0741e47fb0
SSDeep	384:7+rP/voFlCQl3gwyxoNhLfafColOXup0R45ZuW0vmw:7+LiMzxE9faKje045ZVw
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	42.78 KB
MD5	33b47b26f8ea42619ba729a6548932c5
SHA1	d89a15d4b3e8af503b096a45c341f37a6069a54f
SHA256	dec7f994df0e89d1020b3d9fbb58c0399267d04327e0d5157385977a82703fbe
SSDeep	768:Myk7zALAvbv0hVqpb6TzN3OZT00jUr4s91QIHgtny9LNAv0qIyloH0d4seE9xGxm:svbkUpb2B3eT0TJAGNAv0qlloUdnGRXa
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	9.28 KB
MD5	b04f518f0d7a8598a8b52a69018d1cee
SHA1	1799369605ad32baed7a6245fd3b27d4f11d1cef
SHA256	f30b83613c3c28c3b6d81bd1f096b393ea68dae675255519361222c5b80c389f
SSDeep	192:Mfqi+lj8EOA5e5CqJNJdaOzv3muILLGGxZrhRd:+qi+lj8BHRpzv3ILLGkr/d
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	128 Bytes
MD5	458d4659ad56e2bd6191f0f574fb88a0
SHA1	97868e8d86958b0afdca70b64d3c2aaab36a7459
SHA256	ec07dc757b826c3b6a329a2bf605288a0aeacd3970f5e544195afd580e8dcdfa
SSDeep	3:kYDbxuvpB7BISbB2DQzM7hjyLfsCOuCaP6FzaNWEVXht:TDbxcprIiADQ2hjwfme6FEVX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html (Dropped File)
Mime Type	text/html
File Size	944 Bytes
MD5	07de20df57f7ab935e4a4d97e2a98f1e
SHA1	17daff93e8579034d26d9477957b44ac15f2cda7
SHA256	bd85a59c28e322a83d7fd2f08997255985b6dbeb70ac6b61173ee2b969b78c60
SSDeep	24:fqmKIJkoNMAmRb/tzbmdbGVSwsKrjqcdeGeZScG0FnGSuGwH+Zy:7KIYA2b/tzmals8VI8d
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html (Dropped File)
Mime Type	text/html
File Size	624 Bytes
MD5	b87b109b3f1f264b9a5f71986e99d047
SHA1	588d238d58b8b0fb9b99fedeb57f726c4a1eaa09
SHA256	75d52693029e5abbaf155cfa5fac25acd24c1b5f426a72b07d5cbda502f005eb
SSDeep	12:uUBFUZPwiuinkQlIN7sslp19qVbENAXvvDyersWgKsIg3LERrnc5MvnsiShV:fqmKIvlpStES2et5sJQhncJNhV
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	15.52 KB
MD5	e43b875cac5b12b2a8bade4484a58dd2
SHA1	f310406ff2aa3b7d15f9350f602c09b9e05d5718
SHA256	5ee438819967ff8f7e725f23f94e8cd64b74a135aa919ddd857803e8200ead05
SSDeep	384:gyLimNQiFwggC2k0qljK9l12HNALuirZu2/TOdEJ4dwT:DzQiKD00qRK9lU8Z9bO3o
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	8.23 KB
MD5	45ce98d60f973697cb0bd6d3d5be2442
SHA1	3f55ae5e01b8bde4d5383aa02ec38bee206a3c94
SHA256	df8b9c3ad243ecc12bd2531276d8957917aee56e20130a63008c5e6b208b90b3
SSDeep	192:Vj45TAqC0sWRJ70RHePuwxveAxB/Sku7NKUnSYq5IXG:RYT80sO+RHe9ve2SZRKUj6Z
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	2.09 KB
MD5	2e3baed2f9b27a6e507b236392f33fd1
SHA1	48716f5152e47a9cf784e144c5b54a5ee0dfe2e5
SHA256	4f4541c9b3f9de57e968c16c5c0b4c8a4834d0c6d731b4f326664b53e70e5c8e
SSDeep	48:oZl1Hv0LknKCfT+xj88PCM8gFD+5aoB50XyKEr/ZiPb4G0:orNNnKCqFRJ8gFWaor0Xy9r/ZiPM
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html (Dropped File)
Mime Type	text/html
File Size	752 Bytes
MD5	d4a96067db256c84f46706d6652383d9
SHA1	d1423f1e4f70630a50b8957b8c2a4d641df03a8c
SHA256	f73cd9c20fb6a14de0398477716e0709d20a7976bbe7c88a1c5173fbfd8eb13c
SSDeep	12:orN6FpTu/hv62rrPcOjDx8NPg4CDOB1Zy3+8rd/7FkaBDpEf+AhpWyH:orN6+1HrPcO44TOBLW+wF19pEf+A2s
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	3.16 KB
MD5	ee1f0a9a81f874c4009f088049e4c016
SHA1	93f50912f35a089fc749b3615150f51ae73ee346
SHA256	14f13008682a732032aac9c38784adf242524d6382f4213613b28aef1e2ea372
SSDeep	48:oZl1Hv0LaVKn70Vs+s+bbvc6+PIi4kMaMpWvCzFyr5nc20:orNmnpRSbL+wirMp18y
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	3.12 KB
MD5	107944b8175b060423fe3bbdd78508c7
SHA1	e456e5fc24f4c8e0bef3b30a4c411f0c93a49085
SHA256	54116a8817a5acbdc61b368e3830a901368aff8ad07aa99ded6eba6ad5ce8249
SSDeep	48:oZl1Hv0LmsMF4RQ2at2SQlQLFOO+djrs02YWeHz7o3QCjxomALKdwcaMQ:orN1sk2x3xB6YWWPo3HjpAGdFaMQ
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	17.75 KB
MD5	d7c8e0852b55e22b798938b96e444e59
SHA1	826467a6102097183b7e05d2035f0401610b84d4
SHA256	c82f859c611e3e684876b392a1ab8a89a47665207a97ac598066211fa638fede
SSDeep	384:43JVhCMpfLTAxOrhYNYLnkK5vsLzTnNB6OMxTFeBt86:EDbpf1qNWkKBsLzTOon86
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	11.73 KB
MD5	21ee9473f367ad296183b8c5819b8383
SHA1	d33715c5521ce27bc44cf26f5e313096a330fa54
SHA256	39b59378f6774098094f6f97544af381beecfff47abe3841a0d6877f328d243d
SSDeep	192:9lH39lXJ7904jlgebOld2IddMLu3zIn2qKUAGE4Ww4HVDkY1zd6lAwaYoy:9lNlXJ795gF32aukzI2qK0EpBgYKmy
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html (Dropped File)
Mime Type	text/html
File Size	4.78 KB
MD5	b14f7cfa4dce777277e746b31690e04e
SHA1	137947abc477d5222e8ffdacd1bc4f0081c97a5f
SHA256	37f105c6be87fbb71875e12a25b31979a8ed075428397a55a3b2ca2c70614129
SSDeep	96:orN2Y4eCR+YjoiGz1yjYTECRnNyKr8mRMd0/Rj+UXEOm/CEAXag:2CDGz1ysPyKrJMd0jXE2XD
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html (Dropped File)
Mime Type	text/html
File Size	2.64 KB
MD5	35985b58704610db7b3d7309ee8c3c67
SHA1	04ae0e750f97eb82516eee32f4663327d2b12b0d
SHA256	3cb7cb511c5042cdc96e5456c2f9d51755d30b0057205dc84995c2b7007b2484
SSDeep	48:oZl1Hv0LE4oVeNur6Gu4PmlJWvbJ5sN+P92yDnal82n1IZuIkxEjP:orNooANu2Gu4PmHWvHsgPuCOeroEjP
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.06 KB
MD5	2941557ab0b8f6114b9f0e2c451c42cb
SHA1	bdb65737665a4a89f330924f7a0ae5b9711d8bc4
SHA256	dac26f92a2f88465cd77f6e35039db5975ef6752bab6ca8a9bb58c415428ed39
SSDeep	48:HuwhxTKBT45DZD4O0drGuOtBBeOGrVcH9X0DdRnxLd4ygH9ZDkX:HuqiuDx4O0I3GOGp49SRnxLd4bK
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	39e6cf40fc0c5a45f9c5983791b47b6a
SHA1	ae4b6460f578ef36bc51a7c5e032c5bc0900208a
SHA256	f2a7afeba22012932f34dbfabe157516d39dbe973c91b83c21d131670accb10f
SSDeep	48:zBI+EE+w8JP0k6w2qQuOgBuCIMOeXnynkMVQHjgz:KTMEP76WAmuJeXkB8jgz
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	1.09 KB
MD5	d44b0f7f4d28f39d8d82bf46f97d2505
SHA1	47c3f32ac7d8707051b72f962c893e026b757e30
SHA256	834c2878a00542fd180f54bc5f366fb4c6f0df4adfa87de2fb5cee86e8a432a5
SSDeep	24:/0aYsSyNB0ndcycn4pU3MGEBnBWJBltB+w1aKND61:/LYsJB0nyoUpEJBWnltBsGD61
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	2.09 KB
MD5	41e980f795193e2304610188806fd72c
SHA1	1a4bce4d79e17e67c279c64d9a101b6fc7c773c2
SHA256	35d5512eb2ebe2893ba57dfd31965ae9c68f9c5c015b8243c58aa55018f8f1d8
SSDeep	48:/LYsJB0naZklTAxMVn9bKGGcOCJ6XKMyQ6WW:/LDJB0n+8ooZGcOC1ZQ6f
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html (Dropped File)
Mime Type	text/html
File Size	4.34 KB
MD5	80b682c79a177bb03b0a2897a70fb86a
SHA1	d78234d529b69d91c5aa1d60f6fe0f2be17d586b
SHA256	5826b2c39b07155999c0526ac0b6f9df52c33048d425182684eb2f34b1105d92
SSDeep	96:/LDJB0nShCFUmw7NtJStuBQArgF/ScD37IOYpk4bylb77lptWj0:TVjCqrAtpUi0Of4GR773Ej0
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	3.41 KB
MD5	6bbed762961166fc625b091a60eda949
SHA1	7807807994d149b95475ce944dca4d39ba730f65
SHA256	5297cf6f3591825ad483daa58648ef8dfcc842d63faa422a9786a969fbdf47e5
SSDeep	96:/LDJB0nA9pvGJ+Ttri6r2FZDS9innpWszJH0Wvkw:TVBpvGJ+TF6FIcnpRVH0Wcw
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	17.67 KB
MD5	063c532264f18de92359ad9c5be49216
SHA1	d477f7cf95c2afdbd131853ce104af62fde70a06
SHA256	dfc4463cae01a3347e8b1db40a7638778b6ee7bf8b8924d086c91b1e64426d7b
SSDeep	384:Tfpr9eaMyYfcaaB4oPuVOVUqZZv0uXlzHg6KYaUZE5:pMmVPuVQdXlzHg6xZk
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html (Dropped File)
Mime Type	text/html
File Size	1.53 KB
MD5	204f512195e0d0e12eb412aa6bb341a9
SHA1	3a370b5f5e695879c21b67733a62f557fa9648b0
SHA256	84c063fea6c33c415f8f068e1902dbfaf8345cbc9f0bd0399bb09415ebdbcc78
SSDeep	24:/0aYsSyNB0ndcZwwchrcJdI9AWNuO7XKDS01C7FJ+Y/vDOzyIU4v4Ua5X9:/LYsJB0nL/oJe9B4O7kS0wFImODBaH
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	5.58 KB
MD5	ae9721ee31b7aef7cb36ee85f3069bee
SHA1	6d2477e8e9c3de3cb2b0b28960a356e1f76cb095
SHA256	0b462b703f3f04c38bf2cca04cbbbabc5e56447f9f0feb73b197cf54cb0d8f60
SSDeep	96:/LDJB0nr9tIMRs+dhv4QMUQFtpCcaM2DtAbxkKD/0gkjz+l8E4xfMccDnx8wLuKp:TVG5sqv4gUz7adxOkKD/9kjSmxJ2xDLN
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	7.00 KB
MD5	4f4e26f584b6f5fd303fcb9c41a39580
SHA1	c06454a1cf70f2aea27eb4f8fbeba03ab3ed40e7
SHA256	a6132b37836f99245768dded87571cb28b58881e9e166aa5d310a5a57078bfa3
SSDeep	192:17jp57wFZ4rFQdNfjPgZM0m+9eBbh72zvOZ:17jTK4BQdB1+9e/sOZ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.25 KB
MD5	21bc295bb1c7c8d6ba6f11e8b1aa5840
SHA1	38ddcdaabc88060a7f9e6a32aebb6e913e6a4390
SHA256	3d29ec94268be24e37bfd4091e036684333c23882d3afa4027b4e01f3e5733a7
SSDeep	96:9jGqbmPMNElH3RMNXlfz/XiO6T1aIfI0ON5yQi/pngx:9jPQ3RMTfTi/xxfI0ON5cngx
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Teal.css.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Teal.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	d5dd009b1f6601227dbb09a3c0619b3f
SHA1	3e831cfe28a4af2d4956ef403d0978c36bc3a476
SHA256	5cad25b30dec5e5932c42dfa4a2f2896e50bb0b07eedabd0fffc7112da8317e3
SSDeep	48:2uGmqScMUlRsIV1L/k7N5IGLeB49CS3U8Zo2Mq:2LVSCzsIVN/UNifBgCKn
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html (Dropped File)
Mime Type	text/html
File Size	1.06 KB
MD5	dd4a2b94264897982aac1a953753b52a
SHA1	b9ce8ff379133a379c0565789a7f0ce3dc0d34c0
SHA256	d880488cf9b4f254bf63df421d462689b193ea407fc2298153a81835a1993c7a
SSDeep	24:/0aYsSyNB0ndcwH4PV27IIC5bUv0tFj+n3XFSGsd+:/LYsJB0nmEfCmQFj+HFb++
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	2.05 KB
MD5	45e93ae45c5301971773758d4002cc91
SHA1	c54b999b575644c742aa1a4eecd215aab40c200b
SHA256	f68fb5bd966823c295603a2a15c38634989ac68342cfdde7f95cb4f2e787cff9
SSDeep	48:/LYsJB0nYVKWYnmxMGDt5q3KiCZO8qXenFhCWN0:/LDJB0nY4W5xMCjO8O8FhCW0
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html (Dropped File)
Mime Type	text/html
File Size	4.94 KB
MD5	774327b371660c8262dee6140707f326
SHA1	c07009ce4ca75bffdbce4a25d685e462a94ad623
SHA256	3cb31718d7de7508e6c1892872ca3f517dd2d5a3250281d1326897ec5e75e839
SSDeep	96:/LDJB0nATK13jUqrqrMowAl8j/YYRoNlQA9f4ZNfaXGELlt0jtZDgqxEe7pr+d/Z:TV9K13YqQwAlCYYRoNlQAN4ZHEJtOZDs
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	4.95 KB
MD5	1abf9abcc649b30a69261b2fa5f735ac
SHA1	205ce2e7f0027cf5914afdba62aae3efc1a97422
SHA256	5b7df0b23b46aab937038b83c1902ecec166fa6d9d6195d6295cf2c50ad0adc4
SSDeep	96:/LDJB0nePsGwBnW6yQI2VG+p+Z4AGvmyKnb18wx2Fc6+a+ZN1NywWgGdEysEK3R:TVyGw5yQI2VBiLmKnb1z6c6ayJg/ysN
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html.[neftet@tutanota.com].boom (Dropped File)
Mime Type	text/html
File Size	2.17 KB
MD5	483237a89d8902734609551b047db10a
SHA1	dda19035cd974d7d1daa735e62204ff92942dd52
SHA256	500c93d02bbfbffc4b23d013c87db5faac55865a28339c9ba569c888a4f208b3
SSDeep	48:/LYsJB0nZwynHEhOFGAzwJ4u9HS3EYWxYDQUhTSBe9rb:/LDJB0nZwYHEF48N/OD3hUeRb
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html.[neftet@tutanota.com].boom

Dropped File

Text

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html (Dropped File)
Mime Type	text/html
File Size	2.09 KB
MD5	527a9b69a8df87804b6c41bca8273f3e
SHA1	39d93624ed94dcab79df9c5f8b9ea2f2e15589ea
SHA256	d598155354ad63b79f6da7db1c3db1d15cb7f654f6360b68a390b833c8150cca
SSDeep	48:/LYsJB0nHG1PrpWKih+i/t8brxjx7sSLsj9QHRklg5YjZHe:/LDJB0nHQzpWKih+jbrxl7szAgj8
ImpHash	-
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml (Dropped File)
Mime Type	application/octet-stream
File Size	2.53 KB
MD5	cc96ec5f85ccb14f03c8e8488bd06618
SHA1	12376e8c32bc405c5999824ad4cf5803771e6ede
SHA256	02c60d38642ffe6ada7958262a3098c342517c845d12f8f456b86c42f654b2fc
SSDeep	48:fgGoU6vWsjZisOjhH0sElIR1HY3vd1feuvOcS+VZU5iZdTxqTZmin4JNTkO:fz6vHr+0sq85Y3vEcQ+bqin
ImpHash	-

C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml

Dropped File

Stream

Unknown

»

Also Known As	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	6.97 KB
MD5	2a10eb241e039e318999ef1b138df892
SHA1	c97a724875845f8e33ee8680c5b5c00d21a06660
SHA256	daae68cdf9696be8735772cb646652d854fe299516ad75e77b1937bcfed54237
SSDeep	192:foaY49YKiQcycoYRokISQt90RSx7EuUBSShly++xBT/I:T9YAcnR0lb5GuUy+6/I
ImpHash	-

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.53 KB
MD5	e19f64788356991346047fcbc3a15e6b
SHA1	a2b7797900ea93902fae53644d7e37aabf27b439
SHA256	0bb963fb362359cc5b6dd04ee65afa819fb2a712674f17536baa1c948b678f53
SSDeep	48:Uc4UY7blcKknlaZlVm/116/Bla/1w6bGUJNp6KiiN:Uc4UUUWlVm91Ma6AfEKf
ImpHash	-

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	2abf56c2132557b2f3b7d4dffe4b6305
SHA1	2b664b3ca7f9b32e6c076d15bab7c20b6bf7bdb2
SHA256	a5fdd7f4dce91b4922d3bd41e1b610cc439d18f75e51b7a826abe0ac50f478a0
SSDeep	24:UsgL9blzOPmZ7ATQeK/FrUX6kF3V7DarLPcs5fJHKlnWTXbE9qDrigcXSvqwlqlM:U99BzIc7SLWFrUX6/LjJHWnWTbE9GriI
ImpHash	-

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	731900497687f7ae4795226f35cc01d2
SHA1	bc8a29cd62993959476ec228b200dd6a7eb6d51d
SHA256	ca344bef66f0af24f75fe4fc91401e02c4172e6d8ddacef1329e7cafb25ad684
SSDeep	48:UTWgnHU3d7jdfvk9KfBZlfgZT6bW77y5DBnkFIPrR9:UTWgnHap0I5ZtgZT6bW3y5ak9
ImpHash	-

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.58 KB
MD5	48af3a6cfaa500d868ce30a53a6305a6
SHA1	3f4b058af56bfe88154e00fefa348a09e4d8558f
SHA256	ee4a876e78449e688bf0b7b334436529017065b2b500731449f314dd37e9b5d8
SSDeep	48:UhHnBwBKFpy2jft85rxLTGE3Uz7BAFUVa02k3uT:UdB8KXv2573Uxfp2kuT
ImpHash	-

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.12 KB
MD5	ad6221e3d75ada7280c0d794cc945767
SHA1	d147feaf579b07e5e621cabb96dea94058b97a5f
SHA256	9eefc48f43a63b75e6422691fc7b1aa7eb46ed51ae5bb6aa5d9dea83962c45b4
SSDeep	96:UA3+XVKrsYOds+gEpplpQIuzPgN6tUnWwEgYl:Um+XPf+IcPgNrn5RG
ImpHash	-

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.77 KB
MD5	08e15d2ce6a2f3f8af70f52dcfbf97b5
SHA1	9ef746b2761216e0b732117bf89c3d340a95d931
SHA256	fb2c8f4c96021e5a78b362bb5c4900ab49d70aa9f35d553a148b43408ba3baf3
SSDeep	48:Uir9+PZurHQNsw/hZjBQ71qfJBorRBQBz6+445w:UTupWhZOZqvocBu+LC
ImpHash	-

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	816 Bytes
MD5	ca97374774722b2894fd45da5e4a1c1a
SHA1	2fb116ffff4305f269a3860a96a074b6fe8c5ade
SHA256	208d67c9dca7ee011d45ee72a35e4f441750803df430ebd87fcf714fed8a6eb0
SSDeep	24:UsQHvjkHGj2XD0Po9eC7Pe7gxihDyJRTgsBfhtskvu0h45D:UJwSR0qTD2tBvuJD
ImpHash	-

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.75 KB
MD5	52da66fc4f09ebf2c1b1117f176e774b
SHA1	82cbdfc6e0bf773cf81c4538bd10c29dabe3f659
SHA256	8688733da0d07234446e3662a36e3cab660122d3a0cb92979951743c83583fdb
SSDeep	96:UTrinPGU/q4JZD4jGWb/rafLN/F8gAsLhlMaFGHKdZ+2Ql9LKa1BoVwiNYy4nY:UanPf/JZDxmatnzFaLaZDg9L1BVKYnnY
ImpHash	-

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.20 KB
MD5	2160ee641e00ca1e93df71e112c0c6eb
SHA1	d5b3c10b318b0f27730a367f1ffbf64b0d65d9bc
SHA256	8a432175db87441f555ec87411733485bea5082ccf90660cf60b996654792c75
SSDeep	24:Uss8LV+w+0c0UNy/h6gDgaV9lGtiNOugKCSBouAIHNYxcAuWh4o:UH8JY0bUNYwM9Mru9Gjxupo
ImpHash	-

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.81 KB
MD5	b9e3f21724797282ebc0650f99220983
SHA1	deec3786cd1fadf5e835ea858f2d71fa9fb882df
SHA256	e35063c185e9f5cc57b3c31a7fa12f8b482e53fac381e3538bad7b0fcae681ac
SSDeep	48:UqUw8lxBFVhABu06tUxKdnDX/CUS5wLXsX5h/:UqWlxdhAY0JxSDPCOsX5h/
ImpHash	-

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.11 KB
MD5	d86c5122635a2518d8f89926a9e9880a
SHA1	3660658f6669ab94e95f7115be9c96c64caf176a
SHA256	702b1d08157dad36ab5d2f392712e963d17e6407c1aea2fe5525c81e9eceb7cc
SSDeep	192:UbW0KqBJziztip0kV8aT8DJgGZDocODM9D5tB:UbW0KqG8iIoJgGuzeN
ImpHash	-

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.28 KB
MD5	0ad1ebaea8562d9004966a712478e135
SHA1	adf22026eac5022d7695f375fd7fdb19640017d7
SHA256	1f5b69fa06bf78f89da27d2f9b3f8bbc89a72970c20a16d88fd5df8f2fe2ef01
SSDeep	192:UvP489/MapbTr1QBbP59cEVvMXdlYOTs7OcID9+1l8Xqr/LWGrSfY+db:UI89UapbTr1YbPLTa9Ts7ObDo1l+0/af
ImpHash	-

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	a397a1e33218e29d289451803d9ef454
SHA1	f5ccde69630c5ff7a2855b842e03af05bef8cb2e
SHA256	140c859d44ce32896ec5f65db15aa3f2a8dca7bab899c974470ca44625b4d33b
SSDeep	48:UkzFMWqmx250r8ZALh3HHCc6+zNilUwDpSapd:UkqDAiyh3Cc6+B+mMd
ImpHash	-

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	928 Bytes
MD5	5776fc48d18e1de00468edfef1b7ef30
SHA1	2bbf08c097b083f185296ed9cd92b974b536c1fe
SHA256	8c53a968d90e1d339b7a77976b3c89cc41dec8a2a7d3a50ad0b248d2469202ef
SSDeep	24:UshzxDTPlrZx11A/Pwxqdq1dEn1S8DSUIsE:UyJP1A3yq41dA4rr
ImpHash	-

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.14 KB
MD5	9b52600f5911bf54308d21b6648caf02
SHA1	ebcba0d331a9b884e2680782a9e35dccab84d6af
SHA256	3bc683f9c4dc2df6b2a21e2125d10471f4bb24fbe49c49fc0d74e173396d1eff
SSDeep	192:UJgelK9auqdjURz3HIDAzC35tmSxgYgMyAYfEXBLga:UJg+K95kUFod5/6YgMy3gBLga
ImpHash	-

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml (Modified File)
Mime Type	application/octet-stream
File Size	582.38 KB
MD5	fe071ad896e82dc11e4e2fd95c258fe9
SHA1	15c709f6e08fb13e1899fc46df3fe6841e47d705
SHA256	484cc0a96a8f884c6125c2a441869356d2a4d1ac0e390c66568b08eddbc394eb
SSDeep	12288:KssO2QPZkqgV3KsPF8pr4IhdOuSq0vSzRXQsxf73DZwitKw7u/sM6fU2sHIu:KssHQBkqe0prb2W0vgRXQspFwitKwK/N
ImpHash	-

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.38 KB
MD5	08e40053338da5770cba8c4171e1e369
SHA1	7fc27a250f9165b47b16d91cf2f0fe27d48c4551
SHA256	c03d81840bbf6dacb8e76d0f06db18217fb55e586efb86c90744f0b4ed549314
SSDeep	768:UAwEmum2CWp0hzEU1pRmGbs42hu30kzpFEGjfE3g2xw1eTDyU1:yICWahppRpw4z0kYGQg2xw0b1
ImpHash	-

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.28 KB
MD5	66667b85852087b0cd2855bb33a80941
SHA1	4a2e149cbd1a2b0374167f3bce5cbd0cdc65992d
SHA256	9f8a118c0e89b2dd8045093ef2545e58b8fbebaa8cefa7b3a47ea1c91c35cf56
SSDeep	192:UJIckude4hGVfrHhzgklAYsr9swfyILafhT:UJIgJKrHhzgyYr9rfyImfhT
ImpHash	-

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.11 KB
MD5	c27f61c8a0f74d1439dfc065700294a7
SHA1	211fcf5f9a9c041aff3be9315bb31d920b0411bb
SHA256	37a2c87743e22b9c7c9fe0f6fa24c5898b596be7738badcb51d311009bb70b0c
SSDeep	384:UaHnA4ycHy0Z8SbaXJAXC12Ax+SCVaYPH6hDXjGobKhELrNKNM8k2IjlN+Z9felN:UQnA4yMJZuXaXC1xCTUDXjGoKGre36vL
ImpHash	-

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.53 KB
MD5	107930c42e04659d345d95eec41adbe0
SHA1	865a2b88226543e6733b94164b9fc331d6bc9a94
SHA256	37071c911a176d09dabdaac52cbe9f0b2ef8b439fb883673e1023cb64d6a026e
SSDeep	192:ULUdTA9uwncUn46XJM/K34i8x+/XI+qp9sz01dAvWh:Uod0tcU45i3iovIdAM
ImpHash	-

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml (Modified File)
Mime Type	application/octet-stream
File Size	832 Bytes
MD5	006c45870b068ac86c7816d0ddbcfc65
SHA1	a411f1d3d626ae444c5ec9b0d39cf43e9437d268
SHA256	dad754fb1b7d5f79a9addc94b163f39a5cbb12785448c06581985b68bffa0135
SSDeep	12:hpp2sO/+iNeEDvp1O4FbI/T/fZl5QpC48m7QBJrxhlymdC6sSPsR6HaEa+9S9e3v:UsHiNb1J+/lf4kBxxjyqC6NcW/Zd
ImpHash	-

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml (Modified File)
Mime Type	application/octet-stream
File Size	1.33 KB
MD5	0fcfb597524139ed49425be72f05bbab
SHA1	2267eea40f3928b6b7cc1c40dadd0b945cb06599
SHA256	6833ee39850b5a1ffdf407ff0e0ac08f502de0ea690e4afa309aebc074bf9054
SSDeep	24:UsZEdeAFovsVzbY9WemoQAIDkyFOmqpO1y2utxoK0t/Z+AmSi0Dtpo5N:UCs5ZsmpAaFryO1yfxoK0t/ZLi0DHo5N
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml (Modified File)
Mime Type	application/octet-stream
File Size	960 Bytes
MD5	91a2a716e86b62bd18d610e9838be7a0
SHA1	71deb9e2bfe12b52ef0ea1038e45311cda4c7ac1
SHA256	124e7c4412e0a7a3f342c7f4bd1bed772e7193acdb35acb3fa5946b8991e120c
SSDeep	24:7/ERtG29CniQhs0PMfK/MxiKcn7I8R1mntJbFs9Dd4:7+G29CiQhHPMfK/wiXTRctXshK
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	5bcebc15655917360ea4e8f3d5d86837
SHA1	68df95ba7b9a19b04c20a894c55d25abb9253a18
SHA256	e663006613015cc582b6d3040a8d8579d75ec0be009aeae2a82a8d9f9fe6b348
SSDeep	96:7C+GQw7oKi1Ke6SE4oilMmfFZWyZ4pFbskIg5tQx:7UcUe6SE4o6NZWySvbsY6x
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.75 KB
MD5	105e50927c08abceeb68c546541c0f45
SHA1	be439ba425a607ecadc42834e5d14fbf6f9fa020
SHA256	a8693cc41b684992a479a2f92b752ec986d62255dc0ef59139ecba56bec88b05
SSDeep	96:7C3vl4lTQ5q1gRb9+rQzLUaTfq1l+lhcc:7ean1gJ9+rQ3UIf8olhcc
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	3042cfc7567467a73a9077044ce16532
SHA1	71d73e4568602feab5062993d3576e529c4127cd
SHA256	0c0e78f13c956a1308e5058be2496174147e23ae685c7f3fe68963d70e0c0092
SSDeep	96:7CaysOsPzUJ+3CHBry7OEedph6Z/psuYP22YpQ0bJhJIav:7njlzD2BrY2hMsuYPTk62
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	a028cf0514e6e78a378592fb0d6621b0
SHA1	72f3c97fff0ebb111b66abea743edf9cdd1a95d4
SHA256	5a89dff5fa98d9d48e4d7bfada4d19ad5b4c3572a3734d8f2ded95047104f7ce
SSDeep	96:7Cwc0UlgFMdM7pPlfdWSW6dIA4Tgt86VMVDXWI:7PAUMK7hxsSW6MenV8Dr
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	c3de08724812e7c1b16e07fec129287e
SHA1	02cf6ead92aefeec8a56a80eac3d54f84343df6c
SHA256	e2a4eb1b56dead798fba0c640d3f22d799273dfd5740ccf60e034698b90f272d
SSDeep	96:7CvZjQDR9A1Xdqcgl9Zl8hCrfebKWmVCUOQgTAmaQHtT7:7gjQD/A1GuCmWWm5ObTvau
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.59 KB
MD5	9310a91b61d68ab1909d6ca626985efa
SHA1	7d2c989d138b9e7a8dd9a05e19eec9c3e6fc3d69
SHA256	06bb28f3717979135dd4d097d392508ff12dc2bfe9a58e70d6cf96aa8fc69c17
SSDeep	96:7Cin6xu7C40eRRLFmL+NCqf+aBmZfMCMGrvWFD:7zn6xu7pxLoL+hBmS3GrwD
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml (Modified File) C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	1ff9212a886dee406049c498f7fcbe98
SHA1	6ed77b1dd43146b489777a2b02437a29dfdc6606
SHA256	bf9063fdd69d8af7e181f258c87e6ec5211554f9dc8f700f612c15debf2a4d94
SSDeep	96:7ClVxMmnLE5W6Z74Ck8EA8KV9CoaXOxAwNKd:7SxMkLE5W6ZklKzAcg
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	47edfb0e5b61f0dd7f7cb9a64dc0c3ad
SHA1	7f49214f1f1aed27e579d10ad3ce1de1e9948f72
SHA256	f00c869ec6aa21bbe73ccbb881cc51828211cd1d029f56dba46f943fadab9900
SSDeep	96:7C27h2eys/OeNKH8Oneql6VTB1vGQjW8mY+i4:7jlftKHDD6VF1pW8WF
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	75e4d38d92eb27659e5c8700596328e2
SHA1	65c584a69de84370900a1efdc2eb46d83031c381
SHA256	f6350d387ddb6821d93f272769dee38273dfc6d32ebbd4f569833964b5544c01
SSDeep	96:7CaM9v3LI/G4/cbvdHQ3xgLOW/8+W993veWob8952USAe:71MF7I/G4/cLdqxgLHF60WoQ958
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	5354c3420bafa695a4ddbce2cc3a06df
SHA1	ef31525726ac9d4f6d13077e7f4517e8a7fa6d8c
SHA256	031b2dc2a1103aa69621a408aa8d448e192a8b3d6095ab83ee1c11a6f09d4ff6
SSDeep	96:7CEvSwpzJsc1qULyiPuQFuATn1Njj2ZUCaRwPU:7/KwpFnxGkLz1NjaZtaf
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml (Modified File)
Mime Type	application/octet-stream
File Size	3.50 KB
MD5	cc91cdcf58cee9afec24265a5c54213a
SHA1	42bc30a7509fd1e58f781815d778ec8ce7cbf308
SHA256	f5e3d3915008582d21e78b10a75364ed66f01b343f1f4eba842fc5aef54fd835
SSDeep	96:7ChC98BRuypN4fbD9LpQ47CQQga3FX0XsoVar63y:7+CMRua4fXDz7CX31XgVRC
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml (Modified File)
Mime Type	application/octet-stream
File Size	205.81 KB
MD5	b7cbcaa43d53e058568544070331f75d
SHA1	37cc79d21db74e4bf5f8cf68060b46018880e525
SHA256	3d6baa7ccd882970ce4b95ce0542224f76d2855a9cd39f8963181ca0670b256a
SSDeep	3072:4V3+AvMAOhK9m+8S70mwkRIB8ETZHb76OZ+PEB8yhqo1JcXgWIOmLDD5dvm5:M+AN6hPS77T2B8ETt9gPEBAsJGiOwh45
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	525.97 KB
MD5	0b744895033a0076d95e6618d381dbe7
SHA1	b188ff58498a125e9f3d0aadceb966e2b8fc89ca
SHA256	d946d822353a606be8f0f30cb9f60d306ed568a0faa094e4e6d99b262b294d21
SSDeep	12288:lRqpHWKDKaJSRMpZzThYcOFPzin5Jat8Rp1wcFKiH6ciriqDK:lRqp2KG3RMphhIFPiwe1wkHHTuRu
ImpHash	-

C:\Program Files\Microsoft Office\Office14\SketchPadTestSchema.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\SketchPadTestSchema.xml (Modified File)
Mime Type	application/octet-stream
File Size	112 Bytes
MD5	898c2a6efc86bad9a42bb304db3105ee
SHA1	0443eb1608769c7267b0d25bb613df6997d7765e
SHA256	0381e7ae841874b923b15f59a968ee7441a1928c42c121d0b0acd75476f8ab06
SSDeep	3:iRBX+kxYMFIcjp4amNFc2TxfHNpyLRuzXT1UQ:iRBukeOIEz2FfNpyAzXTD
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.91 KB
MD5	4950b8510f92da18efaaec7d37d9078a
SHA1	573a6954c5807b31339f856af1384638063010ab
SHA256	08e976da01dbe880146db3adcdedacc8066bba44e10c1ee7f5884f99f8148936
SSDeep	48:di3XiE4Cqy8f01IIOYhKOpxYdNE5aHh/h+htO0iiWKjMsTTnF378RD2/XQujjnD:kHinCc0qIOruxYdNEYBIgjKjMKx6DkA2
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.06 KB
MD5	42932ca6625d04400e798ee1c45e1d72
SHA1	59ddfd418512d24911c76d87c68584b95d34b194
SHA256	073378c5880edfa896e6a55e18656fbff7de2b0aae680f680c3bf0776dcbf135
SSDeep	96:8pYo7UQOiNhgi2+irGlzy+4XLR/k+ajJUY:82o4ihy+ire2+KLR/MjJUY
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	384 Bytes
MD5	b75edb58ebac4841bd567ab164708f36
SHA1	397b27ed5b14b0c61efa93e5b2d7a882a45b50ee
SHA256	ec46cf6267835a05ad52e2687b298bf7ec44afcb2c898349fd8fe727e20789b8
SSDeep	6:E/QEsI2/RfUCo3/r7Ww0lsZLBrtqDj1x0aAQtyQ4YGhUuKrrddMQYm2Bf1ymh1Cf:Eos+Rev8so1v1tGYduKF6mmf4212T
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css (Modified File)
Mime Type	application/octet-stream
File Size	1.95 KB
MD5	c7020387e86a60623564d6bf3d7ab0bc
SHA1	1c9a135be696f059607444494a7da98725f4ba68
SHA256	e5f0fab0c3d773226de5083abd992911e2c28278b0ea89e6d4ab09b9d8140809
SSDeep	48:di3Xi98L+gBCIveTikXivUAX4AINro6InwgNND:kHiiMIvBkRdG5
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.44 KB
MD5	eedbb8b37c1b20255a91003d97088e75
SHA1	59c615ff040a65de11960d88d0ac96cf83e51650
SHA256	322fa8d9fbb5812a47bee701ad84693f84aaf083adaf69cab65f9c4d4e5d2665
SSDeep	96:kHi9gxO5GypUgy2oLksaSE+OwzK62/MKvVePh9lg07:19AO5ugyJLeSxOKKJ9vGg07
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css (Modified File)
Mime Type	application/octet-stream
File Size	1.83 KB
MD5	af0d78c509f34f791d921133ccccd15e
SHA1	7d4b9559560fec8dffe3961a445956e5f2a46c4f
SHA256	386d91f4429cb401b8d263bd241c2a28d286cc825b1fa0be7c514cf41c85f8a7
SSDeep	48:di3GjUeL42lePES9qM8aF9js3TTX4IgxUOozn9o:kWQeocja4jzRg2/nK
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	6.45 KB
MD5	1e577155d737df9d03f47281fc97dfe1
SHA1	71e409c054f8796d3bfa7a3fe02982c721567a51
SHA256	923f7fc477e7734a789d5450faa16fa040aa5464a01f5aa166f766222da1b3c0
SSDeep	192:6sKV90rp3yyDRvSm29D7JEHLx46zwJbgPNjykg2y:6B0sxR646sNgPNjyey
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css (Modified File)
Mime Type	application/octet-stream
File Size	176 Bytes
MD5	f3db6a1c0c5fa79381854e3842af37cd
SHA1	ef58b4a97125657eedbdaf41be5536e9f8f9ccd7
SHA256	d75cd5ade48c6e03d4f26e72584245363decfeae870d45a476aee4fee48e2d4a
SSDeep	3:NWHIFdL5YLr27WL3NTKd5etHf/dVEwEnT7PCbMo6cX2in:NWHksLDTG5gfmT7PwbRXD
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	176 Bytes
MD5	1e7b666eaeeb8b2bc1d51af0124bd0ea
SHA1	e7e38128a31d6e1258a9486d8211a821ef993035
SHA256	f1fac0d70f915d7a30ec0387c5c53427e6020717cdb08e28150508204faf2cdd
SSDeep	3:NWHIFdVtwo4DROTkese74vcWjqpeKetZBSIcfoAvL9zgwX8l6EY2t8:NWHkBwXW4EpenBS+ATGfl5Xt8
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.36 KB
MD5	48fac2b56014b7b813743804902d396a
SHA1	9747550e672b942a82a1a1c50872df83a5c900a9
SHA256	55a4d48bca1c1d0fefaa7bea050cf99d6cc1ac1a0ede1838da1b840e898997d1
SSDeep	96:6tV7DzwSdQg7hIspxE8efVrQyElDeOut8Og/RlE9:6vz/cbrBuDDutfQE9
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	db72da5fbbdc83abece549384555391e
SHA1	57a0ff5abee541233ad14f263b678a0364f84df1
SHA256	21b037e76eef8e03c76146a12217f14e6ace499cfaa6857d26b69c8e7f2d0f2f
SSDeep	48:di3GJhXapw5ZK8xqxBeFxfQfroVzDg3M/+fuhF:kW/XaN8xgBoS182WX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css (Modified File)
Mime Type	application/octet-stream
File Size	896 Bytes
MD5	853c77adc1466bbb34e9e2c56097d81c
SHA1	b72d93cb2becfbbad1b106c09b10f9a7c1457fad
SHA256	b918de6c02596866ee1ddb326718eab63800f6119b23cf88a18f0013bd8cc67f
SSDeep	24:HqCJi8Mtj6+jivRqGfZprmqlSRdT0jElq5v8Eqn:vJpMtj6+jikGfyESRsRA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	896 Bytes
MD5	48d68417da301181dad91accebaa27e0
SHA1	1a3fc649403816176ffc2fd80bb27a11ac06b7c2
SHA256	88d26efef8e0178aea2ba331a646cf8618d1fa5d7371913fc632ff707b81701a
SSDeep	12:u6b6UmHxXIwHRNETyJIBAK4I1FO8LK7u98TE27JtDKQ6gQdnechAK:HGUmHxXnkcISKbFO8L/J2zKQPYWK
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css (Modified File)
Mime Type	application/octet-stream
File Size	2.75 KB
MD5	2c232a1d31a00a754234227e7fae4f3f
SHA1	ee966a7f98440ef9759f3a98d5e4085f48745b86
SHA256	4c08cdd3fb1145b9ca190a3955b54a443fd912b5ce3d84476725773d6df9e4c8
SSDeep	48:6Txucw7IVOWZOnWJ0n+1+iP//S5j2lEIiXk193WNcdU+j0N8MKcvi4PLc5M6Ca:6Ac5ZUWJ0+11X/SgEIsk19QvueLKcvif
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css (Modified File)
Mime Type	application/octet-stream
File Size	944 Bytes
MD5	2d4a26d3e630f4ecde58dfb7b56cb719
SHA1	344d8a957cc511f7cdb38ffced47eacb6ef1106a
SHA256	3879e9ff305791c33f6f67d2e32ac52c19009be86c854535c4d107d3158804fc
SSDeep	24:HygRIHigVkIh5sXiTAep7TUKNtLwV2h0ISxSBn:TPgOqsXiTb7TUK/65mZ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css (Modified File)
Mime Type	application/octet-stream
File Size	1.03 KB
MD5	f6dd3027a959cefa77eb7c3ed1fcc65a
SHA1	3c19a67d8c3a9dc65ffc2503442d77225c59a3b0
SHA256	1990786445069487b472d65472243d7f73d3b98e3de164b6489bf60c4491a13d
SSDeep	24:K+9bQoYoxqd9IVqtp9wfH0adttsX0oliQq897vi1dFSAr7ZlSb/k8x7:d9bQ8xe6A1wfHFdA4Qqavi1dcu7C1x7
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	880 Bytes
MD5	a476e35a711e21e3e09160cb65e934d0
SHA1	c5c673136cf87429e0570489fbee045f014570f7
SHA256	fb915bb6c6595128f6acda55ab56ca2f5639cbeb7b8c5d1f884712c1f2db931e
SSDeep	24:eiB/HTduoahKkeZjbqjmZXM50sfFm72CdsOpUYkwdp:eKTCYka3imOMdHvL
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css (Modified File)
Mime Type	application/octet-stream
File Size	912 Bytes
MD5	0ac4023920058e115179b4244877478b
SHA1	f461c876d592324df1509429172a9ce455bc10fa
SHA256	8985f0288ce214066d5b66c3292c1df28d8830b34c9041c4724297f0fb0fc78c
SSDeep	24:HZX8YW4t3qllUSe5DLlw3t9TfHeeRFSfOnxs:+YHt4pO/u91jtW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css (Modified File)
Mime Type	application/octet-stream
File Size	3.33 KB
MD5	b2835462264079d6c7e668cdc5938c5d
SHA1	edaec75e9313479551d067fe6201bab0c39649c9
SHA256	d4db2fa6278ad7f0abcc33cc7e8899d7cebba00d4425767f4d1f463821fac5db
SSDeep	96:GLYwDnt2Pj4leQdzM6AaBvyz3cLWpg1qP7S3gUQF:GYctisTm2vyz3DGcm3gUA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	896 Bytes
MD5	792b92d649b4db14a27c7b45b1336d4d
SHA1	ccb1b7181ca9120a49333adb28048dc1903fada9
SHA256	a2cffab483ce9942df33c999c5e63b3b61a19972d81940554e10b553e6fda6ae
SSDeep	24:LauGBkXBlCy8JUc2rCkW2rQZ2unWN/VKsnILR1LdFkyF2:2uGmqScMUlRsIV1L/kV
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css (Modified File)
Mime Type	application/octet-stream
File Size	896 Bytes
MD5	c830aef6022026149b181e70a5bb925b
SHA1	3aa71836a397f1a21bebf0cfe96487fbe6a33555
SHA256	259cde3d1e793d0c69f032a906024f36e8715d810268e909eaa9f2f148cdbc8c
SSDeep	24:Hj+/a42jB1d87Q73Eh02Y4CWcddloE0Y0Yc:D+Cb8ph02MWclF/Tc
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	896 Bytes
MD5	88ea9e680399679cae230f94d8483a4c
SHA1	fb0ccde960905a9dca43f4b726260ae748a386c8
SHA256	ef90f77df45aed73d6f390e6a72dcbb448f0dd47f971e7b3d47885847d7be002
SSDeep	12:u6MAfwP6x2UG4rWTuszNz94WyC3d/E43eHVNgx7+HJ7Pwj0M7xaRQQn/qiIiAVie:HiJJSszhByC3dZeH7PHJ7PwDBifaB
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg (Modified File)
Mime Type	application/octet-stream
File Size	80.78 KB
MD5	5db31a370c2203f8749f5218671105e6
SHA1	43054681a7b24b88010ed17f8cfe04411f7401c9
SHA256	883db7ee04cb5e5ead6ad2cde7a4697e7d0d3d7417b13935a0571121d005806a
SSDeep	1536:j5REckGNrFgW5t4getTiB2eVsuWt1lXODoHjh/nozCjLsZ8CCpEUL5:DXdKUjelreVsODo1/4sIZ8CCGi
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	12.70 KB
MD5	a4d48390eaf3b5d455f692884c1c3b3c
SHA1	57a1a181022ad76b68a184a8b4c5aa900ca229ad
SHA256	283807e8e02f89dec5856481307ac7d83276667720f5ef2ebed46ad2b2352d3a
SSDeep	192:FaibCfSXalM45hLUpbka/rxCo/LWqNub98bYqNVFTf1TSx3Ttu6bkWFOqugIl67J:Y75l3a/VCoMbCZ9Sx3TtTkWF/ux6qU
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIconsMask.bmp

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIconsMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	4.33 KB
MD5	55a1594cb879b6b3e802f619242388a7
SHA1	b01c1ebfe03475c5f0b82786d07bcaf736ac2e27
SHA256	669648c36bc217b6c7ce87a2f3c8dbf429989cd4ed87b408c021067048a80f22
SSDeep	96:VyR9t22ztbrCg3Csv6iZjPLcEjYo2G7KWflRdTwT60D99DNj:VypRR/3C2VPwEr2YfRuh9Dx
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp (Modified File)
Mime Type	application/octet-stream
File Size	2.53 KB
MD5	7adb558e37ee6a9a169f97ab0f1baac4
SHA1	137c53c68b35bbdb4c1fc9afcbf090453795a209
SHA256	93956eb12c069fa6859abb168cf78c0171a11fa8b5d8f3bb801a60f2648a7843
SSDeep	48:UImp2vlq2BhiVVNbj86roxpetiX5lM/frNQC1vk8ATtYm3HYuRvBdxxNSD:UIE2vcfVN386CplLMLN28IeuRdW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	80.12 KB
MD5	4135e6c5d7bfbea7028ff483f8f9ab6e
SHA1	ad709bca5b19731251ac19ac3e722ed92e14a9ce
SHA256	5cee4b0f73257b4665f263adc7c07f23eeb8a2797fa4be22bd9a29f64cab1ae9
SSDeep	1536:LH+dcBBtK+hAWYLsu/D+8EioqzUf4JZSR8cR2CmwIdUNFg0/eDpk:b+dABxMsTzHMOX8U759
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf (Modified File)
Mime Type	application/octet-stream
File Size	131.20 KB
MD5	dba9d2a399a5e0b62e1e2245891fa55b
SHA1	6c5b2eceb40c7084dc8d1034755e70b57d54e62f
SHA256	ffcea28c99be434b8f2979581ed21aa4ca609bceb650e3a1df8ff9142d7fa960
SSDeep	3072:BujlWWFQ4gSqKt51Zj57P3L2Ikr2Y/GUZF2zwDfHe2Y:BuIWFQEqKt51Zj57fiiY/GU2QW2Y
ImpHash	-

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.44 KB
MD5	29dd6364d48a95019e95edea9bdbe252
SHA1	8eb6020e769e693ff2889382f7b5adc055833107
SHA256	5294232745f3a3de240dd1e052a08ca49fc063de3545de2bfac22345711457c6
SSDeep	24:Us1r1NjZscQ3XwDu2yMOC1S+7YZ5YYZ/u6R09WaOWMrt4eHkK0LIkz0Pn:U8NjZ9DuZM1S+MZ5Nn38OHT6z0f
ImpHash	-

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.44 KB
MD5	19a6bd6f67a1bc808754be7a41b6875c
SHA1	e00d8cd9bcdccba0c57a3237da16b5bf2b31a730
SHA256	0e6e65267c8ebce22f56ae823d285e9cbaa32700a907a15dae06dfacbac28b38
SSDeep	24:UsgcjYR76Y6ZnsmiAM07l0fLkzO9G7GPZnKqr/7sklEGcmxOD/pE:UQjYcY6Znsmi0R37uZxLNlEi
ImpHash	-

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.36 KB
MD5	95fc1b3bce5f5a6c31440e8c4b54ad11
SHA1	5e9eebfcfa160105b58821117a6287877b818f93
SHA256	ea34814fdce7fd4b29548d9f91bab1e924f50416d643efb9d70cf32ebe4b0f6f
SSDeep	24:Usiv0y9ZB7u+IGvr1IUcEJKQcqtyou+6WEfgr8sZu9Bp20F2feTYlyalsakLf/ax:ULv3Xu+IGvpncEJjxzzFEYYYuQ0cfeMr
ImpHash	-

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.31 KB
MD5	7048535e69141c610f4925395440bd14
SHA1	55a9cabf5dc04e3e2c500b679c061b2fbf5d30e8
SHA256	c27470d84d67a861559ba562b09b7b694c35dced30249ffcd0e557359d06c316
SSDeep	48:Utrw7d+tvgtjM0fTQgoR8OjjjI5rpWUPivm8bz1W:UtsjNfTQgoPj5UPiu8bRW
ImpHash	-

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	d9c4268fc0a077bca34d1682e564106c
SHA1	3ade5d453c3ca0615b11e0c52c0917867cbb3a61
SHA256	01b5844a7d474495468b7bea94cd4d61189679b3d59cf5e27d6d21b7b971f46d
SSDeep	24:UsfUrqJg1s5elB3WnNfB9GbfIF6ahU2wYCNXxeJ4vnWg+ODw1aRQ+hCCQikY/oul:UkUWJg1ielBmb9Gbf26a3L0cynWg+OwK
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	928 Bytes
MD5	3d6c92b4dbd32def506a1f0a8aa7d8bb
SHA1	599286982a9a510f2201222c17e6861f10b4990d
SHA256	90d474bf0e1a7ecec0597f6a8645983cae30ed3dd5b81f2f05de2b903decf96b
SSDeep	24:7aP5ZTPFrOoa8AAmiCGA4xpuxTKevm4p+uOnBr1:7aPXtLA4PyK4MBh
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	976 Bytes
MD5	6ab3a7ccb37d39583175788972d3e207
SHA1	3651fd5dbf1588f98d95fda09703f167e10f61ab
SHA256	12b71aeebed62d2842bb19d26d8488449899901de81e4e8d294abda552379632
SSDeep	24:7O20WbAwZIioCCuUQOGNMQvZv41HnNGzHtbSdO17UPcZyvOC9wX:7lbA6JoCCuoG5B4BNkNbaeWckvOC9wX
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	976 Bytes
MD5	4d1d4501618d738d18cd6ad224b2bd06
SHA1	8510a05de7ed8494dda6ceada625f1485738a5a7
SHA256	08bec2703a43bf4ec5da9e4b5faa8aa2deb903781da0cce5ac883dac1bfc9667
SSDeep	24:75i5yjpyat6fSyVGbOsa9iSrWCcxHnkw79e0G:76atsKOsC8xH5HG
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	976 Bytes
MD5	3200257172e4ba1c84c852b9683c7a51
SHA1	fb6c814a6faa36394f7882d672ab8b46128d2bd4
SHA256	537410dce69c7fee2eaec2f247b9736a2a793dbc3f8b48b69f099114a8b011e2
SSDeep	24:7//R1hFNPy0z15rN538xuvwwjvj3d7hTIUzTl2KZUl:7/U0zLH3yg1jvjd7xIU/fUl
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	18416592b7dd3b9a8f92541bca462d61
SHA1	e14ea7a7ea058cb3800485c4724354341ae73d8c
SHA256	16b5dc9dcdcfdb77e6788f39ca5316c434f2b9f07d421ac0f4ff5699d5df367a
SSDeep	12:hp7bjVVkPrTShMLiW5UfTFIpmwp7m0zNIgGtVFm4eSgI2ZHVCJucpl8gUj3StORt:7f2TSaGgUrFydtzeBNtey2Vopl7M3dRt
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	960 Bytes
MD5	b8966bd73e4159ef599e69f2be91c7d8
SHA1	d214f87d619e3225897cfa37c75b28c4da6fc2ea
SHA256	517741717cd80754dc8aa7a1368b2cd3baaab592306b604b5f46e6bf76af51e5
SSDeep	24:7Pv+okrcX8P2SqJG+2UKnffNmy5CmjDD6dH++Y:7+XcMP2SqJGTnn1RCG
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml (Dropped File)
Mime Type	application/octet-stream
File Size	960 Bytes
MD5	4b8a2c3bf98ac2d8380a36829867eff2
SHA1	54c916928e70b3a62c62edc86936f17ed967148e
SHA256	4eb334659846ffa966f563b0384db88fe4c33bd76eb0a2ceee099319fd65b8d7
SSDeep	12:hp7bjbs2eDnXA+19IweO2SrQ0yNYltqlz4HiLqVWmMFNEccRcGjMCKhWg:7oD19yS80yt4HiLKQTEiGgCKAg
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml (Dropped File)
Mime Type	application/octet-stream
File Size	928 Bytes
MD5	748ffff8b6651c7c17ddffd8d6711995
SHA1	52eedabc9ecfab14e246e9c6e086a7e1b434ae34
SHA256	ba059c63146350a26d3068017a5c5c07ee25d3948fb44aaa061f8ec75bfed101
SSDeep	24:7tYuVQD1sxkAMnPCnh8HG9pl7MIbTYJUJ712m6R:7tPyZApnZ9H7MIt1X6R
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Median.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Median.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	00200717eaebd15d7b1486249453d68e
SHA1	6e4719f5858df7c4b9c882dd257cca268197310f
SHA256	588757f0d55ecfad135e64729653267ec41125fef8acdcad5fccaf3279e008f6
SSDeep	24:7ATdOpqbfARMDXW+c6c7pklema1cS9ZkUR:7KOpkARcXtC8ema1tZn
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	34deb7ecb99dcca866dc872db6cccf43
SHA1	eb7ff74af6a65fef4b929c40ee5bdfa5b79cf236
SHA256	1b33dbb6dff8fc687d3373ce9245e171d21d39b4248ee3b7a2e3835d6dde9500
SSDeep	24:7mkcL4BEYSBPtJr93GY8wNA1F3Yj6un48xOS5BENJGH:7DcLaE1DnWhwW3w6unB5CNJg
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	2ee0f7454f27db5e1a5500d9e7e12c85
SHA1	b3cd6bfaa6a6b090c187d1453e29b41547f482b2
SHA256	a693c004be592aa3497a4bc66fbcd63e798fbccb50aace625af5fc319f0d51b8
SSDeep	24:7Zj6JOhqnatnUX2SZOTo6sfnR0B+3PgzqcES7JjX:7ZeqKX2qfnR0U3PyqS
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	e2ac4dbf885f6c3da0a8ee258da4680a
SHA1	0d41e723b664c1f99977394e16f3db6539617436
SHA256	c98f50f33e343b9f1bcffdbf669cb7aa94dc27b18517fbc3bf0d8b9318bc4178
SSDeep	12:hp7bjn3Z7JXu6yuRs6iIGToX18crrnhdmjY3AqIw6c4LoTjn6O9pbCqqXRbbMqkj:7XT+61zZPnnrSqN6c4g6+YhbMMwzP
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	d7d0618c0b7b68e497592c3bd3f3c444
SHA1	ef42040603f012c5b308dec729760d7aad2552e1
SHA256	828c9d2940b1573b0f3fd207881be3b158877fd4ec0075a747d5ebac76f33ca8
SSDeep	24:7UxeFC/A5chd/6H9ia9M0wPy+Do+L+3Z1eaDtqmtwGXf:7m7R/6/M7vLLCLtqmFXf
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	195d2408a9ba5a6efdf8206a9773d9ec
SHA1	45f9b6ce53845a8ec0aa4fbb1abb6fcfb89a4426
SHA256	0c47970f54288195ba0461cff56c80c9e5a406ce15482acba50d0b2a952ff274
SSDeep	24:7RAGGr1hJaDONy9GNM4ID14t0Yt48Z1wxg3+rq:7IF2Z4tT3ZSg36q
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.55 KB
MD5	161ef489b8c47fc124457bca549c07d6
SHA1	b0dd81820e542eecebf35bd38ebe101ba7d7dad8
SHA256	1dc3e752e7470e56d593f7842fc5fa00fc1526ad0fbddd82823c9330df9f6715
SSDeep	48:7Cr3XanJJOyZOllCgq5A7sfC7W4hMsjdpZoJqcc97NQRYr8nk/+pm06HlZP1/3NL:7CrtyolhIKK4hzjZd9ok/+pm0k3PCQ2U
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml (Dropped File)
Mime Type	application/octet-stream
File Size	3.73 KB
MD5	0be8b58dde9bc39a0c94a794b2bca07b
SHA1	fc6d2c1ba7ce45f3146ed92ebc5807a972ade373
SHA256	16e2f9be70384523bce676caf278f0f801bdee236f0d6b6434a8c71fc366a234
SSDeep	96:7COu11mNkFyzYMJl3bx2Xa2P3ah9PXKNpH:7IPfwHll2Xa2/ayNpH
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	535e58bc9168ef99f83f9f4ce12d1e98
SHA1	5be2439b11b66f47539d731b08bfe51498ad3254
SHA256	71c771f43b5ef046938df5e4ca6aa88d88866fc71001ee19b2eb8e9c501b8c51
SSDeep	96:7C+AVfgEyU8ssNYpNctaeD+Ymqb55ibYkzYUu4vMMdhO:7Bugo/oalQb54bbrv5hO
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	0361f7900ba5342c37e6a780e3ce2f3d
SHA1	2b5304411a0cc410199715eeb5f8aeb7069f5bb0
SHA256	002c01d20f2f68476fe139712751121f7e001a103815acfd2b3a8451c306e747
SSDeep	96:7C/DgcVtWjfZy3cEOfSU61laujpj/PfPh1:7wWfZyQ9kl13fPb
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml (Dropped File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	fa4cc103d145e8988a002936d22fd702
SHA1	d4fe587c6e598bc898160e0290fecc885ba4722a
SHA256	3d2144d2141786e7ac2e6e600f02e741e9a5ef134392172f99bfdcfe4162249a
SSDeep	96:7CQ4pfW+7mH81KRyRFDDh8kYXOePih69P2d:7NAmHFRy3/ePihY2d
ImpHash	-

C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	4d9ef5e976e3270400fd04a3758824c4
SHA1	aa3e19540d9aa29696b86ea50a9f17de12a1bcb4
SHA256	24894c289caa5fb575edc3d1c8cac03bb157b78e5b6231993943268e9b3660fb
SSDeep	96:7CwO/9WsRwqSpOjG1eFqYX0qT7X2dp4KCUE5x5:7bO/4W3SM0eFqYVvqtU/5
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	10.34 KB
MD5	955342b2049348a2aba9106da5b51d52
SHA1	af4387a13c847bb99b15ec73f4889d6c4967e422
SHA256	3dbcdd12f3a6b210bfcdd772a8684dfd2bc6ca500a8ad69dbe951ebc6eca6503
SSDeep	192:BxpwnmZQaeqe4PmG5GBeNY02su2jfJojDoHsotS5QmE1z1pEBqEJV3RgYc:BxpwnmZQaPXqeCCb8MHsWS5QmeZpEB/W
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.xml (Dropped File)
Mime Type	application/octet-stream
File Size	192 Bytes
MD5	3010e1794d6dfd8518651bdf701f2578
SHA1	4f047ffab66e14ce32a62d7fb450ba48a708620a
SHA256	952dc41a9a638abfbb10fd3ef484a2b5f9e2ba8c0bc50d7f348e8d9c7bb3e703
SSDeep	3:XJkjUgaDjw/eAq8tnD6ynkMg4E+hgxu6QUEL/kyELvp3Hn+BNj2BZf979Ed5H4C3:XJDHYGPSTnFg4Xhgxu6SL/dE9X+BC97e
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.84 KB
MD5	d989114ad9c79ce9b950a991c63dcda5
SHA1	4b5dea06f6e1f2dd2128794338cde2a145239b85
SHA256	02d4a1c717685f2057c195dd900b34c0744df6c88cac4e2b7d97569ab951663e
SSDeep	24:dx4GwvVx5qXvTqEwaSTEMPz8zCZyqlNWUVCqga885+/k5cGSEPA0P38GdOsF0SNh:dGnvVM7yfbUMxlNcbab5+/XHG9F0u2ej
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.38 KB
MD5	44c75b8e13c41f78ed76dc6d959d3d4b
SHA1	d74548a15e546199730f04d81725f0cbd0414749
SHA256	844223fa1577df23632adee48d8f8091311a8458e2032b2e836568d89b5b55ab
SSDeep	96:rEoJwIPWDUFuGWc2HCyGZKbuAwAL+SOWX:AoJw+WoFvW7C103LQWX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.78 KB
MD5	8208e929482af3ecde266b8101f4515a
SHA1	502929c4dbdaca91d992582214585780105d8532
SHA256	69ddd9a1c7dfbeb56cd50d61633cb51cc2d99784793552c269ad1f6e92517f21
SSDeep	48:d7qdxO5I3bI+qee3778l49kufZiFPmwDd:VCrI+9OPhqufZitN
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.77 KB
MD5	ea9cf0e061ccc85227692f7dfbb8881e
SHA1	e46a6b4da230295ea63100bbcae93da2a7291f47
SHA256	23b96fa70ac299f517f28b434dad786c4390622737e650f60f9b19c7ae529d1e
SSDeep	48:dRrRstzDWEzMsC7nt+HoC1x8AsOcbDzxCf4:XRaMsC7ngBApF44
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.80 KB
MD5	44b0b4d0075e212a0a785b15d3b3dbf4
SHA1	3eed4fe68eeafe1518458d75e9fa8dbb9b72ea6b
SHA256	15ab005412c9222d2b383390bd92933108c8bd0683ffb96d80ac1673042ebe37
SSDeep	48:ditH4jCY/k1vOPhTBgI9DsvCyHr+u83s+AchvP:gJ6C71mpaI7U+u8c+tBP
ImpHash	-

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	240 Bytes
MD5	9efb7265a3c8e48612415269e4629100
SHA1	c1445367403341218dd3e39e0599d921a090a4e6
SHA256	d8ca44a721ed13ea2f3b9abd87c25a8a7263d8ca3c56af60dbecd8e569b2c00d
SSDeep	6:vITmjLOl+FPxtvzuwcGh3USVMVh7Hqh77gh8qE5gVcUHf:vITZIFp9z9zhCVqA8GVcU/
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	5.20 KB
MD5	93de705b51b28cae26ff441e1bbc7358
SHA1	afb9a3f21df8184162c4d3ac603e19d7bb204429
SHA256	168a9f4826456710230ad333791adafdb0456bd41247274f5f6ddb2a971c922e
SSDeep	96:1Qsjl5G5C8Iz2EBB5AnIhgOcqtTZWp78sJ2JDYQBjbJvgHQ:1x586z2EBKP082JvJvgHQ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.31 KB
MD5	7f71703fd36675ea1ad28b2b1450750b
SHA1	64247cd80d4f7856ec7317e24f54c77fcece3acd
SHA256	01f70401ef0c0aa874712b698d5c81db60bc44c3c20914f59fafb3225406530a
SSDeep	24:yfv3lcnRQqO2iee95cqVUAgqF24jjFopvjMHVSNBO8bnzHrar:yfv3lcuqNqqENFeUSu8bzQ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	10.36 KB
MD5	54068cb84e15251f9d0870068ab836f4
SHA1	411e7b5b70e5335aeef6747b7f1406d65d19c206
SHA256	3622c51ef25828ef382521ca730e7472421265c5fbf4b14b3a300754fff6da5d
SSDeep	192:S3JLLNi/DdvTN7W1SHpeL6nSpSVI62dZioU0nk4ozvze++2dwnwfsLIDI:0LEbxTNJJm6Sb62fnkBnjkLIE
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.88 KB
MD5	cef2e85762c831c2a97cffbf59748292
SHA1	16bbba836d174a3b18da544f1da492ca86c41547
SHA256	79720e478fb317561349020c82ebaeb869e4e3c85db53483771978eb0d5616a8
SSDeep	96:bQtVPdCwdGKGBgPlC8oqk9eONkXlDJ2WzpGHS84M:0tV5diJwkmXhIwVM
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	11.67 KB
MD5	bd06d39a75e38a46697b6205ab6d51b3
SHA1	d9a42d4766eb38a49dde1e39a674338b617c748f
SHA256	4f783a3db130584867b91d71722eb366d7d8d9a7f51938c283a36347a84cbf3f
SSDeep	192:ChopWnBulNEvhqnSP4HhImSIvDuHXtqfD0yAjbKnx09NgDBoQ4PJ:bpWnXvhqSgH31vDuUbuOnx09NgDwJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.98 KB
MD5	097a0fd06f3e1229d9f80bf48d05202c
SHA1	a28515d4f96bef212bd7ba692f7ade0e60719e89
SHA256	7314f29ae3b590a518a309e8c6e5aeae96c595d086e76a3bcaccf9a50c29fc14
SSDeep	48:hNKCQAx5KC7KZiif0LzEnY0IFVf7Zd3lUyFRkNIPbnBF3oW3VZOhEQFq6i:hVRKzazEOfNMywNKnr3ooZOhEQli
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.06 KB
MD5	f1528b55fd4a9e874c47cd00a47ce33f
SHA1	92aa99a577868f7ee1acddce92cabd2238d6c3e1
SHA256	b8859895e126fb04302102f1b241a39dfcaab5bd954b3354861171b8644fe176
SSDeep	48:/yZD8YF2NS0y0eokhWnpmgMhHSI1tNtsnnjVFez1xfs7B:kD7F2N7y0eRhKmgI1tv+njVFez07B
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	51.73 KB
MD5	eb5eacc63b140ac4967761b4d78629fb
SHA1	c913977b11a2a83c056d54e8cbb8e4190f67afd5
SHA256	c909bfe2c8b4ac9aa587ec43c9b8793d2c6e3c22769b01a477d7166427a56df3
SSDeep	1536:k5ta2CqohZtk1pLUdhRzvKSoESET0MakTrS6d:k5ta2Cq4ywnR0Maka6d
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	9.48 KB
MD5	73f08775baa9b14725cece99b7a43f7f
SHA1	62698ea9fe03350dae4ee0212a9372eae0f696f7
SHA256	11e4395bbee37b8c6f1d2e5c8730321b6b247f64f0c6fdb0a7f1c56d4346d7fa
SSDeep	192:EsOrVtY6v8LjUICQmfP5G9wq3oNnrlcksKTrfDV4yQrAD/a97N7:Q5tYeKjUI6y4NCksKziYD/I7
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	8.75 KB
MD5	5df388213b2d674c76c4dab8b5999893
SHA1	7fd6a92e89fb5f9df07005fb5dfc59ab45733b33
SHA256	471f6092fe297a81fd4ac6dc942fc07b06789f97da263711093ebf9630303920
SSDeep	192:VPZS536a9a7U4JWXcsfVUhJ7RxYffdyAMN8e2TFFK+8mDTOtHAtNc:JZS531c7U4JWXcGVUhJzYng8e2xFx8+i
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	15.75 KB
MD5	044eef5fb3c622978058864b67f4bc1f
SHA1	1e8e756cfe5fc34a5f75d9c9b56ad4566824b66b
SHA256	857a32feb18eb96d8034906a99a94629a7fa2c2be96d1fb9d61a72639e5773c3
SSDeep	384:xDO1fmo456duW1g+ZuiF5UKuZT4/rpFJb497JLZU:xDOcD5q31g+AJKuVaFJbWtLe
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	16.17 KB
MD5	adab69dbb4715344141e40a338c93708
SHA1	25781c6f0d907d55e9be1cfd90bfb35eb9ac776a
SHA256	6532aef0905211048dfe0deb1c2d3c98bcf0a9c09e1a8e538b44694ea148adea
SSDeep	384:xDnugv54J9SqSqs7esMI/WKlzgxakhvmEQgtxPA2Jru2:xDug54fSqpIer+EdtxoG1
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	768 Bytes
MD5	4a1a3ab855c102b055f8d5236b61d74d
SHA1	f79639b43554e7383c30ece4ed4c37ea9f22536a
SHA256	42d13c08036f0491078d07f3207cbfc83da7f69c81e8d010e5860e2c9c574419
SSDeep	12:M3nTBIwWD1zVznhda3HbEJhbyrDdG/ZE+uVagnush+jeN2felpIErFyKfHV7mhVX:M3nTqwWRVzhda3gJd4Da9g2jeN2Q+eFs
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	976 Bytes
MD5	f747d214aae4064625ef09d235678c3a
SHA1	44bdd4c141f90fab48e3f03bd95750d29c291e09
SHA256	cdd938efbc807c0e5ad6c608af514ca0f9afe2adbd27521ce7a846b839cfdd8b
SSDeep	24:M3nTqwWRVzhda32iX7pH5Ao9+QLyc9ra5wo1WinAQIrPG9x:MXGxRV632iXluo9+QL3rauNQ1
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	4.81 KB
MD5	cfdc696f67d35b6b9b89300d19051cd7
SHA1	6b079f49f76c4178599713622bec22586df0b7e8
SHA256	8b98f420f7ce6602a9910b77203762d4a7bd37fde50779353ec09db438c6370f
SSDeep	96:HRLQTWbJtkF8zDi8DvlOpO62U67HQFGs4m+0771otP2iMOdJrt4tb3:HS6vkF0f7u2bFs4mn71otZxrx4tr
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	4.81 KB
MD5	f144d94d663e2df51293589407057dc1
SHA1	560d5c6673470418ff6e6d2ea933751d328379f3
SHA256	a81989837b684469f358416f2c2b055472c043f49de27f5bdaef9af0ebe8ffb2
SSDeep	96:H9qXoYRTkUsI/T3wV00BS9zVskMbVDI+cyp2mmSfOFvQYMQf5OQQsvGd0:HkXoYbw+AgPylmSQvQYpfoQQsy0
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	6.31 KB
MD5	67b87d139f3fc7a0363dd337fd09d4bf
SHA1	b73d179cad7e1438a0f932880530a76a2c4411f6
SHA256	d821c99f1d2640f3d27c62eeee8fc2c05a9dfd6dca92a68a687ccd38bc3460f4
SSDeep	192:bHqCJv1FCfEiooAa1OhAnzeK+DjFzHmgppt2Z:7qCLFiCaWgSKqBzGWKZ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	3.89 KB
MD5	4a5438accbba3045efeb943180ff2978
SHA1	c2c72c3c04bb4d80ec067c46de845f1c41e2a79b
SHA256	244cc0270cc3c1239077327ba8a6b52a9712061f233cae333e59ebef09e6563b
SSDeep	96:4tUNz7K5BJIss233KjYXomI8phMjje2jxrwTHOuj2yo+:hMa23asU8sne2jxrwTHOYdl
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	208 Bytes
MD5	075ea2c1e158a411167f74fac4f92659
SHA1	6e1f8ec62d226feb0c6ddeb2b58b0c7c4623a7e0
SHA256	450d4928f605a9c211b759ba8b4c0348f47bd57e29b193fdccd1adc32a0c66c2
SSDeep	6:O2LZhEKy8Qh8cqSlvKtY0OUohRQV/Jo4Rz:3FmKWbqSuPshqJ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	4.56 KB
MD5	7418474f0267e227caccaffeeda1eff8
SHA1	2450f68b40869eba01dafbdcaf66f5a1a98b884b
SHA256	dc4fe0ade341958f043670bd11700f8742e64beb4806bbc59d414381e25db2cc
SSDeep	96:beXYvH145c5mPUyEHjOFzODfULADsbdH1iIVb4TaKdm0oJ1Dl:bIYvVfmUyEHjOFz87Dsbt1iIVEOn0ENl
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	3.03 KB
MD5	2124bac8f1190b1425f21c279d7f0dc3
SHA1	045aa30cadeb0626431826a14e2998f4d40461ee
SHA256	4b7979ab0db5edf6c2e1f7a7a17d88d1d7d93baf0a4f855ee74d3707f2d59d3d
SSDeep	96:BiuIU1atTs+P0OSQG0KVCZ7PrLSevMZfV9N:kuvWTs+8QGrglLaZR
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	25.25 KB
MD5	ede05879265bb6cff391ef283b4e30a4
SHA1	9bd6d9584fb6a6ec713b243a6edc403fa45e0c76
SHA256	3cc48dd78a7099b99517c38d81862cd543a2573055fc2352c870ac3d9dbd3b87
SSDeep	384:IPxWUVMwyaUnLQ1gbhX5coQtRqhkBKGGf8sCid8a0kHUv4b:iWUVMraIQ1gbhXitp12gGUgb
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	3.81 KB
MD5	a1f5052fe0de8129a19e13cdca578e0f
SHA1	248bc761e454158b18a9b3a53d6c0b97c07e9017
SHA256	427b68bbdf222dfe5ba8123a152a7dc5a085c38a316574ea8e48cd6830ec4fe8
SSDeep	48:c4AYBGs0l7yqiRcHJxkVNGlOLUJ0iHsYatyBIYs/0Rd8qIp0ndtZGDRWPSladZPV:czYol7yqi2YAOAatZZoGFWPpxu90SiW8
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	5.56 KB
MD5	dffefd21ebe8d9bcd623b30062a48f11
SHA1	5447c55180161f1d48531efa8d52aefc6ab8b89e
SHA256	594dab096f70cb126736dc333d7d2b6208f2a01296fcdf83c43e9f1826831441
SSDeep	96:t2hNLvLNl6pZ9SQSl2g/5nPsi6TWhohjCo6aXzh7WBNs2NJJk1J:whNbxl6z9g2BiSj7/lm5JJo
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	9.52 KB
MD5	2db1d0de9f28e69ce309eee3dfa5377b
SHA1	544fdbb05a8605d9087e50293a2315ecefa824e3
SHA256	c1ea26b63336ff689e56a33f75af036406069d3e7afa42a3268f207e2f7a5c45
SSDeep	192:U9ZDOs5ycVU2LqwUXH6kxCsSK5tiStjNDT+vk3AweXm8Y2i:U9LyuUKqwUqkl9t14k3A7WF2i
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	5.31 KB
MD5	fef804fcf90eddbaca5ca3dbeb0b22ac
SHA1	a5c3d6e28340baab4691be4b4742d6ce5676cb9d
SHA256	af5fb0184380be41a5a74f3b57c2acb00ba8e6e8770240314614ae84a115011c
SSDeep	96:PUKoZMcpRkbCIAMs86eljlgQ7Z3wKv3OpvnsL9whDzy7xQJrA:M7Qbl4qlgQ7ZpPOpvs5mzaOJrA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	6.41 KB
MD5	093e824d26be8a06fcc65563adc434b9
SHA1	a8b1f94e705d22fb659ee95bb7d36a8b7d741566
SHA256	1f86da53bfad70bcecdfb6c454aaf36ed885d63fa2b6a4d398ed58c419653d60
SSDeep	96:4L1EPWFJq2nUg3vNt0YCmC+G98nBRMF9jDemCv23INnDvCp857msdfE0F9PeQQnz:YSyJvDJhBK9jDe3egDY8V9Cvx67Cp
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	8.77 KB
MD5	cadf87080c76059b22b7686edd7b3dcc
SHA1	9fb977c60f7e5455ad8d64031421691e659d3214
SHA256	2fdfe987b6037a1e1799b138930785f6a4d4ab50ad282745408cca46e5edfb8f
SSDeep	192:9uIaAQWEOi2ciLbLuFLRfbvGNki8vT1SkzFbJsAr:8zCEOiGSlRDvy8RSrAr
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.56 KB
MD5	eaf2b4217ecbf10f60118040093c6f56
SHA1	87a80d5ae987bb5dd1535569e0dfd629767dde52
SHA256	37e904e0056bfd4416401590a24e989d24d21028e17388c1cc73b22253bfbf3e
SSDeep	48:RXfs8WysHA4DX9b5laQKzO01pBkRgii/rr/uL:51kh+Q6ggiiHuL
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	13.05 KB
MD5	62d156070a43bc8ae36405f77c59fb69
SHA1	fc5729c59d0322e5d83869063f4b37dbdba96457
SHA256	9124d5aab526a82991f62c90427c1b73de19cb6944fe27dca30ef0da9eb33a92
SSDeep	384:Q8UxyhC+HhVD04On9faQWpjk3wJ4MEsWzWbK:iikn9f334Wzx
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	15.92 KB
MD5	cda3c3dc6f40ff6a408b4e53abf67fe5
SHA1	7852ac85e773f22b9cf00f34ba83e242396cca09
SHA256	81252eea61af658763faf7dfc6c3792dbbb463b4ae790bbc024497ab9dc9e85b
SSDeep	384:o/W7Sn28yA/PULN27uidDHPfwDaWtUZjHIYVm593jwlLAgW:yWun287sN21PfrtZjHIGmv3jhL
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	6.83 KB
MD5	2fefc8e61d1471e392dda29ea19ecba1
SHA1	635c7cf164d2001fa0e636ca64a3ca9d5ead7ba3
SHA256	679bfd8097062d5a6e557708031ef51a965101219bfc85c934c53fbefe4c026e
SSDeep	96:dULuShyf3Hz/AD4K66vzanNYk/KAdDLTcx3lLVT4u1UuHU9zdpeCQWSUp5ookU2h:6LutksNnex3l5TdPHUz0moz8It
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.88 KB
MD5	2cdbcbb8aa326c05e62a42636e54cc71
SHA1	ab52f87a93d95603524fc1b4435d8b101e9e1313
SHA256	4937544626c0c9bba76834db5883a43f880ecfeb9772259b73fb9dfcd3729113
SSDeep	24:GN6QyyZpVu14n/9ZxhavFjJpTvvRbIAVMUFv0HUWEwfCrz5JJtk1R6jkVJFz2d5+:TOy1W/PxAtlZpvO04e5LtCkwLYdpPCH
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	17.20 KB
MD5	5f02c26c116d27e92b1768baba8c6496
SHA1	6bd65744f41c695030fcb59e40b833e26dcb83b7
SHA256	e12fbbced56dd9c70d32962da3333e404d819efce9f859cec123c1eaebbe46a0
SSDeep	384:N30RloUb45h91uF9zqJQTJRVOYtw5h/DsPXg+98kpvT3Qz:6g4UhCOJSZOAgUQi8kpEz
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	61f7d05ed44bf0ff99d0f0131c8b1ff2
SHA1	34c3fe74e777eca921e7467658e4ac6b21902a87
SHA256	16559875493eb35449b7e161606c4127939c5627c8b3c3bc62f57a20caeef1b1
SSDeep	192:SY8FoKvKF12Fe1TQ5kCrYt80x0sRJGuKvCuDG:3WoKyzqe1M5ktRxXzidG
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	12.84 KB
MD5	658e508ac139b7378f30584771bcea98
SHA1	c33bd70945bfbbe15587824530fa9f529c25f8df
SHA256	81a4420032bca2f489a7ee66d78ee28c067b165117a03969784ce88bf4c8c8a3
SSDeep	384:LuH9TQDTL0hqg6dNM2nPXwlJ+VVbzBrBnpCpaeL1eDUf:muUB6de2bzpfCpaeLX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	7.12 KB
MD5	b983c15a8502ee9996699e685f84ba05
SHA1	5387dd8ba7fbdd6ba9515bf43770685634316cc9
SHA256	99464f7ed009e63285292d03675875d7969ae7f809226fbb8a6cd42f61c2bc15
SSDeep	192:c1sdB5Xh/tF/rOr13CfqCKKeHlyU5akTd4/Z4DZFA:xdBdZtsrZCfqUeHl7n54Bkg
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	11.88 KB
MD5	590494eac47a63f5ea85713eaad12c7d
SHA1	e8b3f5fa64bbdee6489ee42c23e5ee49dfdb316b
SHA256	9c97d858aa99a936bcbc22d6ead5852c8b86da2de57ab24ac0380853c5832ba6
SSDeep	192:O6MbfrFzJijsD7j6GPBwk1Fl8gH4HzVTlVxYQ89mdak0/jvLLCanZLUSxq9/3pjY:OfpJijsD7pek1F9HwBymdaZb/YSo9/5c
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	7.12 KB
MD5	8692c17e5528191232ec172655ae0793
SHA1	cbcd2067e288058384dd38e9be8e662cede833e9
SHA256	e19a699e5188ce249dca5e71de83c69622984739da29371940a300eaa1f57fdd
SSDeep	96:H8+ysdBUteXxtpWSkIdvA+zB3X373u15lfPonJQYkUdA8c+gQYd0Z8YpcNgkFrr1:c1sdB5Xof+dXctYw+g7dm8kuhrr1
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	18.02 KB
MD5	47935b28fc0f0343349e1b5f295f85ec
SHA1	4278afc71c4da0a46257f82a90e622ce42f4890d
SHA256	d743329d767cf40e5ba5ce3b36169820dfec90b5427d45dbaddc1117c63555de
SSDeep	384:r5bkgvutODLiw4eYsUZkKGLEpuUD3tD9/gYqE13rnLieBF:r3YODLiw4eYhZMIUUD3dSYt36eBF
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	17.72 KB
MD5	0ed2618910b4a3419148598bc7673f9d
SHA1	74d42f59a2671777161edea5e95637549e2ad86f
SHA256	43332141f79c8c8c01a393add003f6e59a28735f9fab27df3c652f5726194622
SSDeep	384:sXae+LNY0yuWJ2xApkGMcUlhVlBMk/5QqB9l9XrjDcV6U4utlrTvX:sXaeqYRPJ2xAOGMcUr/tQqfl9XvDW6UB
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	5467e5f81f91c7045ef7ffdff3a0c52a
SHA1	436a0b00d96710e8402ba0630ee1799871dd7ad3
SHA256	06a8541a156a3df0aecb9ac0dbf6a625d1f1a6ff7044ed4a711e08ef11a1a9c2
SSDeep	192:SY8FoKLLd6DD0SBK1pLqmg0MVk0pps/utb:3WoKd67Xm0kCps/u9
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	4.95 KB
MD5	6bcae420e8372d21b17e261569759234
SHA1	982ce4fb874bf7cfa7a680f74f73b13b949e61a4
SHA256	de7b9d44455d7fad01af3747ffa6716ab036ca63201d6b66ac5f86e8d3034237
SSDeep	96:INZLeTvQCbhanHO9+j6dR6cyJrMpXLYzeglwRd0l7:41DYhanHQJXGrMZLoegaRc7
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	982527b41b31bf49b4f19e4bd0ed94f0
SHA1	be5a16e63f3b26342dd5052fabb3a9d7d44c3571
SHA256	408204d27060cd8a513fb78590ebf2ba606772add15584ddffdb1697e7cae5f2
SSDeep	192:SY8FoKvKF12Fe1Td0PIeenlTPoM8BRDNFJk:3WoKyzqe1uPcndiRXJk
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	16.47 KB
MD5	2dbeedecaaa733aee66d10cf3073b3c3
SHA1	39a0942cb1af1627dd2a68ccb31936f79f1525fb
SHA256	4545c5399e9e4065ad7fb3694e6aaf4a260359432e4b1bd7b03df1bbcf03b65b
SSDeep	384:iEqCxCG65llDwikDiy4Dsu1ps4hKDNQbyL4AvYHitJ2hE:iE1CXrkiyFucjNyyLZ+it0hE
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	15.62 KB
MD5	dbcd7420ded1ae5cb534334ae010ba34
SHA1	70268a7012fd7ed9732dc891ec81e297c1bfa3cf
SHA256	f61f282c9ab64c05604104de4c084ee815af7b665fb13a2ce93c46c194204ebd
SSDeep	384:1KnRjsh+2xRRq0xhsWp+/Z/IHZmSxbXAWajoifWa2hqMRZP5:aIhhZxhsccqZmxoPa23RZP5
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	f4e6baa6826624456c81b2fec8094ffd
SHA1	b3cf468e6da963f4e8013ed77ce8cb990915b387
SHA256	7b4207309ef557491d238e943163cf917b98f79a1a63c64dc79a9ee49cac64a4
SSDeep	192:SY8FoKv/K0dOBqVH22u3T7cAsLPp7rQ/BjyT:3WoKnNOBqVW2AQNrPT
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	8.59 KB
MD5	1890edb677a97e5fa39a8f671b93f6ec
SHA1	bd6df9f5d4d6806e2a5ac6c410af53e0f741fcb3
SHA256	372aee779ad3ac3b1342ac0f54771f1ba228edae9df8849e63316a4d847a9a26
SSDeep	192:TvOlPVtsBDRsg53TteIfMVN/pp5bfVAMl3:jOlPHssOIIG/vdfj9
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	7.48 KB
MD5	11bcaf76dcdf1c4127bebd137b4dd9c8
SHA1	09089fe60bc1e9e02df0b6b827dc88d79a3ed3e0
SHA256	f46375ac519ebd657b5ae2cc971130ea1b5bc8289773ac554e01227be7d2b46d
SSDeep	192:y4BAEKuVyxT2iCIG3Y+H20LiqaVtSApMCt776AQ6oh0HC:LAEKuoYiXkPW0L/wt9X776Ae
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	8.70 KB
MD5	7f7cb9115350a8e80bc0098c317a4f8e
SHA1	bd58b766c9fd056e16271ff5c7c26ab19b43a7d1
SHA256	cb0833604ee131556b9cb535239898449ccfcf6f34b7a3facd6460a98f0ac431
SSDeep	192:uvoa0EdMQ5fpTfci23byhB6UAAyFNI/ciLVN8:uyQ5BTfcicWJI2/ciH8
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	2.47 KB
MD5	b7cbd6160dc34fcbb033f773c46558cf
SHA1	e4ab98c7283ea4f3160dde98a4bef8ae9ef04f01
SHA256	5c6fc426db347ff73d87b144c9a440bc387aa6c7c2db918b430ed7645a908e2c
SSDeep	48:rMbj5EUf3MPHIEpBQvTGx0o96HGdmBUiPHr1b9OtwJ1AfV1Rc8kO0h:K9ZfcAABQv879LmOW99OtNfy8kO0h
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	7.47 KB
MD5	b57baad48120d25e0e32ed5a7226e4df
SHA1	bad3848b8b104526e1ddab902136edac38aab046
SHA256	896a9ce819d254fe6cc69257e5cf36ca256219e7812a6b4e8ccaee3d9dd3203b
SSDeep	192:y4R9+gVVXAoawoYR4vsUX35dEx6zPshJR/s:p99ZbRAXJdExphJJs
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	9.91 KB
MD5	8cc9d8354ceaa0c4e60ba3c2d8de0324
SHA1	1acf781c7a06f1d8014d7e6655002723cb0a4cf8
SHA256	57084406996b6cc4645554a6d65f5e6c9f782bf34678f2751457608ea7a3c7b8
SSDeep	192:VkYV/QFlWgHZvrlgq4RNCYG+3W4E2oxBBu0yMi+8vjO7aQB:VkYV4WgVrlgNNCYPW32oxBQ+8e
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	7.98 KB
MD5	fc4e81a28148979482d3e85afc249daa
SHA1	653d05a8a13dc0d3ea237dc2e6a9f61d117e4529
SHA256	df1bf2c20a2fbe64ccb6f6a1fd0c6659acb46d72751a52464c562397a17f53ec
SSDeep	192:Opr0PRef8ABDWLYU6qsx1M7YvXloKs4+dXiXC9WjZxV8px3:srQRef8AY6qszk4+GPG
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	8.00 KB
MD5	0c10d5a29a6bf17290c41a33db2c41a9
SHA1	88a4e257dd658cf90a8dd00233b74bf76224dde8
SHA256	f99ef1a234cdd0523d8a4222ae476841409533757090a2f4d8aa7ed3c64ea376
SSDeep	192:C8hb7vdwMS+sl2hhP7eU38MmBy7tZFEN7fT:C8BvZd6a7f3jmYkfT
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	58b7706d0747946098672a22d09758c1
SHA1	6050da6b335346a59153e7cf68647e6686e7a50e
SHA256	f394b7f1a287785ff9742ca3d95ebcb99d6e375ee86c16b3330579fe5c939b30
SSDeep	96:X4Fo+eIlY1w4m9t6nE5nouSk1pizkB0M/YX5bi4:weoYnm9tsuSiiwBFs+4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	2.06 KB
MD5	2b29b719d44757f21ad9e79afb7a805d
SHA1	918fe10b291427462f56ff594b0b3adfb53f2c2d
SHA256	09dccc1122d9ed2f367c84950e0999a0c6770db6cf87361c982db0148508f9f1
SSDeep	48:/aqGF/wtA0T1rTH2HpXerdM5ZxCH6Ex7Y1S/IVe0KY7LW89t:A/Y3T13IYdMVCZFYqIMMX
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	5.81 KB
MD5	61e668916620c690f371290717895db8
SHA1	aeb43ec28684566a219ed65cc2fbb00adbfb51e0
SHA256	ed9acaa39a8698f1452421b69bf9fa71d96a89033926a2a0defca128cce59551
SSDeep	96:B2HOhzs3kpHBz5jGjsplJuUMHGRCEyI2GiRMtpfvb5cLplyy988cOnjfrG:B2H/3kb5ZpLyI2GiRMLHb5g9XcYrrG
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	3.17 KB
MD5	22ff041adb650e06d8030d0dc6c6cb85
SHA1	0cb59b4d77b252aa7a610bec8f62212821e535d7
SHA256	7546f0ae324cfd77381f44285d5069695ef482ca0ea365fba82b47005a454126
SSDeep	48:q4TTVnfTsSXiPJFB92Ya3u1mBREar5qct/15dPnLbWSMad2TNPYNAwEMYh3kc+Kr:3HVfTsSib2YGu1mptjzdPLCSMG5pfa
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	9.23 KB
MD5	edc2346c3f6e1377c43561fe7509cf8d
SHA1	0992f56edc8b92330211d5f8f35c37a0f7073f5a
SHA256	79fb228f3285d8e17407502320ad27a09e566195dce860e40aeed88a6c27185e
SSDeep	192:YTyJ7vjx4HmLhWcVxeANfBqcnhtwtN//hIXdiHxh3w:Y4F4yhnxXxetpSNiRRw
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.17 KB
MD5	37f251e69e653b89f5d1d29e8d2dfbed
SHA1	b7e7ce50b3d4cf3e74157fe5fc86405a36cbcbb0
SHA256	8985dfe69a16256ffecade643b88358344388081ec61e224ce91a44e01cc725c
SSDeep	96:3HVfTsSib2YGu1mHrU9OwTVcYXLg4T9MGn7BVrGVRf:31fTsSi9hMqBMGzrGVRf
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.02 KB
MD5	9c1222eb8202fdebb77b843d27da2ff3
SHA1	d3db82f982199e1b3e85cdb7e7c0d292afe228bc
SHA256	ca100ecd75c5908c050be3d49b4708d569d3e507a665e5c7d917dca213252875
SSDeep	24:Y4Z89+tLDSjGSio4Ij7lijAEmpYvUYbz25amlzSp:Y4ZGg0Rio4Ijo/2Ytbz20p
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml (Dropped File)
Mime Type	application/octet-stream
File Size	89.97 KB
MD5	06f53d50b793bea77ec8759c472b21bd
SHA1	fef874c66d6fc0057616a9d9bec670b51237bb91
SHA256	8c76ad58d61500508e58e449a7741282a5b50d1d2e0fd437110681af4cfd4509
SSDeep	1536:oKh24SiV0s4LjVHTLWu4lXBg0FQ2L3N811IzfxQUBFLn+ePr5dym/:oo2BQaLjVHTslxgkQ2L3OQDz9+evyC
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	13.64 KB
MD5	ca244524ea14cce4e0608ee561e4a0f4
SHA1	2694e063207cbfade2c0b176a849a402e8023741
SHA256	10cd20eb7e450e1e65bacddb54fdbc5709a288109920dd692169c5d55c02238b
SSDeep	384:5wwh2h/LmL23+W3ZpAe2M3Pu0UFngNiqlqigHL5i:V2hbBZp124DWmN2Lo
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	14.72 KB
MD5	813ae4f71f27d32441bd118e23e8fd80
SHA1	a8c749a9fa7d7b2b3e18ae999d91d31d2d320d90
SHA256	b265badec2dbb8b3fa654cacddc163e8524a774f5ef557678fa0c74f327f8313
SSDeep	384:0x3/WgS67sAZdtFbOmheh5j4111A4h+Vo0CWK4Qzzxfwm:0JWupgmheh5c110REP
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	13.92 KB
MD5	4666864f9ffc6dfd58df47bff79a8c74
SHA1	a26b1fd2fe5d93f0b15febd3c7ab4ef0ac224f30
SHA256	e4818758c1c0522b5e9df3524910382c642232f153e6537da7722f192f6b9939
SSDeep	384:6aviWPIF9BN2uC5lJ7U7vKGbmfVGxxSdQIrl+5MIOuz:6szPw9b2ucHURbmN7p+57Oy
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	16.30 KB
MD5	487b0adae861a3ddd508da0233afece5
SHA1	d516671bc8a7e8d6d8ed27656a5309f1ae7b0f72
SHA256	b00ed601d30f743eaee2e44dac5d06d401350bca389b40b2c3001ade4ee87c19
SSDeep	384:pY3rbF/lJnfm3KSqw6b+BwWlPGeYDEcv0O:pOrbllJnfQp1Ge/s0O
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	944 Bytes
MD5	1af43204a345ca70bb72b2f0972b750d
SHA1	ddc3cf2eafcbbd24f58247f00aee13f604e556f7
SHA256	e190f22eaba060a2484f20f2b7102b0beab4c75b18ed8af34ac936714b230842
SSDeep	24:HEPUJCfFBSepIIq4tLbc+plw56OdqvY5/FW4V:kceBSxIqGncOwUOUvY5/d
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css (Dropped File)
Mime Type	application/octet-stream
File Size	912 Bytes
MD5	24e8742154186adcfb869fecce8af634
SHA1	15e5548b4a694a5b8715160bb298646b42462dc6
SHA256	f50332d358b68a342b27b01d5cc2b59c0618e0474b052d540f7ecaff986afc55
SSDeep	24:HMZ0WEA8jqLQOV2PqoX+izAyDNRsfH2IGCJcjdVj:/jqMK2PqoX+ixRqWIG2CVj
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.56 KB
MD5	7e4605f3407ecee2fdd102f88a6bf06a
SHA1	da0ffc4b7c243fb9ffebc7c2172b56aefb70a04d
SHA256	050dad033257a33af047eb56f6de0318a3c50b4a89621cc2a247ea3316615132
SSDeep	96:PKllT7QYV5XyoYL518XW1bNg58hY3LxZxhW:PKfTk0io2518XybNgqC7xZW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.23 KB
MD5	8ee398a36a29312cee6791dce132fe80
SHA1	01dd9898d00e654e3b64f99b9630f08b49293a3d
SHA256	eee439e3d1fe3c61921fc89058fd8195f3ebb37ce2769df767859fe8a41ab385
SSDeep	96:uJUtbJc0YwbBt4dIUW8qlc3cX553EAQYlqcU8t:MUtbyf8t4zKaAQYYL8t
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	2.98 KB
MD5	3f8e6130dd9b94c696a147a52027f5d7
SHA1	b13f730d497e3eecb082a1cafddd7d731c65a4b8
SHA256	79a9597612574138644817feb767aaad3f6c50d6a86851a57b6fbe02bfe3f683
SSDeep	48:kAfSt6F/wq4Zw2zTd2nCLA6LLsBEdo6JrRxCww5eY3ijuxXz/Ki5Cv6ujL4o/HfW:d68ew2zpZTex6YzLKYCx0o+ZX9
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	2.30 KB
MD5	59a93d38ed96f02cf02427792b2b656d
SHA1	30daee711b5579527024c1d9797071e3177e28cc
SHA256	44ffbfc745053d3ef923383089b9d190adf9de946cb57007b1181804f450aa3b
SSDeep	48:0N9wcLekynSIn8SAkuvQiyb87honp6mKGIc+G/lQ3G7cdE7AP+x:0YkU8SAkujq87urm3fdEMQ
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg.[neftet@tutanota.com].boom (Dropped File) C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	3.38 KB
MD5	284f69af4f82408c84fd547727325d7c
SHA1	affffee1b731d5785cb591112e7f4d3a23e9489d
SHA256	cd2b18c43bcd625ec5d9dafc1b63e49a5b7a85b25aab85fd21439ebbd9715429
SSDeep	96:G84BENow/yjoIqa4kS/1lPSAmEsNZC2PX99tXssEY9:G/BEuC/P2EsNZr9Tr
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.02 KB
MD5	f7d34884fc01fb80a9ea71979155de9c
SHA1	4a9e7ec8c1b2ccf45bafaf1593c62aa21c8544b4
SHA256	f409aca86f8b1a9de49291e256e442a421f053c23a5fef595ce2cd39b995eb61
SSDeep	96:AE6e40TBdZAdRHaD3mhBhkI1HzM5U5hlSsbaWQFB:AmBLAdR/vVd5C0Qf
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.27 KB
MD5	271d6295a9e500e2335aaf65362cdae1
SHA1	4fc01f913ab5842a8956896ea04faa4c9e0eaf5f
SHA256	b60224b0cfd8dc9ea36ce1c9e230908d601a743e5437012963a59c6ef30d00b1
SSDeep	96:l8x9tU9FLL+WyyIGvHE0b4T+Ms95ldA/4V5r2aZUi7R:lGG9rxbe+MsNdlzrTZP
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.12 KB
MD5	4cc6ef9667c7c59e5778d48625b625b5
SHA1	a2d641a3f2993ac50657a7fac8d1e695b63d26bc
SHA256	40ec84b4807ead92a998aabd8bf65c026dc134d7fce9a595cfe7fda90b4ae717
SSDeep	96:iqcdqNftKvZbiF2JesaOT9yPD5dQIweHGMCmMsjJ1K4FyMA/NAj:/cdE8QWahLQIweHtzESyMGNAj
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.69 KB
MD5	d6376c09f6208005bcbfb43c4df00221
SHA1	0e66a05321259df0bbe28a07b3df796f00a6ef07
SHA256	c3d0fa39c4919d017c20d2268f02790d02e2e3a0db4c377b7b89b1f3c48ba78c
SSDeep	96:6Ac5ZUWJ0+11X/SgEIsk19QvueLKcvi4PLv6A6ZnlN7j/rnE:675ZUW7E/k10qcvi4TH6Znl1g
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.86 KB
MD5	7cdea6a192fb320986fb0dccc9136a6b
SHA1	97a9c7e8d53b00f0bd5644cd401706ccab52bd27
SHA256	ea5a50e8420e0ec40fbb47de30e528e4edd3bfdbb3c1101be873a07b26faca5b
SSDeep	48:TPgOqsXiTb7TUK/65mqVQUrN6RHRsWyXzvuw841Wu:TPgOvi3UK/+mXtHsbDvuC
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.95 KB
MD5	e7dd56074588ac8453c3040db75ac516
SHA1	14ff67cc76de79a541fd46b5ce51279197b3b738
SHA256	729d038eb58e1ee9ce83515aef5511d7a486b160ffc3479b98d44b2c55ee98b6
SSDeep	48:d9bQ8xe6A1wfHFdA4Qqavi1dcu7C0Kpwv7W7lW3yZK7fgeuV0bin:d9bQCxDCq60Cumrq7W765TQVtn
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.16 KB
MD5	eee77ae40e93109b2f13229c50823c6b
SHA1	1276cea51f46115b62bc9332983346c0840e1b50
SHA256	b624ff7a70f0aa4fb0161def6fc2aa99e891454284609f2bccf301898f7f7b94
SSDeep	96:G2H8rpR7ag2amx+NPLNE7//Bmn5KrAtId7oSuhCmo:G2Htfxa4XCKmSOto
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.94 KB
MD5	df17272071dd83001fb1ac369efc1f73
SHA1	e1ca87b2699935c8ae099e778812973fed8504b6
SHA256	ff28070b7ee2fb939d9f836408789a623522772355a38eaa535ed072c9b60133
SSDeep	96:hBI0ONnmsfShKUJybuPKNe6CYAhg9FfnWMN1BYH5WPoB:hunWEUkehQnWHH5WW
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.83 KB
MD5	0cdebca778c379fd7b9b54153a04a1b1
SHA1	11096f5cc0597decc4c6bd2c9b6fb1ffe7d057da
SHA256	11ca0c23dd2ec7a95a6d077c3ea2bf78a656327fb5bb3b2a5a24b86c5aafd342
SSDeep	48:+YHt4pO/u91jt998H+V0eS90YsT7tXvwWTONSyECR:+aSCurjGH+DTZvwWSNXR
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	1.77 KB
MD5	bc2f217a7c7cc3e6de2d60a7f9768687
SHA1	81c138db4c5bb568eb968db1509379f81a617323
SHA256	15c33e19322505fa0ae550f61876699d3d01382654bd87a92cb57e0e5421b046
SSDeep	48:TOnf1D5T4r4pWAxauAY8ggbefIWkvRGlQY6IAGnwIW295:SnN9T4rvbuf89wBxlQYjAGn1R5
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.22 KB
MD5	6e2310d138c0d28b7714189ef4f43828
SHA1	accc2772795c8b41b9ff365665b5f114b269e207
SHA256	e70e29bdcab15a14ed7dc8edb7ef68cb4dc0798098131ff32a8a348c9c3e0e72
SSDeep	96:GLYwsfHRPQ6qZkMnTm8ywCMk3rJAzOi02T9wCOylOt0f:GYRHu6mkMnTm8y53Kt02Qlo
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.45 KB
MD5	132b0c587fb4fb6a0575feeab448540e
SHA1	db6472fa8426fc4619097c09a1de4ec9b9027ab8
SHA256	b0df0d8d52c85e87b4059b0dc1ee1f65822b1806c7bc32e6bcad704947f821e8
SSDeep	96:PKllC4lWQfgfHVu/ELwGNBz0p+1tvrUceeZ3qNEJZUfpg1VDn+VkzX8pUyx8v:PKfCCTg/EZGNl1tv3e7eJDnn+GKUyxA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.97 KB
MD5	0ea1aa4566f5ca3853ceb038dde28d9a
SHA1	abd7aeae24d4e84af79bad1266d12d7d4fbf2e93
SHA256	9cb0d86dc3e6b06502e838038438a6d1c0c710334c5fe76e10dbb3292192d78b
SSDeep	96:HuqoqxsKoY/L226PT0TfCWDarRGIVMONkL6HqusNgUC787nmyD:H/oquk/L/nTfVONkLIlsGU1LmyD
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts2.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts2.css (Dropped File)
Mime Type	application/octet-stream
File Size	4.12 KB
MD5	fb8bcdbd52a3c99605cbca37a78c947a
SHA1	8bb3fc8cc07ca23b30090b2eea52324b6deae4fb
SHA256	2e1b198212d722c657117d04e2a47dd7cfdaeed8c069eb08fccf3cde046f96fd
SSDeep	96:uJUtyScJ8wb7oEqdb1Ulaxuk0enWkJBxFbkwKTdcjdotn:MUtrcrbsEqd6Axuk3Hj13d4
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl.css

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl.css.[neftet@tutanota.com].boom (Dropped File)
Mime Type	application/octet-stream
File Size	3.94 KB
MD5	23a715a14db3ad417485f84584f19b91
SHA1	a069ed2cbb373b07d1ebfb5268df44a44c20f295
SHA256	4640970e9b0a1d2a68ce7119cb8191b38469be954320867cb182c4a8a06ad56b
SSDeep	96:2zadvSRabHp4lmf1Cs1/M1jmOJ2mvecHZMyFkARMcgFgEwv6:EadvZ2lmNtk1jx2mvecHOvFFg3y
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	9473b875c002b671158c9ad099882b02
SHA1	186e5d63055a0ce70f9284469d92fdc8ed479f22
SHA256	bfbecc10bc5ec855934b6ab1e1814e7cbc69ff4393876469e1aa0a9a1592f863
SSDeep	48:D+Cb8ph02MWclF/TxEfTfkiqfr0grXdPPhdOEVkPsf:qhyqcD/TS7fefrBrLdOw5f
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\VelvetRose.css.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\VelvetRose.css (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 KB
MD5	747a305ac9ba74c349bcbef25c782bea
SHA1	f0ecde7660a2346a984110bde81259c42163944e
SHA256	f383f0e56459548a13397ec883870908c8485f1388500c9e0a7a036725aba4d6
SSDeep	48:CJJNzh3beH7vJ7YDBiCiANNdHRHcOGsL1ThBqiqrp:ET1ibvJ0DgCioVH3GsL1TOiqp
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	9.69 KB
MD5	915d44ed5d4555d39bc32aacf2c313df
SHA1	940f02500aab1191baa9269aded8a42f2a246e87
SHA256	bc359269a5ce2ad82a9e9f94be6e0bbdf340b14f60f52cfb65bccd989a4552c5
SSDeep	192:hignwMp0XWsE49TAxcqo2vdmQYNdYae/f1DDIz100kxpgY:wUh4so216NdYaen14z60kxWY
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp (Dropped File)
Mime Type	application/octet-stream
File Size	1.69 KB
MD5	d41b9707040854da04a11dcee79d798e
SHA1	8bf21c45514c60eaaf88dd9fb8012600bbbee054
SHA256	b5eb5ccc4643d7bf4c98f3a6a4741958c09d1b8c71e2483f465e06b1775c18de
SSDeep	48:DAFSwjPO38VjHZ8NXheUgLs6PvSD8zCKsiiOs/EXTMHlgq1sjzUkB:Dfw238VjHZAPgTHFmKzsjEzUkB
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	6.48 KB
MD5	cd01f74ccd54978da137bdb53257f17c
SHA1	fbbc659d3317acdd95380fb22c369f9742b35567
SHA256	0a7cc152abd07db42e08001b6efc78a9045c930c2ff6b11e88044a2a5d1a7494
SSDeep	192:qvZmt3QsY9TbRpSBoOO3G2CfL+WtPSUZR83wYczbBjV8Nz9U2:j3TmTtgqp3G7SWtPXZqgYcXB4U2
ImpHash	-

C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg (Dropped File)
Mime Type	application/octet-stream
File Size	4.25 KB
MD5	8b071c9b47e0f3dd7cc32eb06d1b5a3f
SHA1	841d3116a451fca9356a88d324107d5feb846194
SHA256	477ba400210c874b5d247d72c42eb377bea982f22a799a1e7f6872c7ad40c70b
SSDeep	96:1QJ6cw5b+EKJQ55qizhv7WNcmgzgh42JP2r9fA:1QJ2+/ihv7WemgMhNs9fA
ImpHash	-

C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNote-PipelineConfig.xml.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNote-PipelineConfig.xml (Dropped File)
Mime Type	application/octet-stream
File Size	512 Bytes
MD5	8925f1336d29526ff3f0f95eab1c95b2
SHA1	9d87c60bc1eef1a7e8ac354cf4d3a9e4914a452c
SHA256	2333ff8fd0be830b54f0c3ae314c97beb0483f3bc5da3c29813fe8ba0c561ea1
SSDeep	12:z3eB+aDDndriiA6a+zWRqTj7MWTB88nOorxl1bc6D5bemz2nw9Cw:j+lri6jSejnROorx7bXemz2gV
ImpHash	-

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.[neftet@tutanota.com].boom

Dropped File

Stream

Not Queried

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf (Dropped File)
Mime Type	application/octet-stream
File Size	457.23 KB
MD5	af1a5e5914488f7a8a9aba84c5e1cee2
SHA1	d7929348c613f9191d65caf539920ea88507b2ea
SHA256	9cb8e0e323b4d26853f6bf215d8b3d494b1e3544dff590e01e1c7b96631d876e
SSDeep	12288:TyUIzzp/ErSwCvnkMAqly+QK0/KRhjO6Le0:TxM8ckMAqly+Q5/Kb00
ImpHash	-

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After