f11cfc26...0cb3

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\R.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	406.00 KB
MD5	227c37f35c6419fa632805caa6095ed7
SHA1	ba739f5f63be5305c8b73ab7ec3e9fea58672e2c
SHA256	f11cfc26255e8302c6da12608e7a9bd95720910c2d4c43e57040e9a0df070cb3
SSDeep	12288:IaHefp9cKtE3TSqyiuW+iSGCuzJ5lNttRl9QosscUAIMMrPfzHtpqL3tp/kqbp8A:II/K4qLtp7YNGaf45xKy
ImpHash	a4438fefc21a12f08928cce274dd5a33

File Reputation Information

»

Severity	Blacklisted
First Seen	2019-08-12 16:39 (UTC+2)
Last Seen	2019-08-15 11:04 (UTC+2)
Names	Win32.Trojan.Chapak
Families	Chapak
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x412712
Size Of Code	0x30600
Size Of Initialized Data	0x35e00
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2019-08-08 07:26:22+00:00

Sections (5)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x305d4	0x30600	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.59
.rdata	0x432000	0x11e46	0x12000	0x30a00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.48
.data	0x444000	0x2071c	0x1f800	0x42a00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	7.79
.rsrc	0x465000	0x1e0	0x200	0x62200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	4.71
.reloc	0x466000	0x3268	0x3400	0x62400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	6.54

Imports (4)

»

KERNEL32.dll (81)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
Sleep	0x0	0x432018	0x435c0	0x41fc0	0x575
GetLogicalDriveStringsA	0x0	0x43201c	0x435c4	0x41fc4	0x262
FindClose	0x0	0x432020	0x435c8	0x41fc8	0x173
HeapSize	0x0	0x432024	0x435cc	0x41fcc	0x34a
ReadConsoleW	0x0	0x432028	0x435d0	0x41fd0	0x469
lstrlenA	0x0	0x43202c	0x435d4	0x41fd4	0x633
FindNextFileA	0x0	0x432030	0x435d8	0x41fd8	0x188
GetModuleFileNameW	0x0	0x432034	0x435dc	0x41fdc	0x270
GetDriveTypeA	0x0	0x432038	0x435e0	0x41fe0	0x22a
SetEndOfFile	0x0	0x43203c	0x435e4	0x41fe4	0x508
FindFirstFileA	0x0	0x432040	0x435e8	0x41fe8	0x177
CreateFileW	0x0	0x432044	0x435ec	0x41fec	0xca
SetStdHandle	0x0	0x432048	0x435f0	0x41ff0	0x542
GetProcessHeap	0x0	0x43204c	0x435f4	0x41ff4	0x2b0
SetEnvironmentVariableW	0x0	0x432050	0x435f8	0x41ff8	0x50c
FreeEnvironmentStringsW	0x0	0x432054	0x435fc	0x41ffc	0x1a8
GetEnvironmentStringsW	0x0	0x432058	0x43600	0x42000	0x233
GetCommandLineW	0x0	0x43205c	0x43604	0x42004	0x1d5
GetCommandLineA	0x0	0x432060	0x43608	0x42008	0x1d4
GetOEMCP	0x0	0x432064	0x4360c	0x4200c	0x293
IsValidCodePage	0x0	0x432068	0x43610	0x42010	0x386
FindFirstFileExA	0x0	0x43206c	0x43614	0x42014	0x178
HeapReAlloc	0x0	0x432070	0x43618	0x42018	0x348
GetLastError	0x0	0x432074	0x4361c	0x4201c	0x25d
WideCharToMultiByte	0x0	0x432078	0x43620	0x42020	0x5f6
EnterCriticalSection	0x0	0x43207c	0x43624	0x42024	0x12f
LeaveCriticalSection	0x0	0x432080	0x43628	0x42028	0x3b8
DeleteCriticalSection	0x0	0x432084	0x4362c	0x4202c	0x10e
SetLastError	0x0	0x432088	0x43630	0x42030	0x52a
InitializeCriticalSectionAndSpinCount	0x0	0x43208c	0x43634	0x42034	0x35a
SwitchToThread	0x0	0x432090	0x43638	0x42038	0x57f
TlsAlloc	0x0	0x432094	0x4363c	0x4203c	0x596
TlsGetValue	0x0	0x432098	0x43640	0x42040	0x598
TlsSetValue	0x0	0x43209c	0x43644	0x42044	0x599
TlsFree	0x0	0x4320a0	0x43648	0x42048	0x597
GetSystemTimeAsFileTime	0x0	0x4320a4	0x4364c	0x4204c	0x2e5
GetModuleHandleW	0x0	0x4320a8	0x43650	0x42050	0x274
GetProcAddress	0x0	0x4320ac	0x43654	0x42054	0x2aa
EncodePointer	0x0	0x4320b0	0x43658	0x42058	0x12b
DecodePointer	0x0	0x4320b4	0x4365c	0x4205c	0x107
MultiByteToWideChar	0x0	0x4320b8	0x43660	0x42060	0x3e8
CompareStringW	0x0	0x4320bc	0x43664	0x42064	0x9a
LCMapStringW	0x0	0x4320c0	0x43668	0x42068	0x3ac
GetLocaleInfoW	0x0	0x4320c4	0x4366c	0x4206c	0x261
GetStringTypeW	0x0	0x4320c8	0x43670	0x42070	0x2d3
GetCPInfo	0x0	0x4320cc	0x43674	0x42074	0x1bf
UnhandledExceptionFilter	0x0	0x4320d0	0x43678	0x42078	0x5a5
SetUnhandledExceptionFilter	0x0	0x4320d4	0x4367c	0x4207c	0x565
GetCurrentProcess	0x0	0x4320d8	0x43680	0x42080	0x215
TerminateProcess	0x0	0x4320dc	0x43684	0x42084	0x584
IsProcessorFeaturePresent	0x0	0x4320e0	0x43688	0x42088	0x381
IsDebuggerPresent	0x0	0x4320e4	0x4368c	0x4208c	0x37a
GetStartupInfoW	0x0	0x4320e8	0x43690	0x42090	0x2cc
QueryPerformanceCounter	0x0	0x4320ec	0x43694	0x42094	0x446
GetCurrentProcessId	0x0	0x4320f0	0x43698	0x42098	0x216
GetCurrentThreadId	0x0	0x4320f4	0x4369c	0x4209c	0x21a
InitializeSListHead	0x0	0x4320f8	0x436a0	0x420a0	0x35e
RtlUnwind	0x0	0x4320fc	0x436a4	0x420a4	0x4cb
RaiseException	0x0	0x432100	0x436a8	0x420a8	0x45b
FreeLibrary	0x0	0x432104	0x436ac	0x420ac	0x1a9
LoadLibraryExW	0x0	0x432108	0x436b0	0x420b0	0x3be
ExitProcess	0x0	0x43210c	0x436b4	0x420b4	0x15c
GetModuleHandleExW	0x0	0x432110	0x436b8	0x420b8	0x273
GetModuleFileNameA	0x0	0x432114	0x436bc	0x420bc	0x26f
GetStdHandle	0x0	0x432118	0x436c0	0x420c0	0x2ce
WriteFile	0x0	0x43211c	0x436c4	0x420c4	0x60a
GetACP	0x0	0x432120	0x436c8	0x420c8	0x1b0
HeapAlloc	0x0	0x432124	0x436cc	0x420cc	0x341
HeapFree	0x0	0x432128	0x436d0	0x420d0	0x345
IsValidLocale	0x0	0x43212c	0x436d4	0x420d4	0x388
GetUserDefaultLCID	0x0	0x432130	0x436d8	0x420d8	0x30e
EnumSystemLocalesW	0x0	0x432134	0x436dc	0x420dc	0x152
GetFileType	0x0	0x432138	0x436e0	0x420e0	0x24a
FlushFileBuffers	0x0	0x43213c	0x436e4	0x420e4	0x19d
GetConsoleCP	0x0	0x432140	0x436e8	0x420e8	0x1e8
GetConsoleMode	0x0	0x432144	0x436ec	0x420ec	0x1fa
CloseHandle	0x0	0x432148	0x436f0	0x420f0	0x86
MoveFileExW	0x0	0x43214c	0x436f4	0x420f4	0x3e1
ReadFile	0x0	0x432150	0x436f8	0x420f8	0x46c
SetFilePointerEx	0x0	0x432154	0x436fc	0x420fc	0x51b
WriteConsoleW	0x0	0x432158	0x43700	0x42100	0x609

USER32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SystemParametersInfoA	0x0	0x432160	0x43708	0x42108	0x386

ADVAPI32.dll (5)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
RegCreateKeyExW	0x0	0x432000	0x435a8	0x41fa8	0x264
RegSetValueExW	0x0	0x432004	0x435ac	0x41fac	0x2a9
RegOpenKeyExA	0x0	0x432008	0x435b0	0x41fb0	0x28b
RegDeleteValueA	0x0	0x43200c	0x435b4	0x41fb4	0x272
RegCloseKey	0x0	0x432010	0x435b8	0x41fb8	0x25b

WS2_32.dll (16)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WSACloseEvent	0x0	0x432168	0x43710	0x42110	0x1f
WSACreateEvent	0x0	0x43216c	0x43714	0x42114	0x24
WSASetEvent	0x0	0x432170	0x43718	0x42118	0x52
WSAStartup	0x73	0x432174	0x4371c	0x4211c	-
WSAResetEvent	0x0	0x432178	0x43720	0x42120	0x4c
send	0x13	0x43217c	0x43724	0x42124	-
gethostbyname	0x34	0x432180	0x43728	0x42128	-
WSAWaitForMultipleEvents	0x0	0x432184	0x4372c	0x4212c	0x5d
WSASocketA	0x0	0x432188	0x43730	0x42130	0x56
WSARecv	0x0	0x43218c	0x43734	0x42134	0x48
htons	0x9	0x432190	0x43738	0x42138	-
WSAGetOverlappedResult	0x0	0x432194	0x4373c	0x4213c	0x30
WSAGetLastError	0x6f	0x432198	0x43740	0x42140	-
WSACleanup	0x74	0x43219c	0x43744	0x42144	-
closesocket	0x3	0x4321a0	0x43748	0x42148	-
connect	0x4	0x4321a4	0x4374c	0x4214c	-

Memory Dumps (3)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuild	Bitness	Entry Points	Actions
r.exe	1	0x00160000	0x001C9FFF	Relevant Image	-	32-bit	-	... Memory Dump Actions Download Dump Go to process
r.exe	1	0x00160000	0x001C9FFF	Final Dump	-	32-bit	-	... Memory Dump Actions Download Dump Go to process
r.exe	1	0x00160000	0x001C9FFF	Process Termination	-	32-bit	-	... Memory Dump Actions Download Dump Go to process

Local AV Matches (1)

»

Threat Name	Severity
Trojan.GenericKD.32247822	Malicious

C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.53 KB
MD5	e06da218fa1f348adf405807a01a4675
SHA1	bf19e17b077342a6548d70e59f88d8d524c8e904
SHA256	8687c2366d94f3a8b77fb1dd9bdea1b34ba858a0a85422689365366fb320d126
SSDeep	48:tRwZw4KNfK8N22N8UUNWPHoHqD2/IoPTorRRuxDeCG:p4WfKc2qxUnBjUzH

C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.11 KB
MD5	f6e36d67113e7a34b9661f91b8d9a827
SHA1	f568f9cc15cdd29c0771d134529c215d588c2207
SHA256	4136103c34a8c1f2b66ed72330163837043a29ed051ffb1227b6f10692fb5f99
SSDeep	96:2JJESoanbpE9ywP0JREI6EA7673DduESPHPA0SERcQCrgAGS:mESXndE9yrEI6EPLYESgpEPCrOS

C:\\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	6b0d10cea26dfd25ed3c337c29b520ad
SHA1	8d3a387046ac8b30e0427d55ae7b132bccfad76c
SHA256	d80e2c055e5beb07dfad58b96f1494550c7bc287bb5cde510171a39378abf06b
SSDeep	48:tTOkpCZ+8K1iouHJkiNaC3qzDcNENDozSN4NaCQFiPkQdmRuegVpMm50BXZ:lOe1ifWubqUkMzOAkFGhUJglKZ

C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.32 KB
MD5	b9c0a6a94f8e87ebb910593ba65b6d06
SHA1	9cbae99a70259a61e24729e4e7abf2803b94f787
SHA256	5eee3b5abcdac6973d9becc5accc1d6d71e9bafb1f763a7703b6fd8f1fba246c
SSDeep	24:tE522ePzOvC5eVGv+Up+sFvK8NqW5NQZwor9Un+7F62dhRuOxGgkaDf+wN/M8uMC:tE5vePzODUzvK8Nz5NQZvu+5PdhRuOgJ

C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	61066b2c92dace5bee09809f163447fb
SHA1	5b5da8ffcaae180f26112814b0989aa8b01fb040
SHA256	eaddb81584c61ef2098b4f1b7d7b10258073edd673a6f54318ec8f0272e9b3bb
SSDeep	24:tdftdreIrsn8eVWRFukDi1Nbtuxbis7sziNOfNXzAj9Z8BN/8aN8Uym/28z6Up:tBtd6IQnQukDwOos7Ci0NXzAj90ND7yO

C:\\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.31 KB
MD5	359c3426bd6d800385efd9b4b836abf3
SHA1	9621d111f4c84b48e615e53c1559bf1697830ef3
SHA256	cfda9685c28c261de492b124bcfa318b8c21e8fc851e45787c4d373f4f2d4bba
SSDeep	48:t61IVbYx7mbrBKym1/waimCM98VvlD7GxhMlpvZ+0h33ItKlf1q:01IV07mbrctimCMuPqxOpvZhJ3ItKnq

C:\\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.09 KB
MD5	95e9c1aefefba5d8b69153ae4e0a4758
SHA1	bc8c0c082c35d9bda3a927c5ac5fd93fb54eff41
SHA256	bf4c59c1b1ad2b9dd14c9132ee1eb2ab8eb3a743554d3d768b439489dfa0ed67
SSDeep	192:BEEe8XH9mRaskDF30MYE7aVacbIp7Z7IrzpH7l0ZSSOchVKO:BEEe8XH9mRaskDJ0MHeVacs7Z7Irp7K1

C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.43 KB
MD5	0fe046651aa3921bd2838d8513e782d8
SHA1	56c6842e54d10083db0f5bdeea09d2925fc3498b
SHA256	a59c0a4618101722636ec6d8832f4aef7d20ce7f0b68f1937711b421b92f6ec8
SSDeep	96:378TfxueChfHiwRys6SWxLpB7j3XEbCCabBq/x2kWZ1juFUEtVXra3zUDB:3i+hPiwRn2pB7Ybio214tV7E6

C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.56 KB
MD5	866c30fb0d9e17f44ac8aed150bc97d8
SHA1	d5b6162085768f0020405335f2ddd663958a791a
SHA256	3a4f731391fae679d1d81533017cf4d479187b1e7b9348ae010473cf0eb52a7c
SSDeep	48:tQATLhbnVtRxobaD1P6bAY7K5wEMzUROB5oxtYQ3FrXMDeA/rIu10EkeqSloeP:mATLhbnVtYbaMbAYu5wvzUa5oxtYcFTS

C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.locked (Dropped File) C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.locked (Dropped File)
Mime Type	application/octet-stream
File Size	4.17 KB
MD5	adc25018d1c7cd1b238630e909566353
SHA1	e59f95f6a5177afc0ce1d29ad7bd5fa00e92352a
SHA256	cb9bf09149fd67156981d634d350ad28f1c5a33dba03be305f9a5f5a38c294f4
SSDeep	96:wrzmCiKcpmify7txWKl0KAkBm0SnIewAvYZWKcmQgQOqKcfKcvMQ+MQH:wrKYcHfy7txWHkBmXnNvYzcvhO5cCcvy

C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.46 KB
MD5	c7a1db2ef20895d67b819b50b7c3beb1
SHA1	6426543652f4c758c521868bcb9b172163e55aa0
SHA256	3ea3b98586fc82bf562c1874779db74f7cdd30925a33af49aafe47f31c3d0b4e
SSDeep	384:qI2a4Cz1DlXSeHUy2CQLESQ0K55sPm7cZnNxNRXNqmM62HmJw:92pMpSdbC7uI5seoZnzDsmMz

C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.52 KB
MD5	b8a143baf84f4022f5798120d971b24f
SHA1	695095886366dfad6a62336a4ca3f1346ed74c4d
SHA256	968abecb1c0c841d10b498828107bff836bd2945164d38d01452e4b3ef8755f9
SSDeep	192:DRdFwXbG4KQ6uSVM2eNhG5QgBn6XL7qYBXJvDF2UpmZtBMQ5qRk8l8CZkw1:DRPwbG4AuLcnILmgB1p+MHRyY

C:\\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	716 bytes
MD5	e1a5583ef9746953818c80bdbf58b075
SHA1	0104d2c889e5e107f6eae24ea7a6cf32184c3fed
SHA256	b562cbc05b2a0c6049e872b1b176e1f1137d21cf33d544bed244c1f95f9b9eca
SSDeep	12:Q1mn3al9VviuUBl1r3icXefqGaQVwdmVNTlOVUhSBR5PT+xvqgljwxyApX9Ja:tql9VLUBnicXHGaQVwcNs6652iPPJa

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apex.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	959 bytes
MD5	a8a08a2cf1cb7bf8695e09149e1d00a9
SHA1	1e3b917f8e535fa934bd3fb652908606362b96e0
SHA256	97a782d00421a6d3f81654c1758c51cc3db8c70f5d5c7b14815ba1827ff24561
SSDeep	24:tr5j5Duf6Tjx8cTvLtpQhguULyWgBYir8GOyH5HGDwEEYPPcCTuEaFGi8RNUi:tr5j5Duf6h3Th4VULIBV8GOW5KPEs0CL

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	9124a69396e88071adf59c1d5fd0fbb0
SHA1	d09c82bc8c37a0a4dd22a8cd0b2d0a918a36d8f8
SHA256	450685583885057df70635249f8ff72087044aef3399017eb736a0f9b940e465
SSDeep	24:tr5jJPc33jNRMyn2lHeNPuO38fTgjiuKO5fvV9IfG11GxHTuTJtOQdWOffPc9:tr5jJkDNRMyn2lHcuOEXuKOBd9IJduFI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Civic.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	b0d9ea5c570a03c3fb9f5ada5b3f2764
SHA1	7c421cecebf1bcdfde8040fadcf5acf2a9bb6fb5
SHA256	013e0f9685159bf78bf9ac72552aaa7c0506d7c2e45fb75b03f6c02d5647f320
SSDeep	24:tr5jXGVLSuZt/XNUELUV7WJ/NUTS5YZ91xESrNUJ2eNUjwKO5ceI:tr5jXW/XN3UVCNiZXVrNM2eN3KOxI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	fa89d9dea083cc897ff16c705205f87e
SHA1	d8e90ea219b5a41fc9410e720a0e5288b7076e1b
SHA256	f1fccb1b44b46f1f1faf637d83c8df8d0f961cbcbbb06f04aa9633d53f4e080e
SSDeep	24:tr5jX9+qD/BwWefJKLb7R/ZNUi4daX3f1bb6FR3azQLdn:tr5jXjD5ZeYPNqaX3fdbog4dn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Couture.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	962 bytes
MD5	47fbfa08431d9928389d98b090921e3a
SHA1	813405182a5dac45b047fc143927c451b7cb004d
SHA256	0317856b760dcd02ccf12004f5f010e090d1981762a81f303d721f471581b60d
SSDeep	24:tr5jdZY4wbLkZNUsbtnlnE9NUm2dAl/XTNUP6wRV16ZWJwb7:tr5jdx1NnnlnKNb2dCXTNrwRV1O

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	6cf6f25220ecae4aeb18072f9fbe69f5
SHA1	08157b0f84ef07d6e4d257298aa9917b2ae630e6
SHA256	39362891f20adc40d35551a83e2eab154356e9e16e21a4e8289e6d976bf3750f
SSDeep	24:tr5jZay9+qD/BwWeqvKJv75IZNU337aXhMtsX6FR3a6n:tr5jZayjD5ZeZJQNc7aX2sXog6n

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	928 bytes
MD5	d9569c1bafc82ec4738012218fa536be
SHA1	ce4e56fac637114f76137c6f01077ccaa19cafa4
SHA256	220db7f87e56929faf3297cdc044f1735de4d39c4eb8f92e91235bb9e4d828b0
SSDeep	24:tr5je9+qDRfISUr5/7IMNU8V7GGJ/NU/5YuJrNUReNU4pwKOVI:tr5jejDRQ5/7FNFVSWNjSrNgeNf2KOVI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	928 bytes
MD5	d458c1926ad2f800407fcfcad0d6493a
SHA1	4ea71becd7917406887418f8f57982c674bb0dce
SHA256	8496df98e4e8a3258f73ecd052632d8ce87c9c7bad32f45cd728fb051f9cbe34
SSDeep	24:Ek1pNR5kZNUZoz9NULiA6dASyXTNUQU6pV1KZWJb:Ek1pNRsN8oZNPA6d0XTNLjpV1F

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Median.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	4bcae5ceeb9e2eb790e25c449d36359b
SHA1	af6db91bb90a17c3210b0a209fea4efe96af5e6a
SHA256	454eea70da7cad7786459550996952d0bedda586c0fc7cd933905041dfdfa352
SSDeep	24:tr5jhDyPc33jNRMyn2lHAPuOas5fujiuKOwV9SuEGgOiTuTJtOjedWOlfOc9:tr5j5ykDNRMyn2lH4uOasVFuKO69jgzA

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	d1e21e1f226715e60c00f37905d93629
SHA1	0d298f834fad6f4be8b77da4ccbd56c7c3570ccb
SHA256	28865c2d67e4e5a2638540a522cfc5f760e854c538ec80548c1ef883805faee7
SSDeep	24:tr5jmJ9+qD/BwWeuzFK+w7+xJZNUMzHY7aXJi+CT6FR3aun:tr5jujD5ZeuAuTNPHY7aXJi+qogun

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	962 bytes
MD5	e68ff9a20574ce70c157e79178ab4341
SHA1	df18f793a7ce04b65308406bf13fbd5ad70c2499
SHA256	edfdab6a8aa4c55a45a82163172cb281df48e79d7a272ce3760a43b61203941e
SSDeep	24:tr5jMY4wbLkZNU4Kos9NUSitEmdAyhXTNUF6gV1jZWJ3w:tr5j61NHKoSNsymd7hXTNdgV1B

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	9ca79f0fcce87319b66db0d761048d83
SHA1	8fd4467133d1438e0dba3d1cdae6c8702387467e
SHA256	144e817cd733eec6fca38f49173bb148eff18b0948837e736f133cd1dd62ce62
SSDeep	24:tr5j5hGGVLSuZt/z3NUVvdV78J/NU15Y7zv8MrNUDeNUQGwKOTjI:tr5j5hGW/z3NEvdV4NZPLrNaeNZlKOPI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	965 bytes
MD5	c2db8d93926ddd3dabd4b69de7f070b4
SHA1	5c897c60c589ca89bdb3ff7247f4172cd20ee110
SHA256	ac63b17dd181544146739035708b49c953d21c3b6e3e0aadcc9808fc07e82eb3
SSDeep	24:tr5jbdO234QqBZuWb2zYs8hANIdUxpKmGsfbtbOVxOwtDthFpRuB:tr5jfcey2TvSm1btbOHxthlk

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	4817becea0aeca634e0a5c897989f351
SHA1	fa5979228b7e85aef8d58c19f57e2dabd605284d
SHA256	60b42d4e832b201b7dab25a0dd19c191c7a41db5530c732a19e5d7301cee7312
SSDeep	24:tr5jMc33jNRMyn2lH+O+PuOffsjiuKOHV90UDwDvGMlTuTJtOFedWOkuf1c9:tr5jnDNRMyn2lH+OeuOX3uKO190wzyu6

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	8fe7b75ad0b2b706d4b2f6b597722f39
SHA1	9f93c2185272fd17dd1165f7ec8c7c5533538346
SHA256	1cb2452c2941381d044fc1b05ee1ec732ac85ce9d7fe9b79fa4e34c9d4b05572
SSDeep	24:tr5jhGVLSuZt/yNUAexV7zCJ/NUd5YbaZvcrNUXeNUvGwKO/I:tr5jhW/yN8xVyNZKErNqeNuKO/I

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	963 bytes
MD5	f5ff43204cbea7e13c2948d10cf09d9d
SHA1	9d8c32ee7d5e8aa526c681b60a4e26620c79e1be
SHA256	0e236e0b58826bdc4fd6db7bfcaf5b0b600c5e839fe1bc686682dfa6df64095c
SSDeep	24:tr5jXNTFNRb7AGOXylquxCOgcqCYoFnPRmOBGrT246V+STrUqi:tr5jBFNRPAGOXWxCOlZFnJmOcrT24+JM

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.73 KB
MD5	07afe35da5dc6a153c57d9533886ffb5
SHA1	47797d24a0651fd59792eafc59b0d76787b3539c
SHA256	4a022109df8f379d436ff4926bec4242a6a020dcf289c680fa39b5dd31e0bbc8
SSDeep	96:l5jAKPZ13kk12KBgRsg+bOy2jKq426Vhixe2KBgRsg+bOyX4ci:HhU1hbMq6y1hbyBi

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	9e5dc90d02564e8bfed632451dbfe8a4
SHA1	2c81d428816c4ec7af53d15c7d0d7f34e47fcfa9
SHA256	e0af341f025a3477a5bcd3d25d9e4a083182d20228b2593cda010b22ddf240ed
SSDeep	96:l5jZQhieu/CCA7rFJ89K8nDWhsJ2MItMippASJTJgI3NKGGa:BC0ZnNmMippfh93NF

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.74 KB
MD5	86519665ae7a74a172b812518155bd2e
SHA1	d4d636c5b5b14ed2a014b29cc78a2ddf6ac55d6c
SHA256	bdf99b11c01e6868d791f098c40194b50597702a6b2fd893f4cb01039fc35889
SSDeep	96:l5jckOkTaPe7rFJ89K8nVNZ4BPs9EVU/KkIKq:c20ZnVnttq

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.59 KB
MD5	7a73c9304c28a8cfd373486c0f337ea1
SHA1	0eddd7ee5c367d188a5f82a1efe12a5991c60b97
SHA256	8d8448d19f1680c730b8d8014bbf4e98a351a211917d4e241a08dc56f170882a
SSDeep	96:l5jbEVU/KkyWFOKOXI12KBgRsg+bOyWN7:yH91hbvZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	7d890cc73aee1657e9180190efd18f14
SHA1	da7ef94edf22aee348a9dea6480da6a8835aa1ee
SHA256	8b844a16a1c85a648bc44ef2d80814d6ef1accffdf69a05ab8bc51b8697269ce
SSDeep	96:l5jAzP6dTMippASJTJgI3NKsjdQ5bJ3sLn0KWvR2ugKdYDrj2:bMippfh93NpZQ5bdLRwC

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.50 KB
MD5	47d00fbafab4a46d1bd7309d4b1a6eb2
SHA1	d928ac38222625224653aa1e12dc4ce06e103a40
SHA256	985f9b51d0cecfd344fb178133052901fc53d6bcadd1d3c4b78e143a6a746812
SSDeep	96:l5jPah1FoQjxmibuIOq74+Yvbg4JrJZP1P6dTMippASJTJgI3NKAKq:P8TCqJQt2Mippfh93Ncq

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Newsprint.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.56 KB
MD5	d26d1af213bdb10c09ef43d624cdd7c6
SHA1	4bc82c002968353f03d8ab6cc064f2bf20cde44d
SHA256	9522b7a8afa4daa09d160a77e876d6bed24f81de4ee91fe22c058f434923d690
SSDeep	96:l5j9D/FJTdsHh4UbZvPhuIu/ehZk5KtSzIOq74+Yvbg4SUN7:PkvpI/2kqJSZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.50 KB
MD5	26ee27df45c9678fcbfc9bdabd1ff211
SHA1	40327d7c12dbf9bf69dec54387303e25477c2c18
SHA256	34f2ee9772ba4c2ce0b7313a90739e827823ddc7085cd8fa058ae13b25de0de8
SSDeep	48:tr5jPjDggDBBzT283uyHEVER/KauML7BauiDBBzT283uyHEVER/KauML7Bauj:l5jBLnZEVU/KkFj4LnZEVU/KkFjj

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.73 KB
MD5	2331e214a9af5a5a54e8c197fc9baff9
SHA1	6e8e988f2485ce73097a1fd8aec88622043816ab
SHA256	22aa5c41fab287e9b6bb720768fbb4f2f8fb4d4be319853642bbe63af253d43c
SSDeep	96:l5jBuZhJ8ZdsHh4UbZvPhuIu/Co5Y/wS4qs5kLdTMippASJTJgI3NKAKq:0RvpI/t5Lp0Mippfh93Ncq

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.73 KB
MD5	33565938546be085290860fe9091cda6
SHA1	4d8d90800bcd63079fde3337089813332d57254f
SHA256	3f38fe3485d0e31d83815e74da3de6c05ba93df4332264223f2c3ee3dae172ee
SSDeep	96:l5jffNT/FJTXiOXI12KBgRsg+bOy2jKFsDz/CCA7rFJ89K8nVN7:nXxt91hbMFQC0ZnVZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	a064ee3827a4108230237892bfad922a
SHA1	110d89cbd8e6da2b4b9fbb2bc59df415552115f7
SHA256	d59cca779be93887f7178b4166de1332b84de3e9d531fbc3730ede5d72ae9085
SSDeep	96:l5jg3uX3l7LmibuIOq74+Yvbg4JrX5+4XEVU/KkFj2:8sl7FCqJQz5xC

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.75 KB
MD5	8ca9f7d4b3ebd4f8b210d4249d66fb6e
SHA1	b0173128b60cbc2510d2954465fb1a928bb86d79
SHA256	1bd22515b41ef42bf357a945f3fcc4c7ec554fdf29d6e5a42762038e9f5c9806
SSDeep	96:l5j5FnwY3L6EVU/KkLFu8YkOFnHKtSKHh4UbZvPhuIu/XGa:j7XfOzvpI/P

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	792d495fea59adde05181d925ec6013b
SHA1	d3e209d26c6e7f4e2c10b7b4c9b6b6d2c2e12bf0
SHA256	239bb7a4d08875c4ca59cb854bbf7ab4ab9ba08c7f8973f03fa7915798256f92
SSDeep	96:l5jJ3RKtSKHh4UbZvPhuIu/5jdSt/FJfTmibuIOq74+Yvbg438:FgzvpI/5ZsvCqJ/

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Casual.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Casual.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	5.53 KB
MD5	8354577645b0921c5c16b8dd44ccbb04
SHA1	05dd2df7b11d3e5f7833347dbe434738aa148059
SHA256	56c488feb429cca6b50caaed3ea3d524169f7c1446c6b26c2a69cb6a96ab7cad
SSDeep	96:JtVzsE21xLutqOquFlFylCYT79LTfiYvbh2H67euT43AGM9tbOrBa8TkTG:Jtdx2LLutqOtAv9LTzh667eK4yhia8Th

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Earthy.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	4.79 KB
MD5	cf04120c7c6260f0461bd8fc760d516f
SHA1	5bc46e8aae55c6b754a6bf52ffe7ee487fd84fda
SHA256	e5e006a3afa551b8042e36f65f9eb2c3d58356e39e9df91486e8b1913ebb497b
SSDeep	96:HUE/ZlOLfdUlvWCjk0IXi7Cvslm+M13aUzM8GxbswiVWJBPjs7w8RFm5C/:fKf8pjvI4Cvqm5QU9GasJtsXm52

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Groove.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	106 bytes
MD5	ef274763ebbbf1ea5968cfd01c10cc1d
SHA1	1a7570de3363e432353baabc7d168fd59a94e6a6
SHA256	17a1e7b61456d51f75aed14d9e3fa80b5140d6e571737eea5d42f36f28742263
SSDeep	3:C0XgRjNwsm2+FsH9E49NJ44I+dVzlpLU89T9Z:C0mn+FsdE2NC4IgzlVT9Z

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_LightSpirit.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	8.41 KB
MD5	4ad9cabe46e5c48405d76bec96459947
SHA1	14f93818e151ac8c9039257e98d183150082b539
SHA256	a61df718290338409849d16c627f39ef01bdd5116aeb8b7f1b19bf6d1058e7eb
SSDeep	192:xCWTZtfVpbVdze3GX6crktwzanlgv5J2jxR+k+v+GXAADMn:xHfVpbr7fiwzulgBJaROQAY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	6.07 KB
MD5	e3cf1424111d9a05d73ed7ec5ba1fb7e
SHA1	84804eae2124f93c2e6be4bb396cb8e85c4671a5
SHA256	8effda37bf98d67265ffcf7b74ab41f236db2042b54b47202e2dc8da75119a10
SSDeep	192:Jijnw0BpTuhPzVjXzj2FRAZRlq9z3S3QWoSQicMs:Mjw0yhLFX2FRAZRquoSjcMs

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	15.10 KB
MD5	ce8e6726b39ceb661fad04f6dedeb65a
SHA1	0a9f2a0fd5311ed457e996adcf9d56453a70d4d6
SHA256	dc01f7e13e22df3c0f5e376dd59d2ff60daa18e195f702b90e54457bbcdc3580
SSDeep	384:xwdPI9hbbdOiBe+eNMOIqbbe+M3uWhrpMYQAuWxE+2NPBDvMo:OdPwhbbneNMk3MearpM+RG+2NPSo

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	8aa39121da9ff7e7dff6b1258cce80c2
SHA1	cdce8e980294836c0f5ff860711e477c350f9a86
SHA256	9edb6631925e7b3f1a7e963821987110536e544c33068ed82eb228d06130f70e
SSDeep	48:GbtSoUx7Yfpdr3IY4MsM9NvDl7Dl1lxro0klIUaV:MtSX7gpdcRMswNvlDeDk

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\background.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	323 bytes
MD5	ad159346b0897f209dfd3541dee85d55
SHA1	4f9816e5b04f462e0a95ad9ee27675ee86d19821
SHA256	570695425e7e57e3798402db805e6e3650002c00f074a49fb2af0faf57a53dd1
SSDeep	6:hs0AWqZ23TfPMySw3UgyCU8hDkwoIalpOGrzDCNW:6B23T8ybU3Cn9kVVlDrzDaW

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.78 KB
MD5	420a1426e480bedb750f52b63216179d
SHA1	98c28ad01e02cab84b788e3111a82677f7a9cd22
SHA256	90b68244700b0d1769ca0d3c900a455d2ebe5e57239254be1b1648640c5c7ad7
SSDeep	48:GbtQuYgY2kigMWEdr45+ftK8kgcQtryW3ddsCubY6:MtQMg5f57GlhCK6

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	3c3c37a04ff63f510e15e250f82d5f69
SHA1	db6c03a59fcdac29ad040b4ee00a020285628d23
SHA256	9bf9467117d7502b878b37560c06e2a497c77bc0fbea6427745834823fbf4e02
SSDeep	48:Gbt1zDkZgA1VF18kt8uq9QAnycOL6npFukE:MtKF1+uAyj2XXE

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.75 KB
MD5	f0d58840dffcb81b68152c108a19290b
SHA1	13cfa3a146e1266e4d7124b3bb510a2381f6042d
SHA256	5f42429a7f33f420b5ff1afc4df5e87e789be1557290057b262b793be11dfc32
SSDeep	48:GbtBleDrLjn0j6LCDl1lxro0klIUapbtp:MtBgHLjn36DeDwf

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.44 KB
MD5	c3df86876c3fb5ecde8fef56d07cdf75
SHA1	45ead11f2bb232e378243ddaedf9356084f48d3f
SHA256	28db3558f1d53aeafd81c0327f5c9c5b19f8550fd421ce97639fb9d7f0e92fa7
SSDeep	96:Mtjow5ZR86NknD0B4moDRH0tjMCzEIchBPrqz6mE:Mtjb5ZCwSDp0tjFwIA5

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	226 bytes
MD5	3fcd13274539ecbd6f9e4768dab42a39
SHA1	431ec0a016d5492272af091073892e5441e45f91
SHA256	0007fe67b06768504923945bffa97793f20ff5b4779efcd40f92876c6373ff34
SSDeep	6:UAw2bspqTTGjOoL5OzgeYCjFX+sR2vqFzS702PqDUBZvPn:UAZcqfGjOoLFevjqqFzT2PSYln

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.35 KB
MD5	9df2786b878d6901d1ba8ed58598d596
SHA1	eeb42d07c0aca3042bd85fb122fd9b535d32b77a
SHA256	354415681e3dcc05f029b3ec7317737c2aba44ce2e5db30e834309c8392d9f7a
SSDeep	48:6RJpE9u0LDWBDIYNl1n9TLF22aNX4MXYcCqWMhAL2JEwl/5I3Up9:fvF6RLUyhSL9uS5gUp9

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Response.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.64 KB
MD5	73e5577c6a4900f91cc51751c34e8ace
SHA1	9b81c26b1d6cf5b3e15befbe5e19538b3722641f
SHA256	a4b62ba874c71069e8efc6363b35f0d8f580d057bf37fbeab7ae3133b3172a8d
SSDeep	48:6RJpE9u0LDWBDIYNl1Ti5UNputoGeHm3eH:fvFnMpOp3O

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	d37c64e67792a68f6b6c6203b4d33719
SHA1	06522997c7d95dc025619243476bce56cf449894
SHA256	b1118087118cc1dc9fbd5557ac4999c3ded0ac6bec1d4448206b9126c78bb54d
SSDeep	48:GbtDZJ6cNYIQpaW5gS/uNEw7YUDfHSSctwL3wykjSr45+ftK8kgcQtryW3ddsCup:Mt1LNLEw7rwy3Vw57GlhCK6

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.81 KB
MD5	5a785a7ae4194be7aabf857bdbd5d144
SHA1	d06247f666ad7fbd443198fca113b4b5c7c1ec03
SHA256	29ead489ae5ca9ef78ad0007e68e5a9e6230f30f720f1224d016f0da81a4ef4c
SSDeep	48:Gbt1i5SW86sTMD5L6SNNZt0D8R1pi62D6b:MtU8vMoxa2D6b

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.80 KB
MD5	4fdf97f750aec1772c87d0054d602c1b
SHA1	c56072102fa2cd6ac7a55a3fde352b6d6d8c162d
SHA256	f74dc18f8f41d29736d2dd1dd04487de6b09ef10588d29347bc8ba733e1f4019
SSDeep	48:GbtBlFAOKy+68QPEFJe3sQCE4o5MIQ4IaGONj:MtB0I+6lMFXoSYIaGO1

C:\\Program Files\Microsoft Office\Office14\1033\Invite or Link.one.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.95 KB
MD5	0a5d2443c71c693807b5d9c431efaa3d
SHA1	43db127f2b930dbd8fd6e9c5201f988b06f411ac
SHA256	712803cede324d349a074ac37a65016b7ca61120a2c034c048d055333c855dbe
SSDeep	192:VIz9zjdJOJMYMqUzxZZftKffR72cgJMY7p/n6lTz:VIVjQ1Mx7ZFKnR7Du17p/6lTz

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.53 KB
MD5	6917d0734d8591e6c41d03e6937d6a2e
SHA1	28aaf6d1db2fd26ed354e8ad1bc3632a352432f0
SHA256	31827e4e7ef1c90965074e6826113ec596286cb6a1f338ae655415d128aec24b
SSDeep	192:NxXeqrKNy1Qc2HFmaJQ9VKULMS+EyBR1Dj6JzokKp4K2A4QY:/uyr2c2mKULMbDeJzokKp4y4v

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Manuscript.dotx.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.26 KB
MD5	de544c0b2fc349aa2d0f44cc8186732e
SHA1	07b384169745fae6530f8b024ba3a76f816d8034
SHA256	e6de2af1cc77f7ab6f76aa86764051bd403571ffcb803e8147d95a929fe09fe3
SSDeep	192:ddBPG8xlurqgGkpzwgDQwtfFVKULMo+EyYR1DjYJzZyR08jE:dPGcllkpzpQAPKULMoDcJzqjE

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Modern.dotx.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.42 KB
MD5	5f4878b4b6a3adac589148b7693a7b12
SHA1	14be13a9a7fb8104fe99ef6382a838c5e56aabe7
SHA256	0df1b42bbc7ce68c9205efae3351ec36dd0825e8d2d3645ec5beb34c28a95578
SSDeep	192:m1d0ZCu3Xv/dmS0JZMIn4VKULMXuEyCR1Dj1JzIoX4x:mAou3X0SSOKULMHDBJzIRx

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx.locked

Dropped File

Word Document

Unknown

»

Mime Type	application/vnd.openxmlformats-officedocument.wordprocessingml.document
File Size	563.60 KB
MD5	52f95a74ff27aa3168d06cd1513c414c
SHA1	8a5394edda5ab5c2796ccf1042aa0beeee8589eb
SHA256	ed43db5a939da8a726a3ceaba474b480324a4658ba9ea5151dc023e16e051382
SSDeep	12288:TIAGUMbLxOjfX3ZKa/TVH9pW1fECD4CPX+qQRWV14vqpjqtWKd:TIA0HxObr/JH9XCDbQRyq7d
Error Remark	Internal error (check log files for further details)

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Simple.dotx.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.24 KB
MD5	6321b50683a29228a5f6817e57530922
SHA1	25157e2d929a44dc6ab98cb80434803621bfe426
SHA256	aaa65b51bf4a3a2ad4e64070c1d61a8d06c789c161cf66b07157ad3c28cd45f4
SSDeep	192:f8MhdUMEL2065AIByy/DVrH2KbD7Qdc++87I0yD5YEXROq2uHpG8zHtFC:ybL204bxHb7nd0yFXjLHpGyNU

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Thatch.dotx.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	23.31 KB
MD5	c3de5158e40a273ed8348090d8570b63
SHA1	0c88b6ed941e26ea79d7503d943ae2bbaf729ae1
SHA256	5b861d9e18f0527f128bddf95683fb5dd522ea3c3ef3190df9161bd5b4f6855f
SSDeep	384:xflz6z44Izy8XRkfaGqK531JevhdWEhA0hAIQK646fi6aDw5Z5FCBeZ08DBt4s6c:xtGz44YyURkyzK/JebKqqi6tXwu08Dvr

C:\\Program Files\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx.locked

Dropped File

Word Document

Unknown

»

Mime Type	application/vnd.openxmlformats-officedocument.wordprocessingml.document
File Size	3.99 MB
MD5	c17208290cc6321492742a7cc804f5d5
SHA1	1a79b54054ac428d9197227be8c5012255db31a4
SHA256	e6089c2f55802e4c9f37087fbe5890fa29b6c96a838cd2e76478e9b1e8ee8772
SSDeep	98304:QEJ/XNwFP2Yg2W9ik1xKNG4RLNmVRb7Z49PUwAN+gXl2bo7h+QpRoQm8wFP2YmVs:FJ/d0P2YNW9ik1SG4VN2bCUwC+g1j7h6
Error Remark	Internal error (check log files for further details)

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	734 bytes
MD5	ccd60799f0de2a0a2dc46daee71284b2
SHA1	6a8b826828c2c398db1605a0a96e0b61a05aae9f
SHA256	5973466f393dfbbd24dfe1a2dddd8df5f0a905d3f2c8a7e661aceb7f95e85e33
SSDeep	12:0EiWmRltYhP0Krh8kmv/J3Zt5hZlMcMw3pHiwYiIp/1o3jNGCEfb9uJDO:L1mDtYtTh8koxJtrIcMw3pHiHrpeVKEq

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.87 KB
MD5	bf7fb4e2a6520ae3c5be9cfaa3a3adee
SHA1	b537eec27a5b2a98ca7d36820d6fe02f110d17db
SHA256	099a7e9398b735d3008012224004bb9029e9ee10a8118675ff16cd9b8ad08e64
SSDeep	96:CmaGLHKGdwg0SNgnTEPfKigFyaiLjtFa3Tb:CtGXKgNKYwiS3X

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.67 KB
MD5	bfe903563bd3ac67273b9aab8a23ac63
SHA1	01ab6da207195f31d19d954d3b6e811b855a09cc
SHA256	cf7eba4b3cb40d556b295640c8a4432ba3df04e480109a6ce478f703da7e2dc3
SSDeep	192:fraOpmYiYJMzyrI6DPCL8OUTr2r2r2r2rNvzVeffcYEKGYJcHOqBq:DtpyYWzuI38++++NvzVo0YEMTqY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	6d098118a72b17d069bc05cc3b90cb12
SHA1	585c6d8f954dd33bc602a790c9d5808f1b3e3c30
SHA256	60e78a133622ee505910ffc0c1594c837011f97f0c5cc05a0c3078ff2383997f
SSDeep	24:xT4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7T0OTETwwTOTvr:xya0YLaGugHvCGdwdJsmS6kpGinW

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.64 KB
MD5	890f3e9e16e732db5c65fe1653d08916
SHA1	f86aa6a38447524d1ecb7d789353ca560e3e103f
SHA256	c5eaa1c731b6883020150182f08a96f5c2d25529b2845563df497f45b979699a
SSDeep	192:uzDUGS8ScVvF8uivzVeffcYEKGYJcuL2drPqtvBB:uzDUGFnvFkvzVo0YEMv2hPSJB

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.74 KB
MD5	274abc62921f4f1812b8f430046f6991
SHA1	f18f099c2884aa620ccf24218b6535cb23acd6d3
SHA256	152756f81c0aa576ab3675534f731490f4504ecef02d5c55c2ca5740e16b06c3
SSDeep	192:yr6tp/zDU5UCq7IbNCL8Oq6r2r2r2r2r9NMJEnXqXO6:W6/zDUbqFL++++niO6

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.75 KB
MD5	879b3dc6b1f33ca9668d18b04c19b61a
SHA1	565ee2dc18e7603da3fbefcb8475b24d77e79983
SHA256	638bcc94fd30dfb5b29721bae0d49560feaa85fc1268dd4a4b67acae5e6e868c
SSDeep	192:lGIKH/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rhCGylYz+u4jgRRRRRRR02:AIKj++++++++++++++5yl8Ijr2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableUpArrow.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	775 bytes
MD5	8221529c20d699b1ca4df68fd37ae71b
SHA1	5561b445bdaf76d786b360855b84c6c03decaa84
SHA256	f47963a4a6dce1d0015a31f1ae6a667b44d8e778dea702ef24aa756654a0e2d0
SSDeep	24:wuGtR8EyphdFaUmdmWcEKvWaet3V1G+gNYn/k+:nXhYUmUWrvGr0b

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.81 KB
MD5	4270e7fd98dd0d8d6d1d6fe499a4ef59
SHA1	992703850eece4ed3f295efe9f97073ab0d1da6b
SHA256	4d8a1d22fab1300a4fdbece2c9f57f401754db191c47dd4819e22b3d258af909
SSDeep	12:f77Lv4086qDqDqDxqDqDld6qDqDqDxqDqDld6qDqDqDxqDqDld6qDqDqDxqDqDle:f5P

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.81 KB
MD5	03c7aa41e2bdcd076fa4e3dc0f828e95
SHA1	7c3394adfa1ea8066a4b880beb9d59729628142d
SHA256	9425f6978cd1ad39c092958e75870cec4b03e1e67d6765679efce9513b5a22ab
SSDeep	24:fe4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4Z4u:a

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.55 KB
MD5	d523b722155b888ed41bf8d5433734e8
SHA1	baf7d59e1d28c3f5b6c6a5df7201a9074a126292
SHA256	91b4cee509e7a876732f482c99cca8bc79764d402b0d89b7410841768f209693
SSDeep	192:S4Zo1SXkZo/x3KQQ8aem2/GlqaSAev3tKUK6u+dNoyJ+gGqV8S9:DomJ/x5m2/GRotKUKENoyJ34S9

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.30 KB
MD5	48761218031a3868cdcdaa629aba959a
SHA1	b29b57cf4fc9d8eb721ee8d717f030d053deb323
SHA256	856885301876966992c000dff98242b082d831899ac4898bca05e4762c4b1a65
SSDeep	192:YtGXKgW4F/25a9vWqTix2P8LDpDQUVqrHGqhoeJMcjmieF5:YtGq4Q88cBe9VsRhoGMcCieF5

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.89 KB
MD5	dee475a029265fac8babc4f42378d795
SHA1	a1b5b38237ecc170b0ba93bb1b21995525a08257
SHA256	53e1bc71248298ff5e159832bab8e3f4c7b804ec5b7e62e8af8a1a037ee02c08
SSDeep	96:DxZCYjQxWy58xReAVJ+Va64pOzwCeGGb7wB4Myae:DxZQt8SagVPQCyb7M4MyZ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	192 bytes
MD5	2ad139078ea16d0eec51df334835f6f4
SHA1	f1547459c49cf41fc3779a75d16478202c085f37
SHA256	aa005c73b699545266efe045b11cb82124e1140b44ae69817894e03e212f5f07
SSDeep	3:V83HOhdzwhpA079n+kVcsTk2wmd8rZARSX1Ww1RCnTYL7N7VVsnF/19hx3YgIPbA:V83u2405+GcsT/wq8r9XwyROuN7nsnPb

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.55 KB
MD5	a1e99fc1f74e1e7106d718768c1c2f46
SHA1	3e87bbdd84ed28fa8e0cb73db88f51c7333ae268
SHA256	0538f0437c8b8b98964f27ba49e90cb2718796311eb440941c2e6289234ba594
SSDeep	96:97maGLHKGdwg0oEFWYCQHVbyMHjpSjPhzCPoe4mOMLM6HT7xux9QP4:97tGXKgBEFWhQHVbfHNSjhzCPonmkq7S

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIconMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	1f365bcbb7ff2e0a91eeeda4765b1d7a
SHA1	fef807194fe133727dfb3881f061c3ca267cf317
SHA256	5bfa915283db3d233f91213f24f3caebac9216c1580192788441fbf818c55c07
SSDeep	24:x4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kFz3O3ZUFQQnYkBrR:Qa0YLaGugHvCGdwdJsmS6kFbOpUFki

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	25.24 KB
MD5	7f7d434c97b535265a40749aa9dff0ad
SHA1	25495cfd458a23b9c27a614e65e932c765ccb5d4
SHA256	601beba8b82e5d9df48743414890e185aa0b8498a783c1fa2467a87f281436e3
SSDeep	768:4yrNVLB1XjEuxddCPcs++++++++++++++ZwU6hTz:h58uxaPkU6Nz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.55 KB
MD5	90b528cbfd0d967cc2a360179052a429
SHA1	431439b322529be3b1e173f277f25550ffd2dc22
SHA256	7ec481891541a20b5ecc7086602ae2ff9e18e156237fb382896a398252dc73b3
SSDeep	96:G26maGLHKGdwg0UxYhr4tJWaTtUde3bJVd8vXKQBrzcBVi59ETMz/T8PxXTLqL:otGXKgJYh4tt2Erzd8vzBrzcBV6yG/Ei

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	42015cc8b1e833e8cae71b90748bd7cf
SHA1	6a311660ed8f44f1eacc7082971155afbcca955d
SHA256	3f002593e838082684d19664d363ee96b8aec64668ef695e3d73819e0b9da6ac
SSDeep	96:ExZCYjkh0Q08xReA9nwoezsz+onPrITLzX62P:ExZa+8SOczyLrIXzXBP

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupiconsmask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	b518c8ae1313ee1e5d059bc4dcf8d80e
SHA1	51aaa083e8c1b09e6213a198d1e132e200b4a7d5
SHA256	575be76618fa15f2d5f88a2e0bcd11d96eb36275eb7c3fcc3299cbb0b749ff35
SSDeep	24:/O4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7TT/QL5HVR+uQL:/Ba0YLaGugHvCGdwdJsmS6kRsff

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.31 KB
MD5	e9838b814ec82dd0f387d3eeda73169c
SHA1	2464edb02a3726d7617e664b0fcdb03f80ab4440
SHA256	2c09067c0619f18f46aa5cdec95c27a1cb2a41cca41a44c9dfa3f4d06598774d
SSDeep	12:PsWqi6M1Hi6M1H1E71E71Euj71Euj71Euj71EuQg1lgiqD2QZZZiqD0qD+:PsW4snsVEhEhEchEchEchEqPd

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.08 KB
MD5	ee898a8597e35d9ecd8079fcda63e3a3
SHA1	9a7665bc7b95d967c9fe58349943da0655f3809b
SHA256	9ea85f4c610c925e939874d6754aab235a8b4ec0163186d4248543602568ecaa
SSDeep	24:wu9kUQOOOOtpHYAOWy6Mb0di1ruQrMF0rH5gZk8VdG6gu933VAA:n0OOOOcAXy6Vdi1f4FkHSZk8zN33VR

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.76 KB
MD5	93852435738d80f39ea24033d0d1173d
SHA1	6f0a2a9e30a2789959c35d99f79cb1be6e90523a
SHA256	0f7b489a47653967af0332fad44c0bec926b01a0bf786749a90b39e2b100d962
SSDeep	192:KrL7uQ/B3Qufc6nt7+szm2kjmr2r2r2r2rP3RK5Y:u2Q5gufcqJzmm++++PRwY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.05 KB
MD5	51d9df0d03e713aea43b15f8be3f9f88
SHA1	28ee813b8529cefc4fc47c656b424b881f2f562e
SHA256	8fe4cf10d9fe40d5bb3e397e24b4ad9e4e6650f641818a9401c99479924c27e4
SSDeep	48:HFa0YLaGugHvCGdwdJsmS6kIxOK68BuNB4Ohew05yx9LktoxC4:HTmaGLHKGdwg03xOK68BEBX5xPxC4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.87 KB
MD5	e0c2ebcaf59b504fd50e5df32b8c8f7b
SHA1	2840afc238bfdb1e6514a91a0db86069e47e518d
SHA256	e0fa635389191e1517066f5c49b85d9a212f328016cee8793901aed72a75c47f
SSDeep	48:2a0YLaGugHvCGdwdJsmS6kgRVYpjfRVYpjfRVYpjfRVYpjbv:MmaGLHKGdwg05

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.20 KB
MD5	ed465bddf7feb9058d8097b79791ea74
SHA1	540224989095c9a6fb1a287c22505ababb0934f0
SHA256	94dd7b23ba66a7e8136c5d3329e609bbc17652630649928cd338a5d28cc1c017
SSDeep	192:9GI0/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rDm5TFqA93EXPd67khDrHwRToz:IIu++++++++++++++KZqM0fd+kJvz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	bdfcd04b4b4ca30b64b683fba6c2a35c
SHA1	c26589a11ffd91e4c44f8d160a862131a8430e7c
SHA256	387a69fbdb27cde3c0d1848e696f1a857cc6e482bf832cb7f85180b4c2b17d97
SSDeep	12:FkT9ueqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqT:2T9OvavnaaaaaaaaaaaaLoooooooo+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.72 KB
MD5	31cb5a424d4b71d619b3145134c72606
SHA1	b66a89b857c3f886820b618435108ba824664335
SHA256	2a2544ab5665745af1e10e709409a45b05e234260182c4722a69ca4b1ad3b209
SSDeep	192:9GI8/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rIg/R2RDMXxum4eh58tSmjeN3:IIW++++++++++++++H52xMXxu3eQ06i3

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.47 KB
MD5	efc16125e25478a0ad7beb1ee0e2085e
SHA1	f5bdaf6062d81e67cd29e2d27ebda9d3abc0c9d6
SHA256	53092e315473d552ebe1fc7cdd65a9b652be10d28d9513ac0da0e25d5f97f5e2
SSDeep	192:crJ/bTzDUTUCI7IePCL8OFr2r2r2r2roOiZ:wBzDUtI49++++oOiZ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	2b7c79c0cd8fef86434049bf103bab7b
SHA1	484ba430ca4ed350581f43682a12f45e6dfc2c71
SHA256	d40271c35f6e35765d2fc87973ca7056a24fdbc8c2c8bb89ddc54875b5db2308
SSDeep	24:e64qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7TiBQehcvWhJgW:ca0YLaGugHvCGdwdJsmS6kJQehmUBF

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.90 KB
MD5	e5be1924d94363a771bcd2c4c29637f6
SHA1	529f3763a6d16ce85dd31aef2c47474125045567
SHA256	6af31fc98bab241a8e8f692ac4372d57508ef311687a94d2c12c6365ab68755b
SSDeep	192:7r6aueGrfs8czDtcQ2Lh+mwYr2r2r2r2rCaR8qB:HM79czDtcpLhzwo++++X8qB

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	192 bytes
MD5	24dd07b09b3ee8124b9c339229a84fcc
SHA1	939ac7f442809f0e44597cf2a0a36b8791cce68f
SHA256	f98b0c8124c60e2a4ef52cd1c7ebb134e80fcdc884f45697190e626f62411baa
SSDeep	3:V83HOhdzwhpA079n+kVcsTxm2kyTTOZyxnP4EwW9NpucDTs1cVwg9AL9tcKBcTYn:V83u2405+GcsTg2vfOZyxPJw0NNDTrvS

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.00 KB
MD5	1f716d7daf0fe4845329514dbe4f5bc9
SHA1	386166e8a5665d854a7a5c2377352023324e0d0c
SHA256	70baa25ce4de77578e7364dec51de728902a56bfe322d29fdbe29087b5893567
SSDeep	96:rYk7QtetcX8bRTF4G6eVhvzTysJxgiDsz89Vngx5VyvZ2lQTsOM5NLkjP0cZOK:rYWQto68bH4Vyn++sz8roC2A3CK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.31 KB
MD5	33b4a12c7266934f49c5bb183fff84af
SHA1	ecba6acf640e21bb2aa29ac7b7b10060833dfa64
SHA256	d190d02c708deb3ea8edb6a9e04eab246bcc241b28022484f9d99e6a19d87518
SSDeep	384:bpt/zDUKLjBLBVuUKAq8LdSq92vV5OAo1z:bXzDljBLB0FAFLdS1PY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.77 KB
MD5	a27690f1c246779f455713ddf6701223
SHA1	31e8585937ae1c654c189e756860255efbbf7e33
SHA256	562c6ebb909ec7bf8a337eef39214d03a52095a5cf7c3c7424876c9ca06fb20e
SSDeep	768:eRzD2IL64++++HqUs4Uc/6Uc/gDhbtSuDC2KfKNm4hkyUMOw2tPNYdmnIvf2b3Mo:ezD2Q6iqUs4qMttyKNmm19stPNYdmImr

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.27 KB
MD5	0401140668f557cde1d4049538f14322
SHA1	c70d575e33109cdb5b5577cf4136ace30d842cfb
SHA256	4fc3c1062444673015a92ce94aee8c4cc4212cf944b59e979c61c3e05e81f323
SSDeep	192:FrG5eKWiNTaiyA+szMbE5tCr2r2r2r2rdNUFW:JGYiVDxzMik++++dNUI

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.16 KB
MD5	336fc56945ef67206572b8c53c503a80
SHA1	d0422139ab7dd3cc5a7914a44c65ba070c5b3b5e
SHA256	fc30f9a7d66a279209bffaec8067b3fed896c05c403f7106fae6068b5b3dc354
SSDeep	24:p6Cs4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077ksycRhvD:0ya0YLaGugHvCGdwdJsmS6k4nvD

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\BodyPaneBackground.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.43 KB
MD5	6c86e1327869ae979036bda02e970d94
SHA1	4b7980d46afaa5ade374a03c2fb2c8e0be1638cd
SHA256	c1cb54522e6bd7a65fd00f09e150d1c24c8dc84ce3ad14ca65784078e7ac007f
SSDeep	48:BaAA/aUYZLyl91lG3R7cogLPG2VX8ge5YEHgCy8vTilw04IQYQncz+:jAtYYotcnFSY/8bOnz+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	116 bytes
MD5	3566f3a0d01ee6fc34717c45eb9a3254
SHA1	c0567c431bd5041023ac1a09f7f18f7004a780b5
SHA256	9b56d1ba08c623fb25ba0d63089c39354a089bcd4fd65678a51163bcb6cd7d7b
SSDeep	3:nKotp7gHur079n+kVcsTqnBcPsQkQLAQLAQLvJs4ln:Ko7gOr05+GcsTiUL1L1Lvi4ln

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_disable.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	230 bytes
MD5	5a0b127e80007e3796c79f6491f3874a
SHA1	39fcd082e9e62dd1fa93507eb38800adee23b707
SHA256	1473e05fe101fe73a0534af1882c7003655d83514a19eaa207d26c673534f6cd
SSDeep	6:ET6GjDGg687NUygDHPjHqqDqDdiFAFAjvGdvskGATFfEn:460VOygvqqDqDdiWFYoT1E

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_over.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.03 KB
MD5	9f53c0d10c9dbd7e447a29d4b3880f7d
SHA1	c9faa5b5e9f611817cae96895639beefa32a4b00
SHA256	8696f06a8e974b047b3b961d989192201534712120fe84cb9842eb7d16ba40d4
SSDeep	24:8Zy9UMISKk6tlAKBvm1rliwXi4hZfWB4isoIpZ:8ZydILk6tlAalwXj3KQ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	53 bytes
MD5	7311568e474229e3da78054ec191105e
SHA1	a2c6e87b08a890e95f3087a62cf6863b4c442940
SHA256	cb3bf1cdfff91e6d71a992185eed4e22b15f19e2a32f0def1e9e5ba12ecc00b7
SSDeep	3:/8MtEHkz773VyZRCi8n:/dtwaYZRCX

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	187 bytes
MD5	5e016fd0d4b5ede2b3a748006266df5b
SHA1	948c99b4add2c1e4f5519a743b35bcdaa8dacece
SHA256	41a36e14de2a8b16079dcd2a3b99f4a4a10cda1a89018d688d68b880ca0f2d1b
SSDeep	3:/8Mtf+BuoGACnz1XacFna+pgZqDqDrFDiFc0tcg2FruQP77rFIcek52B/E:/dt0uoGpnZRa2iqDqDdiFBtcJuAavk5T

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.50 KB
MD5	61947d670f0c27084108ed01a1f49c5a
SHA1	e78ee26bc69ad182a666f25512901bfd460ea6bb
SHA256	bc4c66b0a95ba825ce3ee8a72405ba2c7070120b7673c09e8970718f9ad0fe59
SSDeep	192:krVZNYs3zXIbbGqg9WrzyrSwR8Sccylfcc6Icrr2r2r2r2rCa/qV4Jy3RhnkZjMR:49Ys3QhTzuShiy1Cl++++dReRhkZV+P

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.23 KB
MD5	03b68b83d9ba06cfd08f0ec46f0bff92
SHA1	6853b830a8dfe11d1b4bfead6b31c96501c8e3f5
SHA256	0ee6b99564c296ecfd47bc7ca79eb70278c605b37450a2b15965cb827872171a
SSDeep	192:8xZ51GhqBYIh+ef3n4aE/TpndXuidjbi19XSta:G5whqzHfnoFdeMW9XSta

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.91 KB
MD5	870319e5d78666bd366d56a11a63a7d2
SHA1	83f800aa06bab38abf78552ec2df0e12a63d65f0
SHA256	7cde2279ea94270b0daa36abf411ff6eb19535c8a59154413548b0c7f196e3ce
SSDeep	192:1rTZStI9hMfaFuqaKJ5oWHzW7Mnl2RQiFmLnr2r2r2r2rs+o2lo1nosJIHVzy/Ir:509PKcWySly/mX++++upJtIACrz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	930 bytes
MD5	2640cb2c5640b177f29a06e2dbc8dc8c
SHA1	17a11ceb954acdbdfa423b210d1a3276a480e28f
SHA256	086411c2ce383274c8bf304ac606d470d2155063ba0e96e8a8ecd03dac2fdb23
SSDeep	24:PKtoO+vF2nIZbsZqQY4nYVEmnpyHwIHnUwwhoBQBQg:PKtQvQnvqQY4YWApyzHEh6Qp

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	a118f472198ab04076c5d72d038ee6cb
SHA1	cdf85f4293045b1168b1bf1efe339c94ba8b3a1b
SHA256	309074c39ce8afd7941948e4e99a5efb389d102d9f2226020249e62c2142dcc7
SSDeep	48:xya0YLaGugHvCGdwdJsmS6kRppppppp00M4:SmaGLHKGdwg0T4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewFrame.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.91 KB
MD5	7fee0d36b4b659a84e9f4f3444e55fef
SHA1	d29fcf923888f9bff914dbad14a19ed95d53da52
SHA256	86fd03044fd7e268514ac1aad0f3da5686ae8b70c47dd1794934fe44ae5d5b99
SSDeep	96:OsSaTp6YU4w9BpoZPj/4MiTWOf83OOOtcw0MnOOOa:jUPl9BpoVyHU3OOOywbnOOOa

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg.locked

Dropped File

Stream

Unknown

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg.locked (Dropped File)
Mime Type	application/octet-stream
File Size	7.00 KB
MD5	5e1a9736f96b1f8016a627550904a9eb
SHA1	e1f89ebcb68743f542734c6bbd2883c58d4457b4
SHA256	16445d30e18ce9584914d6a0a000d54ace974326b824d88e31e46819fcdf29be
SSDeep	192:9zDwrViBOGCsjm73Mk/GPc28wRX6msBi9:9zDTBBCCm73MXU2Vh99

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	89.95 KB
MD5	948673431ddfb154ba2952c9ff3faa45
SHA1	b9745d731547c9494d86ef48f3a8c76a7f7a1635
SHA256	4ebcc88da65b9ce7466535e99a57c51a5c4a9eea00cd4c57655f198820ae4af3
SSDeep	1536:b5iQytx81E5Md0kfRFbL7sRIl9amgtkdmXxk3ATa:bcw1EYfRFX7s6l9amgmdmXxk3A2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.06 KB
MD5	7c4359b7c943a598114d45ee7f6f50db
SHA1	0c1d40d0019fedfd6ec8ee4668346a471a0d02e0
SHA256	b0ad24f4d08b0c0e522246fbe6dd99c5ccf244c6c7145e6e4f2dfd6a3d20d3cb
SSDeep	96:UQOOOOOOxtOOOOOOewrOOC9O2luJ3sxy2Pf9IN572HkPxOsNC+M5OEfs4vaO/JpG:UQOOOOOOrOOOOOOewrOOC9OP3Ef4Oh+H

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.46 KB
MD5	8ff4eec8ca770e65c4de860e26b19dbd
SHA1	4a7fc3bdab3adb95829e404ea1e92cb2fce35b77
SHA256	6f3c60600ae8191924712737cfa530543adf24a0c441e93b3bb06fa8cc32ed56
SSDeep	384:UQOOOOOO/OOOOOOef8OZQOOOOOOrQjdOLYHaOOlrppT4Z8zOOOOOO5OOOqxOOOby:3YwTQ+mNJxTeq5cF0mJOjnE

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	369 bytes
MD5	33c8a340d2e833c38e77be753c8da983
SHA1	6357bdc341fae308873c5c7e7b5bf0278bcc843d
SHA256	09b58af9982d2a04d0e842e657063e9e27244c4e10ab92054fca0f58e68175f3
SSDeep	6:ET6Gjickg/T+fIEn83Y3lpbDcIeHAW6qDqDqDdiFmJyy2Cq1tuxAL6Rg0aiXVfnD:460iVUT+fDn836TcjgW6qDqDqDdiwJyK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	374 bytes
MD5	ca05d3d95ab74c1bfadabda6bf9e4c16
SHA1	aa043e74dda56aabbecc60cf746b3f4f7aa7616b
SHA256	419e7317cda057db3819e0c06ee2578ef38e755c6f3bb6fe89ccd40c3423a335
SSDeep	6:ET6Gjickj/MzksXX2P6LXkcPhMmwdiHoFPXf4Xw8qSd93Fbuzu8llkP8MEG4KS7t:460iVj/5sXmiLUcp/+DpXAXw8qktlEuy

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	181 bytes
MD5	54e3bc47793c9cb77f757bfdd111ec79
SHA1	f91103dfc8fb29319a1c1a0f07f73815cdc7b54a
SHA256	826bd796a657f29593aab399b2693933ab00e456501474ecf63bee8f9845125a
SSDeep	3:xQH4pdgWrIsdGY3tEmSlhlEeqDqDrFDiFlJMlIjPjPYlddyXkas0nE:xQMt73tGlhWeqDqDdiFYlIzDYzdyXkX1

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	183 bytes
MD5	b972403a1ca3f7802881f5b0de607250
SHA1	e864b9255842b7ccb0769cc389083eeba0f1de47
SHA256	4c06bbdf3774f9bcbbe91c383d4a26f55c420b8ce0556a2368ec6cf8498f8b98
SSDeep	3:xpETAUlXUo+LlgB4PPSSgio8Yc1PqDqDrFDiFZ0dN0o4W5KQLNdvXHTnAYT/UMrB:xdoXB4H1bPqDqDdiFAxSI7XHTn9T/91

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	369 bytes
MD5	44052d2e40e42fb4d0fbe57485f464a4
SHA1	e9861f85070b3f30f0ff33ed075379257a3cd109
SHA256	b216eedbfc61f32917e57baa13b3b6a045f8666c2fd10f13ffc1a17d03f4aab8
SSDeep	6:ET6GjickutBWV+ofJalihVB4oMD+sOb6qDqDqDqDdiFopw1IS9ioG58TnLWH8Z9p:460iVutoV+ofBDB4oMDZOeqDqDqDqDd2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.09 KB
MD5	906b066ff1aa12c3143c313b538b48b7
SHA1	db29d5a9929c21a87ed9b27c180517120cc337fd
SHA256	f1936c16c2318a629ca0963e0a10dab59502c039680289261c7ddf2359e91374
SSDeep	24:f1uDN54dEeYrlFDXcDlWptK454545454jpe454545454mUkelCDm6D8:csqTrnDMWpk454545454jpe45454545o

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.12 KB
MD5	62d8d585abe394bb04da283fc4f159db
SHA1	537be8c25231f66620ea98fcc9587aceedb2c726
SHA256	174d0be0ace909aafb932408b5da9477d10aa182475d8851a68e3ee7c7fb1f6a
SSDeep	48:csqTrnDPMr42XiYNB3GOS5ft5SgrJcwCh9ennnsANUkyLJ9kfwG7LfBWKPfdE/es:lyDUniuB3G9LSgqwChoszJ9UJoK6XKS

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageScript.js.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.46 KB
MD5	6cea387b41531845a7e6396ce050a259
SHA1	e88c5b1dea13d167fd49c680f245ff5730c44bf0
SHA256	064f222e320a457ea6af3e4a2223a224e80c9ac773e37013f2fec7c58a8bdc2e
SSDeep	192:HoF67YOfTDqGvhTIcj8+QwjQ2CkS2lN2w:q67ZJIcwZwk2CknH2w

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageStyle.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	748 bytes
MD5	6a0742caa23f9d14ece9717fccfbb0e6
SHA1	f2e8a2ed58c203ab263f4ac70c4df629695fd876
SHA256	bd6704546eb28d9269830e631e530c36e91edcd6a9f7813529b4b611ad4a9a6b
SSDeep	12:WHLdherBsWoBCKfGPwpaovbNbLgq7QS0KFi/qDSHyVGk0iM7uKZ104bBUtIVHsrD:WHLdherBsWorfGWaoGaHHDweo6KZ1v9e

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsImageTemplate.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.98 KB
MD5	b0e01150b522d8e8c6100e8e3e7668a4
SHA1	f642d6f651c10ccaa550c79eb3b8e63b3f5e3d04
SHA256	5774bb9cea3c6496eca71ec4e2369d549e54cb8c1f437427ef173507c8102ae2
SSDeep	48:csqTrnDWTerooQ3QjWul/YnDjLfV0g8wDGurWZUSKtnIfO1V:lyDCevSLuanX5XaSWCSQiO1V

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.52 KB
MD5	b9eb5fa96b53b56f4d3edcba83fde9eb
SHA1	8a857e6f679a8d43d65ad880f517eabe4ea5fbb5
SHA256	2d220bc6608679849728e22913537dd5a868ffe84969532094e48bffbdf9e727
SSDeep	24:SiLA3G0DkjhjOQAwsXRZiGKPgW0D/rirYDqwswMTGbjXOK5/SIe6:rk3HPRZiGnWqri0eYMKvXOK5aIr

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	929 bytes
MD5	0d37ab2b0323015be9594304189c3071
SHA1	fb031863e59e6e63c932eb7842e24199ba98e56d
SHA256	2581c1de80548e7baa0af2d0c04af82e0deb6494af5d4c82e0fa46282cc3ff25
SSDeep	24:m5ODqrDRYEenIKaUtnKkwydB2roJQ7kR18k56BKLE72u5Kyz:gOGv6Ec/nKkdR18kevqu5K2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.08 KB
MD5	25a26f635fb3bb8940c813c19b5163dd
SHA1	630f2df91013e48695e0539635280de3771d0150
SHA256	900d4eb84af0f4b0902d691dd23445caea5fcf5454bdcf725f1fcacd56dfcaf5
SSDeep	96:DNUXUQapaLNidTl1zHP8SmWGX4iaregrDJrR:JUEM4jHESmWGT+egtrR

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.32 KB
MD5	f04a462a987c6a23cbdf4aa461d055a1
SHA1	89dee89cd47f5493c02ba5d756d5fd7e3f451b19
SHA256	c6d78afe16b686bd59544d97b0f6a86f488b9991a728753a09154ed4f904d8ff
SSDeep	48:y3NUX/RTlBp11vNpWnYND5QFotApX9i/NhY5YW3kT0SAAl3jE8E2eAjuC:CNUX5TlpVNd5+FoCpIcV3+AEzEtLWuC

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	5222483d41843111812f51b04bd7f87e
SHA1	123172bda865d347902380ac7433b702f89f72d0
SHA256	1deba2097a8c268ab203dcd3f7c31786c60be4f320a3ac6353ac088ab14f9d18
SSDeep	48:jLiLFdjK63absWlUKB91UKFkcBVaDXIyHRp9rVqnK:jLiLFdjKQabsa/xUfDXqnK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.02 KB
MD5	b78abafd0273fc29ff962913cfe0dfe5
SHA1	6afd2b17dc8a74d17867fcbb786acd5076014e50
SHA256	1ee51ebfdf03118c0441957aa4af0b0edb8b529175575aac1016210d96bb0ca7
SSDeep	24:/KbepG0952dC0j15fnKkKy+YjuboJLBkR18kdqTKL/uz53E9q:geo0rejPnKkbW18kk8u9sq

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.25 KB
MD5	a94d72875d1c6a58f0aaa4812fd35836
SHA1	c42a6c78753f131285b8f9f38117c716d397c940
SHA256	9919f3756fdb2ef82c29a3feb121ba6002cc36635d9c184e86faa93d9ab4b831
SSDeep	48:1iS1Uwf5pcaT12/Jj0V1MKwHBvkDQQ+3/VwuiibI6qtWD5fQdSUx0kjd92rqAjuq:11WuPck1250bhwHBD/+WySg57Wuq

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.31 KB
MD5	7b81bde1236ac839606d6de8548ddc04
SHA1	d39a9f33f48023b9b651d91661d22a677532233c
SHA256	9bbc01d1622c865172c0eb168d559f01f2e01df0d4b992b42a962b5c9c9686e3
SSDeep	96:yhC49YRxGfEhSfmVS3yTTlGXdr4Tle1zR/q1bg6DnZs:yhRZfUSE64ARWbtnZs

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.06 KB
MD5	bbd31db2c85e11824c621d8e4ee6fb43
SHA1	285174c79cad22575c1d35c35bdabe1b5bf4698d
SHA256	d0e1ba0d6f70d8381860e0daa2948c69d99f50afcb09bceb27f88942f6548443
SSDeep	48:n73NUQ4Ptl63aiKgS5DRZSD6sBgC1lcUEdw64m8P2fqE/zjUP2P4GBeHvuW:nrNUJPtlQaCUDg6sjcUOwTm8i4P2BwuW

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	891 bytes
MD5	38ba8d0353b829aa696feb267ea7794d
SHA1	f2f0139f2af4933412281f659338e51f55fca3fe
SHA256	4e55670835a132a1d4800e08568385c5f055cb2053c8aff689c5b804f46fac2a
SSDeep	24:mPfYvC8IJ5haq0nztagacvJ6X06U1EjK12:YYD3nzWCEKA

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	885 bytes
MD5	86ff4c4193b2924476a850f4b9087033
SHA1	d224b214791a6b7e78dae3922457424a80f8bda4
SHA256	2698bb7d6c0acdc309e9906399848318f0a556fea32a70a219fd0ded77ac6f34
SSDeep	24:muWzx8fLeSNCzScqOhQgz79Dy0ETVNwuSwCLaaLq2:wzx8DXshQgv8auSwcRq2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIconsMask.bmp.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	b4080f88937d3ab49c1b2ff3a9d39532
SHA1	8e979561ecd20110d1781823798dd1b67f48b1e1
SHA256	91058068e9dc9c4b7009c1fb84a9398c47f0fe867abba33b1235e9de8d8d0ebb
SSDeep	24:xT4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7TTTTTTTTTTTTd:xya0YLaGugHvCGdwdJsmS6k8qnEG4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.77 KB
MD5	439de5f303febca112239a9fe9784e43
SHA1	b3993a8104909f3586f57fc8aab2ed678defce5d
SHA256	1d43b5a30546dc863645067d35dddfd6cc4fba51edf324a216cd60ebb4faad56
SSDeep	96:lyD7tD15vQOOOO9OOOOyTtOOOOCOOOaK4f7lOLYX+LeyhqTEgd+wvJdIvsSImOOc:W7lbQOOOO9OOOO8tOOOOCOOOanf7lOZa

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.63 KB
MD5	61c716c4605ab2625fc52f2ab97ad2a8
SHA1	c73e86eecdbe49d26530d85c1bb8d9d4a942aacd
SHA256	34e4f6d1906328aad835a56abd4aea61cd24e7e91d2bfe82f9c0ab3109c83a7f
SSDeep	48:csqTrnDWBChXCk74I6ITPaMo6oRiYc17PaKUTYLuz7y569EkfGldY2:lyDDhy0h6IOM52UGKU8a26ykezY2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\form_edit.js.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.98 KB
MD5	b642e32abd127b850cecf1aba18212c1
SHA1	c853b748dbba74c2f8f84c07ee6d13d6f4d3ba38
SHA256	d378ae3dac2773f32d2e6b81e1733960c838b05723b1f0c098b259af1e35d0e9
SSDeep	192:rQOOOOROOOOOC/mJdobpej6l7xVQFBhAR8WitOZSzna9pGv94L856+jYTSqIFgvj:rQOOOOROOOOOC/adobpLl7xO2iWrZSzI

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignleft.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	848 bytes
MD5	9a8f26a5fbb52f061e855740132ee28e
SHA1	cdcb40145a0c398e70b82ec7059d5034de937c8d
SHA256	2ee8aac47c3429e3ad212916b2f7ffd0f712248be114844f9c7828671905e36e
SSDeep	12:50mWaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d62M3G:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8a2

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	869 bytes
MD5	5a33b3e8de51b6be008d95b2f4b99b3a
SHA1	c8d8555f6eba89db9ac7003382eda99e01169a9a
SHA256	b75b2a10503446df276a6bfa976f27dafb4bdb270c62e56c986765719c961e3f
SSDeep	12:50mWaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d62CnG:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8wG

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_center.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	847 bytes
MD5	c4b5d90dd51e44d8c7c57e4cd29ccf23
SHA1	5fcc887d5ce5e837ecfa8ace279cc99ea00e3738
SHA256	b36032f72eb107c453e5a247e38a203f99441d13e8428516b1e04b02ac46ed72
SSDeep	24:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8/d8:dWLmS3F2V11C7yXSV+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosecolor.gif.locked

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1006 bytes
MD5	d4692a07af6bab548a71ba0831f958ca
SHA1	1ec57c1e376ae6bb36aa75673bd63b8c4d369ee9
SHA256	6812fa2af26f522aa260aa50c52974b6be3f92d20359521815ec3ed0f0578077
SSDeep	12:5MgHVHFWxRKcfdSjDod2DdMGQeqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqM:RHARKcEjJlni0mi9Ee8tQ

C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt

Dropped File

Text

Not Queried

»

Also Known As	C:\\Boot\pl-PL\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\el-GR\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\fr-FR\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\nl-NL\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\hu-HU\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\pt-PT\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\ko-KR\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\fi-FI\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\da-DK\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\ru-RU\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\de-DE\#DECRYPT_MY_FILES#.txt (Dropped File) c:\users\#decrypt_my_files#.txt (Dropped File) C:\\$Recycle.Bin\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\sv-SE\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\pt-BR\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\es-ES\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Config.Msi\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\en-US\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\ja-JP\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\it-IT\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\Fonts\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\zh-TW\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\zh-HK\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\zh-CN\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\nb-NO\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\tr-TR\#DECRYPT_MY_FILES#.txt (Dropped File) C:\\Boot\cs-CZ\#DECRYPT_MY_FILES#.txt (Dropped File)
Mime Type	text/plain
File Size	1.90 KB
MD5	9f9f18333acb10e3b7f547eebdd2c23f
SHA1	801714e16630607fd076efbb6eef0b008cd74f96
SHA256	45cd0dc45ce6ec49252efe77309bd27217f8d2f09d5e5960adce67d8d9f8c116
SSDeep	24:RHJIxbyOZk3dV5UYeU/l7i51k5gOXxcZjFRqyU8zzGOUC1F4wySqPFBVG/WRaZA6:RpIb0dPeUtW1kgYcZ8ysvpRTziTmxr+T

C:\\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.24 KB
MD5	24b36f9879652c33fff67d661363ebad
SHA1	7d0921271a651432ebbf4e772dd17f66aae3566c
SHA256	a60b3d39785f8fd1c8c66196b82c3c9000c5b83d8e689ada2f17155d81c408fe
SSDeep	48:tXEULfe8xxsd2VE478DoE97o7yOEOKDESu4KG6/iSMMhHK2BAZoC7a6OS0oeP:Ypd2VEmE9E73EOqESLheMCmZvF/eP

C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	aac3a1c07e6813fdc2d78b0949b7ea81
SHA1	ad92817a5a89a22d54cddb5f673a59ce6029ae06
SHA256	9e052fcd425f657d555c3f43d83442cf742eb7f02aa34d519e81b0312686d782
SSDeep	24:tPIGYzfPMeT8ZVGvOEDi1NRN5PQEcv8o//CC4gF+MQHvZ8ovHFlQatbwN/DYzvVx:tP7YoeQOFDwzN5PWvd/CCv+MQPFlbbw2

C:\\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	3e2955689d5c22dab6a3f0e53dfab38b
SHA1	4151dacce23f284929bf60c282695eb12f3178a0
SHA256	59e3253d6301b0614e10ffd8cef87451e6e8e1f2407cc5b7e68654746a917f6b
SSDeep	48:tFUoTBVtRBYEyMcx3V/lu8NEgkx7WkC0EK6jOWh1SJLh:vFVtM93NlQgs7CvOW/y

C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	ac31e4b250182ddc0a91db6db475704c
SHA1	e6925b571fdfc3c02ea5f09d59c81b7c4d291cf0
SHA256	c62b5c6f3884032eb7f758172e10ce3829cc2b641d85ffb7e00db140527c32d9
SSDeep	24:td1PC6tv6etD2D3FPJuDxkHyuDvNsXKEKoBq4VIIK8N5PQEtBikFDorzvVNLN5Pv:tmA9xuJ+kHhLN7zoBq4uIK8N5P9ieMPf

C:\\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.57 KB
MD5	a00cedb081063c219b390db6692ff6f1
SHA1	c0602f5055ae6bfe3e606b37d629a1fe07ebb823
SHA256	fe25d09cf3b1ba7662b011abc18910a7cd6b3149994fa9e13777d0bdfecad174
SSDeep	48:tezT0z4xsd2VE47bFGVba42S9BSr8eoeP:+T0zBd2VEwoba4nSoeP

C:\\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.11 KB
MD5	7d25f46ac88babd319345bb268d5ff73
SHA1	c7f9aa4f5256369bf08022ce6cecfe65a2231ed4
SHA256	299e78c46209a8bf160125d144a3dbb98eb08e62941b1707bbbcf41bf96c7e34
SSDeep	96:wcGqJPrxYubBjuRm0soSuqEXv5olFg+0Dp+Q9I8OojI2:XGqwkBhj+Xvkap9+9oP

C:\\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	b2c2ade32986107fc21f7e2481ce7f5a
SHA1	34126a2ce974bacfc93c34d3f90815458326cd2a
SHA256	cfdace3c9a0356a05505464dab9a10d0ec4e70fd925aaf7a448b666b63637bd4
SSDeep	48:tjuBQfXQ3tbYx7mbrBKxNRVSuxL9ErC3Byxb9ZX7rq1NzdPBHvCzmgVsIrzuoeP:xuBCg3t07mbryXVSOREm3BylX7OTbHvt

C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	7015c9a08adf0188fcb70189691951f3
SHA1	2e68e8151318cc6a59fc70944ad05fb7f2bb4b7f
SHA256	20e59ac291904cae4dbcc5718ee9980840d4785a21f6131ecc2c87a14335fe4a
SSDeep	24:tybWoXoMUPY1eVzEDi1NbIcnRbisCRjznN5nTNzOPUEF6ApifuM8uM/ByjJ1+oV:tlHzWDwyJssnHTNys+HauCM/BymoV

C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	811 bytes
MD5	44466d646082475a1264bce4e2882b16
SHA1	0cc33178bc4b6195a848779c40b052c163174688
SHA256	ae505291afe8343788a9808d5225d4806b51cd2935e5c8cea1001f85409f1b96
SSDeep	24:tInrAjRg2JacuDxkHyufSIF2+cIoA8BLfPBw:tYrf2oc+kHhqC2/IoA8BDPBw

C:\\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.75 KB
MD5	188b40715071e36b819c20c975548b02
SHA1	3cdfeec239b7a29a6af4ba031b44798e19ac490c
SHA256	16cf5edb0fc6ad638b3f84bda5c569c6a0a2e958e99cffe96cfd6ec852cf86c7
SSDeep	96:gdE2FwMZEYWISmX6w/XC53PP1P9aUDjiwIFKXC4pMsqytWW7Hg/MZeg1So67sqDq:gKNUEafX6wPyaUXp/qyf7HdeY6FaKnHA

C:\\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.35 KB
MD5	4bfe2bb148027de321725695c379cdf1
SHA1	723b4b0894c5f3b7fd5dd8840fbe8dd5c2cecff9
SHA256	d8411476bfce45855a69484a5d46061c65776ae2944f713b04b36d5332ac225d
SSDeep	24:t1/LOdheCfwHMctg8ZkDi1NnF0yCouEpbNONKUM1co5x43CoHqRF2+cIoA8Bo88J:t16dYHMctHkDwjeouENNO+1iSoHqD2/w

C:\\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.20 KB
MD5	0c133491aa6f50dfb782ffec419fd366
SHA1	f9cc93355913b263c7060b958870141d6fb0f35d
SHA256	e6a4c4fb5c23b92c752ca51d8461dd4f6e7af8491625d024868c83fc5ba7ce28
SSDeep	24:tx1KH7PM6VTDPuhUQCfwHB28NFtP7RFrzI+O6NG6BIIK8N5PQEj8zwoA8Bo88J:tqH7E6VTChnHBVNLzDrzTO6NjaIK8N5/

C:\\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.81 KB
MD5	74fa8197ab9ab7516b82062d72595f12
SHA1	3388519e766336ace91955d2d7da913a76b6cc2e
SHA256	a50e049273a8b70e31e65d9075cecf61486961de206ea0819d1f3a9c6670a600
SSDeep	48:tqlUs8bYx7mbrBKcIVvMOE3SenxZDIzlF36jQ3UIbpB2piBrQr:IlS07mbrEfE3xxZUzl9kIbpUpUEr

C:\\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.28 KB
MD5	8ceb6581e2f553add4b7013df67cc743
SHA1	afff949617d554380cc87e7babafb0de868f679b
SHA256	2ea58f5db2396c494b7534d055ee4e84ff7177d0d7d6e500b6b734773bd45a7f
SSDeep	192:rYFUzIvW3vZYBgdCZIWA2X6NolvObuxlFGfoWxD1SjNzDSA2:rYNIhVz5aHxlyZ1OzDSH

C:\\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.57 KB
MD5	8c7638a9cc619e015cbfdc8f6407c085
SHA1	45cb13e84d5922f1c1dfb7eb323105e08c0bb956
SHA256	12e2347519f90c7a2a85cc4fcccc44d2a690d9f4693e63e48224952617dc152e
SSDeep	48:tyjTe+EXdBsKOK8NqoGo/QcdE/iFn8Cj49Rz4k7hIACN5PJVe:A++EXdKKcqIHI+8F9N4nAO5+

C:\\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.94 KB
MD5	c231e40d18a577c91f6a76d608a9372d
SHA1	6b242ad09aaf92dbe76ba4d7c35e5aaee0471e62
SHA256	dc855464c3ae2fb00d3681291149b7cd0a448f668a19aff8c54089e2e3c756d8
SSDeep	48:t66SsRjenReWJES1GQVv0havVw4HH1/R81W9hpIGR7BG2piBrQr:E6FjSNJESoQe2VN+ALIyfpUEr

C:\\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	10b7be712b4ac37a1a89b31c19bb893e
SHA1	eaf88cfdf50afa1bc2004c0cf778eed0c0706d02
SHA256	fc055a428832a27e6829704e44bce72ea2b6bd7e0e86324427a884cda705a391
SSDeep	24:tQ3BRUDm/dUBYzz0CYoabOcc2zCkwGkm5MLhuFCAZGyubKNKm5iCJ48:tgTEBxHoIrzlwGkm5MF0CAZKKMm5zK8

C:\\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	f783a35e87e2c00b3f59b544bf4b2d1f
SHA1	85e93e4a532c88b8771f4ea830694a812c041a84
SHA256	271e96c3a26c96af977c447bfe00ca34f7b3adf0bad9dc15c2e2214413f369eb
SSDeep	48:ts7DJZQWJES1G4VvzKmpS85P9w8adddsguDIMJFIOoeP:e7DJlJESo4pKmpf5P9GzdtuDISIteP

C:\\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	913 bytes
MD5	0b39ddff6779ed50b3566d1d32ace3cd
SHA1	f9fc01960b78dfce5506e287b3ed062639b9b845
SHA256	90e203dd51f02de62f017f88e7539a9a18b363dd4763a1da046169f9dd0f8e00
SSDeep	24:tZCDq6bKvqSjVEDi1NLN5PQEHAtUJNl0wGkm2V:tcLeeDwFN5Pd+QNuwGkm2V

C:\\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	d24b9258360edea62a6b957a08e97d0c
SHA1	b05e165d00a12b140cc0517d9615aacf32018588
SHA256	cf4de8d3420e52d9b8be65e1930d2af750f1a4c6dd4c0bd9b0a032a43e3be13e
SSDeep	24:tRIuD6vyXWVOQNi6U3sQQiz4tFaqMc+SmGL3npzqBBBkM6zWx2piBsyQr:tRITvVVtRnaXc+SmGL3dqBj16S2piBrK

C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.locked (Dropped File)
Mime Type	application/octet-stream
File Size	582.36 KB
MD5	e3e435518608fd257d9588ce6b481bc7
SHA1	ddf1088696b9fda277fe4bc6bcf7572cb9b20515
SHA256	f60bdf87ef46fa61e27e1b0dd21c16bfcf7ed9df41cac48279b51b757751d9e3
SSDeep	12288:Raiog7Da6w0TJSdhhryL9zosG+OoPKvzDos3xBijKW4MgJD:wiAg0zcs3xBH

C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	819 bytes
MD5	babda48fd7cc30713dbdfc7d39ac0293
SHA1	83a2422f0720494ac83e173370dc19c88cf6c4ba
SHA256	4abe7acdd9cc7cc1e89de14d69b718d88656ebf505dcb952d45e5dd8d015fdfa
SSDeep	24:tTGkgP2G2ed7OMGuDxkHyufSIF2+cIoA8BLfPBw:tdkSoiMG+kHhqC2/IoA8BDPBw

C:\\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.13 KB
MD5	4afe6dceb9085025f3891f5dcfea3533
SHA1	4b2d5a1ddac8bfe21fe89558dac5d03660974fc4
SHA256	0bde83ba1c71181dd9efb9da2d397c5920db5a606c5ada3af473279efb53cf18
SSDeep	192:j/E9WE18oE4EjEI/aE9Y07ETE6EZbXsSBLpVk/q9jFQAacVc/Ay:j89Z1WnwIl9XIA3x1MQE

C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.32 KB
MD5	72dc68793586ffb0e178c70140783512
SHA1	d164aebc35f43249e65221aa01134d53a21874de
SHA256	7369397309ea854f0a14e9ace823d6cc282b8107d869c87fe0aaaf3f823534e1
SSDeep	24:tNqX7e5dME7Ye8fVKeeJSkHFj/HZFNZN70CYo+LMhT+/qZuCozKfPBwz7m5qG:tA6rV77GyjBFNZKHoNpNZHoziPBe7m5R

C:\\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	819 bytes
MD5	33f876fefd3a682d1f67e0da1581dcfb
SHA1	559d4aabdc8cc4a8ea3c200385a04d0a3c6c152d
SHA256	f513b5f8ab4609e29f0ed95aa29903a95d00f67e28b25afb67977919f2e965f5
SSDeep	24:tTvKEYnUTc0buDxkHyufSIF2+cIoA8BLfPBw:tTSEY6c0b+kHhqC2/IoA8BDPBw

C:\\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.37 KB
MD5	85a8677adb64d25857d84f14441bd532
SHA1	0659177fd33b3b40f9d8c77681c6e2a6a86ba6cd
SHA256	55d6d0717fcb23a9951911af051e211fb4564aadbdefe7927ce492639e78d1e2
SSDeep	768:iD93+eC9vK3OeQXXOSe8Xb5d/U/FbCERZdS/JO2tXnX5xroOw4x+hkYCXbl:+93zCxK3OeQXXOSJXb5d/+bCEbdWZ

C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.27 KB
MD5	5e7823458c681053c3d72330fcb14b16
SHA1	be91cb76fa6eae8e39e94af079326db5d136ba67
SHA256	74f8b0dbe75150b14b9cfbed06389f9fc09ae959b2eca934bfa4fb2691ef1fe8
SSDeep	192:tKeu6JEH/jaEBivNtb6/Udc5t2qB19J5+mW6cWBjKVBSI:tbuv/jhivHbPn+XX+Cqx

C:\\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.29 KB
MD5	4f4401fa12b4db15090021ae0f6756e8
SHA1	ad6aa69fff5e10551b12b4792b7a98f2da251686
SHA256	f7d1471b7d46d586f71dd4fac34f9ca4d9fb2a78a44cb34d9d41d09b96179659
SSDeep	384:7zmSIXdN7poTEk9Mv439Nr3KW8/POVw0aBO37xgOJWkHo8b0PWdNXamCQ:7zmSIzpoTEk9Mv439NjKW8/POVZaBOr1

C:\\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.09 KB
MD5	31d014fad62e26a603f484f93e23dc58
SHA1	531bbf29c012b11951f48dd33536692d9905651f
SHA256	90fd7f41b9301291be0f111b39bd607768cac95805134467fe429c636153dce9
SSDeep	384:dNN+TZHK7AZvzRI7P76K9Mv439Nr3KW8/POVw0aBO3l7d7ni3rxckNjxERrzkJ1:dNNaZagziTx9Mv439NjKW8/POVZaBO34

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	928 bytes
MD5	255a70c0bfca4263787e2895dfb99761
SHA1	69a84e84ed56994de39dcdcc34adf009f0da949e
SHA256	1ebf3abb2eaa2eb063c9c4adf190d8fda81c5ef6ea497f949e5287a120549865
SSDeep	24:tr5jGQ9+qDR3Ur5/ZKNU0fKV7KaJ/NUk5YBY2CuuKrNUHeNU+qwKOfI:tr5jGQjDR85/UNfiV3NQHRuKrNieNvKD

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	925 bytes
MD5	28b1be767f9e6485c55c536ee3d07e42
SHA1	c0f15dddadc6c9e9ad158b5b36d9358f864f0054
SHA256	baecc5d69348e85a87c8c928cb89cbfa84d0382dc4edf36f680ad4a99e6b9784
SSDeep	24:tr5j/c3342COVqBZ22zYf1AN4SO7KoZfbtbOlWJOdDi92npRuB:tr5jUYPOwG2wAaHmebtbOiwiMk

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Apothecary.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	965 bytes
MD5	8b91305f557d439111abb316a6952c2f
SHA1	861b30fef4c5630f83b6873cd58281237854d502
SHA256	172f7eda4eb2278aa909fdb1f329ee11a6e3a123bb40620d36fc37aceb7b87a5
SSDeep	24:tr5jZLedO234QqBZJ2zYbNcrOoK1HfbtbOsGbvaXDEpRuB:tr5jZqc52oK2xbtbOsCKEk

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	4b43d7fe1a46ad225038a1d202b91b49
SHA1	05c3e2bcbf5832e738b7bab38ff98b54e033c4bb
SHA256	101586338d13d6fe5e935c4e4c9eae93a36ef2c40e18d069231be1420d158a17
SSDeep	24:tr5jBcc33jNRMyn2lHV/PuOB8fwjiuKOsV9JlGX2TuTJtOcYdWOtruf7c9:tr5jlDNRMyn2lHtuOqTuKOG9eCuFtORf

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	927 bytes
MD5	9d1bbd6972a787cbb50123ba9f2b9026
SHA1	aba5078f0da68f7325990dd5a9b32f276bec0291
SHA256	0789ca3d7e1efadc8a4b6ac3e741363621b5284a6da889ba6cd2ca7e0dd7170a
SSDeep	24:tr5jfO0s4bQhhzuUxdhnkr8GOpH5HoSP1+cCTuX9FGi8RNUr:tr5jfO0l+wUxLny8GOl5IORCTurGiqNa

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	926 bytes
MD5	ac685819d58a143bf565da3322c055f6
SHA1	88a331fb5de55a5202507880feb6c7dee3e2f066
SHA256	532eca7ebf883c8d802add1f115d10cf844b43b0bda7ac47661f7b831e66f786
SSDeep	24:tr5j2CEYvNUl1HMRZ11/DRFNUbmLIfMXYsk1PYf:tr5j24NI1sn/zNPLIfiky

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	f311ffd78b75f88ecbe7faabb2d918fb
SHA1	38d32b702e550ea13ae2eccdd1bb88ec2f93ddf1
SHA256	c6b584010bd60885a8ca66e9a36a09f968e8fc3d86639cb296d76fa65239d11e
SSDeep	24:tr5jJ9+qD/BwWemvyjK3SPZNUH0aXjmd3CgK6FR3aan:tr5jJjD5ZeMrSNe0aXjU3Iogan

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	8dd79a77d831e76c3f023912640a0dfe
SHA1	01b70fe0db39ebbd8bf7867e404fd39fa397a80b
SHA256	ca7d9904b6235700f5e852ca717501da52f0dee61e17272b1e43c003d14ef95f
SSDeep	24:tr5j42c33jNRMyn2lHXXPuOgfejiuKO9DV9zKsGjCTuTJtO7dWOqfXwc9:tr5j41DNRMyn2lHvuOAVuKO9h9gKuFtp

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	c2493480954e581221e299e5e488eb71
SHA1	67523f57e8fd1793cc45eb49e3728e5028323659
SHA256	522874ee90d88b9325a95ecee9903aaf6b781013063585ddab8046349d17a083
SSDeep	24:tr5jV9+qD/BwWeZKKzREWxt1ZNUp5aXoBrbf6FR3aW4n:tr5jVjD5ZeFuAXNKaXCrLogzn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	959 bytes
MD5	2c9b42b572cb217c78b8ff8858931e2c
SHA1	35a55da78e47b20e04d67d6fe365ac8f66b2f32b
SHA256	ded74b484ef31f40b45b7933223b2e968d4bba558349492eb904f4b8cbee1b0d
SSDeep	24:tr5jguf6Tjx8cTvLtpQhwTKuU3ZEN/r8GOMNGH5Hgs6PxPwoMcCTucFGi8RNUx:tr5jguf6h3Th4w7UWV8GOMNy5b6pdhC1

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Foundry.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	962 bytes
MD5	41de5a946947eef059c2bc2f37926c8f
SHA1	9831cfcf25ee9e8e593fb756564af262f6bb235a
SHA256	f182ca7436c9f42e21fe8c7020707c6729de1292945e1561cdef52b97bcd59d0
SSDeep	24:tr5jYY4wbLkZNU/gY9NU23u0dA5XTNUK6XgV1mZWJcs:tr5ju1N5ON3+0duXTNwXgV1us

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	959 bytes
MD5	f8837aab266089d07a435d2c4da22e8c
SHA1	4f56b731fd0a7fa124c3f6ffdc77fd8118b9fbfd
SHA256	949cc42962f3e027717039b58d78a6a1f66a84e95704af5c43ef7948153e205b
SSDeep	24:tr5j+guf6Tjx8cTvLtpQhAvuUt1vZIJ1dZr8GOB7yH5Hg63MbPXccCTulFGi8RNo:tr5j9uf6h3Th4A2Ut1vkV8GOB7W5A63W

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	964 bytes
MD5	b31b31f9161ac51fdb9662570e4932c0
SHA1	bf563fe7f0bc8bd48159e38447b948ba133f3a32
SHA256	c31e1030c665c867f57a20eb9931a71ef42d0dcb6dd55712aa9353e71751d262
SSDeep	24:tr5juu9+qD/BwWeJwJZKp5ilppZNUh4aXoB4bT6FR3aW4n:tr5jbjD5ZeJTp5YZNC4aXkqogzn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	926 bytes
MD5	d692835a4546b7474c7c2dc851e7ad87
SHA1	386769d7547c14a1607bc0d8a7d2174fc3fdfcef
SHA256	9bea56c8852546e49d849fc7faa6a6147a80cd4ee92875b1465668d5c6b9b0b8
SSDeep	24:tr5j0YvNU11H1E1l8CFNUcmyhkfMnplYf:tr5jtN41o5NIyifOpy

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Metro.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	27184ad98ba7618f0784e4273f3e47d4
SHA1	1ae936864b5b929333fe13b1725703dba8f1d36e
SHA256	5901ae1f1e195ea8ea446763693ad9b27530ecccfb44a89c69d81e3a9f9212e2
SSDeep	24:tr5jNGVLSuZt/wrNUaV7hJ/NU0Z5YsxNrNUSFeNUewKOevI:tr5jNW/sNrVTNamrNTFeNyKOevI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Module.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	636565e2f5f423655c39ca7c7858d0e2
SHA1	6ab0e0d690e7240e93d6accb0417948fbd4b8f07
SHA256	a55bcee995497b475f341d0fc86bae756250aaac4523d052261a4fcfbb89ee7b
SSDeep	24:tr5jweqc33jNRMyn2lHt4iPuO0fMjiuKO6eV9h1aiqsGxoXlTuTJtOVdWOLfec9:tr5jlDNRMyn2lHDuOMXuKO6I9hQi4x6J

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	961 bytes
MD5	b1e6c1ece411980b6ee5557e91632ab9
SHA1	2c1d4eda23eb7e38917ee1aebf574d57ee610a6c
SHA256	2319fe22b5c1fbb28c34fc7c76bea4d83a89ca5642afc22ab221fdde26d47d59
SSDeep	24:tr5jHPc33jNRMyn2lHCPuOTfWdljiuKOGV93hKbORG1KTuTJtO0dWOvfUc9:tr5jHkDNRMyn2lHKuOTLuKOQ934r8uFD

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	3520502220943c225776b07f1fafbdf0
SHA1	bd3ff12d7d0cdbf34f56066cfdecd3382a2010cf
SHA256	d184fb0ba364f50f5e4ab401f950d623a87a9bdfb966ad1135e1fd6738d5bca9
SSDeep	24:tr5jwlGVLSuZt/rNUKV7bJ/NUqlSe5YaPfm2qurNUFeNUYwKOdI:tr5jmW/rNLV1NneaPXrNAeNQKOdI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Perspective.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	966 bytes
MD5	f6f37df778069b16dd2eab1cc83c8e4d
SHA1	94751641e3502894343aba3bac0efb760f65375c
SHA256	759d3e48ef1ef667a0c7f95f33899c3e2320b99bf3ad9525ebe78b40d6adc74a
SSDeep	24:tr5jmdQh2VjpyDDw1GAyKyFFNU86me41MrucIYf:tr5jmdQh2HymGAZYNzHe41jch

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	962 bytes
MD5	569150078b2f934b0695e1c960ebf99e
SHA1	415147ffade39218bc5f8198df9d6bf261aded85
SHA256	f8e80cf5fab9f525fdf398664d15f638334e0447152b10120938c4ef972df697
SSDeep	24:tr5jTdY4wbLkZNUyBWrBVa9NUio7txdA1XTNUiq6jV1ZSXZWJyee:tr5jB1NfuBuNLo7/dOXTNLxjV1Zfe

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	963 bytes
MD5	e05bd6ff234a74447f8a6dd87d8845a9
SHA1	22943ac19af916afdca347a84751769f43ad3136
SHA256	7c6710fd436b2b0983a69356163bce02376f1e1e7cb66b17725ce115a64f6eac
SSDeep	24:tr5jZ3NTFNRb7AGOLjdgyQxCOIcqPFDYsn1uRmOvtVR46V+6zLUqi:tr5jZhFNRPAGO2bxCOtyImOZ4+7XU3

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	962 bytes
MD5	7c7f35a6ec870ac89ed105419ab04568
SHA1	82e92630c63a92a434bbf87c9328a788b2f5eea4
SHA256	8a80c3f024327ff76ee89465f13e267f69eeb25542175e6602fe9c035ba9f059
SSDeep	24:tr5jOAY4wbLkZNUchhV49NUynwdA6MXTNUWw6bV1HJfZWJpO:tr5jO21NThhsNtnwdVMXTNRbV1OO

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	959 bytes
MD5	dfc2a19de247f5519dfd67c0f899dcfd
SHA1	2e4651b5d004d299e83db4c113f03b7c722b1055
SHA256	e38fb3329f3057057ad1a3e6ddb6cef1dea23ed8658bac09a1d3f3584958b8c2
SSDeep	24:tr5jauf6Tjx8cTvLtpQh9luUv5ryur8GO/JxH5H13PLYcCTuKiFGi8RNUF:tr5jauf6h3Th49EUNy48GO/Jd5VfJCTW

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	65b216925d6985dc307894fef470401d
SHA1	5ee5b4c0e46222067be761d65649eda936d17283
SHA256	2dd31887a575aea989e736a1bea553fa1162356fecc5e2cbbc025a5b25d988cd
SSDeep	24:tr5j+GVLSuZt/2hNUHV7h7J/NUoW5Yk4cg5rNUzeNU/wKOoaI:tr5j+W/MNaV7N/fFrNCeN3KOoaI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	a89bfb152ad600e624fbb4917ef18fac
SHA1	5b485e3b6e3736a3de6e66552982947bc9425fda
SHA256	b8402fd253512891e90c86f9305276a27bb8537fe6bac3e5cda7d674b6935c88
SSDeep	96:l5j+ifoF4hCsq0KWvR2ugKdYiNFuAUSjhwNdDZ6HyxxxGN7:KAZRgS18V6S3oZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.54 KB
MD5	bbf2786b68ea561eb074c2c4c8cfc3da
SHA1	aeec1a30ee3857cdf42382cbc4d31ca5364e6233
SHA256	7636a85b7c50a45caab136c5d5b0b46ee1b895bd1d37b696fd4fee4c3780d00e
SSDeep	96:l5j9hOEp3RKtSKHh4UbZvPhuIu/5jd1Oq0KWvR2ugKdYw11/:HgzvpI/5Z1OZRn/

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	b64b9cfd85e5933d9fd0eaeffd6012d4
SHA1	6f2db1fef830d8dd8494feaa3ca83ce6910a054c
SHA256	7a8ef1751dedc0d9876ec185bdcd73d5489518423849b857e128026331f46414
SSDeep	96:l5jV2+/HNTN6dsHh4UbZvPhuIu/OHiAP6dTMippASJTJgI3NKeLGa:VvvpI/LMippfh93NVL

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.51 KB
MD5	10c62012805668fedb7f06eea66f43e2
SHA1	ae65c64675e730e334c2cc03ab7ba8e0d99be135
SHA256	b6da2c00bb02331a5ff4752d0d54852c6d2e03a7a4e69ab42eea60832bbd3767
SSDeep	96:l5jadp3hCyf7rFJ89K8nc9ZVMD/FJsjhwNdDZ6HyxxxEj2:c/X0Zn26W18V6S3aC

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	f778df139a2c1b7c34bce5ee0139b515
SHA1	0d5dc051d4de38624a4cef11b28d11d9fa7235e6
SHA256	adedab563a79f40d4928eae8f94561c23aabdd242bb8e9593f025ab61a24a3f7
SSDeep	96:l5jwhwQjwkuKtSKHh4UbZvPhuIu/XJlZ3D12KBgRsg+bOyJi:ezvpI/5lZE1hbwi

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.75 KB
MD5	a3c1940f5fcc24e6c1c7e177386b9ca8
SHA1	7c09d7f82428f804f7eb73ae9aec6b8e696c9a65
SHA256	d8f0592e8d3509639a463b79c3f60a552ea4adbdb5dbeca9a813022afaa94c5a
SSDeep	96:l5jDF4hCsjhwNdDZ6HyxxxGjHF4hCsjhwNdDZ6HyxxxGj2:RA18V6S3MxA18V6S3MC

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml.locked (Dropped File)
Mime Type	application/octet-stream
File Size	3.51 KB
MD5	4f021ad277c2d28954ad449176fd41ef
SHA1	a25852b806139e552ae342829e2feae643205362
SHA256	156f752b0b41785121893801911f49f129e8c1184141d2cb87edd55599cb1e0e
SSDeep	96:l5jBLmjhwNdDZ6HyxxxGNF3ufbe/FJFW7LmibuIOq74+Yvbg4JrGa:c18V6S3on2i7W7FCqJQr

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.51 KB
MD5	79feb6c5cbb970107cc8af648e7751e8
SHA1	68708cd64b04205ae520511d86dfceb810ddf6a3
SHA256	8746cff7f1e6be2c03e0ff0102673b8aac1b8ebce83918b10c5765c8d5150c36
SSDeep	96:l5jnmvs5kLdTMippASJTJgI3NKAKI5Y3ZKtSKHh4UbZvPhuIu/5i:0Mippfh93NcI5eIzvpI/5i

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.44 KB
MD5	28b41f654c7498f3e4b004b20604e7e4
SHA1	657028bed02caafbcbe2acda4c0892e50fcb8d22
SHA256	6bc46a5cb9ffde9aa243459aec09d43ac8399a06ca4eb189ac4ae824591c147a
SSDeep	96:l5jThLjhwNdDZ6HyxxxZNn5i3ZKtSKHh4UbZvPhuIudi:t18V6S3L55kIzvpIdi

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.75 KB
MD5	e2d387f33584635108d5aac76ef2786b
SHA1	1db5de0528858bb1ac67fddd94a56546f4cdc7b2
SHA256	6c111d4ab52972e0cc7f832ed4233b1fc0d9c37898cc9b17f71a5a62805d5270
SSDeep	96:l5jWp5rUa3yx+JsLn0KWvR2ugKdYiNFuCp5rUa3yx+JsLn0KWvR2ugKdYiNFuk:Wp5HtLRxp5HtLRn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Elemental.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.57 KB
MD5	4aa03de5317a91e248c7ef2ea9782f5a
SHA1	2906444d937426954b58b4a0de9a696b7b0811ed
SHA256	6b0b09b045c36f7fb660190784943307a13430052c7c4f3ef1b4e98e99bee624
SSDeep	96:l5jKKG6pNWLmibE2J89K8ndLl78ZdsHh4UbZvPhuIu/K8:KKEFv0Zn7vpI/X

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	dae753223cfd7286b8ed6bc049a4f4ca
SHA1	373a90689f8e637235efc4750a469158ec0d37cb
SHA256	d8ae431367780ae77884fe95cf0a08f3eb9b865f9d2d1465b132f5aa95d907ed
SSDeep	96:l5j0hoalvc2KBgRsg+bOyX4cjdhr3ZKtSKHh4UbZvPhuIu/5i:wN1hbyBZlIzvpI/5i

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.55 KB
MD5	f8b279607d25624a5852e0c53bf02b71
SHA1	331b2edbb9f48e7c29a2cfb9fdea0f4a9b9739a2
SHA256	69159caf47d494867a6413b32d759a1169d1ca3809b563477997002febaf3f63
SSDeep	96:l5jmdAR3x7rFJ89K8nVNSBP+q5ItMippASJTJgI3NKGGa:p9Z0ZnVQaMippfh93NF

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Flow.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.43 KB
MD5	d6ce94d8b06a88c84e24859595b5d206
SHA1	bb6f52b5f731a3766203a695e5482f5d0c04e92e
SHA256	96265a618dec87ff75307c24d4b94b75bc184fb5a22773f2eaceb817e9e77ee4
SSDeep	96:l5ja63uA734EVU/KkeQfoZ5ItMippASJTJgI3NKc:aqBLBaMippfh93NF

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Foundry.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.71 KB
MD5	48bc3680da34a140b4c48a5d47ae3d59
SHA1	2b85d8e9546aaab5687648a96be65108a3339bd2
SHA256	ab6b1fb72ab3f63217c0ca2d6e49a85d39f9e55efa3f52c17ae57957316f3382
SSDeep	96:l5j7GNTKtMippASJTJgI3NKAKg+g55QeJ2V+q0KWvR2ugKdYiNFuk:XMippfh93Ncg4eC+ZRn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.76 KB
MD5	680fe58208e4c950b4728d0f26cf9154
SHA1	76496a648ffa4010e46fcb65ffc18fbaca427680
SHA256	4b7ff5c3a2765f0d4b109ffb5f6ec2687cc975aa2052b4212de9007360bbf4bc
SSDeep	96:l5jwa6pNYdTMippASJTJgI3NKGThtVVkkKtSzIOq74+Yvbg4SUN7:jMippfh93NukqJSZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Horizon.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.54 KB
MD5	ae735810ba93f4791109867b62b9ab60
SHA1	6e615508bd78dfcba93613ddf7cec385c7a037bf
SHA256	0ca3ab70b7916c1225f56cd759c249e27e9c8cc79ba8d18f1f5f37dd84537a66
SSDeep	96:l5jCEW5WjhwNdDZ6Hyxxx6fEW5WjhwNdDZ6Hyxxx61/:Zv18V6S3jv18V6S3k

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.73 KB
MD5	372beb43787419ce771aed367402098a
SHA1	e98071f54a863b21ed930101a471791065514f12
SHA256	fe9b1a533a6ccab6fff31fe6413b28f3c5521173464bdd69b0283a94ff5c7e7c
SSDeep	96:l5j541SvsIsVsLn0KWvR2ugKdYDrjL5Y/wDx/FJFnk12KBgRsg+bOy2jKq:wS2LRwP5LT7R1hbMq

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office 2.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	95612642d549d0c4298dabdbfb9bab7a
SHA1	1e069d74b41a422cf5a863d9b63fb126e8aee0a7
SHA256	f14a22b6d78e47afc2346c8068f5da0f588ad1e0de3aa7cc2899b2f9b5a6447e
SSDeep	96:l5jrdBPs5kLdTMippASJTJgI3NKsjdnRJ2MItMippASJTJgI3NKGGv:7Mippfh93NpZnRmMippfh93NI

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	d7df42a275c6dbd3f364de4cd2423f9f
SHA1	c6130b10babfec1f8355d8f34d7732556f85fc26
SHA256	db72892953a68ca1dd1d779cbd0ef63e55ca8cc100af4c33b87478bbf1d3e745
SSDeep	96:l5jp3u/jhwNdDZ6HyxxxGNXYNq49LmibE2J89K8ndL1+:VE18V6S3olTwFv0ZnS

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	ddb4d416dbbc157aa8477fab921d2b4c
SHA1	db6fdcd6bada5c5a02cd42bc72926dc0a458005e
SHA256	931f5c4228a25d72f73571fa59342a72737fbff4bef7918f2a4ba395e68a73cb
SSDeep	96:l5jv+n7rFJ89K8nVN5U/FJ5Cw6dTMippASJTJgI3NKAKq:20ZnV3wCMippfh93Ncq

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.59 KB
MD5	c4cc9d7e0197fe13a76307ac48bb36ae
SHA1	978cf0ef9d20648d5e61c9de8666331a4a16c976
SHA256	f29ce2d66712875b16687cbad4cb62f8642d771d550206ad5ad043d43390d9a8
SSDeep	96:l5j4XwvVgq0KWvR2ugKdYiNFu43yO6UkCMpmibE2J89K8ndL1/:mZR5YPv0ZnL

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.54 KB
MD5	48abddd856f9716718c7dc29218ec36c
SHA1	a0966e59583d57ada4db853dee0ac289d0fb5a00
SHA256	fe711a92a25414a7b7165d7eeafb24cb38365c0793b26da4455b952b26d4b844
SSDeep	96:l5jM4M/Z6pNWLmibE2J89K8ndLQ53RNq4oq0KWvR2ugKdYiNFuk:KFv0Zne53WHZRn

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.62 KB
MD5	002a474828e2c6a4e6970abce96411cb
SHA1	d0ea929906298c79b892f380b50d4f81a4cec516
SHA256	3f2115527b0357744cd90acc958439164540619ff0a2c9f2424440feef08ec13
SSDeep	96:l5j75NPphixZdsHh4UbZvPhuIu/i55U3ZKtSzIOq74+Yvbg4JrGa:757lvpI/i556IkqJQr

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	e34068c54e42a3905d12c015d085c158
SHA1	3f27ca472c15dfd5a7fed40aef6fd37b264d99d9
SHA256	b288c27b6fe8e607bf9ccaf818e6c295c3e29c29b4a39ccf219cb8dccdd0de5a
SSDeep	96:l5j32oABAQjwkjsLn0KWvR2ugKdYDrjFh1sn7rFJ89K8nDh8:zAnLRwVk0Znm

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	8799d00ae6b10e5db1f9ab92f7d0eaa1
SHA1	c49610d114ec7e0e69bbbde993bc6fdb23545c8e
SHA256	6e232221d3903e5f4506b946b34773b67bc28f50b2e6a6c5493c39cdf18c1fb5
SSDeep	96:l5jS5k05Z4jhwNdDZ6Hyxxx6C12k5KtSzIOq74+Yvbg4SUN7:kl5q18V6S3dkkqJSZ

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 KB
MD5	fda6b0916d300edba5689e7c2ecd607f
SHA1	8a2249f66254c89c3d13b1649ac935dc3d969273
SHA256	5303d560af5387ee9e66b8bb49719ad8f3c53c88b80c3d4aee484c8765b7fe5f
SSDeep	96:l5jlnEZ3D12KBgRsg+bOy2jKDllaPjsLn0KWvR2ugKdYvFuk:6ZE1hbMMLRC

C:\\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.49 KB
MD5	4d8c56118081c12ccabf96f09ab1ee16
SHA1	f377574fcf543313b40d3f81e4a2d4cd62cf41df
SHA256	962311b5fa78d74bb8ba9dd566277513c0c04ae7e4660b729a43f1eb82b094e7
SSDeep	96:l5jZ5QJFW2jhwNdDZ6Hyxxx6dCy7rFJ89K8nVN7:g7W218V6S3+H0ZnVZ

C:\\Program Files\Microsoft Office\Office14\1033\DataServices\+Connect to New Data Source.odc.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	190 bytes
MD5	47089b694f7a26660dc936c60ed1f12c
SHA1	bb56e9e6416ba7db280fc44a618fc1e3f91fe31f
SHA256	e1ab279e5bd6689d3ceca994ca9c8239889941afe627ebe497e43b1c161a1c36
SSDeep	3:ihR3QmxE68BLSRprPAGLxfXvvpleb2FqLemyUhq8iLFLvL9ffdY55DyfcAdqk0Mv:iH3FwdSRpM+xPvabiqNyU8dLH3dY55DI

C:\\Program Files\Microsoft Office\Office14\1033\DataServices\+NewSQLServerConnection.odc.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	196 bytes
MD5	59f7bb7ef26241aa8332fccf7c3b61a3
SHA1	aab9bba1b3c53b468a153ccbab368bccbc8e7a76
SHA256	610c85a8a22ded6533708444ad00d78f0eb432884f634d3f4d5e14ba13696d1e
SSDeep	6:iH3FwdSRpM+xPvabiqNyU8dLH3dY55BR4LJQ:Opi+VSb/yZdg/U2

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	31.46 KB
MD5	092cdc68be3a7c8f89934feccfd55d8d
SHA1	0f3973c05d710cd5c238e749b5bad7c5219b4d08
SHA256	76c3fb1341b2a99fd77d0261ed556de530f5e6fc02965964b5b4636b0822a51b
SSDeep	768:WQF+Qym7SxsvO4o6CZ5umEIMNOes8Gfrhr6lfc+PYUvi2RNFOV8HG:F+h2vCZ5umEIMlsBrhr6l0LIi2J5HG

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_GreenTea.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	21.64 KB
MD5	764a038244dab76f6361b86fb9870d58
SHA1	ceb22d81e52aa59df0a808cae7b81af7ab8b7dbb
SHA256	8192ef0f5b6d4add1dd6b5c70c703bf8cac81a2f270e767f32f768c866acd8f7
SSDeep	384:gFKNslbdmUuBSb00Vo0pzk1Je6V80+kEcKBtngfnyCVwV3+0JHGMyoqgulaxX2rj:gg2l5m9e00S4k26hT6KwV33pqgulpr

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_OliveGreen.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	15.33 KB
MD5	bc1caeb89ca002939a2bba62680df4dd
SHA1	e55ee4459ca9bbb5f66082f907bd36f3d2406168
SHA256	4db196d7188b7778fa8fe2ddfba4864852391436f16b55dc7bf8f17096157b4f
SSDeep	384:zblG7LnOcAgW5qwd/5ks+/h3YAOQDEuZmtKAwJ7068Bs8E3kO:zbBcAL/QBmthwJATBm3

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_SlateBlue.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	20.31 KB
MD5	05e9b80b5552c6f7ec0d4aeb3cb44059
SHA1	ed1b71bee117362f8776141f152c35b59d98c1b6
SHA256	897a6e3b63a2b994e867c94403f46303c1981f93eeb6d36d119b3334268dd036
SSDeep	384:b9czhIzednmSuE4efww/XitqSY6/PVoB5fjRVkrZ37cnbgaOb7:b9cQqbTfw0uBY6X0jRCrZLOZOX

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_TexturedBlue.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	6.31 KB
MD5	a5b8db46703384d42c68569df93c4a81
SHA1	f7ea71d0489df6e6e66934d2b1742e0b0e98f0d6
SHA256	44ffbc7aebdde62920e7bab2600b6847a2bccbbcec4f995e60d09055a4be3a33
SSDeep	192:Jb5io9KkKulgr3naa3eRd2Tqx/wYeMzfP0+C9ORxV5QKGLhQ0n:15V9XKuCr3aa3odf/wYeMzH0hF

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.90 KB
MD5	fe705b4e887545bee2a1c2bdd4a392bd
SHA1	535424b7109a12752dc35ee29f1e72ee7438db78
SHA256	14c236586f147cf4fbc4ecc9bd092398317b8d2345a095bd9f68a13d8a9665e9
SSDeep	48:GbtDXbQoW3J8Sus9Vj13YrmyZSrMyZnAkGWmJzEq/an0QDoN+ftK8kgcQtRyS:Mt6l9Vj1oyykrMyFqSnQN7G3X

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.17 KB
MD5	c5f38d54f4c6278691249f1f76a57909
SHA1	f41cd49ee1792836f5fc08763fe9167d6fc8d688
SHA256	20b3f98ff68477d09d98788bf3d2a3209ce3487f9dd77d713db8b764be86ed00
SSDeep	48:GbtDD9OLUL2vJoJL1p+h22Uhl18khyUDlfknMhLWD8vEQZD16p7ft0D8R1pi62BP:Mtn9OLUACLOBUhl1BFBW88QZDMFea2BP

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.78 KB
MD5	6a09b6f9281a78c96723cdf85b1f5802
SHA1	8c73b39edda16ecea498db57a7894e6140beb554
SHA256	adcd64b8add8a0bbcd305f9c628943563d3c985ab779a6285b195c60154194d0
SSDeep	48:OoDi8+qaF18ErrPzF9XKIKQAnycOL6npFukE:OoW8CF1fPja6Ayj2XXE

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.38 KB
MD5	da5cbf602b9c75da9f9285e1b5361d0b
SHA1	f3bbd0eba1fa478050ee3308952dc11e2963f20c
SHA256	b09bdc911b120082b5fdee495bd38a374dc18a3b9ed7c8cc22f67963fb6b3fa4
SSDeep	96:MtBR7yCy/M+k0a1ZKJr/NZDX8hWFea2BP:MtBZy5k0+ZK1/X6LP

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.06 KB
MD5	b400dac93c28b4834b8dc02e4adb581d
SHA1	a8ba9664b99f9712dd2fdf47bffc76b5ae363002
SHA256	e39f66f795d1c3ffde0349932e9ca6eca97957cc650eb245ec49065f7f18f6e9
SSDeep	96:Mt9yIum75dOCjwHgfpLGxQ7nUVHC3x2fC:MtUIrHTwHGRx7n726

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.25 KB
MD5	3b8c8d5cc4299bb3b5867482b7acec22
SHA1	cedf79c47e8e0fba93bdca09373f07712d7271ba
SHA256	64ab13b4ff9ea4abab69d66cd03f45ac924a15b18d8cb3efdbd29b082c31b748
SSDeep	48:GbtDHF+yKvSM+TgQmeGx5Yvrk+/1ExkHkpbGlBiareUx0EVooyr9gcTUuYiQAnyS:Mta6M+XeGvrJ9Ex0qaregpoJNMAyj2Xn

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.85 KB
MD5	b24657e7406aa76f0784193d2016b090
SHA1	2a2c19f5fa895821c548f680becc64e6583feef6
SHA256	dff687a5f8b09250c50650cf6ac175dc62b9ec4a9294f30fd5b3b2f777845120
SSDeep	48:GbtDmmlsAb92k8xguCNr45+ftK8kgcQtryW3ddsCubY6:MtaAsAboauJ57GlhCK6

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.76 KB
MD5	19fb35945b8086f1b3da86112439956c
SHA1	d9126c19107c775e93c45f7ebdb3998f3d89302c
SHA256	bbedd81a7db7fde22e4a84edb8cb5c9bd9fc5a07c2b4ad6957f36dc4be15132d
SSDeep	48:GbtD9HAGVoX2gntZzfJjFgDVaDXIyHoWESPoEAiFJe3sQCE4o5MIQKbY6:MtBgGOX20Z9jFdDXIWESgEAiFXoSV6

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	371 bytes
MD5	bf1564c29b9dc4ab67ca1390ab3ef5d3
SHA1	e14cd84b98ac0663d598a53e38a3e87cbdc69636
SHA256	32ccd83b68aca87017c9c092fea9ee0a442159e7c0054f3457a21b4cbbb77bae
SSDeep	6:ctbWqvavRIXiCqAN9vIBD1yCmLAE+LP+BOHCTMcobs4hiBhcT/0W/L9NazzRTL:ctbtviK9NoWteGIHCTKbs4hlGfRTL

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.98 KB
MD5	8212d0258181525722a21771fa060053
SHA1	a18d7aebf9ddedc24d7144e37d3d9ed774c11546
SHA256	e797b711b5ccb0468e4606ad0a290141f9da26f79e7219e6aa4a0f195be9cfde
SSDeep	48:GbtD4CEcoGhsCHXL8FmqRomP4KxUhzIaKm2LZHFJe3sQCE4o5MIQ4IaGONj:MtcZGhsUu/RomwKxUSaKVLZHFXoSYIad

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	302cbb67b1eaa4d05a971c8b7dd39da9
SHA1	98cc5a4b7a2045523b502bbda015107073b93a38
SHA256	1b1f4fc5ddb151db0a83fc39f93f31742cb593afdbab59c77565f3f8609e6008
SSDeep	48:Gbt9MhHZx87upD6FJe3sQCE4o5MIQ4IaGONj:Mt9MhHz8726FXoSYIaGO1

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.94 KB
MD5	f31d3f1fd8422e810193092654bc0c5d
SHA1	c37c96ee26a0d9c7e5b5077d76dbad4c8e938d6d
SHA256	71243b5b790edfc1d6f14510170d1cea743bf285561d073d1c3702bd1e1c2221
SSDeep	48:GbtDTombetIQYJWPHMD58o7kt0D8R1pi62D6b:MtnLetPfPHMu2Ha2D6b

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.37 KB
MD5	c2ffaa26d4592b46eeae1a89c8888e5b
SHA1	14d7b1fe77665b78aaefa52846b44356e76c8a75
SHA256	a1a98b4adea58edbcd1568e36ed2915ac6313de23a2ca8f2e5b569c40c23fd5b
SSDeep	48:Gbtgi8zcdJBkdvuWfvL36qbrJT30nfKBt6y8kT0SAAVUA11Nb5VQAnycOL6npFuV:MtjYu5SJr0nCz/8+Ai1b9iAyj2XXE

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.77 KB
MD5	01ae20d19d157740b7e8ec9dddf894c7
SHA1	20c9f1f8fa776aeb5a66348af2d038cd5f691641
SHA256	d7b5a0b91eed765902246394f577e01fca1747f9afef729733b938b24e9de3be
SSDeep	48:Gbt++tsOuc4dsezLNtJD9Dl1lxro0klIUapbtp:Mt+HOOdsE5tJRDeDwf

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.38 KB
MD5	e273f558de76a24a6dd7e698e9b8149d
SHA1	bdd9ddce906e7146aacf71337490b63cdacc7490
SHA256	16d6a9b0ad7e82cf0051ed7c73566487a8f7c33b6710aaac433a9b039adeaf72
SSDeep	96:MtjbZB315KfNeYB6eYB09xp/TytYBgaJSLZVHC3x2fxgP:MtJ5ONtMtgH/ettEgC2uP

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_choosefont.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	890 bytes
MD5	02f8ac4cff590360fea11954d10073ef
SHA1	ee1420e7aa6b839bd60ae618b13d5205cd08bb1f
SHA256	250a5281c9c8f6a372b66e69ccb2e4cfc58f7cafe402af240e0d0ff0cd67e7ba
SSDeep	24:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8lfK:dWLmS3F2V11C7yXSV5K

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_italic.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	852 bytes
MD5	d59f96484ca19f2941423df8fa9854a1
SHA1	a5d5d73ea948b8c182a533d445ac6c00f4a03c2e
SHA256	49a7f9e72b9262d05d6c6020714547193de632fcc5b2bd30cf2d0d38c741f31a
SSDeep	24:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8f8b3XR:dWLmS3F2V11C7yXSV38rXR

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_spellcheck.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	160 bytes
MD5	449b7acf6f087ae0d1c759450c062fad
SHA1	28ac79d0cc210cdb45cdc142b88dd90a43eeef98
SHA256	5b0edbadac0a2bf1bd3474550a47d7827f04c9066006560b4e555e91ac87964e
SSDeep	3:55tfICeZ+BBiiZId0VkkiFKnikzYbzhnOKOXN2oUEDQlWpe:5zpeIAmOkiFKnikzWhnlKNWuQQe

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_underline.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	860 bytes
MD5	98b4e751d418cfef0320cba6c2ed85f7
SHA1	9a87556eabac3fe40a7378d84b67639762b1004b
SHA256	779cb8f6ada598140a76f4850aeb072fa2bd620d593dc157e91d1144fec589f9
SSDeep	12:50mWaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d62TN2:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8Oz

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	be8eedfb1e65528ff9103dce4f911a14
SHA1	7c8636bfa371d505c4bd5b14b38ad6886036c7fd
SHA256	1820307fdc2002693f39469e7a25c9f5be85f90062d465646e2d4f8edc5cabaf
SSDeep	48:Gbt1X+vVKkdDibsAn2k0WxpP59uuGCr45+ftK8kgcQtryW3ddsCubY6:MtR+vVHWQAy4pru957GlhCK6

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	6.74 KB
MD5	604423b6a7762579076dd5f28771ce63
SHA1	01e7d76f1d31e77201b6fbae5b184205bcdbb43b
SHA256	3316dd7bf5308fa48cffc8e649df40d9ceb7edecf242e8acda87b985b20a257e
SSDeep	192:kLv183Hq04Iiu9vfQ6jXrZtlI4jq+W/ryKmx:4yp4InfQ0XVtlLj0/ryKa

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.69 KB
MD5	02571a3a0464560fe40ca21084b6897c
SHA1	d853ee15057b22f49dc6435d1f90eff6f2de8cee
SHA256	79ac2a8c4507d6414fa9afe0cdafeddcaea24810697b641042834672340e67a3
SSDeep	96:MtOOAVTKEFoV0B11HKlYGFpmM0ukSD0afBnhqsa2D6b:MtHAUl0D1qltFpo03/lQ

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	229 bytes
MD5	e3d2a49f47c336ab2c135e542fc933b9
SHA1	06ed86d69d6bd61db18a5a40cd609db4290ca92a
SHA256	48561aa9a3356555b90db915ca7ee3e2fa74ad0696d200c4c61a57d9594c8b94
SSDeep	3:UAw2bJ3FiGYKRPbqHA9kaDeNQ76eOH/CX3JeP3VJiRXtJPpUTGJLQ6qCEcS06qm2:UAw2bSGYKRwtMmk3JWgrjFQ6tEcP6Ep

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.30 KB
MD5	2ab502f5e72b67011aa1cf2d3e94e92b
SHA1	bdad56c89e10e96c90ae9ac148bd7187e0015aaf
SHA256	071ecc296931403dd64bdaa50a7fad891696888770457a3cdd3347cf821e8588
SSDeep	48:6RJpE9u0LDWBDIYNl1ndrBR8vLRfh6VNI2mzFxZFQHJRoXUSvJQlqUXtUxYsp9S:fvF6drBR8vLtgVNI7zF7FQHToEShutUM

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Generic.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	8139ce5a61c33371e11c42aaba8422c6
SHA1	f9a8e1d8e2ba8a5e26a3e34244c5473d131f75d9
SHA256	eac127cc862e6e2ba4894ecfb13bbbab66e8b29eba95eb510ccc9349db218807
SSDeep	48:6RJpE9u0LDWBDIYNl1ndrBvvLRfh6VNI2mWe05z88+HjfZLoHbju:fvF6drBvvLtgVNI7WBL+xo7ju

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	375466229a68ae5b17c562a8ad9eb38f
SHA1	f7e3970297b57059585d69575dddb595ef48df08
SHA256	f78a764a1f66614e9220087c69024e5efb444f502ed8b995e11d38a9f581a1ce
SSDeep	24:wOIPB5HJpQz99uPqFLDW0KDIYNtzwcea711MsYZZKO9OxSXy5zIvL9sBX4IWo:6RJpE9u0LDWBDIYNl157fK5tOsyBX3Wo

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.45 KB
MD5	ba015d5c905e05518ea0867cb41116c6
SHA1	383fb412cfb4eedc636890852aaeddbbfd9c5365
SHA256	4d6cb029df3654c55691536914dcaae5ab0ddd055cdd33f0f7a43afc22c68320
SSDeep	96:Dt0euE3dlm2KV0v2VRcKlo39q80JtXcDNLtC7+Z+wnIL9tXWLhIcOHY6UYBvDSb1:DtZdVKV0WRcK18otoVtC8cuhx/YBrwLB

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	247 bytes
MD5	a81eb797940384d2a14c65d91d77082c
SHA1	d5874ca1cecfaf0c46266445c8f8daf867896065
SHA256	f78438962f7ed6331f2f40fe2f9edd22410484fcd3681c78dcba9114965c52fb
SSDeep	6:OBOXwf9bV9Id2o4G7uDkHtXPD4nDeJg8d4bM22m7M3UstBa:a359y267DtXP2DGg8d+Mv5i

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.34 KB
MD5	6e6eebd46942af650595875ddbb4e8b5
SHA1	ba5d07d858e361b353df286f9508a8052d23d582
SHA256	55bc7e83f0bea0aa019667ae0d87adacf8eb94ad4b5f656fdbdd8db763322677
SSDeep	24:a3756dC87HxhdSJzmm0rT0HyoPWOqQM62DD/qZx282P1H9wOCssvXRuQ4j2j:056dC8jJSJeieMUD/qZx2r1HjsvXRL48

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	167 bytes
MD5	9990a9220cc334dd7796ac0577454da5
SHA1	fa91febaaf232301f8864828e2c7d650ad2124f6
SHA256	f8b6b082fad7eb968e68f5c57d6662e240ab75465b724cbc09f2f9e90c191ad2
SSDeep	3:jGl/praXR9Uf95FMgQurKMiEt/Ijl3k16YGy2iFW6dN74/mb87It/RP3PRVcL:OBOXwf9bMrumFEt/C26rnIWQN74/ItBa

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	171 bytes
MD5	05d57d9ca319c124aeb6f470769159f8
SHA1	21c7400ec1729f0ec70de1546a1d289382ad1844
SHA256	123ca386e0fefafb380b55aff9e735560f29499d6c26c32d8063efc0cc10f319
SSDeep	3:jGl/praXR9Uf95Fahc2AXdk6q/E/qMNBJoBwb9MYAnJ12UuK4fWO+85KM:OBOXwf9bahc2AtkBM/qMTmBwzAJ8UuJx

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.25 KB
MD5	80360431e0d929e866826beedb313f91
SHA1	ec44ac9ed1aa1e8469918846ab95744b02596ec5
SHA256	6ba6f5c9195636181188d176b28b3a140faa3b551ea9a0ec8b63957668437a23
SSDeep	48:GbtDe6um7dz49q1DSNJDmLQQhEntIzq75Ek1SVkMSHDXIyHNLmK6H+WDF+mEMSy3:MtDum7f8MhEye7zu8DXZm5HymEMih1o

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\background.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\background.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	233 bytes
MD5	aa1e2cdcb84cb0013b5cae1b9e8c6c3f
SHA1	7f82990066663189e320d49285a2364becf2b200
SHA256	291c627aa578f083d7dbdf0fceba0f65cd657a62228ce0f2bc3f4c928bf2aeb6
SSDeep	6:JE3WctDkwI+WuN+sKzIpFujOVuT+D9uyi5hiEn:K3WctDkwNH3lsOi+DMyGhNn

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.35 KB
MD5	e6bfdff279f08b80b5fbc6391c56df63
SHA1	a3f99332059379f112553fea988ce24edfb5e982
SHA256	513cf73d8597ab0cd592e17e4a3dac8afffd1660f4eb32ca792ef28703d2097e
SSDeep	96:Mt9Up2AFRwpL3w5JWjTnW/adYjdZkFXoSYIaGO1:MtmpDFRcLg5JWqa+jdWFoSYIaP1

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\background.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\background.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	815 bytes
MD5	62a4fabc31568f707df998d9971a1c2d
SHA1	129a47417013c45b514f0e3e5bff7e0d4ecdb78e
SHA256	11e0da2ae595e84af94e7bd331e13f49a3deb18d9f5dcf67692a40a43efec79d
SSDeep	12:I4bP5MVenOpbXeqOJbQqDqDqDqDqDqDqDqDqDqDqDqDqDqDdiqN1HnQbcdqb/NEO:HmUnOwPsiqrHQQ8/yi1EK4w

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.25 KB
MD5	a5824f5fe9663d2aded3bfd9ab80c7b9
SHA1	3459c584afda47d3ccdb7bcae4a7d104871ed4be
SHA256	7170713621f70d08a1dbd71fd4f4ad9b9444013eba394e7aea001adebf570e18
SSDeep	48:GbtDD00Oothmx+YfqWqJkJ81QhhhQ18k09LO2Ux0VPWLt0D8R1pi62D6b:MtHBVmIgAIhvQ1UTgqa2D6b

C:\\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.79 KB
MD5	d4be3b67beb2acd4310792c099c06d4b
SHA1	b44f4284765ef028e7566dadd17aac034b26623f
SHA256	425cb485c2a5b5dbdbd673436a7aeb53d91c104506aeedbac8d2675e0d3982a2
SSDeep	24:ctbtOxQcSdYFM7zpkypU2yx9uPsV/s5scCZFl9qQvTNXS2/4ZBYOrZXcYS2NuvUj:GbtWhSdoM5J6qsTvlD5S/XLs6IMj

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.88 KB
MD5	9014f96e1c7d71bdeb36ef318d286d78
SHA1	991bde5523277368752f2db2fd3b2818ed487b88
SHA256	2dd9d1fcbcb3822b86db2c067646536ac0e361e46fe2783bc6313f6ea3f88b10
SSDeep	192:fow/JzBdgxG8f6wXmrF1k5KLACzpd24nhoQUyZyMeLZFWD49fRRUT:fbJzbgxGo6wXYF1kKMC9d24sWYmT

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Default.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.97 KB
MD5	e8ec4ec199d1f521b867daf1d508137d
SHA1	1541a60dbc76a8fd99127d717fcdfc6c2678e79c
SHA256	ca3d44ccf16da894b430b028ea068010ebdd577e7f82409ba23afba281ab3fbc
SSDeep	192:m1dI0KCYqmZtvyqV5FRGFxMhe8rQdi60aZNxwOKt6FSNl:mDGgqZRG4ApdVlNuOK6F4

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\DefaultBlackAndWhite.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.24 KB
MD5	6adcc37d5be1ab8f037e0aa8ca65f162
SHA1	d22a3f6b80d8299e5758bc5957b452ff3b8d4a2a
SHA256	d144f0189a7df2f5b705f8a86057201c90d1e4c90e09454da5805790265b2d6c
SSDeep	192:m1d0ZCuy2Xi/S69z7yM0y/2/0xFWD49L1rNuZxW5HhtN:mAouhXOu1/SWskZxW5zN

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Distinctive.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.35 KB
MD5	52133601fdee4e30b1e349a98ddad029
SHA1	b0de534644522d8d7a1025913e330702eba900bd
SHA256	88f3fc4053aa1611988c52a040103a2c5c7939ae172135e03753793e06bc8aed
SSDeep	192:fow0T7IwtwW8XekNjvjm8wgYNbbhYIAHM3sHrkjPJyIxxnIvfkYKAK:fC7I/1OIrwVb+ICbLgPJyI3nIvsB

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Elegant.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.54 KB
MD5	3d715f2da9366c2c8c8342282a234ab3
SHA1	f47653d328ae3ff7daffc6120aa56f620d82bcec
SHA256	ee1b826fc122e1e795d4e443a5d47eec2629800db6f46b743f8dde60ee4e4d01
SSDeep	192:NxXVJofdtMwp6JewEtAfNrRUcCjmnOn60NxwOuJHSyt75MH1:/FJofrMwpWeTtovUb6O60NuOuJH/2H1

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Formal.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.35 KB
MD5	f7b5fb91d42f50c24cbec0a153b7fca5
SHA1	69f09f9410746c5402344bc4c025e8b20a674fdc
SHA256	9a93d75f6dd946053a432440c112545084bf5e99a5a1b6bf19dfe01c1a2fbe59
SSDeep	192:ZymMCxdpYoakvYockh+dc++87L0scMYEXZ/q2uHpG8QO3hb:Xxr4jkhJK0sJXkLHpG5O3hb

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Perspective.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.72 KB
MD5	8d3df755d4447ef1727a82f8dd4b6f3b
SHA1	2fb0cd086a19ffd202f942f01f6166a572294317
SHA256	923f8a112553204d9d59abada894c597f9f91b94053ad763dd9124588066779e
SSDeep	384:UgUwvghIALebqOOOOWMlNzS0RL7GfX/re5n6ULpxHaM5fx5fV62Ou5Ky5Q9p:UgDvghIALWGzSuaS5nz/HaM5fx76K5Kd

C:\\Program Files\Microsoft Office\Office14\1033\QuickStyles\Traditional.dotx.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.48 KB
MD5	3a1159daf635131a3606466e9ba42994
SHA1	c836cb575468c0a9246d2dd6cc07a6670384ae3c
SHA256	b7a91542872d1eb001a7312ba2e3c7d6bb0c18ef1047ce3f3f4656685869cb42
SSDeep	192:0bq01d0ZCuTXp/XVyuS5T011s4Mn8ui7HmH4H2JL8GBEtmcAqowR:v0AouTXPEaa4MDiCY3DtVAq1

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\SignedManagedObjects.cer.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	656 bytes
MD5	0ca999f5583e5c51b74cfb1340e9db6d
SHA1	86888cc7209e9cd3da1939d1fc65ac60cef0e2f7
SHA256	ffa9941214459b065b1f544bb5830849ea2b056dc8cfb3a05ac18c450d1570a7
SSDeep	12:r10owRvdHQ4Y8qFxEBThZpBfKHstSTGSTOFeDNk4atJzMlg90SgqOwLu0NZBH:cvdw47xxf1tSnOexxgOSgqOwdNv

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	944 bytes
MD5	0dc2e5817c4497a57824d1d7c7df3964
SHA1	b24cdcbd46bd1729273c42043864e982b5397fb2
SHA256	2c7ea8642c5516b3af8e96d9a49ee6b179c5894dd12c1db177b44bc87f5f8e16
SSDeep	24:t5mSbqOPNozOu/OUhuZVG2CW72OkSLm9Jzfyoo:tAg+L/OUEU1E2g4fyoo

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	942 bytes
MD5	05b06bcfacb089aa5686f1a446c4c517
SHA1	0a16afb9b0da58c9976bb8e71a733f7f3c41f34e
SHA256	dc701711a0fe2a8420034d22f61468695f34f19121eba56087efe525a3388af3
SSDeep	24:pbjsqfF28lQseX6iYo4KIOGZ5GcpNaTlfyjYH24JH0ipz:dIYgIaOp0TcS2aUc

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	576 bytes
MD5	cc4583d37603f01b2355bf25c52234db
SHA1	3f8d93adb43f191e212dcc7486acbf6202e64269
SHA256	8e74ab5cf3e5a15d360a016094c46e32c02f753f0da02fb53174067399bac58e
SSDeep	12:F8F3u2PYUILIUIoGzyaJnni3rDgawuRa1iJV4L2e+6600bJJvT6ghy/T0p+V:YYUKILVih3a1iJV4L2363yqg0L0pq

C:\\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	907 bytes
MD5	56bafd8f70845c4549cb0de193355645
SHA1	c736d6ba501f8e6b2ff33f2c325d5e9699094ab3
SHA256	d1711b3f970ac56ccfd92cebd1cd3a3444671e173d286862ff0d4a32f553877f
SSDeep	24:PTnzFqfqXZCtQs/CYt0VssuU/mrXs5uW2FCmoYvrPRi88o:PTxF3sssXs5oFdZTRi8Z

C:\\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.75 KB
MD5	d7627d5d89733445f1ebdd67f2fef097
SHA1	6d643284622ef1068f86885834fc85acd65253bd
SHA256	60c900324a52c125a0e414aa7952f2b49102752931ba72a1ccd3256df6722804
SSDeep	768:L+hHL5FFsfvhKl8u+7wnMTRWzQnD04LtsbzME2WV:L+5taE8u+mMTRieD04xsbzM1+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.20 KB
MD5	f1ba4837762e8530c7be15dfb27b9dcf
SHA1	00c4edfd9df5415f843a80019501e871828e5622
SHA256	510701efabb5928c3e6df86c1f1e967bf98b15aa70a9ed39c4a5793f29ba985c
SSDeep	96:uzDURR8xReApYiQMFJuhVOHAPdOo/8qqOaOghWWrJoh0WtTV/Ur1:uzDURR8SaYBOHGdhMDOMWhGWtV8r1

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.30 KB
MD5	1ca09820988649a4c23f32e11998d5de
SHA1	b375a244b4bf9e92da160621626eaec8f3e81de9
SHA256	34a3cc13b13331e0aa7b30f2e703ca6bd4502198560d114bd3b4facc6212fb8b
SSDeep	24:XF54qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7gxRg4:XFYa0YLaGugHvCGdwdJsmS6kpxu4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.80 KB
MD5	e91780e12587509b118837371e983eee
SHA1	bc9f18db25d9039a55a2b3c61bd3a2504186aedf
SHA256	6def88809f500a042048be7a443911a3b690f37bbd5eb317823d431235d438f4
SSDeep	96:174EwOmZqEaBr8Vbewwgcjm3FUP4qrd2n0b/lKdLUulx:174EkqEa+beww/wid20B1ulx

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.30 KB
MD5	da4b127c5ed86ef9d5deeca1a853f838
SHA1	6e411ce04c23430d29b935823aeb9c5fefba3687
SHA256	17c8878aa9ef8b77faeca22ffb9f388638128d93d946c02c9c67fc0abc3ee8c9
SSDeep	48:6a0YLaGugHvCGdwdJsmS6kHsgz7tyWe7QCxEC9LcxSY:AmaGLHKGdwg0ss2y3UCxEM8SY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.35 KB
MD5	1a291129d2598733949dd35e72bf3f6a
SHA1	3fd75d62e6c343358788ba2c0f3e7733f78a2227
SHA256	fc8c25c6429b148b3a39fac90be937611866edef7bd8fea4d5d0364cbef7c16b
SSDeep	192:Csrq1HoTsETqvF2VMhvNPp5obEOTCr2r2r2r2rd21:CA0LEMF2Oh/q9G++++d21

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg.locked (Dropped File)
Mime Type	application/octet-stream
File Size	5.69 KB
MD5	b9f33f25a95b0c034afeed033d1b9359
SHA1	8f5ed6f17eeb47678ffc52468d587a8660a520c8
SHA256	8b17a6d113ad1b25ae3faced6cd252e141b140a25240c9ce06a865440715aa74
SSDeep	96:pzDUzqOdF9MyfUDGwvzZPNW+effSHN05ERwGmWVL4d10Ucusid8bXHelEK//zk:pzDUNFKHKwvzVeffcYEKGYJcuXkX+aK4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImagesMask.bmp.locked (Dropped File)
Mime Type	application/octet-stream
File Size	1.76 KB
MD5	3888e4c9179556119370694cc1c1d330
SHA1	58ee3f1ab86a04aaf8c38490861a24697eaa8369
SHA256	81129483938cf80ba98995851f560dc2be7f241b66de2eea4769177e7f93a0af
SSDeep	48:ga0YLaGugHvCGdwdJsmS6kkOafgVTYH/Os4:WmaGLHKGdwg0V7oTYH/j4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.51 KB
MD5	971b0baffff3f7780065c1f0a5beda00
SHA1	81de7f71846689e082ed54f161d2c3e13940b2da
SHA256	8b5c07fbd394f63fb09375f2b00b585216a2ce1de3ef2602bed3f54c9f19588d
SSDeep	192:xr42f+CG4jhgjbd+szUB2j36Sr2r2r2r2r+HiBQH7kZf:d/+CG41gj9zUEj36S++++ubk

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.52 KB
MD5	d41acabdf1fdc58bbf5f7f8e98f07911
SHA1	1700bcfcf4efa2d37364557316feb9c0cf229c33
SHA256	3cec942da9f29b2b5924e6a01a305a62838d2497fa2128ae6aa56fbfacc8c916
SSDeep	96:JmaGLHKGdwg0W8fcFD1a8fcRLeD8iToymRcgX6UDa62wAUDa6qS:JtGXKgBDF4DQYOYcopDpJ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.97 KB
MD5	18398ebb22a094068d30b8183c3682d7
SHA1	f051cf6a2739807e39b2f782ccf7e3a1eff3aac3
SHA256	97f1c8206c31e4e126c976d3336d608f75cefc418535ceeb0721dd654c84f31c
SSDeep	48:1AA/aUYZSHw5rLUGkR7cogLSdkFwgeFWhesSsMpjyMxoipw7ni8NnncapAyhC4:KAtY1itccZkMpOzEwni8Nnjph9

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	7a7f822dc88f91725d01ad9be1557da5
SHA1	774c82acd8a7a54bef8930fb3e1132cad8479d65
SHA256	547fc555d36a106a91c015ecfaa30681ac62230725f9e85c2a213660e9e399b6
SSDeep	24:x4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077k9d8BF/ERV7:Qa0YLaGugHvCGdwdJsmS6kb8cRV7

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	51.73 KB
MD5	94b5b8b56ea6f946100466231eba88d2
SHA1	8239696566d446439a08efe12f50236e0c8607f1
SHA256	7f8ccc76c4a380d401e9bef697477d0f17cd39b6cc77dfcdeff08e5edba34e71
SSDeep	768:p1x6A++RdrcM1dKxcdVdvoNUFUl2fLpqFN8c8vjMugO7E92Kt:J64cMdKqFUZ+A70YeED

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.74 KB
MD5	892cf394b3eda80fd59d2c37e29411f5
SHA1	99694e19a271584e5cc21cfb0a0d3ed6c246a964
SHA256	5120693b1800384decb8443f68f49a4b8aed789e043952a7e7c3e88424f2b5fc
SSDeep	48:wya0YLaGugHvCGdwdJsmS6ksE8O5Hks2ZRFVSVEhmqfPVR3ST2q5/R3dG:BmaGLHKGdwg0zS5EsIFVCW3stG

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.47 KB
MD5	23111310e15173997300a3b9d65f985c
SHA1	3ec30d89aa5a6e7f20c7e40d1bc134786e7a9016
SHA256	41da4fcdfb2677ed25ba3cf449e36b0c6b620ad8521d91ba679abd2203ae122b
SSDeep	192:Kr9dWm6m/zDA1ubL5MxnHar2r2r2r2rCac3D:uuC/zDA1WL5b++++eT

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	39a54419bc3549d59dbfdb4dd9aa7657
SHA1	38a55a818912e4edb0d33a76c139153c054a834f
SHA256	90c187112334aa18ccd84b612a77e182439aa5a134fada0fa87216f7105414b4
SSDeep	48:La0YLaGugHvCGdwdJsmS6k0fukOd9p/lrIqAK0AMSHcc4:xmaGLHKGdwg0lAVNrIi0cX4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	320 bytes
MD5	dd5bf344dbdcb7c9fe0debb98f51c0ca
SHA1	6fd1c81038b78352a9cba65a5167eb80bc3e1af6
SHA256	9689dffbe87a6758a6bed49f76b85d3517da0d8e96fab624d7f3c31db8d2a819
SSDeep	6:z+A05+GcsTg86qoHg75qECH5qECH5qE2OKF3vg9nZifzF/zzMAIMdMHqD+:z+A0l086qoHg759O59O59oF/UncfzFna

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.17 KB
MD5	efe198c62be8c180a5d4883c9d28217d
SHA1	71a524d81e736c78de1637cb99133def8c6ca2f5
SHA256	459f13f511f733e432944a3119adb4b12b3a3d98992c27a98b1f6b65bed9e08c
SSDeep	192:lGIKS/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rCEO9GYwfbXKPkLr:AIKI++++++++++++++C79GxOPQr

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	754 bytes
MD5	31a0ea8771f74496b0af77de8e68e08b
SHA1	d2f960f48239e693581bdfdb73d8f2c2de10b6ee
SHA256	59f64f969c6b1319cf482c728214ccfd3b8c39751fd75d8a4e5f513dbf2d48c4
SSDeep	12:wuqZDjtV35YgG9mIoBqlqOBO9sEEAiSbeZxnbZrIFTUzGPda+sDynH/1f0UQYMM9:wuGtV3+mVBqr6LT5bOnb1udaefV0UQc9

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	716 bytes
MD5	130d7b264354f8e9c5c5a4d3a0da170f
SHA1	1f3bee193bbfcc98442e927386516b10d21483ef
SHA256	dc42668fe1d3cde16a97e757880b6d27c1bf916aa394ec62e897cffe9e866c14
SSDeep	12:wuqZDjtrdwQsYuPWx+tly6ngRy0YEh2hXMa+wWmF/CAjDu2VNttgun:wuGtRwXcctly3ZrS7hxC/wHd

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	872 bytes
MD5	8d59abda55d71873096f186e1965940d
SHA1	3c59c1e5461529b88d19c1670b255e41c7d147f3
SHA256	0b8cce112d157f0e664d361723bfd2b4dbcd2da68e5420e06a162f80fa9c49d8
SSDeep	12:wuqZDjtRUHyx8tQ9rQYBTS8HLdEL96/HYaCKa1R23AGu4HmrUJ0uBsWDN+mC9oZp:wuGteH28tcMYXc6ZCKawAQGrUN1DMAp

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	0578937c6b8d1908e76c76da334e5364
SHA1	7ccb51a283f99b8f6540ce1f6149e858351cb968
SHA256	92adf65f49eeb0140b8629baafc8e88027413e543813e07296f461f58307e6a9
SSDeep	24:wuGtqknRnkNmyxAZcaZ6rdol6chUeZIkqhjPT9T+bR:nTIkS7kd+6he+kqhjPB8R

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.50 KB
MD5	0759620f84032144c9861f4411cfcc89
SHA1	30b055dd7f38e72b28f8c6c22f0dccb78a1b09b1
SHA256	180655e9a2fa51e3271fd5469a31873a9c6d1a0a72f0658bae9e183537835003
SSDeep	384:SacAEzDt1z4TYM0PEiDC1mDFAgZGmrF2vdQMCxDF7aJg5U+FczgxO:SPlzD7z4TYXskFTGmrF2uMCxFau5pSc0

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.03 KB
MD5	d1ac4c28292da378920423e62f85f667
SHA1	eed6291990247f252d00aab1e6dfeec177984226
SHA256	213ab4ddc12944efffc1465984a72368d37c1928deca54d28266c2a313ae0d6e
SSDeep	48:uAA/aUYZSHw5y1XLMj148pEWvMPXHrS3PbJRv/IWbIcYhrKK3dvBPKpPSsp5Tuz:ZAtY1oedUvrkRvQWbIHUOvZ+J5Cz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.80 KB
MD5	28ef3efa3c17c72fb7cc662ad57d3c2b
SHA1	3cf81622a55f31fbcd80390183f180c5aba295ab
SHA256	c1ae975e96a4ce2a73c36e47edcc93b6ec97790de858ff9b9954a622c9d20e1a
SSDeep	96:GmaGLHKGdwg07jx0ayU+xp8MVh9ZpRokMiUsx74:GtGXKg64LhRjoxXsK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.35 KB
MD5	9d60465b62a5133e03180487aa12dafe
SHA1	eaf42661297de9f8aaef5e0cd06c0cfe9173f58f
SHA256	cf9cc104412710eff18c8053cb38c01cd21720aff7869b4df34a00aad8024c27
SSDeep	192:6iY4g8JWMZW2gBHUbtBhuPQ9Rsl+Jclo6KnU:JY2X72CtBhGQ9etlo6h

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.30 KB
MD5	5f8d140f9cb00f1dda625b9147bec8b9
SHA1	ee6856ca6faf26a41f8217ac87114a2fc9beeea7
SHA256	ea102cc6a90dfee90bb52f8938cc7c92dcc9caeb250c157628c2a321de7c5b80
SSDeep	192:cGtfemdeIWircOXMG80W0NnfKMCYkSNBqCVNtv:c/c84xNniMCYk+BhV7v

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	89011a9c5f9b154ca6a0d9f1c14491f7
SHA1	2be460a683502e1031626a35fa04fe0372894e7b
SHA256	9cc3b180820f4b5e531c5fa526b25576a541a55a1183a54a3423193058aaf8de
SSDeep	48:Qa0YLaGugHvCGdwdJsmS6kZAaZGdDqzxrfpemu5NZi:GmaGLHKGdwg02AaZwDaxrEmIni

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.80 KB
MD5	fe904f72641336d3ba7ee3037201112b
SHA1	7dbf81e4ced77504a74d069e5bf72c41c496ecad
SHA256	750aee5403a5e9395c908bdd57de1dfa9472435d1456aa5aedb6f206815a2c79
SSDeep	48:V/W7dGaQcDvBwKd+uMfR0rg4GLHW1UrGqwWr2sHC1d7zoRuXG+lVKM4:0dhtd+/0rg4HSrGqwWrEltlwM4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.50 KB
MD5	c8b4bcffec24f231799f3f6a9b01228e
SHA1	8ed949e70046ade7925fc864195879087ecb8617
SHA256	2c7ea3c4725d14114ba6473f6e661f6bb83a0734f883ba91e5adcb5f758d5a57
SSDeep	192:hprpGmMWvzqvroNl11IdbELWCr2r2r2r2rd33mN:DwX1tdgr++++de

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	91b02192e45c665f75681ca1771faaf9
SHA1	0f93025493b0eb77c661654bf46263df3f28fb81
SHA256	3d97816ae98f283bd44d32fade0c04ed4742e6498ae44f39e033a9ef1b072b01
SSDeep	48:Xa0YLaGugHvCGdwdJsmS6kXAmaG9P4njVB4jKd/F:dmaGLHKGdwg0zmaG98wWdN

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.05 KB
MD5	61487ad235612110ad9c04f5d09c66e8
SHA1	6c1b689bc97610ce0b1a681c64f12639d0cfc11b
SHA256	9923cf258dbdfa45e05283754337a02666786c2e78eb528dda33ed4f82dc0c44
SSDeep	384:gSzf0h44EvuiDMSYJTbeyehyg3RXTvP8FNrE4MN/HHJScmoHW:gvrKMSobpehyqJHoNr0JSPCW

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.30 KB
MD5	676f4f692d6dd45536f78b4417a1de97
SHA1	94f73c1b7f4283ad7bb01347c204fc0d1ca7fdc1
SHA256	6740b28feebce72013b4895ba21f20ffab9f335083497d169d9a9e386962d371
SSDeep	96:iVmaGLHKGdwg0L+bxPu8icZVmkegn4yAiGSFq2EnbvSsx874:KtGXKgk+FWz0/n4yASk5fv

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.40 KB
MD5	9fa41bfa126e37736daf347200d6bb0c
SHA1	f5326f4a39b5e1ea9707e5ce610cc01c0786eabd
SHA256	0fa1cd2fbf0d4d821747485ca0cc308c348bbb815d4dafcffb9c0b279f780360
SSDeep	192:szDULO8S/YpTYMJNmAPERrAWIOLMe9VCDwNU4yn6:szDULhBkMSZR+OLMe9VAwzyn6

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImagesMask16x16.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	6dc1f8fc555cc4ae7d9e76a990263b48
SHA1	fd359e36b9fc96c0ffcee0415a5492e865ef9dea
SHA256	0bd5a05767f5bac5d16037d5ba0b6082362bb47c7d48feaabc13de562866ce6f
SSDeep	48:nya0YLaGugHvCGdwdJsmS6klJ9c5LIPiIjKABwdcV7r1:omaGLHKGdwg0qJ9c5svhr1

C:\\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	63d43fe6e4f696af859c3ce7a6f5047b
SHA1	df795916c3ac64cc5f6542e0d56c68a8f5d5d142
SHA256	e69042500e905266f5077e3e2b64d13fb19288e17237e6c26f9c623243c48582
SSDeep	48:xa0YLaGugHvCGdwdJsmS6kX5vYuuBf2NMd4:/maGLHKGdwg0pEMd4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.04 KB
MD5	f775dcb8cd53138146c479a62adcb684
SHA1	7dcf7c7c19bdbd421e5f27058e2a32a2fa285ec4
SHA256	bae83d4574b162c23adfa050a96d579806cd5dfdcdf9ace3a3ab17ec4c9eb73e
SSDeep	192:NYpbtQdNHyP/iYLYWzjrlz8SJ0r9qNCZ8OqY1zZVYrSjqQqw43MAtV8r3OD2p0F7:wQdoyYvzvlIO05G+q09VYeq3cuUeDoSP

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.91 KB
MD5	524eb544ed6c32a9d4e01e9e6470ab88
SHA1	8a72bb86c9dc030aee5bc9cbdc6053c2bfec1a80
SHA256	d3c34a3bb4c23d239a0075cb16d7d0c5c848cd582dd192d0e21c47b053a6e2f0
SSDeep	384:CzDUeL5ZfZwbwixXBtvzVo0YEMUgSZZphSQLbvhX6LdTtiZHr3:CzDl5ZfK7FrvzVIhSZbvnscL3

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.82 KB
MD5	d37c8b898fe2434b82b24ffef6561bdf
SHA1	ceb6af4a0bb5c157833c8e4048c4980429712583
SHA256	11cf2636a3e406dbe4d5cf8f9730dc94bef780f4cf70becb7574ab16899e9078
SSDeep	192:SzDUym8SOtebTaRnBOHGdhMDOMWh+tV8rHQ1Oc6vIq:SzDUyJFnBOHFOwUHQ1kr

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.83 KB
MD5	a44a5cf8fee59eefdce4015360fcc37d
SHA1	ca0d2b360878419969848d37d145cd79793fd24f
SHA256	499eeafac989cb20ddfb3c5ec5295b66fb0e8bdb29fc834f894c0e883f4bb55f
SSDeep	192:VrUqBUUvvAfGhnyYGUqzlkNStt5RfBBbE2jCr2r2r2r2rdrdgw6p7:ZRUABkbt5RfLxW++++drdgwy7

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	03ffd6ee84b9179735fe1abbdfd74941
SHA1	26029b458a422aedc5d9f3ea322d08dfbb3c5a49
SHA256	178b48431658693c5b38f2088276d0e9a655a29cf20cc56d9e197ee1ae4d5416
SSDeep	96:LXmaGLHKGdwg06QUrrrrrrrrrrrrrrrrrrd4:btGXKgzrrrrrrrrrrrrrrrrrru

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.87 KB
MD5	5d64968a53c050c4cabee559bc17203c
SHA1	eb6ac515da6ca4188935715cf81192d7de546c29
SHA256	e99ffcb82d736fc5f703dcca0d45d5382276e0cf5a3dc0fbfdebff27cce15825
SSDeep	192:lIrFqyUvvAfrhG4YQZPIA2GqYmpdHnyYGvj3r2r2r2r2rZlsVpbYuNed3FGl:SPA+hG4YQZPIAnepCb++++hx1Gl

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	32059dcb62b57eac4e69db7e11885129
SHA1	77caf2585ac33a1b80fbe555307e82c3e7db5286
SHA256	86409f6b83427749746428c6d7d6d54bd60b95b893cf3db0405cbe73c29d915e
SSDeep	192:btGXKgprrrrrrrrrrrrrrrrrrrrrrrrrru:btGdrrrrrrrrrrrrrrrrrrrrrrrrrru

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.01 KB
MD5	ee68eba49654054319d0b7fe97c92690
SHA1	4ef68388bd174ded4e9edd710aa9d1caeedcb48c
SHA256	d08d1d8524c0136fafe70693ce30e121414db082c53db005bc85ce0f9132a25a
SSDeep	384:IIg++++++++++++++HsaBXsnYCXadZAT7fXM:IIg++++++++++++++flsPTXM

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	9d30d92533fe149cbbe9cc5ed988f570
SHA1	6c700eabccf79090d82a9deed72b6a9d2cdd6992
SHA256	5a79efe2d77fadd8c638ae39611cc4365d74763c7938c4a3890344dec3cf72bd
SSDeep	24:2T9xs7Q8K7Q8wQ9Q9Q9Q9Q9Q9Q9Q9Q9Q9QTooooooooooooooooO:2BxsUjUBGGGGGGGGGGV

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	f2fb4fe3bc388ede08683df66323c94e
SHA1	9fef83f42532348d330b2392f1db696875e2b891
SHA256	6f3df0a4473f39b72ff3d4faf8d405d38cfeb46dd5317810df52d8c25aeb7552
SSDeep	24:2T9xsuoooooooooooooooooooooooooooO:2Bxsc

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.95 KB
MD5	7041ee8007e99ca1870edf81460cb3d2
SHA1	e73ec600b722392376364621587e7f519f62e01f
SHA256	338c9c9a54e40acf1e5e5bdb4c68cc69910660ed847aaadf90f3eeef7870abe5
SSDeep	96:iNZ+UumjK03Iwut04refPw2rxU2Q57oZeTW0y7I52PsgUmLgilR:ij+Mjt4wutZ6fPr3g3ykMgmLgkR

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.11 KB
MD5	15f87cfc980436fc5d496fc8ca011d34
SHA1	e146341e814bbb16235babcb1b3542ceed8eba0c
SHA256	b06aa3d710682c1a7b9b8ffbf3153bc5396f07d1c60b7d991dbfae171243d7c5
SSDeep	12:FkT9ueqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqB:2T9OvavIaaaaaaaaaLoooooooo+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.47 KB
MD5	06136ff17ce11b9766ba17913474fcc6
SHA1	c84ddcc088fbe2da78934163ca22ca70574e90e9
SHA256	277247f25af89a8cdb6f53df167fd6987a5607f6ef20e695369a72670816e8f5
SSDeep	192:9GIq9/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rkv7bQZr8wcIJF/XDO/oRGs88:IIql++++++++++++++VZr1cIJFUo/88

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp.locked (Dropped File)
Mime Type	application/octet-stream
File Size	7.11 KB
MD5	4bbadf0c41c706dfb5cc754845c06817
SHA1	35d292ad0f7c694062244497922f3c4869c0cc74
SHA256	21cb37813d6f58867ed503e475160f4cc75a86bd697dea139659cc47c67f4410
SSDeep	24:2T9+7W7GaaaaaaaaaaaaaaaaaaaLoooooooo+:2BK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.62 KB
MD5	1e4834b80a4e66b8662deb8f66ad314f
SHA1	5f47308a08999b703fc1e4f1dacec5d558e45447
SHA256	27cbc753554c2d3392e9935e1bb04600209be0414705444780d21610540112e8
SSDeep	192:9GIJ/r2r2r2r2r2r2r2r2r2r2r2r2r2r2rfLRzSA0fFihoy3LqKn:IIx++++++++++++++DRzH0P0qK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.58 KB
MD5	ead21d7e8437c1c6f7f1596e6cbf3e6d
SHA1	a048104aa08b8d61cfbaf14888cfbfee1683c7d7
SHA256	3699593c552a7aa04a5c844ae92a87aefc3e3d2a9a414b0777552863a41d6ad3
SSDeep	192:PYlmtFrdQfG56WHOC7Mn12PeN6jxb9DvrCc1kGNn:vFr+fdWZS1/K9j2c1LNn

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.46 KB
MD5	9f4f6c86f5c90184d6f76a18e18b20c5
SHA1	2eaaffdc45d697f8fdc4f1aa1332be55c7e24cd6
SHA256	98bfdf70ed1865d1a9f3285a75305ab1f1735d12af9ae19e4d3f80d36d404433
SSDeep	48:0Yea0YLaGugHvCGdwdJsmS6kIIuwqeG/0eidB4:0LmaGLHKGdwg0muReG/0eidB4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.55 KB
MD5	62e44d10e3604c0afaa6c6f2016051e3
SHA1	ea045c9970391218b6bcbb5edf5d1abb995cfdd5
SHA256	b66567e695b89814ec31ddfcf785d71dc67c6f2d75dd808a3b6d334f293bc54a
SSDeep	24:e64qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7T28W/Au/zTlU7:ca0YLaGugHvCGdwdJsmS6kzAeziJQlY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.69 KB
MD5	a0bb209fedbf194403ac652325918ea4
SHA1	bc4bd1ef6073598d67ed01b29f3eb3c77a84531a
SHA256	5b6128735a01f6e5d41157c4dfb9fc3929df7dd44cfcd3ba1fdfd25d81efc8ee
SSDeep	192:GYlmtTW7BfO56WHNC7MnxXu2PeN6jxb94vrTc1YtsIbT:eTW7Bf1WISxe/K983c1YtsIv

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.46 KB
MD5	fd5b809dd93cb567eee1d1499e08b7e0
SHA1	b5a59d1278bd6083a2418df619d21239571a56fe
SHA256	941c319f6ec0c8da73cbb06b000c2b764ef64f5a39e5acf3841817f8dc9093ef
SSDeep	24:0YiOpT4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7TTTTTTTTS:0Yea0YLaGugHvCGdwdJsmS6kMHHHH9X4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.46 KB
MD5	d03f2b460eb25ec48ee460d5d03e740e
SHA1	79b0d8df6b487a71678c6ec7e6ccf8e880b7b4ce
SHA256	2d7dd213313bfd5190c7d6ab81082165c65d7071d7dda880946fdeb16a275f75
SSDeep	192:crf/bTzDULUCI7IcPCL8OKr2r2r2r2roBl:wfzDUlISm++++o3

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.98 KB
MD5	fa402a0874fe4696c221f2e7482dc6b9
SHA1	44db3a60bdff5c775c737ec696d98a4a26464c3f
SHA256	3988232eb4dc03e7592726d22c40c491a5b7a944ec1b2ebaf93c146c42b76a1e
SSDeep	96:SYkbKtHtcX86qg99LXzEHmrjWTlWI+58xReAvkVSxTQGMKnapOzRfTu:SYqKtN686qg9tXzdrIF+58SEkVSdE

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	b04e65ce928355b2ffbb282bdc28f4a8
SHA1	7aa68feda2d749453cdee57a6156a4bdf16fe6a8
SHA256	48b4b046ef41e8f3debfb7c52e980dc3412ad0116c623e9ed2fc29d607980459
SSDeep	24:/SI4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kE7TTWxTcvTlEp1:/SDa0YLaGugHvCGdwdJsmS6kR+USO

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.53 KB
MD5	4441fd63422e99b9f0ff13936916075a
SHA1	df0f5ed6db0dd6abe3db2c0dab71af4cda221fc8
SHA256	415803df1845b291e58d8c9bfce91d5487700b8301080a171da7137b820db7c9
SSDeep	96:GAtYzjLm2OdJ/BBA77OCSNuL9tTV/Urk3e86HoW+Ctc0B:GiYTjoJ/cosxtV8rh86HoWVtcc

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.05 KB
MD5	fdf780b1b2f79b533a7118548c004870
SHA1	15a6c80327e31b0c857fca9a18d557ca3e8b7457
SHA256	c63dbe23cc49d9b6830499f5dc27566ff17db4883e29f6f3e5d10512acd244a4
SSDeep	48:La0YLaGugHvCGdwdJsmS6ktDTexpDwH1uQhMszO07SJ4:xmaGLHKGdwg0CDTexpDw7hXp7u4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.80 KB
MD5	8597d95fc3add30f3ecc81f7284e15ce
SHA1	5368c28046b724429be62a393d224d3f7af4dcb0
SHA256	89030c6cf31b55807d96ec7ad81e8e5a34985a3480e3459d68b17be8440c04d9
SSDeep	96:amaGLHKGdwg0+IDstYGw1bxlx/WbRGWwoqVqw7H5+vRucTN5mOS+A1W6vDdWSeYb:atGXKgTIyYGw9fx/BVVj5+vRucTN5mdD

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.23 KB
MD5	65992ab4242472b0b979de2ebeda0be5
SHA1	d6e2fa65922a2ed2b3e297fc1db2c96f53a66da2
SHA256	bb85cf4bebb571ba511fb03e37a8e6c7ebd51e0368093de1eae9aae1b7b3027d
SSDeep	192:TrueKAK645vjIAbyxr2r2r2r2rZlMpbYa:fVK645vjIAbM++++ba

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.16 KB
MD5	4fba3c56ea65d9def8672a8b15bab4d7
SHA1	d9f2c07a8099d5cd79666cef9f183183574b13b8
SHA256	17e16f5341368c4e2c22842c742c321d3074014bd74168c1c6203a707240bb35
SSDeep	24:p6Cs4qiWz0BmLaGed7gHukabD6vxDdJK2wfnh8GuLzz+SNN077kJ88888888888d:0ya0YLaGugHvCGdwdJsmS6k1LF4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.39 KB
MD5	251836ad593ab47549dd717c6bfb30c0
SHA1	ac70f25d85bb1860f840af28c3cb6d8553c176cf
SHA256	10cc0f814288129c39f93393ff9b24445ad93bec0bb187740775f506056038ec
SSDeep	48:gYAA/aUYZSHw5rx4kCkR7cogLlvKldkjTIWEllnmhrKK3vdZhUYn:gPAtY1lptcMlisWymUG/UYn

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg.locked (Dropped File)
Mime Type	application/octet-stream
File Size	2.98 KB
MD5	028edb0a3027508bcab102486468e135
SHA1	10aafeacc094324dcd91aa813dae365ed746b213
SHA256	62766086cf4a0a79900728754b9da878345c4d8217a70752f40511847923fc34
SSDeep	48:7xbN7W+PjRphDQ20Pxy4G3R7cogLgl2bIacLu6hrKK3Of1A/bFb1+drGYVs:7xZCYjtYAtc62VKhUFA/hcdre

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrowMask.bmp.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp.locked (Dropped File)
Mime Type	application/octet-stream
File Size	2.29 KB
MD5	138558d77cefba0c1c22e35d9d7814ee
SHA1	81646c2632c4ac9d815a0b5382e7e24a6cd167dd
SHA256	f2204180a06cefbf3187bdf882e6489fd1f8ae653858602d08965ae787c3021c
SSDeep	48:7a0YLaGugHvCGdwdJsmS6kTnp1EqD1m5vVbEeqg5Ondln:hmaGLHKGdwg0enEdbEAYnnn

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	2.73 KB
MD5	85d8a1a167dad106c2290d2cb3f036a0
SHA1	2ca412615eb235c45c385b1ddd7fc3f72dd6c757
SHA256	a7dd396fb6e3c7fe03309faede69c62cc967769626504792af9bf47d82117132
SSDeep	48:MOHBl1lIdoS2KU7HAmKhM3yRwGfNq7Iee/RBVMO9Iw/OjyyL:LlX+12RLKhM6f4Rc6O9I4U

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePage.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.43 KB
MD5	db28122c31fe4eb15e7b57beb848f9b7
SHA1	7d393f7f62555933de952ba85b1bab1b74c515c8
SHA256	141e2054fbb9816ac2587fee535d05da96c32521acd9d5e48f34afebb032f98f
SSDeep	768:YZhwnJiHIytNWqUk/dAvWUmSdeD4TZDI0Jz7BwZEV5yUZkS5nEKkYV6xaL76yjVL:YZgqIUNWqUk1AvL5dem80JB8wNV6xo6m

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePageBlank.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	19.68 KB
MD5	1b5e57e7099a80c59b01089866c23bec
SHA1	74af260232ed70d2194e0df4738dce691b94e7a0
SHA256	1b46253f6c8b26602d3a0e54b9626b6a1b7eda6ff8f9807d3d900e92026cfc5f
SSDeep	384:T4yWd6SfqXb9GJakpqPHNS6L65mM7qYOvis0TczpGVHdVioUE1/JlJ4LSJ:0yUmXb4JzpqfG8AP99TcVGpdVOEbJ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	630 bytes
MD5	42be203cb9ba426c521e46bf51b0b852
SHA1	dbcdd4a69b4e033b8de55a46c6781277ac2414f7
SHA256	9ac0510991558bc99181217525b35d98c59e1a83d909b28d6d969a347c79a35d
SSDeep	12:460m3VYEmHrU4zRH3e4g2z5axgBeMbWpqDdiS+6C/vWH3MkkExVAeoN:XYEmH44zBng20xg03yiSi+ZBEeo

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	185 bytes
MD5	20529dfd943c507415d2dab3841d73b9
SHA1	400f205615a2f2e31daf0cc603749d0f400cd39d
SHA256	9655c8fa9cc5dddeeceb4849ee62a5bad74e8a31484ea9b856d73cf2893f8eac
SSDeep	3:/8MtrJoV03zRn0szwvZccpLUfIUa7qcqDqDrFDiFc0tcg2FccgddXEENlM0Y+1i5:/dtrJ+0jR0sUWILGW7LqDqDdiFBtcjg8

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	622 bytes
MD5	9df75d298534bdd3f3dde4c87404a7ba
SHA1	0cbb2d74763fd103e2a8494b23f6843a7c2ceb6a
SHA256	cdf10f07cf09e38d959b6c07236d9b3f5baab9572824c142a536a56298030d29
SSDeep	12:460FWOc04UF/nuTiB1rn6ptT6qDqDqDqDqDqDqDdifAYo6OZdwRIMl8iQsl71ruZ:VdOFNBxn2Fzif+62dwCfiva

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	225 bytes
MD5	74eecf1af6d702dbfb7849a88651152e
SHA1	3e432fbaf9c536bd6788af371b8b8856008b2da8
SHA256	9c470569bafa18397d53bc3b160755e4610e37f146c696d17771881d227edc08
SSDeep	6:ET6GjRbxKvYNKb4v9m4y9d6qDdiFYJ6gu1C3Xu782prV7Kdx:460RIvcvRyf6qDdiS6ghuI2fGx

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.03 KB
MD5	7619c1f19da8f75c7da0427c372080d4
SHA1	a956aa393cd2d4fb2e0ccc495ae5c97cbc6aa013
SHA256	a0141473979fe2e86e831fd8e200c36f34dbd7974685ac936da72c803a22e17a
SSDeep	24:wr4tFwkk4UttMd8a1XWW/0WH98iVvkQ6CtUl08ie:44tFw54Uttsl1Xn/025VsQOlD

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.64 KB
MD5	813a3f5a496197526006d1c3ebd01182
SHA1	6ec7fd2925fd6d4b00ecc554477fa63fdd046de8
SHA256	fdff055bf3e86087a44a01864b6ba7902188be0f827faebe20d5bd29c3e1c427
SSDeep	384:Ers6nRT/zDUwbQs6nRLd++++T77777K+VOAmEsjyz:EzZzD1bmNd++++6Xn2z

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.71 KB
MD5	bcc0ba1da281d8415a678f19480c9abf
SHA1	af8b8ca967f3bad70f2a8b123a79fb4ceedeedbb
SHA256	c20f21d58723c0ded83c47175eecab9b7d2a89d6bd42f630af08b89ce3fc1453
SSDeep	192:mr0Z/bLRHXbyEbGqgRrzyrSLR8ScWOAYwbr2r2r2r2rCa/4y0Tk/cvc6N+NpP:C+bxbyihwzuSusQm++++d30A/cvXN6pP

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.29 KB
MD5	3550f5f7dc91e0406e06913cb092a776
SHA1	70c6729e492e7f3c852a35c59c3b701b2603f3fd
SHA256	6aaae72bdf065b52d85392bc02a9d754cca36157ef3088776246b830e3cbc466
SSDeep	384:gogsBQ4YqVXZsh8++++YRSIbQWrFJZjWwjrz:gseIZs2++++Y3VQKz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.17 KB
MD5	856cdc570cc36da35b4dc9efd4e6c7d2
SHA1	c97fd67137376b765f9a0e878a262efe8a3f0003
SHA256	2683f2ec01f12278fc952207d6a016df9a980208feaf58af9ebc9877d358f608
SSDeep	24:j8MuYSfKxsHceo8LRuV++mkJGiHY/flzz8XJbX454D5YcyvSehEE:IMtw8TCRA++mUGYY3Fz85D454CSez

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.91 KB
MD5	4601eada8c3f79a9649825045185a9bb
SHA1	ba3c11e92e86bb584816a507e0ea97ff56e50bdc
SHA256	27f3e503fb21658819048f90384bc4c324b3614d7ca6b62ef4fc5e7cda0f8e9b
SSDeep	48:J9V8TCRA++mUGYY3Fz8RE/McoGRkCKEkUQk/Fe2X6P2r/o:J92T8A++dGXFz8uMLojfK2Xu2ro

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.00 KB
MD5	223f5acf7fab9e937b29d41fea290507
SHA1	d6c534cc2ce72f83687636041227393e879805d3
SHA256	5361058300434abf428f325d70cfad3efe47bf9e18b096ddecaefcdac847b6c4
SSDeep	48:J9V8TCRA++mUGYY3Fz8RE/McoGRkuCb0QV94SwH+O:J92T8A++dGXFz8uMLoab0Q/i+O

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.15 KB
MD5	c21f7666423a0606b14fb6a8ddc522ca
SHA1	3c48f7eb4e695327db21e9ba5dbfcd92cd82aa72
SHA256	ab36cf555999c96948d4b2ccedf9ffbbada8dc31eae33068b7cfe79e2d7cc790
SSDeep	48:yB9fgdJdDBE/d8dGOFdFwz7e292DcR8thnY9c2fGgruwZZk+vE0/aLJ5P7fb:s9fgscGeQnkD5nY9ZrZZXgzrb

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.50 KB
MD5	4b0d1e3507ec95431e73291c91bb17bc
SHA1	0e4a5ead9a2570e7ad467e24e34b6d1e3cac2532
SHA256	88b4726136390c2d6f9a0a3dd568d4a99465e9c92b03e7bb2ee9af4981515c1f
SSDeep	96:dEW7KG0eOOoJjdVfwM5/t2fgBeaz2TGbVT+BgSK/OOkwOOA0H8ZOCIdmvsv+iTdW:97CeBoeM/t2GeG2TGZT48OOhOOAC8ZOs

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.01 KB
MD5	31d2db0b74325d4a6386f5c4aebfbcde
SHA1	281cefa8f9a7a121d38b9191707a2d77e3f3718f
SHA256	065e36928ced6e5f573817dea9c8ac7fb7a17743ea0c51dfeb706d7175bfda48
SSDeep	24:av/PWncztaH6FmEbGO18O9F3DPGAyBnz9UYGSBmha0R5:aXPkcZaaFmEbn8HfBnz9Uz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	610 bytes
MD5	fe4d05fb5f7f6c9b33b43e0c7640c900
SHA1	d52e8e4dbf5ea26b9c22681afe37ab1d2e2358d5
SHA256	b984d24bfb6b1ab181e33e89ac5a7e9e86d32e1f19bb66f32e33008efee8f603
SSDeep	12:NlKtbQbnp9d18+vFrBTM3d8SHxsysntLS4X/3ez1Kgc/SIeBQ6gJQG/:PKtoO+vF23d8SHGjdXOK5/SIeBQBQg

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.15 KB
MD5	186b4443a0a917129d0daac50e1ad0ac
SHA1	13a8868cac14f4cb54ffedc16dce253bf84c37ec
SHA256	bf0371c6e153260f4bccfa734121d052ac160a5969e7a5b8d6a7b4a53c4f69ed
SSDeep	96:VzDUxDG8xReAY4r3TYvUJNki3QAPEYZmrAW5+As6ZsfsMecUugil:VzDUxDG8SyTYMJNmAPERrAWIOLMePhil

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	826 bytes
MD5	7da0fa3cf77870dad87081de594d5759
SHA1	6c2572dc8edd439e31dc70de37ef9715360a37c6
SHA256	ee0fa208c93de84f5c0edb7c6fb2d0f12b61cfb029bbbef0f1802d0c01782bf5
SSDeep	12:gKJaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d6y7x3X:cIWSmSfvFmvVbJXF3I17yHI4SVW8bbE8

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	84 bytes
MD5	8fdd069f65969c713def151760419387
SHA1	9b3c6e0b713176660315f9361cfb5c0116c2d844
SHA256	3df102eb6bb2ea61a60d8c3ed3026fa318ac26e16ac7721131a61dcb668c0619
SSDeep	3:T7X3ennfOHN/b738hBe46XH+bKKEOOD7d1TuQTXeG7v:u2NT736eHuuKnyhTOov

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg.locked (Dropped File)
Mime Type	application/octet-stream
File Size	3.37 KB
MD5	56d5c11f7dc14f43028efb12116d5ac0
SHA1	0fbc72870fde592e309f663d3daaa3a1105994c5
SHA256	001581354729c7c8e2571433e06da5f5f38dc6f378836d707429fef1e7f189b9
SSDeep	48:bxbN7W+PjYkGZmUMjM48pEWvTwO4BRkc2hrKK3UlrRcEpuON6mjR:bxZCYj4dLfiqhUD9RcE7cm9

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	206 bytes
MD5	604944a463bc47b64abf5774b9a88ad9
SHA1	1617b9d4d9500bdc78e64492ac5a9bf90e3300a2
SHA256	209a895d41605eea361288260d60f34700a02f59948135880a7ad19a20941a04
SSDeep	3:T7X3ennfOHN/b738hBe46hFWWY2GkskdAKZo5j5g+z5gBnczqU03CjArwKKLeZA:u2NT736eHh0WY8dAKZklP+Bncq0kcaZA

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePage.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	89.93 KB
MD5	ae02caf6a552accd80f70f383e2ab76a
SHA1	2e8b078b35ff072b7c8ea9026562bbf58c9844c9
SHA256	731766adb82023ede7e73b80c5678defbb4cdbf9b6e6bc168585b8862593fe8c
SSDeep	1536:bxCoes4dXOB1rp1SN/dVDWFm6uZxIVv0FKkHlgqHhCOGX/87fVi:bwoes4V0FPSN/uFl4UunlfH487I

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.01 KB
MD5	1db89a1838320abec2a56bf8ad3cac3e
SHA1	d81247246a30edbe39256a17616afae5e083510b
SHA256	4941df9bdefa53e55ca958eb16bcf580d7d46e809f6b4afbe5e5bd4bc5f13ae2
SSDeep	24:kL+Y7Ly1A/Jk0klwQGzi41ZRbzsWorg3uhhNnHMZKRgw3:bYi1QJkJ+/RHsN/xnH5l3

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right_over.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	580 bytes
MD5	ae1b3e80fa9d52cb9422f52c1c51e074
SHA1	2852a05ee7d2aee1d9da59efa4ee4db12c65172e
SHA256	554b58addf19170f56954de9c7049bc4cd0ba35c2ae6bd2dc813b568a8b5cfcb
SSDeep	12:460donjw1kxBMMEmblJXj206qDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqg:eojw1gPblJqhiBuw

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.08 KB
MD5	133bb0ba67e113c2037fac2817546de4
SHA1	05a5c3983ed38ea11ec46ed29310f64224a4db16
SHA256	756fc901d84469a54d37771938794124097fbdf85d2457ba6599f33a0bf9cac9
SSDeep	48:csqTrnDbcJv+obz1N7z6EBwwwf3Qq4cli1oUjwf3Q+7eU5o2E+Qij4A:lyD4JvLV2mK4DAz5oSNb

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	749 bytes
MD5	bb7928b15b5124c26227b26162624b5d
SHA1	a314e6a86edcfcf54b3e94b3c2f557e50ed53260
SHA256	ebfb10d8597571f93ed07b115cfd7f69d5713b363f475d20a96e7fe0dbebb1fc
SSDeep	12:FF+yFhuDoMuA4dilRaALXUwBPzeqFPbnWu/xRH2S2mC8aWg/ZSKbb:f1uDN54dEeYrlFDWu/xh2Dm/ax/vb

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.14 KB
MD5	2678aa72542100e75f919a7876b0a40b
SHA1	7de2016c37694547edbc794e7db43f4ff7aa7e91
SHA256	1192eb2cff7994bfc2b2c6c88737ed05f1b94c47a6c1f57a65bad59e2900e79f
SSDeep	48:csqTrnDWBChzg0WTjhgeXme2+h+L78ZT+G5Iiy+IeEgl09afEPCprYq+:lyDDh8BTj1meN+8NXiLe4916prJ+

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsMacroTemplate.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.08 KB
MD5	3db9dfc8db7d453974a1b346ec2120b9
SHA1	47993f8f636693394c6982a0a92eede259c4f336
SHA256	cf66a94370fe139221b5ce0530a82e6700fe9595e41a2d8612474c6b922e9246
SSDeep	48:csqTrnDWSLxIx10L2Czb/kYEKcIlBPfYLpv:lyDM3sPmKxfYN

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.75 KB
MD5	de79b4b2fb7cbbfbcc8d00c098d6e025
SHA1	5576f05890c7ae8196ae4717158ec277b01520c0
SHA256	d53c7e7f42aa05af5aa5928931438cfc3e77fbb6dafb0e21967be8ffeb20e484
SSDeep	384:WdXrTWy3R+OOOQOOO+ZQOOOxOOzzQ8dtT3P2pivaWsLL4w0k31EeOOOrOOOGg0gB:Q1mrt7Kivqn4w0k31EmOFewM

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.55 KB
MD5	a9a4013a2b8f2dd8054cc559507ea875
SHA1	edf2ac378434ceb2cca3a78de2b94232b1c340aa
SHA256	a4a508be5b75066d97cad4f0f777cd26f665863395090344ac3a18b023c1ddd6
SSDeep	48:MeydTlT1RHR+7QbpytXQ1efj7KhTl+TJyqkNVE1Lvl5QhuFc:FydTlRJR+8sX6efX+TlayhEl/W

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\button.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	185 bytes
MD5	ed2f312e0dad27c7acc593bdb3ae8c41
SHA1	c8c2a367afbc310070150407dbde5f6971b7ab56
SHA256	68621edf036e1e7578df83afd4fa5babb4b3f567519c39a0fa55bb23a84d7944
SSDeep	3:RgxsmGFi4E9fEJO1FCwzey6qDqDqDqDrFDiFc0txI+j1PAZP/ZvtFHph4Yme:W+mGvc7pey6qDqDqDqDdiFBtyzZZvtFz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_off.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_off.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	341 bytes
MD5	ccec93a383049d70b70a519f89f5f8b6
SHA1	52ffceac0e30877e298059876dddee39e8468074
SHA256	80f3d79738e6593cdff6dabd1b380bbe4fcb4c95e0f5cfd70e4a348f85ecbdb2
SSDeep	6:SddVUBQ1lcbZjYt6jWrU7Bf+SsHvUDfv0IJmj+UIdpZmUCIQlkDC+/pzLnbvB:SDVWYlcbZz57BWSssz0IJUSEbIQ1+/xV

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif.locked

Dropped File

Stream

Not Queried

»

Also Known As	C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_on.gif.locked (Dropped File) C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_on.gif.locked (Dropped File)
Mime Type	application/octet-stream
File Size	222 bytes
MD5	740f2dce4cf4de20bbac37d8d2f8ac52
SHA1	0986243bb567a0add9f9f22efdaa3f97b5799568
SHA256	0eb8e620bc40dc3fb8ada0b8f304bad098164e185bc804e896b65ffe470ebdfd
SSDeep	6:4Ux7RUy6qDdiFBt6jRnpUxXkErqgxa7qpbFhxOby0LSILK:F1D6qDdiktGxUErbM7qNFzAy0zK

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.34 KB
MD5	c1ca22d319b25ddad7c49aa8b05a7533
SHA1	4d01e29ba2dad267addd13a46bcd78d7d235d248
SHA256	4dc8a6ff2e91e3d6c785d6c8e25da7ffdea3665379e5e059c03e1546563c2608
SSDeep	48:0jYZ5XyiSeEi3QultsBiSpf4i1X0QXUByHAumtmpNKBt6y8kT0SAAl3Dk0eJk:0jG5C1eEytsB1pXFlgNz/8+AEQpk

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.18 KB
MD5	65ca78c9d2b07055c22cc4921d390816
SHA1	fb90b4c544663dbab5fe50f0eb50f4425ca1fdee
SHA256	8cd0b40107e68cc066ef6beb3f455d475fa84bbe1092ae8ad42ff3e22bc6081b
SSDeep	48:2E3NUX/RTlB6XSQjSCLakv9VCaucTlelvdnvSpp1abSf/WDuzgdvN5jyf1jnpW:BNUX5TlgXNbR3TleDN+85T2nU

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	930 bytes
MD5	4ae3d9282838adbeb5e9c417947db3f7
SHA1	392fb39cf5ed21688eb225117e03b108a0c59916
SHA256	1eb9e5f69413c535edcd87dfcb2e879b321049afa9bd4d38510b601761f2c64d
SSDeep	24:mHG0952UC0j1cbdz5V9TyqiwBiQ0Ln1tK1RxTj:j0rljIOOWLnfK/Bj

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	883 bytes
MD5	2af35bcc4a4d2885a5f7ab680deb7f73
SHA1	2386ae8cf490853c5af265d5219ccc3ae38b62ed
SHA256	7db3b2bcf2ad139625b4ed7a8194fbdca2ce9dbbdb8d73ebe6ae6b27438d19df
SSDeep	24:mZ7+wdYLKftssuzNG1E8a29uPSJbocC4scHHADRYgY:FwGOs9AaRSBscJgY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	880 bytes
MD5	553e5e0b38579bcbeca3d9d14dd36f9f
SHA1	becfc882b42eebadccc167552527d3e444c4182c
SHA256	9ee4a24dcc9a1605988129caa32fc63d1fa24e8a6a7f4704021b6551997418cf
SSDeep	24:mY0GV6GilBLF5/EhIkiNb6i/0ffVP6LaPA2c9tK:1BYRY2kigMWEw

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.74 KB
MD5	f0c2fafb9ff6c9f63d9f14ece03a6745
SHA1	1b668f67cc2fbef858b33f1363f00d5d80ba8c35
SHA256	d493b64d018b53942043537c08c258862647bfb5bea65842790a75a7ca2176ef
SSDeep	48:/zNx+M74s1m2YeSFHqxXaSihyLvlRxT1U4KBhKG/wUx0tpRnb2I:/xEtXMxXaAvlX1HK/wgG1

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	932 bytes
MD5	a1de609d46fd59d4b1af7fc7e9046f8d
SHA1	65c6b7e15390ae1162ce20042ad8c3aa199d63b5
SHA256	f7ebf61bcddc7b6933514bcb9dc8a00d12824b140e4867174acb88ee7dd31dd3
SSDeep	24:mj6yxlNh9pMm31/ysrIy9Vu6bRUaOiusv:5yxbh9pMWcsMupDv

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	866 bytes
MD5	d3af4002851ab2d91c4c165c09158285
SHA1	3a1975bb4f6fc699c2a5167cadead185afa74338
SHA256	24ad61ad20c936591ce3f12c8409812893b104ab89c03c0214ca36f1bee81946
SSDeep	24:Ez5XwS952GTgC1tZ2cC49TyqiFaoBiPwYn1tK1in4wTu:sJwSrvLZ7CjzzI9nfKzGu

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.99 KB
MD5	8617647c6da19c0efaff993c681be87d
SHA1	c23a413143a0995184e23f7a8272a57625664d33
SHA256	c0e818e0c2ccbd3d10a539e0b6f5b19fc3a4636c84f6b37080f4ef464d1f3290
SSDeep	48:gOi83NUX/5HX09Wujp7WFUCabbOzBV8dUoqc5YWRepEsEsZ0LQx:eUNUX5mP9bbg38LVcqsEdLi

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	909 bytes
MD5	a82b8d6e01803d00696ede634db65b79
SHA1	6fa1edc366561c7f9c8c8972a81636f844395c17
SHA256	7318a9aac6297d712bbe6e4c9ecfd273922f54f1d7e9f62aafc5764e9c74b576
SSDeep	24:mQrnywllQGh0ulwr9VU/5+euuVUIfcsqdcJsaI:YSlQv9SUIfcsqdR7

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	840 bytes
MD5	3f192afb64366b10337d226cb7a9e62e
SHA1	53f7b361bcefe8aa859685a56181f707cf53ed33
SHA256	ca22d4386d29e0a92bd7e3de1ee70b655559a56b85cb6714a39360ee273e5cb8
SSDeep	24:mvGeOrs0EN5s598cy6uqHdwlVzHpi9iCv:3FA0FluAw7UF

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	908 bytes
MD5	129633fc272d6d5544c4a09c215e31a1
SHA1	258b5f333b6c1ff42908082c55c015eb28629f78
SHA256	88a72dc82ffe2d4ff02f9b2bb1174c9e0d4d363e1a4c571e73d7e5df636111e3
SSDeep	24:mJUWz9dS/5ha/y0oF5/ys9wi9UgKMCfUL5wwYEeB4:0z9EpGsGeUgKMC2i4

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.55 KB
MD5	5b8acaa01c1b8df436fe50d4dbf38895
SHA1	c165957ccce90a1ef2a97fcc901b0e0c4f962dd1
SHA256	737755ece1cddb1a01dc5632e25bcab4b769a6b11c864d42764484a3c67a2cc8
SSDeep	96:TrsYR+8QrEMV2B+1Oyv80V0HXPyo5yjtDPxle0JrijleZlYUk:27wI1Om80wPyLtDPdYZ

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.80 KB
MD5	381323825e7cfaf7b2ddb1af04e7901d
SHA1	5f79766d667677ece69a99d380e7dbb962d847fa
SHA256	0afe628433f80f44e43391b628faeca782dae18b1a59cce955345519fce6b88c
SSDeep	48:U/QBpB7h7GfaqAajkrYRab5uNVL9ybqR/5rmg/DbQ5fQd3:USpBJGfwajkroaG19d5B7x3

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\header.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.18 KB
MD5	059a8d7aa3baa3369074f6cff89b69e1
SHA1	0f0d4fa41f2e0005ea08e30e1bdc7895933a52ac
SHA256	d6e290d2c30c810372154db7889ed7795cef0f554cdb8034693b24ad474505f9
SSDeep	96:AntyGOvqh09zEU0YwUhI8F4F+iV3jAF4EZH:Ityzc0lEfsa+O3jAzH

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	462 bytes
MD5	eada849491966cc21b0096a7097d80f8
SHA1	11f03eed76e3d4d23a81188fc63c954b847dfffa
SHA256	258bc29ae47b95ce4de4958d47f07dbb88549f776d392d039dc4dab0d6dce31f
SSDeep	12:Z1WrCxfqDqDqDqDdiuMRtpht7bg5KPRNCnplPRsbmCH6464en:Z1WrcdiuWpn7b8PnbPRsyCv6T

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_on.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	264 bytes
MD5	2d4a7a719bc95686a89acc2f2c32c9d7
SHA1	694d3b84297521b1266ae3546bf5d959c27a08a5
SHA256	88ffaf66aec6bff3cfd93b5e274f74a3b31e3d64bf7609bfad685d469c2a181d
SSDeep	6:A+6dHRUy6qDRstePKenpUxXkErqgxa7qpbFhxOby0LSc21CEulolBYgyWc:1wxD6qDpPKenGxUErbM7qNFzAy0K1CXl

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.23 KB
MD5	cc95f12c9f8810371ee04bb3c265cffe
SHA1	6b0b45a601fbaee608bf0a6b0cfc1b5c73101708
SHA256	f7c0aabcc681eadede40eee571740fd102a8a619cf2240ca76c1f024d1d9a59a
SSDeep	48:QrRJHjYZ5PbdYyCg4irii5VAooQHQOY6/jdrxJ4wzLkKLX2Ir/e3lazMY33q+Nro:wRJHjG5mA95+7I/jRxOKpLG0/e1nYHqB

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.39 KB
MD5	91daf147cd3d4c81c9353baff0070b51
SHA1	17661ee778b313b610608f6fd2d640ca879c62b7
SHA256	8bbc34b0825b5869b9164970e5455d60d29791b029b17f091f6dfd5017da954d
SSDeep	768:WIPXqqxARP6ca8mVzS31pED3OUMix/2xHPd:WcSRPBcS31pED3OUMix+xvd

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.03 KB
MD5	f2f8edfd5d9919c29a4cf58af164043a
SHA1	20550106ca30bd07484a7f00c9b94e9f0efd3129
SHA256	d0bd50676443c7c9a6de50a220acba9f078111a999197a730fbc0a27a65964df
SSDeep	48:247f+ZiYRxGfU0NjTHwM29S4ZSqx0CbmZp4cpMTFxdYSwAlj0EvpeVK:x+ZiYRxGfV4nZSQm341B7Yyj0E+K

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	890 bytes
MD5	199b3326a8150b95eca8b2695904dd75
SHA1	0603f0b6be36dc02a4c27b3432384c8fc2f8f28b
SHA256	142fdbe544b77e6d1ddf0c3e2ab6299a8daff9fad62239c7e4a7fb2e1a59d18e
SSDeep	24:/awjXKfLkcMhGr27oNc+9TyqiJgBi4Nqn1tK1XyeTE:/awj6DkcMNoNYMOnfKQQE

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.72 KB
MD5	ff21a4a5412855d4b0955b23b25dc2b1
SHA1	02792f5f178f87a71a1fd83f41183526242a6e80
SHA256	dc03432c1b65dc9b4831fe158e10747f415df4b008211856e6ea3bb70fcd2233
SSDeep	192:+rhjtKLqghxUCw7IlMPCL8OjJr2r2r2r2rNvzVeffcYEKGYJcHTBr:6BrgTwUHl++++NvzVo0YEMqr

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	192.11 KB
MD5	47f6a60179cc8b257e8330fa47651522
SHA1	073f3ebcbfc829e6eecf81b142ba820d8e23870c
SHA256	0a49e6849b58333b5635c1033607fc9ec6c3e0b960569f5bf160765942645307
SSDeep	768:+d++++++++++++++HKIO+++++++++++++XW++++++++++++++dOT6++++++++++z:HIUO520ORTz2TRbs

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\PublicFunctions.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.02 KB
MD5	e577408733442c34b7791e3d730c1a6f
SHA1	d31e0f37f8f8692bd7c84daaa97a3dd9a2808332
SHA256	cb68a9c47a5b5c7d9cab72d729dfaa4ecf5d33b5b58566289c05c7fda24fd486
SSDeep	96:RATb1yytPBMx183uDkQq8eNUF4avE2+YSS8cWn:RA31yQW1RqTa82s1

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignright.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	847 bytes
MD5	4c402a0b925ea6ae4ed07881a1e7ba5e
SHA1	afe2bb5430848f6fdb20165c29a3d66b3d7bb487
SHA256	b1d1713bbd3e74fd978758a6e0013cee3be6d8ea391e6fcd124bea358ab7ade1
SSDeep	12:50mWaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d62Q8+:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8zE

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_decreaseindent.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	863 bytes
MD5	88cf93f72dfd88e34d2dcb4b3d397864
SHA1	a26b45e8d1d4cb307915b5173fde8447e1d20fa4
SHA256	f3cd50ada201bbf7735fcc17e210f64b015b808477e63d39555639c33b4953c6
SSDeep	24:SmdIWSmSfvFmvVbJXF3I17yHI4SVW85FJE:dWLmS3F2V11C7yXSVhFJE

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_increaseindent.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	861 bytes
MD5	22e3610a0cacf37654d1dea91f1a7bc4
SHA1	e5d46c42a136c7c86a44f8ffd08aa1a547929f88
SHA256	ed021b07f151a8e3bf69283e2c25af72a33c22c590694decd904eb7981aae028
SSDeep	24:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8IFZ:dWLmS3F2V11C7yXSVQz

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_justify.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	850 bytes
MD5	df37230a7afc3fe1c02253d365577b4a
SHA1	c5d698e701245ed7af923353129efdec34f9251b
SHA256	42c2a7732b692aa697391e9bb9488c3782902f1c3c49b0c4092d504185f8836d
SSDeep	12:50mWaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d62i:SmdIWSmSfvFmvVbJXF3I17yHI4SVW8g

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_pressed.gif.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	883 bytes
MD5	92d10f7d7f09e197b99c145685cd09cf
SHA1	85aedc52117fffdcc9fe48cd4ffe24357c972b88
SHA256	d23861522310a3d7129bd90d0e7cf2ae03e635c9e01784464bcc4305c66171b6
SSDeep	12:fSOaUV1DYPNZwL+PJU9A0yniwqdm8/cBnoR+CCxH3HF3eH17yHIt+SVW8d628o3V:GIWSmSfvFmvVbJXF3I17yHI4SVW8Lvca

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.58 KB
MD5	d4952d15d87b4e14a21e1e87da15e9f4
SHA1	679a9b1ae48d7f8290d180a30f175c9864ebd86e
SHA256	7ba1d2da9d046361f1d98c8512e5af356f0a54a83c4b894b64949f9e0f51f961
SSDeep	768:TEpG/cIL/Mx9bx5l/IIqgpGIR0p7i4YucT0Fe+VohXTDT0Lp:ApGZ/Mx9bx5dfvSW4YR0ZuhXTY

C:\\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js.locked

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	25.04 KB
MD5	07fa376fa6c6f07ca0d9879d53bd83a2
SHA1	63c918c6d28c7c42a9c0cbc99cdf0ed323452d11
SHA256	fca294937c939bc3c0be39d2ee61454920a071b34eabb3760a5c0473d40a6c77
SSDeep	768:R5JYkhRk+aG7iPLCa6oeFn02+eGbr6g763Pxojy:TCYkPWa6oe2ekG

Remarks (1/1)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After