64ad5e61...5383 | Files
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Dropper

Remarks (2/2)

(0x200000e): The overall sleep time of all monitored processes was truncated from "5 minutes, 30 seconds" to "1 minute, 10 seconds" to reveal dormant functionality.

(0x2000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

Remarks

(0x200001b): The maximum number of file reputation requests per analysis (150) was exceeded.

Filters:
Filename Category Type Severity Actions
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\regedit.exe Dropped File Binary
Whitelisted
»
Mime Type application/vnd.microsoft.portable-executable
File Size 62.65 KB
MD5 90bed11c0aa7151485d1212d35bd9c5d Copy to Clipboard
SHA1 283a86876a0616df8c30fd6874a53e7ae5624904 Copy to Clipboard
SHA256 19218554f71c236f63119fb630c88fc3349b6f5762c28c957f2b3f717e827748 Copy to Clipboard
SSDeep 768:ZK9zVizdXiTyRLQJan8dBhFJ606Iq8HYvYDKa248ivNdmJB:8izdiiaa8dBXMjODKa2v6XmJB Copy to Clipboard
ImpHash f34d5f2d4577ed6d9ceec516c1f5a744 Copy to Clipboard
File Reputation Information
»
Severity
Whitelisted
First Seen 2015-07-22 05:02 (UTC+2)
Last Seen 2019-05-31 20:20 (UTC+2)
PE Information
»
Image Base 0x400000
Entry Point 0x40ccba
Size Of Code 0xae00
Size Of Initialized Data 0xc00
File Type FileType.executable
Subsystem Subsystem.windows_cui
Machine Type MachineType.i386
Compile Timestamp 2015-06-20 03:53:54+00:00
Version Information (10)
»
Comments Flavor=Retail
CompanyName Microsoft Corporation
FileDescription Microsoft .NET Assembly Registration Utility
FileVersion 4.6.81.0 built by: NETFXREL2
InternalName RegAsm.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename RegAsm.exe
PrivateBuild DDBLD031C
ProductName Microsoft® .NET Framework
ProductVersion 4.6.81.0
Sections (3)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x402000 0xacc0 0xae00 0x200 IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ 5.4
.rsrc 0x40e000 0x930 0xa00 0xb000 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ 4.36
.reloc 0x410000 0xc 0x200 0xba00 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ 0.08
Imports (1)
»
mscoree.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
_CorExeMain 0x0 0x402000 0xcc90 0xae90 0x0
Digital Signatures (2)
»
Certificate: Microsoft Corporation
»
Issued by Microsoft Corporation
Parent Certificate Microsoft Code Signing PCA
Country Name US
Valid From 2015-06-04 17:42:45+00:00
Valid Until 2016-09-04 17:42:45+00:00
Algorithm sha1_rsa
Serial Number 33 00 00 01 0A 2C 79 AE D7 79 7B A6 AC 00 01 00 00 01 0A
Thumbprint 3B DA 32 3E 55 2D B1 FD E5 F4 FB EE 75 D6 D5 B2 B1 87 EE DC
Certificate: Microsoft Code Signing PCA
»
Issued by Microsoft Code Signing PCA
Country Name US
Valid From 2010-08-31 22:19:32+00:00
Valid Until 2020-08-31 22:29:32+00:00
Algorithm sha1_rsa
Serial Number 61 33 26 1A 00 00 00 00 00 31
Thumbprint 3C AF 9B A2 DB 55 70 CA F7 69 42 FF 99 10 1B 99 38 88 E2 57
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe Sample File Binary
Unknown
»
Also Known As C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\java.exe (Dropped File)
Mime Type application/vnd.microsoft.portable-executable
File Size 747.00 KB
MD5 51bae3ef8cda64d0fc68fa101d9f4e08 Copy to Clipboard
SHA1 806af15ca70e3ff46717438011666892c02e8d52 Copy to Clipboard
SHA256 64ad5e61454fee018519a63a1475f8ac9d269ca5466c6d71eb92e30da17d5383 Copy to Clipboard
SSDeep 12288:nTCv7vkIyg16D0fpcZDHbE5lIJ639mu3wL5n+eKW4fmLyo0N/GG:nT2BED0fpMDHbE0QwvKW4+Wo+ Copy to Clipboard
ImpHash f34d5f2d4577ed6d9ceec516c1f5a744 Copy to Clipboard
PE Information
»
Image Base 0x400000
Entry Point 0x407d5e
Size Of Code 0x5e00
Size Of Initialized Data 0xb4c00
File Type FileType.executable
Subsystem Subsystem.windows_gui
Machine Type MachineType.i386
Compile Timestamp 2019-05-26 03:40:33+00:00
Sections (3)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x402000 0x5d64 0x5e00 0x200 IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ 5.56
.rsrc 0x408000 0xb49c8 0xb4a00 0x6000 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ 7.83
.reloc 0x4be000 0xc 0x200 0xbaa00 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ 0.08
Imports (1)
»
mscoree.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
_CorExeMain 0x0 0x402000 0x7d30 0x5f30 0x0
Icons (1)
»
Memory Dumps (36)
»
Name Process ID Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points AV YARA Actions
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x7484A000 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x74852360 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x7484C000 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x7484D000 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x7484E000 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x74845518, 0x74844054 False False
system.configuration.ni.dll 1 0x74820000 0x7490FFFF Content Changed - 32-bit 0x7484F040 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DD9B80 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDCAA8 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDCAA8 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E904A4 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E97948 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E8189C False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDBB70 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDBB70 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E8F6EC False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E4FEC8 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E8E87C False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E7F028 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E9472C, 0x73E7EFD4 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E529E4, 0x73E508AC, ... False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDD094 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDD094 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E51000 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDA0C0, 0x73DD9678, ... False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73DDC088, 0x73E5279C, ... False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E7E080, 0x73E8F554, ... False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E83860 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E8A598 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E43C3C False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E44684 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E4729C False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E904A4 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E4C610, 0x73E4A548 False False
system.management.ni.dll 1 0x73DC0000 0x73EDBFFF Content Changed - 32-bit 0x73E4D040 False False
buffer 1 0x00940000 0x00942FFF First Execution - 32-bit 0x00942005, 0x00941E97, ... False True
C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.24 KB
MD5 4ed71acf48a1bc69e774dad325f0be06 Copy to Clipboard
SHA1 687dce5e71bede553530ac131f7091661553de24 Copy to Clipboard
SHA256 85dc4759cf932c7e627e1cea13896c79be227ecad15531a31e03e302d9dba144 Copy to Clipboard
SSDeep 48:XclNWdgUhDDJgUhSkH9eR/KF76PUP7NJ6kg49Mac2UL:XeWdgGDJgDAwKFWPUDehL Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 74889077acf2bcfb5378a1b4fd212264 Copy to Clipboard
SHA1 18a75764418bc91703ba5ece3a434a8a0823944d Copy to Clipboard
SHA256 d41353fb0c688a3b8243e0c85776296a9f0ff32caf38d2e2f2260643de291379 Copy to Clipboard
SSDeep 24:Ucaswgwxrtvl+3Kt8VyDzu3tMnQRhgqdI+nK9AFpTiRBgvwBQnvcaGRA:XTwgwxrt9+3KhDzctMnQcqdRnYYpTMc/ Copy to Clipboard
C:\\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.76 KB
MD5 c990d54682dfb5b8e7184674223866c1 Copy to Clipboard
SHA1 6813e05cb9e9063f80d5c8887f2f6062f99f7480 Copy to Clipboard
SHA256 84c4bb885df3ee69c95133d59898a4c611e38559d9b09b880c6157b746fb931f Copy to Clipboard
SSDeep 48:X8D8BaiwMNjVBKQjVB4u/FF51MEEQlVOD3E:XG8Bamjf7jfv/75Wyt Copy to Clipboard
C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.32 KB
MD5 f841c70c5c3d664fd4acabaab147c4fc Copy to Clipboard
SHA1 ea32e8986769666776a6298911ff99b376fd62d9 Copy to Clipboard
SHA256 76eaee17d6d6983f581e08f9b271539a8843205a146925d074f0b11f97ea7690 Copy to Clipboard
SSDeep 24:Uca1+jr3s/GJQ5AdabQ9Ioo4TXooMGVyXSE1MEdSDWSP3FxXR/L5o/aVrox:XQ/GghTX4TXXMGgX51MEEXdRR/LiSdox Copy to Clipboard
C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 811 bytes
MD5 042c5db3e2d2fa07309967059fd8aae5 Copy to Clipboard
SHA1 04ce1fb857cb103b5ecdbe5f4903aa7c9f8137f1 Copy to Clipboard
SHA256 28b09311b69a3b4a94a81661c0ca233a74013faba62fc33624f112ad7b3d71df Copy to Clipboard
SSDeep 12:Uwfa7oHpR6I7/KRI3BfEcZ8jELR0oWR26Q29m+8+zGtD9CVyDz/UmhvI7lmQ7a1g:Uca7ozj7Kpcfw7I+3Kt8VyDzEwQm1QV Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.35 KB
MD5 00b80b7c0ccd6552ec0b40aa2ff66fb5 Copy to Clipboard
SHA1 2e9e40c7b58413239ce7da433cf3a4f1ffa2e39d Copy to Clipboard
SHA256 8588d9fa167342fe92f538038655f63bb50f576b6b3114ee53b23b5f313603ee Copy to Clipboard
SSDeep 24:Ucagu7rihHLCDygGiwKS//YbDhqKZC8jFeBK3WE2AunwQm1Q5YM5o/5v:Xzu2isO1CwF/WE9Gm1gYMip Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.31 KB
MD5 57664317fa5fafe91085151ed15a2c32 Copy to Clipboard
SHA1 997513568d647093f1dc2762bcd730bdc376b918 Copy to Clipboard
SHA256 ede5d41b8264bff8b31f5d85e901ac6393f179327a0db9df29fe998992788975 Copy to Clipboard
SSDeep 48:X7flY13Y88w1XgHBWkgkShnfD0ol1I7UazWjVIAyWD/Q5:X7+3RvEBWkgk84cazwny Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.81 KB
MD5 6c800721b7a25ada6bbe9eee1a9a24f1 Copy to Clipboard
SHA1 a689fa01442d54ba5a48ffdcc130acf142cb9882 Copy to Clipboard
SHA256 c15b75114a75f90894235ea51f59af1a6b171901404649abef0793c488826d36 Copy to Clipboard
SSDeep 24:UcaYhfhioOx09ny5tq1t/iyPtYiLUxpl3AXV1ULbqNj50thqQXm4LhtT3cVa5Oow:X7Sx13Y/PtF+9eU3qBe5XRL3cuOF Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 6.09 KB
MD5 0de76c12fb6e2ad57c3ae8f279aa46c3 Copy to Clipboard
SHA1 06f5f08dece8dbfdaad40eb74a96d0708f8008e0 Copy to Clipboard
SHA256 3dcc2630827c7e4b602cd08fb96025751ecf021f4e4c63b62503d719cbb2ae3c Copy to Clipboard
SSDeep 192:e8LJiV1Z4oepfRqoKCprYoxCrKXnBTbT6HNfEPJMYk:etRK1XllCrKRTfyNofk Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.57 KB
MD5 b9302b914a2b87af50792e7138308305 Copy to Clipboard
SHA1 142e4a0978611f8068e9215068b9cce0701a6792 Copy to Clipboard
SHA256 885a3d870ef084301a7a7159b86f8b0a1ee7866fe1a0eb170119873807c73661 Copy to Clipboard
SSDeep 24:Ucan3SOHFomQ+WnQs2JbhzIJnIoo4TXoo3BPnkHff2bW2xDTwXccmPdTnpo11kv7:XKiOHSmtWnj+/X4TXX3o8W2xosHlbBv7 Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 4413086afb4ec1188b4cbfb82e98a2ac Copy to Clipboard
SHA1 f295b35f8a143f01bd7906dd8a920af9d711a8f0 Copy to Clipboard
SHA256 ec5fab5a67e5f079c502abfa2fd7419e3190d7507ea8bc4fbbf5d801eb7c5a19 Copy to Clipboard
SSDeep 24:UcaDpdtXYaDY/hgFWlyAewrEnQ8GA9sCBvYHOnOysHsCEDdmrOsc:XU1k6Wlswr/815esOysODdKOV Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 913 bytes
MD5 221d4c89665691f8fa12e2312b9f1d06 Copy to Clipboard
SHA1 1f9f5efa9f2ad206933ebc03ade2126ebf9918b2 Copy to Clipboard
SHA256 27aa7fd55f2a2b2db41f53e3c702aa027a2f899caf67113821803c3006041efa Copy to Clipboard
SSDeep 24:UcapPaWZuI7vwIAGThynqR1/qDMWA9ss3I:X8PhZTtbTqDsr3I Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 819 bytes
MD5 1706ae5dcaa1dce76fd9e98154d9580e Copy to Clipboard
SHA1 94b07beca721e056a7d63d36d2628ad9a081419f Copy to Clipboard
SHA256 cf64ca20fe934b2c0ee0c6ceaf638d0877de8bb3c75822c48a59f79ec75afee0 Copy to Clipboard
SSDeep 12:UwfaiM2drA3139Vn4qEbBYVUP7xmwvR26Fgm+8+zGtD9CVyDz/UmhvI7lmQ7a1W5:UcaSY9V4qEb6ab/+3Kt8VyDzEwQm1QV Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.32 KB
MD5 a766a44dc6192eb29f2024e7bc9f7582 Copy to Clipboard
SHA1 1bb4c022f9564bfffb92de7f848009fb647a7fac Copy to Clipboard
SHA256 0912de4f7b13ad894e7a4919f16e20a0421f4fa186c93e90a4b8baad4214f5d3 Copy to Clipboard
SSDeep 24:UcaQakXJQOAr9hds3qgUM3xFFWlyADI0z/LezZ7n9vcQ2sC29c:X5aSCOgAUM3JWl9IkL8hL79c Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 819 bytes
MD5 31b4baea013d85e1a77b87911478fa95 Copy to Clipboard
SHA1 1c35bc8479ec79f979930e647050ec81c80f1765 Copy to Clipboard
SHA256 8512962e31644fc541c2b222ed218618cf7a3b5e4f749b6f288c54a7ca65be6b Copy to Clipboard
SSDeep 12:UwfaIfxAb6U9Xo1f2m5zwhZR26LMm+8+zGtD9CVyDz/UmhvI7lmQ7a1WzE8De2v:Uca2xAb6U9X+6ZR+3Kt8VyDzEwQm1QV Copy to Clipboard
C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 16.29 KB
MD5 3ecb43cc19002906b51651e2cb1fd2e8 Copy to Clipboard
SHA1 8d480fcfeb66f9ca83e6ac136c15f43a13e71ea7 Copy to Clipboard
SHA256 913ea35da07c13573a67df1f99ba865931f2f7e981b1c80e44f10610c2a97c3d Copy to Clipboard
SSDeep 192:nIo2KSKDLhNXRZmBVR5iZhqscApnoW5bxZbZSk6ASMVczXBvAefJUqoni/n4nsnZ:IQJiIIseySBJALqId3AEU5iW Copy to Clipboard
C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 20.09 KB
MD5 529a24348a4f4e338903f0b71aa8e5ec Copy to Clipboard
SHA1 9f528a21237db29b15f34ee0e35e9eb066d9fa73 Copy to Clipboard
SHA256 e86cdfe97d58959c67b60aa5deafd45cbc3d3f2457ec556a2ef89b794c5a84fc Copy to Clipboard
SSDeep 192:FWlaYs9syZGqfZhqscApnoW5bxZbZxp0lEWyyBqgqamdZrY84BYLajs6JLxCnCJ6:FWM6qRIsX0lqSqQm4x6a462K6 Copy to Clipboard
C:\\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 716 bytes
MD5 11076f57e4a41972b3c937d9d8d8da3d Copy to Clipboard
SHA1 9c10710373c11746585ca5682ec9891b8072bada Copy to Clipboard
SHA256 dfe07314c0230b7d115abf08731b0cd73789b15dcf2e3c6586795e27fa4ccb12 Copy to Clipboard
SSDeep 12:UwzVtAYcRKWYcR4TMcUj5rUgBt/Vhe40lYbEqs7xA13v7ksrq5fNceu9D0ydkRwl:UkVtAYcJYcqTMcJgBt/T1bRzreN5uzS0 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 928 bytes
MD5 43b0f35d4d2d9bc6e35b543e66fe4841 Copy to Clipboard
SHA1 714f004e060d126ee4df8a1e3282ce54411444e1 Copy to Clipboard
SHA256 3e8c2dfc2c6ec727ad34c25d90e33b1a00d3be6c67d3d473040f3096fbd21e62 Copy to Clipboard
SSDeep 24:UqFuBvvDQmXGvRqEK7TX/FyHkOiP1H5Wmq:bF4vDQR8EKvFyHkLW3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apothecary.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 965 bytes
MD5 ccb8091fca211e7848eb7908f79751e7 Copy to Clipboard
SHA1 ee7495beacad21ab56a6ae7473defd049b2fb911 Copy to Clipboard
SHA256 778f052fcdb5e4e8138e2deec2217aa8ad9e312398a92e9358e54e1529048868 Copy to Clipboard
SSDeep 24:UqFuBh1GdWBfHH6H+0KUFxEZE696zP1wcV7rn7yDoXZ:bFucufRjexaEE6zuorn7yDoJ Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 8f0ec4343e072c435d567adbf59dff12 Copy to Clipboard
SHA1 42bf628b633dc47f3b48a6c53bddab5b2946103c Copy to Clipboard
SHA256 6ddf983183e5439d36dd0accfa909f876905e73ed8ee73f810bfbad35bbdc60f Copy to Clipboard
SSDeep 24:UqFuB4vDQhHJr070VpG8mZMfm+9P27imn78/f:bFjvDQQupGn1iP6nI/f Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 7d4c18ff237e6901d443522490e26776 Copy to Clipboard
SHA1 9dd9a0ee36117359dde78be875030516d8b026d3 Copy to Clipboard
SHA256 1a3aa3360bc6ab56948ce5cff1dbbd05a3cc1d8c58e1b836d09dec8634de307e Copy to Clipboard
SSDeep 24:UqFuBE/vDQhHJr070FwG8mmyDYzm+9g29InO/oYGE:bFr/vDQQ2wGKCig0IO/FGE Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 926 bytes
MD5 d26841e3f0612c9b2856d6e94f162699 Copy to Clipboard
SHA1 401756a77bb04a99abf6f3269b83b65c283ee413 Copy to Clipboard
SHA256 f43b966d7cadaf1bdb60e0822a6f8cf4a1ad2851d601ad5df9aa04cb8a19c7fa Copy to Clipboard
SSDeep 24:UqFuBWn6cRZpqyfDnnsN3KcdfRCDXr8wTb8gEm/B7MMhRFf0c:bF5hZJosc5RCxShaD Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 962 bytes
MD5 c58fc2c98ba09c72e30a89954b01b9c7 Copy to Clipboard
SHA1 ec54c7a6d8b0ca91733581fa317cf67a14626425 Copy to Clipboard
SHA256 cfaed583516e3849fd9d63d0dce54a649e20ee7a351073cc4e5b5a489097f9b6 Copy to Clipboard
SSDeep 24:UqFuBan6cRsLM5SHjPg6QM+r6l0qfzQBzxvvWvSdGATJfy5E:bFxhsLM5oP4MkQMBzxvNAATBF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 962 bytes
MD5 05df70eca6ab1401e52f7b1817637193 Copy to Clipboard
SHA1 7e208b96fa6384af01cad8e968931a10667ac9ae Copy to Clipboard
SHA256 91bba57c0d09fff6880d3fdbe87983e7c77895e6dcca797dfbd7bb5e4d0912fe Copy to Clipboard
SSDeep 24:UqFuBCpn6cRsLM5SHjegfQVzl0KN92tztbvaSd3xTJfwK5E:bFZhsLM5oeRVH9kz1B1xTBwt Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 6d13aed3296facc9717feae0718bf73e Copy to Clipboard
SHA1 b8ac71f95ed09b3b1b2b884483f386638db977a0 Copy to Clipboard
SHA256 23f98d2187b69638ef69bc6ab87559c8a7b0e06531c9d3473a9feab3fcc6302a Copy to Clipboard
SSDeep 24:UqFuB0/pDe6EvSqWK57sBtMRHQ6IOiP1V5Wmq:bF59F87H5KMRHDILI3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 f6d5a947546f304182449adc50772692 Copy to Clipboard
SHA1 a8a108646f42a5fdd05d712529275cd6c13dff76 Copy to Clipboard
SHA256 420f4e38ddc17cbfc51fd237c9436396147714e10e0336125b0b6b2b503ef68a Copy to Clipboard
SSDeep 24:UqFuBKpDeGvlqxsto7N6oHXrOiP1q5Wmq:bFt9RwxsiwoHXrLL3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 03c76c9a8c0e33c40a08c9e4e654acca Copy to Clipboard
SHA1 7dca190075dc09520638eadaa8495a5332e616f4 Copy to Clipboard
SHA256 b276a54511c5c0f7f19b388ded583d8e8ed897b7056db9b33dd2d53beee953af Copy to Clipboard
SSDeep 96:5XmKXcf+Asdjy2BJRczCvmgyLI40q1sSY9d6E292Nq92BJkCVYVTeb+axRsTSfDF:5DJOGHmvk40n5d6E292Nq9GkCKHRADF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.51 KB
MD5 127f32892c8a1cd76b5e5505386fae5f Copy to Clipboard
SHA1 fe5c740ca4feb0ff95ef71c5800066ea31e57bd0 Copy to Clipboard
SHA256 33fd03fa33f7909ced2d4da3eefdf69990f4c6eb8aa3c2fbc4bdf5eabb0e713c Copy to Clipboard
SSDeep 96:5tmKUeU9ItPYSzMSuJnCBxFRagZV2BJkCVYVTeb+axRsTSfYaJOl:PIjaMSuJ8PRpZVGkCKHRAYaJOl Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 fcd7ecb3d7044e7ecfbaa6f0b111065d Copy to Clipboard
SHA1 b3e66a095dec7568020a3b5bb9013e364b62f303 Copy to Clipboard
SHA256 85254ea8fd1a790ff7109c3b3cd47e8f1a7463d30802b52edf8b7c27c92c1a36 Copy to Clipboard
SSDeep 96:56KBKUxgxpqouNjkWaH42KSKmmG8eyMpEV8cNqd16R9D3WG:YKBKlGN0H4F37ReyMpEOcNqOR13WG Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.75 KB
MD5 8868e0ea413066d857f952d342237584 Copy to Clipboard
SHA1 6c82bee7b79d0ef72a6f8f7dcd4bff9ae2334cf9 Copy to Clipboard
SHA256 28027cb9db5937ff6b11b2a54b963c8f2e9dfa92386b0efc8719f2d8288d132c Copy to Clipboard
SSDeep 96:5/wiI4GnCF9sdjy2BJkCVYVTeb+axRsTSfSEJgI4GnCF9sdjy2BJkCVYVTeb+ax4:pwiI4GnCFaOGkCKHRA5JgI4GnCFaOGkl Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.51 KB
MD5 f5536c2fb4cc5f9579ed1cc48514be13 Copy to Clipboard
SHA1 397bbf61d84986943c5dba98f784023f96f8352c Copy to Clipboard
SHA256 913e688c9168f1a80ce1ebfd215e7cce9cf7ef437feb613db0a11749d4ac1efc Copy to Clipboard
SSDeep 96:5nAd6zxMh14miYZBow5pXQdYix35RpIery8gxpqouNjkWaH42KSKm+WG:5Ad6dQ4mPBoUuuitHUGN0H4F3TWG Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.75 KB
MD5 7a0600d3e05d1c2abbd789b246ec708d Copy to Clipboard
SHA1 a4df9a52515e17c32845ef4384d5c0d7bb0de322 Copy to Clipboard
SHA256 aaca422ff4cecce28385f4d6be7f1945056a30d0ebb7b167c405872ecb67b78d Copy to Clipboard
SSDeep 96:5BAXC7wDmIslNLlfczCvmgyLI40q1sSY9XC7wDmIslNLlfczCvmgyLI40q1sSYpa:vAzq3fLllmvk40n5zq3fLllmvk40nNa Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.74 KB
MD5 959d5e01ee81b588cf56d75739087fca Copy to Clipboard
SHA1 00a8b2fd2869c72ede76958ec3c1b0ecc4d83695 Copy to Clipboard
SHA256 c5c3279a0ce62e6a2b18b06b4096964da0cd85502489939924378616d9f532bd Copy to Clipboard
SSDeep 96:5D8+KuFZd/ItPYSzMSuJnCBZVIBKF1h0NLlrrxwWc/ku4YixB:eOFZddaMSuJ8Z0KvhYLlrNFLiij Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 c5c27d187c02fffcdb95cd9698c5416d Copy to Clipboard
SHA1 cef66a94b2c8b3a5ad907c266690b897568b1678 Copy to Clipboard
SHA256 7a302951b421940832c5accf4098d385d62d167a4e86ec88bf4eea713a8f3135 Copy to Clipboard
SSDeep 96:58AOAVkctKOU3odQqd16R9WWPuery8gxpqouNjkWaH42KSKm+WG:WAOAVZKH3odQqORUWPEGN0H4F3TWG Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.55 KB
MD5 2386075559532cd6406dc9c666a8af1b Copy to Clipboard
SHA1 0fa8d76ca83fdf3e60f49c5ed8c43593ee35ddfb Copy to Clipboard
SHA256 f86fd895b2fa3c6e1f27df1117542209dc2b4878b814f4299e51222f8b682ad2 Copy to Clipboard
SSDeep 96:5aACwjRN3uexItPYSzMSuJnCBZVIBdjRi18sEV8cua4miYZBow5pXQA:sAFVtlaMSuJ8Z0dVuTEOcua4mPBoUuA Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Flow.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.43 KB
MD5 7b56adefb15ecd5d96be345bf6d8c718 Copy to Clipboard
SHA1 b3c90ae2c88ee51bb22c281608a3a92e0a1da03b Copy to Clipboard
SHA256 02f6391dae6ed7f81d4b5b8d5127eb272a18afd310b4847083647dcf242d56d4 Copy to Clipboard
SSDeep 96:5q2j09veO3oYrxwWc/kuCiclRf+A0OEV8cua4miYZBow5pXQE:bUX3oYNFLnic+fOEOcua4mPBoUuE Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.76 KB
MD5 7b2f9996c521db81e2c4d5d53884925e Copy to Clipboard
SHA1 9e8c2110b6384ae2cbd6238cfa8875cca374e034 Copy to Clipboard
SHA256 da65e08331d278daf09a00d5b5069418ea47ff9569770bc052d3ba777c096604 Copy to Clipboard
SSDeep 96:5NAUMTGKF4Snh14miYZBow5pXQy4YUUgOgxNsqH3Wjyas7cvbiMrdsVIm:/AUMTGKF4Y4mPBoUuy4RiqHGjtQ2iUmF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Horizon.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.54 KB
MD5 0450bdecdacb11ab139e41c693d7ce76 Copy to Clipboard
SHA1 6376ef6ecc58e694c0869b16dffaf8d3b23a0783 Copy to Clipboard
SHA256 346af4f2a6486ad6b8ebdb78d7f827e67efc3eb45bb23d080c2601e73106c2c2 Copy to Clipboard
SSDeep 96:5aFTNZFXPUWRV2BJkCVYVTeb+axRsTSfuFRaZFXPUWRV2BJkCVYVTeb+axRsTSfN:UFJfLVGkCKHRAsRQfLVGkCKHRAsg Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.73 KB
MD5 eaf65177222102e7da043b5f3440d6c9 Copy to Clipboard
SHA1 4b3200ce0103276b9107036d4243af337df49359 Copy to Clipboard
SHA256 db6f8a89cc6f2be02d620a3d7d972e87b5bfcb4f700d3d94063d09469e110a92 Copy to Clipboard
SSDeep 96:5Xj1KuAqPRNLlfczCvmgyLI40q1CJgIGu7Kw6AjrEV8cNqd16R9fYixB:FJKwPjLllmvk407Jgla0OcNqORCij Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.50 KB
MD5 58cc901c2d4e7bda9f98d1cce49d813c Copy to Clipboard
SHA1 3e1169a19205f0cd66e6857d6b3e86aa6ace3dd5 Copy to Clipboard
SHA256 56d80f43db47726f67d4b22ddbd4a4e58181b3a0168d4ab8046c99ed59d6b303 Copy to Clipboard
SSDeep 96:5yWYclQSPuVSqH3Wjyas7cvbiMr78JbP47EJh14miYZBow5pXQdYixB:cW6bSqHGjtQ2iU4dGk4mPBoUuuij Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Newsprint.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.56 KB
MD5 21c8aa95ca30b3a5a408b9e89da08cd8 Copy to Clipboard
SHA1 fa7bd4625995eaadb6e51ddc6a04f95219da6085 Copy to Clipboard
SHA256 1afb0446e04fbd14b8f132567431efe24945a34060b4374032001562bac3d922 Copy to Clipboard
SSDeep 96:5LAXjR1VK6lFh9qouNjkWaH42KSKmmm8stqv920d8gxNsqH3Wjyas7cvbiMrdsVr:BAXVPK6ldGN0H4F3ZLyqv92DqHGjtQ2o Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.50 KB
MD5 0749b16c17c548f843cda28eb66fd0f7 Copy to Clipboard
SHA1 0b314237a304b1550c659ddec36031ad76e0ab66 Copy to Clipboard
SHA256 5af9fd109d332791707f2e3891cdc2035e50433ffc5121ecad6378354919b71c Copy to Clipboard
SSDeep 96:5QiQJNiAX3oYrxwWc/kuCJgQJNiAX3oYrxwWc/kuCJOo:miQJNiAX3oYNFLnJgQJNiAX3oYNFLnJT Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.59 KB
MD5 31e789ba2955048aaad5642ef83c86f5 Copy to Clipboard
SHA1 c497482d729e3bb77c6ba5353d42bbdd76cb14bc Copy to Clipboard
SHA256 3211031c7f9c00a31e453ba1642183cf90f942c005452fc5df1f0b223079ec3b Copy to Clipboard
SSDeep 96:52nyjR1jskJ2BJRczCvmgyLI40q1sSY90w/920haQSPuVdPYSzMSuJnCB+Fg:MyVCmGHmvk40n5x/92mfbCaMSuJ8cg Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.73 KB
MD5 eba2d8373f1d5df8e9624b66b3d3d2ac Copy to Clipboard
SHA1 abd417f6fb7716a50e6b0084825e2661b75b8c16 Copy to Clipboard
SHA256 85a854354fdd3970c2e049cce7941856199abc8fb09729f6c001ae5fee3eaf05 Copy to Clipboard
SSDeep 96:5kj1/St9WFHh9qouNjkWaH42KSKmmmVGutqpIbh14miYZBow5pXQdYixB:qJKt9WJGN0H4F3ZB3If4mPBoUuuij Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 aa50d74695feab50a5309322f14742ff Copy to Clipboard
SHA1 61f8966b0b397b9fa65653914cdd17dcc5b4d422 Copy to Clipboard
SHA256 2fed8eab8f4f4fe31e2c1e97a98bed62eeca1c0679358cdc33e4c150979ac885 Copy to Clipboard
SSDeep 96:5KTNZPeUkQSPuVSqH3Wjyas7cvbiMruaFZV3oYrxwWc/kuCJOl:EdNbSqHGjtQ2iUhFZV3oYNFLnJOl Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.75 KB
MD5 daf4f531cc4e744adcbd3b7077167c9f Copy to Clipboard
SHA1 e35ffe18c749757686f7c19bc14d4228eb4071a7 Copy to Clipboard
SHA256 29ffd6557ab6563ed3edb5b55e83c686251e7b19a0e8b5b195d98e0d50963b70 Copy to Clipboard
SSDeep 96:5Xj1KuZLgoerf3oYrxwWc/kuhY91xA8UgqNZgxpqouNjkWaH42KSKms:FJKMw3oYNFLh1xbUDNEGN0H4F3/ Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 0dc584d6ad1590f6e13a82c61d578fb4 Copy to Clipboard
SHA1 c56452f2063f0f4ef8c26b4f2e5dca693fe9ee62 Copy to Clipboard
SHA256 beb0069f6696169e792a30bdca1c544ad2a7b3ba20005da5c6bf48fe105ed253 Copy to Clipboard
SSDeep 96:56/2w8Kve+ogxpqouNjkWaH42KSKm+WdyjRpaSQSPuVSqH3Wjyas7cvbiMrYmR:VrKJ3GN0H4F3TWMV8HbSqHGjtQ2iUYw Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\DataServices\+Connect to New Data Source.odc.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 190 bytes
MD5 80cdc961c365d9dadd6cba2a68312f30 Copy to Clipboard
SHA1 d5a7b5426b11666b9b7716b211d1d38c4e9f7843 Copy to Clipboard
SHA256 872a61d978ecd25593d30ed8ca0759a2deec249734840e48dfd4782dedfc1d35 Copy to Clipboard
SSDeep 3:KbSVVu3qD5sCS8DI0Lywe6MpbURWY++ol630kB8DQBPN1Rx0AaErtmztGAeiAT5s:KmVVO49u6MpbwBol3kB5Pv5aErt60mAS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\DataServices\+NewSQLServerConnection.odc.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 196 bytes
MD5 68ea4fa21d68a7db9e4aa1cc8a0c1446 Copy to Clipboard
SHA1 c9598d399962456705aa5d944a16f253564123e6 Copy to Clipboard
SHA256 50cca0b3f89ae7adf011ba726e49694fb21e4f48c74bc931993e486027ebf636 Copy to Clipboard
SSDeep 3:KbSVVu3qD5sCS8DI0Lywe6MpbURWY++ol630kB8DQBPN1Rx0AaRbz1rNrUJuV8nm:KmVVO49u6MpbwBol3kB5Pv5aRLzkvy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Casual.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Casual.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 5.53 KB
MD5 23702774bf16ca8338dc06eeea5c674d Copy to Clipboard
SHA1 5a62a40b896269723f38b6783b7ebd20d635cdbd Copy to Clipboard
SHA256 343e49c47c312c6409cede252fc7f13272b596b41b82dd7706ee9e882764821f Copy to Clipboard
SSDeep 96:0YM7jz73yRGIwndHVSFS+WJezf7beTGjkqThFABMtfljdISJISWn:0YM7jni4Iw9D+WQ/Qc5hFAStd59Iv Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 31.46 KB
MD5 89d3064e548a0a480e495321014b5b48 Copy to Clipboard
SHA1 42f6419af70976877d6e2b253fe8581dbe72a8c7 Copy to Clipboard
SHA256 48c96fe96086e474c54d93e9f7028d81c3a2a4ca04c41ad7c751bf84b2fbc7a6 Copy to Clipboard
SSDeep 768:x+PY/UNBQ+3PtsyuU7qr49Hr1kxwp/XBrae/zSj5ECx:x+wM31syNGrkpvBbSl5x Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Earthy.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 4.79 KB
MD5 7580404b21e4e05a07e585e417b48bb4 Copy to Clipboard
SHA1 1abfd2768279abaaaca6781b1fdf170e72d1457d Copy to Clipboard
SHA256 b77a00f1efc069af36bb3daad0cb8aa798e59b52a7cb7ea9e43db4e36db0efa0 Copy to Clipboard
SSDeep 96:Xu3Hh6QXv/V9ps2RFOU/93KpM5ZKykbrnDatMQ7sRw0:X86KHV9BRM+5KG+3rOWukp Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_GreenTea.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 21.64 KB
MD5 104c06b81249853d6159160996a28cee Copy to Clipboard
SHA1 4c7681592e1ab29a05409947dca9bdbe4c52dfda Copy to Clipboard
SHA256 5e10a33db23f98a0035b34b78b68b7a0ce19b669e6c90958b49f150345466990 Copy to Clipboard
SSDeep 384:rCS+QdggrOqRUfOBja6QBC7ji6Q9NkabZcPRV920OIO:r8QnOqRRlOCmNkmZcPte Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 15.10 KB
MD5 8e09c32110c280c4a199ebf96ff2a260 Copy to Clipboard
SHA1 659b6090bbed39dfa39e9d31673d1aeaff416374 Copy to Clipboard
SHA256 7fd504a715e6cf5d3fa1e164f0df60ff88ad14b229a2777a1a9d5a52274eaf4e Copy to Clipboard
SSDeep 384:4ovzsvLL+l4q6JTgLT1OQ2tmh58anLXZs7hmu:4ovmf+l49gLT1OnA7LX4hb Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.84 KB
MD5 c8ef05a95afb18e92cefab4c1e5bebbb Copy to Clipboard
SHA1 b4cc521ae10d66574cf88109a6c88dcbe7f453b1 Copy to Clipboard
SHA256 bef2967871d761dc1c26e8241f73faf681eeb0bd0ba89bc2b1511baa33efa3f0 Copy to Clipboard
SSDeep 24:8+nDSTQDEe/Tx6mwyHtsgoP8BxZUVHljgXVqD5y+yCEg6m0kq7QAkwbty78ijuT:8+STQDvx6wNsgoP8iljgFDgf0k2ljobG Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.90 KB
MD5 36a2cb9c80b2c2fe9ee49d639d4b8813 Copy to Clipboard
SHA1 1bd15f1afc8f55821f1382f4ea0730ec9b0f3440 Copy to Clipboard
SHA256 16c7a4ba63359f27c35e4fbc5ad76c9863d4f9bc38a0e5a6478683a356f8247c Copy to Clipboard
SSDeep 48:AeF32f1IQ1iOUa4s5LwJ5OR/OBeAXlFXkhDXAm428hfaKkZIoyMhm7ljgg84pvSZ:AeFmJisFwJ5OR/Sey/khASCyw5jggPBk Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.17 KB
MD5 659437d8dcb1ded746be8e0988667dd5 Copy to Clipboard
SHA1 a946fec9a01502a5bde2677c16b4735c0b5dcbaf Copy to Clipboard
SHA256 367afa6668cb5b7b3e24f1f277e1f895ee5f3069e08a45e0d557ab7407e459e0 Copy to Clipboard
SSDeep 96:i2E00OdFrEvwWIGMRKCE+ka7+uAIrQIvQoi:i2DRddVWcRztka7L/i Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\background.gif.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 323 bytes
MD5 119e9f073aa0338d70a5bda86006cfaa Copy to Clipboard
SHA1 f859472382e501620f36666a481b41b53b351c8b Copy to Clipboard
SHA256 b5ed1d950a9af611a0b70ea1420d67790b0d68cf5d1cedc44a55c3b109c1d0b6 Copy to Clipboard
SSDeep 6:RC1afGiEwiDYZ60BP5kLAFDr6MFtAn7KdvDxAErQdA3TkMLWj9EE:E1afGY5BP5gAFDr6M87eDxAErR3oMy9f Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.25 KB
MD5 8489d00b386575b53575fdc703304e0d Copy to Clipboard
SHA1 1dd175198d04ee14f84ace9ba3268693dd1d2054 Copy to Clipboard
SHA256 1031f699ae902d03d4e527ecde9679af97fd6d11f53857152596340ee938a992 Copy to Clipboard
SSDeep 96:LNWG87Drr0szWk8uQ0fFQnTwgv4L8a2Arb:LbCwo8hRv4L8mb Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.85 KB
MD5 7d90ab21def2bed2be411502d09f014b Copy to Clipboard
SHA1 eec4f6646c6084b85f7a8f53774af1df9a0b11fb Copy to Clipboard
SHA256 ab9ff8d672bebcf2a8e9238618efe14a6a21bfad5b4b2f1cb55076b704fceb84 Copy to Clipboard
SSDeep 48:2avR82Tdn0X1DJzWOmH9C2Q84pvSVZ3mwT5R5Uw8c:1hu1DJfmqPBu5Rz8c Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.94 KB
MD5 74e8b14bfb28d844db8b29b17504a071 Copy to Clipboard
SHA1 d9a0a9312054d019868fca9930bf626b01a059da Copy to Clipboard
SHA256 c3b8d34a9faac1fd88318d8ee87d1ec94d508c9783d61d48b1f60eb05368b68a Copy to Clipboard
SSDeep 48:dgRJOUzsufROgZPCZ3FQIoENQmh3BRSvbG:dsIufROgkrQIvQooy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.37 KB
MD5 feb554cfaaa5488e0f699ce0ec3c8560 Copy to Clipboard
SHA1 bc0b1721b3d3afc2e886e505bb48dcd8c8a35c7f Copy to Clipboard
SHA256 d87f25313c37b43630a234cd031fe42297de93c6aadc9b740919d0decb6b1b22 Copy to Clipboard
SSDeep 96:3/1YdF/nzPTHk0KqzFkiSvARL8a2AeZ0d:3Cdl77tFSvARL8hQ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.38 KB
MD5 d1a7c2931c104cf49105054614d875cd Copy to Clipboard
SHA1 b481d7fa5ffee48dd4123bc42457dafb7830168e Copy to Clipboard
SHA256 46b3c9b476f37d442600b99d71a3c8397a9b20f0b9a2f0ff50803addc61c9b28 Copy to Clipboard
SSDeep 96:XSWFzYHuk0sQUOT4FiOsn+kanqlujcahpXxp:XzzKuk0qVFiOlkaqluQixxp Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_choosefont.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 890 bytes
MD5 cf9eff759b5b11026a18633dab3f170e Copy to Clipboard
SHA1 505d1a24a32d835514ab8b8fa19cc1f05e4d96c4 Copy to Clipboard
SHA256 3588a0bee8bc3a9b525c4cbe8eea7ecf548a20fc3c9e56f17d22d63a375682fd Copy to Clipboard
SSDeep 24:LyK54bkTybznR6Q3FALxybxCwDPQvnjj8b0ZJneVKe:L/TEhVIxRwDPQvjj8b0Jnxe Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_underline.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 860 bytes
MD5 b3307599549e8c676ae545ac919cbf06 Copy to Clipboard
SHA1 d32fcc4468446e0229086f757ade35a3943c9f3c Copy to Clipboard
SHA256 30d9b8ec64f92e2ed7d502b458070e3149d96e242ec80b93fdaed8494420005a Copy to Clipboard
SSDeep 24:LyK54bkTybznR6Q3FALxybxCwDPQvnjj8b0Z4Cv:L/TEhVIxRwDPQvjj8b0d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.44 KB
MD5 fd48b3d39e060914c531a26cba261eec Copy to Clipboard
SHA1 6ca2fd0c0a52f8873276a7af782f2c217cc34b74 Copy to Clipboard
SHA256 5e82391df62c02ecffe035e76c343e0557f844d1822f24b51f1b1f1c7c098116 Copy to Clipboard
SSDeep 96:aSvf7oc3O8HTlYIoMR2hkCNugwJnLdYXNj6uwA5W+0d:F37BTlYYRs9KhLedGuwA5pQ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 6.74 KB
MD5 82ca382a6d4fd5797c1171dab20ffab9 Copy to Clipboard
SHA1 c7d0df4fef1748521e1d848b10324e7368c9f642 Copy to Clipboard
SHA256 058796cc63fae49fafc2434800ec53ab54f30da907c76e3dff3a4f10dbafe27e Copy to Clipboard
SSDeep 192:OLD9zeZpssNFDsjDFl/dQ75yBIFQcFvw4Ft92Krx:OBezTsjDTZ8QcCzKrx Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.69 KB
MD5 e803f605ec2ceb71d09cb7d43b5b3f2a Copy to Clipboard
SHA1 263d379b2a84dbe386b5d41c79fefab3606172b0 Copy to Clipboard
SHA256 af8ecb0befb4303105bdc23e3ab72a7f159065a8f69d339c8004a5354a23eea7 Copy to Clipboard
SSDeep 48:B81WP6OJyw6zy1Q58O1u/P8NR4c+9q4YgsBI4yU7PW1vnu0bldCZ3FQIoENQmh3l:Bgo8z21YUPoN+44YyULGvnuZrQIvQooy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 229 bytes
MD5 6ab7fd99d0de01ba7a490bf8a0676712 Copy to Clipboard
SHA1 2425fa200a1c64e0301d28ff2df060c4a7939188 Copy to Clipboard
SHA256 8e112877bc3931e8b5ca989f958b03e68b053c1cf241090940068312676e1cba Copy to Clipboard
SSDeep 6:GDFVolmwlOhnZYlEBzZKYkIwrFYqApBib/2eoU0ulP:G5VimwIhnZSEB1zeJ4quNU0w Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 abf8bb12b8c8f61081475be2449e086d Copy to Clipboard
SHA1 30471bb01044da4713c3c5aa73755f9cb858bbad Copy to Clipboard
SHA256 432bd6c8dd1bf1dd7bfa6b37076d9966ef73080a9697ad162abdbf06b1af6da0 Copy to Clipboard
SSDeep 48:EvDaYCviimojZWMW5eMYxsrIsn6eCXxzwXbS9UxbYs+:EmM4jc/YS0snUybVxbYr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 6.45 KB
MD5 98c200b49eacf05ee8b1532a2b68f349 Copy to Clipboard
SHA1 ecd2aa02cd1585a8a3f1a18a8e4aeea3dfe3dfee Copy to Clipboard
SHA256 e4e1a31ab85c736afa95368289819a4b2353bfd8759ea61a87501d8bad24ed4e Copy to Clipboard
SSDeep 192:nN8U3AYnC5RkU0pBcPhyg+PELTQHEvk+H2WQjBNrn:nN8VYnC5yrXRhP8TQHkaNr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 167 bytes
MD5 192b4fba20fff736c4b627732355d404 Copy to Clipboard
SHA1 8f301579d23aa5e61d941aee19dbc38b1d2c7465 Copy to Clipboard
SHA256 f447ed532b4a27cc37874a4235fab64fa86bd2052acbbaec5792a89a8146fda1 Copy to Clipboard
SSDeep 3:o7P1YPEBHqLAJiWW0F5sbxgQ876rZ7vTw0ERsiRRphXt/ENXJ3eyY:oLHHq0JiWxbsbOx6rtTwvmin/ZW5uL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.50 KB
MD5 b2cd7608672c54794acb4a35060b1ad6 Copy to Clipboard
SHA1 a55a5cc1ee7097557cf57a71459e7cdc139022c2 Copy to Clipboard
SHA256 f355b27646321f92e4378d1ebd9c15d8359f0f7f5445d24d06e20f23b956ded8 Copy to Clipboard
SSDeep 48:dnZvTyeg0Oc7587ZIRZ+jZp79slgeF2GoC2Q84pvSVZ3mwT5R5Uw8c:dnZrywNoZIRZWZp79ygecKPBu5Rz8c Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\background.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 233 bytes
MD5 4724cf5bf7e005785acb6516bec31ca1 Copy to Clipboard
SHA1 06354a624b06a69b06e5777fd82df4e7100b890d Copy to Clipboard
SHA256 587d47df5968e8b850a0c25027e1b09b210da89a9285ea599112c31e622a2a26 Copy to Clipboard
SSDeep 6:4ACfu+W188ajKpzzOXnFcD4VOsjsvGCsBZ4RPuSX:yu78ZCqnOE/RmX Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.35 KB
MD5 5463ed2d13a8326ed56eb6746ece2c8b Copy to Clipboard
SHA1 fea48219fa5aabbe9e7b03d65f9860e668086088 Copy to Clipboard
SHA256 cbb5bdba06371a8c412115feb638833d4c604adbb02d591732917a1da31ea20f Copy to Clipboard
SSDeep 48:zbg7sUfzjtAVK7hvDXIupInsRzOjU5Mo9M+kJdVGtC5NJY8PSSkX4Q7OGk7zNpkC:3qdzwivDX4b7jotCLJY8KZoQql7l Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\background.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 815 bytes
MD5 0b20321223bcaf1357f8ff6e350f1bc6 Copy to Clipboard
SHA1 6ed8f265ca71347ce4e6eb71a274d827bf2a2265 Copy to Clipboard
SHA256 c7ccaa9960d7bb2b97531171d682d9299ef071b0e08c1c10448c34a46e4c3741 Copy to Clipboard
SSDeep 24:sUKlWW/N0A0VPDCjoSgKmAFgvwlV9bbGQS:2pWA+A0KmAvi Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.25 KB
MD5 83ec14c18a2551cfa3a30d1014f0f9ed Copy to Clipboard
SHA1 d47b76034a7fd852348f230199339f47fd386875 Copy to Clipboard
SHA256 9d7456eceabd1cb61b8e88dcd6bc109859ad2e0d92967e9c9f41b60ec01953d7 Copy to Clipboard
SSDeep 48:Wlsm7qqZeAE7n27bjsNm7yHrxBCVRUV9FPj9CZ3FQIoENQmh3BRSvbG:WPNeALM/22V3rArQIvQooy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.80 KB
MD5 1261cb7fb88857c0501e532b835f28a2 Copy to Clipboard
SHA1 ab88a8d74fdd2bf17615221740dbe4a1866e0a0c Copy to Clipboard
SHA256 a685f50c41147412e6f2d7c1c5b4ceab7112801e85b8294e6a94f46dcf205619 Copy to Clipboard
SSDeep 48:Cb0AOqRFjIP+zGX8PSSkX4Q7OGk7zNpkKl:YUqIP9X8KZoQql7l Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Default.dotx.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.97 KB
MD5 7017831695a18400a18afdc7df93148a Copy to Clipboard
SHA1 13bea0f7482dec249273d42b293b63852efc69ea Copy to Clipboard
SHA256 db1dac6dd5cd0c75b613ee8958af4cb86517d46e938ff27295959610785d3922 Copy to Clipboard
SSDeep 192:ZHs4ygDEqhj2SQwK+/N0xcfhkrvFTRb3tmpZ1Cr9YJv28jehpwdG7a+XPhaML2K:ZH9yElgSD/NXfmrvDb3tmoCJvRMwdcQK Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\DefaultBlackAndWhite.dotx.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.24 KB
MD5 88ab81e6d8a351a4790bfddbccee8db6 Copy to Clipboard
SHA1 2b3ac804bc2c1fd3ba2ba8fc9c3b1b1cdf1b3244 Copy to Clipboard
SHA256 633206e5b41f8156f6cb9d0ea38478b5c2096a8552c19c91ce2ea55bf1b082cb Copy to Clipboard
SSDeep 192:ZHrQqu4iHpXq6J3cjSNiFpYihROCiOJGqg:ZH44WpXq65NDi37JGqg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Distinctive.dotx.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.35 KB
MD5 b4e59c7fe46564583f406ef55c63eac9 Copy to Clipboard
SHA1 51bbb7e4ff5c2695d345fb266955805934bd6c1d Copy to Clipboard
SHA256 7d87aed287f751c079dad4b222a4077c9e7f4f44c73d17e9e20ade49460658a3 Copy to Clipboard
SSDeep 192:eH7/kaLdWeqI+75Mj/2Ph3jpS5EOlSEM5qwzWc7CIrCvXnZL0QQE:a3wG/b2Pp1SfldM0wFmUCBLdQE Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx.isolated Dropped File Word Document
Unknown
»
Mime Type application/vnd.openxmlformats-officedocument.wordprocessingml.document
File Size 563.60 KB
MD5 6d757a7bfcf3c61d4861ce417ad44cb2 Copy to Clipboard
SHA1 de0e5b555c9f53a0768f536a4cc9ce852818441d Copy to Clipboard
SHA256 059116b6024867e82413434dcc5a69fe75762ec1e73bf92c41df33ae6a57a5cd Copy to Clipboard
SSDeep 12288:r+XT05G01qJuk0ZDMY0prIJTQMIbirj5+E7Lh7qqpjqtWKd:SXT04ACB0BMY0ySMvrjVlhq7d Copy to Clipboard
Error Remark Could not parse sample file: Could not find OOXML main document
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Traditional.dotx.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.48 KB
MD5 c2de85f09b0792e44cd413c3002d9e4d Copy to Clipboard
SHA1 0addad5a055594c35d2835f0d2a6e46af9235bee Copy to Clipboard
SHA256 85af9ddd869a26e784886407ac09324e354d69fae3c90b54b9cc9b953b237c87 Copy to Clipboard
SSDeep 192:MZiU1HrQqASE4IfgoiDp+3pEuiSvUkrJ/eHRB16pBZS:MZPHWZfgoiQ20vU6J/QL6py Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx.isolated Dropped File Word Document
Unknown
»
Mime Type application/vnd.openxmlformats-officedocument.wordprocessingml.document
File Size 3.99 MB
MD5 ee50ec23275da38aad518c9e3b935dab Copy to Clipboard
SHA1 2f322b5b335e678075f336b11129eb44ac168e77 Copy to Clipboard
SHA256 db5ba8d8b7f4cfba074847bdf761c2001bdf8e98c9d0514db4f9936d4a152005 Copy to Clipboard
SSDeep 98304:rRwnrNwFP2Yg2W9ik1xKNG4RLNmVRb7Z49PUwAN+gXl2bo7h+QpRoQm8wFP2YmVs:uJ0P2YNW9ik1SG4VN2bCUwC+g1j7h+QC Copy to Clipboard
Error Remark Could not parse sample file: Could not find OOXML main document
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 942 bytes
MD5 d22814aa50f384b519e2b4189f9eb935 Copy to Clipboard
SHA1 f8da25da27df511cd6c875a217c118f827a92d6d Copy to Clipboard
SHA256 c89998b49fa7a1683be95586fcfd8dffefd60ac6a7ba7e4e3ad3bcfbfb0ba084 Copy to Clipboard
SSDeep 24:fPs6fAi40ywwUNht+AbZtgahCM44BD4I4:fE3QwUnMnsDD4 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 576 bytes
MD5 a7761f1bf7159405a70b5298119172a0 Copy to Clipboard
SHA1 03aefec98b9bd3f080c0a2abd6c4cf7032c5fccb Copy to Clipboard
SHA256 f2d2b5dd39df15f6ba62eed80d7c5c6fca5ae864c0aa1f0013abc6ee8a3faefb Copy to Clipboard
SSDeep 12:7Kqwv3d8l10ahWaN0serMeTskjhWVSeMzIfJiX8mLvaitn:7Kqe3Gl1RhF0M/yWVScXm24n Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 28.75 KB
MD5 41d0e6fb58d426e5df94780f11462a7f Copy to Clipboard
SHA1 d1c4e7bca15d74223981244cbfcf420ea053df4d Copy to Clipboard
SHA256 bedfec79c90a786e76feac87052cbb5e3a4a2c2fa2fc24ef1f92a9d54203f952 Copy to Clipboard
SSDeep 768:7oCwr6ClmmYBbDc3sqXi7ohCd8coGBI73WjcZx1hR/:F+5Y1Dc3f1hC5oGc32ETR/ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 5.20 KB
MD5 63fc3e0d1a7a6e2446038762ebca3436 Copy to Clipboard
SHA1 4720ac6e49712cddf8fa861b16e20f281ae430e8 Copy to Clipboard
SHA256 305d3d836a5f42ed7f0392b64ad6c67834e575bd6da2e8e438afda22746ada0f Copy to Clipboard
SSDeep 96:ns0tVBlM0VUSCxAizBfFz3xBEJl8tPMFRpjuQM/NOMsc:1V4QCzBNzBWV9LbMsc Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.30 KB
MD5 627d5a74bb51f9932b15747153fbc600 Copy to Clipboard
SHA1 8bd343b921aae403976d9f8d29992f8321439128 Copy to Clipboard
SHA256 e81613bd29ea68050b4af7372113d148be925c966ae1946f739e8e7cd62076dc Copy to Clipboard
SSDeep 24:Bgjrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2ougr9:Bgx3n0sam5eh+1jsBZQm05AD2oL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.80 KB
MD5 cd61e36e02265e6519fed0bc5f7d62af Copy to Clipboard
SHA1 847146e952523d2b7ccb76b160a25c99262ae04e Copy to Clipboard
SHA256 b7ed2fe957a402791a46aee1b2f66a3a4b10f4f0f7e3f8345148aa0f93fe6181 Copy to Clipboard
SSDeep 96:mhzj4CtgfBGciI7s13P8g9XqKqzbvz1eSus:mBj4lB5BGUFKIBeq Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.87 KB
MD5 3536e187a74c803710336d9135a41bcd Copy to Clipboard
SHA1 4ce5abebef04b7c931c01a337ab6b2e3f60803f2 Copy to Clipboard
SHA256 40a229a0e7ada2b72fe7da5a14a5ccfeaa6462c425f61ed2fce509cad2f45004 Copy to Clipboard
SSDeep 96:meX0jSBm03NDtEg0po0PNIYk02ej/1hE9:PkeP/j0iYkRezLE9 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImagesMask.bmp.isolated (Dropped File)
Mime Type application/octet-stream
File Size 1.76 KB
MD5 8de5a9d69ea002bfe2d717726221d3b5 Copy to Clipboard
SHA1 de6a677e36800b90a1094731d1db5d4aa4754b09 Copy to Clipboard
SHA256 dce7f409b488b8d34446b7ece7d47b10a6834864a873a95e72e5e852e51f748b Copy to Clipboard
SSDeep 24:pICgjrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2o79wBCQVks9:lgx3n0sam5eh+1jsBZQm05AD2o79wJye Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 11.67 KB
MD5 2b643b4c179a30cc2ef9e3f98596b65f Copy to Clipboard
SHA1 170f65e3acbaeefa151f9f030004c64ef3aa4735 Copy to Clipboard
SHA256 d26e41174a024ec3c2615d1ef3537eec34a71f27c728691fb5167a9ea2211fa9 Copy to Clipboard
SSDeep 192:7/67ObGyc5LH7mVcOHoiFtMDoyg48Y2uM:jz6LHaVNtMSLuM Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 e8c7866306d6dc7441ad69386c2f3ec6 Copy to Clipboard
SHA1 cea02dba186612adc3bf16c20acf31d5c31f9556 Copy to Clipboard
SHA256 ce5352b36bf775addb412d9ef7ee09aca0a3afd90fc37b8ffee8547e4c3ef358 Copy to Clipboard
SSDeep 48:rcgx3n0sam5eh+1jsBZQm05AD2oTnaEEFu:nX0jSBm0aaEEFu Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 51.73 KB
MD5 84ac737cde03782372a0625df29820a2 Copy to Clipboard
SHA1 df9bd687f7e1fbb2ee605025e64aab2860fb093b Copy to Clipboard
SHA256 a4dd9154e282f80d1c557947e6a73ed1353a7826c37f403d675f85dd55f50dd2 Copy to Clipboard
SSDeep 1536:bwUa1/kmo68meWO9dgJ2drdrX/vnx5HCGU:UTeWuiMrF/vnnCx Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 7.64 KB
MD5 4116328ca77a471fb022303ca0f0e5b7 Copy to Clipboard
SHA1 f49fec602fc3710f4d2c26fdd44ba688ab8b174c Copy to Clipboard
SHA256 ae5dd49ecd429c08353c056f18d54dbc2d1d738a1e3d193524f6c83890911ff9 Copy to Clipboard
SSDeep 192:PCbtMqoQ1sA4TYcOHoiFtMDoyg48Yrl4Rf10LjVQ:abtYQ15NtMSSj+ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 9.47 KB
MD5 aec542c15be27c46f970aedb6b31a436 Copy to Clipboard
SHA1 574f3a70a5bcaf3613b1c20827627b75e840ba03 Copy to Clipboard
SHA256 a6e78ee5e550dde25b8dfaad1cc39dc0e10f74be584748bc3263c9a506784d4a Copy to Clipboard
SSDeep 96:LfY6qN6rlxtTN3D3xUmmyLRUsUfYNF7qWEtMEdQuIVFzAiRRL2Mpppp+JjdV79p:U6Q6rdTpymm6Lg/FcPS/LBb Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 6ed19eae9251cd5c0c065ca259239a13 Copy to Clipboard
SHA1 c720419ec8b4c09920c383a04d61d43626eb96ec Copy to Clipboard
SHA256 2f883efa3dfedb43937e2fce3efe4ca5344f8f20b96607dfbd17cce8e9a70c13 Copy to Clipboard
SSDeep 48:ECgx3n0sam5eh+1jsBZQm05AD2oZYysSISz6u2G/lHPHglxN/PSZ:ERX0jSBm0/SXRdHvgDJ4 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.74 KB
MD5 008deb8e07dac60b861d7fb571001d60 Copy to Clipboard
SHA1 10bf9ca633374fd73c573dbe5e6e1538409be6eb Copy to Clipboard
SHA256 eff9b28f397d1dd11ff716fca9f3bb9fa33888df35b25ed3ae83a76b5662e2d8 Copy to Clipboard
SSDeep 96:1lgrlxtifRkVBSwfk1omqppppkYDfnPdezGoZxB6QLibQH/fS3XfZ:jgrdifRkH7fAomQheSnKfKnfZ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 320 bytes
MD5 d1a40dead8fec61afcbc233ec0c68c51 Copy to Clipboard
SHA1 8fe5244aebcc5680004e603de9cb022c92af588a Copy to Clipboard
SHA256 08890313dfa4b6d84f9a8394584ec70665486e330849bb455c0a02a4caa8b7dd Copy to Clipboard
SSDeep 6:jXHFjgVtgzwcDjHj9E0Mj9E0Mj9E0KLgUXneHDhZxA/jtggJsOuSmN:jXHtgVt3uNMNMNaXneHbxCOgJsz Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 15.75 KB
MD5 29b09ff3d5e5f2c5d2191b0f7f4b9d55 Copy to Clipboard
SHA1 7355c3b55adadd59f262c8d3ba3a8a0f364ba7a4 Copy to Clipboard
SHA256 ee97d228ac0c532cbfef9f39aae2e69269f437d13fb99d447ef1ce2a5cac8b49 Copy to Clipboard
SSDeep 96:RSW1KbBkvpppppppppppppps3eUf9lU5mf5t+vaIffyQOZiwBYiVb:RS6KZX9gmDWyQO4+ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 754 bytes
MD5 613a1cb8e9db065318b8a1d8c49da26c Copy to Clipboard
SHA1 af638d21757ca8d3fefb5c13e76c6afc3e17c45f Copy to Clipboard
SHA256 cf7e080b8d56baac17349fde605ff2a16e654c7f0912228f871b84e6c6c687f6 Copy to Clipboard
SSDeep 12:QhUdl1FT1TrRAGllsshkYN8NIpbFfzutmpLN9Jjl2M379+NHVCI/:uyl1L5AGjNky8NIBFfzutmpLN9JsMLU/ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 16229a8d3f90ec3067ef6e51d522440b Copy to Clipboard
SHA1 8a7a9588351928b08a59d37fb168c8529088d5d9 Copy to Clipboard
SHA256 157f188934fd0bd9f740bd98983d135ea725ebf3b8698869ad8fbfec2e2d7aaf Copy to Clipboard
SSDeep 24:uy3S40L7HiLpp1fg73S3fsM+FZNQrklB5jLu:uiyeRo3y14NqY8 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 6.30 KB
MD5 069190d847dbfd572af73c3290359d79 Copy to Clipboard
SHA1 d564071c5515e8e3885f9a4a6798922548ee557c Copy to Clipboard
SHA256 e6190b600a0690803074e36bd5aae90d59ea29da776a350350fcfa16b4e0de57 Copy to Clipboard
SSDeep 48:Aw3n0sam5eh+1jsBZQm05AD2oaqIJF5OpXvgOcti+mP+lBVBrO2kWIRwrAYHpdB:xX0jSBm0nqBvgOctTXBVB6pWAYHJ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.89 KB
MD5 39995c17b1023075450fbe4564e64df5 Copy to Clipboard
SHA1 921907a265912a53f20461490c510d02d3a3a45c Copy to Clipboard
SHA256 8ed648be810fa50968de7a53b502045dd2840f017956dfa2dee5c49075622eab Copy to Clipboard
SSDeep 96:Gscbhoq+YZLrq757il+Ty9IEYGu9mWsSe:Tcaq+aqNelseUsSe Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 192 bytes
MD5 1dc14bd6df66cbac99d12798001a3cb5 Copy to Clipboard
SHA1 f866eb88ead47ca2030cd783db00c429cf346582 Copy to Clipboard
SHA256 0baa6bf73d55d854be56925f324b0b51642d179197c4934a25e29f282d664de1 Copy to Clipboard
SSDeep 3:uWnjgVwpc6yVBF6222V7oqsYuYpDC7NOkaSITUF/w46qWlX1FzqaoiX:ZnjgVu8jv77vYOkReqWN32a1X Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 4.55 KB
MD5 44123d67638b4d1da20eebbef40609e2 Copy to Clipboard
SHA1 a3f402cdffd8adb3ce3c8f8a48d7200a76998e7e Copy to Clipboard
SHA256 6cd420aeec22f8758d3d59e394ba3036f916ed7e2fd78284a2e339c1d2b2ffaa Copy to Clipboard
SSDeep 48:XX3n0sam5eh+1jsBZQm05AD2ojvZRwBWK+SpTRyc6X3jjz6lBWfRuA8PxO0WDXhF:nX0jSBm00vZyBf+T5njjmUc1zWDj Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.80 KB
MD5 a2c7a5bfd97520d44816ad6ae605de6b Copy to Clipboard
SHA1 7a33c12fd702c9182fd84c5ca30e4b12e0c51af0 Copy to Clipboard
SHA256 31d81ba5640e7b5a6a4f199d08dfc1fff331256044704e66fb70856daf6c67ae Copy to Clipboard
SSDeep 48:Za3n0sam5eh+1jsBZQm05AD2orfkq06o/cntBgLDJQ1teXCNMVncewH2Y2YtvKG:ZaX0jSBm0Gfkq06oItByKDIcPr2wn Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 6.35 KB
MD5 215653f0366cf7dd3d49b7005cb24082 Copy to Clipboard
SHA1 b89dfc77fe018b6508ba2f7326359de98d8adc76 Copy to Clipboard
SHA256 c9c6419ef4c2b4f2576b9bab62c11ebb6b6cf0e8c58a042cb43581dcfafb161d Copy to Clipboard
SSDeep 192:/qZ6W6S0cHb+VHT+f5RL7xFnHmA/UKH3+bY:/qZkSXHqgf5F7LnGA/B3+bY Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 11.30 KB
MD5 a51b877035689af4f25423c0c4a4f6d5 Copy to Clipboard
SHA1 e03f4694083972804914c2a7398dfa62e4408754 Copy to Clipboard
SHA256 dbc08b545b8ab36cf89f536b4e324a60299095e9d40cebf593225004f1953d89 Copy to Clipboard
SSDeep 192:gmg2vrm0y/a2U64wLAVDKr+vDX/dBFXkU2odq52NhDR4m+6rrgnSRR:gmg2rm0ya2U64cUDK6vDXlB9kU2ZOhDj Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupiconsmask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.41 KB
MD5 599a87f9f8154fa09fe40194efe63a1e Copy to Clipboard
SHA1 8accec74efdad401b7f135281b8758d47199cc0a Copy to Clipboard
SHA256 fbca4b94e23450626b3d0dd65e508441095d820bdfdef9542c22b5d0495b324f Copy to Clipboard
SSDeep 24:/gjrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oJ6/JL7MyaQmx:/gx3n0sam5eh+1jsBZQm05AD2oQJL71C Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 c618961c5c4d9922a312c213e37ff179 Copy to Clipboard
SHA1 4eae64edb7c958eab7ec388dbe9a1992e20447a7 Copy to Clipboard
SHA256 9ca599b510dfa26152bdb6ebada8c393c9a588af8b4d6b0794605986675c23e0 Copy to Clipboard
SSDeep 48:rqI3n0sam5eh+1jsBZQm05AD2oN/YzGxPPf4469lkRVA2vT:XX0jSBm0Y/WGv446wk2b Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 5.30 KB
MD5 052390580c51d911eaccfbff57e5660e Copy to Clipboard
SHA1 de259284e0e57933f6b1fcaef17be425f4fce751 Copy to Clipboard
SHA256 cee732066605f24c69bb7a6594116421ff2a79349a0218dbd4bbbf0707dac681 Copy to Clipboard
SSDeep 96:f4X0jSBm0r9wc9YBW4+dP4m+mQsCFjoriLizy:f4kej9wsQW4+94zrsC8By Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.76 KB
MD5 00ecc7fe4ba65731c1c59579aa89b405 Copy to Clipboard
SHA1 7dba50e7f3ad667ab874c12a451574edf35cbc71 Copy to Clipboard
SHA256 86f848a5d9be92f5234e5cb0e6ad4760db4214a681f464cde3fcd1038c0f474b Copy to Clipboard
SSDeep 96:Kp6Y6qH8cGUfXME4eA6dC8D0pppp9NQBYaNdnPe:I/6YLRdC82NQB1e Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.05 KB
MD5 2f5fc56d3586cf6a4ed37e2d4466a412 Copy to Clipboard
SHA1 faae1c21e620f29bf2931540d8c8a4866f8e8c6a Copy to Clipboard
SHA256 63d1bc5fee44cffb47cb64d7c107ac148c527eed412a1efa2167297fab8d9e03 Copy to Clipboard
SSDeep 48:503n0sam5eh+1jsBZQm05AD2oj8XHKvUWcDVfQgTA9TcVz:50X0jSBm04c Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp.isolated Dropped File Binary
Unknown
»
Mime Type application/x-dosexec
File Size 7.11 KB
MD5 f601fdf20e881f33a40eb530e128ef14 Copy to Clipboard
SHA1 b7fe3df85c6179e476900991136072acbf7de9a3 Copy to Clipboard
SHA256 71df3cf51969325dbbcce971e95ee3e1d0715630ffff7b1bab07f82998580f70 Copy to Clipboard
SSDeep 48:XtL6XL6taaaaaaaaaaaailV+lV+lV+lV+lV+lV+lV+lV+lVf:XtiQaaaaaaaaaaaaSOOOOOOOOf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 7.11 KB
MD5 bbd606e81e421879ad8cb957e87600ab Copy to Clipboard
SHA1 28c922cb87a83dbd96c9006a2c3c3ae1a0b78df4 Copy to Clipboard
SHA256 115a82004610160bfc9ac1e25b5b5a03f4a7441fd1ccee40e6edfeb12c17e9b0 Copy to Clipboard
SSDeep 48:kI3n0sam5eh+1jsBZQm05AD2odiup//HZpCFEEEEEEEEEEEEEEEEEEEWaq:ZX0jSBm0Kg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 7.11 KB
MD5 3f827e7ec26bcde6ebb93986aee0201b Copy to Clipboard
SHA1 886fd7d18d16ca97b53008de5ed9a22db049f4ab Copy to Clipboard
SHA256 f12b173a4ddf9c891fb9752d3ddba6120ee87ad8b089d15d90535e23e3c0527c Copy to Clipboard
SSDeep 48:kI3n0sam5eh+1jsBZQm05AD2ojEEEEEEEEEEEEEEEEEEEEEEEEEEWaq:ZX0jSBm0j Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 18.01 KB
MD5 4181df855698cab23d3d3dae941872e0 Copy to Clipboard
SHA1 23da30a1c9fb959e4f4fbde9cabca84d46a07b9a Copy to Clipboard
SHA256 369f5b55dea48aa57752aee6856601462dfdd5ed179e7dafda884a8b22d8be99 Copy to Clipboard
SSDeep 96:/SW1KKFkvppppppppppppppKvpuoUBt/E+oiX7G32wi3APWFX+2ekGuG3LRNs79N:/S6VXu3BdfzA+k2fXYLR+G4P Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp.isolated Dropped File Binary
Unknown
»
Mime Type application/x-dosexec
File Size 7.11 KB
MD5 a4ad82673657a37be5a3d780778fcc3a Copy to Clipboard
SHA1 bf2ff4482256631d07aa7279013642ef6f96962c Copy to Clipboard
SHA256 980e99207d11d1ba87fb168d0d02186780add6be471a56694dabcb84b0ac960b Copy to Clipboard
SSDeep 48:X48dPlV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lVi:XFZOOOOOOOOOOOOOOOOi Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 17.72 KB
MD5 c4fc3cf9ad698936eb599526ff632c98 Copy to Clipboard
SHA1 d9b2fc97bf40978f1f2273db6c4c874f19845008 Copy to Clipboard
SHA256 19d92136bd89fee05f348b25c01ca65fd421fd1c11d678d974cf8e4c6f956d23 Copy to Clipboard
SSDeep 192:/S6HKSpmtgl62TY4zp8rA0X7LAxoiZmxpOyxo:/pHKUmYTYXiRZmxpOyxo Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp.isolated Dropped File Binary
Unknown
»
Mime Type application/x-dosexec
File Size 7.11 KB
MD5 764f4a7cc31b0457ef67e29238dff822 Copy to Clipboard
SHA1 1f4900b6316dd9bf9053027365a360d34b7ff2f3 Copy to Clipboard
SHA256 d2cf11e828c339cd7526938dbfebff9db0d184c858336a885cf6984018f04249 Copy to Clipboard
SSDeep 48:X/lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lV+lF:X3OOOOOOOOOOOOOOOOOOOOOOOOOOOi Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp.isolated Dropped File Binary
Unknown
»
Mime Type application/x-dosexec
File Size 7.11 KB
MD5 dde19f9bd2bb1828e82c042dc5f33c0a Copy to Clipboard
SHA1 ccf49c2294ca7fb36affe7b1a0c89c76de2bf071 Copy to Clipboard
SHA256 8938e99aff6f2271477a8842c7ed683625e7919ebf727c18fe78bf99d4cf5d40 Copy to Clipboard
SSDeep 48:XtL6XL6TaaaaaaaaailV+lV+lV+lV+lV+lV+lV+lV+lVf:XtiqaaaaaaaaaSOOOOOOOOf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp.isolated Dropped File Binary
Unknown
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp.isolated (Dropped File)
Mime Type application/x-dosexec
File Size 7.11 KB
MD5 9d82f362a906ac9c56cabb139772cf49 Copy to Clipboard
SHA1 88988cdde8eab66136d7825b9f7c41da4a1d8435 Copy to Clipboard
SHA256 844e6188fa03e5aa02c72c68566e89e6f7309d5efebd7a25ca62f60a1721116a Copy to Clipboard
SSDeep 192:Xt6aaaaaaaaaaaaaaaaaaaaSOOOOOOOOf:XF Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 15.62 KB
MD5 6839d2f3e8ffac69227ff965addd12d8 Copy to Clipboard
SHA1 e8a36a7dcf6a03e79998c180bd68b08c11e78411 Copy to Clipboard
SHA256 23eb9b7040d9350a7b5c8131157ca97afc5e63722d51e181d4524821a34a1f1c Copy to Clipboard
SSDeep 96:/SW1KK6kvpppppppppppppp6sAze4rE5rOzXfW4mjFoc00EvUpMiM0txZ:/S6KLsAorGXfWdjFntMiXtr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 8.58 KB
MD5 5e2783319f08c08626d8e360b3d91c6b Copy to Clipboard
SHA1 f42f08416118a3623b58a0a8dccc6314d1ac8cdd Copy to Clipboard
SHA256 f362af1da9d5758dd8a07fc695f73f55d9593220625f51ec801c8abb1b83a3b8 Copy to Clipboard
SSDeep 192:WB6n0f7tPZ9q7bBJ8G/SUWSBL/ajHOfDcZi+z:WBnfBZyr6/7OfDc8o Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 bba710331768649332aaf8f1a145fe19 Copy to Clipboard
SHA1 3359d53c7edffa4d7a3768e1bae811b87e144909 Copy to Clipboard
SHA256 d83fcc3330c9a7db8ea460d2c7ee92210340f93e9daae20b252f7a91af52c678 Copy to Clipboard
SSDeep 48:bTI3n0sam5eh+1jsBZQm05AD2oAgOfLlE:wX0jSBm0+ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.41 KB
MD5 364830a3fad745311d0554463666aea3 Copy to Clipboard
SHA1 85e9b06347ad13c33f745e49a84dc16a45febecc Copy to Clipboard
SHA256 ebac32015161a9ef3e8ba269ced95cbd8cdf76be440b22c7bf423b1ed9e81246 Copy to Clipboard
SSDeep 24:nrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oCmtIsa+:t3n0sam5eh+1jsBZQm05AD2oCyL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 458e92a8e92fdf33d0868a92f9868e11 Copy to Clipboard
SHA1 0d141f104abade7228ff99a938f393e9d7894ebe Copy to Clipboard
SHA256 a3c4ff11923cc0d2c9409d3bea0cc668fe351a549b135754c5e81d5803f13ad5 Copy to Clipboard
SSDeep 48:ECgx3n0sam5eh+1jsBZQm05AD2o9DbUmra:ERX0jSBm0sDbs Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 5.80 KB
MD5 c632d89d3efc91dd92f9b49ebc5c4c8b Copy to Clipboard
SHA1 6a0f7de4ff04a5e68f151fd7675d6cf2be404404 Copy to Clipboard
SHA256 27e0231154a2ee8b93f06b7a0e85282244424c2ea35ba845d5f7259516d9d2d9 Copy to Clipboard
SSDeep 48:d3n0sam5eh+1jsBZQm05AD2od0C0E3e0W0Hc53b1lITlmAp0eEOz7CCW1YGsamaJ:dX0jSBm0yl+D5l0Bp07OUqpe Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 42.77 KB
MD5 f1d5c55232d575ac01ea5361f1b7bdb9 Copy to Clipboard
SHA1 6049787e9aa6e25bf6bc8317966d9a19e0b41453 Copy to Clipboard
SHA256 e007e4805be2c391833b2323fdb11dcbc38fcfaf70882984149de4649281483a Copy to Clipboard
SSDeep 768:AWnxLE3Y4Lcja8P26BA++Kq0jDqyCKQ64yb+v7WzVuQFR3n4mxpy:AWxLE3Y4Lc/26Be0jmy1v4CfRRomxQ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\BodyPaneBackground.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 2.43 KB
MD5 efd9b26db21594a10f778f74458feea6 Copy to Clipboard
SHA1 d8be82217c9a3942bcac8797eaa9caf06d51bc80 Copy to Clipboard
SHA256 f272765a9b5ff5331bd9b4e063fd45843e170c8fd105e56e0a11b798e44fa40d Copy to Clipboard
SSDeep 24:pyoPRfdeQddtUpA1sf1EMV8jiE9cQWJexe6ZYd9l3D73ypCfndywN6Cc1CAKG89s:dPFhLLGfBQiE9vY6qis8WGKeKD8Yq Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 9.23 KB
MD5 0f8fe9be686f1c5463e25e177611ed33 Copy to Clipboard
SHA1 513e382b209e2f45adeaa209534f8a9d99c7fd72 Copy to Clipboard
SHA256 9c218f9dcba486c919ae8a407d058c4ae948c5918bc8b5719ee17d51ba37092b Copy to Clipboard
SSDeep 96:FY6qyK8F3KIXZsQb45mf6+WXedTGWTv0M9sVz0MbOpW1ppppZd5S5jWHSIXt5:W6FK3IpsQ3f6NKz5dtkfXt5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_over.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.03 KB
MD5 c8b13596492f649bc14489bf45be98fd Copy to Clipboard
SHA1 44047545954b54d63e4b316d8afaca34fd2eaeba Copy to Clipboard
SHA256 d8b74c88044f21955dc6497d330c26fb226f924a57d5db0987ad65c020b812d4 Copy to Clipboard
SSDeep 24:PVdjfUgqXvlZMfTYO4824wJBRYPpWqBzR/h/Y4pVo0:t5UhfQfMF40/k9/Sl0 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 187 bytes
MD5 96009e502537ebafbbbd46699774c82d Copy to Clipboard
SHA1 97c83969cc40c2f14275fd8cab0920195de0fd3d Copy to Clipboard
SHA256 fa2c3dc9f62a6f86128f31dd37e179214c488f3d4a95d22e1598bd6643d8e0bc Copy to Clipboard
SSDeep 3:NajMPO1dQDHLJq8jPzqHCE/fa3uzqrmqrmr1gK3pdc46w0TmjG1ySkvO4aDrS+e:QO99qyrAfaWMmMmr1LLc3w0ySPkm9S Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 622 bytes
MD5 62a633d311e0f09f3d0297bb3006a5d1 Copy to Clipboard
SHA1 9e3339526fdc6f18d79fd0c80bd3e591e58e335e Copy to Clipboard
SHA256 2780eba5c0103ad67e81c13aed1b11e0973b4ca6c5aaf201bc259728d3ff5516 Copy to Clipboard
SSDeep 12:PEE3Bncb9WYrf/S3qXOfH1rMJN3WNMWe002uCQ6Z1pFVy2H0VQ:Pjncb9WYry3PfH1MJN3WCb2uT6ZvnoK Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 13.64 KB
MD5 72bd0fb58c52997d962d61555616624b Copy to Clipboard
SHA1 5902460428d56db118565d2807db203e2a19af24 Copy to Clipboard
SHA256 dcfb2d520664a01a06d07eacd90f2156cce55a9cf211c4a2a1a7f79647b0c733 Copy to Clipboard
SSDeep 192:tjg683A2QJJQgrd6pOhvkHFfZ683A2QJJQE6tmQhoQ/Ms7D/dDRs:OnQTQju0nQTQEjQhb/vn/du Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 15.50 KB
MD5 496d62ddf57dd879c1c8ae14f43c8ca7 Copy to Clipboard
SHA1 36e6335f61959ff16aec6d56a69165e7f3359821 Copy to Clipboard
SHA256 c80405baddabc04f3531d371eca81fe5565749e37a3cbea60d30d36874ec1e90 Copy to Clipboard
SSDeep 192:7+68eJx93eBMv5QMwxXiRYM0IB6l4PyeJ00ugvrW32z/jJk:6eJCRMZRYEslkye60ugvrW3+jS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.01 KB
MD5 afb9f517e2ff336e936e53f7c7597c30 Copy to Clipboard
SHA1 a9ab9f4a2d52fe028575e14c0ec9dbb0ab061377 Copy to Clipboard
SHA256 6ff1c0b165b96e19e4c9964b1c6eb59a0926ac019712be4900f1f3e76cd9eec4 Copy to Clipboard
SSDeep 24:8V/65qOnCWdwfz/A+A/7P2/OYJ9DjdI6+pbHmwh+aV:8p6sOCWOlse/pJ9MpbHrh9V Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 7.00 KB
MD5 b40296d6f5a528b831f8100effc064f2 Copy to Clipboard
SHA1 691e2bcefa1499e277127f5359ca960c4749acbd Copy to Clipboard
SHA256 8c7fc526adc107c4e8641430d4ea98d11be633db9022ea939778a5c519a7fc73 Copy to Clipboard
SSDeep 192:OngMwZ0QrJNO9GBC8va54IA6x+OrbzInxkYAzAX:1v0s3QGBCKa54IA6rbzInxkZAX Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 4.06 KB
MD5 e2a3398c878f344e013a3cd91e1545e7 Copy to Clipboard
SHA1 cc339e4d38b0fd89e043d29abcf63b3a27185d07 Copy to Clipboard
SHA256 f6fba60249eb1ee5cf4d7328476d4e7b9b3dcc06d03219accb8d61cabeb40d17 Copy to Clipboard
SSDeep 96:/utI4E1NHB8A844l+12MSU8XkEFUB6QfpJFudQ:/uOVBfkls2Mf0kEQ6myi Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.37 KB
MD5 5aa1a7946018319bf0edfb4556b7f7d9 Copy to Clipboard
SHA1 1bb9dd9e5c63ba63f6eff7aee0118b9d64f06621 Copy to Clipboard
SHA256 be6abbc3eac8b80d434ca7ead3413c276b409fdeba501224a2c11004ebfd625f Copy to Clipboard
SSDeep 48:0t+Vcyghh6nxHFeQXjOw1EweA/GZ2IXC1z0B35ffWmibcCyV16JLnZ:EscbhOxcAqWEoyC1z0BJffWPJyVS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 206 bytes
MD5 6b880de8bf93ccb97bd20ef8646da90e Copy to Clipboard
SHA1 a644abe7438c108eaa943d27fbd2cd6939673e3f Copy to Clipboard
SHA256 89e5c6ddc712a7f1ade00706ed980074a3f2d2d91ad29b4e397f869f89d7045d Copy to Clipboard
SSDeep 3:ovoBbr3HlA9lIVTUaK8+Fxn40E8Ssj7o3PQjmEesDRKcehcjhbnFP2jwiXzxzLmY:oqP3HlA9u+FvsoxUcLPEwijVLv Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 1.01 KB
MD5 f10fedccd861b787df8050428a345194 Copy to Clipboard
SHA1 ec860a41d8dc0b373ab3e6fbb7861735357b8d43 Copy to Clipboard
SHA256 29ed65e0358a86f527fbed4cb6d921a0419955d391e42c84acb35ee2982e62aa Copy to Clipboard
SSDeep 24:NNNuYwMRZaO+dd1dG/4nczkF0AcfzBYuC5kpjZvp+Sy4TlI:rJwMRQ9r0wnPOAcftZC5kplhZy4TlI Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right_over.gif.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 580 bytes
MD5 74127c9a42ea824396dcf496ae59a880 Copy to Clipboard
SHA1 b1c460a142e430a85555a42ef3b8f767e145d57e Copy to Clipboard
SHA256 5e9c5216bd3ceb8d09c17fe7222fe5c8b99bed4769de565a91ba5677e13f9e08 Copy to Clipboard
SSDeep 6:PRyJ/vDhUDDJgv1NEZTBJE6ViI0H11O7CK0n9lwMmMmMmMmMmMmMmMmMmMmMmMmX:PZDDJQ1+lBJEoH0V1O7P72YpV2WAVN2F Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.34 KB
MD5 f26511f21efde3d12c4ab2cb3c57b869 Copy to Clipboard
SHA1 b749406cdda067f9c6b068396b59ff30254f3b85 Copy to Clipboard
SHA256 9db2b591ecdcebc3c2f7578ff420c79cb34698bca00de3c9e01f58c0741a845f Copy to Clipboard
SSDeep 48:0EyilKBXwhb732Bpw4mA7EgbfDKVXwmt+r1Kd7mQA9ilvqdiTWQ9Vd+Wo9Pe2:0E7KBAN73Ee4mA7vbKVXDc6kYlVEpPR Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css.isolated Dropped File Stream
Unknown
»
Mime Type application/octet-stream
File Size 3.18 KB
MD5 3a65936d650c0db54860865cf16e512a Copy to Clipboard
SHA1 1e53e36258675263b827bb0a47075c2a573c6e9d Copy to Clipboard
SHA256 6fad9ba75f2ddd3b6ba4e4c6f97eb1170247208e4c4d4d794a9bbf1d667639bc Copy to Clipboard
SSDeep 96:EXtgcFeUjX1IbzyHXgO8RNCE+k0QVeMUY6WuAN:ileUjXy48R8tk0Qg9Yv Copy to Clipboard
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\000000000.key Dropped File Text
Not Queried
»
Mime Type text/plain
File Size 15 bytes
MD5 29184efbb200aa4f1dafce5a40b53afb Copy to Clipboard
SHA1 fc1d87d17cb2e0928d7828fef4350f7f157e6db6 Copy to Clipboard
SHA256 1ca1392b1ec466fc0ece3accab5de07794ed6b608768804c0c424732a7e1d0ee Copy to Clipboard
SSDeep 3:UjtaT:/T Copy to Clipboard
C:\\@@_README_@@.txt Dropped File Text
Not Queried
»
Also Known As C:\\@@_ATTENTION_@@.txt (Dropped File)
C:\\@@_HELPER_@@.txt (Dropped File)
C:\\$Recycle.Bin\@@_README_@@.txt (Dropped File)
C:\\$Recycle.Bin\@@_ATTENTION_@@.txt (Dropped File)
C:\\$Recycle.Bin\@@_HELPER_@@.txt (Dropped File)
C:\\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\@@_README_@@.txt (Dropped File)
C:\\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\@@_ATTENTION_@@.txt (Dropped File)
C:\\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\@@_README_@@.txt (Dropped File)
C:\\Boot\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\cs-CZ\@@_README_@@.txt (Dropped File)
C:\\Boot\cs-CZ\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\cs-CZ\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\da-DK\@@_README_@@.txt (Dropped File)
C:\\Boot\da-DK\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\da-DK\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\de-DE\@@_README_@@.txt (Dropped File)
C:\\Boot\de-DE\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\de-DE\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\el-GR\@@_README_@@.txt (Dropped File)
C:\\Boot\el-GR\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\el-GR\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\en-US\@@_README_@@.txt (Dropped File)
C:\\Boot\en-US\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\en-US\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\es-ES\@@_README_@@.txt (Dropped File)
C:\\Boot\es-ES\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\es-ES\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\fi-FI\@@_README_@@.txt (Dropped File)
C:\\Boot\fi-FI\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\fi-FI\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\Fonts\@@_README_@@.txt (Dropped File)
C:\\Boot\Fonts\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\Fonts\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\fr-FR\@@_README_@@.txt (Dropped File)
C:\\Boot\fr-FR\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\fr-FR\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\hu-HU\@@_README_@@.txt (Dropped File)
C:\\Boot\hu-HU\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\hu-HU\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\it-IT\@@_README_@@.txt (Dropped File)
C:\\Boot\it-IT\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\it-IT\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\ja-JP\@@_README_@@.txt (Dropped File)
C:\\Boot\ja-JP\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\ja-JP\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\ko-KR\@@_README_@@.txt (Dropped File)
C:\\Boot\ko-KR\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\ko-KR\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\nb-NO\@@_README_@@.txt (Dropped File)
C:\\Boot\nb-NO\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\nb-NO\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\nl-NL\@@_README_@@.txt (Dropped File)
C:\\Boot\nl-NL\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\nl-NL\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\pl-PL\@@_README_@@.txt (Dropped File)
C:\\Boot\pl-PL\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\pl-PL\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\pt-BR\@@_README_@@.txt (Dropped File)
C:\\Boot\pt-BR\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\pt-BR\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\pt-PT\@@_README_@@.txt (Dropped File)
C:\\Boot\pt-PT\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\pt-PT\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\ru-RU\@@_README_@@.txt (Dropped File)
C:\\Boot\ru-RU\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\ru-RU\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\sv-SE\@@_README_@@.txt (Dropped File)
C:\\Boot\sv-SE\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\sv-SE\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\tr-TR\@@_README_@@.txt (Dropped File)
C:\\Boot\tr-TR\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\tr-TR\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\zh-CN\@@_README_@@.txt (Dropped File)
C:\\Boot\zh-CN\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\zh-CN\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\zh-HK\@@_README_@@.txt (Dropped File)
C:\\Boot\zh-HK\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\zh-HK\@@_HELPER_@@.txt (Dropped File)
C:\\Boot\zh-TW\@@_README_@@.txt (Dropped File)
C:\\Boot\zh-TW\@@_ATTENTION_@@.txt (Dropped File)
C:\\Boot\zh-TW\@@_HELPER_@@.txt (Dropped File)
C:\\Config.Msi\@@_README_@@.txt (Dropped File)
C:\\Config.Msi\@@_ATTENTION_@@.txt (Dropped File)
C:\\Config.Msi\@@_HELPER_@@.txt (Dropped File)
c:\users\@@_readme_@@.txt (Dropped File)
c:\users\@@_attention_@@.txt (Dropped File)
c:\users\@@_helper_@@.txt (Dropped File)
C:\\MSOCache\@@_README_@@.txt (Dropped File)
C:\\MSOCache\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\@@_HELPER_@@.txt (Dropped File)
C:\\MSOCache\All Users\@@_README_@@.txt (Dropped File)
C:\\MSOCache\All Users\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\All Users\@@_HELPER_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\@@_README_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\@@_HELPER_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\@@_README_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\@@_HELPER_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\@@_README_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\@@_HELPER_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\@@_README_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\@@_ATTENTION_@@.txt (Dropped File)
C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\@@_HELPER_@@.txt (Dropped File)
Mime Type text/plain
File Size 1.35 KB
MD5 039d0ace415c1f3a889cc88c507f19a9 Copy to Clipboard
SHA1 a29983ac89233a1ae78f3cfd1310baf2b6eba510 Copy to Clipboard
SHA256 29ce312ae86bb2ef597fd281733535df68c2d10322ec7c1ccb00e933e146fcc8 Copy to Clipboard
SSDeep 24:WF30GyaC6fNf12fdIZDiHES4SBFKCGLd0+PZEwc9ged1uc+1PViR02H:k0GyanfNtO1kuW/v6wcSJsf Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.53 KB
MD5 8c9339b2effbcc3552ff0a412c70a8cd Copy to Clipboard
SHA1 da9e461b68a39314541c502d7c9d4418791c191c Copy to Clipboard
SHA256 d23d11175f73f63896bf0d57788d4608638903e4a09c4340b15709c1efc06229 Copy to Clipboard
SSDeep 48:XNA0f+BYS+31gX4TXXPW4T32LywgfewER/YMiSJJ:Xy0fwu+4zPW4algf6t4Sj Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 0247eade44bef9ade6b9f7529d2c1948 Copy to Clipboard
SHA1 7fe420029df7e1d57616d26dba03567c0a9f0b92 Copy to Clipboard
SHA256 b5f55511092dd32dd83b160bfa98e40cbbaa1c9e538fd1a9a18981fc398cb142 Copy to Clipboard
SSDeep 24:Ucar3djgZdepL1JuhGsfMQ1q/SIhQMl9LkzU55o/axKJg3F7vcaGRA:Xy3djgZdSL1JYMGq/AMjozQiSxmg95GW Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.84 KB
MD5 237d2902636c7bee8a745e308d999eeb Copy to Clipboard
SHA1 734843db9c7072fc92836a940dc6cab7066b1f42 Copy to Clipboard
SHA256 0b57daaa5510c4b20cfd875132741dc0932becbe69cd49d8419e121024c7b79d Copy to Clipboard
SSDeep 48:XsaZTdUoe7K7yAi7K7PvN9dJPIPevDKm9yP5juDvS8ibjQyLlzI:XsaTVSK7sK7nN9dBIPehcP5jGKHQYW Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.57 KB
MD5 22ac3e08be675a7fae0067c2cc5747da Copy to Clipboard
SHA1 9ae01b9c22859525846ebde40469c855acc47863 Copy to Clipboard
SHA256 aed8d66f1be082ca45ef46bf38503fc0d47e71a52cd29122dcf472336def1f8f Copy to Clipboard
SSDeep 48:XeCXCYgUhDDJgUhy67piiMC17qTjY3TimiB2UL:Xe4gGDJgn67Z7qTjUOmiBhL Copy to Clipboard
C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.11 KB
MD5 7a1153f04b5854f62b86804a455029ac Copy to Clipboard
SHA1 8735839e47e0d61b8cf4b9de1f7e6086b980eb4f Copy to Clipboard
SHA256 b53f9f133715f3caca68b0cfc610d4288b0f487ca7187c1691e86af36fc9e730 Copy to Clipboard
SSDeep 48:X4OQEiVJDiZg9l80IjGWrxALxuJMCohLhDzSz0vrBofgl+GPE+:X1im8K0FWaLxYohLhzSz0vqzGV Copy to Clipboard
C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 4.11 KB
MD5 ff24c41994ddabe78e1dc691babc4c8e Copy to Clipboard
SHA1 2d9d9141f852947df8e211db9b25e74d288f1266 Copy to Clipboard
SHA256 3f7fa7ff839fd135f2370a7c8c29a54200de351192018ff1321f25c2d80f22f6 Copy to Clipboard
SSDeep 96:XoRIFsSZx5tZliegk8TL+zk0wHll6sOj8QSPKjhyxXgtDyl7z:Y3m5tyeoTLH0RERPShiX6Dyl7z Copy to Clipboard
C:\\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.37 KB
MD5 15a4a9b40479406574d44395f2af1fcf Copy to Clipboard
SHA1 b66b9d56d2f2970c8dfe79de99fff7e830b90a89 Copy to Clipboard
SHA256 6f3503387e98e347ddedf69308978c964b2b8f94d3b547ba06eeb47cbd9469f1 Copy to Clipboard
SSDeep 48:XfcW13YX7L1+OyMzRLonc6RpXg4MtfvPlDY41B0aLtVzVYz2UL:Xh3KR+Oy4Cn5RpdifvPlDYIlLehL Copy to Clipboard
C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 077f771a9c3e4a8a8cd2fbf17055db87 Copy to Clipboard
SHA1 9271e13a42deb938eacd7df2aacb30799b2906d9 Copy to Clipboard
SHA256 ce367db4b9080023ea2a28f87b6e8b21dc0dc2044646e8fde3c9460434783082 Copy to Clipboard
SSDeep 24:UcafNYSczy7JMZojAKIs/czjpuczSRkgesxHSEpbdSR/L5o/aVroJV6YzPCPgWxU:XPSLjmBdYesxH5pbER/LiSdoeYjAgWxU Copy to Clipboard
C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 830fb3e2fc06e5116c0f67010190df14 Copy to Clipboard
SHA1 dc3c175e0a7f0428fa3f9af0d0f43957f3afd6a2 Copy to Clipboard
SHA256 f59f22164eaa3cc3895f7555d029ca2b8009f9ba24753058f4670ff48c14b72e Copy to Clipboard
SSDeep 24:Ucaef+BdDsMT5AWREjdSM/8vcuVZyIAnPrPWZSr5L5o/aaSr:XsYy5UjELTVvAnyZ+LiSaq Copy to Clipboard
C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 5.75 KB
MD5 8979086e199f08ef20818f378e4fa04a Copy to Clipboard
SHA1 ee5078377cbc285e7bf04076dbe0f35fc96ccd2a Copy to Clipboard
SHA256 bc0e5e6f253d6b8b8813bdd2b9df8afbda406b60628fad24ebcd4167db75bf0a Copy to Clipboard
SSDeep 96:XVndI5k18u5L43JSb1LLMlwcrlDOiQigk8MUSpM9rIn5U0wx//RXViQnwF:ZdI+vpVrPioZZ0wx//jgF Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.20 KB
MD5 810c4e847f295cc23fd1d80b96094b33 Copy to Clipboard
SHA1 1d924ce548b9742d9a1d87e4cac5aef2ab3b9abc Copy to Clipboard
SHA256 bd0a579ee4b783d898d1eb6f43b12712def27a6286d111b80eb9871b9f8e3105 Copy to Clipboard
SSDeep 24:UcadzKFfXOtNiKEZiwK6XBMVRgM/fiaYOJdx1suJFpTiqS+s2wQm1Q5YM5o/5v:XkCv/KEi0xMVRBzsmpTdsgm1gYMip Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 9.28 KB
MD5 4f51ba872243219c4d7070ae8ec979ef Copy to Clipboard
SHA1 405496c6e44d4bcf02cd423a2091e8a398f2cb0b Copy to Clipboard
SHA256 fbcde499801b9a2047e276ae56fa42fd8fedab2c5697ab5e97be806422338e64 Copy to Clipboard
SSDeep 96:XKpBinjKDP/N4ABMteU1YcwOKuNzr26AWwS7yjDSQ7NKt4SXfaxO7KxLSCRNao0U:mJDP/NmegZ6cRCMhkChTztU Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.94 KB
MD5 b192d9c544468d4637a6ccf2ac1152b6 Copy to Clipboard
SHA1 50556addb5b9ebf081c4a16b0d02553a729d4b09 Copy to Clipboard
SHA256 a5f44a8ff849fbd7cd0714e07a22974908b86063261e6ee7132871c588c09014 Copy to Clipboard
SSDeep 48:XlhmMx/+4wGUsEXZ8g5+sF7lT6w1XgrKzkQlCV3yOF:XVW4wsSZT5+sFL9kQcpF Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.83 KB
MD5 eba55439b2310ae92d9e9c8da06e2312 Copy to Clipboard
SHA1 a175e21a7376279906a9b4db752e3669c5039ba8 Copy to Clipboard
SHA256 adbffd800ec4ff053a10cfef0d3f2d6e2ad101dfe74a513967fb4a3c7bd5e8d3 Copy to Clipboard
SSDeep 48:X+rhmi9dDQcUsEXZms3sFGJBqE9lGKi01/MhYeG42UL:XIZQfsSZmpFcBqE9lG1gn4hL Copy to Clipboard
C:\\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.42 KB
MD5 f68f19432d8191bf7e148b4e41d82165 Copy to Clipboard
SHA1 fb487e96bb910a398365ad107926a8c377db37e6 Copy to Clipboard
SHA256 980c5d303e61c8df244ec365a077de4bf1a7557a753544b868b43b91cd384038 Copy to Clipboard
SSDeep 24:UcaJAPncpNGU2e7K7y3wmXV7K7PpqILkHw3v6m8OdzamypMeCZXO4PTZh2VpOow:XBfQNoe7K7yAi7K7PIgk8v6m8Szam6MF Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.isolated (Dropped File)
Mime Type application/octet-stream
File Size 582.36 KB
MD5 e07358ce4d8369ef26b90065409d73fd Copy to Clipboard
SHA1 09c13840b3465c009784a7f2dd20d989151205ed Copy to Clipboard
SHA256 485f25205fb4c69b7a1a89b6f77e367dcbe7ffea1e37e22ce61f69e00cac88ef Copy to Clipboard
SSDeep 12288:ociNlZDgzFq1Mwj0GibKiZDOOg/Q+Lr1Mwj0GibKyVZDOOgIWkOLlCXl7U3YsjdZ:CNlZDWq1Mwj0GibKiZDQYSr1Mwj0Gibk Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 5.43 KB
MD5 e0419b015e480cec5403215af6e37f4f Copy to Clipboard
SHA1 d7ec2e38fdf822dca1bcbbb36ba21500ff7424a1 Copy to Clipboard
SHA256 2872a0bf41db8e328b8ab768a1dd9c5aa90146eb5cef60f35b9f0b29cedfacf1 Copy to Clipboard
SSDeep 96:X2ph/7dwSx5t3VlghqFYFH8F3tOaTP4BoJON+0QuNfy+ikl9bnQh:mpR/hohUIaglb5Qh Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 9.13 KB
MD5 abc4a9a9f65d71d6046c5930fe33f7cb Copy to Clipboard
SHA1 2d909e0e868752a6304e568dbc8ff43751e57a81 Copy to Clipboard
SHA256 078d858364b7727620711d703b85f7d117299baf020ff78f66e482d075c6498f Copy to Clipboard
SSDeep 192:movSKIKGDo2cOD7ZAoCOaqQrLdp5Nqogw4iGc5HrHukVe4dbljueL:movAsjrLHzqonxukTjueL Copy to Clipboard
C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.56 KB
MD5 25953b154b7625bdfa73618a08bdf52c Copy to Clipboard
SHA1 968ba7228f8cdf16e0d5010b4f2b49c1af4524fb Copy to Clipboard
SHA256 cbb45e6f46642ed5fdddf68cac61b043722832edae0eecfd146cb5dbfdfc477e Copy to Clipboard
SSDeep 48:Xio3bY6zffe7K7yAi7K7Pzgk8z1MEy/rfPGkkezviqbP6Y5G1DJ4aMB2UL:XDSK7sK77gk85ML/rfPGkZvNvk4BBhL Copy to Clipboard
C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.isolated (Dropped File)
C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.isolated (Dropped File)
Mime Type application/octet-stream
File Size 4.17 KB
MD5 7cd35d26aedd0d6b42cef03f8baa460d Copy to Clipboard
SHA1 28034b50d0d3bb2eb8eb2f637b9680fb042fe7c0 Copy to Clipboard
SHA256 a1109b79d9477b0949b87bda7be50afc98563edda76f306a0521f5e72d0cf5b5 Copy to Clipboard
SSDeep 96:XTYzKxXuSeQgdqfQAVo9mLvASUd/1Tl97ZOle67Zmyf4grGNEBi/:jb3ikLuhZl97Zcm04Lao/ Copy to Clipboard
C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 16.46 KB
MD5 ce16cd1af6211c4e8b10363392f9f2ed Copy to Clipboard
SHA1 1b97aaa8dc832d29e0b24b35907173c96441931d Copy to Clipboard
SHA256 d67fa6ce0a80e58605b81f99547089115f6184c4cd50052e7e9d546bc7905f25 Copy to Clipboard
SSDeep 192:US3/FXE4270JRb2ToZrrZUaowKQ3le56b7J23HiNLWo3aIVKUapyn:US3/V928Rb2TkrHowRh3sYLV3a3UVn Copy to Clipboard
C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 30.37 KB
MD5 25ef849a0c5cab4a2fed5ea547e09f13 Copy to Clipboard
SHA1 9c340679e1194d17acd8cdcffc1691375676036f Copy to Clipboard
SHA256 00e8070fefb70f87644e021b5a8d0c76181fb501b247ae0606774ee648578823 Copy to Clipboard
SSDeep 384:zcDkE+vMWPvvAygoh1NefplhLhFK5RAmank4BbLw6JSgf1mW:rH3Pvv+M01g8pS61B Copy to Clipboard
C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 6.27 KB
MD5 4a62c2c056c6b2d4ff7cee568ec2e12d Copy to Clipboard
SHA1 0fa87fc5f39c08c78b64b28e70578d7255edd5b2 Copy to Clipboard
SHA256 cf32b7379ed0cc31086cd60b2290e198874c30a0735d7073bb0305c728e78ee0 Copy to Clipboard
SSDeep 96:XduuKCbUAI80e9DPOQqgVhBwT2rKpUZ7l2h4ZMRhzkzmNrEFdDSlR6M3HDLfYee1:tubvoJ3HiGgVwmiuCM3XwlX Copy to Clipboard
C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.52 KB
MD5 f09923e817d76d37bac36d789202e5a0 Copy to Clipboard
SHA1 061381aa45f672c99865cd38f0dab3d45fd4b0db Copy to Clipboard
SHA256 a2166d9c60e8939bb7b183cbb215cfe5654cd8989530cfd8428c344f9d73e7e0 Copy to Clipboard
SSDeep 192:6kbwLwZF91rBauMbsUQsqwKb22iq4/RmK:JdF9jX7FW3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 925 bytes
MD5 374492ed37535491488b78898fcc5893 Copy to Clipboard
SHA1 f5ca69d7d366ad5a40c40a3071e2e628455dcdf1 Copy to Clipboard
SHA256 a78363f1f1951f6acda05cac6ca92cea9cfb97ccee0415357bde3c06115fb889 Copy to Clipboard
SSDeep 24:UqFuBSWQUBwfHiP1WmoK44b69DTaSzP1GVEHNWbmZ:bFTYaCTH44bEnaSzzHgbo Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apex.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 959 bytes
MD5 dd3917cb64d1d7dad773209bef447251 Copy to Clipboard
SHA1 5d5c178992f9235af3eba28d1ff9badac5bd2b5a Copy to Clipboard
SHA256 d59a2130bdae459a5d6606df80c47c8d03b2f95e3ccf8ed045892a115c75f4e0 Copy to Clipboard
SSDeep 24:UqFuBrQmkS0ZEuwwBwySm2P16NmUJoYI3cT7:bFkQmkdwTZAmOoYI3O7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 e8e8637f638a64f5aab5ec854582309a Copy to Clipboard
SHA1 e13f5fe8fd0b0243b0d940b6a198d46fce98daf6 Copy to Clipboard
SHA256 3a3665f331a57cf0f05fbb299cad78154169995e0a0bf964c83c7533491575d0 Copy to Clipboard
SSDeep 24:UqFuB1dzU4dTbrmUPuxiP1UcP1qZ60H8YVkwP117WlP1auTS:bFUd4KOeuICcOLH5kw3k06S Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 2811ac457fe6cb2911c490e61b7f249c Copy to Clipboard
SHA1 1a17c2a38c390b834a3a7a19217a69817f8e3903 Copy to Clipboard
SHA256 0a6524e64c50a35428ae6dcf76381066319915df6b97f853bfecaa2c6bc8dc6b Copy to Clipboard
SSDeep 24:UqFuBV1GtU4dTbrmUCiP1MdKcP1FZGZ+50MP9xte6wP1vWlP19Zur:bFs9KOiFcvZM+CMHwivZa Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 927 bytes
MD5 394070a65b903b23c56914b40016d2c4 Copy to Clipboard
SHA1 bf25fb02d6472a7416d467d875f64d71f2d57809 Copy to Clipboard
SHA256 fa4019778e24dc4900f03eda132eacf046c13d447becbaa95dfa03f2e5889d58 Copy to Clipboard
SSDeep 24:UqFuBQ7T2P1ncFwyCBLIeLoy2P1HVtmmlFiztStT7:bFBT2lcwyo9LoPtXmmCztc7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Civic.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 3495cf31b898016712cc2337cf04430b Copy to Clipboard
SHA1 2e703c1490613f4afc98fb3ed583fb6ee4255f5f Copy to Clipboard
SHA256 e456a3f335cf9ed4bb4f3b0f4b5f10dced21ac8313d2a367f63dc4db7fb55bf3 Copy to Clipboard
SSDeep 24:UqFuBYUpDeZv3zqNSo67jfefHL8OiP1q5Wmq:bFC9WGNSo6HefHoLn3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 926 bytes
MD5 232c4da0cdca050390835a765b23680f Copy to Clipboard
SHA1 d24f3f8a25c913899a0d9e137ac305a16d10e0d4 Copy to Clipboard
SHA256 80f3f74fd9731c0491f7dbb5fd217965fcc383aa1ae3851c7b23aabe1f9773d4 Copy to Clipboard
SSDeep 24:UqFuBo+gn6cRZNyqyff26f9N3KydfRkHXr8wWv8gEm42S8MhRvPgB0c:bFPhZ2Dsy5RrvSj/8aXg/ Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 099d30cc2e1824fadc0cc79137f9d011 Copy to Clipboard
SHA1 82780ae05037019b2a82d929366724cebfba8b58 Copy to Clipboard
SHA256 282a311e2c5e390f561996cec08a88894989b65c7dfb553b2fb2c3176b1055d5 Copy to Clipboard
SSDeep 24:UqFuBX1NNvDQhHJr070EbpG8mpYY0m+9N02E10bu/5:bFs1zvDQQDbpG7TiOd1Eu/5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Couture.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 962 bytes
MD5 da384e68048f544106905e1de357c19c Copy to Clipboard
SHA1 19028bfb4f0f463281da6e04ef70329b4185b78e Copy to Clipboard
SHA256 7bcae94aeb188c4d7f76be6b05b5ebe0926a261fc5d20790ff5061172da59d82 Copy to Clipboard
SSDeep 24:UqFuBH+EIn6cRsLM5SHjTkg9QTr6l03CVCzXvZSdpfpuTJfzcXe5E:bF9EIhsLM5oTkHHztzXkjfMTBoR Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 6c221bb3113a2d1ff372d70c4f93be8c Copy to Clipboard
SHA1 bde381a0c9accd3f2b989f366b32c0ad68eaca54 Copy to Clipboard
SHA256 061577a398d9296a7d61c09f67363e68d19859cc31ff98f1f0fa6ea4298e6e35 Copy to Clipboard
SSDeep 24:UqFuBnvDQhHJr070UQHG8mlUfnXm+9A2UB/lr:bFovDQQOHGHUPWiANB/lr Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 946beba503e1e4fc5432ab72e129f844 Copy to Clipboard
SHA1 a551bccf0c8aaf3ce623c0a2bc22a22e6df8e083 Copy to Clipboard
SHA256 e95a8b4472e99d35b0be68c8b6be70f4818a3108b636834a7a25d95657f86a74 Copy to Clipboard
SSDeep 24:UqFuBvLxZU4dTbrmUIZiP1iwcP1fZ50O8tBewP1udlP1Rdguq:bFKKKOtw8wc/CZ/ewIvbdgf Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 928 bytes
MD5 f692d67ba9af7da57897b68d635cf791 Copy to Clipboard
SHA1 87ad7253bab35f92261200ae43476cd8b78bd858 Copy to Clipboard
SHA256 16755c259904e495a9426e065ce5ff7dc934629377c9c7cfc9096eee4eb67dc2 Copy to Clipboard
SSDeep 24:UqFuBIvDQmxkwUvXyqDLW7JIFAOXxH4sOiP1J5Wmq:bFzvDQMMLnWtI9XxHrLo3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 959 bytes
MD5 cfe6a9cd39493d02558609952111b4fc Copy to Clipboard
SHA1 b8ed13a5ea4d3dbb0879c80c76f9e0426f00603c Copy to Clipboard
SHA256 d250be4ff453886b70939d6bc5813a9941d2edf8a9f99265982ea0953692e75c Copy to Clipboard
SSDeep 24:UqFuBSS0ZEuw66ayB7RH7q2P1Lv5PmvJodt15NT7:bF9dwiCRbfPmhodt15p7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Foundry.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 962 bytes
MD5 44976b23bbcc7d250be5d8d5731c9ee8 Copy to Clipboard
SHA1 0718ae4b7ba88380462494b87a65965a8ff758eb Copy to Clipboard
SHA256 47efc610c1916f2268be7beeb4767e941b4a5d72a3456eb759edb196358b3e5c Copy to Clipboard
SSDeep 24:UqFuBBn6cRsLM5SHjPg3dFQMl0JZ5z8vwSdwTJfWRi5E:bFChsLM5oPqw7z8veTBWRV Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 928 bytes
MD5 3956251110e69065ad674aa06b4ec765 Copy to Clipboard
SHA1 8a902e369a9878517674178526320c6ec7e6f546 Copy to Clipboard
SHA256 c28ef2a0a3cbb944e87ef686f0ec262393d9cd617e7d301a44f4acacc76e82ce Copy to Clipboard
SSDeep 24:UB37TrU/cjm+wj7g6QYl0Bo9gzjv0SdVTJf2PH5N:CTwEjm57MzzjD3TB+ Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 959 bytes
MD5 041648859d4d3427254fa13493ad4f8d Copy to Clipboard
SHA1 18b9fac4c85e49d72017ab1f65b353b260189751 Copy to Clipboard
SHA256 7d7d4441c7697a4a97ae0cc60f57e667244519281f54c6d99c8dfea7b6c2bca9 Copy to Clipboard
SSDeep 24:UqFuBkCS0ZEuw1BS9BqK2P1YrFDPm3aI9JeT7:bFXCdw1X3SNPmKI9JA7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 c51ab38e53b017ee2130f75238a30476 Copy to Clipboard
SHA1 f0e67dbeacd0d3f0da5d477e1eacc4467fc3037b Copy to Clipboard
SHA256 b29023258083e9b56ce0bced357498a93a528a1c8b7e91701da319e69ad73f6a Copy to Clipboard
SSDeep 24:UqFuBiPsvDQhHJr070xrSG8mGKWKSm+9HI27fpKo/oYGE:bFvsvDQQKOGEKDioep//FGE Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Median.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 49bc01a407f2579b75ded71522696837 Copy to Clipboard
SHA1 46735834051981a80794d432dae7b08072fe9f35 Copy to Clipboard
SHA256 44c34c95813538b1a1ce7cd7a07cd42391309d33ccb420fd7542766e2060d03f Copy to Clipboard
SSDeep 24:UqFuBuU4dTbrmUyyiP1nRcP1mZ1g0jjOIwP1glP1Bguv:bF4KOFXbc61ljjzwgUu Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Metro.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 2af431b6781ed38c69002f11ee2e9b6d Copy to Clipboard
SHA1 4d266554e56b7113de22a5bb4a93f548f2baf006 Copy to Clipboard
SHA256 d157c86d9a32875468272d1c25665d677956c8afbffeccd92f5632738e249c43 Copy to Clipboard
SSDeep 24:UqFuBsupDeJvaySqxdR7gXxAfCvHIOiP1Ea5Wmq:bFs9SjxdREUsHILiN3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Module.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 37ffff9d0fe525d2268de6577855debb Copy to Clipboard
SHA1 b644025743d8e5be952368e52c21588b14018e08 Copy to Clipboard
SHA256 c8a4a92095ff1067925895053eeaf55ee63b7feebed4507de9891ab9bb932548 Copy to Clipboard
SSDeep 24:UqFuBkU4dTbrmU5iP13MkcP1JZoT06xSIwP1dWlP1qMuE:bFSKOplPc9o4BIwQrN Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 964 bytes
MD5 f20a1712c4cf0c7edb3d92821c9344df Copy to Clipboard
SHA1 ab09a9bf31a09c02556223371d66bb59cc7f129e Copy to Clipboard
SHA256 5a76dc3b36d4fd6346b84c408cd6b338d213a752ad649f9174804ad294f3b373 Copy to Clipboard
SSDeep 24:UqFuBD2vDQhHJr0704FG8m/t/6m+992dQ7/ZcO:bFFvDQQxFGL1i9kw/ZcO Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 3aef6a5b52c65f8f26012ddb995a2b97 Copy to Clipboard
SHA1 ddab6c94d91eca8ea569d5e64a87d540a1b512a2 Copy to Clipboard
SHA256 be7a314bf5fba12d2f05d1b69a000b065b53aba73d0f4a7c76abb7981d6c063c Copy to Clipboard
SSDeep 24:UqFuB6/VpDe4vNqUPX71vWV9SHchOiP11w25Wmq:bFN9bY0XRuV9SHyLc3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 b2f9816616ec830341f8908d2ce9ab1e Copy to Clipboard
SHA1 55ff6acafd4288b4ee003c69a248a69a34551b8e Copy to Clipboard
SHA256 bc7476e6af02c93bf3baf2bf72a54002e17bd75fc4cdec8234e65258b9f0deb1 Copy to Clipboard
SSDeep 24:UqFuBsU4dTbrmUDbiP1Vt7KcP1M1Zt/0PSwP1NlP12uA:bFGKOOOntKcotM6whA5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 960 bytes
MD5 105bdb96cc6b74b40916b4a5fc02dc08 Copy to Clipboard
SHA1 434d8abb270bcefaa61573d3cbfd990d182ed6d0 Copy to Clipboard
SHA256 367a6312a04a58175fa270fde1435f28a5f3d0c60f556532caec213ee634c939 Copy to Clipboard
SSDeep 24:UqFuBTpDeSfvnqXi7UDRyq+HeOiP1k5Wmq:bFc9HnqXiAoq+HeLp3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Perspective.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 966 bytes
MD5 19d5158ad6e80d7b35b75260dc6ccf8a Copy to Clipboard
SHA1 84ca901e5ba65739788b68146f5a667928cf9f65 Copy to Clipboard
SHA256 c29b9e19880cd5d5c2495ceeb72441d159f955594ca5474296242b4cfbc8a898 Copy to Clipboard
SSDeep 24:UqFuBVBwRvvNfRDmyN3KfDdfRHXH8wW8gEmjcuFMhRRC0c:bF2mR5RSysb5RUSBGaR2 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 962 bytes
MD5 b99014da66f3f6ddaa9667a5dd451b1f Copy to Clipboard
SHA1 22b8c5ac1186037795dc804a5e86aedd5a6ae4c3 Copy to Clipboard
SHA256 5a61d5a61ce689524d3053ca069d4082fe1bec5bbb704d55768e12b074c76553 Copy to Clipboard
SSDeep 24:UqFuBFn6cRsLM5SHjKguFQsTl0jfF3zPMvW45SdjTJfIi5E:bF6hsLM5oKmbzke5TBI Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 965 bytes
MD5 4035dc2e10615a1dbee3c425c77f141b Copy to Clipboard
SHA1 bf8027a6ace5bb9bd690a013040c82e27820c94c Copy to Clipboard
SHA256 f0c22a5ac3fc9cfbc24303afe5c29dd4bdb201100418869236e556e3d1ae12f4 Copy to Clipboard
SSDeep 24:UqFuBndWBfHH6HAkKJ+69woB0azP1TICVUwscwUQvZ:bFauf7J+EwoCazKHwscwUQx Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 963 bytes
MD5 0ec1c1001d7b3be41b7eb0293c95f77f Copy to Clipboard
SHA1 73271556588ba8277ddf6ef5d908ffce6a2f5dab Copy to Clipboard
SHA256 09439076331d7286f081f616edc4996b5064d19c99e3950a2d95ab752aef2137 Copy to Clipboard
SSDeep 24:UqFuBn7Tr7fjJP8P1In4JP1+2bEBz+iP1VbvowXhe:bFUT3jh8yqs2YJ+i/oD Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 961 bytes
MD5 2e4974721616828ac73f9bf5ab2f5232 Copy to Clipboard
SHA1 2f84d85e324b2c8a72787282b8528b8b44cce935 Copy to Clipboard
SHA256 43476754120303fa6e61f6d7fc435206831995e4a038299e34ecf77be76f2685 Copy to Clipboard
SSDeep 24:UqFuBL6wU4dTbrmUIkiP14rcP1gwZZ0Y3wP1E5lP1wuG:bFm6BKOVurcamiAweWf Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 959 bytes
MD5 90f9627752aedb2dfedea254c29ed7ce Copy to Clipboard
SHA1 18777d990df6fd54baf2abf21d91a68deb20e735 Copy to Clipboard
SHA256 2415849f2f5be2783b91714a5e406bb6a5a76abca9471bdbc51a8e1e68055914 Copy to Clipboard
SSDeep 24:UqFuB8S0ZEuwLFjBu4BgoB2P1fRwmeHN+JmoYsT7:bFDdwLy2gosEmU+JmoY+7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 963 bytes
MD5 9c7c0543e0f86eb66c700ed2aa5e7f40 Copy to Clipboard
SHA1 2e046f3aa526627ad6a94477aa54695002d29c57 Copy to Clipboard
SHA256 fd3fc63cac2f26d7521ea19cad01a40a07711ab5dd99f2750e3d702af79341b9 Copy to Clipboard
SSDeep 24:UqFuBq7Tr7fjJP8P1LxudP1g+tFz4o9iP1FAsOiYhe:bFXT3jh8J4m+tF4o9issOiP Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.54 KB
MD5 eb52e338d037a4a46f98e837d0cd5796 Copy to Clipboard
SHA1 8b3ad7bf55131229d920c1175958bdefc03b2127 Copy to Clipboard
SHA256 445ea22d0dd69dc9bb0c5068827adbc09c6792efc297ca6f77cb8f8f929c7fdf Copy to Clipboard
SSDeep 96:5ilKge+ogxpqouNjkWaH42KSKm+WdyjRt2M2Nq92BJRczCvmgyLI40q1WFg:od3GN0H4F3TWMVt2M2Nq9GHmvk40Vg Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.73 KB
MD5 c95e41cf6bf13ba7f35f41d1c88d3680 Copy to Clipboard
SHA1 f32053aefb5e73f50a8510f0fbfa929cf62155f1 Copy to Clipboard
SHA256 e8170023f0a5f7bf65ec7f4613cb44c21b5c5d5df552b9e979f8538794bd7ef1 Copy to Clipboard
SSDeep 96:5x2Hj1QTQT1K1eDjrEV8cNqd16R9fYix35KasUPGKFRJ3odQqd16R9WWG:+HJQTQT50OcNqORCit2oGKFRJ3odQqOq Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 8032f711902001e6032746192f73f46b Copy to Clipboard
SHA1 7c2d3c82a31a9e42ebf6b8f4a54bca13b7474e72 Copy to Clipboard
SHA256 e5bc8dac107af6eebe72dde388984f777910b19269472cc6a209af101f4ad41c Copy to Clipboard
SSDeep 96:5YiKZK8OSGdF5h9qouNjkWaH42KSKmmm+IkoApSdJh14miYZBow5pXQky:ptTGN0H4F3Z4koApk4mPBoUuky Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 9f2c9fa6dec4a43b1addcbeaaacd278c Copy to Clipboard
SHA1 91cbb8e2aab373758c1e9225cb61280c65e4677a Copy to Clipboard
SHA256 d179009c9b5976106b72b3450abe354061fa6fbbce1a119f8c0286ce110031d2 Copy to Clipboard
SSDeep 96:5HsV8wFQDQKsItPYSzMSuJnCBQEmMstqvOVs1HV8cua4miYZBow5pXQA:ZsV8wFQDQKMaMSuJ8QEPyqvOO5Ocua4O Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml.isolated (Dropped File)
Mime Type application/octet-stream
File Size 3.51 KB
MD5 cd95d456d7de044ecc96f4104aba76cc Copy to Clipboard
SHA1 549c4197671dd7f0acab483bd3b38e2cdfac80fd Copy to Clipboard
SHA256 edbca7ff88681501a2edb7dca49f164a8f63a623ec72cc6cae6cb978a886599d Copy to Clipboard
SSDeep 96:5QiQJmXqNq92BJkCVYVTeb+axRsTSfDVIBpxkQSPuVSqH3Wjyas7cvbiMr5:miQJmaNq9GkCKHRAD0bNbSqHGjtQ2iU5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.44 KB
MD5 e22d3eaefb360a86400365aa6774499f Copy to Clipboard
SHA1 5669cc4435f28d1a9d03e130a4692cd2256045d7 Copy to Clipboard
SHA256 662c9d4bc66b3b8323eaa94279bff86bda343fa10f78869d785b3da352712c38 Copy to Clipboard
SSDeep 96:54A6VnqNq92BJkCVYVTeb+axRsTSfVIBcu/ery8gxpqouNjkWaH42KSKm7WG:OA6VqNq9GkCKHRA0c8GN0H4F3SWG Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Elemental.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.57 KB
MD5 67f4b1c771517a39dded70ddfd271bea Copy to Clipboard
SHA1 ced61f638a9b9637323201c16715591881dd767a Copy to Clipboard
SHA256 1ed72166fa7ea3ee76997e5cb39a07094601b541f73b9d1bbe732bf50d918765 Copy to Clipboard
SSDeep 96:5MAzI8XCGKF4SjQSPuVdPYSzMSuJnCB+FRaPYFHh9qouNjkWaH42KSKmmmR:CAzTXCGKF4TbCaMSuJ8cRMYJGN0H4F3O Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Foundry.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.71 KB
MD5 2ef00dcdcc96f4caf548d587432acf0c Copy to Clipboard
SHA1 10f54c832e31c06835832295f0b66cf53ee4687d Copy to Clipboard
SHA256 880c21e462b550156e02cbd50f3a8313383b1b64b396117ec152bbbb54ffa2b9 Copy to Clipboard
SSDeep 96:51TN3Ij1/pOqv7oSG9V8cua4miYZBow5pXQdYix35N8+1znsO42BJRczCvmgyLI+:3RIJcqv7oNOcua4mPBoUuuito+eO4GHO Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.59 KB
MD5 a2f601b836a6b66b7aa4af1a2a0467cb Copy to Clipboard
SHA1 20f00694256fb8e45993628d619717bb4cf54cb7 Copy to Clipboard
SHA256 b67f9d911d7ef6e0fb8b6031abc8129d8c144bdea0d10daf2de1748f2fccaefc Copy to Clipboard
SSDeep 96:5bC2w8P2sqIWq3oYrxwWc/kuFmWZf/McjV8cNqd16R9VVIm:d1rP2vIZ3oYNFLcZf/fOcNqORDF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 24534ea1d559863eab6bb285a0e41886 Copy to Clipboard
SHA1 2364d80660c322022ef0fd6e5e08c1b75aaffb82 Copy to Clipboard
SHA256 48d5950f185f9deaf47031bf6585238c9e0e959adc7c0460d1cad64b47d6f082 Copy to Clipboard
SSDeep 96:5c9DbvJajJh14miYZBow5pXQ5Wf2qpzHL3/NLlfczCvmgyLI40q1CJOl:69DT8F4mPBoUu5W5zHLVLllmvk407JOl Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office 2.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 56e87cf39261dd3e6bc9448708758bfb Copy to Clipboard
SHA1 68e31706e57645c233ccbc367d882d190703bf26 Copy to Clipboard
SHA256 5886691977f8eee5b25362024c40f141559fd2ada7a39fa166d913d3adf6b2c9 Copy to Clipboard
SSDeep 96:5uiNjRV1bh14miYZBow5pXQ5Wa8eqpxVs1HV8cua4miYZBow5pXQR:IiNV/f4mPBoUu5W9pxO5Ocua4mPBoUuR Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 e7b9cdfa9a08512329d5ecf2ac380cc8 Copy to Clipboard
SHA1 11dce759936f64fbc75c78ac319b4c2ed4464500 Copy to Clipboard
SHA256 1ae9fd22885f159cc044bc0916d430893ae5efd2032bf1678bdae589256bb18b Copy to Clipboard
SSDeep 96:5vgbqNq92BJkCVYVTeb+axRsTSfDVIB62+JJOSpbQSPuVdPYSzMSuJnCB+Fx:3Nq9GkCKHRAD062+JwxbCaMSuJ8cx Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 2062d6d0c3ecf898dcaf8d10fbae38b8 Copy to Clipboard
SHA1 7a1d84987b3cf87f0d3bfc596aa67b3ccc2b948c Copy to Clipboard
SHA256 741aa9422e3632b4e7e00593dc4a32a082f553fd50968848851e4e32bd0ac9f8 Copy to Clipboard
SSDeep 96:5BGTNknRxsItPYSzMSuJnCBZVIB68D24qh14miYZBow5pXQdYixB:zGURxMaMSuJ8Z0dD24K4mPBoUuuij Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.54 KB
MD5 d8824c29462ed682aed62df3196cb4cd Copy to Clipboard
SHA1 855abc3501ee8b6034b20fc78c1e47cee9ff10cd Copy to Clipboard
SHA256 489fd68c959feff60596ed85bd9b5ef9c5d9c249b19b17309d6372e70d262cc4 Copy to Clipboard
SSDeep 96:5gHTjRlKaOhF4SjQSPuVdPYSzMSuJnCB+FRaFOFSpg2BJRczCvmgyLI40q1sSYpa:mHTVuF4TbCaMSuJ8cRfFHGHmvk40nNa Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.62 KB
MD5 55124db1dfa03250b5c86eb4a45090f5 Copy to Clipboard
SHA1 5cc1ce8d0f6b4fa1d60b3922b968784310058d31 Copy to Clipboard
SHA256 a4f0921ee18b20812ac97e37d065ec260b2b92e3448ef9db36947b879223bc48 Copy to Clipboard
SSDeep 96:58TNF/Uxoo/1Hh9qouNjkWaH42KSKmmmtYery8gxNsqH3Wjyas7cvbiMr5:irkoaZGN0H4F3ZsqHGjtQ2iU5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 66ae82e19586cc45f73a051b55e33cd8 Copy to Clipboard
SHA1 f334fd527450c4dcecdf399005182122f2e2a16c Copy to Clipboard
SHA256 14252775797f2fc25eaf81e45b61e9f9693e53c0048de6205b196e42e4a46f4d Copy to Clipboard
SSDeep 96:5iinKJPUzNLlfczCvmgyLI40q1CJgPW+7sItPYSzMSuJnCBQEmR:AwLllmvk407JgPW+7MaMSuJ8QEw Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.73 KB
MD5 77ecf1ca1c9de171f8ed62a071c174db Copy to Clipboard
SHA1 bf1581ec1479834346a6ab9657d826c9b26c82b0 Copy to Clipboard
SHA256 286984731e8b7f6ab0c6c7ba1c797198a60fde9419a9d1ad2866632742b2c69c Copy to Clipboard
SSDeep 96:5tiJ6MKhGWfjV8cNqd16R9fYix35a1C0ADQKsItPYSzMSuJnCBZVIm:DiJ6POcNqORCits1C0ADQKMaMSuJ8ZF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 15591e80d1095dc19bbe5d5b39af2d07 Copy to Clipboard
SHA1 ce8dbf564a8009caa691d7a4dfe15f7427782800 Copy to Clipboard
SHA256 17b1a8044fb8e87e9e78a6eadd1999b891bd5262796992c7a2647c663d523d07 Copy to Clipboard
SSDeep 96:5BJY2qpWFZq92BJkCVYVTeb+axRsTSfuFRaFiH8gxNsqH3Wjyas7cvbiMrdsVIm:TQWFZq9GkCKHRAsRUVqHGjtQ2iUmF Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.52 KB
MD5 afbd04059273191cdb07acda204f33c5 Copy to Clipboard
SHA1 e82ca1a9386acbcd8d45805e2942ed9576945b9b Copy to Clipboard
SHA256 318e85ceb4b58e1bb4d4be355ca71a65a62068ee89e883f7de780d4152012b35 Copy to Clipboard
SSDeep 96:5IeFMpEV8cNqd16R9fYix35KeFZz/3/NLlfczCvmgyLI40q1tYpa:W4MpEOcNqORCitAeFZrVLllmvk40Za Copy to Clipboard
C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.49 KB
MD5 8daf0265eed069ba0b220642804229e9 Copy to Clipboard
SHA1 3d8a2d16b07eb510164f08fa9f9c333cbca181d4 Copy to Clipboard
SHA256 1db567bd376fca89df8650fd19eaa064f45c8087a454a41bdc184997d8bd30cf Copy to Clipboard
SSDeep 96:5Ui9jRkp2BJkCVYVTeb+axRsTSfuFRabQKK4Z1ItPYSzMSuJnCBZVIm:Oi9V+GkCKHRAsRkQEbaMSuJ8ZF Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Groove.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 106 bytes
MD5 8ffa97f744e85d7db7f4b38b273fb75e Copy to Clipboard
SHA1 9b37187b29e98a998bd553828cf09067c2e522f8 Copy to Clipboard
SHA256 5b9590de5f22b4ecc53bc1167c31078dbf2f59ad5d8e8ba94003879eb8d5b67c Copy to Clipboard
SSDeep 3:PIRalSSGLzxkvcgKRJQ4fDvRDi0rgFZXi2BBen:PIRalIxmc9Q4VW0kFM2Bon Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_LightSpirit.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 8.41 KB
MD5 18496c23952973411de059d5042f664d Copy to Clipboard
SHA1 acf5f067c6c7923a0cc397d86660b155d56c8376 Copy to Clipboard
SHA256 b876c74cd69cb97e2b6fa8703c7734e5b8afe6f9471ff4cb90c8106292b83951 Copy to Clipboard
SSDeep 192:G/QET8i5uULjaEtflZBi4yK1TmcEjc+JbQgp035CJIY2SyO6g4d:HEw0LjLplXyK1t+JbQgxJJ/yu4d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_OliveGreen.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 15.33 KB
MD5 0bbef3ed04079888a0e7cb7088404238 Copy to Clipboard
SHA1 c49ee2c518b942304aa1dfef31353c5f3a480fdc Copy to Clipboard
SHA256 65bddab81d95797f5940d42a6fe90de1d084046f91e2037de31a4a19385a217b Copy to Clipboard
SSDeep 384:dIt419Bwbiv1weOnKQg5BK2PqeXN9JGwm2R:dPLa0jyed9Jpm8 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 6.07 KB
MD5 d552c6e90f0520297b72f57c74a611a9 Copy to Clipboard
SHA1 996de849653e7c6e15d845720650f2febae91666 Copy to Clipboard
SHA256 9ffe9d5f7650583649aed5c1bf68d5d7a905131280f5c62cf267d312b67bf25f Copy to Clipboard
SSDeep 96:8GbxxQA+sqAzWW3KWMvOrNgS2ORvoA37+HRXzEqIpf78E3rY+NU044BTFqKhQV:84xwbNW0up2G3yxCz7Y+NUjA8 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_SlateBlue.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 20.31 KB
MD5 9ac6d5729945d989f5b563395b2c7405 Copy to Clipboard
SHA1 72a53f5ed085597b3e37a2a5e488cc2c9550fe2f Copy to Clipboard
SHA256 cd904c09540ea6ee2627022f7906d1accf51b03f4583f919927b14f391093bfe Copy to Clipboard
SSDeep 384:2e0xFM1bAEDLEaSfCIVg+Ca05BrvBNWmhmtvQDHv:2eQIt0a+APbF6vQ7 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_TexturedBlue.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif.isolated (Dropped File)
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 6.31 KB
MD5 cbe62a48f6ce7cb38329d9fd2ccaec6c Copy to Clipboard
SHA1 8d5ee72daf7d20e9bc13502df1d0587442db9f14 Copy to Clipboard
SHA256 b5b0e0f75fa5db11f56bdf04f22823c9cd8b6405c4dba16fee9fb9d86ddf92b8 Copy to Clipboard
SSDeep 96:uZMAvoCUSFIjJ1qr/imChVWJ5IEnrb/8nZpIwhe4pDY1GMm09T6F2s6WKphqnNe/:uZMkoCUj/qrX2sb4bIqjHu+KpENV5Snx Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.78 KB
MD5 f5934e2a6f07b78ed80e49a1b28ff167 Copy to Clipboard
SHA1 9abdab593ee1ab50f6062b34ef408b99c7ee46fa Copy to Clipboard
SHA256 48e968e3b6c10cb8067b93a4ccb1927d24c189b7c280b5117de49cfcf23a00f8 Copy to Clipboard
SSDeep 48:ds6o0KX8fICw8N15vnDrLEna+LAlwP7Eo0d:W6e6Iy15vL8a2AeZ0d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.38 KB
MD5 2e7224161b51769299ecaea4bbeefb86 Copy to Clipboard
SHA1 6c431de6a56c59bf7366cdf7c5498ea366db3887 Copy to Clipboard
SHA256 d36e3c2a398b49dc20f50cfbc406d9b6035b55b6d65a197e83d1349be58f6d9c Copy to Clipboard
SSDeep 96:9k2Et+5i7bHar8Zyx/eWfadshHjPhWuAIrQIvQoi:22seUS8YfJHj5/i Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.06 KB
MD5 5cec7bf9e1e8a0717d56e677296edd4f Copy to Clipboard
SHA1 52c8825f13fc95f3b1609df9a73851b77bff5d90 Copy to Clipboard
SHA256 77d2ca4f7fcb8c929e48390ca30480d0d9031253a4d707d29b838e1b3b578cad Copy to Clipboard
SSDeep 48:zbgmz2xhV53jsqSyY65SE9xp5wcgRiM9suo4yU7PW1jsTWP4W/pdQvfFIhpa+sxn:31zq35TRYcgRNxyULGjsiPn/cahpXxny Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.76 KB
MD5 d70ef70bec5e978d967eaf6fff12025a Copy to Clipboard
SHA1 3ca741c8b4e8d57e6775457eb88c6682a2d3d5b7 Copy to Clipboard
SHA256 8be455465d5d106137265a6fe530f66e913953a07404c9ca30300ba0b1c7c7b9 Copy to Clipboard
SSDeep 48:/35Arb0HzLleMRNOXtCzvMdMdNaJjsVaqvV9hv8PSSkX4QDc:vDFHRN4XOPadsA4VDv8KZoQDc Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 371 bytes
MD5 bf9344e9f9d9a17e8b16101f3e4dbe41 Copy to Clipboard
SHA1 1a6ececb1024c0c1f8738fb5ab9d317131f73a18 Copy to Clipboard
SHA256 a3dc731bf5bc5b82b8bdfc550414affedcf06974b7f2bbf8cf7450427a9f172d Copy to Clipboard
SSDeep 6:n68AXM8oOelP4Kg7chopt0zV14bE3NQctfsYPT9Li9fW:6xMw8PEioptKn3NQORPT929fW Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.78 KB
MD5 3b71b6759012542383d544a70f9e106f Copy to Clipboard
SHA1 5092d48ba112a85081915dd4873837df6b901cda Copy to Clipboard
SHA256 954087b77274f874942b6bd88bc588329b03adeabfa0690b34befa4bdb9423b0 Copy to Clipboard
SSDeep 48:z6ZTvgDJtJzOuTC2Q84pvSVZ3mwT5R5Uw8c:zsTvgDEuMPBu5Rz8c Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.98 KB
MD5 e641c491dde29a7bd6821844e378abda Copy to Clipboard
SHA1 93aa508babd635633bad60b508372635046de2a4 Copy to Clipboard
SHA256 b5103aab9d1692f0f0022c0aa377aae166a4ae6adfab0b79f1b8ca22df1e9fb7 Copy to Clipboard
SSDeep 48:cwZfpTijTIzF6NNYOGURPdU8o4yU7PW1jsTGRonh58PSSkX4Q7OGk7zNpkKl:xoGWLRlU8byULGjswK58KZoQql7l Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.83 KB
MD5 3116f5d5747aff1ea46bc6ce4a32c6d7 Copy to Clipboard
SHA1 1c0f231fa172543fa035b3136df323b2800c64ef Copy to Clipboard
SHA256 45f79cf6ce6006e0d3b5d94e19982696a70f421c061b5e7fff14c14eaf0ceda8 Copy to Clipboard
SSDeep 48:8+3uSNmOgiJmXjhfG8PSSkX4Q7OGk7zNpkKl:8+8yoXQ8KZoQql7l Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.77 KB
MD5 cee7fe2590e4e82283476d7b46b29c33 Copy to Clipboard
SHA1 e8e693b692e4170699b917b22c7211c18b7d5eb3 Copy to Clipboard
SHA256 f20c2e12ca72e9f043db7b7f8a1ae398651e9f5dd683ad65bcb782697eb5cdcb Copy to Clipboard
SSDeep 48:1NLoNfi4JbBWzK8NwiljgFDgf0k2lj6gFVd:rQa4Jk5njgdgMk2lJ7d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.83 KB
MD5 775aaf5f58f5bac1fb10b429a3658424 Copy to Clipboard
SHA1 20c3f6b94a8dc7b868303732ac79d983bb3ec705 Copy to Clipboard
SHA256 9a5eab031c1dc7b7d75ffbf57868c693b704b3ccc92268a97a81e5922402422b Copy to Clipboard
SSDeep 48:KreSS3zqh9LYVCkC9DrLEna+LAlwP7Eo0d:aCq/qO9L8a2AeZ0d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.75 KB
MD5 74ee71c907c6f3542773e0e309ae31b8 Copy to Clipboard
SHA1 98e9f3656ac5fda34023f56ff6e93dab41991659 Copy to Clipboard
SHA256 42c09f2f5a955aea758702201e9a30842401fe6fb0c1b7c15887dbd475bec517 Copy to Clipboard
SSDeep 24:CbS51WL6Ur79ejustd4nDBNxx8G+0VrDEGmljgXVqD5y+yCEg6m0kq7QAkwbt6gp:Cb0A7v9Y6xxyGmljgFDgf0k2lj6gFVd Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_italic.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 852 bytes
MD5 a5ddc043aa159cb2f5f09ebb20688ce8 Copy to Clipboard
SHA1 af50dca8cb09d84668086c318ed46d6be5f880df Copy to Clipboard
SHA256 26b613f4a52bebae66764c5f92be1339aa74837a420a8d9dfb30ac7f8f0633ce Copy to Clipboard
SSDeep 24:LyK54bkTybznR6Q3FALxybxCwDPQvnjj8b0ZQN:L/TEhVIxRwDPQvjj8b04 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_spellcheck.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 160 bytes
MD5 a033be9a258ce5331ddfdb7a4340b60f Copy to Clipboard
SHA1 c6a7a91a63256e5c6b970d97184bd59bb828c818 Copy to Clipboard
SHA256 1d899905ee42078cdf05ceaee86117b691fdaf9c1a4c4877d0be6a4d7277e464 Copy to Clipboard
SSDeep 3:cEeQYYCATj6vzm8lLvzdNcpU0C0KXMHvZ0S+Ju6DuWtUgLMj:cHvATmzZlPPYLsI0S+JuCukLMj Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.83 KB
MD5 ad581bee6b88d577d215c3c6f9f89949 Copy to Clipboard
SHA1 c273edc4bb24354d9e1f4344656cba3a5f65bf98 Copy to Clipboard
SHA256 25b4ffce56c08121e2e8c888944ff5695c19a262df83dbd2754f8fc8bd848d07 Copy to Clipboard
SSDeep 48:KOcq054DJ8IfOnwC2Q84pvSVZ3mwT5R5Uw8c:tV054D6PxPBu5Rz8c Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.30 KB
MD5 707ca69349f0fa7be512e7a8604bf021 Copy to Clipboard
SHA1 98ee859a29739d2875543de2bf5dc818bf63b66c Copy to Clipboard
SHA256 bb6af49607729f87e1a264e028183801a441990e329f68ab3f8d22e4fec1be82 Copy to Clipboard
SSDeep 48:EvDaYCviimojZWMW5eMYxv0lVy6wp3TAbvom4fQAMqXhsFR:EmM4jc/YttvALoHXhsr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Generic.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 7d1b9544211769e77f2fc9148746630b Copy to Clipboard
SHA1 e21bc212f1465f0e06f27c7862ba8cb47a18199b Copy to Clipboard
SHA256 2e6050b8a1719b9ecc928dd6e6bac901292cc172702498dbb0f2731b4eb62595 Copy to Clipboard
SSDeep 48:EvDaYCviimojZWMW5eMYxv0x8y6wp3DHGxEl/OcFtWS1rc:EmM4jc/YtGvmxy/OUy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 226 bytes
MD5 42dcfc9f8b9f2e60f33949661a69c7d5 Copy to Clipboard
SHA1 f2d28437e378c7f33374b1c3a42fd4cfd180f8c4 Copy to Clipboard
SHA256 f2bd6e29e97ac22b08c4bda6a9acb18e308d9092b9ec4da1186efd7177c952e0 Copy to Clipboard
SSDeep 6:GDFVyt1rV+/pKTcpbSDSVvV2rX4pKhTV3J5TmhWB:G5VKBrTc1SDSVviX/hr5TxB Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.35 KB
MD5 092d8c64348fe42c31b7e492127a77f5 Copy to Clipboard
SHA1 636801660f1d99a70b326d433b3f9ad61b810fbe Copy to Clipboard
SHA256 010c13736014c5c6a4eaf4b6acb28025cc1c3620db3747db244355d032475a16 Copy to Clipboard
SSDeep 48:EvDaYCviimojZWMW5eMYxvDNny6MvBTKmpDgnRiQH4dH2041F4uRc1Pfhd:EmM4jc/YtDNy9BTZp8nkC4pS4uGhd Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Response.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.64 KB
MD5 e02803850c74676267e5c9e162641a9c Copy to Clipboard
SHA1 119eb2ecd68159e39470194a7f03d40027607f62 Copy to Clipboard
SHA256 92acba164c2c7b2ea3b25ead90d30ce2452820ba1008a5bc4d952336e29f8a6b Copy to Clipboard
SSDeep 48:EvDaYCviimojZWMW5eMYxu/NYEa8N5vZOX4VfMSNIK+Q6fK:EmM4jc/YgrNHOX4OZK+xS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 247 bytes
MD5 04ecb2c16b066698d596635c456e793f Copy to Clipboard
SHA1 596600eb916f0aef6589fa4dc780acd243b66498 Copy to Clipboard
SHA256 b7167f689448759f8b6c5e20506255ebc4543af0aefc0b741cdbfde753f8fe1c Copy to Clipboard
SSDeep 6:oLubXlgvvJBh9uD+KInq61qtIdVUFjyQMTsZW5uL:oLuzoXh9Xnq61qtIvcvMTUTL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.34 KB
MD5 454d446c4be6016a899fa46e9ef32a1a Copy to Clipboard
SHA1 36c03a767cbd28d812732a3d4cec04c4afc2ea56 Copy to Clipboard
SHA256 548c8603ffa849abb26704eb63859e91e7423b2ca0a6f9670f427009a3ee695f Copy to Clipboard
SSDeep 24:oLB/a0e+/IOnhZtFKIG3HIH6A1LwaBhk4pU50sbllgNS/qoTqR9PZhfPU5orcvJD:4BR/IUZtFtHjLwaBhkgLNhPZhEGcBXBh Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 171 bytes
MD5 4fc153d37e6f020636c70974032cde7f Copy to Clipboard
SHA1 752ad4d489962342ff25719cc1ee68a8be375bdb Copy to Clipboard
SHA256 0bbfa8c49cad5cb82ed6fd37acbb10d57e26b9935e7ba23801ea0a3ee4ca7a63 Copy to Clipboard
SSDeep 3:o7P1YPE+NP8L/hKlbFVtToK3sUGNLwKomQ9giaEWHqwpXoValCAn:oLSO6NToUGNu9gfXTl5n Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.25 KB
MD5 11a465c7332d2882bd84fc45ac7618d8 Copy to Clipboard
SHA1 58532a1624ed3f43be761ffe911e92d6084476ea Copy to Clipboard
SHA256 24833f1d74140fe8ff6e4ab9fa8dac546270d512e398e2c5f02fe26bd386fc9b Copy to Clipboard
SSDeep 96:hM35isSJ6tNZuAhSDYr+adsTVJIrGqZkd/+Smbd:hMJinchhy3xJIrbw/+Sid Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.81 KB
MD5 1d8ae437a1a2d7b4e98e9987b63df412 Copy to Clipboard
SHA1 272aa9157f9e1a645d221cc675b73d3414c86767 Copy to Clipboard
SHA256 41c5cc4f7b414b3f39e3bfdc8c1934a14f8dc38a763727129c02e478f282eb93 Copy to Clipboard
SSDeep 48:H65/3CN7slgGRPjXCZ3FQIoENQmh3BRSvbG:a5/+glfRPGrQIvQooy Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.79 KB
MD5 27f56d66a7a484aaf4d58a1157326237 Copy to Clipboard
SHA1 993d086997d7828c134d543b15ad1b5f6bbce523 Copy to Clipboard
SHA256 53ebb40c4b2d10409867795c1ef86982c92d3e9580bb7381ef485cf80888d51e Copy to Clipboard
SSDeep 48:npe99Yr1WEmSYoquIf87EKtGo+V9rY5OGk7zNuF:npW5sgn9rYMlsF Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\Invite or Link.one.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 10.95 KB
MD5 916440f20d1cb6c89217b4cfb06bc7bf Copy to Clipboard
SHA1 523a54ebf27b6313de765a0686fa0c10c30f94cf Copy to Clipboard
SHA256 6694efcb1ec619a64de8b61743103202019f3043515e29809f6eee61d4a7d850 Copy to Clipboard
SSDeep 192:HBcX4gIaPGsgGdRzU8VtzAVl8Vtz8VU/cX:HiX4/hUnzvAXX Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.88 KB
MD5 829d319e48666be964ee956df9eaae9d Copy to Clipboard
SHA1 3d9a7e19fb2c4c4d15e59974d742078b8145eafd Copy to Clipboard
SHA256 2bcc04def8f5c4a2dd8747f0ffaae044e9cf0ff884f3fc6f272e277ad748a015 Copy to Clipboard
SSDeep 192:eHNjkgIktWF70+Bu0NVwPTmyNNiFpYiCCmkMQZSyrnnsCU:kjkgqF70Wu0MNDitzMQsYsCU Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Elegant.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.54 KB
MD5 e1dd477a6945aee0946d0bb382f6e274 Copy to Clipboard
SHA1 38e9bacfd13c7da34d664405b780a574bcfe827b Copy to Clipboard
SHA256 a41dd4048855d9892eb1aea29c19db2cd60024b6acdf39b280dad031f98432d5 Copy to Clipboard
SSDeep 192:4k+7obZP0wCcfu7wLMnUCZuxQN/lEncoXvGLWWRBiDGw6lu:VpKsfiwLMUCZu22ZXv6RB0d6k Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.53 KB
MD5 4abf09ec370f6421210ea6a767f4bfe1 Copy to Clipboard
SHA1 f9a07fc9214b67adc2f07d80be120497ff6dbaa7 Copy to Clipboard
SHA256 604dbd95ec10997432c839b5dd65de3878e35bfd6c7edb174ade81330706eb33 Copy to Clipboard
SSDeep 192:4k+75vhZU1GAm0xtGS5Yk+cz9wpscHCOkxqp8Zos47TQ:VGvhcGAmh5Hqw8ZosIM Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Formal.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.35 KB
MD5 d1a338f66a5fd821fb330a22bcb67a30 Copy to Clipboard
SHA1 68fab41349229fdbcb601fead28f8983cf1f7de5 Copy to Clipboard
SHA256 d0813007139a3158b4d431e30bdb8fa45737c0911622938376a4221a841d6f2c Copy to Clipboard
SSDeep 192:mMfGJZqSHzclKmutjVvINM3P6Q3SjkkAVT:36ASHYlKXZVvIO3yQfkAVT Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Manuscript.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.26 KB
MD5 63108da8c69b09d1d0668381db141b12 Copy to Clipboard
SHA1 455a97e30c431b6a374bbb46764b30f862cf4c6e Copy to Clipboard
SHA256 b9e73b6fd5cc677822c1dc99c1382263e4e2672c7ded4f7f58b45a16039b8895 Copy to Clipboard
SSDeep 192:DrOFkICOWMCZE6ZMGcwxN+cz9wppHTOkha+:DekI/WM4nZRFxA/H7ha+ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Modern.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.42 KB
MD5 0e4be5ecc31d95bbbabd75ab098a7249 Copy to Clipboard
SHA1 6738b8ea157ab7dc1a7a2df2fc899a3767c44c5a Copy to Clipboard
SHA256 882f43d6a052aa1962a9d1345a8d218bbcbfb4d6225d631dfe5a9fd3874c6162 Copy to Clipboard
SSDeep 192:ZHrQqEAVq29h2h/X2QUd+cz9wpPHyOk5PH:ZHhQhXpH65PH Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Perspective.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 22.72 KB
MD5 45d4f6d23eeb64e88118a19ee052fa18 Copy to Clipboard
SHA1 f5e9e15b85c4e52f3653fc87339484fafd30161f Copy to Clipboard
SHA256 a19fda56779c620928584adf51b6de10ea6c01308262fa7454e0ca07d87ab8b2 Copy to Clipboard
SSDeep 384:01luJcBq9qrrELHPySbGB9ljLxa1ZId/7eSQ1RKX+3JncHoSqV95BJ2uzamwK0:YluP8rELdbGBfj8f2eJ193JcISuH/23z Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Simple.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.24 KB
MD5 1fbb0f3473b438312630cbe33e5f0c33 Copy to Clipboard
SHA1 8af30eaa72d449626aeeab362c44fb658bf1db29 Copy to Clipboard
SHA256 dc7d2b107e213c9f7d403b913684bcacd8a8e5abb348f24fe4190763e3a18ebd Copy to Clipboard
SSDeep 192:v9Q28IVG/JAamGfScadexINMc+A6QNw/jkkufTh:VVPG/JApZJeIOcYQfkKTh Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Thatch.dotx.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 23.31 KB
MD5 0fd5410fbaff23c88a9a3b78fd90da2e Copy to Clipboard
SHA1 9ecf4394ab1b47bb3520035f93c7d65d628745bf Copy to Clipboard
SHA256 b55c44f4a841f323c85374ae7754e1f4a42cec25e6a20854668a4a02b9bf6bf7 Copy to Clipboard
SSDeep 384:vgGdZVa6eDUosTmvOeu2rKiIf1MlM62tRwK9JS8RJGlITwxnVka:vOYoYeDjU2exRJeI8xnVka Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 734 bytes
MD5 694a59c3eb07962f38ce6f06a361b702 Copy to Clipboard
SHA1 a772edabd119cb7f663910313621005e706bdeb4 Copy to Clipboard
SHA256 c61c682b342064d27ba973eb470b8c2c2c83b2b6442e1d4730218def36e4425e Copy to Clipboard
SSDeep 12:NLXQfaVRXEsVQcpcgRhDbHVpE93RU2PmldRyVf58cHD3DRviIn85a:NLgfoRUsG4hDb1pVbEf58cHDNvix4 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\SignedManagedObjects.cer.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 656 bytes
MD5 9f820051ead46c95130cc40495cc0a7a Copy to Clipboard
SHA1 c31defb9a1f45693b522bf11527f693d588a104a Copy to Clipboard
SHA256 1fd2e6504109431013b381e386eaecfd480e0b7e0cf995af3af50ea690ee066f Copy to Clipboard
SSDeep 12:0uJJJfVLJIjllPVzFE1C52jF55Vrmn8dsBXaX3+bDcmGAr:0mHfVelldzr5udVrFdfX3VmXr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 944 bytes
MD5 313ac08705c9ffc7353a5381e47bbf99 Copy to Clipboard
SHA1 e431ef7bbfefd321154cf5cd4542f515fed14a98 Copy to Clipboard
SHA256 56e77f0b87d44fd3d5753997baf88b76ea885d599c2f952546df8cd7bfe0a62f Copy to Clipboard
SSDeep 12:bx2Wd7G17+ZyDgcsJpM3UEq5h5g1F6UUNzC2lFhbD6kN+yPnnYl9cIrHk2Vr0Ja/:ZRywAq5fgN/2DhfNhPnYrrr55AA Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 907 bytes
MD5 63dc0631c86b9ac6933df21cc55fc324 Copy to Clipboard
SHA1 565e80b31e1c68c46b077b465e9348aa8c086d2b Copy to Clipboard
SHA256 4aa339da55a62842f3cbc39751024aac4eed75493b5afa316a8213258c1fdfa1 Copy to Clipboard
SSDeep 24:hhPs6fAwyCzFMetwrjpa3ZRF64RWxMx//6:vE36ptwrjpiRFXhg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.30 KB
MD5 b59a974e4a2cb191f6f80a3123780e85 Copy to Clipboard
SHA1 0c836e5e8498485c9e781d79d6d24dd33beb420b Copy to Clipboard
SHA256 da35e481515c08904f3183aa90c5f101c7a6b4767554bc8f9b07d25468826beb Copy to Clipboard
SSDeep 48:4PyI3n0sam5eh+1jsBZQm05AD2oSxBRWJxagAZ0lora:4PjX0jSBm0NrMJxX6Sora Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 10.35 KB
MD5 7b46277563e12d85e01ceee11937cc76 Copy to Clipboard
SHA1 5926a318a3427bbd8cf49caa42e4721e404522dc Copy to Clipboard
SHA256 b19be50e4f75e31d10a14060333eba06cfc2470d72e86689888187fd69fac481 Copy to Clipboard
SSDeep 192:pN6X0JCTfFXne+izU08FdWknC6u8o2WAecTHB50:pNDOfFur+Wx6GW30 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg.isolated (Dropped File)
Mime Type application/octet-stream
File Size 5.69 KB
MD5 401de225ebf395222c7e69017715097f Copy to Clipboard
SHA1 d3c0f3695f9ddfa2091463de70c3da3da63d44b2 Copy to Clipboard
SHA256 6066da70cc535f5929f08f7a55619691ea92ac66f6d4cee016701e884dfb6e46 Copy to Clipboard
SSDeep 96:7s0tyT1/9qWEephrKBkQcEMgHbGHiFZGGhE/Doyg4/EYGxJCz8CBb:hW9gepUBkQcOHoiFtMDoyg48YyUYe Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 7a52b3ca61cff6befb8f7c3a1e9edc8c Copy to Clipboard
SHA1 5737b13e58febbd23bfa6ed7a5c3d3fd6e90d3f1 Copy to Clipboard
SHA256 2c1ccdf35743dc0aa3ab25b7a0906cf5dfb37484ac53cd47aa3c2eaf9ace1423 Copy to Clipboard
SSDeep 24:h+rh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2orwbIlULu/mAh:83n0sam5eh+1jsBZQm05AD2orhU6F Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 10.51 KB
MD5 06bdcf21b2ad38168b544a10a404acf1 Copy to Clipboard
SHA1 5cc11391ea575091e7c02ef0ce30d6dd63013a56 Copy to Clipboard
SHA256 e188644640e5f433216f319bfe7958866d5fe76e9caef4389711040b829602bf Copy to Clipboard
SSDeep 96:d4SkY6qCWJ4sQ3HlMELh/a3wavTXAN0MbiZAppppWNDdHONSmZ2oreoFxWCsxv:au6eWsQ3lt/arXAdipDdHGPrLg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 13.52 KB
MD5 e6edeb08766cd552e1899cabdd09f95e Copy to Clipboard
SHA1 dfd3247f96bd9325f7c7c164cdd83a2330af45b3 Copy to Clipboard
SHA256 948520a1507a41ac44d7efd9930bd5538563f94105bea55791379a93ee9d8aa2 Copy to Clipboard
SSDeep 96:RX0jSBm0GlWZonH0WZoq+ZunkyptvjzcUEPFEPSe:RkeelOonH0Ooq+ZQtPpEPFEPz Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.97 KB
MD5 12696dc4f79357a1c2e37f9ba647f38e Copy to Clipboard
SHA1 c4e4953cee4fc69cf17eee506210f51da03c7740 Copy to Clipboard
SHA256 f40c8190c9ed8cc5bb9bc70e2fda2bb3a6393c486a9cc834b887594b96769092 Copy to Clipboard
SSDeep 48:nPFhLjfsQE9q26Y6qiQMCbWuQjpGFqKc2nZuyie0+Oh9r5Fpf:PFhL4S26Y6q7lIivZuyiyOh9Tpf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.74 KB
MD5 abadd7b2aa00c4034b8d33df592a6e66 Copy to Clipboard
SHA1 16876798e1ec5728334e81aeaee037d459be6075 Copy to Clipboard
SHA256 64e1b4a416ac55802d6ed4bd20b8da93ab2d03944a5288e6422ef8b3c6ca641e Copy to Clipboard
SSDeep 48:R3n0sam5eh+1jsBZQm05AD2odBT8pqi7bsEANdUaJTgx7/MwOAaKT8gkJlY7w:RX0jSBm0vZtV0cNVkJy0 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 16.17 KB
MD5 7a1851c7da5c51b7eba4d96d7f44cad5 Copy to Clipboard
SHA1 9cba86f293246682f8a439bf91982b3ccb63ee8c Copy to Clipboard
SHA256 03917c404e5eed37b6be99a13dc9dd7d7fcda628e50e529f08e66a43011db6f8 Copy to Clipboard
SSDeep 96:RSW1KbVkvppppppppppppppr2NhUtPxVNbuqMeci2IZYfhSIFkNuzDgXiJVHdaTy:RS6SrNOwpex2AIuAz/E/Ti Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 716 bytes
MD5 c9734f998abd19e84e84dab237362ace Copy to Clipboard
SHA1 3e1a2e34221610183b33b2440b15a39b0b6280d2 Copy to Clipboard
SHA256 fd3128a6f0d5d71a02d03ad5d043a6255794886247f3858c17f72460b932ad2d Copy to Clipboard
SSDeep 12:QhUd3EHYWZN+wFSoOOa0x9wyrw/g0tXeyMzTkiILXcSWlull0Hl29:uy3E4Wz+GSoq0HG/g0Q9knL1vlN9 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableUpArrow.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 775 bytes
MD5 4544ad6dd727d9abdf6e57eb5fbaa019 Copy to Clipboard
SHA1 4492512c0442fbd55d9ad04257f0fd22dd99418e Copy to Clipboard
SHA256 6bd1957bbd52482d23298bc9eacdfa331c58dbe4eff515a37dc0eaedf519a07d Copy to Clipboard
SSDeep 12:QhUd3EHYWB9meDcpE07JdDAi5Alt9qjfcla+sfOhs1YQJRY:uy3E4WB0EX07QlOQla+161j/Y Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 872 bytes
MD5 74fb7b2b8ab23554daa77aa1ed7c5d8e Copy to Clipboard
SHA1 5e653abc9a09567f738467a59a396ded6ec22d2e Copy to Clipboard
SHA256 4d4de0ae5b97ebfcba6f7c500c13c176c9d5510825af6cf748ab84775f6902af Copy to Clipboard
SSDeep 12:QhUd3Su3AU1hAd2ZQimaM83amQrgO6r4ToV3zqN7YZ0tKqkcTejOP6sYeVDWe5BI:uy3S4NTEaQrgO6rqlJ5ejYY0fvB2d Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 4.81 KB
MD5 2e53d2c9db4fd6631cd3c0a0498d54df Copy to Clipboard
SHA1 62d1f6c077ce334ebc9378d50fe0e4ee1166ee8c Copy to Clipboard
SHA256 a9b34c76d545d787f30da2a332a7ef4523cce4894de8adda1b0160b90b3040d9 Copy to Clipboard
SSDeep 24:3H3PVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVH:3Xl Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 4.81 KB
MD5 1b512c98982cd0e5374b2c5fe1ab3a7b Copy to Clipboard
SHA1 589b026d235317ac652a4f722cf1bea018769aa0 Copy to Clipboard
SHA256 cf0eae32d802968e3c1eb1ca3a6948004fd9e639d3383e644285e1405619fba5 Copy to Clipboard
SSDeep 96:M35555555555555555555555555555555555555555555555555555555555555n:K555555555555555555555555555555l Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 7.55 KB
MD5 e1627a6a2234e933abbf18b0ca1fea4f Copy to Clipboard
SHA1 740dbb47cdb6c70a7c7ec02d6256234d5b37500c Copy to Clipboard
SHA256 f8cf48a0e1208172132f94d0bd22ab41834166f1a62f9c55f24a6583e557c60e Copy to Clipboard
SSDeep 96:3wscbh21t7zcVDiCVLwHXN7+OuD2ppJNY7rfWUgOrU+0n5L6+tRnqb4g/LaNKYs/:3RcILAV4yEp8rfaQ+XqcgOlqa4Hzuvs Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 20.50 KB
MD5 d64d9a8b6b68af50b6a6096d531cd0d1 Copy to Clipboard
SHA1 e19caf2bbf3527b29ba3703f0b43b1ad37430a95 Copy to Clipboard
SHA256 f477d45ed39b703153ef01d64b4cba7fa4957bdbf2e598c4bebfa16f0c31fbc2 Copy to Clipboard
SSDeep 384:Rso0lmdc/RdV1LB7b0+ggBpT78ajWvGN8C5+NUSJYTu:Rso0lF/h1Lp0+z1ga4GOSMUa Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.03 KB
MD5 0f112934459567b8c3c1161ec9592c52 Copy to Clipboard
SHA1 1c2d062fc6951449c7dcd5af636b70431c47b97c Copy to Clipboard
SHA256 fb99466445163c87012994610607ec330001f2c33eef68aef3f3a45551117a34 Copy to Clipboard
SSDeep 48:yxPFhLFflQojOw1Ew9PX4IpJKwCd9AfgY/9OopfWmY5OLb6Te2MOSaF:kFhLFflfqWEg4GJed9LOjpfWbQb6i2My Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIconMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 0dacfcc7201afedff8e810364c44e230 Copy to Clipboard
SHA1 fa8670f31ab08c0fbcc03351cd50d4d61f45ff64 Copy to Clipboard
SHA256 38fb9fc2529666173fabe8b6ae5f539dc5981f16bc1b68ec514bf98e7cbc779e Copy to Clipboard
SSDeep 48:rcgx3n0sam5eh+1jsBZQm05AD2o4a9FsEEEkdK:nX0jSBm0yFsEEEkdK Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 25.24 KB
MD5 ccf3b11e50def85f8636c39aed1c1e14 Copy to Clipboard
SHA1 c307dfbc9b31254e4005552d1e4c942c7d5eacf8 Copy to Clipboard
SHA256 63adaadca894d199a35f66b1ad3fd418dfb9f397feeb6fa35b4219ac94ca0d13 Copy to Clipboard
SSDeep 384:v52Ji4udTBo2o2w3XB2n2Pds/3AWUHl6emiPf:v52aQVpePAWjemiPf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 5.55 KB
MD5 6b6caaf58c559a3dcfc74359f9f8fa67 Copy to Clipboard
SHA1 2be24e23e15bee726096548802c8bf2828216cfe Copy to Clipboard
SHA256 bd409a92c3bde49172f7fb73c4bedd9295c6f55bf9a1f0f13791efe0c4ce91a1 Copy to Clipboard
SSDeep 96:zX0jSBm0b44SYrxEV2YesoIDLPDGbPBJbK58wzdvm0VzcwH:zkeD440V2cjMATXzcg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.40 KB
MD5 f19523aec7e11ef985dafa105b06c1fa Copy to Clipboard
SHA1 16a1dc4640c8cbe0aa3132c5e2e640be8c217612 Copy to Clipboard
SHA256 5f319e5e132d0240f727332717470371b146277b53f7948f11b6fdcad360594c Copy to Clipboard
SSDeep 48:pt+Vcyghh6huT7FAScC1tG9uYZaEENvtaIDjODRtJm10RJKxYhxk6RfF:zscbhZL9yZaEENv40jODzo0HKxYHkuF Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 66f846287b2210f1accb013a67cf9672 Copy to Clipboard
SHA1 8877eaf7b331d3e72793e7219460094f088c0d18 Copy to Clipboard
SHA256 777bb87341d8e4dc98808c9a288fbc30f21ffd623d71d56e3c09dc5f5f857135 Copy to Clipboard
SSDeep 48:rcgx3n0sam5eh+1jsBZQm05AD2oMhlG8nF9KOwXL:nX0jSBm0RljnuDXL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.80 KB
MD5 62be65f7b9044a77df022b3b281e0d0f Copy to Clipboard
SHA1 cfbd8b237e44897ab519289d3887a17aefe01979 Copy to Clipboard
SHA256 f1cf6ddd191d501c768f8784fde2ca1b40c80cc149c7488c90581ad7ae9d853f Copy to Clipboard
SSDeep 48:5Aj2t1COspJkCb3ZeB758sOYbbUYfbg3k1G1P4gki03W6ydDQBMxGJKf5CLLU6yo:IjBpJko3sAAbUEbg3Vx4glsyB4LYRux Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.31 KB
MD5 fa1b6e876688acfec2327ca75a20f59d Copy to Clipboard
SHA1 7f0e74df4ef223d8e510bd544e9084a5d66b2877 Copy to Clipboard
SHA256 cdec2b669835de72a49d1332e178b8f0fd054abdea33e4af5525eb9efba61607 Copy to Clipboard
SSDeep 24:LyKgrrttgggm++bt++bZiZiZiZi5vsvsvsvb:LyN++x++Nzvsvsvsvb Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 9.50 KB
MD5 b4e313a596c16fbba54fcac399f9f368 Copy to Clipboard
SHA1 dc4d882525d38db99374fa4a4f973f16398e01d3 Copy to Clipboard
SHA256 7af0480b2eda7dcb55f5bdce89d86928ec23120ebf6bdd82198f1b276c33e956 Copy to Clipboard
SSDeep 96:8mzA26Y6qxCaZdF2gqO9rMzFjeviOci7LaJ6u8SM6sppppzZH+D/Ql35+hxSw:8qA2/6barx8evai7a6u8R6Wj5+rn Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.08 KB
MD5 ea70f5c80ea419199b9cbaf728c04ace Copy to Clipboard
SHA1 0332d2ead18e5eca74d0f7910c19bd56dcea99bd Copy to Clipboard
SHA256 79c1ae076af34408471b0e5f5a23056d31a4a48ae35aeb48e011554974faf780 Copy to Clipboard
SSDeep 24:uOqaGlfBEQ/Sc0KvoK6D/sp0FQSMKNTj2RP+ZeQKxzdD3Iwmyg8Y:uOLGlKcBwKYseFNrR2RmZt8t+5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 21.05 KB
MD5 84104134b76d765949a1882801683d99 Copy to Clipboard
SHA1 614d3274f50a9ef2cedf7da8ad9c098650955f67 Copy to Clipboard
SHA256 7f086fa1e6ec8d90877d42159c1914cdf1f1deb2f1f9757c78f78704c2bc5a91 Copy to Clipboard
SSDeep 384:XiMh6Ze+7NHG8pyDBSLDhV5olg5diyWRM6PpWinKUu:XZH2A1Snee5WRlW0u Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 6.40 KB
MD5 6e75fb2ea54380f1d620050e219e1d00 Copy to Clipboard
SHA1 97e6d5779bc2bcac104be5845cb7984443ab2fe8 Copy to Clipboard
SHA256 ae78215d9ef1f51a856a3e5e881dd51fb510b90aa554899aafc816aae692ad94 Copy to Clipboard
SSDeep 96:es0tRx8+VmABUCQDfHJW/JFidXcBq3g/K8YP6fQVTDZ75bs9X/ZfWqG7ZW1m4W:wvpTQDfpWxFidXcMj6oVTDZ75w9XRfc5 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImagesMask16x16.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.05 KB
MD5 1e329db827a9347fbfde4b175afa56f7 Copy to Clipboard
SHA1 80da95ad225d212529df565532c4b80615064b63 Copy to Clipboard
SHA256 017367f86ed8c91deb61ecccdf9860a5c8d7f58d387aeaa50dbdfb2e9a22352f Copy to Clipboard
SSDeep 48:ER3n0sam5eh+1jsBZQm05AD2o2JiBZdqJc28NaQUJTbn7:ERX0jSBm07Ji3dZNlK77 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 89612b1a9600bee6379b77971f61691f Copy to Clipboard
SHA1 2582c3e9983bf721d0a0316121adee7a5d181262 Copy to Clipboard
SHA256 737d67c0816f644bc6399e707ba517b90086f529b1418eb52b945a87cae90544 Copy to Clipboard
SSDeep 48:rgx3n0sam5eh+1jsBZQm05AD2owd5UG8UZt:wX0jSBm0z3pr Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 13.04 KB
MD5 b64efa9aefa3da6d381a9f8523eae5aa Copy to Clipboard
SHA1 3d308eda9bedb93a2cef960a1e875592c4c7f403 Copy to Clipboard
SHA256 b54676a57cf2972d0dbde305fb0951cc9c3feb6197cafd0d8ecbe3882ae2af33 Copy to Clipboard
SSDeep 192:76cqvYLQ1ZoESTH+CfzE67e6zKIOrm4a4bFuhahCeY/uYonn:7LLQ3wKCbHK6ztgmcEGxXn Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 15.91 KB
MD5 4e81e006f714e88ce65adbf11ef5af8a Copy to Clipboard
SHA1 ad152f0c7ba06655de3772297d4ca0023837c12b Copy to Clipboard
SHA256 c7e18fbddf595d20a1103d696ac688b12ccddbec21ac65d9148c7f60c48d0635 Copy to Clipboard
SSDeep 384:7QMkuWiTmVXtbNtMSv2WZ71+fbjqdeFs5Yx4bx7D:7nbTmVSgBknsoG Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 6.82 KB
MD5 102084a3bd2ed04e337b53115ed88446 Copy to Clipboard
SHA1 de6f7b9f0347d80419170f8d201dd5ad43b85574 Copy to Clipboard
SHA256 15e655cbd59c805410baad6a8cf6da561eb93ebfd9ffa460f636268fc9e4b6fb Copy to Clipboard
SSDeep 96:/s0tZoVDkAb9J0VUSCxAizBfFz3xBEJl8tPMFRpfIDM/NOeoK3SsF89hWTe:dmLQCzBNzBWVyDbeoKpF894Te Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.87 KB
MD5 a00a3c51836cffbde24073fbdfc59e9c Copy to Clipboard
SHA1 fce541346549e0438dbd85bfb63046ed29124c8b Copy to Clipboard
SHA256 c4e1ae4b00cdca2751dc15d92186ef9dc7365b36fa14926f465ac3741f65dcb2 Copy to Clipboard
SSDeep 48:Egx3n0sam5eh+1jsBZQm05AD2oQTR2TR2TR2TRs:DX0jSBm0zTR2TR2TR2TRs Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 17.20 KB
MD5 046c6c953f70bd5664781b9231f8be65 Copy to Clipboard
SHA1 4ad271fbd8229e7318f2a5c7e75795c670b6bfba Copy to Clipboard
SHA256 fb122032ded4406111d96f0c81aac87908601b90e493c6cad05341a4c2b41b35 Copy to Clipboard
SSDeep 192:/S6CnlmtEuajl9Ywu51EAZkX9237TZ+58BoXtlgI:/pCnQtETe68p+5b Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 12.83 KB
MD5 2b5ad6e40f26b8cdb97aff8aeef3f5b8 Copy to Clipboard
SHA1 89fff4f770cc93866efcff7a7419ce8655ee9d6a Copy to Clipboard
SHA256 a276e7d83752dc0a7361892b92c1f6e13f8e9d452bcb344528c714802ae91f9f Copy to Clipboard
SSDeep 192:s20Z68mgbmv1de+WicymM1W/6u8JQWve02sq+Na7IXAnW:s20Z/bqQyB1E6RvQsq+N6IXAW Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 11.87 KB
MD5 76b698a7e59928c3305a341067e589f5 Copy to Clipboard
SHA1 b4e5fcb13d298200da6aa2775faa1119d22d9d0b Copy to Clipboard
SHA256 d164f8b5ea44cea8f8868b1fb6ccbe7d74732a7cdd1db9f4d5b45753fe8756cd Copy to Clipboard
SSDeep 192:M4Z68mdkJZQHfrzjZPkPeQJtkB2PRJ/2oe:M4ZzKFsj5//2oe Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 4.95 KB
MD5 19355abc973ffcac980432d9c52b36f6 Copy to Clipboard
SHA1 89a72d289a1b00275f95237b1df02f744d3208c8 Copy to Clipboard
SHA256 a4947ee677cb16c46d3de82aea0762c5a49ae807380a1068b3842c6ce5b09bf3 Copy to Clipboard
SSDeep 96:h9LaKJjVYfQXfl7cUL6NCMq/WHu8K2ypjb48Z6Xi8vCrFo4oofqn:/ZYQtcULCJPHuu8cQSgBo/n Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 16.47 KB
MD5 ddcf6acdd8060ca14a40fb544ff62b9f Copy to Clipboard
SHA1 238612edf838518b419e70f514fc81572f13e73e Copy to Clipboard
SHA256 be4b866a16fac3eceacc27e5c91fb114973a82d46ac10bf3f8c159bd6360be85 Copy to Clipboard
SSDeep 96:/SW1KKfTkvppppppppppppppLhQibHgZfjE2NbXOTmCZq3M9+iw4/m1DWhtz9ANr:/S6vTeQiMZLE2NbXTCiKI4/kWJ8y5Q Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.46 KB
MD5 e8cd223f386528989c7011726a065b64 Copy to Clipboard
SHA1 d05444fca2626d0fa393a8f470ebe27f6324a913 Copy to Clipboard
SHA256 90c3bdd3d94826db9a9cbc79efde5d0275a5376de9f904f2d270642f706d251c Copy to Clipboard
SSDeep 48:qBI3n0sam5eh+1jsBZQm05AD2o1YhR3vRTh8:/X0jSBm0dR3pTG Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 11db8437b504a025826119165a87a768 Copy to Clipboard
SHA1 c2fa7d47d53c9b3fd28bd03257f2d6c88518d945 Copy to Clipboard
SHA256 19dd7a8ed8fb326a82d3b9e08b05dd2727251ff2b4e9173a32c0f8b2e93f51dd Copy to Clipboard
SSDeep 24:bwQ3Qrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oVT5NOnyAYh:bTI3n0sam5eh+1jsBZQm05AD2oFOYh Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 7.47 KB
MD5 23d18cf52392633b85b877bfc04d0551 Copy to Clipboard
SHA1 7ee7edbcdfb5d114159d8bf8e78fd8e35ab44b59 Copy to Clipboard
SHA256 8dbf35ba2258c7c98751cb89a3324c71596761bceb27ef9cf6ab7172c45878ed Copy to Clipboard
SSDeep 48:IsoyxB1P6wktZkNVBkhNxewfW0sgnmOYSQBUZdrJmqRMCRMCRMCRMCRM9lLc2ndV:cyxB5akVBlwfkxumqppppk7dRxSfeQ/8 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.69 KB
MD5 bd28534cc97215c584c619613d2bd714 Copy to Clipboard
SHA1 0dd9b217e31f1aaedaee9663d702dc296bb73f44 Copy to Clipboard
SHA256 259bffb06b5553e9c434b9ed9da56d922f999560ba28fc346668c91cb0bb69ed Copy to Clipboard
SSDeep 192:Ba6pnn0f7tMZMJ8G/S8SVWSBLHRaj6OfMucu28/9:Ba8n0f6Zg6U+OfM4 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.46 KB
MD5 98c6cae154e5f35df5df401138535700 Copy to Clipboard
SHA1 f0f5878c71e6db588e96ff38578306c5690c643e Copy to Clipboard
SHA256 cb9fd7fde922fbb537c1718ce147f6c9acc8b0782dcf0fc5f56596e73329c91b Copy to Clipboard
SSDeep 24:viN3Qrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oK9iiii4A9:qBI3n0sam5eh+1jsBZQm05AD2ofK Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 7.46 KB
MD5 2510a2be93d5187d48b3a5d5024e834d Copy to Clipboard
SHA1 c05c4973b51d98d083296967b3deb0d0c62ba083 Copy to Clipboard
SHA256 998082a545d61d2ecf2bcc1ff5df9d8ab5a6f9035bd32fe2a30062fb970f68d1 Copy to Clipboard
SSDeep 48:ICyxB1a6wktZkNVBkhNxewfW0sgnPOYSQBULdrePmqRMCRMCRMCRMCRM9lLc2n3i:PyxBGakVBlwfkstPmqppppk7vM6DtGf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 9.90 KB
MD5 23ebddf698b1f0fd1eecfe5cd74d3128 Copy to Clipboard
SHA1 d5e344de35e3235cfa7942c9c9e50d3609892dda Copy to Clipboard
SHA256 e813982270fc75d81bfc719961c54b24274ee8f5f2f716e53a3fe649264e7288 Copy to Clipboard
SSDeep 96:uQNY6qAbJPrlxBpD3pUmmyDUsUfYsFhqWEA24tG8qFzA1RRnvMppppIJJkzZdsjQ:46t5rxpCmmswggzew3vVYzZdaE4y Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 192 bytes
MD5 0c0193408d87cf65bb49da59d4499846 Copy to Clipboard
SHA1 3ccd5df09ee8ab86e37331a1b1f936ae57131ff6 Copy to Clipboard
SHA256 5baabc01ca64752ddabd5f441cce3069feaac983bd6662d3664b7958229ed93b Copy to Clipboard
SSDeep 3:uWnjgVwzag6WA9yRdp4WTapy4yKA5J0nk2/OUsjLcHzCqUmQB:ZnjgVtg7AQR9a44yKAGOjATCqS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 7.98 KB
MD5 d9f35cd5bf8baf4e0b716fba799bb30d Copy to Clipboard
SHA1 3f10b2b7ed80fec72904f9374f78392976b73390 Copy to Clipboard
SHA256 aad8b92eb69919736fa34e728091a57febd40b9cb46b5b79a94c1826a4bfc2af Copy to Clipboard
SSDeep 96:+81Y6q1+LhhvxdJfF58SA7kO62NgY4tlVLsbqYB95kkQC:w6pLn1UkOpP4twB92xC Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.00 KB
MD5 045bed66307e17c730fddc17e6a9ba76 Copy to Clipboard
SHA1 8dd7c26f3ab131f32a7ccb030b6cd22c520e87e6 Copy to Clipboard
SHA256 cb72b3a6030ed80307ace57b0bdefd1ff0a1bcefa11cb3cdd146b6b09f618311 Copy to Clipboard
SSDeep 96:W08s96Y6qIhkkKMEJB2Av0MT3v0MB0MzY3RMs/zb+ZBBq7DiXZTD/QlL7rc:59/6xV6eAPd/sbb+LBq78ms Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.53 KB
MD5 89c4b1c6c3967437962384c26d3e14b9 Copy to Clipboard
SHA1 f5b8bad8109ba3c94e5af28b61b15a2b95217eb2 Copy to Clipboard
SHA256 d0bb368422524eb4be32f892c240872ddd580981c442c824978e980d0436f295 Copy to Clipboard
SSDeep 96:qFhLqgOk7qWEUivbphQd5M/NOcO0dY5u8xipn:6q3Ig/bEjbcVdYY2e Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 14.31 KB
MD5 cc9abb6ace68e81aa9cb64a60e4289f1 Copy to Clipboard
SHA1 5ac39dc94d1b114fe68ed3229c4bcfc9e5573d84 Copy to Clipboard
SHA256 3a698fcb96087e1a91c151c4c30f93f4234da7545a9b4f64a77b18b0920e348b Copy to Clipboard
SSDeep 384:4To+RH6MV1uuEBqaC2dbtCrIfUcgaq6HPlc:4Tt6215aqCbsrIfUcgabHPa Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 9.27 KB
MD5 1bec6f85b58728a7c721f92b8ad246bb Copy to Clipboard
SHA1 d208bdafdbe3d2affb91c19e5da3094ca608b3b7 Copy to Clipboard
SHA256 c6c2963f8d172938f248632666c810a788b6e4275ea1937674d8a1d7ea7ea158 Copy to Clipboard
SSDeep 96:WeY6qzolHEUV4tEMENREenaJ6u8Shi2sppppzZ+/QlrKqkPwRY:G6/HvV4tQsD6u8YfWIRQY Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.16 KB
MD5 e8e97c484d12e2e7ca75c7fa5bec12c7 Copy to Clipboard
SHA1 2a435a0083741d63f5ee1e9c50c873977284b60a Copy to Clipboard
SHA256 dee9d6d06ac3e4bdc22a7432672a8e870bbe3f829995743102a9cc0ba75d0ef0 Copy to Clipboard
SSDeep 24:Vgjrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oSRFsdQjZvo7Yu:Vgx3n0sam5eh+1jsBZQm05AD2obmjZ3u Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.16 KB
MD5 8b458fd6dd34a12637e53fd83e0a43b6 Copy to Clipboard
SHA1 e5f30e14877921bc271f3256697d129a2d93b969 Copy to Clipboard
SHA256 d1f5e16b42a0f64008d26e20f124d7551da47dde161daefc325cf85ec2cad1cc Copy to Clipboard
SSDeep 24:Vgjrh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oSRRmsiN9:Vgx3n0sam5eh+1jsBZQm05AD2owmsiL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.39 KB
MD5 1ddb4a8107445ce7f9c2e84986d55a86 Copy to Clipboard
SHA1 7a64757ea481147ebb0d3fdd2122d3d1d7159920 Copy to Clipboard
SHA256 78b15486ab7e038d9a6ed78daaf4c289e5e3e87e711c6bdc0ee84168b4dd1a9c Copy to Clipboard
SSDeep 48:QPFhLjC4WE9w6Y6qi7x6kZpfWm1CxLo6JvI:EFhLu76Y6qK6apfW7o6m Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 116 bytes
MD5 f0416e874466e43f15ec998c1a358d1a Copy to Clipboard
SHA1 bccff166a31102fdadc5eb44cafa75395886fb7b Copy to Clipboard
SHA256 3e2d670e34508cccd4cd47771ff65797a7ce0627dd6aec9851206f04f8228342 Copy to Clipboard
SSDeep 3:+Hz7nt/or/kjgVwomUFk5SfSfSfSQB624OgMn:+HVPjgV4V5UUUy240 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg.isolated (Dropped File)
Mime Type application/octet-stream
File Size 2.98 KB
MD5 d773b520f4a9089c4f02314f89810fb4 Copy to Clipboard
SHA1 10a8d96a68569aa8685ced740b21a407c63ac2dc Copy to Clipboard
SHA256 04f7653c32946433b1f0780977bb3caadd55bd82c024660d6f3839758d879ccb Copy to Clipboard
SSDeep 48:HNt+Vcyghh4SrISJE99Y6qilv4beLjzEV7fWm3W5qsdxcE7hf:H3scbh4rS2Y6qwvW+zEV7fWIW5ZcIhf Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrowMask.bmp.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp.isolated (Dropped File)
Mime Type application/octet-stream
File Size 2.29 KB
MD5 7621e005175df85e9e85c44d11eb0d4c Copy to Clipboard
SHA1 75ecfe7622e7f52e2db9d72728ded0760fcaaca8 Copy to Clipboard
SHA256 d70a77c83b3f60e21fb5887fbd4d41fcce4bcba35a0c2fc41c91e187ef721bc6 Copy to Clipboard
SSDeep 48:lgx3n0sam5eh+1jsBZQm05AD2ojfsCd5YQq11RAsZL:qX0jSBm0MfsCd5pq11isZL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 2.73 KB
MD5 6e2c6645974ed65807196593aead3505 Copy to Clipboard
SHA1 9adf85665655588a06530d7846c266569dc5ee07 Copy to Clipboard
SHA256 a0493c3daecc66c7413b3478befe3f5661b1c2d76241d211f72541e305eebf92 Copy to Clipboard
SSDeep 48:WLFt92cMAm96vvpqLSS+uYmr4PqC9s0cBobNgeIDyyV5Siru/Ae08HEJuOGlEnV:WBtEcMA8MILSPmr4ysOobeeWyy/SiSVw Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePage.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 46.43 KB
MD5 809e7eba50ead2e7a13bdfe81aa5c13e Copy to Clipboard
SHA1 5e769f7857f814378ad43c248dd89ff396495a8b Copy to Clipboard
SHA256 2b14e66a39a64c37c4bde62ea96b198b187d122c9c28492dbe23736b716dbe67 Copy to Clipboard
SSDeep 768:NEx2uaNZDSBXPeMbHA8rgzJDZtBVEIC3BaCUA6wctp4Mrp29NhccL/nICvhmjBOB:2EHZyXy8rkDZtBVEBBaDA6wcABhICvky Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePageBlank.gif.isolated Dropped File Stream
Not Queried
»
Also Known As C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif.isolated (Dropped File)
Mime Type application/octet-stream
File Size 19.68 KB
MD5 06887b0469c7607028ebc92caf5922d4 Copy to Clipboard
SHA1 8ebacfdd5ed5f43d96c82361e615db5c1b1125e7 Copy to Clipboard
SHA256 909050a9dd8982aa16e60d20cbe0a882569a2c38f5a6ac1ba65e2cd3a3ef5e67 Copy to Clipboard
SSDeep 384:DnmsW6cGKa9TorFH18fvpPai5OT0GT+ZVgV0kNdsfhtY7MWCgiSI7:TW67r0qpy1BTMVw0usZyTCgiSu Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 630 bytes
MD5 a154d342c088a4fda278089633017719 Copy to Clipboard
SHA1 762b7b203efdb56f541cdff1f01a12e2f8786914 Copy to Clipboard
SHA256 a71b0179fe5b55feb65f8ae58219a1b58e3687c70bcc267ec900bf46ea4dca07 Copy to Clipboard
SSDeep 12:PPkGAhB4iaMWebLKrWce1AWNtTKztOv/w+JWW40vSzUgOLQuC3:PPSkiaMbLKi8PtkHWL0veUdL23 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_disable.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 230 bytes
MD5 d5c9f907c8b1837cf963407ac18e507f Copy to Clipboard
SHA1 6ecdd48ebf6d421f6d00d0260133d4c595936094 Copy to Clipboard
SHA256 8b99825a829912348956053cb9202b7f39c67d9c3b3a708b107a3ce8ff28ac46 Copy to Clipboard
SSDeep 6:PRtwnKlTl9SpmMmr1iL+0NbJT2iT5DuB59gYTKb3:P3w297ozTvlihTm Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 185 bytes
MD5 2d4d6bf5c0956ed56dd6ea28e0987cb2 Copy to Clipboard
SHA1 b61cb5add2f29564d3ffaa31e02a4febada1d505 Copy to Clipboard
SHA256 80191eb0b06bac70c1fef3d470b91b1d74043ce6e858c3dd655d20fa92abfb5f Copy to Clipboard
SSDeep 3:Na/NbVM53jwlRIHCC9ZOzrQMf0SKNprmqrmr1gK3pdc4x1IWoRgDrW5fsPXIkFzy:KI5m6iC9ZUtmxmMmr1LLcHWW2ZIizoV3 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 53 bytes
MD5 b1373757c1563c0aef08f072acc56014 Copy to Clipboard
SHA1 2db757a23922c77a425f2057fafbb4bbf02b55f3 Copy to Clipboard
SHA256 aa638136ce94c9e2fad9fc374a051ca990f2120c7e1005414bb948c8ba73b8de Copy to Clipboard
SSDeep 3:Nal5IvWeyCpQI4NOmUe:QbOk Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 225 bytes
MD5 4a299f42056e949782e0849af9c037e5 Copy to Clipboard
SHA1 dbda0514da347052e5051a2ecdc4ecd9f9f79f92 Copy to Clipboard
SHA256 c44cc838341e287fea307d4d617a668878543331974ac747be09826f4efbb2c6 Copy to Clipboard
SSDeep 6:PR3MMnByy5Gx/Ezmr10IVbpD7ESs4n3Jp27Cumwp7Ap/23:PukBg8MKSnEXqTECDwp7mE Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.03 KB
MD5 d7fb3cbaef0477db02856f9b06c3766b Copy to Clipboard
SHA1 fc67a53a569409aacddb926d7bdac6ad97d58ef3 Copy to Clipboard
SHA256 babab77d1c2181acd4b0f6e759a47ea3d2283d2d936ee3bbf2ae4a525ce0b4f1 Copy to Clipboard
SSDeep 24:PtiNj+iiaPkvVq6VAns8Ygg1IBw0wxLvfm2Bn:1GqiiaPkvVhUs8Y2BCTfv Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 8.23 KB
MD5 aef640cfb5c5fa0f9b9c65eb3142f125 Copy to Clipboard
SHA1 c3bb227b0f604a17c50592359bf6f125ae56a104 Copy to Clipboard
SHA256 6005afc05cfc0ad076c4adc101c619465efe5f701dfee6dc630eea71a1f64ca1 Copy to Clipboard
SSDeep 192:FcxDXVVIbW64ytPvgXKGz9dmTAP5/ys5HS9stD5uLcMSekQ3c8P8:FSBcvgtpdmA5GMD5CcMc/8E Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 14.71 KB
MD5 9049304d217d2203c01c2604e40a7024 Copy to Clipboard
SHA1 f1ba1313afb0031e6801cf3e0cc95b27661db81e Copy to Clipboard
SHA256 a9466d1f2033d8d2cf35a927f644031c9a5cbaf3ece21bbb7b5679ac6fe9faeb Copy to Clipboard
SSDeep 192:/k68Uu8oG6B/vzCRBG08JPyeJqONbV5/AcqwEEjOxjJk:8Uu8oG64RBz81yeh6cxSxjS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 13.91 KB
MD5 abbec243f2025f04a9f1836905f554f7 Copy to Clipboard
SHA1 14a2d15cee64630f8bbd56845371914f184b5ce9 Copy to Clipboard
SHA256 6e800a015cd5a7808adc5630f97bff6097ca484f4150f74e05d49afc39830c80 Copy to Clipboard
SSDeep 192:sW68hI4axL0fpt8yZEFVXAViD6giMQEl9mms01oQS:Vibxwf/ZEFVXA844mV01bS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 16.29 KB
MD5 4229f5da8f0f3e50c9d66a49807fa571 Copy to Clipboard
SHA1 337ee67b3591b74318ad227f0a332cb5c57eb42f Copy to Clipboard
SHA256 529ff8dcc1de369e1a27cc5cd9dccf17982c6656ff916a3590e986f512d02b6c Copy to Clipboard
SSDeep 192:mH686Xf7W76nQdpSeMip4DX9XdC3/xByBDgL5Yo0K5oHSaE0OWSj2Sut01oQS:u6vqGQDOTCpBplv0K5gJ1R01bS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 5.50 KB
MD5 33d1c70a3a9fbc99b7edcff74f8dc243 Copy to Clipboard
SHA1 b671cfb2b4134dcbbe88157b0092a83b25c7a983 Copy to Clipboard
SHA256 896a63405e3f4161db5cf3591d7084b6f34bef1b2da8cf020cb62e17fda94cde Copy to Clipboard
SSDeep 96:/QOo53TI0Uu/ReiFMOMyBf+fZR/GjH3NCTpZreSk4D+/0OsUKUBaWWC2DWCN:/U5jnUugiwtZRsHmKDvsUzkWkDWCN Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 5.15 KB
MD5 4e556a3b7a7de7d66bac11c0058d62a7 Copy to Clipboard
SHA1 546eb2be096cd045c59e9ac0e5be77fbea1d0334 Copy to Clipboard
SHA256 135c65a2c6082aae32a5573626dc09f6b56f2ed87fd836a5a24915e2285cd564 Copy to Clipboard
SSDeep 96:8Ss0twbymABUCQDfHJW/JFidXcBq3g/K8YP6fQVTDZ75bs9X8fW3j9z:HjQDfpWxFidXcMj6oVTDZ75w9X8f+pz Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 1.55 KB
MD5 67e674085019b761f9081e60c280afd7 Copy to Clipboard
SHA1 7550ae05002295ea0cbb1e48012e271a4ff3e1d3 Copy to Clipboard
SHA256 649775fa61baf3acf6e86c19f859e27cac0736caa37e51717ff7cd249957d300 Copy to Clipboard
SSDeep 24:h+rh3nGHCKkaH+Lnvlfeo8+MsRC6hRMlBZALveyedy5AD2oJj9:83n0sam5eh+1jsBZQm05AD2oJR Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 89.95 KB
MD5 7187e701152df05782819f4b750c11d0 Copy to Clipboard
SHA1 947344256bcca42d92c4eb3d6e2194d28c8b88a5 Copy to Clipboard
SHA256 cb7ce4a58e936657363ff3911a931867a40bea864dbe57bc5585819f059036e2 Copy to Clipboard
SSDeep 1536:A/MgHyl+rdDOUSlXWUxeRw08M8YhH78UvyuSwKo23UbxYxys5yLrG3BV0Onn5ZG8:2DOZkD/VAUu7o2z0Onn/GZHYNh Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 826 bytes
MD5 453c4d79c09d04f452920ae053e075b5 Copy to Clipboard
SHA1 b0f6376101ce037fbdbb6d7601ccaa6c9471cb9a Copy to Clipboard
SHA256 604140f19a104e4cc0ea8e4b320102fb601bf0b3af4a5058debb11665ad2615a Copy to Clipboard
SSDeep 24:VK54bkTybznR6Q3FALxybxCwDPQvnjj8bUp:+TEhVIxRwDPQvjj8bUp Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 13.46 KB
MD5 c66a38c5f8c179ddfc4c35db008fede6 Copy to Clipboard
SHA1 de9cfdfb18c62052baa8b282d4bf553a22dac366 Copy to Clipboard
SHA256 9bc0fc7ea3a409aed8a6c0fb5c5d4f89f5f5855dc184e586ffecde501b84597f Copy to Clipboard
SSDeep 192:hEFjomsKdq+biNONABt3k0XIM1y0DFWeE0DJmqRP2UofRwwZNBmvccl8QHl:6fcDxXt1y0QizQL+wrBq/F Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 84 bytes
MD5 6f1cf4e42ab12920ef4fcd92a04be133 Copy to Clipboard
SHA1 13619b4cd5aed7e3804abc5b2e607a4a2af574a9 Copy to Clipboard
SHA256 1c55fca340915a04ce5f48173b97b22fd043e792b31988151f2a05bf1cb53b09 Copy to Clipboard
SSDeep 3:ovoBbr3HlA9lIVTU9BxQrvn/q20UY2owvn:oqP3HlA9dwjni2014v Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePage.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 89.93 KB
MD5 e575be98c5ed0e4b1b354c23aa764b47 Copy to Clipboard
SHA1 e5d426a10e588855984d045420d3475104db9959 Copy to Clipboard
SHA256 db208850b6ae1465d6cbc5b302ab5724d0740c5c6dafb6413704588c092fd5cf Copy to Clipboard
SSDeep 1536:VPbxGeINbEVcaErnXgOMyfb9SlGN/tnk/dyQx3vSFdYBaIMohh2HrTqOFnYqs:VPAg2bg6jNu9vSF+Bashh2Xqz Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 369 bytes
MD5 bd99a471a53f791c3e8ded4cb80bca2d Copy to Clipboard
SHA1 61d808e39ce3c4523686c2103700b80e9040c732 Copy to Clipboard
SHA256 b1b64176007b3c3048be66e30a5360f9c2b45a144d7d98525d2f54d152c18aa5 Copy to Clipboard
SSDeep 6:PRPgNLK2VKvgKpyWh6DrqrhjmMmMmr16+uvgu5OA0cQEd+EqSYUKRwmIc7unXWPp:PmNLJVsDF6DrQh8bSgXAsEd+jSYle7cv Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 374 bytes
MD5 b8a50e8d6a78c252c0c51f30a4e9542e Copy to Clipboard
SHA1 9b1c5e3229364f1e0de87de309866d936f651004 Copy to Clipboard
SHA256 fb68360dbf77405a019fbf0bf9769e7d1c442be2a6a02ec4fdf5c4498f2fbc25 Copy to Clipboard
SSDeep 6:PRMhB6eXPIOCKY34n2b31GR2lqJ7FzNFeqVwsT/HrX8uSw0W59CB/:PyB6eXPIFz3/bmtFFiw/HQuEe9CB/ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 181 bytes
MD5 3013997f7ae0d13ae642f38adc234711 Copy to Clipboard
SHA1 9c91d82a11cf7be15ea0a0cf054f335c5105b594 Copy to Clipboard
SHA256 332db9c28efd246bca66a11509c04670a1db8e927fb58f9009c2575f6d777a9e Copy to Clipboard
SSDeep 3:crn0eG4c5ElA5i4F6KJspLySZmOzs466wqrmqrmr1RVcjimFflKU5+hLvCshn23O:cwevc/YcJkLjZmjMmMmr1TcjimdQgovZ Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 183 bytes
MD5 abbc820f6c4b4ead7c0b7af2ebe56b8e Copy to Clipboard
SHA1 ba06e202af22374eaff084996b9db57292540808 Copy to Clipboard
SHA256 d42015d699edb5bfe361fb22f57fdf50ad2613561327c47e918d2825230b3087 Copy to Clipboard
SSDeep 3:crn0eGfQjBvPjSDQzyhTnP8+rmqrmr1iL+0Ymt94HM6MgZtR2zT3tIwtE:cwe82ZraF98omMmr1iL+0Ya94HJZtRUS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 369 bytes
MD5 ad77363d7a8a9c836c99a5e6c7050aff Copy to Clipboard
SHA1 b7694f94e5655b264366a9c24665a7446023c6b7 Copy to Clipboard
SHA256 6b8b7b341b094f489ad821bcf5c2146fcbb128433f466a7cd6adc9fc80518829 Copy to Clipboard
SSDeep 6:PRPsYcJh4DdWj5JhO5hdTZ7tmMmMmMmr1Wi3vgufPtjnltbuyKen1WORXAro8q2:PaYc34Dsj5TO5hdTZ7skgg6t73buI10D Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageScript.js.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 7.46 KB
MD5 6b6534b86429f183e5ea6a45dcea34be Copy to Clipboard
SHA1 415d90e61d272474cddeb6ee39fe53508a105c10 Copy to Clipboard
SHA256 e28d03f773a5c935ad913c7b5f7086fc3853b71b6a99082bf54233863d2afec9 Copy to Clipboard
SSDeep 192:6XciKvkq0dgnHp2+UEfgpi/37vGhOoaPtA:6yvkdgnn7fd6NaVA Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageStyle.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 748 bytes
MD5 d48eff45bf4d7acb26fc678ac773c060 Copy to Clipboard
SHA1 118cc3e0012a26d78ef11b4d23e2f34305833d8c Copy to Clipboard
SHA256 a43ab3c49830a970e743e51d33d7478c3596d89e575d01c78a51b838d19163d0 Copy to Clipboard
SSDeep 12:6MM8Kx4IN47eJApdPAYRPBcpe61Oh15Pqfz7d++OwQRquYgUrCOFKFo4TRdJVi3A:DqUJcpeL5PqLAxjYbCOFKFDTV Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 929 bytes
MD5 5a182eb63dc58eb0b5d06805ead46053 Copy to Clipboard
SHA1 971893ad6c154d9e4c511756ba815b09990ac3a5 Copy to Clipboard
SHA256 8fccd7e108babfaa944a17a03c7ed882e7c5fc5b0e2bc7b1cdcb0d99a3f31fe8 Copy to Clipboard
SSDeep 24:znWalXyGYoIgYU9sUyfUj4DNJYxpZDBrc:zWaMkIi4UjFHrc Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.55 KB
MD5 1bc94c61c1012d77b7b2fa576dcced69 Copy to Clipboard
SHA1 3e7ceb1a3e0f9657ca169e90d220c2436f2049d8 Copy to Clipboard
SHA256 f153799fb2a616eccfc05f889416d60961c00f8e7dc035b41b30452e37057fe2 Copy to Clipboard
SSDeep 48:eS9Rc9orZktyTVaPngrOcfv8khstxf5DMzm1uBI4yanqVVu:hvZwiAnYhvoff5gq1+yaqVVu Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.08 KB
MD5 ae1ba8904a7e76ff23a4df3826034f8a Copy to Clipboard
SHA1 fce8125830252b1d79598514815f7bf4eadbc5a1 Copy to Clipboard
SHA256 c74d404ac456c868bbe8bfafc807c4b5eeb0051dacbdddba4c70f36e5fc4e97a Copy to Clipboard
SSDeep 48:9X1fddnjvA/CfubjNHnsKZasxPyvlTqn1MkylrfFHwCI89PXgA+SS:9XTK/l9HDXohqn2kylrfFQWq5SS Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 3.32 KB
MD5 51c80fa0f5e2ea5fb6c7c56f38d22f56 Copy to Clipboard
SHA1 48b8dc63d65ac3268bcbed78277591f66e40f131 Copy to Clipboard
SHA256 c64bd1baad40804e202dbb7275fb907e040680bb6cbcf68b0b69ad0e2ca81673 Copy to Clipboard
SSDeep 48:aX1fba6BCc7RGPPBtsIp7mLubu8iIqVMcZnmkmLVQA9ilvEJod4eX85Pwxj:aXtaQGnBjp7maCpdWSmkmLzLwOIxj Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\button.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 185 bytes
MD5 1c00aac5ff2f4a73387a2e8c5036ff83 Copy to Clipboard
SHA1 9472e89bd305879975072deca7608734425d0fff Copy to Clipboard
SHA256 0a8312b20d155e77edb49fc76e1d12c2b0560e37a380a657de8fadc0f8058721 Copy to Clipboard
SSDeep 3:XBilf8APooh6Z529Dc2ulbE5IzHrprmqrmqrmqrmr1gK3ybUq/d9nuKgv7GXloqM:XIKdlQ5IzVmMmMmMmr1Lyb9F9uKgvKXa Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_off.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 341 bytes
MD5 96634b942abe1dfc61102614f453b8f0 Copy to Clipboard
SHA1 115d721358a5556f5103cdc34deb04e1d21c832a Copy to Clipboard
SHA256 6b95a0a25103e1b0944610b544b2b309b4976033e922339372e03dab475fc0ba Copy to Clipboard
SSDeep 6:42T3hn2rodL5n1Mkf76FFZioF1paCFmz2F3ypFSKKy2UXC2:44QU71MM7K0o7wCFhF3ypP2Uy2 Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_on.gif.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 222 bytes
MD5 886d56e5f9cf23eb36e71207f9919489 Copy to Clipboard
SHA1 47c27835b250161ccfeb31a887c502112b693d09 Copy to Clipboard
SHA256 baee8e210e7b8c392522b0383ebf3e0573aaa5ec3382bd3bec6068c228cd5044 Copy to Clipboard
SSDeep 6:42rL3nzMmr1LodXGO4iO0hsEzVkWko2MlUOwaE:40L3nztOKijVDkTMlbwaE Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 930 bytes
MD5 ccd44da3037e19d9ef16026bc2c674ff Copy to Clipboard
SHA1 57ffd5b0caa7d74d3cfc0704a7743fd0df89da94 Copy to Clipboard
SHA256 31f816424b458ae8c620e652f9af796c47b81f9a38fa41bc0e3d1b61bac2b48f Copy to Clipboard
SSDeep 24:nq5WSuAAfBsoP95tUJBH/qvs/fOc72IQ8:qoSr4jaJBHOs/fOlI Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 883 bytes
MD5 5effd1ec485e61f8a88525917be92e1b Copy to Clipboard
SHA1 a760cc87a213725dbc1051b3b4107c50ca0533b6 Copy to Clipboard
SHA256 7957176c54df08924e43a6fbe9896a566fe3d61cdc9a87f05a87999c9bb9c504 Copy to Clipboard
SSDeep 24:WMr1OBhqogQlrtirl4c5uu9R38I8p5gEdL:WMIGHGgnjZ6BL Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.37 KB
MD5 621876d720a6c5fa3258ecb823c50cf6 Copy to Clipboard
SHA1 93ebdde177404b449a8da116da1f24af95bf1a2a Copy to Clipboard
SHA256 72d1d94db71f0fce06054af961f261572977e69fb3dbcc839d86f84a2d7ea81f Copy to Clipboard
SSDeep 48:gLPAMPfduzcmUBms2goOhbGWkM4RrtVyNMdNaJjsV53kQTxY0AnSn:gLnXwHRVgoOAWuRJM+PadsLtUSn Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 880 bytes
MD5 2086cb4da02e999c4dec85050e559e31 Copy to Clipboard
SHA1 53b599bfcc1fc24d065682f458c332813265e99c Copy to Clipboard
SHA256 bf81e93ccf54f82463c653c8136d2549f0888ddeb578766e03611d7f79ab2e43 Copy to Clipboard
SSDeep 12:6TaNi1w5bLORRrGj23usA2ldzZhPXWDBcUvVfxqwDJhTIBLhtCOC1DwLoV5m8PfH:bNi65W3jNlxvgDNfPDJJIBmOIDwUoM Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 2.74 KB
MD5 d8d9736f3986d62cb36243900f125ff6 Copy to Clipboard
SHA1 8ce70891e0744b7dea7de8e6e64f0f55a4946123 Copy to Clipboard
SHA256 f2fc9e47fe47c1201999200bcf92e7f833cf8de0bae78f0da775b4819e832ff7 Copy to Clipboard
SSDeep 48:fn4wbhW+V3b85mJMWRy6m6AhUh6a4K/Z+OGaqODBCmr3kQTGto0K8WHg:fDhW+xJ9RuphUh6aNxh9Nrt0YvHg Copy to Clipboard
C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css.isolated Dropped File Stream
Not Queried
»
Mime Type application/octet-stream
File Size 932 bytes
MD5 7d53790eef555c72eb0d467bc0abfcd0 Copy to Clipboard
SHA1 ac7b7c27770e3510b94b69217615269e4eb79d04 Copy to Clipboard
SHA256 047a8ac0429a0270db2f0a1fee31b8af3ac3da81bd7a0a7733b19b02edd5264b Copy to Clipboard
SSDeep 24:qEGkHAfR46rB6NVqHFXTdDHVqmXZZqeE1CzPkmG0VJIY:1lHiaWUe8mXjhfIY Copy to Clipboard
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image