Overview
overview
10Static
static
10ransomware...3n.exe
windows7-x64
ransomware...3n.exe
windows10-2004-x64
ransomware...le.exe
windows7-x64
ransomware...le.exe
windows10-2004-x64
ransomware...it.exe
windows7-x64
10ransomware...it.exe
windows10-2004-x64
10ransomware...le.exe
windows10-2004-x64
10ransomware... 5.exe
windows7-x64
10ransomware... 5.exe
windows10-2004-x64
10ransomware...de.exe
windows7-x64
10ransomware...de.exe
windows10-2004-x64
10ransomware...ck.exe
windows7-x64
7ransomware...ck.exe
windows10-2004-x64
7ransomware...ye.exe
windows7-x64
6ransomware...ye.exe
windows10-2004-x64
6ransomware...ap.exe
windows7-x64
6ransomware...ap.exe
windows10-2004-x64
6ransomware...ya.exe
windows7-x64
6ransomware...ya.exe
windows10-2004-x64
6ransomware...om.exe
windows7-x64
10ransomware...om.exe
windows10-2004-x64
10ransomware...ab.exe
windows7-x64
10ransomware...ab.exe
windows10-2004-x64
10ransomware...ye.exe
windows7-x64
10ransomware...ye.exe
windows10-2004-x64
10ransomware...ni.exe
windows7-x64
10ransomware...ni.exe
windows10-2004-x64
10ransomware...pt.exe
windows7-x64
10ransomware...pt.exe
windows10-2004-x64
10ransomware...ya.exe
windows7-x64
7ransomware...ya.exe
windows10-2004-x64
7ransomware...en.exe
windows7-x64
8Resubmissions
05/02/2025, 08:55
250205-kvkxmayrcz1005/02/2025, 06:37
250205-hdsvsswldm1017/03/2024, 04:49
240317-ffz1saef6510Analysis
- max time kernel
122s - max time network
151s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
17/03/2024, 04:49
Static task
static1
Behavioral task
behavioral1
Sample
ransomwares/7ev3n/7ev3n.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
ransomwares/7ev3n/7ev3n.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
ransomwares/Annabelle/Annabelle.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral4
Sample
ransomwares/Annabelle/Annabelle.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
ransomwares/BadRabbit/BadRabbit.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
ransomwares/BadRabbit/BadRabbit.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
ransomwares/Birele/Birele.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
ransomwares/Cerber 5/Cerber 5.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral9
Sample
ransomwares/Cerber 5/Cerber 5.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
ransomwares/Darkside/Darkside.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral11
Sample
ransomwares/Darkside/Darkside.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
ransomwares/DeriaLock/DeriaLock.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral13
Sample
ransomwares/DeriaLock/DeriaLock.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
ransomwares/Fake GoldenEye/FakeGoldenEye.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral15
Sample
ransomwares/Fake GoldenEye/FakeGoldenEye.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
ransomwares/Fake PetrWrap/FakePetrWrap.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral17
Sample
ransomwares/Fake PetrWrap/FakePetrWrap.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
ransomwares/FakePetya/FakePetya.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral19
Sample
ransomwares/FakePetya/FakePetya.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
ransomwares/Fantom/Fantom.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral21
Sample
ransomwares/Fantom/Fantom.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
ransomwares/GandCrab/GandCrab.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral23
Sample
ransomwares/GandCrab/GandCrab.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
ransomwares/GoldenEye/GoldenEye.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral25
Sample
ransomwares/GoldenEye/GoldenEye.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
ransomwares/Huzuni/Huzuni.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral27
Sample
ransomwares/Huzuni/Huzuni.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
ransomwares/InfinityCrypt/InfinityCrypt.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral29
Sample
ransomwares/InfinityCrypt/InfinityCrypt.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
ransomwares/JanusPetya/JanusPetya.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral31
Sample
ransomwares/JanusPetya/JanusPetya.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
ransomwares/Krotten/Krotten.exe
Resource
win7-20240220-en
windows7-x64
General
- Target ransomwares/InfinityCrypt/InfinityCrypt.exe
- Size 211KB
- Sample240317-ffz1saef65
- SHA256 f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
- MD5 b805db8f6a84475ef76b795b0d1ed6ae
- SHA1 7711cb4873e58b7adcf2a2b047b090e78d10c75b
- SHA512 62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
- SSDEEP 1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
- Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0291794.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOUTL.OLB.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMSS.ICO.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_OFF.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Foundry.thmx.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0304933.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR39F.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_GreenTea.gif.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107724.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OSPP.HTM.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLRPC.DLL.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR35F.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ADRESPEL.POC.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PEOPLEDATAHANDLER.DLL.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18237_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_COL.HXT.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0250504.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00391_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBAD.XML.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU.DPV.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216874.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.dub.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105388.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCOUPON.DPV.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02738U.BMP.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\EDGE.INF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_it.dll.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105282.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178639.JPG.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00882_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285750.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7en.dll.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR24F.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.XML.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18211_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXT.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Composite.thmx.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148309.JPG.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792 InfinityCrypt.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 InfinityCrypt.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString InfinityCrypt.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1228 InfinityCrypt.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_OFF.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 352B
- SHA256 1d442a79e8d6674807bd37ea4542f6182446043c24d7675c15b594803c459e62
- MD5 13cda850762dd48f7a1072ec74487e16
- SHA1 d85fbe0f4e36bd6880ac6e61595190c7fe6549fb
- SHA512 d21d6ac75c28845c2da336070e524b6b130f8d865535f71999156f93b23624855699cc29ed8538464b0982ae7457211d9691ece5cfb389ce80e276e2b8ecc427
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_ON.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 224B
- SHA256 e53787ba66d2bf78df98457fc7dd400928fff3d5956cbcc730ecb377c55dc8c8
- MD5 227c254c9abf7926589d86bc8de2465b
- SHA1 39a973e24c74ccc3dfcf33fbe36342d34a89c688
- SHA512 d0ebb244449a048748a4a5a9bf1e709f166ff3b6975fd2670a2340e02fd9f354bc25b2107ecf7e32c2b1cfca0a9b0eed68e2fdd29167e52f2ef510f3269970cc
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 128B
- SHA256 57c8eeba0962a362869d7705bfb6a11507c54de8a723575c17f5c3569e4ddbf6
- MD5 b7141464c904c71cabadce5918039068
- SHA1 921832d614fcace2dfadfa78319b6a84f0bab39f
- SHA512 0b8397b4a6ac1176f73b7e25e0a4b315be3ce1f691a2afc4ff84ebcae53fd5602ae17fec745dc8b05a35987a5ec13211100ccf3e2023dd5a7228e6392175be6c
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 128B
- SHA256 fa7cf4a58adcc2ca1638396fb2cba6451ae3ee96d975f9292b38f384b90b5e7b
- MD5 a5369b08acffc9318bc783c3e24daa89
- SHA1 d9ff6f67ad008c05fdf07c5398cd8e264ceb1062
- SHA512 aa34e81d795da7194a590f0d21d69fd3064c7b7fb2644d31d8317545f6af0524beb89eb8cdb9e2b1c41c7e4772d720d5406e32480ce1eaeb7a44a2ee49fb92f4
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\BUTTON.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 192B
- SHA256 7b7b4ead66c9556089d2999c17c7327a332d74ca98ad8b6cda62f6ac55cdc0cc
- MD5 e0ea4f944b2c81ab1d8cf86867ee0842
- SHA1 2f01c107cc5aac2f1e0a0f742c7536e2205d9e07
- SHA512 5ac2e3586a35dc63e82e8ded03258c9e60e5b11b9011e9d0ffab1c4516f4f1212abb37a9348b137b8b813937fb69986f5685cbda7ce4df7a249a520fb740f356
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 512B
- SHA256 2d96641a975ac67da406ce7bd05205392dc6ed7776766457e278b6f7fe2fcabe
- MD5 caa6203a6047eedc814ed1c1edd764ab
- SHA1 9e7707af1560304c6c647626836f0aa68bafba75
- SHA512 8148114b26149f8481369d9a88cce2f709f9b4558fcfbf0e99a38829ffffddabb4869ec1d179879af8982966386422a4bad4210fc664718d488cdc86bee61fbb
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 1KB
- SHA256 0177834ec6cc5d5ec96cff825089e0120d9c67a1390b9dd6d9776a785f94c1a8
- MD5 37978f0b9a9b4209261fd63d8fe8edea
- SHA1 de966693a3bbb630e29476bec1fd6e349e1ec020
- SHA512 0d38ba600afcdff8f9c174ce8a34b9a6fd5a5dd0baf9a18e8ffd7196b8215c484267064d20256bc39525dbe821fac6f24e0d794cff0056f39a16f75af8dd215f
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML.224E0A0F22B55426959D5C835814CD88907CE3F9EABCF17907C4078FD23C5792
- Size 816B
- SHA256 5a0d02d78cdc37900bed5d5a82d3ced832043c107622064f227a453d9a5a597e
- MD5 9f969a0d2f5ba931591b3f03fff68566
- SHA1 f069bc775f9801809c2ecae4c8bd379754c1d365
- SHA512 f8d4ebcc18d19185f3c80be3f18a961c9556d1be08de91cd87b5d1ba67bc1722374236a3c02b408af3a369ebaabe37ae574d2f03ce2ce9ab32c562ed1c3ade21
- MD5 SHA1 SHA512