f6708aea...0f20

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\svhost.exe

Sample File

Binary

Malicious

»

Also Known As	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\svhost.exe (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svhost.exe (Dropped File) C:\Windows\System32\svhost.exe (Dropped File)
Mime Type	application/vnd.microsoft.portable-executable
File Size	92.50 KB
MD5	47d273f77981d7e514bfc3e65a975750
SHA1	67eafe1c47f8312e6f1e6f95090ec71171fe3016
SHA256	f6708aea2a0d9f1f01b62ba5624af05b249c296bab9dec0cc2d7dacc19660f20
SSDeep	1536:mBwl+KXpsqN5vlwWYyhY9S4AjPaZX5V7uIT930wktqBhnpIHUjHXO:Qw+asqN5aW/hL1PO513EtAIHa
ImpHash	f86dec4a80961955a89e7ed62046cc0e

File Reputation Information

»

Severity	Blacklisted
First Seen	2019-05-27 18:46 (UTC+2)
Last Seen	2019-05-28 15:55 (UTC+2)
Names	Win32.Trojan.Crysis
Families	Crysis
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x40a9d0
Size Of Code	0x9e00
Size Of Initialized Data	0xd400
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2017-03-02 23:49:06+00:00

Sections (3)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x9c25	0x9e00	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	5.97
.rdata	0x40b000	0x2636	0x2800	0xa200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	7.79
.data	0x40e000	0xaad5	0xa800	0xca00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	7.98

Imports (1)

»

KERNEL32.dll (9)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetProcAddress	0x0	0x40b000	0xd508	0xc708	0x245
LoadLibraryA	0x0	0x40b004	0xd50c	0xc70c	0x33c
WaitForSingleObject	0x0	0x40b008	0xd510	0xc710	0x4f9
InitializeCriticalSectionAndSpinCount	0x0	0x40b00c	0xd514	0xc714	0x2e3
LeaveCriticalSection	0x0	0x40b010	0xd518	0xc718	0x339
GetLastError	0x0	0x40b014	0xd51c	0xc71c	0x202
EnterCriticalSection	0x0	0x40b018	0xd520	0xc720	0xee
ReleaseMutex	0x0	0x40b01c	0xd524	0xc724	0x3fa
CloseHandle	0x0	0x40b020	0xd528	0xc728	0x52

Memory Dumps (1)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuilds	Bitness	Entry Points	AV	YARA	Actions
svhost.exe	1	0x00400000	0x00418FFF	Relevant Image	-	32-bit	-			... Memory Dump Actions Download Dump Go to process Go to AV Match

Local AV Matches (1)

»

Threat Name	Severity
Trojan.Ransom.Crysis.E	Malicious

C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	378 bytes
MD5	9372cf9e50f4f2e17d807eb70d806241
SHA1	c3e93113110b57f82a3d04072124e7ba870d173d
SHA256	83ccfc9b5324e64e48334fdd3e8ea813331083804fe967e931d592ceb70794bf
SSDeep	6:wcWtScZ8gMD/p4jo55WiaduiJpiaS7kc6WClRd8n61GPRCrrAS9UG7Nsj/iaAMtP:BMeTDh4j25KlEXw3zRWmGch9UKsj/bAQ

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	ce1fb56dad58d8be8b8c261ecec3524a
SHA1	58a2f96c73a4f99620ca6a8b9fb888ce1deea381
SHA256	9be8b0f53b546ab42c27c60c27dc7fbc557fbf640b2027d892af26d9456274e5
SSDeep	48:BTKStx69hBFXtyQbjcNh/Xnp0rvNv1Pkm9qteiJUFD3b:wSq9byijoh/Xcv6EOI3

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.14 MB
MD5	81782ea614424cfc75eadf1a38ae5f0c
SHA1	d7b303918c53b755d2917f11017211bf86ddd202
SHA256	0f22acf93d3ab42528612c3e67f9f8de8d22f9bf3b7b6fc7037b0e18d2558d05
SSDeep	49152:zDxL8QBo0Tex4S120ytJy2j4vwEdpx03lA:zR89t1Oj4DR

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.33 KB
MD5	18a4bf0853e3814767a854bb5fd76035
SHA1	34f728dc2b8bfea8e291d98f75070f4b151c4802
SHA256	1f1de0c346f3713868a5f02b29201a3cd9b7b5785d286211431eb17108028580
SSDeep	96:Z1HDppLa6pFv8tuE/b3EgkJ8uDgDVWlRmQNtuQoLuIH:rtpu60tu4Et8ucglRmQNFoLuIH

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.33 KB
MD5	4699935dd51a216970b0e34e6bbc3d08
SHA1	4fe6da3d0975e4382658c012958e45a75457af6e
SHA256	4206199bb5d0e69a42d9ea9e1d7b0e38b75deeec9a2074fc0aff5ad2fc8d349d
SSDeep	96:9Lqt4wNNfbbTBnJPa+fMsmTRUOkHymhJvVgFtBIPpeXqj/1Yn8VHWIH:9e6AvTBnF1RpvJqFtBIhUgdYnwWIH

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.51 KB
MD5	186723f0fef77a9184a6e4925619680d
SHA1	f89df2ec3ffadabfaff6f2ca7484035d674663e1
SHA256	5c9ab9f798ff95f54d69031767351e9c550ee093b9ac36da2b18af69762d1291
SSDeep	192:F1TCASpu486FRddOaT/Wt3WBr7x8wi/qUwgmS3D10YLUx7TkSM8TXj3IJ:/TVS04865dOo/03sX7Uw+lUx/jbUJ

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	1.81 KB
MD5	0939bcd264379167fb7488eb75a101b1
SHA1	5a2946c5fc577db66b720db5c8e1b506434cacf5
SHA256	1c81cc4ffe0bdf6a79a0026daca6c2a4c909823484ba3fe7cd073bb203c44782
SSDeep	48:RdC8EvSdMojOnQOxibrASJNDjSGtCvv1eiFUFD35:RdCZvSdMOOQOY/DjSGQNI1

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.07 KB
MD5	b597cdbe6b0dffc3748bb94667eb7409
SHA1	0297279327dc65d2a85c45bad90b3ce7cf4ed0bb
SHA256	02fd9901a0e6edae721a2ecfd46976025d8c5801b61eb7304a594184e5ff03d8
SSDeep	48:j6gcpPwsotV9vfu4YOSnjTe3jWBefFOQibaa/bK411KOabdMGfUFD3L:j61pRo/hfuN5jTAWMtq2ob9cOQd5IH

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	1.14 KB
MD5	38b36ee744fb5c97423f5457d883840e
SHA1	8fda2c3210fe2deafd0cf4a8c218c12f6cf28709
SHA256	b37dcf5bebd172385fce04f22b264fde4503fe3bf981a7f16e9b6c67c1a30443
SSDeep	24:YiooWJtS/OKz+WqwhDYlbUJMpYb/2RZeiZRgJDUljDAMtQI:Y59oSWDYxUOYb/2reiQRUFD3j

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	65.85 KB
MD5	31aaae4e4fdcefbe76614bbb9adb1cd6
SHA1	debb999b2be10d362739aaec8f8d359f71a93d8c
SHA256	86a85ba1eee1fc7cc89f5fb82c4aa8eddd227789da2bcebde783578132dfd702
SSDeep	1536:jGuExhwVDfdsjhUWt1n1757Sfi2wjMMrwuBp08d2wZ6f0/H:jGu6hwt1sNvz2fi/MwwuDHW0P

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.56 KB
MD5	caab844565282791cd43ca7d155de1ad
SHA1	0b9d6545ee20cdccb249790e4442bb44c0b0a57b
SHA256	0f2cc5bcd185f8e19e8fd40c6e3189d08706cbef4649097feba12336d607cbae
SSDeep	48:G34rOQlnzpyduSVK+nRIKp7R3p+iqGI+0NflhOGaZgwL6neiLUFD3j:BjnNy5mKdR3pXqGz0N9h0ZgwaIf

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.88 KB
MD5	b166691f4076d9de0d867a234072a0c0
SHA1	83b200f7bd807cf252295873d43fd66f27e38f09
SHA256	36a0eb906fa3cb01af320a46d5dcde57e09c0e0d9d9709ee57585aecaf28d525
SSDeep	48:+mmsoH7+F5wWG3pkG52FbiM8zfqyEVSt6QIsvYJB2Kb6E3bkLUFD3p:esaaFOWG3pvIbiM8rJ8Q9vWoPEsIF

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.53 MB
MD5	4fb6c079967f604d4b8cdf477caf6de0
SHA1	a8777ca0e49e5d98d01a6b007c7b62b5dffb5b63
SHA256	9fac05c1ffc4b8060b0a5b942d35cc90c0bff012af1a00a6712c6d03018b083f
SSDeep	196608:MaurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:EOn8IQkM2BFEx96G3AUf7FnzKj

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.70 MB
MD5	052b4a3aaf24e1879297e0f1408c7662
SHA1	ccf2d2087988828f8117c27f1ec3ccaf4b5b926d
SHA256	6c23fd16b44e1eefdf52ac7ad99a1fc46a9b4b3e77c6643dd26d1ad79a2d1021
SSDeep	196608:Vf1gRyjQR9g8YYIcjfXontQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:V1WbR9YY5AJGBZWGRz1kaza0h

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	855.24 KB
MD5	86538dcb99168d9fd0918dbe9706df3a
SHA1	daa94b94b7a133f4dab68dde9f1f2804fe2b9eb2
SHA256	e5f61abecac45bd2585e3f4929edef2f18ab49d5581bd1a2b1917f54484f661d
SSDeep	24576:q4KQ/Ui3FkfpVWRBlRDOKK9IWlvFUQzlzKzQFqjb7aXo:qZQ/Ui3FcpVW7lRSBI4xzkzmqjbmXo

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.76 MB
MD5	42ac6eff5aa1dad153cb32ec3d616e43
SHA1	8d8693b1d4aa27f2f48345e6f2e760c5f205d163
SHA256	b8984acb419b90aab0f7fd9addaa90b10847e75aeaabfde74fc133085adf3455
SSDeep	196608:Yu6eDsIwHBL4B9lCzT2bOgcDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:WqsIwHNB26gVE7e/7JNMM5RTU+

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.65 KB
MD5	e2932449ba8e9b2b2caf36c9be5b4c32
SHA1	88ca10c5bfaea9dd04da8173e76d28f0c83e3fab
SHA256	5a7be7b5ba5c13da314cce353da19e5b716ff7314ff0351bf936ed2b4e67b91e
SSDeep	48:8XTOwUotIr1uRRAb2/E4J9lA4fKCVeGwUFD3L:8XTOtol5Jg4iCzwIH

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.04 KB
MD5	0da5904a43ef980f4487ed9c03edc4ea
SHA1	b15b0ee9db2c08c59bb10d2a529cb357e03289e9
SHA256	cd38aa838b631a9c8d103e2a5be00d111e7d4b111f8563938ac43402e1bf78bd
SSDeep	768:690elb/kOrKfOot1umrJPY61cWTdm/fkviIZENkzCUW2ZuYvAJ3FVBgJ:iBaBtomdl1bTdmHhTUW24YS3/BgJ

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	65.85 KB
MD5	61745c04afeee571e57764990ba08d30
SHA1	82b190d40156b6d205610e2d8f560d70e0bf1fba
SHA256	931a4fc241b6f5f64f7bdcf30c687e03ca4d94f2bf965457eb7f308d6a17de1a
SSDeep	1536:mLwT3cUZfwQvixXviKC1Z6vVN0aroqnoH:FTsUdwQvix/ikSqnc

C:\Boot\BOOTSTAT.DAT.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.25 KB
MD5	0170ccd84b1517035c21ee3a60063409
SHA1	74cba7f935029291b6a9554cdde160d36895141a
SHA256	98b0fb7500259f578fb950478bacb92b8a1a7875e26e4a7f932e0a3e95dff6a6
SSDeep	1536:gewSJAMwOO6lOw0yP3ZcLRJCSUlXjmDi+mRHXlBXaFzU+J:geR+M5ltBJSCSUG5mRHXlcF1

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	6734ef1617d4e369c276848aac0bfa49
SHA1	c79b11874245934950b01b2c77a7b5a75dadf25f
SHA256	7ed520788a8070d33bf964d46a3d967843b260fbca4e6b4e282ac21fda1d6c9e
SSDeep	48:lwCcGW2VsjLfa5TmejLy+TsaJ5CAKjx4oLF5eiuUFD3l:li1HjW5/j++AaRKtLAIJ

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.47 KB
MD5	9cb221ddb2cab7d34b874afe06f66ed1
SHA1	2ff1ef9f9b18c69de656542eecfeec4e427026e3
SHA256	ba424f3fedc65b5e95327ea98295bf69cc88ed74a457a7275768e8e0cc9f98c2
SSDeep	48:X7gevZuDLPC0OxhlXveRX6xld46f1PnfCNhgreFTSzBBoYVrJhTNFO9MpUFD3L:Xjv8vPTOdXGRw7dex+zBpVzFAQIH

C:\BOOTSECT.BAK.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.25 KB
MD5	5fe52baacab1fc6cb1c469032b4fcf96
SHA1	d9e05bb53f5118c73bcf5822fcb5a98cf2d9b0be
SHA256	8d55d5844d2cb780358a6c4f504bac3fbfb8d7089db0bac13fa25c48a0a7b4e5
SSDeep	192:EALl9MaDWaE5zPS/Gu9mjslv3pqwfqR6snROKwMRKIJ:EALlMaE5zPrYIiYR7wSXJ

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.07 KB
MD5	0ab2813bc86d482b38ea7ded6def1f85
SHA1	54d286fe0911827d34114751cc140d695d371e67
SHA256	cce5a7e449e985caf1af06f993c1b66a7388a1d52cffd190d8996c90bba998cc
SSDeep	48:UBgx8weiGY0qQcQcJ7qggCMtLW4IumX6L7Ocrcr+Eo1MKMBxUFD3L:UBQoY0VRcJ74mgrciEo1MKGIH

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Audio

Not Queried

»

Mime Type	audio/x-mp4a-latm
File Size	1.66 KB
MD5	e00acf0f925b0f771a8aff61f69539c0
SHA1	9e0b0ce89aa9afb19af3caeb629bad3fcc428038
SHA256	bed58466a5f97f58c0d302c36b6ace9fadf6849e5d46ebf85fce1aaf6882bc75
SSDeep	24:B9OzdVO7xATQgXg8PRkaPo2oIaHMDyzjg9FEvPi8hf2OrppxcyIpeiZR5I3DUljh:X4UxAUIg8Q2oDncivznsyoeiJIzUFD3d

C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.94 MB
MD5	2fb10a322517f7cbfb3a6cfe3f7ec571
SHA1	f50dbea0bf05e4a4f73abb265fef52fa43db4e07
SHA256	5ef870f132dab830dd5380a5f66f2db9ead790ee6610fc191c638c2aecd616a4
SSDeep	196608:6a8A7fKP0ReD0wXKLUEfRrDXP2ifogB2jHcSBLWiyvyWJRMLhdPWfi:6aRDKP0q0wM9JrL2ifJcjhW/6vL3Ai

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.80 KB
MD5	6caafbed46b110d095adf0b65c22e3dd
SHA1	198dda2d6173e157b82d9dd4bcc67493059cbe0f
SHA256	77daa23fc1f65cae7722cbfa5bd2f0ec6ffc0ef398a7cb4cad7f7f447a1b2cd2
SSDeep	48:fbOBjJtDws2ZPUIDlMOwxbcGn5MdCMpUFD3L:fbOBclpDF05t0IH

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	67.85 MB
MD5	6b078cbccbab0d5edeaa1d85f11ba58a
SHA1	66820f091ea72f244d2d2019748cbda0b7b9702d
SHA256	7597007b7fd82fa6fc079ad255cc80561c20be4bc515df7968b4b0e377292774
SSDeep	196608:H4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:H4KKCX5FvaVczxmUJnYSE7dzAT

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.36 KB
MD5	a014477b1969717715b7db39d9eb0f26
SHA1	3394ab32e8733f5d3436db3c19ce4da17f4ebae7
SHA256	3856de65f61b6b0fd6d53ab8d02df2205573603810a95eee0e487755e297c6c1
SSDeep	96:/7SUYSRBjfs9yanwL/XOihJk6LW7K57onI1:eqRBjfs9y4svhJlL+K5UnI1

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.60 KB
MD5	610d3675fdcb7c9b59d9106687023c3a
SHA1	84dcfcdf555e4980f4e7578c370f026895167fff
SHA256	8b950edd6fd7e4ab3f9f6635e60217f4d3f2f2b4dac923fb4f7d2f4da41b5786
SSDeep	48:70v59I5cRdeM6SM6g0j1vwfusyIcFhNIfVCHA8DnZ29Mxlz7cM/UFD3L:7N5cXn6SMEj14msy53IE5kXqIH

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	21d632dcac45f14be6689195eb1ff416
SHA1	8bfc6ab10ec873f6dad0fbf3ef735cf73bb06211
SHA256	7d9f6ea4661cd8e58910d3af226d35fadae45f36d70f3472897c5b2a6773d23b
SSDeep	24:Gx2iyNIibJEXsN4vSzG2hbh8kHrvClJnbR1tLRGgZRhbDUljDAMtQw:GP0rblNISz1okj+JFRdUFD3L

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	41178df94c192a1c7acc446c0236ef6a
SHA1	0bc3b2e003c0e2e238600c2f3f2e8e001a2e1c31
SHA256	dd9baa007eee46ea4d050ffef1d3acacde66d497428c417e439374ad20c47b4b
SSDeep	48:vZo/rE9b2nDfWXfpAgGH9wbftlSmrpRUFD3L:vUE94fCvbLtAiDIH

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.03 KB
MD5	56149227360bacc0eefb3792de61b88f
SHA1	d925ed7ab488cd91666ff75aa0c7e5681b1b2404
SHA256	10a4ec628062d03a3751c861a4f7bcfe412e22b9a1237f7bc555d618b05f515e
SSDeep	24:51CbU9zerpOHfG1RgWGPOI9O+qA1YTCKeSbZRu+zRDUljDAMtQK:51B9zOO/kGHPO+OC1Yl/be+zZUFD3l

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.99 KB
MD5	bf4288a7d6dc9ea79d5a99239971b128
SHA1	c3ede3d136cb9dbf0a3dde57b56a506f716a6a60
SHA256	20afde766551c0eb4a1c6463cfe83ced6a30d603d666ead5711c858ef62399be
SSDeep	48:Mt3tzwxD187soKiaDIc6np2sCpOzKt2ABUAeQeiyRUFD3Vl:MnzwxHoKVx6npaOY2ABgRIhl

C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.14 MB
MD5	4f84755bf1fa296459283e81f7efad7b
SHA1	07b5516a35aec6e2e91a85129a3e70e640369afa
SHA256	3ad68d716307e4491c2a76b7c4de1d1c08d0bbc0cdd8ca09be8f27163d64f799
SSDeep	49152:zDxL8QBo6Tex4S120ytJy00VPY3MGGIYg8GoQ:zR89j1vZY3XGvrGx

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.97 KB
MD5	8ae9934161929102e51601187db55409
SHA1	ed01ad8899b8478f5b8ed490fb3915bc9ad3b2dc
SHA256	8b8c15189f5b4a1ea46cb4ff1a38032468fffeb64b6c70503e2178295c89a1dd
SSDeep	96:zwFXxZ5wj058IJPagjp9TVkBylFsGH/5NyeLhBpwoAouL1Myvkv1a9sraNIz3IH:udwjexJPHTiBOFsGf5l1BpTAHL1t8vEb

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.60 KB
MD5	e18f7bdf2875b92d4b300779c3c40819
SHA1	946663d3fe71ac481a74ca07673cdcc5026b12ba
SHA256	6a9d37e38a6f714e10bcc0acc99c1f7280d3de217fb94b41f75e084be093eb1b
SSDeep	48:3bcrwHHlMKIcTcGFE+3jeySanITUs6w4A1eiNEUFD39l:LcUHF6cTcGp3jeySuy63IL

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.15 MB
MD5	3f863e1eea2e5fc25a251cc80fc09139
SHA1	e44daea456f8aeb94fc2d90175db0abb449f5f3b
SHA256	2b85d0a20a33a1939c07a6e905ea9b96bfba76b98edd5f048a91a4e62d7a01ce
SSDeep	49152:zDxL8QBonTex4S120ytJy4+EUxJPHPJZ2XHca:zR89K1JZXyca

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.54 KB
MD5	5d9f4f59b4edb0bcced6dfe2ccb3ab76
SHA1	a8b2ebef3cf23f31a0287ae05fcc5b43feeb3017
SHA256	3b32ce9999ae364506f0cebd3ff010b8758de90bb3b2a4d6e673d77c46366798
SSDeep	48:HCwQk+M+lBX1mxXwqA24wj45Xy5/MRW/fvcmBw/jRGZuI4GwtM6UFD3L:iwQe+X1mpA24wjNyc/HpwUUOwtjIH

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	4362b76c7b32cd18a4804a0cc930d4fc
SHA1	0f70582ef71b9b669aee7d34688d79aefb382ff0
SHA256	9bda66a7ee1e161353032525445ccf7c28a157035da4e1a9340417a6d72b7d87
SSDeep	48:HE87z9WkdW6tLe9yewWY5mV4iM9sXtny8LVuUFD3L:HE87z9vrtNeHYliMq0A8IH

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.04 KB
MD5	32c8c0843ce542cb00cfbe49c7a3e2ac
SHA1	a3ce303ba8a9c6c72bf3ded4302a557e509640c7
SHA256	5164a8126ced0be618b9100fa05a8871295efa859ed2d8d08309a32804fd186b
SSDeep	48:pBtJvEwZiqkvAWDNprNGhpKHnhp08Bdaf7ZigKiVWhuM5GUFD3L:7t1E0HoNyhMHnVdaf/KMfcGIH

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.44 KB
MD5	891637b72aee2f1429085dd31a3efe47
SHA1	e3370e4984dd3a41e906e84c2d971ba6e3acc5b8
SHA256	8798f044124118cfd4034ea5acfdb910c797656a1bf4173d2594cb71c3dd4e1a
SSDeep	24:aFDc3JeLBJ/p3MEJgheWoevOYvFSLdYrEelY18EsIwA4hEX9RqHYxuIvEeiZRpDA:ugZeChFVv02QKh49R/x0eihUFD39l

C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	b2be55ab281e1f1257fed7d4ff4d8adc
SHA1	b55e4fa10c2d069710d0f5591a2210a6a487537b
SHA256	0866eca554d82fd5ca312acb1fc28341b03e7a813f43b2696432657280bb4167
SSDeep	48:3OF3IKB/xwQFtd4MrNVyHCEqRx9hJSctYZ2/oq2GeiJFUFD35:3OF31yQvdxrNVSC39hUc3oCI1

C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.65 KB
MD5	369386bc6eed1e56c3e6cca533c79cc5
SHA1	645b8a5816f4938cb406a049129b5e814c52f35b
SHA256	1e51146a0b8ca31249b050a2fc0dc9a47539bc37f38742c0ec5a281990d3998c
SSDeep	48:U+nidOSk6BgMdl5m438ntD30303cdVsT1MVIUFD3L:UUirlB3dlN3Oj030esZzIH

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	582.61 KB
MD5	d8eadc290de29d2b96bbe4cc9514ce32
SHA1	d559b5c6529fb474dee5b54a7fa5d586d20dfebc
SHA256	2befed996908d7d3fddc695bc1de9ef68d5f8ecc935b14aa81b51d744fbf002e
SSDeep	12288:vClrvW3FCFfJv1/ouUixuQqofVfaIl+ObSfzKLoDeyqeyHlp:Uv6FafJto7odfrlFbSfzKLKeyup

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	1754b12f05486ac8247f6b10d8f15afe
SHA1	252582422b19e9a4efe5b31fb098f43b8fcf4380
SHA256	19b08109034c63924cb2a7be5facda375571864f6466e156553471650e371052
SSDeep	96:jBvoynsCHbgicpjif8TpM6I55K2GuTqsBcqvyemqMJsM8o5nY5W4tsscyI2xwd0U:VASHbgbjifgpg8Duk9r4MRCwMI26eIf

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	35054202d0dfd7bf4e04d5dce69c3b95
SHA1	4123ced5a63700d93ef669438cb4424b25a5e2a9
SHA256	38edb2655ced42d040ca10067d1c145eb22f873253f1f447bb38954be9f6c0d5
SSDeep	24:c30FjNRsttVm98I0D1SaUdwJlkrKk2I6/XUiy+lufsOS2kZRfDUljDAMtQi:Bj2bmyIK1RwNrKx57SfsOS2krUFD3d

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.79 KB
MD5	b0933d06bd4adf804a0a87707ca798d1
SHA1	0de87097eac68b50d235869b9f3a03995b79e058
SHA256	010fb33c5f43c1b0b53b067a335b713d9a2ebb3f1481ad9725b37b77dc82a03e
SSDeep	768:o/O3Ej09Wfmr5VSzYggbs6ZLWsMboEePad:o/O3E49Wfyehb0Pad

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.37 KB
MD5	cc2272322b69e30d37ed1db44f62cd76
SHA1	385450a00dc773e48bdc66a5214fb42a8525fa5f
SHA256	6c193994f81599cf4a6b93d130eef48decadb5cb983c5f5640ef58c71eadf60d
SSDeep	192:yRpJG17wWvrFEYIMdAKxNxIRMbQ+zxWwBltCKv7GRbaIHkGIH:WIVvrRreRM8+zxHHCO7GsB7H

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.18 KB
MD5	fcdcb60ea5cabf126449871edf5c21ca
SHA1	71aeb07195113bee1dd1ea10cd1fc858a705c48c
SHA256	0d19cfa4e812148118fc36dd556e3e9efd98e117cf0a470f51b3f501b41c7fe5
SSDeep	48:iE2VaHUIrjwm4r5Dq59jpt89RyHfj9iQXQfzXqIMLUFD3L:iEQ4wm4VD09jptERy/UZfzXbOIH

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	cc3d22a7446ebf5a7f25ce24018d6bb1
SHA1	9e0f40637ee6ee64097201ba4d5e6c6f6a2c87ed
SHA256	e3a27e7c6e98f1b717c2dd46b3dab83d5c14f7806375101ff2cf47b0a32ebab9
SSDeep	24:tuhAPriKc0Fxc4DMKonMdPt/ISeXvK3RtpHpx+d61rvoWS2kZReDUljDAMtQi:tuhAjiKHLDMHqISeXvKnpHi6hve2kmUj

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	582.61 KB
MD5	1afe936057894274d8546c0076f5d188
SHA1	f07d22dc4234d61e19acced063f0d8265ab1cddc
SHA256	8ea1e213266a1dc283b7bce2118ddc5b0bf9a2f990716acf9752aa7e698809a7
SSDeep	12288:AOdl7VOyVSWh+06kEUA7+lPH6oYTlmDcxUgczbhwZzzg8sUqrT:ACpVzVSZpUPlPH6lIyXczbhwy8pA

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.70 KB
MD5	ca6ee3a79bb9aeb3363fb354576487a2
SHA1	69ec75016730f513dde03ba43f938c2ff8ca1ec1
SHA256	fb2c005d74c78688d79431459f52836e5209b63b3c51a363a4788c4822cbf0b3
SSDeep	384:PTWAqUVQI1c6OCdlu9p9aPCBeuYiNgwN1:raTIjd09bgCBeuYkg61

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.42 KB
MD5	1b88b31f377d084d17cde79222d4c38e
SHA1	0febe317118b23d88d0f49bcdf2f3dae3da196ef
SHA256	7ce1d4b62c477575f299f176812269906abaa5f0da532cf2881d8e614b935cdf
SSDeep	96:sexc8w4bBOvHk9e6Evyp2IZvC7Ri7toB96C6CYQCI1:xq0jFOUrvyMu96CJoI1

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.60 KB
MD5	f21b25468982fad56c2cafe12e0f70a8
SHA1	bb0a4d6d2d999c8aef6a71776c3c0ae4725e0ac6
SHA256	78ea15abbcd6d7baebbb896a27d821a5e0c80622b75599c36ecaf01486485422
SSDeep	768:gBMPTlQxUUn4xWXF/a1SueW65FzePgfHNYjDBChWtu9cVH:TblQr3F/aneW65FzuDttu90H

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.52 KB
MD5	1616b20025c968b81f5af8435212d485
SHA1	2a234464de376fd4406e6a760ee7a0106e9a5a61
SHA256	e0ebec700a6fc2ad966c2a95ac71c977cae29ab2d4aad3f2203de67fff5a14a1
SSDeep	384:bYsl4sYYQSTY5Q3uuDFKATnSHKnL127foCutlvkgH:YvDuDFKAjSloCuTtH

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.42 KB
MD5	4b7acd362604e82df350056b7821f5a1
SHA1	91f01f777001235da8941421ebd18f3f35b5ad84
SHA256	f2d74ef135f78a8f08ecffa529851e73a18938a9cd339dcf1bdb4ea909f1809e
SSDeep	96:52FOw5FHiEWrclnDPjKDGB44O9nszDdjcPz4RJZsECLI1:52Fdi7QrL44z3duAJxmI1

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.51 KB
MD5	3d458df0be7b26fac0946fb93a95f1c4
SHA1	ea6be0e329931181d98cc0be6fce5c5fb73a606f
SHA256	c2f5c8b4e99765e553c5d98e0c3d89ec3abdd51c2c28fe1fa0af4bf236465c2a
SSDeep	96:w/cA50MmYNzNWHCixP72Nut9tNEZvw25kpdxSwOVoal7sAupahqOohgupm4ryIf:wk7YNzN8CQ2wtnN2v6b72B21OogeOIf

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.42 KB
MD5	e0ef04ad2ff12c68281edb378d053dbe
SHA1	c6aa960a35f0f45104fd29be04e7db04451a1f83
SHA256	0f772665689358ec19e3bd2f4573e576849344ebc60947bed6d5fe0aced50795
SSDeep	96:ssRMOYH97iNy8ssTTKGVHR3hoGrwJtjQbgI1kibswYe1I1:+OYH8NXTKGVRRQ7jQbb1xtpI1

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.76 KB
MD5	b6dafb4c7524b3b8ef113ee4f4134257
SHA1	ca43bf637e1f79ddfd4ad64fc96a5e9f688ac3ab
SHA256	2ac19df107da6b71de64ba01980e70f57fdefe45475941fda679521f7a931d0a
SSDeep	192:cZgxTuCBRVOg70V80jIuLBrTS2EAGKw54spnTlP50IhsV7yqnIJ:ceihS0zLdTSlAGZysRl50IhoeJ

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.94 KB
MD5	561de720567bd1283dd4c01184ae47df
SHA1	4ebc82f96f97be369d5143ed7f2d5a265bd3cd3c
SHA256	bdae84d0f8d92a0b64d4f6001c9b5baee78fc65327acf488e3d0c1a6d835b323
SSDeep	384:/Tjldw48/CHSpPxkBTb8mNQ+5ifg9pQQTcR75RB6D4oiAQoGF:Fdw46iSEm+R9pQa0x6D4oiA9GF

C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.25 MB
MD5	403abe8934d4ad3957e53cc3c073c666
SHA1	7fa9067a8a88a8852828a8a7a3e82ebb9fb08fc8
SHA256	0a1f251c999a9765aeeab863805164a888ff06820b90af034b992d9074b03c95
SSDeep	196608:aPUvTYpH9RBl/tus7o4L7tZiTnp/jE4U/bxlLRx+tyKk:MUvTiNhU4L7tZiTnprP0txRstyL

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.27 KB
MD5	820b6d68ac0f2322ed04a2532def7510
SHA1	576ab2b9e3d98ff896e23f937ed2e30628f8707f
SHA256	cec09e838aec819fe6c86c5f0fefc343c500a5c28a1c67cabbb0c182585b5dce
SSDeep	24:ACF7cc82kuTcbqoPPPzTNlqLz4e2ULBaPpqe0myknXTy6v4v+CtpqlKRcZDUljD5:x7b5kuQDPPPzTeLESBa92v+JDUFD3p

C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.27 KB
MD5	e71c9c7983fd96708fc2b8352a257b3b
SHA1	d64c3f7b5d9bd8618e89f6b5222554673bd69149
SHA256	8fc711043092ccf4093f48be304e80ecefb322e7eccf04a7584793243c632fa9
SSDeep	24:a8Dy1TUK7hVyVwEbQyQEF1Ds/P5p/Lgi7CiHKxZOSjiWkGRjRqvDUljDAMtQu:ETNYWEb0EF1DsZp/si7RK/OSjdAUFD3p

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.33 KB
MD5	29e22ff18d8aae1a66154089619a70bf
SHA1	aafcd402918b4c72e83ada394cebbf1c52ef566b
SHA256	8302f6fbc708aae1fd85b9b7992b7a5a9981b3608adb762da0e234383785b6ff
SSDeep	384:8tMN6JQzA7HYvsvB1mb5dKrBBb9vVM2lQp+Ajy6UKl/PlcVmuZ7JIH:8yN6WzAMvsp1Edo9x7Zr6UmPlKmbH

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.80 KB
MD5	76a100bff3afa6aa9df2b1738dff1918
SHA1	2ed0817168f1cdab98178df57c22af55648f9e2a
SHA256	5c7a6876e66d6a13ba12cdb43150157ebe34a729b180405d58442bba7e125c21
SSDeep	48:wZxML1xSa35MZBSHFqJR9GpW2FCBBF7qWC/IjUmjQILMMaUFD3L:nJ+puFFC/tq/AjLPLMDIH

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.88 MB
MD5	0132354deb06c352353675fce278a129
SHA1	82f447263c0d4d83d398af15034413083edcbc35
SHA256	8e5451128ff68d309300dd54c2a3bb83f196e6fefb39f1e8d6b7c24b8a6f7307
SSDeep	196608:TIwm3nNVAl+ig71eZ8FclBElWHEbyLbyo9crpLlR8ioLO0ZF9CrpbQ:OL71eiFge/GHyo2rpLkcoCrpbQ

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.48 MB
MD5	57ff54d3e84a3ebd153e21d5fab73853
SHA1	776cd4ad75c43d2d3202fac4f945e06065e3c6c3
SHA256	192cf64b52157d22b4a0a20aef1576b5744b75051c1daee7450b1a45448e7391
SSDeep	49152:fHYLL/WoWLljb1R6rOSN20yRJ6axA/6KON6DQRyU:fqLVW6v+yi16csU

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.16 MB
MD5	f57a11d39cab3add3c0163caa51a8942
SHA1	a8928f79b9fd86f7278bfc7b85bbe899bd652772
SHA256	285dac0d3bad2172a750e7cd55182f4c161f3b1f5bd2ba16eb5dfc993e3218e0
SSDeep	49152:zDxL8QBoSTex4S120ytJyXu1iYwt8M5eOL7:zR89r1Pu1iYwtVeQ7

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	860.74 KB
MD5	d7716419a838f2ef437e87bc97a7db8c
SHA1	e317647edd48fbf020c64603c53dae97c04cf492
SHA256	9e15bdf5b352bff71044e5f93d2820489375ea946cc309b41129b6150b439166
SSDeep	12288:EsLLshe0Mvg0C7Q1NqhnVyfAcMmlzrSGVjv0YidKXWHcEijAGnOMLRYxcBki0a:EsLYeLYP7QCUfxMQCKz5FEghOMLRBBt

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	865.24 KB
MD5	c6aff2e89dc906ce5b920c637324cc56
SHA1	447a1355736c1006edca5a29090ad7b27a21c643
SHA256	dc4abe305727bf9656920a85d153dddc929d0aca706810feeeaf3884ff6e6fb5
SSDeep	24576:m3wjcjEiMjKCVt6A4ZyE5N7DAf3zVCTIJ:m3OcjEJjLNqL78PpYIJ

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.56 KB
MD5	aabe617841c3429daa7d201d6bdcf1d2
SHA1	af82a310974dc7f7ca5c39bf41bb6928c74862e5
SHA256	31190a37a318a07a36e730d0da397c5139d09d91530b432498a15587067487f7
SSDeep	24:gmPXc9fMlalCsfCdVJOiXO1Uk4zyp2KpzEtB8FVe+ouPt0WSvRqrDUljDAMtQI:2OalCsadrtXO1B4zENzKBuotmUFD3j

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.35 MB
MD5	ed96345ba678e75427b463f2496b87a5
SHA1	440533a692d96cf95c693b10372cd549dfd5d949
SHA256	cbf3a9a561df65ab9ca4b03afe76fcfeec0f534ec7b834b010acae7bdff0ca18
SSDeep	49152:R0opH/cgHa3HRxz+4gnT0jMKgsUn9vzQwrl:R0op1Har+BTzKgVn5tl

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.80 KB
MD5	031e13ef686c4f4c27ba35b402774d44
SHA1	670d0cd29d1d6e4882b4de9624cdaf37372d271c
SHA256	26b2dd142afe1e723cb5a1c6a2e299ee459231f3bd6fb0432cb0b3e1fcb9a67a
SSDeep	48:3NS16gYO98Bn/u/y/9YXywDzHrrV0daXFumFXQfYUjEPPm04My9+cksWUFD3L:3NSW/n/H0DzLrV0daVuyQA08PPtsWIH

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	848.75 KB
MD5	41aea63c6a79eff5c2fd935edbbdc04e
SHA1	790c62deb751719ac60f8298e9968d27d3fbd6bb
SHA256	fd6205d365aa769e6445098f823c4cd9efe1f0c928976112bc2518051ca36bc3
SSDeep	24576:qkOunPldWpWMGgmX2TsIXo/KL4RcRzU3R7nM:qkOunoGg02TlXo/b7M

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.84 MB
MD5	3d0e1f18676626331ffefafe53b18248
SHA1	80d370bf723a4b00b769c1a7266d63de82280ab0
SHA256	9ceac29cec7a9772266c3c6ed68bc7f25dcb38c12c388fe9f21e58890e9cf26f
SSDeep	196608:PFNUxdiOm1j3/abCsYwFOSQo2pWDOQs4hW6s63HS:qPmN3/abtYIQoROQ93RS

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.13 KB
MD5	a19ae5cd250704d7f27c67491c28597f
SHA1	68329d742322a56265b9b3fba3638a5a57ed5f9e
SHA256	60ff71330ccae042bd3a79e8b22f7b57256389f5f6c0c6768b8a7aba3b238678
SSDeep	48:w+RPrMTbtCCdQbRIN2Is3ciy5mLd+1Eg18ClUnd3/Jz54STr0ZUFD3h:BZrMHdWRccDsf18zd3Bl5/0ZId

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	f976ef008e81ef62392cf742e1ffdaf7
SHA1	d02889fc5f2fb171d9dbecbc580ab83a5a291c22
SHA256	733e5f9dee758fa7c00016a7020cbce76827cc6f684f16eae93c1d49278ffaaf
SSDeep	24:cx6D9O+PfNnSNpEpPn13G5XW914JA8LhtjHWS22R7wDUljDAMtQi:cx6hOelxpt3r1yA8L7j92lUFD3d

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	7cd3864347c0950f1a3be420808c32e6
SHA1	d741a25fcd0085a71e462915bf949e88e7c8fbe5
SHA256	5cbbdf6c35a746d92022cf6695bf6d07d1d194e54d50ad559dafd194e5d1db66
SSDeep	48:NzwsbMpx9iHhp4lsD2jBrlluPAn3tQ868vDUFD3l:NcsbSYcjGsDtIJ

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.14 KB
MD5	d77e36ed28490b0a3fc76f4dc3b531c4
SHA1	5a008de83d2594f67a4883ddcc770fd9f2bb8428
SHA256	41d53ae0ed0f3e3bfa8f00d5210361de196f488a45533bc280441e7fcfa00b00
SSDeep	24:ea2V3Ke/bzg/qrPCZXvPQ65TaSD3SZj3+vHBmiTcshUHPvRADUljDAMtQI:52Vljc/sqOwokvh7nUHP6UFD3j

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.47 KB
MD5	96917cd8d455d1fd5ccf86438170aef7
SHA1	2ff9a7242c4172d1f23336dbc042c6904e1adfca
SHA256	ce38e399343e3649944fe6742dc13cd414dddbe103062ccda4bb79aa92b12ef4
SSDeep	48:lTmwmLUmIZbG4z9fc/AHb3WtUsyyc0ZbQqvcS7XIBxOmdDvRJs/GcjKB7UFD3L:lTXmsZL62b3WtUsyu3vD7I/DvgJKB7IH

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	853.75 KB
MD5	9afe7db9e819908b07de82a8c52dd0ec
SHA1	16c4ebe3016c8bc2381621a87f921f89da444a56
SHA256	3e7cc88bac0cfaa9ce7df605efa79dd9b14ae7df71d8575817e37fa0c9a2f867
SSDeep	24576:BTKz0HPZMjnLXT7wHWoxmminsiecHke5CHExKw12Ksu0+o:sz0v6jLjOWoxU9/kPHEP12Ks9J

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.04 KB
MD5	56166862c0edcd5f0e4d82f47405081e
SHA1	83cb19cc3449d4ef819d3d8a5123c7ce16663c7e
SHA256	81cc72aa11ba6dd7cfbd675bb364a09b6b124a0bd847a4259b9a33076e47a590
SSDeep	48:P/9/L6h8IuiSiu1oz210NHaRZI+Fl1LGvUFD3L:P1/Lwrx9h21IaRZIq7GvIH

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.67 KB
MD5	47641311498fdc0120e1b20d55b13aaf
SHA1	f9fd178b5ce12072186d820e5810a9913318d6fc
SHA256	3fc935a8c360bc22d475f6cfa22c664af731bb9756d355113f9bd6c7a6eef4d1
SSDeep	96:pVDfOJ7vRWVSnYPoeSuNH+dCSceZUE7vuUfkpL0WZHbh5DmYfnDDSOHP3PuYeLw7:HO1RWeYweSaedCScwXrRMSo7hRmCnSOn

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.80 KB
MD5	90e30eb81257bdf3d4feb9ba45fc98d0
SHA1	3bc19760d8270447a4574b64a891b02ecbc43ea8
SHA256	a00318f70d65a90c8573b864b5da6d1e3d9285035af111e770df01104147d5d4
SSDeep	1536:UzdYVW1HIEefI+rrINRljIA7JyrpatvuSeS1KKomnhhKZRsFB5YZWIqnIb:EdYVWdMrkjIA0paluS1sK9rz5YwhQ

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.44 KB
MD5	b8d2a7c89ae5d7e80b8edaf473f1705d
SHA1	8c040c880ebcce8c3f4816d609b7459afcf575e5
SHA256	42597f8e57ad554a1ce1137b09712579120bfa1b7127efd72c9976ac6a823379
SSDeep	24:EIHtYD1YdtyOgNbjhs6F8bQ38F5aRKzJzqcFGlprSQbbBMOnASzl/9iDc8YyvR5L:sYvyxJzw15DNzqcFGzPbbBMOnAC/9Ue6

C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.54 MB
MD5	a25d2d7e39c60904f1b94159952f4f2e
SHA1	71ac7af1f81aa9c598a790b682258a72c9bfd3b4
SHA256	cbaf88b3e9215cb13f1f5d439140ee98b6d5ee65768dfd5ca9c78cdd3a86f544
SSDeep	98304:zDMUwxyODPFhbY12HLodiF4+5riWK+Q0wF1o5RH:z4UwVthio42crQH

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	582.61 KB
MD5	a484c03ca0df953b645ab06f7a275073
SHA1	56b8a3456119012f85fb6a82e420d5f8c9c2bae8
SHA256	342a61b4815239e5960b0473a387d79cc899ce44b32d3866a75b2ece45337a58
SSDeep	12288:ujNhc+UIkRyiB8VhFTQ1oIxe495Giak1YKPgzw:ANhjUdEbZQFeodDg0

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	644ce4ff4db0a6c1755af8e09afc9fda
SHA1	3c4c6f312dc7b29241847a9fe02e663596a370d6
SHA256	d7f21f30f570bc2bec79496759b3e8b19dca7c2638a3d93b4365247bf099a4db
SSDeep	24:YQDiu3G0H/uPKsBa6E1Zv7cxCo6nNiINRlXS22RzDUljDAMtQi:fJNH/jsFEfW6nNbRlXS2WUFD3d

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.79 KB
MD5	a0e7d011f913cd599b5d6a2bb0b2e62d
SHA1	8d4c47e304e5766f30813acafb06406ae5f0ebb0
SHA256	286d3cbded74737eb7842f7a285c4db951d830dba968adbbef34b9a4a8af904e
SSDeep	768:NDzbV3jSrXQwUVXCmzD0yQsncs25I1c7IGLxyd:BzbVTSrXWBDQGqI4fsd

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.54 KB
MD5	010692d2cc371c14ee3b201d5c5ccabd
SHA1	e914a3b3e1b7f8d7e886ff0d5b2ccca94fb21b1b
SHA256	99fdcd9d84ead1720b562377abd5bce201f633370efb169d92cdb31f62e7251f
SSDeep	768:3MqUq9SUhNNUp6oEYYYKyDOIOmulF/hElzi/fd:/1NNUphNDiLFhElufd

C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.75 MB
MD5	18cf47edb5be9f087c005f8566172673
SHA1	3e4ef7836189582665969b2ba72d0ba74395f154
SHA256	7b76ad3e8d5387326b1cc80a4bc5cfa0c3d028cc745a54164deb3135b4c489e8
SSDeep	24576:C4OpUKelCYTtDq/xYpl8FfHET51it+wUnDnH9wwDd99wFz2oaowfu:Crh2TUGD0HEytsDd5D9kwfu

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.37 KB
MD5	51e9fcf29da9e06c9b6d1a7c50401939
SHA1	019f6216a4fc6661c6e5f672b01d06152b1fcfd1
SHA256	048de4304e151e9c9bd3bae5f9aff5ff916abf17a3d958e1124b0bdc351e011c
SSDeep	192:zxNe/TmIsDEXuSk6RXGlA54Py1mrEXfYr37AIfpkuDvyzMMST4SIH:tNe7bXuKXagFYXAIfpkublR4vH

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.60 KB
MD5	d19858507e5344710761171e55538d75
SHA1	ea130f7b0ffd6dbe62d8db112b625401c9064e3c
SHA256	4afaa17a4802f7a03ee0b2d43a3d2a1ee1a4396510cad20e10ccbe99b0c7a1fe
SSDeep	48:gTqJI54YWjeCD69het7XfrDhcePTCesmr1jj2/UFD39l:gp54vQ9odTNWcq/IL

C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[vombombom@cock.li].beets

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.54 KB
MD5	71f859509117dc083c7b30fcf2a5a149
SHA1	0f1c9a6dde395b85ed90c412cbc04184791a897f
SHA256	7a8ad8d995746d98e90b7170d1fc13dbdf42a9cd26eaaae467a659d8f019cfb0
SSDeep	48:+72ucuNHCU/mY7cr7XEXNvHEKPvwptUG9YDjRS0+xR+kQh7m8usSUFD3L:+71cMeY7cBMwptUGWDFixkkQhyaSIH

Remarks (1/1)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After