6fb05df0...36ee

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ghost.exe

Sample File

Binary

Malicious

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\lsass.exe (Dropped File)
Mime Type	application/vnd.microsoft.portable-executable
File Size	155.50 KB
MD5	6d271b98ecd5f885f7b19f65042ac3de
SHA1	5279a633e3fe3bfc73721429a0fc9857250efeab
SHA256	6fb05df00cf6552dcf8a0a5aef873ab7e822083d588e988815ade475e47336ee
SSDeep	3072:UHrv/FIvxZy33+AuBxofrjOxRFJ2mFoCFiBuvmryk5cCVeI:UHrvur++AfOYm6CEBfnK
ImpHash	3d9014b169378e29109c348ffe27fb08
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

PE Information

»

Image Base	0x400000
Entry Point	0x421314
Size Of Code	0x20800
Size Of Initialized Data	0x6200
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2019-06-04 19:27:29+00:00

Sections (9)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x1fef0	0x20000	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.67
.itext	0x421000	0x784	0x800	0x20400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.1
.data	0x422000	0x16ac	0x1800	0x20c00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	3.93
.bss	0x424000	0x5230	0x0	0x22400	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	0.0
.idata	0x42a000	0x11f0	0x1200	0x22400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	5.03
.tls	0x42c000	0xc	0x0	0x23600	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	0.0
.rdata	0x42d000	0x18	0x200	0x23600	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	0.2
.reloc	0x42e000	0x2028	0x2200	0x23800	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	6.52
.rsrc	0x431000	0x1400	0x1400	0x25a00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	3.76

Imports (15)

»

oleaut32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SysFreeString	0x0	0x42a3e0	0x2a140	0x22540	0x0
SysReAllocStringLen	0x0	0x42a3e4	0x2a144	0x22544	0x0
SysAllocStringLen	0x0	0x42a3e8	0x2a148	0x22548	0x0

advapi32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
RegQueryValueExA	0x0	0x42a3f0	0x2a150	0x22550	0x0
RegOpenKeyExA	0x0	0x42a3f4	0x2a154	0x22554	0x0
RegCloseKey	0x0	0x42a3f8	0x2a158	0x22558	0x0

user32.dll (5)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetKeyboardType	0x0	0x42a400	0x2a160	0x22560	0x0
DestroyWindow	0x0	0x42a404	0x2a164	0x22564	0x0
LoadStringA	0x0	0x42a408	0x2a168	0x22568	0x0
MessageBoxA	0x0	0x42a40c	0x2a16c	0x2256c	0x0
CharNextA	0x0	0x42a410	0x2a170	0x22570	0x0

kernel32.dll (33)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetACP	0x0	0x42a418	0x2a178	0x22578	0x0
Sleep	0x0	0x42a41c	0x2a17c	0x2257c	0x0
VirtualFree	0x0	0x42a420	0x2a180	0x22580	0x0
VirtualAlloc	0x0	0x42a424	0x2a184	0x22584	0x0
GetTickCount	0x0	0x42a428	0x2a188	0x22588	0x0
QueryPerformanceCounter	0x0	0x42a42c	0x2a18c	0x2258c	0x0
GetCurrentThreadId	0x0	0x42a430	0x2a190	0x22590	0x0
InterlockedDecrement	0x0	0x42a434	0x2a194	0x22594	0x0
InterlockedIncrement	0x0	0x42a438	0x2a198	0x22598	0x0
VirtualQuery	0x0	0x42a43c	0x2a19c	0x2259c	0x0
WideCharToMultiByte	0x0	0x42a440	0x2a1a0	0x225a0	0x0
MultiByteToWideChar	0x0	0x42a444	0x2a1a4	0x225a4	0x0
lstrlenA	0x0	0x42a448	0x2a1a8	0x225a8	0x0
lstrcpynA	0x0	0x42a44c	0x2a1ac	0x225ac	0x0
LoadLibraryExA	0x0	0x42a450	0x2a1b0	0x225b0	0x0
GetThreadLocale	0x0	0x42a454	0x2a1b4	0x225b4	0x0
GetStartupInfoA	0x0	0x42a458	0x2a1b8	0x225b8	0x0
GetProcAddress	0x0	0x42a45c	0x2a1bc	0x225bc	0x0
GetModuleHandleA	0x0	0x42a460	0x2a1c0	0x225c0	0x0
GetModuleFileNameA	0x0	0x42a464	0x2a1c4	0x225c4	0x0
GetLocaleInfoA	0x0	0x42a468	0x2a1c8	0x225c8	0x0
GetCommandLineA	0x0	0x42a46c	0x2a1cc	0x225cc	0x0
FreeLibrary	0x0	0x42a470	0x2a1d0	0x225d0	0x0
FindFirstFileA	0x0	0x42a474	0x2a1d4	0x225d4	0x0
FindClose	0x0	0x42a478	0x2a1d8	0x225d8	0x0
ExitProcess	0x0	0x42a47c	0x2a1dc	0x225dc	0x0
ExitThread	0x0	0x42a480	0x2a1e0	0x225e0	0x0
CreateThread	0x0	0x42a484	0x2a1e4	0x225e4	0x0
WriteFile	0x0	0x42a488	0x2a1e8	0x225e8	0x0
UnhandledExceptionFilter	0x0	0x42a48c	0x2a1ec	0x225ec	0x0
RtlUnwind	0x0	0x42a490	0x2a1f0	0x225f0	0x0
RaiseException	0x0	0x42a494	0x2a1f4	0x225f4	0x0
GetStdHandle	0x0	0x42a498	0x2a1f8	0x225f8	0x0

kernel32.dll (4)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TlsSetValue	0x0	0x42a4a0	0x2a200	0x22600	0x0
TlsGetValue	0x0	0x42a4a4	0x2a204	0x22604	0x0
LocalAlloc	0x0	0x42a4a8	0x2a208	0x22608	0x0
GetModuleHandleA	0x0	0x42a4ac	0x2a20c	0x2260c	0x0

user32.dll (12)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TranslateMessage	0x0	0x42a4b4	0x2a214	0x22614	0x0
PeekMessageA	0x0	0x42a4b8	0x2a218	0x22618	0x0
MsgWaitForMultipleObjects	0x0	0x42a4bc	0x2a21c	0x2261c	0x0
MessageBoxA	0x0	0x42a4c0	0x2a220	0x22620	0x0
LoadStringA	0x0	0x42a4c4	0x2a224	0x22624	0x0
GetSystemMetrics	0x0	0x42a4c8	0x2a228	0x22628	0x0
DispatchMessageA	0x0	0x42a4cc	0x2a22c	0x2262c	0x0
CharNextW	0x0	0x42a4d0	0x2a230	0x22630	0x0
CharLowerBuffW	0x0	0x42a4d4	0x2a234	0x22634	0x0
CharNextA	0x0	0x42a4d8	0x2a238	0x22638	0x0
CharLowerBuffA	0x0	0x42a4dc	0x2a23c	0x2263c	0x0
CharToOemA	0x0	0x42a4e0	0x2a240	0x22640	0x0

mpr.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WNetOpenEnumA	0x0	0x42a4e8	0x2a248	0x22648	0x0
WNetEnumResourceA	0x0	0x42a4ec	0x2a24c	0x2264c	0x0
WNetCloseEnum	0x0	0x42a4f0	0x2a250	0x22650	0x0

kernel32.dll (62)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WriteFile	0x0	0x42a4f8	0x2a258	0x22658	0x0
WaitForSingleObject	0x0	0x42a4fc	0x2a25c	0x2265c	0x0
VirtualQuery	0x0	0x42a500	0x2a260	0x22660	0x0
SetFilePointer	0x0	0x42a504	0x2a264	0x22664	0x0
SetFileAttributesW	0x0	0x42a508	0x2a268	0x22668	0x0
SetEvent	0x0	0x42a50c	0x2a26c	0x2266c	0x0
SetEndOfFile	0x0	0x42a510	0x2a270	0x22670	0x0
ResumeThread	0x0	0x42a514	0x2a274	0x22674	0x0
ResetEvent	0x0	0x42a518	0x2a278	0x22678	0x0
ReadFile	0x0	0x42a51c	0x2a27c	0x2267c	0x0
MoveFileW	0x0	0x42a520	0x2a280	0x22680	0x0
LeaveCriticalSection	0x0	0x42a524	0x2a284	0x22684	0x0
InitializeCriticalSection	0x0	0x42a528	0x2a288	0x22688	0x0
GlobalUnlock	0x0	0x42a52c	0x2a28c	0x2268c	0x0
GlobalReAlloc	0x0	0x42a530	0x2a290	0x22690	0x0
GlobalHandle	0x0	0x42a534	0x2a294	0x22694	0x0
GlobalLock	0x0	0x42a538	0x2a298	0x22698	0x0
GlobalFree	0x0	0x42a53c	0x2a29c	0x2269c	0x0
GlobalAlloc	0x0	0x42a540	0x2a2a0	0x226a0	0x0
GetVersionExA	0x0	0x42a544	0x2a2a4	0x226a4	0x0
GetThreadLocale	0x0	0x42a548	0x2a2a8	0x226a8	0x0
GetSystemDefaultLangID	0x0	0x42a54c	0x2a2ac	0x226ac	0x0
GetStdHandle	0x0	0x42a550	0x2a2b0	0x226b0	0x0
GetProcAddress	0x0	0x42a554	0x2a2b4	0x226b4	0x0
GetModuleHandleA	0x0	0x42a558	0x2a2b8	0x226b8	0x0
GetModuleFileNameW	0x0	0x42a55c	0x2a2bc	0x226bc	0x0
GetModuleFileNameA	0x0	0x42a560	0x2a2c0	0x226c0	0x0
GetLocaleInfoA	0x0	0x42a564	0x2a2c4	0x226c4	0x0
GetLocalTime	0x0	0x42a568	0x2a2c8	0x226c8	0x0
GetLastError	0x0	0x42a56c	0x2a2cc	0x226cc	0x0
GetFullPathNameA	0x0	0x42a570	0x2a2d0	0x226d0	0x0
GetExitCodeThread	0x0	0x42a574	0x2a2d4	0x226d4	0x0
GetEnvironmentVariableW	0x0	0x42a578	0x2a2d8	0x226d8	0x0
GetEnvironmentVariableA	0x0	0x42a57c	0x2a2dc	0x226dc	0x0
GetDriveTypeA	0x0	0x42a580	0x2a2e0	0x226e0	0x0
GetDiskFreeSpaceA	0x0	0x42a584	0x2a2e4	0x226e4	0x0
GetDateFormatA	0x0	0x42a588	0x2a2e8	0x226e8	0x0
GetCurrentThreadId	0x0	0x42a58c	0x2a2ec	0x226ec	0x0
GetCurrentProcess	0x0	0x42a590	0x2a2f0	0x226f0	0x0
GetCommandLineW	0x0	0x42a594	0x2a2f4	0x226f4	0x0
GetCPInfo	0x0	0x42a598	0x2a2f8	0x226f8	0x0
InterlockedIncrement	0x0	0x42a59c	0x2a2fc	0x226fc	0x0
InterlockedExchange	0x0	0x42a5a0	0x2a300	0x22700	0x0
InterlockedDecrement	0x0	0x42a5a4	0x2a304	0x22704	0x0
FreeLibrary	0x0	0x42a5a8	0x2a308	0x22708	0x0
FormatMessageA	0x0	0x42a5ac	0x2a30c	0x2270c	0x0
FindNextFileW	0x0	0x42a5b0	0x2a310	0x22710	0x0
FindFirstFileW	0x0	0x42a5b4	0x2a314	0x22714	0x0
FindClose	0x0	0x42a5b8	0x2a318	0x22718	0x0
FileTimeToLocalFileTime	0x0	0x42a5bc	0x2a31c	0x2271c	0x0
FileTimeToDosDateTime	0x0	0x42a5c0	0x2a320	0x22720	0x0
ExitProcess	0x0	0x42a5c4	0x2a324	0x22724	0x0
EnumCalendarInfoA	0x0	0x42a5c8	0x2a328	0x22728	0x0
EnterCriticalSection	0x0	0x42a5cc	0x2a32c	0x2272c	0x0
DeleteFileW	0x0	0x42a5d0	0x2a330	0x22730	0x0
DeleteCriticalSection	0x0	0x42a5d4	0x2a334	0x22734	0x0
CreateProcessW	0x0	0x42a5d8	0x2a338	0x22738	0x0
CreateFileW	0x0	0x42a5dc	0x2a33c	0x2273c	0x0
CreateFileA	0x0	0x42a5e0	0x2a340	0x22740	0x0
CreateEventA	0x0	0x42a5e4	0x2a344	0x22744	0x0
CompareStringA	0x0	0x42a5e8	0x2a348	0x22748	0x0
CloseHandle	0x0	0x42a5ec	0x2a34c	0x2274c	0x0

advapi32.dll (8)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
RegSetValueExA	0x0	0x42a5f4	0x2a354	0x22754	0x0
RegQueryValueExA	0x0	0x42a5f8	0x2a358	0x22758	0x0
RegOpenKeyExA	0x0	0x42a5fc	0x2a35c	0x2275c	0x0
RegCreateKeyExA	0x0	0x42a600	0x2a360	0x22760	0x0
RegCloseKey	0x0	0x42a604	0x2a364	0x22764	0x0
OpenProcessToken	0x0	0x42a608	0x2a368	0x22768	0x0
LookupPrivilegeValueA	0x0	0x42a60c	0x2a36c	0x2276c	0x0
AdjustTokenPrivileges	0x0	0x42a610	0x2a370	0x22770	0x0

shell32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
ShellExecuteW	0x0	0x42a618	0x2a378	0x22778	0x0

kernel32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
Sleep	0x0	0x42a620	0x2a380	0x22780	0x0

oleaut32.dll (8)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SafeArrayPtrOfIndex	0x0	0x42a628	0x2a388	0x22788	0x0
SafeArrayGetUBound	0x0	0x42a62c	0x2a38c	0x2278c	0x0
SafeArrayGetLBound	0x0	0x42a630	0x2a390	0x22790	0x0
SafeArrayCreate	0x0	0x42a634	0x2a394	0x22794	0x0
VariantChangeType	0x0	0x42a638	0x2a398	0x22798	0x0
VariantCopy	0x0	0x42a63c	0x2a39c	0x2279c	0x0
VariantClear	0x0	0x42a640	0x2a3a0	0x227a0	0x0
VariantInit	0x0	0x42a644	0x2a3a4	0x227a4	0x0

wininet.dll (7)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
InternetReadFile	0x0	0x42a64c	0x2a3ac	0x227ac	0x0
InternetOpenA	0x0	0x42a650	0x2a3b0	0x227b0	0x0
InternetConnectA	0x0	0x42a654	0x2a3b4	0x227b4	0x0
InternetCloseHandle	0x0	0x42a658	0x2a3b8	0x227b8	0x0
HttpSendRequestA	0x0	0x42a65c	0x2a3bc	0x227bc	0x0
HttpOpenRequestA	0x0	0x42a660	0x2a3c0	0x227c0	0x0
HttpAddRequestHeadersA	0x0	0x42a664	0x2a3c4	0x227c4	0x0

shell32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHGetSpecialFolderLocation	0x0	0x42a66c	0x2a3cc	0x227cc	0x0

shell32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHGetPathFromIDListW	0x0	0x42a674	0x2a3d4	0x227d4	0x0
SHGetMalloc	0x0	0x42a678	0x2a3d8	0x227d8	0x0

Memory Dumps (2)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuilds	Bitness	Entry Points	AV	YARA	Actions
ghost.exe	1	0x00400000	0x00432FFF	Relevant Image	-	32-bit	-			... Memory Dump Actions Download Dump Go to process
ghost.exe	1	0x00400000	0x00432FFF	Process Termination	-	32-bit	-			... Memory Dump Actions Download Dump Go to process

Local AV Matches (1)

»

Threat Name	Severity
Gen:Variant.Ursu.408111	Malicious

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0NagluJe.swf

Modified File

Unknown

»

Mime Type	application/x-shockwave-flash
File Size	70.19 KB
MD5	07109fc139d107d9d7e91c58315b9f9d
SHA1	7e0a814828bd63ba9f8fa1998f6024b8c8443f05
SHA256	d5558e44a103d63aed18194774e3d48dd79e2aa5aa380c1a19a4a4588ea7a677
SSDeep	1536:XkFdhrwipgQDzarsJ8HVFIkVwtHAxznQwvvYZUoV:qdhrwI0FIkVwNAxzQkvb0

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2hBszUnkJ35er6Gic7.flv

Modified File

Video

Unknown

»

Mime Type	video/x-flv
File Size	62.27 KB
MD5	718627fe2bc58ef002e6d853ccaa6337
SHA1	563c4dd00b30a3a4bd5137d5abfd7d36a0550a59
SHA256	63a2520805287f93bc647814dff287990e8044439550bb3d98d6bc995684d8fc
SSDeep	768:+U3lN0U389dsf5s4APS7Y2F8wJTpBLUgaWWFIC8yN4N4+PWbk4xxDu5D6T86k+LG:/xecAPCFTvBLUg2FARubkaD0QHW66

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5d5VWpkl8nkJI.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5d5VWpkl8nkJI.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	83.78 KB
MD5	f5e9e93efaf0dc96e3412fcf989ef607
SHA1	768e638bca57f85ad82dc015ee62535cd72346ae
SHA256	1684a37f38d0cf996ff8c36e99ccc932cc6c111512e873687d28bd316f8ca64b
SSDeep	1536:3gLPiRXMw/YV6DCoMIXukTfPI4ejzNsQF8ZqHwisRuWONRXFKNB76q91:3gLKVMw/YEEII4ejxspKwiUWKX+a1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5z4SaQ_2nnpZR.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5z4SaQ_2nnpZR.wav.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	48.31 KB
MD5	a5ec3d317d652738247747d600cffb9b
SHA1	154f59666fca49962d3d20d666c489c3b83c11fb
SHA256	1af1b78c960544b5ee725677e0edb3c3f464ffc49d6b1349500d5f1c903beffb
SSDeep	1536:A6d9WoOBT5HISx7I/JpICWbNro6TFuvEPRP7OTmbzs1:A6z7OT5H+/ACWbNEC41

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6Yn_MG04RWdG nN.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6Yn_MG04RWdG nN.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	27.42 KB
MD5	5224505441b6d49906c24a95512b00d8
SHA1	0c7e7a15244742b866ab6a81dcee8745d8e91dd4
SHA256	a50cf119b90c8db4b696e24c224c22783baaafceb39af818dc3bd3028ca33188
SSDeep	768:PjfRNc2MgW3a6g8jYuAjHcLaPb1w4H4gGrj1:PjHcpgWqp8jYuA2aBTH4gGP1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9Q-HhR83x mG2iQ0AxBD.mp3

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	41.83 KB
MD5	49afaabff37116b837d4c556bb95284e
SHA1	e71d02b8b499093759f586de762656c92256bc24
SHA256	9bf76294acd7326b9dfd0a7898f964576e27a60bb3ed33d28d5223711972f30c
SSDeep	768:17AN7i7Btxmlp7fD71GjHdF/Vz+lwM9oLVLJ9nzfhPkeiOH/IKZtmF:1XElpDDZIHd5Vz+lnOL5J9zf1TbEF

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BDd24L.mp4

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BDd24L.mp4.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	34.13 KB
MD5	ce59473eb790cee788dbc0a9a71cc3bb
SHA1	a20239f49051c20a5bf5210148c45ae944dd663f
SHA256	67889f0a6ccbd14404b5022bc3858dde84436db3480c7418bfcb82eb93d69408
SSDeep	768:+NQTpfphQYfaGFOVjGZKYe0QX5zscBY72OqtS+5e1:0Atph5CgPZKJJwCtdA1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eFXmys9JK.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eFXmys9JK.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	20.02 KB
MD5	e39215cdcc8b857c766481032925b4c9
SHA1	c666cbdf64cf2b88c03bb9287a801006802be431
SHA256	4fe624dd200825f4a03a1b1e8d16a0ef704bb7228b25519fabc318d36afff686
SSDeep	384:dXGZSedfbqE80e+8sj+aFIcec3OKL4wejVEWzTh1CH/HOHeRS:dXGtdO5+8sVIc/OKEwmPafuH1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EuENQ_X.xls

Modified File

Unknown

»

Mime Type	application/CDFV2
File Size	77.60 KB
MD5	7a8d7f1c5e97d1b57d8f408fe3ed2c2f
SHA1	7ec63a844cba6076c5b8cf51d09f80783117b7db
SHA256	694ef587465a7d8be8a4d4e1a2b1dcbaa535ca21e7817254b8253ebfd94bc05b
SSDeep	1536:watlSlAJNhvpQ/GzLjDT4JEwU94ohEAI49zmD4wYx/0eYxBvLySwinUKhBL:3tAiC/ELJJeN4w4bCfLy6/BL

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EuENQ_X.xls

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EuENQ_X.xls.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	80.03 KB
MD5	0640d2ea241118554d7b9aee2694a83f
SHA1	08f152384a9a9f6d8e79dfe63c4ab8394b364e4e
SHA256	88439747cd109b68d077f5ae5824e73309b482cb3cd82c7eef304071a9867986
SSDeep	1536:BQf+fdfmDlOaNfjd9675sqURE+cA8IbdFhYawinUKhBC01:mf+f5mDH967mpZEyx/BB1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Gb0CrSMfWX-G.flv

Modified File

Video

Unknown

»

Mime Type	video/x-flv
File Size	68.33 KB
MD5	2ea642a8872d375af35ad20d30cd59b1
SHA1	85925f3fbe025289cc7f03c88401210bfc32c864
SHA256	a712bfdfe349c3706e9642efc17f59b8ee4bb408514bff8768ed7813de66e997
SSDeep	1536:bv+yX5wSFNgLJC1FKGhgoPL2mdRoBuC4znDsgikpv6a9K/:bNX5waXHUsL3R4pwQgiU6F/

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\IdGL8ZM.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\IdGL8ZM.wav.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	13.64 KB
MD5	af32a48f660ffc93bd615697c6450f3b
SHA1	bcb20ce95532af6ae3472f9a8a85b6d5e108e048
SHA256	0294ef5da0a874a82c7d3a560cf663d3c21ebfd3cc444045644163292ea5f640
SSDeep	192:NxtaRE5NsrPP9aCRmDYd+QSs8AvuO1PGSSNDuPlc2G6hFFFbdjO1j9eRbS:Nyus0CRmMd+QSjAvuOAglzF1qt9eRS

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JjAcMR.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JjAcMR.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	63.35 KB
MD5	0aa64ae6958828d3132aec6d02b80c31
SHA1	808fdb27212ab259d4e4ac026ed00f04507c3704
SHA256	1c9469f83ed0f7fb1e7afe6e531cf54a3f6f2e301b4d96011946dd4f13af261a
SSDeep	1536:xPuuN2FdfkRLqpdmNBewk/Fafv3Fab2GWpJJuGQkvlI1:hNkKqnmNlkIfQb2GWpDztI1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\n8idk3vWdO5F.avi

Modified File

Video

Unknown

»

Mime Type	video/x-msvideo
File Size	71.36 KB
MD5	00fd05b6a5529b99d17f9f14b16782dc
SHA1	0f739655f956b91463df2b408dd4c80d465a7b7a
SHA256	960d593c4c116799616b88438100ad1978d8a5f43b2e49f632c7bee6e8eef12a
SSDeep	1536:nrJkNSk3s8C+lnSDzbYhLHr3Kb4IYJlOcm4DXJ8G:9kXZSoLLw4IYXOQP

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\n8idk3vWdO5F.avi

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\n8idk3vWdO5F.avi.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	73.80 KB
MD5	4988a98c49b82521f791796b43914ef8
SHA1	fbb0f9df5b44dd1b24b41e6b9150ca59c1c97696
SHA256	da8ee3167695ec03ab2038d5e958fcb87558cb6e9282d395a5409978d1b7104c
SSDeep	1536:irN25HR57ixdEnv1Lkl5gNxBYfAGu1+wRHp0mPZW4KhJ8+1:QN2hRl6dEv1LlzBoaRHlC1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o8n LH1.mp4

Modified File

Video

Unknown

»

Mime Type	video/mp4
File Size	70.12 KB
MD5	dddec5f14152425b099fa32c15191f7b
SHA1	3e95a369b319b33bb8fe5be42a709a5a1918ec2a
SHA256	9a35e13bdad84d5ebf52ea7a49d56830dcf2dec125360e855b7a5f7810dccf9e
SSDeep	1536:S/yO7oARwMa6uJk0iw8K/2T69AittNFHL2W58SA9CO7YdKjYKIc:SHRwMzY/26Ndr2W5e9CO7wK0Kd

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o8n LH1.mp4

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o8n LH1.mp4.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	72.56 KB
MD5	3636b6b846df47785807a133efa5495e
SHA1	edee18dd46d7d84573debbf67e307ee54f9a1b73
SHA256	50cc0a25b90b9010075b9d9fed6e4dc43dd0cb4f6bf2003f657852760bc9882e
SSDeep	1536:7iCHMV0m8/UKVTvhIMQq0E3u1OBnF7P6TqNu/CLAbzaIw1:+dV0dP130E3xF7P6TE1gav1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oIeB3sJMhnjQNyayV8jT.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oIeB3sJMhnjQNyayV8jT.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	41.86 KB
MD5	06e06a37daddca68626adeff08c7f32e
SHA1	c70ee66857a690e09e2c88f9a5994b6927e8f0d9
SHA256	fd377131dc4e6e97b38bb0be0466047f5f1fe99be7bca9915cbe60e6bf0b693a
SSDeep	768:WVyS2NQQzP15SlLgFddAnXYZFpuDkk8sXsx0YJDFyHA20q1:NbzPeLgbSX0FpuDkkLXspRFyN1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ovwxJn6XyOytKVFhT.flv

Modified File

Video

Unknown

»

Mime Type	video/x-flv
File Size	29.17 KB
MD5	d24383000df0f2db451e4922b7152cd5
SHA1	187d5fbf1a63f15b4e4e82bfd6125d98cd297f94
SHA256	52cbb7a7014e745e3941bbf7d81a13c2b92d183d86ed44f7e482829b2fa5cf53
SSDeep	768:ZCZX1AlDOTPzRf+dSFZuj5yeCBCAZ1mqjBHCr1lEg1v:cF1B1ySiGBb1mqNHCj71

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ovwxJn6XyOytKVFhT.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ovwxJn6XyOytKVFhT.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	30.64 KB
MD5	5902421abd8a1d4c216b8c1666caab70
SHA1	b278b8d161caed01aacaf868d1346c135c4b7468
SHA256	38e6b8231c7d046e48f392348bde4b4842acd6ebe07f4a1c735730be6eb6448f
SSDeep	768:xqk7PRFDYjC1zNHMe2dVjq3O7B5fYPNFPgg9d+b16Kq1:xzZFcjCZ5mdVjIFNFPgD56R1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qixNTOIS9nsbj_.png

Modified File

Image

Unknown

»

Mime Type	image/png
File Size	73.97 KB
MD5	8417028e62aa638ee14648f323150167
SHA1	5d0e4bb81e15ec17dfe9d286c2d437551fab1345
SHA256	d46dbeadf635c24803edfbc61f84d55fa89d0810a8504640e2c1c5aea568ed01
SSDeep	1536:KbDhZi9nBnIzXj0v4JfGjSThSFePtZLb41gRA7FkEY32kHekRxQWrc3XJb:Kbfi9BnIzXlJfGjwVDv4p7FkV32oPQWC

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qixNTOIS9nsbj_.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qixNTOIS9nsbj_.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	76.40 KB
MD5	4f7af9a22c7f17f07408c8f067baf2b5
SHA1	cc0a52dbc4ceddda5d9822883594a9da73f6a213
SHA256	22b4e4342247dd22a27652b68af01f6b262dd8031a3a7a9e295b531ed145faaf
SSDeep	1536:goJD7/qE+esjuqCgw+a9m1C1RyATue8/gYc7NEtK7QWrc3XJsB1:zD7ibeBgWccTBt4gr+qQWoSB1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sK4ZlVLVDZggt2xh-.flv

Modified File

Video

Unknown

»

Mime Type	video/x-flv
File Size	62.64 KB
MD5	595b7646af395e8b351b2c6772446eab
SHA1	11cd7452185b3119e8cef1dfa673a9bec9bec6bc
SHA256	8c68bb16ef7e06705863158ea8a5bf2b09d7412b9153d004fb819656a6894486
SSDeep	1536:EjmSVzFAYc0Ve40gak4kEbnbB25WxLKOLLEb:EjPc0o4pak4kYhxLKO6

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sK4ZlVLVDZggt2xh-.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sK4ZlVLVDZggt2xh-.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	64.10 KB
MD5	9cc491c44331665632edad7a7fd3d15c
SHA1	9d2fca6bb80c93e05850dacef36b6ed36f18f5c5
SHA256	d1b41eec4015995c220102c27bcd48ea6d43c9cfd195ff779fbb5dc915931db5
SSDeep	1536:X6OYJjSRmfPCg3/dHLptmVMi0tF4z7VsBNIZGNT48zRY1:XdYJhfPj/drpt/i0tF4z7IIwY1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sM9d96uE98BG3Zgb.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sM9d96uE98BG3Zgb.jpg.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	84.64 KB
MD5	6bffb8b7465603ab08de439aaff5bb62
SHA1	277482cd34f5acb716d000467819ef0f7ae16ae5
SHA256	58e7952e253b103b75e958547f5e03baf20977c6e13564022f45b7970b1f885f
SSDeep	1536:UFFToUoJSAVtKMkjZNCNwVJPFdxOv9+YQi1InOKc/KfMhALL+xMRLZmlCh51:UFXoJSQEMqVJP1OFgnOCfMhALlZZPh51

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ss2uHqoar9W-_b.mp4

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ss2uHqoar9W-_b.mp4.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	72.24 KB
MD5	afd8f48f92a9a9a720bb51eb583106f2
SHA1	72940c452658590008f67dfefa15d80c5eba6be0
SHA256	8dd87d5cb7bda27332baea410102b32d82064d4cf79264b57cf475c72b0d8e8e
SSDeep	1536:zGkWpMUifNulsJPYEkCe8APwzM5Iwtgj1Fq7pSYG72wV1:PWSLuEYEkCrAozWIwtW10Yj1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tLrfkuio9B 5.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tLrfkuio9B 5.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	22.78 KB
MD5	ba55d7273f2bbc56448ad590b91a3464
SHA1	4f94a498996c390f2877c7634f9c48574f8f8c3e
SHA256	ce605fd7e9e4471cb2036f78c276eff6b0d2e2668f12f24cec56a513d959bb32
SSDeep	384:r1LutH7QdC5SFu0pChJyYKXNmt3h1VwL8lod5pAmUS0DU21/uxzVkpw1qYeRS:ZKtH7QdiSFuDhEYKd8baL8wk/SH24Cp6

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\u_R48BY.gif

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	88.92 KB
MD5	9a240a2438dba9310ab859763bdc6ccd
SHA1	2789980ee1c9f25d69f67d7d1b7082489239e048
SHA256	e4dc4299251c0e16510def73af088fea3170bca9980b0c13a405b845f8f2ce38
SSDeep	1536:AgQgYRYwKtE5fuNDE0Nr9IzBkqRFuwxd3r57/2IVYNxN8N8cR4F57k+:At2FuFuNDNNpIzBkmFu0l/ZVYx8N8W4F

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\u_R48BY.gif

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\u_R48BY.gif.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	91.35 KB
MD5	d6692dce900720b1868212d30d0fe235
SHA1	e042b4fc16770d7a08cb241e6f289f500f67db5f
SHA256	e4ab79925dda631946f6fba35e7d7ba9549ccc030c20f2e8bdec6b701226b554
SSDeep	1536:Mmh3j17iMgTbntMSwkPryZGrV7xvsR7f5vfiq9m0c1bExRsQG05nwmaReGwNxN89:MmhT17xAMSnyZGrV7xm7NfiqU0TPtGRH

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VGkZRPDIEB5BcnL.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VGkZRPDIEB5BcnL.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	34.53 KB
MD5	242cdf825ad20175cbb9b29eb03070c9
SHA1	ad9ac0c95104531f7e3a2abd2a97cb290c4baf35
SHA256	b231916f406198b39f9905203979a91dd173cfc47ee566395b3abf263bee919c
SSDeep	768:S5klQNaeycr1lPRoFKsmD99puACYT50roV6oYWIbnzf7EBsN1:2klQnXGF9mxvuACYVec6sID1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\x 1caoL-S7.csv

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	63.71 KB
MD5	119057941abd1c714c2a9c38bc931e07
SHA1	c54afd2dd02e935eca89f30592256156721beb11
SHA256	3db80c459dc9ddcdb4611602810dd4691291e1e992c882653457e0436d71930d
SSDeep	1536:XVkiaZe0p/80DQjjyHrj5tj4qfSAQiL5R1n71h6:XVRaZl/8CNt0q6+5RV71h6

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Zk3VwiKVrrA5x6_Zmal.swf

Modified File

Unknown

»

Mime Type	application/x-shockwave-flash
File Size	33.52 KB
MD5	fd5ea2fdb0284303a48dbf05c081a099
SHA1	263ca20ee2bc3cfc2070a294cb0a00de3fa3b661
SHA256	14833b9fa3ba516b717c6c64442c1155fde86fccc10552b8d701c38cd8b413ee
SSDeep	768:MtlJzUfjtDsx3GG3KtM8/2QOIilNf6Y0BiIAPABfEgzyXqxq8ue:Mtahgx3g687BeIAPcsGq8x

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_N63TVGbX56o.png

Modified File

Image

Unknown

»

Mime Type	image/png
File Size	77.88 KB
MD5	0831b83c809da2762e9c820470431ab3
SHA1	b5c0478de8f41fd6450b62211dee992c539bb78f
SHA256	8012955e4fa294a5c797b1a6aa6962e0e93395afb0debd44c94ed8a0bc848a91
SSDeep	1536:VZ0JbReMzZnv9794cI5gjyxHobPPL0O9Nxi4A2WQ7zi4Xt:VOteAvocIDiz3Xx5D7zxXt

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_N63TVGbX56o.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_N63TVGbX56o.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	80.31 KB
MD5	a0d3b4723c82261a1ded77fc1ef23e56
SHA1	09c240ec34afbc17bf2b844f344d83d2bab36fb1
SHA256	5d38049652728da8e14f8d6baa4ca28bf28d2064098cb6b3bfc57ee793167efe
SSDeep	1536:yaI0TcOL2PespfOYLU5khkGkExhNTAgmSODzi4XY1:xITOCz1UkXJHODzxXY1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\1dE88GOiYizXG.flv

Modified File

Video

Unknown

»

Mime Type	video/x-flv
File Size	59.01 KB
MD5	f4e09af27422e0dffb23cbbc05e46195
SHA1	d8e9b9cdcbd70f6adac2476b4fe7d26a38c57bcd
SHA256	43a9338573b08e69ae1c88930321c5c16185d25785037525e4a5fd003acee12d
SSDeep	1536:cre+54x3ftY8zJgpePP2ZBKyR5nae5488UPFq:cRGx3ftY8z+6PIR5ae54h

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\2-IEroLUx.bmp

Modified File

Image

Unknown

»

Mime Type	image/x-ms-bmp
File Size	40.18 KB
MD5	299617532a039bfebc6d126cd7f4af3d
SHA1	1d43445e896756615e86a828a0ba5ecb964bb1fe
SHA256	247228760aecb92db8c74394e63419c789935339b770e06822fd280affdfca07
SSDeep	768:pFBdlXFAxdne/NwN4/xgLuCIW706DHCZpI+7F3/kgojFmzb4yWKWoMY9qBUievk:p/d9FAfe/q4euC77dLX+VkVlyWKWoMYM

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\A0vu66 JfRNdSDM.gif

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\A0vu66 JfRNdSDM.gif.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.27 KB
MD5	3a96140fb6c8bef66292a7cd2abd1ac0
SHA1	9f94ba4ee7d9682db8902e2349f46873898c8559
SHA256	ecdfd23d65181ed0ef09c34b277f511e8c048689923ac7f1e1b0ec2aa341c866
SSDeep	192:z5rHuhOIUoaVT5zHWEUstYbAeCC4Uz/XhAXg1fIeRbS:Njr5oQT4otYbA1CXqXGfIeRS

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\AP8EaD.m4a

Modified File

Audio

Unknown

»

Mime Type	audio/x-m4a
File Size	90.10 KB
MD5	76bd71a57bcd4715dc3c662fbcd55ae8
SHA1	c43c8243b09d7831229ea8cae651f8d2c8b41f73
SHA256	0129d02eb9c03de7143845174c702492eb5b9a26ec605a7f457a6298b934573a
SSDeep	1536:eRNo6fttqjFt35KFh34ZzIsUwtbP8dEnf7+bDFg5HVzWq3vUFQc10V9fKj5ZQ:eRNGDJKFhoZzIsUG78dEnf7ftVzv38FS

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\AP8EaD.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\AP8EaD.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	92.53 KB
MD5	3363c30a2242eeda0224c587d99cca80
SHA1	a86e37d73b7acfae80ca3e3aec67d48fc565d17d
SHA256	232a2ec7f0bcaee9e292f1eaddc6d73653ba040c8c2951ac1e46287e779c5092
SSDeep	1536:FMS/bQlXfHN71xYNeM71T+qZ1MduS/vxKtddlBkWD9pFkrbevUFQc10V9fKj5Zo1:OS/bQlXfx7wD717Z1MdF5WzD9pFkrbeJ

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\e69X.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\e69X.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	45.13 KB
MD5	47fc1f3f3b64ae195a5d846fef6c408f
SHA1	e66f05a1468ecda581c6fca67e076df01a71ef4a
SHA256	8cdc29b1d3ad3cd9a7a5e550f05c812aa4851ca85080de4e82805476b931a266
SSDeep	768:nmJVezsPulxklSSBynUIF//Yq2EP1wJDnHUDClroYaHW6UqvSoBU2cQWYbf8x1:mJVegPI+VG/QqVP1wJTHUsrPa24Sw3fA

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\rCvu.docx

Modified File

Stream

Unknown

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\rCvu.docx.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	52.91 KB
MD5	9b1dd300a2ecff6de1d8beab359d8697
SHA1	edd9b2e4ef38e5ff3734c4d41e0edb0f0cd53a6e
SHA256	0d84dd1b2fefac5a55ab26f4d815efeffabe54dc33d848a2732969dee0a220ff
SSDeep	1536:iaZabi0Fr3bwOAQSYjBOHVmyzO0+VvrBXxodg1:iaZJ+fZBOHVmyarBp1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	18.31 KB
MD5	112599805ce6d9d0912a2d75d7aa8b42
SHA1	567d3e3682cf3f4bb7774325dfb9ce253cec24c5
SHA256	669be9ef809b5bd842dfe054bc45ae4dbf30fb15b20034a5555867f0196b0dac
SSDeep	384:MUnxP9RxcVg/0HTwCYFEc2JYGQarHu8KZuSxJJCs0LeRS:MUt9RbcTdHtKB0L1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	19.77 KB
MD5	4ea6800cd826a6cb36740cad049f63db
SHA1	59a69a5f04a9eb60eb69b9fa3c1a358ed44afe18
SHA256	922d46f1dd8d903f16d10e0417fca23c0e5210a78785ac433fe2cb61cdbd830c
SSDeep	384:LrJZyArkdUqvyMXzGQbi4gZX0NNcCCbVgeBs5NRNN3KFT99S25eRS:L/yjnZ31gBCChyNNKFX51

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	31.69 KB
MD5	625c22155585214062ece52c2bab8146
SHA1	a8c0d4d8c537b818de72fe241f2adaf292578547
SHA256	c08470784872e19bfd7cc6cf0001da94a5c75ec2d241acf0e8b5986e43bfde7b
SSDeep	768:Kp39tfoWTbFPELR67E1VvbaEkitJlNX9Qk1:KpfoUbx0QyVvmAJlNXGk1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl

Modified File

Text

Unknown

»

Mime Type	text/plain
File Size	33.28 KB
MD5	6f2c94f4b9c1cfc70c9d67b31a0b0894
SHA1	4a3d4e48217388634284d0f32411b3dfb451b462
SHA256	4e19571450fa29b62e82786e8ebcb1d8de307e2f8a0baca384cc18d998bb932c
SSDeep	768:x0QGyvAKMs0wV0xD8E50hnPnKekcIibHb:xv8KMs0wV0xD8EGhnPnKeksb

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	34.74 KB
MD5	63a35b71c96a281785994d04e7fe4a79
SHA1	df5ce7516ea9d58e7022b01a61d453aeedfa06d0
SHA256	a7e62ac25bfb90ac77150f70cec47c388e829b7042479ec9436bf2d816932212
SSDeep	768:n9tmszWuHljABjrLhT4md1CqX5M7AthHlxtRTa+fadKzksH1:9GklcBth1zpM7AfDa+f0sH1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl

Modified File

Text

Unknown

»

Mime Type	text/plain
File Size	29.09 KB
MD5	994d59c43f7b46e5f3c8bdfbf0a4b3c3
SHA1	8faf5dc3160327c541267a6b8f4bb33ce8557d00
SHA256	5d40b295d339b25a85b078091296e9ff6940751c1ca4f52850bbdb8c5f27d62f
SSDeep	384:N5mCDmlqiHr3iHrnFBbs5zs0wVN3hEnPBKzsxcV/HGk/T/VIibHr:N5NmlKMs0wVN3hEPBKekpIibHr

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	30.56 KB
MD5	5de46ae0dee4ef16b9b7341bc67bb670
SHA1	f6cc0f226cafe82d57ed75e3e1627fc8a8ac2c3b
SHA256	0c20aae7897940fb9039ae1794fdd020ea49a6446b11ae35eac3b312679da828
SSDeep	768:ZedsWSG2TdE5ouOsHEbf4K1mqcx9jAxFrS81:YsQz5pOsEK9kxk81

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll

Modified File

Binary

Unknown

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	650.84 KB
MD5	65ef0a8e5cd8f60dc5c1c5d28d123267
SHA1	d54c2a99d29b18680fe57970c802d761ed6e6d61
SHA256	09b4fba0fd89a5f1fb966bfe1cb1143a64d2e56ea8b7b080afb82ac4385e19ff
SSDeep	6144:GVG5g4GLrhwG4AQWmi3fMCBJCDr1QN4bULE:GVG5g4GLrhwG4AQWmi3fMCBJC8/LE

PE Information

»

Image Base	0x46410000
Size Of Initialized Data	0xa1200
File Type	FileType.dll
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.amd64
Compile Timestamp	2009-03-29 18:20:10+00:00

Version Information (10)

»

CompanyName	Microsoft Corporation
FileDescription	Microsoft SQL Server Analysis Services
FileVersion	2007.0100.2531.00
InternalName	Resource strings
LegalCopyright	Microsoft Corp. All rights reserved.
LegalTrademarks	Microsoft SQL Server is a registered trademark of Microsoft Corporation.
OriginalFilename	msmdsrv.rll
Platform	NT
ProductName	Microsoft SQL Server Analysis Services
ProductVersion	10.0.2531.0

Sections (1)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.rsrc	0x46411000	0xa10a8	0xa1200	0x200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	3.97

Digital Signatures (2)

»

Certificate: Microsoft Corporation

»

Issued by	Microsoft Corporation
Parent Certificate	Microsoft Code Signing PCA
Country Name	US
Valid From	2008-10-22 21:24:55+00:00
Valid Until	2010-01-22 21:34:55+00:00
Algorithm	sha1_rsa
Serial Number	61 06 27 81 00 00 00 00 00 08
Thumbprint	9E 95 C6 25 D8 1B 2B A9 C7 2F D7 02 75 C3 69 96 13 AF 61 E3

Certificate: Microsoft Code Signing PCA

»

Issued by	Microsoft Code Signing PCA
Country Name	US
Valid From	2007-08-22 22:31:02+00:00
Valid Until	2012-08-25 07:00:00+00:00
Algorithm	sha1_rsa
Serial Number	2E AB 11 DC 50 FF 5C 9D CB C0
Thumbprint	30 36 E3 B2 5B 88 A5 5B 86 FC 90 E6 E9 EA AD 50 81 44 51 66

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll

Modified File

Binary

Unknown

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	14.52 KB
MD5	def966b4398d0bf3855c98442a592404
SHA1	747b96477e92791e069b7995822b53416d7dd1a0
SHA256	e1104e6d3e4f993043ac126c8f3d2c2e48d2bcd909e5066e6e6f74b1b6000b85
SSDeep	192:gKWdcO1jJ5WO05MsaYOF4gavfo6oEQKPnEt2yt8mJz+jaIhjTH/S:ZWdcEjJ5WD5S4CnELKt8Cy/j+

PE Information

»

Image Base	0x429f0000
Size Of Initialized Data	0x1400
File Type	FileType.dll
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.amd64
Compile Timestamp	2008-07-09 21:50:46+00:00

Version Information (10)

»

CompanyName	Microsoft Corporation
FileDescription	Microsoft OLE DB Provider for Analysis Services Connection Dialog 10.0 Strings
FileVersion	2007.0100.1600.022
InternalName	OLE DB Provider Connection Dialog Resource Strings
LegalCopyright	Microsoft Corp. All rights reserved.
LegalTrademarks	Microsoft SQL Server is a registered trademark of Microsoft Corporation.
OriginalFilename	msolui100.rll
Platform	NT
ProductName	Microsoft SQL Server Analysis Services
ProductVersion	10.0.1600.22

Sections (1)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.rsrc	0x429f1000	0x13c0	0x1400	0x200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	3.43

Digital Signatures (3)

»

Certificate: Microsoft Corporation

»

Issued by	Microsoft Corporation
Parent Certificate	Microsoft Code Signing PCA
Country Name	US
Valid From	2007-08-23 00:23:13+00:00
Valid Until	2009-02-23 00:33:13+00:00
Algorithm	sha1_rsa
Serial Number	61 0F 78 4D 00 00 00 00 00 03
Thumbprint	D5 7F AC 60 F1 A8 D3 48 77 AE B3 50 E8 3F 46 F6 EF C9 E5 F1

Certificate: Microsoft Code Signing PCA

»

Issued by	Microsoft Code Signing PCA
Parent Certificate	Microsoft Root Authority
Country Name	US
Valid From	2007-08-22 22:31:02+00:00
Valid Until	2012-08-25 07:00:00+00:00
Algorithm	sha1_rsa
Serial Number	2E AB 11 DC 50 FF 5C 9D CB C0
Thumbprint	30 36 E3 B2 5B 88 A5 5B 86 FC 90 E6 E9 EA AD 50 81 44 51 66

Certificate: Microsoft Root Authority

»

Issued by	Microsoft Root Authority
Country Name	-
Valid From	1997-01-10 07:00:00+00:00
Valid Until	2020-12-31 07:00:00+00:00
Algorithm	md5_rsa
Serial Number	C1 00 8B 3C 3C 88 11 D1 3E F6 63 EC DF 40
Thumbprint	A4 34 89 15 9A 52 0F 0D 93 D0 32 CC AF 37 E7 FE 20 A8 B4 19

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	7.05 KB
MD5	eba08318eb8296274327a65acff25d5f
SHA1	af9e13e8904f68c030831e45c60533f5c0c6eaf5
SHA256	b242b726e8b7be708a2bdb4232c460a760e70c7b490ce2f3bfda9383254bdd9b
SSDeep	192:0nsybGduWvD72oug7BAUo6TyD8VUJqUGLx5ED1GLx5qc:0nsGWL72ox7BA94yD8KJqUO5EhO5qc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.52 KB
MD5	799167bfb36cd93d90d392255ddb1c95
SHA1	560e8d3171b89d5495209bf5049a8ea41d48caaa
SHA256	7aa82f0806c28da2a2dcb334acf26cef1c046690b4e79c8aa7e3d6e91c07978d
SSDeep	192:FAkJqh3VHOahpkjKJ89McIjkgC/QAIGTucMUXWK+NUyHqHzeRbS:FAkMHQKJ89Mcv/efIAYeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.64 KB
MD5	5a2f0b493b19c7844b66b13a2a39855e
SHA1	55bc22249fd03bb8647f5a01ca475a915e5b2b47
SHA256	c25988eb55616806d388b54f8c30eb721c7616a110fb0fd296e0daf34ec93e32
SSDeep	96:qdcl64wk+YiBmqr8mRRJw/uTDerhFodfoC5kyvWR9Jhhz6dDa/AS:qa64wkmAq3RJAuTDQ4d5Sy8eRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	7.91 KB
MD5	da172b0f7539b3b273ee17b6c4004741
SHA1	33f5ed103a93acd2c37272b57871d1c288fa5b4d
SHA256	4b84504818e0156605a91464a184456589b817e6ee2adf6dd5c6943938290927
SSDeep	192:bopGhtbnNKAPd7jeTJAAG8mNZuTGa1rAdBzsF:bQObnfVje1AAG88E6adazM

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.38 KB
MD5	357e9d1474f43429444c5aa798eb72e3
SHA1	5d872a143499443fb771a4ef55b8768f883b811b
SHA256	309e3dc2f42a4a0ea510bf76d3fde29a559b3621416e2ab77a8b1fdac80d8d15
SSDeep	192:suMkj+A8ySoBY5uE069zeMq3zKQpHNqQilagUFi1V3ZNMXieRbS:2AHhZ+y/Hptd3uVqieRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.97 KB
MD5	1be2c70822294ae7d8083334eb56525e
SHA1	e33841361e2835d57ef6c19e7e4ec67653b1705a
SHA256	1fec9a00e98c69d7394c97935706189fdbca3dd760b7213bfc81ed8cebc30b2a
SSDeep	192:xaicT7MHfoeqlrXgvrRidyUx3R7Q/9JeRbS:ls+foHrXqrRpg0lJeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	11.61 KB
MD5	1235bf1154712a915cc815eaf9f2b40b
SHA1	fab1255e284283a3276e8e8cfe570cd259d0ab61
SHA256	c59bc540b111be2bb7ffd39eeab555c56bfaf7f120708544449802426b4bf416
SSDeep	192:kkhgkvIbBm8OBVkuYdLrVDsG0oBjxyrKiFIfY2JQ1ME4CKIatOMEX:kkhRvIbBwEuYdPVDB00qNFOYs2MEtKV6

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	13.08 KB
MD5	1bd081fb53d99b4dd017afbe9b39b78e
SHA1	c883c04df13a23b2140b5d4012cb75b83f9e6930
SHA256	f3d10a339c9935afeead8613de3085472ee8bba97f0675eee68758b47771069e
SSDeep	384:a4zDDyPu6K9FX+C9kBB6aCOWWMl5v/oa+eRS:pzDmPHKrB9UBjcdl521

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	518 bytes
MD5	18fe1d8284d3f3ceed271d10250ec77b
SHA1	82a9ea064eff7c0d2c9a41c5cbe0aca4fc5bfed0
SHA256	ce2f9f2c0b6a177e4d77624feacb97cc1c011cb76e73533434801747be68e83a
SSDeep	12:y/TSs6wKfzGhBpKtKsPLvJi9JYnJAWKIeAjpUUKsPLvJi9JYnJAT:w6pzKP2QJK606mQJK6T

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.97 KB
MD5	51a10495372a9c394052a04d8fa448f9
SHA1	f295b066515f4616720b595374033201dcebac21
SHA256	d5f7c000f74e0d4376a68e5fedd847b2ab2d5210b3f95ec0f6cb76faa8b08592
SSDeep	48:cUEHYXt5gEAMk/SVdvWR9uAVhc8S56jU6Gms4SDiD/AFg:SYXMpM6SPvWR9Jhhz6dDa/AS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.96 KB
MD5	e5e052c0976a027bf5d9321cc73a3b4d
SHA1	10e0dd49219498d635162bc0b2f8ead562b6df72
SHA256	171bb7f1c6f68037c8b4e99ec20284ff675fd0aa063526f518ff770286e48e9f
SSDeep	48:gmO+5Jq8Ra9Ufcbt6yVqPmDlzWR9uAVhc8S56jU6Gms4SDiD/AFg:gpoXa9UWHAODpWR9Jhhz6dDa/AS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	12.19 KB
MD5	b49b0e4456705b0a313192f226a8df79
SHA1	c6e58070f2fdd40bfe90cd6329cad0ff18ccbf59
SHA256	936e00106dc94df96a5f5b33c46fedac649fdcbb3ae27a882a6ffec0b57d6b0c
SSDeep	384:kRPk5cf+ejgTbCgsm7h3XKw1h4D3KAy7fWlVdzlRrc71g4VU:kRWzejgTbCg/96WuD3KAy7f8/7rH4VU

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	13.66 KB
MD5	f525c5c127a1094022974616bfa41b7b
SHA1	56c73cb36943d2b73a9f583d84f65802eca6398c
SHA256	995b45c24d9bdc6e2291b7338f1ccd06007a64df3210b8f67fab79b74bc89c89
SSDeep	384:KEOf4vXwypceC49ojDTiEEvS2YWhBe6jeRS:sWgaym6ee6j1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.60 KB
MD5	7b583625934ad3bae0437dc9b462b91b
SHA1	8a506b3e6675de5c63b776e72705f05340b21736
SHA256	ecd5fc8c2ff77edf014f6e93890662fd91c3d0b1953f6f09c4eeea1499731f38
SSDeep	96:OpDn3uJsiYOcdCYNcyGL0t0y6Ua3tMYtS410OnVQ7/eQ21oqXWR9Jhhz6dDa/AS:AexbYzGg0U+yYMop22Q21oteRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	2.54 KB
MD5	4b39dc4b269cc1517b63128d21e1b992
SHA1	d9233138764cef93c784acd48a68897d8f5ecf85
SHA256	a5d027ec50b84a7eb2947886c9842ff98aab7f27a6b68e5182d75d15c63b6f16
SSDeep	48:66X+RwpX6nRwpX6zsp2qBMrW5Iw+fBkQEJvX:d+Rw2Rw2sp2efIw+Zkt

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	10.36 KB
MD5	5411235d42cf2cf31f7e39f993df7aeb
SHA1	e6e7ccdba1628e12993af309718acab94005c03f
SHA256	31d504ce631c0eb6e187649d40b808ffd47ae0daa655ac44b796e68ae1a53a70
SSDeep	96:0C6dfaPr3UdWkZmNUpCoIpVIQXHt00SHs5684TR/nbLGSHs5SXHt04oIpVIUNUpo:l6d0OZypVIQXr41//1XDpVIEZ5

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	11.83 KB
MD5	2d9d64949580a85906a89cb72e3ada71
SHA1	ed7f12f2be86c7964faa89163288b173f980f7f9
SHA256	133c28042268f598dc26f4f29ce0e3c69d57e0ff72bd0f49d288d34540f127e6
SSDeep	192:Du8u5U3eqQiLQDog/CmDLaBY9sn2AU02P+MiRiPaiE+xEDSChE+Od9neRbS:Du3FqzLZeLKdQ+MO7EShSVeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	14.95 KB
MD5	08fd30bcabc7e925e4c9c6a2ad81159f
SHA1	96b072dd7933492aac05a6f4b72eaa6505f24c0d
SHA256	4b2dbe47eafef62288bfdac3d4d2b2c3f940e28352d17fcb93c946b7eacd79a7
SSDeep	384:pAD2kMBFSNqKFSbbFSXfFSUFQPM0aLFOU56Fi8F7w6NFSm:pFkg4qK8bSNuaLvkk8Jw6ND

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	5.19 KB
MD5	e1279769f3cff9ed859f82228f7fbaa5
SHA1	c6ecc70cd36b3d55df617b80c33261932db15720
SHA256	04056983aa58c525a8a2df874f1d04efaa929ed4441e1eacecebd230d615c608
SSDeep	96:P42ZQz2ec4hBwNl/oR82ZQz2ec4hBwNl/oRyprALxlarZb:PjIJMNpo5IJMNpo0a9AF

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	4.84 KB
MD5	cf223f86cbcf920d38fc5376df5401de
SHA1	e8f4208833a4739dcfccfa981ca2c762080790bb
SHA256	8173ee7de361a05e2863dc4b624bdd3e5a58f3650c451258df4a08630b17e322
SSDeep	96:z2gG0QU5rFX3xFe1OEs2ovYJSqae7mcdiov9xFe1OEsyFX9:aCQs/ooMovZqYovDook

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.30 KB
MD5	ee398750b801150c7790f798fc7a3d2f
SHA1	4fd1fc5a5f25b85d42e4a0af6898e444d8e011a5
SHA256	b6be6528a83b2f54718cfbba92dec8b0520c36ca5dbdd85ba7cbfdfc072c315b
SSDeep	96:73BelsUZ/UbRnR8L9LqP8AuDmaoVAqRz9j41yvYtSSuK6hkq4L7e5j/DCMorWR9f:NqsU9Uv8L9mTHV3Rz9j9Y3uKu4ByeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	1.12 KB
MD5	1f8eca6feb06914c7e33b508d82343e6
SHA1	db69a892479ec46a8e417cb93f42a2cb69eac0d7
SHA256	6008fb7fc1e08c4870d4386f192fc28e13311d70774590a4d43bb2adbb622b11
SSDeep	24:Es6llT3bPct1d6ZqbYjs30lT3bPct1d6ZqbYjs3oslbcTKosP9MS3Q18M6slPjQC:CPPeJ5sPPeJ5bbvo49VA9PjQe7FoXExT

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	2.58 KB
MD5	ca850732ad539f62b3a1ff753ee71444
SHA1	ee5f5412147f1dd6543d4e0b13d9966aa9dd882b
SHA256	2f345a439882ee312add32736e0942be8fcd64dbb895a7268942d0e714d9f489
SSDeep	48:I9gIz1g0OeqPlMgtMKYMHBHNWR9uAVhc8S56jU6Gms4SDiD/AFg:IBa+6VtMPaBHNWR9Jhhz6dDa/AS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	7.41 KB
MD5	b0850a804a6b393e02617d5f8719721c
SHA1	9c0b1015c730f27ed09aff5e32aca0e0532b23ac
SHA256	bbf3bbd95796c7d8e2bd34a5fb8df2a9479fd2427d4bbc4cbc5ab412442f5856
SSDeep	192:mMAKvdOr+g5NzUUWAWCVFkwM3qN0qbQcNxXGDOGoDG3xh0Z4G:mMAK1MpHU3AlVuwB0kxCOfCxh0Z5

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.88 KB
MD5	33601b9567d7013a4178f2d65789d3c4
SHA1	561a3b2110046a70d2ebd020ddffeb0f8b0bdef7
SHA256	d0cf488f95bb5dcb495f4ba1b8d755413763235064e1040ed19460c1c632a35f
SSDeep	192:fULahUM2s0uyU7gk0p5WcQfo29lZRmAMdkeRbS:MLGUM2st0jLQfJlZwAMOeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.28 KB
MD5	8a1ab1d1c273370edcf78ec285e0ad0b
SHA1	a7ac5da7a8bca998d0646ae72eed4eff3ac1cd82
SHA256	45f8e0f48e1fc13f6e5ff84de191adb7ff37accacc1c4314377b7671e8fe39cc
SSDeep	96:CQ5rMapfSYM6pg8o8WWIqI4SDHnNBzlk00OR7/azno3AidHXw9H2HKxnq9IUHWRF:CQlPMUgtqODN8fORjnfdg9Kqnq96eRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	12.94 KB
MD5	86e4595e9624927514b5a7156fba7d1a
SHA1	286c0a8dd51bdd388b668bdf8756a71b7adeb924
SHA256	b2c97fec7aa801123dccc6f383fb6fd31964e03155180ab36147074ecbf3373c
SSDeep	384:yMAK0MAKYWkxfCfC/d4DMAKv85kyuYXMAKh2DGw4XwFBT:yMAK0MAKYWKqCmDMAK8kyHMAKh2D7c0T

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.85 KB
MD5	d6d940e187af50bb781add6a77adbee5
SHA1	ce316976291ac024e5a07352b691377cd03df4b4
SHA256	c75ee6716fb32ee8c10071c57ffc5b212fb332a815baa725c3b6f7f4aac80d4f
SSDeep	192:rAYOVB84xUEKeWwtv4P22wv8EvlbcUYpCqipMV6HcPJVnjarRYCL7jlmeRbS:rAYuBVOEfPvP9RWU8aMV6HcPJJarbL3U

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	10.50 KB
MD5	8c9d6da96cd682f2c55e1a196ae086e1
SHA1	40aa6b890e0c938f9b22bc8bf10e3bd7e9e1ecea
SHA256	c75deefcb692680918cc8e636b79dc408ef67cb7a377111af743077674d1cc43
SSDeep	192:6Jc2JIBhJDrDt1vVlT59fDyFuA91ubkiJFateq+3tjuObh5ET2OeRbS:7hJXvJ97rrJ/vduOlKT2OeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF

Modified File

Image

Unknown

»

Mime Type	image/gif
File Size	4.90 KB
MD5	937eee75923f2c8a4da2f29cb53b1c26
SHA1	e0af83b6204bf5d4f4f11c328b822713b9dcb9af
SHA256	8d3c1d0b5dd2d5aa0f9c1c63bc3eee57b66cd9fc4ae3eb095735fa6ba1cf24e5
SSDeep	96:JAIMAEMQ7wfKqJu9ibRwBNosQvAa24zKkxS9w1HiEoq3VrWUxe9x5:tMAK1qci2GufmOct3hWUW5

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.36 KB
MD5	534498c617788b38e63acf2142d519d3
SHA1	a38292a60ed2a7af3931fb98f697923dcb488866
SHA256	bdf85ed3f263b189a7ccd30304e36b51a2a45c41db9b0d05a00c750ebd5064de
SSDeep	96:wyT4imIj8doAIgQLo+lRN5HSD7+b3xFh1EV/b2B6DNVTWIahUEO91lQpXM3WR9JF:FSIjyzyRlVSOL7ujZSH81lGxeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.75 KB
MD5	5ca1e701ba27e873365d3b0fa24f79c0
SHA1	30a9ab350a024fb2b388d4c58c1703ef10d951fd
SHA256	884c93b1062c25d4022fbc8ed602e1eb1aea97d4dd594f8a1a7c4f5e239fa0de
SSDeep	96:HWyHpf6haHS6A23wbuzem460wvgkXqRmwL+Tn3qPi5H3qBOplPqMqcJ3QO1cWLO3:HWyh6hayUtNxvB9T3mi5XqBOplSMqcm/

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.35 KB
MD5	f8e400f10a9a49b8c99371cf0a93607f
SHA1	cb0c00f5cc05efd5671b88253ab655f1912acb97
SHA256	95b53372fa9b4ffbeeb6a5496d86293b9cfc4f1a30f146e0fb22ec995a402ae1
SSDeep	96:DJ4Oskb/qttSmPluv3ksfapZU30odMLldk+3K3+IxFlTcAteLLtLalfWR9Jhhz6E:DJrqUmPjsfaRodwu8KBFlwiGLalseRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.52 KB
MD5	21a78a361c9a9866e032d981fcd072db
SHA1	688bdbe9b75d31d4cfd3d2b86fbaf08c6ef75802
SHA256	e042a5c1b256d5bd55aceab67c06cd5e0c618672ec5270c62d035c4fa1ee235f
SSDeep	96:D4WNilItISldeNISy9mghjhbQO6M8olWR9Jhhz6dDa/AS:DzilItIMZjBRceRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.96 KB
MD5	d2a9f602572f31b272954975cf50eea9
SHA1	3a2dc3d5ecd57409aae228b024befdb88d919244
SHA256	a93ece3ad7fc01a0bd0c29c27b75f1954999ccd01b5497517957ccf6cb46e3df
SSDeep	48:1ZT0UflP/hcobcDavUk+BWJSh6PvMDFWv/h8cB05bBdLnBo39LHFVy1eaUYmRY9G:n77bg+Ssb0DFWxB0515BeFsAaUYmSq3

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.42 KB
MD5	c73d0d3c78a0b153eee2b672b3c116b5
SHA1	b09d87e59a75d23a4d8ae9ef3d2d7c919bb53610
SHA256	41600aaa0419b50c62d4c98288c1268690993ce1aa702f031e02d07f316d2c6d
SSDeep	96:jg56TWRVSxd+XyQnYOcXhRYdxU72mZWR9Jhhz6dDa/AS:/OAjsyFOcx67UiJeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.10 KB
MD5	d5cc323045a10b67c1b2f36589247ac1
SHA1	0ff8c4523ec17da79a7bfc0eec1e0dff083b75ff
SHA256	94b771a16a5e8cca5bf10bda4e18690cead0a48ea99d66d741b22dac7d44df21
SSDeep	192:MNPGvRDNdEQ89SHGL277yWmo2Xslkm4HRp4eRbS:yaNz8cZyWmo2Xo4p4eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.02 KB
MD5	8c95a3905fd74e0b0755b5270dcc6560
SHA1	a28fbecafd94bdac9c7c1643ba64abc6e1ef1345
SHA256	477015516d8686a156cb506b68218a662c189d06ef3086c094929f7901538d65
SSDeep	192:p6TM1e92baJZKNnWbT6IJ+9wRy8hN2iseRbS:pQM82baJcQbT6IU9NxiseRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.05 KB
MD5	47af6bf1ece9686ddd6b9b614bd9914f
SHA1	dd8183810dc70a1d2cd5fc4f3e2f87e6c880450b
SHA256	4b7a05596784c3338aaffecb3fdfb05caf3e556bd48f8c0683d2fc618bf35279
SSDeep	192:CyzC24iP2RMB29Sw3yUIR/eaUZVcwsG5QpH2Y/thAl3huOK+7f0UhF9meRbS:H7B27yP7pH2Y/f+3hu+zCeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.09 KB
MD5	a6707fe694bff9914c85f6f050d510cc
SHA1	8469a3f4a01109ea0680476e1027b07f9b3dd35c
SHA256	edf958924b2d0f401666a02f84a2d439bcddeea8b05014dcb007d8303192c119
SSDeep	384:qjg0QL923IgqRYVBri7ITlAZrDTNuVXH+Xi4hb0IoaV5KdxTkYs9NBcnITG9tYh7:qjnQx23IgqGVBrWITlAZrD5uVXHEi4hJ

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	15.55 KB
MD5	5b6ed3ff17488c0cc29d8ffcc3377dfe
SHA1	7e267837d78e498ca14f1f3f262cb3977f30dce5
SHA256	27654c134af0ed932ee54172a9b7c2f0608a7826b6ad43cb83be13ad3c6e47af
SSDeep	384:yLS6SVmPoqW983mRvFPiAxP+EXEtCNgbmWJRGi8DeRS:X6SVTqc82FbPNXsbmWJRGi01

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.38 KB
MD5	2d17a2c29fcb6856534307084f94f69b
SHA1	89ed630aa16acff86b8582f6c59ad86f45bb87f6
SHA256	e12ebd6ad7ef7765eb6bd06039d4361954ffc31a39152c9a7163db5e9a642299
SSDeep	192:oX+3AZWknbRTQyavODNIalTdUqQEJgDAkXZOPQEgIYEAeRbS:jG7nbREyaUi+hQlMkpOPrYEAeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.78 KB
MD5	3bcba746a50f552521131eacdf2b38f7
SHA1	cbbc8f09dd5e922683eb663b34512b71a06e1a2f
SHA256	de68d15b433aab451ac74063265af5693ceed4086dea2ee53f6d9489cdfa93ae
SSDeep	192:TOSB0q9J0QDaZ8vO1O9/Dl8McpjWJ+46uW5fh1SS4hIukUBBTvxPnx+y:TRd0QWZDO9/Dl83RWJ/k1SSNukUHTxPn

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.25 KB
MD5	7357f4a426889c31c7018db90d7aedde
SHA1	3460c22b8fc9e73c749f67962e26f87d92334cf1
SHA256	6415b765008d09570aced0c17af65342a1cfb12259915334b8a25397644549b1
SSDeep	192:D3NNEORB28WgMn8S63vSRXfsB+j64beGbsgeRbS:JNEOKGM8L6RvsIteRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.25 KB
MD5	325514d48b5fcf59871d093258dbcfc4
SHA1	a7787d19e77804ba2bacc8ddb5a4fb7cb0c48905
SHA256	f06dad9b79c714d75ebcd7c053ce34f3e04231d5136fa4ad9d8e0e57e277c613
SSDeep	48:z6GhF7s7vw4Tga7mt+wsmup6FKOPufpPWR9uAVhc8S56jU6Gms4SDiD/AFg:z6u7v4HC7xo6FKOPKWR9Jhhz6dDa/AS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	28.67 KB
MD5	55460fd7d1345205d5d355fb1b5255da
SHA1	1bd8933be978cb48b54dc323fb2953d2061121c1
SHA256	96f352046f1366a89d53f754d3ed70421f783faf0cc1584800a7d8e7cbc9cd83
SSDeep	768:/CSKOa5ACwrWlEZ/sadBdW94MR0FED3nKi2w1:/CSZa5ACwalc/BdBGeFED3Ki2w1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.13 KB
MD5	eea86c780a5cd190198fe25f2d98bc3e
SHA1	cb3805e22a5670da569a9cad416bf1c853e34e3a
SHA256	66fff8927d730da2f0517ba4c901cc2d28389266bb6d82584c27bc2deb1f8ed3
SSDeep	96:W1GdPXDsLdKY0FrYECcICEypNTtHJNEZW16DDSw57JawWR9Jhhz6dDa/AS:W1UPTWd4FExcICEylH4ZV5daheRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.16 KB
MD5	adfb54c36a1c27630290e833559b166d
SHA1	162bd254eab12920b0abb2bd6223d2520380611f
SHA256	048996400909a19e4b72362cd1cbe3d61eaf5b82d9246d104b3af0b47dd6660f
SSDeep	192:OzOkK3sx0Z/h7ffeQo+64oEtlhFkC/i0+eRbS:OzFK3T/8T41kCueRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.16 KB
MD5	e91989c62e3eff64bceeb0b02fc586ec
SHA1	47597fc3b46a992f45b741dc20c2cbff1abdb454
SHA256	3a986defe8ff0fd301d7f6a2bafeb8b8a80eb1910e73601222480a8e9c8686a6
SSDeep	96:JpxqJSnV82ZHpM+SHuJqF8NuZNu4SWR9Jhhz6dDa/AS:bUgV8QpM+SOJ3Nh4/eRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.83 KB
MD5	181bafbc641a0a5af9382f013050a5fe
SHA1	695aeed1422cd7e83dbd2d7ec450ea953fcac6cd
SHA256	c89b0424115c5ec1d25ae83de95a8179689f58640bfb660571b79483ab58c5d3
SSDeep	192:RyIJWzieaUIzKEtQVkdDm99/tHWDs4GJR4iNcf4UNcWSMo7L+mhnH9HAG7+eRbS:RPYziegKE0giDt2DfYai3UXSVLr+eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.48 KB
MD5	ca4944faeb416010b52f992502560f00
SHA1	fdfa760f14e9102a2d8073f85f37f4994577ef1b
SHA256	7d8a15726bbd6bcb83c9ef7f240e84ede2f21202554d89f15468047568865d44
SSDeep	192:US66AOGAPivNkywd78jomSXuONYCxKdaKT0iqDq:r6IzKvO1HHzKc60iqDq

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.94 KB
MD5	59600b3e9cbb973c34df1d3a6be1233a
SHA1	0a92ddbd6054776ad36beb26d82f8207c966d7b4
SHA256	e091bf0554020778b4a0a24f8a2a6871977e61e3815ff5a799138f3abe388140
SSDeep	192:86MNFA9gDg40I0rGIdCAUHor2DT9bwGKjcxaOI0bQMgR1eRbS:PIAaoLHUHfV7KjuZS1eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.06 KB
MD5	3d2a5710958580181e9c6a7dfc65c062
SHA1	51aa93a32f635188889830e25b619509feada393
SHA256	dc8b3fb3b79b8d2731cddebab1fcb126c7bdf87ea46d4618fe52dc995685d942
SSDeep	48:FJCsK4/yiLpzESd0UdUZN1GKgBzC9aA9qTm2JKa5Rc:Fn1yqzB0UO8w9aAITbKaU

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	10.49 KB
MD5	88c04b93bfec92fd863976cc9391bed2
SHA1	0cb46969f6419c86a570fd0568f2c00d192e61d4
SHA256	4164bef128f0dccb162a3dff9c5c108c6f120b900879080654ae9a10b9da8fb9
SSDeep	192:6kvYD7x4AMq1wuw54o1XoaxKK/o12WAS0rWDxeACXC56RLeNo78Bq+5l7eRbS:Vgx4Azy7Ko9DM2NSEY/Cy56RCs8Bq+P1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.38 KB
MD5	411ee71b3a4e73196c99a29b6d1498e1
SHA1	9ea3e4e932296055e05b7fd0d1f3cea08c1afa33
SHA256	6ab7c84c4cbf1328588b22bceef852a57540f0a9810da03d6fdc4adfae139677
SSDeep	192:cQaxw56VT3T8pNQnFxOsXtGCUNK1WfNKeB6NeRbS:o0gzYepYyWfNK46NeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.94 KB
MD5	407ef044d631dcff8e8a89d3075fe7ee
SHA1	2991edb748d3717848db5c1d145443380337b0ad
SHA256	7ee43712028d16995c5c698230d1ad5f3d99f531186337703b7b6a16dfb226c8
SSDeep	192:SgQfwrtx3mCScMG/ti9jfYo7JrTDPsTeRbS:SgvmCT09jNJfDP0eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.50 KB
MD5	bbd99f92bf08d5737d517226806fcc0f
SHA1	515a8cac4221b2d9171ce28378e033bdba61f668
SHA256	28d7304fb03403812cdadba9b8c6303c03014d09913ed20d5eeaa4a0f770b8d7
SSDeep	96:bJYOWqJF9c0pEcZloazkMXviveifrPzLKAKoMBrA34kuKj9EnS+TD0xsen:dvVpfZlVnq9z3KALMBtkuKj9EnS+TD01

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.97 KB
MD5	c5be9d79528867f46610ca468c96d2c8
SHA1	eda5695655107e77c6ad326163fd7896f712a016
SHA256	fa3bdfdef37665d3b2cd7c8a8290812a6866b9de2d73642d9bcfc09a7a0bb077
SSDeep	96:bk7QS0UXnBAO5B2BJmdktFNsx5BvZiin6G5XdWe8yHQ/hIiyAj2RNKWR9Jhhz6da:bSQS0qz5USMFNs3xwin6YW1yw/2id2b1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.96 KB
MD5	c064a25dc554dd1ffa17aaa9e1e5c139
SHA1	769f8754329aed88500a8cafb5acaf2886a26c84
SHA256	023e8d2c09fcc036edf44706681e6a8a04d6dad4e6f615c32698f020f72752e0
SSDeep	192:w7FPp5mvr2a2QJvX2Zo0aa5pJ9iRN9BeRbS:+P6vLfGuO5pJ98BeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.62 KB
MD5	d636308683435714128a1a41001f5fee
SHA1	d4c8b5b80c3137b4a1eac6198c0c71ab571795be
SHA256	60a245b3aaab784bd3c212c8cbd5fca483f1bfa843e8edfa9f330f6b12aa48bd
SSDeep	192:HErtsB1wI0E3ms1c400OFQ39XqQ88mCY5nBFq7vIRZOFAL7Z5X9iJlzpISFoliD:HErt8wI0E3ms230Oy39XqQ88mf5BF4vt

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.43 KB
MD5	5057dc96c71ce96d0cc86909aa487ed8
SHA1	6b39868cd021bf6ed98dbefe5430633b482c8f8c
SHA256	368eeeb7088e8d0f1cacde574fa57342fe83dcf631b1e2844a81ff0fd4f569ca
SSDeep	48:1/CB4gYTvi4P/17q3ljlWpbKbVd53lQ/ch91QqjD+UjwlB+oDWaZW:yai4FYkluVdxlQ/X+CUjwVfY

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.89 KB
MD5	ccc70b9b862e78f74ce77fc3faf0ecc0
SHA1	2011fb5cd06f6e2d57072b4be5c9fa2e53103909
SHA256	d4588c7b0fa15aed7b342f793e204f9ccb96e13d20d2f1ced2e05e1107982145
SSDeep	96:xeJuMpVETFq00WYK/8JYGnBjsTWR9Jhhz6dDa/AS:oJuMpVRhJK/8BSgeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.74 KB
MD5	819e5eb504c68b39ec219f3ee7906770
SHA1	877afac33d1526086ab560fffb85e85e4225c8df
SHA256	60b73f124705033bd8854e550332cc74ede16000f668527a49165890bd3fa8c0
SSDeep	96:imjnwovsG/MNrtGcMyINi9WaQrc95CTLi/NDCpKctsylKxNSIZWR9Jhhz6dDa/AS:iawovsIgx7INi8c93teKctb4SIyeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.61 KB
MD5	b2d912f47dd9d93e74a07b470d56a5e3
SHA1	96599c0e3fbbe2d83fc5546103f43497907920e2
SHA256	8c37e4b23a3c31226d11112ae9d7650aeef7ea753793bd5c30d4f07a43ce0d86
SSDeep	96:iAeyirPvfQlplAwOsWe5LQP3Ht+XpnjgNmj2pTl+WR9Jhhz6dDa/AS:qdLQZrxiV+XRstdNeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.16 KB
MD5	2324f906d0a26287238644e3f0845a48
SHA1	385e9578f6f7bae508c2434b967942a19e6aec41
SHA256	77c6c2a69bd5cabc92f2f9e80e93c880c8ed79e63c2797b67fc700b7dba662f5
SSDeep	192:Oa5wt1vDZKDLfI+OW+tCS/0TQeiqOxeRbS:lLIw+706xeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.88 KB
MD5	e7908036a7686a1f62a1df26c9db125f
SHA1	07efd7472041248f994d1e08f08e98f071510120
SHA256	b778b471c58c9d9182530b871120e62213872bae2c728f13beeb3576e4dfab74
SSDeep	96:wJtus2ysn2bF59lR8Lrwry8UEbIRjMsudJsc20Tu3g7fpB3z7qc:GQ32bF59lRi0ry8nItnudJsc2Ouw7fpN

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.89 KB
MD5	6df6ff8a87f8b668d56c210f69e7194d
SHA1	843ec667e0330e925fedf1cb11d5ba8703b23dc0
SHA256	9287105539bc59ce2c25b84b500c1c92ad72d12264e05a93dc8060713c9f412e
SSDeep	96:KJnGwkn8L9PlWxvCDhb0dIUlcePYJFA5da5oP24IjCW0FUJQzlIuXoxt:QGd8L9COyIULPYza247FUgl9XMt

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	26.26 KB
MD5	e17493b59f429483d0e4f82a009e3574
SHA1	6a6378fdcb35d8e5d0771c4575161695f01337f6
SHA256	1885dd12afda150c65493807a723585f966ec374bd62887acc59f6e16bafcdc0
SSDeep	768:GiwsdfX0GPPXlHM6OBQImAcm03LvQb3TiRt35MwRPE1HhYigq49/rsiTxmIEyqV+:wifPDVvNHQKQ1BCWBEd

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	16.83 KB
MD5	361ec42b304d42bb30c82157fc4876ac
SHA1	07b49dc5ac0b6b477a54b48b866a0cf53c791fb7
SHA256	26b57cee23b72c0223a47228382c2e5ab549c144240acd64998a61b9f18cd491
SSDeep	384:xL55ROgj/lrYyB8AqyFlxjM4bOzAAI9fTguitwCX7L:xpLZrHuAqGxHOzPjtwCX7L

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	26.12 KB
MD5	ffb35e0a38d3a22db194f3b055a6c001
SHA1	1a1f39e3ca78359b3fa9652627626be31a8aeff8
SHA256	dcb08bdfb295454b506f022ab3cb36ec72df9e1caaa66e6bf6145c7b2dfd5b89
SSDeep	768:6WFXaxMFxivMfSi3RGGKrVJ0EgKzaeM9jKqE9Bx8KF7bnbkYQwXtFYqvZTPs/2sZ:hFXMvCiGyAmygtw48Ox4

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.97 KB
MD5	85c3cf87edc67a9ebbcddd17a3ded333
SHA1	cfe2bb790e47e20dc2aca9b2bf2b562c68640e0f
SHA256	a90d54883ae20ed153b315da22f924b3bec56705e6c63454e86bc8c9a3aaf6eb
SSDeep	96:wJ1V0urvwKkSiZ18kjV9YtmBy+s5tINZCZjYPP4Zb6tmzcr3m6:G304YnSiv8SXYtmsXtgZCZjqPA6tmzcp

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	24.20 KB
MD5	f38cb32b56d41a35535c120e46e81f19
SHA1	ee8ffedf44349856bce3d760f1294ae83bd12ea8
SHA256	960cc07f35ab745818a404f13191389a3f43a210f7adfb117ac256692d723172
SSDeep	384:yyf+LkSDlfTCbv7A8varAuKXNfVcIzF8M2iBJ3UBx359EgBSBUmEnAw07SSs8m:yc+HpqE8veAuStzaMvJEBxp9RSB2n46

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	14.20 KB
MD5	0538d56c7bf155c0c65174c61c7618ff
SHA1	716a79bbd28cc58193e760423c4ac53f0de84ca3
SHA256	1e1a5e151c478d5aedb5f7a4632559372f120c5fde73ff6ee19867791dafdac2
SSDeep	384:x6fzQrQR2eIr0tYyM0znUO2UaPOUZGufMSDBDyKAA:x67QrQR2eIr0ylYnc5fxDFyw

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.78 KB
MD5	085e9a0d621b2a9114e11ca7f7ba7d46
SHA1	95c088ab0759414a50b9d805055b13f37d9ff88e
SHA256	f1ba747428d5aa69e54b75b9985db636e440efd1733e8aa16526f1f37f2fb587
SSDeep	192:iiph805wfAH4nf3CJlT4WHr3BSFOEzWvkpOkJWHfSNx31GzEJ6YUoy1kTQirr6iJ:i08Rg4nKAWH1oykpOk3x31Go4YZy1kMW

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF

Modified File

Image

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	image/gif
File Size	13.20 KB
MD5	a774d8a65fadfbc0b683002b0c13b6cd
SHA1	5577eb6498c49e82329efbd8b5e235c6c09a8bfa
SHA256	0ab9172ce5baa34b07a2f8fe18af4b56f12df5e5f702da8d7ee166bd1e66116d
SSDeep	384:LSZCWR+JO6ePsWR/8JBBpxtaMwisArcgw:Lgv36ePsWRkdpxta5isccv

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF

Modified File

Image

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	image/gif
File Size	19.72 KB
MD5	df6b2f1be0e9dd21ff7cb42f2639971d
SHA1	9e00b4a5c6ae90844e9228e84fe8c032ddfd674a
SHA256	dede6b3a4dca308660798cdf5f17f3d0db8fb9a555a7541b6195893f40e9aff8
SSDeep	384:lSIX013bX99oje/jtXiM7t3acqk3tTHB2uuj9yhyqCVtK:ltXYgQtXiMB3xqkdTH29KGvK

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF

Modified File

Image

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	image/gif
File Size	19.98 KB
MD5	4efd0644dce706fee1b7cd965a2e0c2d
SHA1	78f9a8165217d44f4a87b9d769680bf89cd6e94f
SHA256	b45c9476110e1715fa656fc97c17276d1ffc56128b83ccc643ffc494b0355cc9
SSDeep	384:hNKdZYYB/S5MaxgNEb6UP14JqkH2oBiFs1qg0nR8OL7vDaXU9YlpNUOL7vDaXi:h0ZL/eBxgKb6a4JVkFav0L/vDaXqc//N

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF

Modified File

Image

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	image/gif
File Size	15.37 KB
MD5	364dd13bd0cd076e301d4fc20c765a5f
SHA1	5088136c7ef7284f1088a0523a62d22cd35f4ec1
SHA256	66984a50e786c35154daaa07e668436bf8230d2ff5f41dfc29268e30df3becd3
SSDeep	384:hjWFWvfXmurlgjcFxGtz9+md+kQb/hVXiGPgmBBkU+YRZ:hjWFWv/1l8cFxGh/EbhMGPgoKUpD

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.57 KB
MD5	c00d7aeef3cbbebee5fc330ec4b02e0f
SHA1	cb695d312f0173123b439c65a83b8773f30b6915
SHA256	d7c715de84b4baab39d08787d292ea42dc625954a11d52c7259bf89d9c135823
SSDeep	192:mHB57C6c9OC1oVtPsjC+ps/wDRCkqjaG4hAkhzJ7W9FRj:mHXCRyDcHs/GR2xA7hsFRj

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	14.15 KB
MD5	f47beb5612aa13fd016912500151bc5c
SHA1	ed0ff09cac0d747c5a088bf866e019772ce68113
SHA256	60d42ee9427756f2a04e224f9d64e98f68ea3e09f079a0344350df67bd9325bd
SSDeep	384:Jfudn5zFOLwfy6QTW3/ZGLyKNngxLynkc:JCVFOLwq83AbJkc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.23 KB
MD5	f62e23a49bbe0e7c84ea0db5c6b9a517
SHA1	9a19e35393a7e617f89546de39c9086be4a94e8c
SHA256	6b19388f44525428175da26742fbde26501bdade6f8af13dad3d45c83f8cccf7
SSDeep	384:Er1JEYGtq/MZA+JrtVHn+YJm1m5vooeyF:ErDEYnwAWVH+fQolyF

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.68 KB
MD5	02d823725fea61ea4451c5f4780886e0
SHA1	5f26a0e88b02f4308b59c5a720a9092773a7be31
SHA256	eec7524ea932c34361b744207c7ff8b61a6e90bab301c29d011666f751f7e600
SSDeep	192:Q57T2KT+SZ8/FvK+p6WK0hCNx8LymnUSoiQiL2WRCg:Q57T2KT+Sq/Fy+U508oNnUSoiQid

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1013 bytes
MD5	84834136ba6dbbcf80350dda9309f6ad
SHA1	c04dacb89d3258d8313545051b59f4473c7f4970
SHA256	995c44d40c9a2b676558fcc5675e63858dea60d9443950a4129152809bbdba34
SSDeep	24:t/g6IBA3Hih+KmH951CYVizA4+dNim+H6+bt9tl0C9lPlpPdpFZhvH:1gd0ltdri1mNim+ac9t7jpPdppvH

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.91 KB
MD5	821478b614389667e51e4e8c9f394be0
SHA1	8b909fdb406d92f38c4b409f1a230a62eb5e39a8
SHA256	69dc1f240839c9d6fc9bff3122252afb7cdad3775372f8d8348edfd980d9b0dc
SSDeep	192:JvrxDivoiNY+4SzhTUBVbdqGYx3WIDSYo3OQ9QxOWS7LNbh0Kk9odGCGlyOoVM:JvrZivoiNbBhTUBVZMo3OQ94OWS75bh6

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.43 KB
MD5	83f03388a1d3efe70d5b166fe6c2a2a7
SHA1	0eef8c9a26fd16d44f15746956d381104d57298c
SHA256	48ae7a8fbb74a0a1eac4491a347faeb4863c0a5ed4da1cf2a2a3dcbab7fb7ac4
SSDeep	24:t/nA3Hi8KeohCF3sFnRhCty/luqV2eRhClYM9Klr+NhCGQWoq6ukveL6ntdWtcbc:901VoE36ec2urUB+VveLKQtcIUG27eyw

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.66 KB
MD5	4ce0827a7f45a45c08b2a0fd60b25647
SHA1	db7df5cde4330ff6dc95e9cad33f5f05b6e69f18
SHA256	f12de134086e807930175a19566680778928208f779d7907d3c208ad40577e0d
SSDeep	24:t/0fbE9A3Hih+KhZmhC8U/NdhCNN1w27+9hCTUhCvbjSxGIoK7Qh5YLx4VQuHlsx:1020lJSd2190NmbjSxGucvBQuSrio

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.89 KB
MD5	fc6f5f7580641a3ddb5dd51eed9c3df0
SHA1	b8e6577314e094e30811c7aec1829464bfeba5b9
SHA256	eb72554fe779bbca564f45408e2f5f55891ee5b7c522f0c1ed2a0495167a44af
SSDeep	96:ILWn4j+IEQuPr8eM/K2T5jVVSMbzhALJ6oA0lkb0:ILC6Arw/K2Vrp/Xoj64

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.93 KB
MD5	d1aba12c9f5c22950ec568876d37e76f
SHA1	4a82e4a634bfef8c8e45e35fd6cca6ae13ffe5ba
SHA256	66b79ebf08f37ba0be9c9eaa138159b4fd7c577bf2b937c4be655cb699308284
SSDeep	96:Femu1JUOBTYS0Ln8ax67h70pC+dtlHxS+IjwEQKEsdhSu:M7/BXUdwh70pC+zlHxS+Ijw1ASu

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	14.11 KB
MD5	73cf1e415913541ea1484f619d21f90e
SHA1	024a9de6cab55f3e72d7e01a15439df83013af72
SHA256	27a82c228abd25a4a23b29541dd654762c3a730e9052e0802a24f1699e187a0c
SSDeep	384:mhCTyCuuRMm9dLQBpK/XmjB39FqMV3qEb3R9WJfrox582uKm42S+ab12eCgUjYu1:mhCTyCuuRMm9dLQBpK/X4B39FqMV3qE8

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.50 KB
MD5	3f84f8c84daa58c5fd714487c9682446
SHA1	fec395f951eaf33b1b39026bfc768ba6ee264edb
SHA256	4ad09a4bedb8c637289bbd0778801a6c28a19f30b0b21eaf4315deb03c3bd1a7
SSDeep	48:5i/K4/otLpNODHXqLpSGRZyOELk0sLkiLkVcYJLkG19Lki7K7c:5Q1orNI3iSE0Rzit6

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.60 KB
MD5	d532df7640dd7181640215eba285627c
SHA1	fa36d3604e8a1d9278be52f9b0368c0d62976ecc
SHA256	83b1578c11a75a713b90b174d2fffe73ec418758ecfa4158a3e76968880ba7ed
SSDeep	96:cezmWx9OOhxF6gIngLo/vdMC3fxBtqzQuKyV2DW4MqRLJKLM9YdbMloL3m2sggfh:xyWx9OOu9ngLo/vdJ3fNqNK+WbMq5JKc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.70 KB
MD5	729d8f5acdf1ccd33deb07f21bf348c1
SHA1	047e7008a2aa5ba25d0086e38268e716b1ae2048
SHA256	360f4fa39d2c8671085cdfb1b85d07c953dfc51d41fa392023f5511f92a63f08
SSDeep	48:8WOK4//yiLpSLphPLpGILpSbLplLLpDXLpaLpOLp4Lp2vLp7LpnbYik4FLpoBCIk:xO1R6zlSRnRyuACxnUxgoBZba7

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.19 KB
MD5	7409e687a32d7f7e47b2ea6afea25a04
SHA1	a9cf10d31f5113b721e820aa4c033cbe8e512924
SHA256	faaad4ff1fca3c764632d10669195c832d1cc4a46473b79473e4eccfb8247bed
SSDeep	384:lVxXbY7jcr40iIpT5hyvzTHrspmk7JzlkHfxabRu0wy2abpJD0/6MtetQtht6tI/:RXbY7jcr4rIpT5hyvzTHrspmAJzlkH5j

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.62 KB
MD5	dca843ab0bf1f9734ed30647fcbd1176
SHA1	649d783cace815a3c6d81c6782dc982937645a2c
SHA256	6280ef26290ce684217294b2c4b7f68c9c2cbe7b0e8030c74d96a309c3244f39
SSDeep	96:P1pAUlgayDymByxKj4BJWm6PaBkWl1+9sdpDP2YY2ySTRRJY0/sG4yyab9mspe86:tpAugaODBy0j4fWmMaBkWl1+9sdpDP2J

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	2.58 KB
MD5	70341342d9b47fced3451f7af1d9507a
SHA1	2844fdf30726daa6919e2a3a416b3080806272fa
SHA256	dc67622ef369f91054eead501c4e2438b3964c229b83f77990b2516131709502
SSDeep	48:84sK4slLpALpajLp8L4OxFLkmELkKLkVvLkmcJ2FLkmvJoMLpmALpmRLprOLpALx:8LmzYaJuxKm5LVgmg2KmdmYmX61mLY5+

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.15 KB
MD5	6318fa0d1fd3d497d1776ce8972fbe76
SHA1	bfededa953cef184191bf54121dc903372992d1a
SHA256	9873297711854daeaa07d464eb42acd5965d40cf67513716a1d4f57c4de21742
SSDeep	96:o1aq7nIcW+0VZTmK8siUprZsycyNaF7aXGxTQocY9s4FZ+7mvgV6QyEqZFsr0osh:6aqb5wTmK8siUpKPyNaF7aXGxTQocY9B

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.37 KB
MD5	61d6d93d7817d30bac6760d98872886e
SHA1	cac9a9d728d1cc9cabb80a2597bb56478f198be8
SHA256	c0e54a9c533c9f8b89100f7c3664a99da3ecf9157a345f786169df2a05476eb9
SSDeep	192:28flD07Z8QtmVln+w/kZ+K7hXzIo8Z3Gk2JMp22GoWy55cq:28907ZdIh+Ifum32JkdlD

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	26.91 KB
MD5	1b6f8728b726baa883ca6a6433ee5161
SHA1	1ed58df8005994feab1a49b53071a59434c3e5bc
SHA256	9dd7f559e0c574ff364a18fb7dd406717cf435c3e0f8d7b3015e834abffe0fbe
SSDeep	768:Nak+U6PjKFTvYZ3p6LbPGornNdyMcSlF4PAxBAP:wr0vwZ6LbOob9F+AxuP

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	11.23 KB
MD5	9378b0d1eca55f908e5852f33cfdd01e
SHA1	08625fd1838d9e099bb8c2412db821a66376e1df
SHA256	d7b899850fc73a44c55b9eaf2e35d071db7af96cb03443f7cb53bc1576c4aa38
SSDeep	192:1r0/UAkpBpXW+eJtkWW2Pf4APR56b0rMcBhs/xAjIf/bCRArBfJqTYcIU8vh7O1Q:1rCUAkpBpXDCjWIfpPR56bGMcBhs/xA6

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\- tUcyMGE.png

Modified File

Image

Not Queried

»

Mime Type	image/png
File Size	87.54 KB
MD5	a3ad775ff2778853a188cc3aa3db91ec
SHA1	33e50c6f4bb1c538f9c8358d9885f6586ec6130b
SHA256	957f4efa37b74c55ff0ccc9a7c9c2452567373502bcda681c7d6fc51dfaa981c
SSDeep	1536:d4OtrvH3+HwoLRt6ZpjqQuZ5gDpUQRx+eWQemR5acg9lUS1SOEBnub7JvIPYZUJu:dJrfAP6ZpjmZiDDv+edPfvKl/aBnubY4

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\- tUcyMGE.png

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\- tUcyMGE.png.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	89.98 KB
MD5	3f339de212b1eb66f474ff4631f03d9f
SHA1	4331a00eb0613bbdfc8456d80d2784a5e0d55787
SHA256	68e83b73b6aa5d2cea54c61cc08ca6695fe58dfd67f1161c5158ca33309c2c8b
SSDeep	1536:R0HcnsgzW3MyyxbcDrA3LBF+AB9q2/PbYkHw3v3kNmTAU1SOEBnub7JvIPYZUJS4:R0HcpW3Myyxf3L+ct/0qokgTAIaBnuba

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0NagluJe.swf

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0NagluJe.swf.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	72.62 KB
MD5	dea6df456f49c6e2f4cd85ed67e37046
SHA1	bd5685c5c5966fb1bd2b8fbf3f37e5c58dd2bd9a
SHA256	79e9ed18b2797eac09088687676adad4e3328aec72e8bb145d768744bb3342d6
SSDeep	1536:aX7egQku7gpu8seLoJQDB/jB3PTpIf+ZFjE0wRf6qIBD1:OCgMgpu8s8tB/VpIf+ZlE0wRf61

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2hBszUnkJ35er6Gic7.flv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2hBszUnkJ35er6Gic7.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	63.74 KB
MD5	4c8a1a9aceee41c0d9b44d4b8f1bde69
SHA1	e45ef683fab282968facbfdc380d652b175193c7
SHA256	dc4a77621abe7a7815c81105c5a73237ec846defb6a072ea34b64f439d534d87
SSDeep	1536:J6XYgkzkMTX2ii9BhJeAxq0fifQ1u8NHnkyI4CUz1dG6yGI1:gXYgkzq9Bxl6f+T9JC618bGI1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5d5VWpkl8nkJI.flv

Modified File

Video

Not Queried

»

Mime Type	video/x-flv
File Size	81.35 KB
MD5	7f45cbdd2303ceb0da39c87e6d8e1a46
SHA1	85ddc09c08b7fc8cb8336eb298941db432c115d1
SHA256	75f7d85d63d147938d74befd19f718272b69620158111c08e328dce3f8be8731
SSDeep	1536:i5B+IvU0QnP8/+u7n9HDwcK6lRvZZwAiyFPObwMPTJECRXFKNB76qH:inC0QnP8vQ6XDw/sHwmuKX+2

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5z4SaQ_2nnpZR.wav

Modified File

Audio

Not Queried

»

Mime Type	audio/x-wav
File Size	46.85 KB
MD5	e58dc0ea046f82954b16c74e7fad1fa9
SHA1	299bd5109cfebee7715d05ece3d904c2c1ae9912
SHA256	a71dd25e0e8481cb2911c3cb24bedaaaf4d1c2851ef52cbc892a958b1d209f63
SSDeep	768:wOUv7TOB9SAvQQyIP2w/9+fLh/7xakBnFXlnmAs3K0kYdNJp5LtTjV4tn5B0az:lUTTOB9VyIPB/9+zh/0AFXl8IYBlTKTT

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6Yn_MG04RWdG nN.png

Modified File

Image

Not Queried

»

Mime Type	image/png
File Size	25.96 KB
MD5	8e584d78c7223461ad934b38fe836c05
SHA1	21a9c7f29b055a11fe8e03bc0bbe49f72b88ffcf
SHA256	8f25f6c70288a62151aa741bb4719b03c86980628fe0728bc968ae79f3e48e68
SSDeep	384:8ehRh6r2LRUrrzhfmlWHQ7Lz6XMV7JmtbY7YnMpTR2K8ELL1+JGU3Hxk8ImnSp:8+6YYfMLz6e0tc5n2KFQHxk8IiSp

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9Q-HhR83x mG2iQ0AxBD.mp3

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9Q-HhR83x mG2iQ0AxBD.mp3.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	43.30 KB
MD5	5a738cb7775d42c51132dd91b56afe21
SHA1	f2b9090964f2ed6bb0e38ad5000cc7765a70db1a
SHA256	6d0e4ec05876c9651bf83e3838f90caad844497567f1a010fcce43599630e65c
SSDeep	768:CZW1/Jus92s+L0O/YfG77uwJ+ZALn+oeFEho9ZMf85c6tboxhNC9PxL9WAER01:CAGM2QG3oZAzW392f8bbTxL9WAA01

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BDd24L.mp4

Modified File

Video

Not Queried

»

Mime Type	video/mp4
File Size	32.66 KB
MD5	a48ce1fa072b53d6ebe8dfe2f4998cf0
SHA1	209454536286797506515a92e0e61b9ca4fde73e
SHA256	3fa04b5e56fcdb0498761a24015c605e0dfc00ac3ed7119285b6eb59cfecc4ea
SSDeep	768:WahvmgJEZC1VAWYZUnF9pGgkuvFGSImhPO4zzhuEcezJCtn:WtgJQCYWYZWF23uvgSII3jq

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eFXmys9JK.png

Modified File

Image

Not Queried

»

Mime Type	image/png
File Size	18.55 KB
MD5	7833bb0bc31d0103e5bcbce9540418d9
SHA1	f4647aa7e44842b2538eb6885df2b02974f9337e
SHA256	32f6376e649e8d594f316d8c99b92771bcdaec2c5a78697078b536eeb5edb846
SSDeep	384:eFxuwZW/vD4seCrffDOqdJzGUUzfLrZnHykwCwq9J6Sln9:eFxuh/Rrfbndx94ZSGwMJf

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EUum7c kyrvGGncvC5.mp4

Modified File

Video

Not Queried

»

Mime Type	video/mp4
File Size	10.99 KB
MD5	b532d85a1b80af69b3065c3e2e96524c
SHA1	cfc855b22db9c3f4eef0a5ce89ca8727f0678769
SHA256	95f9e0eba3f82948cbb49c486545b9cd88d47b0cf1fdf9b6ab8a220dfedb8b37
SSDeep	192:GlrpHq6nzV9V3DPEERZWq97Z/8yVHZzHBJ9B6lb6tjTqlZOSRQoh0KCxPrsuU7V4:iHqyLW67dtTzHBJvawEkS9h2Mx/FAnqQ

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EUum7c kyrvGGncvC5.mp4

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EUum7c kyrvGGncvC5.mp4.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.46 KB
MD5	5e7ecddccdfc17604ce9629dcede596b
SHA1	a1495563707ac014f8134789a4f8e6c658f01c20
SHA256	875d6251c2fcc5b10db31cf08b92dff1ab542c33dd20fd68e87d7c266cb5527a
SSDeep	192:oosLfgVh8l5xXjm3y0XCQWS7c8vthxeaJ/JGGxnsceRbS:oosEvAXaC0XCQWczVtJ/jxJeRS

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Gb0CrSMfWX-G.flv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Gb0CrSMfWX-G.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	70.76 KB
MD5	edbb395f1788635f827abaecc19acd43
SHA1	857532751c5880fe65f8ef66c792465ab9123a7e
SHA256	774113bb42180a291aeebc770406c8908b62c36b67faf8f431caa8c310646733
SSDeep	1536:27hKqvF7AzWIz74+DkFV/4sDBy2jzs4XXsPkc7xUISSitXS1:27oQAKIX9kF1rDBZjzs4Xc9/pSi1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\IdGL8ZM.wav

Modified File

Audio

Not Queried

»

Mime Type	audio/x-wav
File Size	12.18 KB
MD5	d7bad2bb8d1e8be21ff9440ff371034d
SHA1	63d52301771ac5f799b2f0be7bd6cd9ca8e86763
SHA256	17b6c545549dd41dd07829a4f6069cd7ce142a958c88bc64f65076ded2c25645
SSDeep	192:n2GWj9tp7riwYVCorOl7ByQB3fZT14Otgzethk34q1KzhvzcdH/Rg:2n7pihCXEQBZp1thGiZcdH/Rg

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JjAcMR.png

Modified File

Image

Not Queried

»

Mime Type	image/png
File Size	61.88 KB
MD5	46ea7a1f71d36718d310260d4743f21f
SHA1	14f1e2c04c415e9cf84e9ed1960075845dc03771
SHA256	26450b85f9448a856fc9ae7183e5de6c5d3cc3fc344d60ea47ddaa71ea53ed77
SSDeep	1536:tZAH0WJGeITYhoL6cW/kGyl+CQOgNltSXjV:jAH0WJGjTY663/LCDKltSp

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oIeB3sJMhnjQNyayV8jT.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	40.40 KB
MD5	2752583c426a50ad3dffe6cf68e14a06
SHA1	be3cd386495a4d6641336b7a8f41d4770b392745
SHA256	8fd6ecd65137044f91e91e84465684a3c475cc1ce1d0f04e13cd98311393b9c7
SSDeep	768:q4s/QDmEkL1KVVbPj93b53cOUyd3j6M+SEZzd1UfBC6KHZpgdqgkM:5/DJgYVBPJ3bhRUET6JVVIIHZKdqnM

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sM9d96uE98BG3Zgb.jpg

Modified File

Image

Not Queried

»

Mime Type	image/jpeg
File Size	82.21 KB
MD5	1e6855adc7fb6a10ee31c48ca9b07dc4
SHA1	b7b25f093463cc28283e8754445a6b4c2f80116c
SHA256	16ea0b0d628f72ec351aba573d26beeb7855de03200fec3b3b60f7b024baee87
SSDeep	1536:/I7A7jnghmKg8VusuY9j0RL5PgO3X9cPbxrsczBKtSbhALL+xMRLZml7:/IA7j8usuY9pO3NYbxr7zBKGhALlZZ8

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ss2uHqoar9W-_b.mp4

Modified File

Video

Not Queried

»

Mime Type	video/mp4
File Size	69.80 KB
MD5	28e6c24cc3ffe49c06a2509062ab22c9
SHA1	218c21d0ca3c788be0924ff87562b177925b8a25
SHA256	049591a5e935604fc95914f02d27356e74963cba7f39d653546715838540809e
SSDeep	1536:JqaWCCsX71MWuATyYccQRhaJGen1/Md56j4IthDs/BOm2GmC0xwS:YoCI717uII4JGen1/M76j3tu/8ldd

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\tLrfkuio9B 5.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	21.31 KB
MD5	c0f378413981cc316cbcbba6ba5dda49
SHA1	d455b22df495b97aa2c515f0f659e5cf0eed7348
SHA256	0209aeaeb3fc21da5f371997a1e478f0d9daa40506164d04bfd52c6e2918dd21
SSDeep	384:uv52zGYz1Mb/YvPTybIQflM9FHqMS6/Fydxa7sOnfn5aMyZQ1usefduJaCYr:Q2zVz2b/30P9FHPdex9y4MySuPuJ/Yr

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VGkZRPDIEB5BcnL.flv

Modified File

Video

Not Queried

»

Mime Type	video/x-flv
File Size	33.07 KB
MD5	40c48476fd68903681f17e131fb2fcb6
SHA1	6dbb5c95faf23ab0361b461b112c20f98d4452da
SHA256	53a3b4e35632c17694c8f7d3252872774b8e14e55a3a202de6accdefcfdb15de
SSDeep	768:Ye5pwKXAzGEtU//3oWENG9IFs4IBMYzpMUwb1SghCEcNmQ:YKwTzGEq//oWEyX9zpjUfQEg

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\x 1caoL-S7.csv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\x 1caoL-S7.csv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	65.17 KB
MD5	0240df4f0a17e50b70d1e37b29f9f149
SHA1	cfb96063c053e43af60cb64fd36c8fa4cd187db2
SHA256	ae2edd95113da054d83eeacbf856dcc3f554a5a3b5b0ba801d09f8731e66cd60
SSDeep	1536:wyt5UPYG0n4lXsYuy9PwAZiYeGxrWeDabeJ+n4OB9QLa1:zP0Ey99ZbeGtWeDOe1OBKu1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xbJ7d5.odp

Modified File

Unknown

Not Queried

»

Mime Type	application/zip
File Size	80.63 KB
MD5	eb84b9fe26cdc0c85212d4bf2d985e98
SHA1	e0df1240f86215f9e5ef34622c9cbc95fd6e6d8e
SHA256	3c65634b1082d1ab5846c64f9425385a4492eb7fbe1daf635d5ba0b7931de9c8
SSDeep	1536:jozinC8lUfis5aOrsm/+IF7SmOf7Re7vs/ID5PuK3GZbaoEBUl/:M+nC7fisj5/5ODMzs/ID5Pu3ZGG/

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xbJ7d5.odp

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xbJ7d5.odp.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	83.07 KB
MD5	67ab364a148b31e164ee9f1b67befa56
SHA1	812ae0802ec1f9ae65e033763333c05829fac3e9
SHA256	0aa1926459a92f98cb7e26dd6f28181a99ed545ffb1072e1afe6b1aca7895a77
SSDeep	1536:P99TSB4cjJq8h1Jqi0PbEFzcJv8+FiliNy/nIlQ7F190MhoEBUlM1:/SBzjJq8nJqDb+z9CqRFP02GM1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XFtRyv3_8.mkv

Modified File

Video

Not Queried

»

Mime Type	video/x-matroska
File Size	14.81 KB
MD5	e22dfc637a3e2a1d093c1ce5a75743ec
SHA1	8b8d1b6834977bec94b40990d6366f9a1cf98a5d
SHA256	b59ea283a54aa25568f33663a26dac4923cf97b1fd8525a24cc837b0326eeb3f
SSDeep	384:cFxOlf/D/qprvIic5jS43IX2U0ZmbQDZnC:sklf/D/SIiv482U0Z0QVC

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XFtRyv3_8.mkv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XFtRyv3_8.mkv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	16.28 KB
MD5	e78ccf821db6c271cc26f95fddfaafc7
SHA1	9e66db15ab1d3b44dc2045365154823a4d2cc42d
SHA256	11d62854516c84e4fc55de0fd3dfc9ccb149e10232dfbbaf20e7f1324fb383f1
SSDeep	192:oXk+Itq7LiRBLL/JBiYWFh94N/pBmtAQbN5lKZoxL5XhpQ65SKYhT5BAahbaK+dE:o0+IzgYqACSQbNUOLL5SFh5isxuqZeRS

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XPVGHLW-.gif

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	53.87 KB
MD5	c6c86b2b084b4fc702269eb8cecc17e8
SHA1	9aecccf1578f3dd23b7098665ffe42fc0332a730
SHA256	ca9e73089d95b9b90d5aacda016ac5754e7319d924920e74e20a1e4c3a6936ee
SSDeep	1536:T4W6SfftkF09/VFjjCViuI/IIU0mVSDZXNH:rE0JVRCViB/LkSDp5

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XPVGHLW-.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XPVGHLW-.gif.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	55.33 KB
MD5	3a938d06b2a6afc0393ccc327c23f49f
SHA1	0f1b5757d0f0ec4e449f64535f1b1d8241560824
SHA256	21d1aa23075f54f3763a64bc406f8d00788b467674b9dd7f5ee2d061fdc55b55
SSDeep	1536:ooyBlVihnyD+TkZ8uuTlRRX7tHMlGxW8UUtw+D1:1ynVi5TTprVMexD1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZhBO34eA6L.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	58.18 KB
MD5	e7c092d386cdf66cad7a893fb4440545
SHA1	f17c463243ea7f51709ef440a5602ec9f968a87a
SHA256	a4bbbdeefaa5b7ea9969f49ebd22b0583f583c098e175d9999af6c57b1744d6d
SSDeep	1536:Xr42bbdYOo2kVCm8DkQsXWuAjb7yNBSckH92lGq+:8k/bk4mYO5o7yyPdKGh

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZhBO34eA6L.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZhBO34eA6L.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	59.64 KB
MD5	1374bc4ff88743a53fd97dce82625a09
SHA1	0057c19ee6a0a03963125962496a2cf0734dfd91
SHA256	e33ed810c96075ffbc4e1e5fa0d29380249562bfc54c7df47448ee6c24970ea0
SSDeep	1536:uj+5f6Oj04EI48h9dUBUv+JoPn+cnSBy+uc59afWtpO1:uj+VZj04EI48h9IUbtrq9js1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Zk3VwiKVrrA5x6_Zmal.swf

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Zk3VwiKVrrA5x6_Zmal.swf.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	34.99 KB
MD5	fc37144158a36cebe3abe4856316a99b
SHA1	45f6aa9c0391e04170a8d67e3dabf080572ba0ce
SHA256	e69afd9a93b17535e2b089606f9a9d20cdc6f15a8ae05ed7013b424faed7bf34
SSDeep	768:+59UuQAKhQuPDjDuzKAJf7Edx1Y1aDPElKUzbWB01:oJpK3DuewGr6aT0K2bWy1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\0NQv45.wav

Modified File

Audio

Not Queried

»

Mime Type	audio/x-wav
File Size	34.89 KB
MD5	483696a2ae451a0f0c8b7ff607879ffc
SHA1	30e7f26d80022d6c8d742e468303421f225108e9
SHA256	7d0fa6d9590626b63782d596d0ef78935572336e08f4ca8d4f0d1bc66d1a8b0e
SSDeep	768:oa2cwRjZTh/HoEmogk7XYyhG9ezunEj4q3MD8WZR4CGl4wiLnW4xYm4B7:opxFt/HTNhtz14q3M1ZRnGl4wCnW1m4l

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\0NQv45.wav

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\0NQv45.wav.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	36.36 KB
MD5	fe692e979da3a357d91a03fe7da06b99
SHA1	75910de0ad0c53b2d96fb460e1030a4bc86d633c
SHA256	c5194d4091730929e25dcafb8d8f40a35bf7f898078509f7f984beec7c7c6eb7
SSDeep	768:uAoXxLKfvH62pG1LtrS+ku1gH5ml/XE+af9Fc/QOqGYk5dUSz12eFA1:+LT2pGfG8gHp+stOJ/ZVA1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\1dE88GOiYizXG.flv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\1dE88GOiYizXG.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	60.47 KB
MD5	7b6f85872efb3a53fa063e3aa80e0191
SHA1	218808c182b814be8dcf035432d1089db8d00261
SHA256	3956775d6a913edb399c264a0820a750a069a336aa7bd90695dd7e4cdcb39d90
SSDeep	1536:572GJXkmxzcyL2CYbHEvCPz2F1Y1cm1J57F6F5Cuc51:ZnxNJZvCbY6Zz6FBc51

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\2-IEroLUx.bmp

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\2-IEroLUx.bmp.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	41.64 KB
MD5	c674be1575405bd1108b95e639928bea
SHA1	74dc8189bc46e7250e47076e88fd3b46194db37f
SHA256	25f694e8622df74654dba1433a630f6b323a399b5b82d671f9b92131d7d7642a
SSDeep	768:plF7DqHmFvUyfz7QjpH/upc4SX0TUK3R5K+Lvse7GrMN3EAGeV1:plF7DqHmFHdpfSb4J7n70MxEAGeV1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\A0vu66 JfRNdSDM.gif

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	6.81 KB
MD5	ee3c9c1ac995c51849a1637eb8ae1365
SHA1	b3d35c8fa3308a2d720aae073d42805dd5432565
SHA256	f4d4f17f54aaef689bdbadb8bdaf0d192173522688870ff4a75673216b3834f9
SSDeep	96:JUHm9ciDmX/pYHfPdomk91RGvWM3R+sOsfmpLRH2YGI+yJ+ZDXWnPKHPlz8fpk4p:So6pOHdl41sDRmsuhRWoUZDmnSv8uhM

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\dsyahTWVAs.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	9.46 KB
MD5	5d4271240acc16bb8a52cbf35e629913
SHA1	2693159045c247c50091414282f5d36e67b762ac
SHA256	d852ec733a9e0124376524879cf386b375b20a633da2911337aeea0b9236c6fc
SSDeep	192:uUJtEPVLWLXDqnJSjibUr6pqVoNufmjHLCUhbTizePTq:uUfEPVLW7DqJSj4UMjrCScOTq

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\dsyahTWVAs.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\dsyahTWVAs.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	10.92 KB
MD5	e667b0fab1f2e2549d401be86f66b441
SHA1	051134e5ca397f7644a5205094b8f5237332a438
SHA256	d012d9f768651041775f6ac6b611151503db994e7ff7b36d02657d5cd126a280
SSDeep	192:UECkky/lrVwsIZhtPNPujPxcckH/r5TB2N9clz9azWzEXhFEFMx8UGjgpuXZeRbS:UEDkyZsntPNPujPxc1Hn2N9TXhFEFMxC

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\e69X.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	43.67 KB
MD5	594c12392d085c9f22b0d3ec6623996c
SHA1	c710466a66dbd706d40a233a213909c64887957d
SHA256	a55ac4f7f2da6211c0e24eb39af82e42a593e831b39508b818f3df103c5711c6
SSDeep	768:jZWk5svkuvQKanv/K69dlopBh6QBATptnBr6Si8FSH8G8jKOD2:jEk5scsQPvC6/4vDAV/zw8eOD2

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\OuKdDV AyeY.flv

Modified File

Video

Not Queried

»

Mime Type	video/x-flv
File Size	36.92 KB
MD5	ad8ac7da9b16ad18c76739a4e9650447
SHA1	df09f3a6667f201d23441d02f290c57384292685
SHA256	07280093b54c4f9969a5559d9dd250c5ac4b796086f24fc3270267b679ef99ab
SSDeep	768:aOu4F7KPI49eKWsENTYVB/hI2++xpyN+Iw5KnkYFYftE0gcmCGzVj:zXmZeKWsENcvhH+KuxfknS03mC+j

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\OuKdDV AyeY.flv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\OuKdDV AyeY.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	38.38 KB
MD5	e736d0e1ef04234420b9bf7db597b823
SHA1	91dc2a26848630d50a1621f6ead2fbb62ee4ccab
SHA256	cbadd1888ae19d1ff0dc642ed096ade8ae39f9a8a0dfb7f3649a2911874e227e
SSDeep	768:ZMXH2eq0bTHpSh7CkdFYxzDMAS2XwEXEuFU4K2FcvTWXXv1:mXHXhbc7Cw2jS2LEujAiP1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\rCvu.docx

Modified File

Unknown

Not Queried

»

Mime Type	application/zip
File Size	51.44 KB
MD5	ea0158114ee2597d9ccfb5e29609fb56
SHA1	1709cb281fec2b4a9dcf9fea6b8ae67583d564ed
SHA256	5a2a2783959ca805e7f4fecf8d6467dcfe17201594f159c4d92735919f3f97b9
SSDeep	1536:qkDdNqvfmF7azf87/W1xh4QoC4WHm47HKAT2GUQR7L:1Bq20k7/W1HVoFWHEAyNQx

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\tasV9hlb75TMZ.m4a

Modified File

Audio

Not Queried

»

Mime Type	audio/x-m4a
File Size	38.51 KB
MD5	045a932326e24c8ee81f3d799a82eaa1
SHA1	f28154acafbe628a62e417e45e3908660950ae85
SHA256	446ebe5f9c833041dca1a152ef3c5c28d7b0236d819c00d001ea055ef59b881a
SSDeep	768:qyYRznlllvpy3q+vFt1lalHx7B4xBSBVR+eJgCdI6FZTXgjc:HyznlPc3RbaJx7B4xkVQeJgmZDgjc

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\tasV9hlb75TMZ.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\tasV9hlb75TMZ.m4a.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	39.97 KB
MD5	33c9110edb46bcae075def71c866e3c8
SHA1	f0c158935a606d00ae880ec97307ec3827e1a354
SHA256	e428fa3d08f961a6bc19c884a971a062eb3d355990ba89e49984234037a57252
SSDeep	768:KZ0KbldRGjDSVgbXxlgYVQzFE5VJ3Y9Lt9xxFu+o25e26L5E1:kLRSmWbXxlg8+FiHINtp8pEQ5E1

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\yPpaV QCtLbswp.flv

Modified File

Video

Not Queried

»

Mime Type	video/x-flv
File Size	40.89 KB
MD5	5e6b3b78fdbe513b9b05c459a2ff4ff6
SHA1	d80863c24ccafa5b6fd96886c223f13f08e13d6a
SHA256	f2afd579d8e7bf46c6b9dc6f19fe4a518a4a63c1fdbd3fb088bf92ed333a9f52
SSDeep	768:LBd4Dh2ugpDIZv0lGBzTYxerEiYzUtQLDjHfSFCuxuJOoiDTu3o6lOELgX:kAv8OlCw1zdXHKbLoEjMbEX

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\yPpaV QCtLbswp.flv

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\yPpaV QCtLbswp.flv.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	42.36 KB
MD5	2c54d2de64f7c632ed4bca05e74492ed
SHA1	2890d8331ee64f12751e2d869c783d72f7987bf8
SHA256	5e57ee65f775c1970d053076d98d1c7f6a46a5853615c6d81ae1c7d07c501a4c
SSDeep	768:RUSCRE5Wd0Qr0bWGcAXHB6Jzcyxv4aHTpo8PBrp3hM6Y0c6DsbBu4ycK3wkRrPTC:Wu5ixuBwzcSJHTa6r7QgakCsk1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl

Modified File

Text

Not Queried

»

Mime Type	text/plain
File Size	18.30 KB
MD5	defc1aaa024f7807c46451899bb0e9bf
SHA1	93a015d916f97961a4a7576bba35f03293bc0541
SHA256	50c7b34bc395431f47c4859f572d9ade55090cb53f9badb2e35de7b36f920d0f
SSDeep	384:fWvnqiHr3iHrnFBbs5z7l16VKubGGIibHj:uvnKK7l16VK5GIibHj

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl

Modified File

Text

Not Queried

»

Mime Type	text/plain
File Size	30.22 KB
MD5	c5d87a5511f54cc0c0328af33266b7e0
SHA1	efde6f9fc91a1baf6eb5df2e5ef39dbb68e6b8cc
SHA256	1535c1a1f223e670dd9005cc0b33cc144435c6b8afb2507f2984064e570c28cc
SSDeep	384:3ByDmvqiHr3iHrnFBbs5crEnP5cV/EGk/T/VpQrIibHz:3BAmvK5rEPGkBpQrIibHz

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl

Modified File

Text

Not Queried

»

Mime Type	text/plain
File Size	28.30 KB
MD5	efa6617fad71e6496c4ba467d34f4a5a
SHA1	3a2cbe3a6c37a5bfec3545367c0cff6571423de9
SHA256	a89995d7265bd4ef9370f133e20391ebcaa4722f939487ab79f1a0457a2a448f
SSDeep	384:fdMOrJnSprJlKpNeqrJQvnqiHr3iHrnFBbs5zs0wV0nZK3JnPnKzsQbGk/T/wIi3:VMvvnKMs0wV0n83JPnKOkEIibHb

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	29.77 KB
MD5	4c14d70cc0b9d08d177fee1d3c1810e1
SHA1	3edd3f7ddcccc082a4776787eb31faed577749e8
SHA256	4c0f91a5160616dda7264b5cf35a39b73dcc2bbb687b93ff8dc8bbc0c3661ebb
SSDeep	768:L9rRzNqK2b38QzXo6kggigz0sfNa+fhgTBPkxP1:LJVNqR38ko6k3Z/9gFsR1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl

Modified File

Text

Not Queried

»

Mime Type	text/plain
File Size	31.39 KB
MD5	ffc9ac044a5b32a4bf00dd811de02d51
SHA1	1f32fa8b0ce0b57a1db65f03cdc5bca4ad46bbf5
SHA256	5d50b6ea07b65c848424b65d850dff3f82a246d836f0a81d8fb9f9c001ac0f8e
SSDeep	384:fiOOrJnkpSlKpNeJMu/yvAqiHr3iHrnFBbs5zs0wVyuK90JnPnKzsxcV/mGk/T/i:KOGyvAKMs0wVyuK90JPnK7kcIibHb

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	32.86 KB
MD5	c4e13587663711a341a4fbf2914cc251
SHA1	2b5abb5cd7b76d5d5164404f542387b69d02e366
SHA256	fe7a7ca32b1be061f33987e56074b37a128dc9d93a2fe5854f7df2b89fbe4de7
SSDeep	768:DuEg/Jq0mKQV/671A0wbtCyR5xTCd482BFq3YwIYB1:fguE1+bHR59mOS1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl

Modified File

Text

Not Queried

»

Mime Type	text/plain
File Size	38.59 KB
MD5	b83cee1b3fcbd3f34d768191dd8331d0
SHA1	882955922761c86f3b59ddb523d3aebd16239b76
SHA256	81af20daa874492b0bdb15415151ad01ad76acb7b2604d0aa6d6ad5038fe8ab5
SSDeep	768:GIfVV29KMs0wVEcu8BraQG5Whn7nKekcIibSJ0AKbTe:GGiKMs0wVEcu81aQGMhn7nKekLJ0AKby

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	40.05 KB
MD5	366599295b4a29521d947cf84942fc91
SHA1	729e1d4fd4290f24fbb1d42398e0b9cc442f2788
SHA256	3be39602aae45f3ac7f3846093ac73431cb35045456a98f21a1376bc5bea1de0
SSDeep	768:k/w6iEtfxSlnQWcjao5vZXXG36NFrbYCdGmhbLohIwkivcxMvRFjrF9jdz1:k/5LfxSlnWhFgkbQjZvTrNz1

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	653.27 KB
MD5	a7e898244b8959b6eece26cf2f6eb6bd
SHA1	9f67575db5ab6bb997f2b25bfb2d5d0609db5b7e
SHA256	964a1205cb07025064aefe95dc86f7a848ddbc08add5d434eea1e98b4e218015
SSDeep	6144:s3gFpaJ6riLlR3iRG4AQWmi3fMCBJCDr1QN4bULm1:s32awip4RG4AQWmi3fMCBJC8/LG

C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	15.99 KB
MD5	d62fb2aa1635f2d3f65d67f172d3d491
SHA1	b7be86cfba1332261ee1416432c77a4a5f71df8c
SHA256	6626b37dd7f60af41e4657a3d1a0effb11f9f7a02df738e5d402f0706dab6774
SSDeep	384:/5X62Z/YlihU3rvqAmW3mgV6MoXp5/oazGPMR/ceRS:/5X6MCyUbdNmg4p+wpc1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	8.81 KB
MD5	b7a0d1b81ea08e046193e6cf1a93141c
SHA1	9327a14cf5cfba54faa88b688256363aed21d4b5
SHA256	0ddee161ee17f276791e89f05331236276c1dbf6b8ec3e3a29acb06fa5477321
SSDeep	192:D/TCj+tFJu5/8pFWXeWAFY6xNSPVjdUw0VVNntG9iTVvM/QWdSPVjdUw0V:D/T2EUSFWXeWAy80VBUFVdNU/0VBUF

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	10.28 KB
MD5	b0d4b3fcad58483b6108c98bf1d1752b
SHA1	18e336d6d75b371f2d3603d9e23464072b8720fc
SHA256	562f2895767a8312c05e471886c3ea575bad657fd20612877356cbeec050bc31
SSDeep	192:DgwDkYw8yqktArYGYLCJMC+ARcO2EL/eSL8ghn5Ptv0eRbS:DgwDkn9ARdL/TLvn4eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	14.53 KB
MD5	6b4814db5a6dae003a34215cc7233688
SHA1	7f2b7b3aa60553c246177384b34f63ef2e4065c0
SHA256	0dafec9f47640bc23ac83e0b6a9c539617adc9e735944ace3ee5844367fc8680
SSDeep	384:kRFG8Fjt5X65VpMXD+7XM4OEWlvKGxNNSN/0Y54OEW5:ki8FRLDo84/WlSKN2/0m4/W5

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	15.99 KB
MD5	411495f076855e2f7268e08f5d076008
SHA1	4f3c2094fd347904b9afb51662ea1a38f56089a1
SHA256	ea1908d025fea3f36abd8ec913744b56b0a67918680b9ecca3c12e9e639929dc
SSDeep	384:XZzLZO7HrYvkhIWDNat7l5xWOcexX0VvxkMU0UF4S1Fd+q14qGeRS:pzNOLcvkIt7xWOjkkMMd1H+qaqG1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	6.53 KB
MD5	04ab4e31eeaf26717a16fcf4010470df
SHA1	324dcfc905f950cdb47e0487528410fc674e0992
SHA256	2d079e7dd0a737fc88be9a5cf7cd7d9c0e21acbb5ce43135d338c97c8eddd942
SSDeep	192:22acBRn658GECWSmP9r2mMJTQQ8aMcQQhE4Xrs:22DPn6Wnr71rDeXM6lrs

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.99 KB
MD5	36c19ac4567ee4623f12421564b270be
SHA1	dc1b6093722f11e08cf82f11eeb7b8ea72234d5f
SHA256	0bb00eabd5fc1f6c16e3b8854c4321f5c7f40558f80d889a0f99dc6f0a43b5a9
SSDeep	192:0UkOwvITLBX4U2RrG/zVO4N/k6sFA0ri0eRbS:5Rwvqt1zh/k6sje0eRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.18 KB
MD5	03922ea646ede24e221d0c8bb097864b
SHA1	5cfd068f8503c81ee7023f71fb0cd7b651e48557
SHA256	a2bd2aa4d4d6c13d4018b79fa64bef439961229368e0c939e1805d087850ae18
SSDeep	96:vofQSxliD1zwiZexIClxRLtXHJKmsLYdJ:UQSxliD1zw1FNLzKVIJ

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	7.51 KB
MD5	83da96423fe8f73a6f388b3a7214e0d6
SHA1	bec0b2646575ba7f3b15325998298badf8300607
SHA256	58df7eb225d924b2d88b19b937840191d65cdf65dcf9a01b61e6c39b3f3c4f3d
SSDeep	96:tCcNHHjAt9W/BWFoLXo89BXJ9MgPXjTorod0ZZlJueFj0Ld2HbEPgf33UhGc28ZJ:ndHUIDY8zXXXvoy4RHHhuP2vT2VIw8S

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	503 bytes
MD5	d40477f54ce372a2d6950da881863022
SHA1	330a1b255840efa5e710a17d276c2de122b6b2d0
SHA256	ff09de98f21606d39455fb6e478aa11c8d8739856eb841dbaa788736eb3f896a
SSDeep	12:KDTSs6wV0IBYFQK0/qpkA4fqo3wl4/qpkA3l:K768FBcQ/ci9wlCc3l

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	12.41 KB
MD5	d684d9a72fc99ed04dff14f7cba1a31d
SHA1	409c9f244666fffe3cb80c5fa0e7153ee5e4809d
SHA256	777c417316e2bdb1e6a2d3b6117a095239d4bbde77f7f2b5972ae4f8b7c133dd
SSDeep	384:0MC8SOcnsgNYMC8SOcbsgNQMC8SOcssgNe:NC8iTzC8i3rC8iQc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	13.88 KB
MD5	dbb6c933dc90e6b2394619c60a38dab6
SHA1	9da45c114ee07180bc21c8360b2e109929f78a6d
SHA256	5c842a622b8027098e74d8df1d3bdf37f3ca1fd500175efceea7dab6f993daec
SSDeep	384:tYUscnEluTbu7xexGrLO+v2UFlntnseRS:KUhA2JG/Ogntns1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.40 KB
MD5	51a85817591a784253ac71eafef1df24
SHA1	8cb906e785f98f656808f96c7aa3d4e37541ee5f
SHA256	325d15a8136b1fb416847321d49c870e305f22fe307eeb881709336d92fb358f
SSDeep	96:0evyyQq0J9b+W/zRQInzOy4MiqzMIU6Mz:0eayQxLjiqzJUdz

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.86 KB
MD5	24d998a63c8a17a09a59ab6c4b9d8220
SHA1	63a0f83cdf0add13648161b4cbcd78ba785ce474
SHA256	ebe53b134e9e11d03decfcf417133d89d5635275fa3d5a20eca8a74a843d730d
SSDeep	96:5GJTKwCsPSOO4QudB3+0HvccUkPYZC/ukKwHU4xiJIRHdRxWR9Jhhz6dDa/AS:mTKw0d4QCh+WEC/ukKwHU40JSceRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.07 KB
MD5	de82e4f1fb31bf6a2e0ffd597ee18e95
SHA1	aa4d4081b4da402a9cb79cb76a45b11519b7dcdd
SHA256	2a24bdd5b97d56bac01e6e268d36f26e87cbdc2e4c2a8c20ef4cfc57dde171f1
SSDeep	48:3Zxuzhg9NICc7JAl/4HmeJcfRKKVaxiT9rn9MASmM6CZ7K0h6:32gX9qo/BfJIiBDBXCZ7Kb

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.53 KB
MD5	9ba8cdfecf471689f802e798fb361b9b
SHA1	4023b9d61c61b9846adb6848afcba0a4fc083f9f
SHA256	b9deff45a81b811991760d2431402eacc9c1361572dacfb430e25eb831bb6431
SSDeep	96:sW/fUt2w9OaBsekuHy6YB12MGZTEZxcyL4H8kq8DHyQWR9Jhhz6dDa/AS:sWkYaaOyzBsoQykHVDHQeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	5.13 KB
MD5	690a632128c8452f3bcd4fc14d11c518
SHA1	61efcc0a42e0d1bd6f0dfe29894dde8afb087aca
SHA256	9b60853bb7f178f14897f2f2d5e60f6acc6c601adf0c736a8e5b6980107e188b
SSDeep	96:DE6+s+/hMds+s+/hMdHtmDOPv8EI9wnr+Qpkyv8EI9wnrtmDOZ:DE6+bhMW+bhMZlP09u+vy09ulZ

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.00 KB
MD5	1ec15a96a2e5e849276434293bc50066
SHA1	88bf8e62dffa6665754f09801507c7b0210bf765
SHA256	1172c0e3c65aed13c559027be905b2b4f8d6115de9ecb8c413f9b5b20ee5c808
SSDeep	96:qc9C3/7jBHYcCbp6EPuSMGPvZbny6MLz4Yt9QWR9Jhhz6dDa/AS:BolfCbpJPuSMG3VynLz4a7eRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	16.41 KB
MD5	83eac95a76d18aaea44713a81c2215af
SHA1	c7c1252551481854636eaf275716c6604cc9cfda
SHA256	eebb6dfb17b5d4faed59d12ca6953c3c996441041b85b160af696846b6a46fd3
SSDeep	384:KnwH/UdoFFlNcZVKZpdroxzUPlPNnh1ib1qZqqIOW2eRS:Knwc0HZp9oS31iBqkqIOW21

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.66 KB
MD5	400e50a6163b452e4425d89330f65b9f
SHA1	fea2471b42284c708a74dfa0c277297083579a4e
SHA256	53142c9bf038177b5662a502b045811794e10f3ad8a7864ccd6b540b0245c5ff
SSDeep	192:LFiVAbIKKMf6xqdB2hUnA1nx41nzp1goJSeRbS:LFi2bbKMf+5hUnANu13goAeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	4.91 KB
MD5	2dfd3972afef8c566fa65a739b425322
SHA1	03f2f283e96a74f52fd18331ee6280e9aad39c7e
SHA256	7bfd9ce75a0f9556ec18c5ff700e387a2f195ceb97b45713b90fa62e73495771
SSDeep	96:6fDkHDB6DYMhVvfDkHDB6DYMhVrlp6vVXmwl2F6ATrKs16YzeZymwlX3DTXlWLzT:4D0BF0V3D0BF0VngVK4uR1kUlWhRyWtT

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.38 KB
MD5	0a816772b9081bb23ef603434f778a79
SHA1	62079b40c47a21a9ab4b8e825f21d95d51440159
SHA256	de1ccb899d20878f569a50a36877e7e9a740afeacf50cd075737ee6c486e2367
SSDeep	192:jK/920AfZyJdxNsnpy1ke3FDoIgiVcd2+cnIvQeRbS:Q6AzEnAr3FDoIgiVcxPQeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	6.82 KB
MD5	2a33cc608dabc48d315e76176ee9c1bd
SHA1	581ddfd8a28f22d3be43f94c39195882f18fae2c
SHA256	898940b679f296e73a05f5fad7e6561d25a4a7b406b480f9103687fb1c5e19f2
SSDeep	192:5MAKqy88HEa7oQ1qwKDYdGzwGzKy885uE:5MAKQwDoQUwwrExE

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	14.41 KB
MD5	4f43375d137b72a13b8d8ae4d33ce7eb
SHA1	0ec7306895fd1fe06ee57b7d5b74ec0a78929f35
SHA256	138686a81da09941fe713e1b2f926781e71b9d33e7ed7826afbf31ac88a0777b
SSDeep	384:Wo3O1nfD8snZTCFcsXFw9OqFWNZ/95OKVfYeRS:R6fZnZsQOqFWb9VA1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	8.38 KB
MD5	f3b5bc2a12b94eb8be04cbf72e958cc2
SHA1	6abc907ae96db439a8363382adb7c78a965dbd53
SHA256	5f1eb007ed9d5ecb24f2a8d43d5ec4c2a278eafdee127b709005dce842ba5202
SSDeep	192:4MAKJww9ZL6PHKuu6smEOO9W9jbGqSpP5huCBTFGpqzZl7XVN2Xm:4MAKJwwXOLJfEOO09HGqOjuwf7z

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	4.78 KB
MD5	a3727b2e8c9da4d59cf9a4f3829c4923
SHA1	3d424c4958ec102abf08ff960f05087da6c6bc0e
SHA256	2122de23c630c61219ed90ca0892805791e10df84847f44047cc462896feac5b
SSDeep	96:1OAIMAEMQ7weKnbnL6KvZyl5KVoNKvaM33K8K6HXSNxG:8MAKR6n6NmoNrM33FKoCHG

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.25 KB
MD5	4a8125fc013e8c094cf34310a7066b93
SHA1	81bb80209bcbeb0f55ad421ca7c5756102f56d3b
SHA256	6e9639cf262e74977bd39514ead3bcc3b68bbfd26505bb989a245d6da3b1bb24
SSDeep	192:2NBhDNwap8oPXIijIPT/XI7wUfk5xeRbS:2xDNwu8oI0IPT/XI0VXeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	5.25 KB
MD5	55fe9db031fe62ca6693d9b0856253cc
SHA1	8ac2cdeaf0ebcb5416d622dddc80e9a4a569a12a
SHA256	95f66e46c724222060e6569d1c054013c1bd596ca8221d803d4fca79f71b1de9
SSDeep	96:4AIMAEMQ7wUYQn1WHaefAZQ27+Qn1WHae4ZZ4tAE0R5njJlQn1WHaeTFykxB:oMAKn1n1W6efAZQ27/n1W6e4ZGarjJ6Y

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.72 KB
MD5	47b375b85fbe3c3adf014bab566148a9
SHA1	ea82f968c7a3eb53c145103546169f4abcbf634d
SHA256	f8b2c447ca112a279e50539af0f77f41f3a54277352a27dddd1df798afa27f99
SSDeep	96:/WthOeFX6iiFzQ8us6LbPSv8VmaAWGIf1xklBqIRicJ9JtNWR9Jhhz6dDa/AS:uthl6iWE8uLbP08V8WGIclvwc7GeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	9.03 KB
MD5	ce72e16ad99f40592ecfa8a1b84d2b4c
SHA1	ce5c2b7da4eb631170a63275497d77d3a8b90cce
SHA256	e36a78baf6e3606418007a720504c442c6510c9b86803cdd034b36e20ea7e318
SSDeep	192:32GGc1VJxWNMSZV3AAPHhHl3WAgf6IlhQBM1FaXX9YAjzhwdMH4b:ZGcpxWOS33tPHhHFWAgf6IlhQByFadYj

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	4.29 KB
MD5	b7ce4543f7438d163a6de7ff91a89ba8
SHA1	bd6d467ee8fe36658c3fbb6ab567d8faa8afbc48
SHA256	cf508a8bac5460924924e5858739c959588f4639d2350742f3318c0b8380942b
SSDeep	96:1lfNph7zHShwvi0AzHShw7r4gYk2zHShwZ8zHShw/0xM9Qb:9HzHSKHAzHSJlVzHSy8zHSI+Z

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.87 KB
MD5	66d6a49ea4dd3aacc379a7e38639d579
SHA1	83ffdf15e16b7af312700ce0db3289df6969fd52
SHA256	4af586f5485c10fb69dcb61bf5c1c8e4fd6c01a213c73a199e2413dc5ff2cc51
SSDeep	96:fDspSXIDfGFDft4slDfkDfXdSXzDfReDfBdZDfeEDfczFDfLfaDfGXuDf3m+:uSX4ct4spsgXR+BdleMczJLaG+3r

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.30 KB
MD5	af8324028e2f56612a407f2219bf94d9
SHA1	098fa9683375bc93229ec20bfdf83fd74089e6a3
SHA256	24a72fa325e322809d4edc1a9250b44b7aac211ce5baf7a21a5112e78d65070a
SSDeep	96:vlfNprrPO0sxPIb3BvP0EKalLdan2U/79xs:TxG0sqb3BAn53s

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.77 KB
MD5	4ee7698322135a9bda6b15466668ed92
SHA1	6f60246cc914758c17b9030de894c9bcd29abe4c
SHA256	dff5a6271aecd4228e4bc3ed0cfe70ca41a946af44a8c58521366510026a7537
SSDeep	96:Vc2MEsjsJRORBH443HOBPp9r1EbpKpleJdslZKaRMJWR9Jhhz6dDa/AS:tMEXRIJvOB6p6TpeieRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF

Modified File

Image

Not Queried

»

Mime Type	image/gif
File Size	3.05 KB
MD5	7d92dcb769dce80020e6015c526578cd
SHA1	935e94bf84c7ccf8a932aedcee4751b895ddb4f6
SHA256	71da069fc7662d5a91d665a4ccf675c5645e677121a98c278a3f74e38df1462b
SSDeep	48:m9WRIBPzGEWRIBPzGjJ5yaEiAgNNOSFLBI3RaBpvP2qk8iro+pjEAUwTRoW4t:iP1dP1y1EJO5FL+6vPpkzk+o8Rt4t

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.62 KB
MD5	b213e94ad969763e66e6bb1ed00b6d51
SHA1	dbd158fa0305446b28cbe1eaf2dc5b36721d061d
SHA256	1a69f23ef60ae979fbe478660bddc8cbd5cc6e6ce86ac6eee3f2d00592b8390f
SSDeep	96:GPESShRLN7cgXcmAa375cOL/AcEPBirT0CkM7EO:G3+Fcs0k/zEiTjn

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.55 KB
MD5	f31c33c0025db3b5620c809299c94f48
SHA1	405188a3fec6e2be1a65725118dd7aafe35f796c
SHA256	3b30d10b728302e6e0db544d34a124c48175768a83e54a28bdedefb702e4cb73
SSDeep	96:JVRPeywwyHx3jEsFyOl03QkKUVAuhjj9UzXTie6CeHpgstQt0SrcS:JVRPdwasrmjJUzvLeJTtQD9

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.10 KB
MD5	d9484dba80b5ad24bb464233681f7236
SHA1	168fe8d2e3cb0cbf5d3636b664230a82201ba758
SHA256	63ffec002c6c7c0b768d013c48a73c34d3b7856b4105777a2c25594e6f6932f6
SSDeep	384:X5be/I9XLsZFmYyGPFWE32Z7kKbrwaBFa9ji/rW9i4S3dF46kHyDHML7oSD9:XdUG7q0LIV2Z7kEUaaA05S3dFnRtSp

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	21.56 KB
MD5	57b0d99a55dfe5c8314b80dffba97abf
SHA1	28429ac9588c7f3d12c375f650fa675594e0994a
SHA256	6691f1178668afb66923ac57f7c6c3dc9592aa66f5b205d183058f8f7eaaeb83
SSDeep	384:TvHKFjfXL5vAUehRqDVYr3NWw6sUPGjUND6pnwU1AJzheRS:TviXLxAUeXIYB16ZPGjUBILm1

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.58 KB
MD5	5cc34de1e9c9d796627ea544e1321b15
SHA1	48fa967e87de84a029d465ff53c758b66ffb766a
SHA256	b093207c97cb7411da05699bceec879b1a58a6397e12f6e57920aad4e67dae8e
SSDeep	192:i/ikeWqGWTazAQ9GbekT9BKAX3MudiGLL/MzCPO0FEeiwvu4JepEbMzmjyaK1UpF:i6keWqGWT2AQkykT9sk3MetHUzCG0FGE

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.91 KB
MD5	cd7ac3946dbd7e40aec469deee1a3d83
SHA1	f278d031fb531f1bdef804aedf30e5da241da0f8
SHA256	699266855ff5957496412c5225e0d3088e19b19d114f19f49c4f78fe9f6d6db1
SSDeep	192:a9v0YlK4Fbw4KYxhi4s7x6FoGf3BFGJ+zMRtiGy/HAwW8uE8JtHZzTv/zEPAQbB5:a9v0YlK4b/KYxhi4sVkoGf3BFGJ+zMRu

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.27 KB
MD5	dbdabe4a3100b18bf1e70c83144c24ad
SHA1	79b958867c3ced706d6a73b54d550a57e9b6a101
SHA256	69f6573587cbfc0f7a1a597c281282764aa18352314009ed53f417f1f45486bf
SSDeep	96:s1WWWYQ16tNGScAE/IdmOVZmllyrwpLtsm+ruuYk:m1WYQ167GrlAZmllyqhsm+ruuYk

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.74 KB
MD5	49e0a840093e45794b40bc1a005ede90
SHA1	3b3699e5f3dc0274abcfe8557bfd99ca874d4883
SHA256	a8eb064d871b252b0984fb7ec6017d87c4480bfe82349a77912c0686b0a82644
SSDeep	96:P4iKy9bkEQsRI1BjInNg9FNpPUNuXkPL8ZeAfKFhzqjWR9Jhhz6dDa/AS:wnyqEs15InK9DpPWuXkPLjjzOweRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.56 KB
MD5	1d486b58cce27f925ef552a5b7777f96
SHA1	16468e1c6d700e6f80571dfa4eba4d9c3dcc4bae
SHA256	d7f5a1bdeacbb4d2fd587b7f523f540ea0200db9a31da0eaafcc4f585b7d489f
SSDeep	48:uEsK4/Aw9Vp8r1N453kWoRM8k1EPVyyz/p4c:o1wpN450Wommyyz/l

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.02 KB
MD5	930d6948c248f7d7f74b87b0809e3a09
SHA1	e65d393d3c22d9b0a8abefdf42bcebf76f5ce9d9
SHA256	dd49f10463da1a1a0d864588964b26ca1a29830b452db897155e8226f2e28370
SSDeep	48:j05MVlkeN4khJ8+zY6DXa8ohD4vnE9Ao1CJWR9uAVhc8S56jU6Gms4SDiD/AFg:A5MVLRfXzeUnE9A1WR9Jhhz6dDa/AS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	c5612b2d5032988549aa628a7d54aba1
SHA1	4caefc3b8957df523fdf5489bab39f2e0e227015
SHA256	ddd5850c945b5dec1a1ccb707aa4cb7dc5340d642069ddd2b820dc4e4878537b
SSDeep	48:xBK4/rhS0SnQHOmQ+W0nWhUYkKPRotkLkYl0LkyLkOBwTLkYANc:xB1NS0SQeN0UxNubY3jaYAm

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	25.72 KB
MD5	a55b3d333cf3fa4df944cc13301af5b6
SHA1	c3995c31d233e2660cc6c47e56f498b3ae650cb6
SHA256	4232786f3f6515adcd13a6f733792c0b8f76562e1e4a57e37fb4b651863238a0
SSDeep	768:tm7L7wO+ec57BM0aRxDy6SwQAz4GKUZpqjsk5FcjZUSang2CB7eno4C7+GLGVrQ3:QTJK1AoOTPHAbDEayR8ECfQ

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	27.17 KB
MD5	a6547b4580f4bc45f0d41ec7ddde6b67
SHA1	212204d5b076cf37be2b8b830a0184161810bdfb
SHA256	7ebb9e729011195dc95a97db8807747e8702944f0805e086bb3e132a9066e0b4
SSDeep	768:2qobVK/5ra5Op817FW90IeMF1DKbFKN31:TCKRa5Op8lF8eMF1DK+31

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.21 KB
MD5	0982265ced5c29c25e2c40f542634e83
SHA1	c521c366721f0fc760e9259dd332876687782c19
SHA256	825078be018ccf7ee1cd3938b0d540e92e3f27eb4fad4a1723654275ffc54e18
SSDeep	768:UBjDy6SwZAzBGiTZpn3l9AEc+gNv3GL7rOgec5yBZxmP5n7CNWj6pZ/WDrTGV6QL:Mo/12SeDKA/XoL9byR8PyqM

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.66 KB
MD5	c2b79d6102c7746b2dcc75bc9328a849
SHA1	3ed5481e0e0be982cea5a8ff9aa32ac8742b1e47
SHA256	deff1ba7370f3119b660bc471d7c94727ce088cb3ea6ed8b158be22748feee1d
SSDeep	96:s4U7yT436IJ3XvgYyPBOJARsXa8bWOZFXrsmg9M4E4x22OAvn:HU7M4KIJ3fgvPgJAwa8bWAFXrsmg9M4D

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.70 KB
MD5	814fecc38e98e50122a7985c9ffefbc8
SHA1	3e99b20356b70d864d2691f2f9f52e271a636363
SHA256	fba81e3d475814bef77fa2d1cb4a8a7fdff55f5fbe17d255c1f2f62b4c0480ad
SSDeep	96:eP15xV7KmcNgcIUosyf/ebFmSz2GVFXThlGPVUHXy1FG2UHXy1FGnjVsBkL8cWeO:e5xVGm8g9T/f/5S6GjXTPGPVJ/XJ/mlS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.94 KB
MD5	921bfc4a21e938e4357f0421ef4e584c
SHA1	ae2849f9c16d3e8eaca1cc201a703505738b7d9e
SHA256	5cb6f31a06795da6b7fda3a3cd63deaf7fb53d2883d9adc4cdeac0aa726b75d4
SSDeep	48:IK4/oELpo2/RLkBLkqOLkHLkkLkxLkRjALkDLk9LkoWLkL57LkKLkIhVLkOhXCL8:I1LTm2ooZGrkSuWLO6OXTfSqQlFrhnHq

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.41 KB
MD5	e2718d6cd989ed889fc894069d0074f9
SHA1	623cc66129f7885a5b7a98c78201436f3ba471b1
SHA256	6f7aa391e7f345adb137cb8820e74a648cc7fe0a65868bbdc15f070a0ff7a1ba
SSDeep	96:aqIv2qGULegwVbSxk2qXHzMOOxoKRHP93sBEw++2WR9Jhhz6dDa/AS:aq08USpSxkLXgdlFcB9+seRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.69 KB
MD5	5ff7aedc7657a2eda5855dcf404813e6
SHA1	5566a81e187068e899969841f3bf55575dfc49f3
SHA256	5bed0a5e29e8624c267ec9a2894f6b52c1478b97cbae893524a74dfa0655c668
SSDeep	48:OK4/1fCrneMOtbsk4u8LplGiTC2+LDpFjqqLpo7MdZX1qVBXDJRcXY0Wfc:O11abeMob64iTC2+LjN2MiBFRcXY0WU

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.20 KB
MD5	61c3b39b97bf884633ffea6e43b8fd2b
SHA1	d4d87da76dc975022fa1f7113491d77bd93983a5
SHA256	7e29edf8556b08a41e53488e28de2f1598bb7e75c3fec5be24e8f143a41ac28e
SSDeep	192:ElCp76lstfENbDKl52TxX60LkS9NaPI2+Q3v7TB7CGY50AVTpTE:ElU+lufo3Kl56p64kANWWQ3vPB7CF505

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	8.66 KB
MD5	8ddb8c46bfe101654fd644c1f52a330d
SHA1	b7c5156e27ea7ab7ccf92e0856331aa4b3e10ac5
SHA256	85837f5dd6a2264eb13df4fd9dc997cb86d5bae49f6a09bac80c784ff8d0ecf2
SSDeep	192:zFWCoHyv2nWdtRL/uCQEkY35+L8g3kTdeRbS:zUjHMroCQE1wwgAeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.36 KB
MD5	a839a7edc756c1e23730fab4966874dd
SHA1	559ecf2a4182660945e94c6df8e9700c55b5be5f
SHA256	2ab179a87a40f130333cedd289fa9f733181184b59004d5dfbd933cd56c04306
SSDeep	192:n0LUL84GibfbPE1cRMhvH8bTdpM+KsbTKjjN6qNcBC7d:nGULrGU41cRMhvH8bT4+JKHN6qNK8d

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.52 KB
MD5	df84450ca2f02e5cf59cffbc8c2e7855
SHA1	b523f2cbb220ed7ff8782235abd9180d367047d4
SHA256	cd594bd5b60f0a9eb6664bf9e24a7f00c144c0df3b2c1a1011427ce9dd382575
SSDeep	96:h/CSQLl2P21izOqSLhy6UBoYWR9Jhhz6dDa/AS:JQL8qiAhpUOeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.02 KB
MD5	e79832691f1d665b4108b20889c906d3
SHA1	0a65e4a860f1ca5701a5b3c804e17136f3eab325
SHA256	80602b4ce0caaeb6b99fdb41c3303aa155114d70490ce1bdb29d79332e6a9b54
SSDeep	192:pPLbk6rn4tPpw4hUmQj/ZFU0jACkUJA7cjRLZTak62WrTNKWZiH5mK4aKrZKryiG:pPnF431hUV/ZFU0ECpocl9mk62WrpKWL

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.29 KB
MD5	4e9ff40c70c6ace922ab1fea084c1f80
SHA1	e890db0f08853559f4afd8ddd159e4b2a20a7e03
SHA256	21c37996a0fa76637f90a4d1f684268fadcb3ba1b02fc3d7c82b1765a893a4ae
SSDeep	48:1CB4gYT8YNXpQVkMtkxPEU1DLQ1YRlKwqjuUyYyW:iJ6XiVkxPQ1OMw6uw/

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.75 KB
MD5	c524910b6b22badcebdf97f9d777381b
SHA1	39c09bbbb416f566e2551ffe6ab792286cb0e460
SHA256	c59f9207b585a8d421cae986db7ea98a321f22d44a1ba401bed74777587203fe
SSDeep	96:TMLi17KLyKAGOJ1foxzsmbus8gE4XAmU+WR9Jhhz6dDa/AS:lKLyKANvkIpTgzXAmUreRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.92 KB
MD5	0f2f007a02fb84a4708f7eb9c0345d9b
SHA1	5ed66b0a32e782c501ff0f4a674958b1d266056c
SHA256	979784b3f04f5a53764965154e3f42a6e5e4aaeb45b7f4fabf84effe3cbbe61d
SSDeep	96:sZJpIcnoaD1CF1aq43mXyBLS+2yq84zBhr4lb5aY6jM+qxaZ4uDT5GgboBTDCTAw:szicnonF1fXULX2yJ4dhshj6jM+qxaZh

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.34 KB
MD5	96f6b0f79668d0a59a29d032d5a1c10d
SHA1	fc783609aa3dd81ed5ad2e91ae9e157d39f55847
SHA256	5af783d1ac5364a7e69c2e8a0989251cf966028ab709d0c463eedd132ef7fcee
SSDeep	96:maf/aghCkXAph3Ua9qfYTy0dDIxXXJCHdc:fHBhCthkVfAddDIZc9c

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.80 KB
MD5	1df9b6798438e8e08f22302708dfe801
SHA1	60ca19e939fe51d6bcd2c1c28088b3b07fe32908
SHA256	421a60672f4692de215d0e4882ef235e9384f909a38446e649c2d22b634eeae1
SSDeep	96:2eVFoF388KLkKina2AGzLWK9JHxegJUrknWR9Jhhz6dDa/AS:/oF388KLkO/wWK9egJ6eRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.58 KB
MD5	6572597301cdd8bfc23042e39dbd9eda
SHA1	d6ef1e4afe5ca24caa47f4f36667849a17e46393
SHA256	60249cd48030be84fbd609ba7e35287aa0ce42df11a769c7079f87376fac9334
SSDeep	48:1GmIB4gYT84daVUZqnf8pl/kOibPj9rk6kgwrfIZDQ9ps304oIW:kmCJq6GIfgNkBb66pwrfIZDMs304ot

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.03 KB
MD5	d51982467b0cf523a88a447643120622
SHA1	4a6b41e7e4a3be84323d92e52f05114741ac27bb
SHA256	1462a3f68805c0334a57ef881756e9ad7af504b0819c766769ba4d883c3953ae
SSDeep	96:Q5jjjdPD/61JJW1KCbiMD4xolq2Kj7k3JFWR9Jhhz6dDa/AS:ovjBDS1aVbi9olrN3JeeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.48 KB
MD5	2deb4ba29e04f999b73472a3f7986b9b
SHA1	583e51310636cffc29f7367d436c4ba972c2ba8a
SHA256	d8b02558cb9740b341b7de10d104bb685dff12ad5289fb2bba8cb9712f959c3c
SSDeep	192:7jLxPK/OSdZFxs13MkWhaoURKk8cITyGx2E9q8zqslsc2/04McgW5m+m:/LxiOSDFx8ckW0oUQk8cIHYE9Vqslj2+

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.29 KB
MD5	426664157cf73294ef94faebc0369fdb
SHA1	99c46876ad5a1be398f76895e12b2c2c6a27617d
SHA256	ad4efcbf04f32c59e181b7e6d3a14acd821a0202eff0d99775699087d358dbb3
SSDeep	192:WlrRZlvQ8TO0NdCSCeLT5CQKMpRm8q7YE8tMoGu+Ya7CcfBba/b7ES586Jt5dcYc:WlrRZm8TddHCeLoQKMLmd7YpuE+t7Cyh

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.75 KB
MD5	55898eea978cc64291375438e0a3406f
SHA1	b3bf3cb0c6c8ea6563ccc0eb63fa4410a1f1f7ae
SHA256	9089e659c41bccc1eaac679d42487767485a84c0bd37f97ca69cbc91605002b7
SSDeep	192:B+RsvvjSETI9UvWl1MkUBifI6LwmWCV0ckvORk4h/VQaaCeRbS:rmA7gocrcck2RkAuapeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.62 KB
MD5	210809bfbe0a2b4342d51a2188e9d137
SHA1	ad4885ae402d88806adc2eee341b0ad47fd4f50c
SHA256	620b6a2a5d6e92edd845a1fb4e9560110cfbf7e40eeb9e76c7a78f7025858ec5
SSDeep	192:74ux7g1lzq9rpwB9LxD0KQymhrFM93TE54VpIdmMLKzxgL8/84RQlTi8Ip3:7Hxyzq9rWfLxD0KQyyrFM93TE54VpId6

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.08 KB
MD5	b50622c469b99c730e88d52a8621db7b
SHA1	7c629ed993a31e5248e622c5eec7da8b2b72f080
SHA256	2ffb01ac1533905e803b3adeb86830937fa8e3c5f861beeb7bd9bf9ca93d6a9b
SSDeep	192:Wjdoups5fdepvb+/Wd4lecuyjs5paHoj4sgU5dc+G3WlceRbS:Wpou5pq/PUcZMJpG3SceRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.08 KB
MD5	c36b35f5251a9958338d06b0ae01ad8e
SHA1	b2f85ba86db6dcef98ab3da3e59c12bf721d2d90
SHA256	7f7583c785b8066e55cdd619f727bb9562af36acf2822d44c88cc386e8a1de56
SSDeep	192:2nFX4K7UuG7m/U9S0wlaK0xycYkPhgA0iSdcfXeRbS:iFX6OlaKxcYkyADffXeRS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.97 KB
MD5	76fdf2ceb0ecc63802f61b807736bbcf
SHA1	ade2149a95dea7ebd584667c53d54c17358f7bb2
SHA256	155c8434b0437a97bfe9de65b4c9388314802eed2751f5a882a3c2406a415acc
SSDeep	48:1eaB4gYT8oKoCEAEHMK5YT2XMN4MDi+anW:QcJjpHT284BW

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.44 KB
MD5	d48d60c53cc5f686a2fbcd6ebe2b72a5
SHA1	fe051186f08bd02ec17e2b1e69725cbb345d0d19
SHA256	0a0e15258ef01e31c74042b0e955259b51d8b16e9ced084495aba42b7a8c06f9
SSDeep	96:Qb4aN6ZkBBB5eoGPPDidVWR9Jhhz6dDa/AS:C6SGzPmceRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.27 KB
MD5	315ff0927abe1a9230efc6c0065dcfe5
SHA1	d9ed2c558bb26926b8ee00ee6e01d0d4c8a988f3
SHA256	4accfd7672933767f868128eb0cad3b0c8ccbf1e04ebe0996ab4e29a69dfc0e8
SSDeep	96:RJY/npm7dNyrZKq7KFXvObgheMQHeCH41xrTY:7qpmpNy0q7avCgheMQHeCH41tTY

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.20 KB
MD5	1f24029d8daff1819a99c36c01edbedc
SHA1	2d99c44d76f320b5aa32af2fa061afd72f37c338
SHA256	5ab2fe1a1d27e75852737af33d073ef57411d84fd9f340cfd655953ad8ffb58f
SSDeep	96:vJGRqy/SRERWnmFwIBHuO+q6bxn0OY278dB/YXmCYeQYshWfLlTJ0gTQ14Tk:hFytRWmHHuO+qQl0OT7OlCmCVQtOLlTi

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	5.66 KB
MD5	c148a54fbe40fe516a6e01985a8cdbbf
SHA1	349345f91ac4c40d9b194d2d633eaa05d4161963
SHA256	7b5b5e970de22b29bf71fb903c81d2720d705542eb690abc6dd961efe61f9e4d
SSDeep	96:ptNGoCt+10x1koVn9tH+jszOelfROzwDXVcT5knESpWR9Jhhz6dDa/AS:ptkPt+mdnKjgAzwDXVcdSCeRbS

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.15 KB
MD5	e3af6ec3a4acaa5096387012c521e242
SHA1	6258e991437d04940ebdda2d8a2a0d5bd1b9feb5
SHA256	92c57602505a815b9812dacb6090cf95cde23320ca627bd089cb889703879355
SSDeep	96:sJ1bQxSlZEZvJtq4ByHyBBYewRdNVJ25+eyg:i1blZW7dgHgBYfJe

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.70 KB
MD5	00a08a02bf393db5ea393ed98a724b94
SHA1	4429c13c3b9166c66195f10fb06d52c11effe574
SHA256	b04bf2ac764992c1c02f672c32a214f3faed2bb5e3b679027c7722180a1b5818
SSDeep	96:AJVLoxQRq3WDtrqsWB4MKAbd2gULwgI8PZmDn:WZoeRTtrKiAxULwH8PZ0n

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID

Modified File

Audio

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	audio/midi
File Size	7.21 KB
MD5	800cafc58c686ea77cc690f694d1077f
SHA1	8c282e0203907f20e2382fe1f8d450e610d06438
SHA256	80c4faf77b998423fec4f3e8c6dd7a06f7c2af52464cfc25a323b876ab74bb34
SSDeep	192:RprCIC+CUC+CUC+C8kYJQQQQQex6KLRvs3DMA9WCuWCp:RpOIgUgUg8kYJQQQQQex1R5A9gp

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.76 KB
MD5	0d1dcdf9ed0a94e7148e445df2bc4de6
SHA1	c27a841ac5658568d003c7e5ca260456bff68bd1
SHA256	3f7b2f380055056aef9617a6b80646ae79e2e07f7db2bf2bc43d6e5d261f385c
SSDeep	96:z/JM0o/ci3Nwx4VJd0KjDediZmtyRVxpST4FQRd3L4FQRd3EVwFl02UqEYvTBR39:lMVyx4VJdfjDediZmt2xpG44b44UVKlx

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.27 KB
MD5	64f243084cb9d15d295efca4064f82dd
SHA1	69ad5db70247bc8cfe069515473bd74e9f4f41f6
SHA256	14edca0786bf28a31127b8c40255d2adc0f50c0f0ea38479987e7d5389e1248a
SSDeep	768:AnC2KLqmi5AfdzGi3bHCQc9yM2XvlomvoK+hlJZFAf5iUnZlh+LiakoAstICYF7T:1dNBQ0mhyXCKG62wNL/5

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	29.74 KB
MD5	1aa174d7c99b07a3cd9191f375b102ca
SHA1	c4eeeb716b0e0d98613e59359f34970f2a306dd0
SHA256	249adf4a3b1301b53114a69c438fdd3dc94a4177c6ce119b9effd7579274af5a
SSDeep	768:gjH3cpsR/JUxm/E+5S2VJNMkkqlf4oZ/dObnci4zbfBp41:gLp/axYFPcbciMDB21

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	11.36 KB
MD5	cd42411c780fbee9a182da468cacfd7d
SHA1	ec10c6ee28bf6ac9118dada9b988c325b938580a
SHA256	d93fcfb3ff53bffdcc22351fad95d4d9e7b11074ed1f8d79b83cc74842fb9fd9
SSDeep	192:2xtAOP927mZ8OuHNRDgXjXIGInt6RVIMVM4tu6kYoF7DUuFN58G4xcnScxPsfDlf:2xtDM7mZ8BmrIGE6RVIMVM4tu6kYoF7s

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	21.99 KB
MD5	d73e5293af5cdc261f1ed60a0bbdbc7d
SHA1	d4430fdb810a917dc5e59a00274bf766b80e0be3
SHA256	9aa10a7767b264ae1e9243db8130e018bdae1d919096cbe22d430c6ca9bfc189
SSDeep	384:Is6r8M1mJk/dluq9s76GmW8BxdvzeDVoa5myWKYba38exzRui7c6JCuRKeSCz8Pu:I7r81Jk/2q9s9mW8Bxdvze5oaYyWKYbE

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	15.80 KB
MD5	72f40f0f42540debb1cf088e9dedd3c8
SHA1	711dd5ff2a063a94e7222559f1cdf0556cfaf640
SHA256	c3133ad7fe3dac30578040210e9943c4d2d5c18864f44fdbe02488c13558cee1
SSDeep	384:3oVk2+VIKj58FUO8u67wmmHqNc5XTfe8eLZAzy/X7RV4V+RX/Ldh0llj1/9/EY7S:3Uk2+Vt58+O8u67wmwqNc5XTfehLZAWD

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	15.74 KB
MD5	45f08ad773790dec024123b71e6153a9
SHA1	4502ca02be53f0b59eb1b5bd9963110dba8d297d
SHA256	613f497fb0b3d8079071183ac80942ebbb0dbee4eaad3fbf4a0db92b2fa135fa
SSDeep	384:i4anifAYOE4INNPGMrvnA6/vJ4md9LmsHpBtYviXRIdRpYVkLWqRCwKdxMqivf8f:i4auAYOE4INNPGMrvnA6/vJ4mbysHpBd

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	16.29 KB
MD5	fc8f4c8dea257aba885ecfdd76e7253e
SHA1	a63f3c37c2c3667431c87593bdd6fa27b5022bf3
SHA256	9c8693aa92c5470d95bf5114d4740c9898b1d261c92809872b922e6c6ca02bda
SSDeep	384:81vmFtzk0THj4Y3lC5GZ20wLi14cVVeixCUS0oWMD7oKSXWqOWMHgJBoq1Baqifp:8pm3Q0ff1C5GZ20wLi1HVVeixlS0oWML

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.81 KB
MD5	714977129caed5cfd38159c16830a7ea
SHA1	a2108a5236929c8809c8a8767fe1bdbd2d2bb17f
SHA256	761fc87339ee96737c22125a75a2c0f76a0e4d0580b41a993ff720235d1b7afb
SSDeep	96:0JQiGD3QayRZmJUdsYUHnIsSmLw0BhQLHC2ysjTYdlmQD/qorR3jT7d:6QiGsayRZGUdsYUHIsSms0BhQLHCtsT2

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	23.75 KB
MD5	3a8c52d21d97339be5905f00ed087ca3
SHA1	376ec4f01f85be88e22e2b67e2e2c39bd88ac47e
SHA256	29bffee6857972608033208c349cf575f6dddd0544c84bca59247bf98f123751
SSDeep	384:GmB5ln37wvmxuD1ZBwpbg91/sPJ3OdKi7VjDWs+JHByL0SgYJzQmrmH985rbAR6Y:GmBHn3UOxUjaEFsPdOdB7dDB0r8zQMax

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	46.87 KB
MD5	6a1751879a10e01a57faf90b0e2deb11
SHA1	dff7279a1448376c21e251dd9edd280ee9efebad
SHA256	c27f78dd557548cd62d4810afef68a64cd4759b84fb0c6eeb30b8f2805b8cb7b
SSDeep	768:Kqo4MS13fndvHfA0vRHxgOeM98GMg0PCXzo1MhD7XuxD0w2a:dbrRz6so1MhD7exD0w2a

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	39.26 KB
MD5	a33c32182ab424a0958ae1bc6df3738f
SHA1	ef6c144549ef6d53260d3ed08d75540310568a25
SHA256	b00519c20905ec40e2e0ffe7f9368095d9adfd233bc0a16d620033c0a0d5ff4f
SSDeep	768:PzD607BWZBPz43+ZS21BYTpvAPCP0zwITG/wBWOKEe3Jqhc:P607YPNql4KP0z9S/i7QJf

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	46.67 KB
MD5	16514f3fedac5822de85f4e735f509ff
SHA1	1a270ff242ab2f16a5697a19352c24b2a5f78b17
SHA256	428a4838e436533b62ff7901f36f880f0ecc9f9690909c2184d40f14a34d89b0
SSDeep	768:GNf5Co/PqvU+Dqf/f+BQ7kCHEC+r7lHuAA08lMHojdJhm6RqweaB59h0Vj+UGbQf:uf5C8PqszP+5lrhHumHcdCKqwwPGbQf

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	20.07 KB
MD5	23531b1a2b7b409fae00423b602c235e
SHA1	3080909c100de9840e06283769aecfa0dd486709
SHA256	3e65f98fd96adfed1e0211fd914276815c346f57ba4b40c693c1743d08cf3cb2
SSDeep	384:BtX9FpZF++LJhfUsdwwfYOiof8plbxXJl8M74KpXzlmWJH9RyYwzzmOI+RNdkhlT:7X9Fpb38+aOLf8VXJl8M0KpXzlmWJd4s

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.68 KB
MD5	42a5242306dfa010c322b38eb620c650
SHA1	3f015ba404fe483864a7c4b5c5c4b84ed62713cb
SHA256	476980e04faa65d6925c55b96c41ad3f0f7fbb849c466416b9e6010c1c83d122
SSDeep	192:HnEnwBqoXGaeM10mJGXnRMVySHx2JTfY1Yy13PPT78LbfZuPsNi7cBhp+Ew5e:HnEwDyM10zXkCfk5pP8HfZ+i+s

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.48 KB
MD5	2b47156c17773cc132d9b3bbbce0c4e1
SHA1	079fa051d90d53930fb3c7386b1f7b15774dcd4b
SHA256	f8efdd42666356deaab8d00d7fcf57b01a5efe1ee028f13f01cefec9b6204b2a
SSDeep	192:HOquE9PxA/YD43GYCoSTmBgSyapCY1l5kYzoCQ1JMhkptm56g/:HtnPxNzoSPVMCYRnzQPMuG56g/

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	17.88 KB
MD5	bca899532ce58632c12fc1d60f835395
SHA1	24b58e7b9f93443049069e8b7e4554446f2e735e
SHA256	b3fc4c6ab96f88f4216532e891c33f9140285e8d28a6903a26313031e0b7a32a
SSDeep	384:pdgr5nrHzn6Lhe9cr3OZqPVwfy3ErSHDsVunkrzVDM9x+iWXjP2v:pirTMzVqEE2A8nk3VI9x+vXjG

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	10.80 KB
MD5	0f72d5bfa65af6a93147ca8b9907f3c0
SHA1	ddab3d5edd0267c1691994b5c09c8fe52dcb5991
SHA256	49030d0018254293bac703c01ae2a67500b32aff521d9665e7545629f4264127
SSDeep	192:JeXwBfsnL4eKmltkinujbS0oQ33Oe/k5uWRB6GLpwA3uLsnMeHLDiZuRAFGBg:JIwKnL4evtuXOes8S4qUfUviURAFGe

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.59 KB
MD5	aeb0b32638239613dd1347d6bc9cf6a3
SHA1	1bb0773274a4ecfabcea1d164256ccb6c262b67f
SHA256	7f8144784b4466723357dfd7295acc5f27d1df59683939f04606d62467d95e38
SSDeep	192:/Q7fS2NZqFDqsV1gFkoa8miLtheZTJ9G15PP2AG5f:orSs+DXqmotwZTJK52xf

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	881 bytes
MD5	9365ec0d3462e2e46ae3fb414f904a50
SHA1	41b7947e80af0ffaafc6ae6b3e6064ddf21f689d
SHA256	21e262fc9dc46986ab07e80800a56cc2405b684e8158ea04c88fb272ed792b01
SSDeep	24:t/zjlcnrA3HiyAHhN/GAW6Q5250+Sp24f+v/8Aal:1zj20Z0N/GAhQ450+4f+vUAu

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	1.48 KB
MD5	c27fa18b7f7bc45a0790a7352a579d7a
SHA1	9b5c3f5645ca1f67597818d01d34c2900ec3bb28
SHA256	5c6c9aa794d7ad032fa81d0422654d9bacfd6b53dedb4ccdba095e6493b55ba0
SSDeep	24:t/BeTxVA3Hibjh/WPuTh/NY2OerMkxCslGlpXeLzGfViRBPfsmtYIhY55QCCMjQy:1BeTn0uJWPwJOq4kEslGCn88ndtYPICd

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	7.88 KB
MD5	a1e0da2296f63a64e33a63adeb27bbba
SHA1	b9eb1f026ea10a6b9bbbcdd10fcb727afa9e2a35
SHA256	dc5847e7a718c4156aa369e81e575f390ac83fee13c48ad20926eb0a71bbc04c
SSDeep	192:ds/dAUljFaAa41ikUeJwet5MQAkWwpAjw6W5sb21Vqwj:ds/OUyAaMHUcwRQA4p4/Wl1Q+

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	9.09 KB
MD5	01c54bad539bec7d5f5d7931a207fb2a
SHA1	fbbc6193bb4ef408203fbd5047d4f233d4dcef4a
SHA256	67dd91154defa536b8f9f911717f25659bd0f58d760c6604082e9b513e6e3627
SSDeep	192:b/5GtyQvXOQ8/YZkqAsYkENiiDknyXhtYB44wNZDlsK1VbsgGoALmNL1EPS1M42r:b/5Gt5vXOQ8/YZkJsY5Ni8knyXhtYB4o

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	2.50 KB
MD5	383ad56c8dbab5809905ad1720abeffa
SHA1	31cdbf690a8a1312aeaaa7b34a4e93d3a5a67d62
SHA256	980c108663f43af9f9ff63c40daf60712a48812c888b26d37b416403e116f579
SSDeep	48:ngK4/Ntzm/BKCuWQLpjLpSLpYbLpXLpVsLk6pml7LkDLkb3iO6ELkOLk+LkJLkga:ng1jm/BYJ6O1H6pmlskTOfvuVxUj3b2r

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	2.95 KB
MD5	a8c3362326c99319d9147397ec210489
SHA1	d63a9f5d933c5c9db290d6303fb15ce2863a7522
SHA256	afa4fb26f70b1cbf7ad5a659cca276665e7fa7d628786253427f326a6f8b71ab
SSDeep	48:dfsK4/ogM1KO6LkuD3Lkm4LkmHPJJLkms9RLp+LpFY/LpyLkXWGWFjLpzV7s83L1:dk1QZuD4mdmHPomo+FYtjVWjzts9HwKc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	3.69 KB
MD5	86f997e7ff367f058e20d748177a3821
SHA1	c85796977bc3fa9cb8ae4cc63f9678513e9dac95
SHA256	089590936f2c8831c3b28c0280214ce750923935e4b83af547a9f5786b1926cf
SSDeep	96:Mc1xisUkXwOI8hDu+CuajXdoT2r0BgmETmPYHJ+jiEjZSq6ztD7UuEPN:jxEkd5hy+Cuardq2AamECgp+j3ZSltPY

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	4.07 KB
MD5	9b1b681cbf2b6c8bfe843f9f9b669099
SHA1	b17286735defa58c1bc7afa5b89e1d9bc194fb29
SHA256	b00bae14a8ed17a27fc1d87b68f45cb66e82d8f5563da828ce7f9ee5172a0427
SSDeep	96:u1t652kUzVp/TRZY+snP4MyNUdaolq5EUIBMpzHl0YblAclJ+IUe/6qh:otYSn/bY+NMOUwolq5EUIBMpzFZbl5JR

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	813 bytes
MD5	ae091e489fcd97fffdc595ae3256b50a
SHA1	443889b1dd883c6586c6e349a39d5b0b7e440b89
SHA256	c4b5fede3af342f3c9c07859559cc5f890ab61f671518096a89bca7821917175
SSDeep	24:thxX+f4/+sI8u8N7LkwJWajLparTRLpGA4sPM/c:lK4/+sQ8hLkSHLpcdLpGA4sPGc

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	12.80 KB
MD5	db1d167213760e3ef884f81fe4c02a6f
SHA1	db998f5d43758ec1b6a33682f1bf363ccbf12d07
SHA256	52e338168126c6b99389055a5feab82f810aca49fc272ec60ca7113c8ed08d77
SSDeep	384:p46DNwCGydn1PxZ2XM4F7brmcR8EE8dQ2KxdliiCBUMrz9+0on+37ab:p46hWF7fDvzdQ2KTli1uMrz9+Bnyab

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	26.42 KB
MD5	dadbb12d0001b6b7169e82e300325878
SHA1	bf2d28f27efabce5ef312b7a32f4ddeb114506d4
SHA256	45dbb934f90dbd6ebf7d94d1678313fa9876c76c0191242dd27a5c8080c988cc
SSDeep	768:5AJOtPOUw9avIjUmbehqK5hS+D521KwxusNmj//:COtPOUqNUmZy/5+xuoU

C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.D22CCCF7-C851-E3F7-DC56-D1858DCCA46F (Dropped File)
Mime Type	application/octet-stream
File Size	6.83 KB
MD5	e36d66d14e52d6d687d77926ff743e3c
SHA1	583800e2e15996c7c2b214729294869d72fd56ad
SHA256	433cfae2f068a07a1b8cc6f4dd881fb303de2eb30a044fe2d640a3bb5434e737
SSDeep	192:RSzqPHG1mRudJjDMz8LUP/P3D0EAbjqgco+Zzr:RS+R6lS80/L02/zr

C:\Users\5P5NRG~1\AppData\Local\Temp\744DBD2B.ghost

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\5P5NRG~1\AppData\Local\Temp\5B51C018.ghost (Dropped File)
Mime Type	application/octet-stream
File Size	1 bytes
MD5	93b885adfe0da089cdf634904fd59f71
SHA1	5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256	6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SSDeep	3::

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\===HOW TO RECOVER ENCRYPTED FILES===.TXT

Dropped File

Text

Not Queried

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZOcU\===HOW TO RECOVER ENCRYPTED FILES===.TXT (Dropped File) C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\===HOW TO RECOVER ENCRYPTED FILES===.TXT (Dropped File) C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\===HOW TO RECOVER ENCRYPTED FILES===.TXT (Dropped File) C:\Program Files\Microsoft Office\CLIPART\PUB60COR\===HOW TO RECOVER ENCRYPTED FILES===.TXT (Dropped File)
Mime Type	text/plain
File Size	207 bytes
MD5	7eddb637e9dfabab095ae7fac56316c6
SHA1	5789acf63a0660ef2f34391213d548d654498e79
SHA256	9c13703714a839f86624abbca6596e015740127b957a43fa1d0ff6d2380c53d0
SSDeep	6:XIiisFX2mJT5sZA/oUSzMcf/kgkf3cR9t2FLy/v:hXhnJTCZA/2fkgxR9t2tCv

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After