37c6cf387efb056c47933bcf3791c2e929cef8e2c2192a2c5295e53bf81c62e9

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12/10/2024, 23:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
Size

14KB
MD5

3c8acc38feb67f0dd453387356e8b825
SHA1

b2eed31398235e0932aa845d94de886677e95e49
SHA256

37c6cf387efb056c47933bcf3791c2e929cef8e2c2192a2c5295e53bf81c62e9
SHA512

4344f823c67534e9e99c5e44b7b8c92efe65694d40a16a03fa5d2aaf31dd6b5bbf1ab635a7f3b9b95bde533aeaf736c61cebb434309b0f0958b59cc0c6424b51
SSDEEP

384:WpZrQ4S9p3hi6Pre6yhEH9/xJJ0l+4q8Hz68arF:Wvvti9xEVT6pF

Score

9^/10

discovery ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2618) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Deletes itself 1 IoCs

pid	Process
2744	cmd.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\gadget.xml	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\Media Renderer\RenderingControl.xml	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\es.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.HTM	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Games\Chess\de-DE\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\css\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341554.JPG	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\blank.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47B.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14539_.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\gui\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\css\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre7\bin\server\Xusage.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15133_.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_OFF.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\da.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\11.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21321_.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR30F.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ro.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01235U.BMP	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02071U.BMP	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_ON.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\THMBNAIL.PNG	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\weather.html	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145669.JPG	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\how to repair.txt	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NOTEPAD.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Modifies Control Panel 1 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Control Panel\Desktop\ScreenSaveTimeOut = "60000"	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 1576	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	31
PID 2356 wrote to memory of 1576	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	31
PID 2356 wrote to memory of 1576	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	31
PID 2356 wrote to memory of 1576	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	31
PID 2356 wrote to memory of 2744	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	32
PID 2356 wrote to memory of 2744	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	32
PID 2356 wrote to memory of 2744	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	32
PID 2356 wrote to memory of 2744	2356	3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe	32

C:\Users\Admin\AppData\Local\Temp\3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3c8acc38feb67f0dd453387356e8b825_JaffaCakes118.exe"
1⤵
- Drops startup file
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\SysWOW64\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\how to repair(1).txt
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1576
- C:\Windows\SysWOW64\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\ntfs_system.bat" "
  2⤵
  - Deletes itself
  - System Location Discovery: System Language Discovery
  PID:2744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\how to repair.txt

Filesize
856B

MD5
9bd2cc2849f4da29025724b100ad293d

SHA1
5ea26526dd94cbf6be40c3ae3346936e42b0869d

SHA256
acd8158e1fa5b0474c6fe56bc8379cdd9e670da2832e5f5c8274cf47808b2344

SHA512
b43e47774a17a87084b483141f0fc25a64f5f20b83d38279808811aa7dd31b8a60b61496be2fb463941734b02b842fc27c22c88cbd508fc5a5ca37132bb764b2

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML

Filesize
582KB

MD5
c998f1ff57fc052dc1ab50616d8fcd18

SHA1
041a2680671fb0cca8c366bd622adfa494334559

SHA256
8213351d91fea7b3512b474a8ae6c5452ac1b444dab7b6c8702bbf59de16c828

SHA512
744f7ed8aada06c516fa7853ce5b2c2b8f2b125b13230af367b700255dd3b1dc8b1bd3fc23a23abdf5aee43d3fedfde4a17c97e2ae8e962ca42b1a7ec16cfe00

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

Filesize
353B

MD5
d02faebe7b91335b5e62ee5dd612c876

SHA1
97d947eb30906d67b6a36cc85180785d9d5b5b83

SHA256
1cef3a3a1683990fc610e52c7fda1fc39e3abc5fa366c640b2c78577d014e862

SHA512
1c895ba95f4d71d27b4b345c226b828eb49b07d391c26f8f69aa240aab558eba51c4aa534632871379d42ea6306270493c839507ab6bfb866b26f0de04cd63a3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

Filesize
234B

MD5
f01c82071a2ceb7718dd5ff9f18da435

SHA1
999c825c7c61f4c715978f8b3acd8f79d274a1a1

SHA256
b1e628dcb1e3496100d6b54134295436d155468f098bb4aebe51c679d258b343

SHA512
6701a74b4ff67f0eb5a6dd9650e93037b6499ae6a363e81e9ad737a22048abd7b547f681d0aab241e730ac314fc06da0e1c53c5560767d9ba4a3396c2e17e483

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

Filesize
24KB

MD5
5b74589587d8d3b314924bb92f78172e

SHA1
adae3c6240f2f568703415a8686a74a09d86e170

SHA256
d7fb6cddfce0e57bcef2c615f8e3a0d2ed77152f4be9929352f91c4bd6f70ccb

SHA512
d9d901ff2cf269e19d7c0dec924ea4c03aff35b7acf3b39740541cb43131e43a98efa5d2cc2558cc4e020b71c0662aaa947cf5eb1d297b14dbca209466a15669

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

Filesize
197B

MD5
a8c8249d9975cf311e294dda28927f71

SHA1
2856c085ea276b2c21fbe8ebc2279d45699c0e0d

SHA256
dd436cc5e7d721db83e0b7478178c1e466e927dad9a126f403b2aed30a750ccc

SHA512
8bef80c5bb22ea634bf9f04dfe273e2126f2cb2761bf36fb009acda620a0feed2870755ffe05940a1200b59975c951580d834b5b0d876071451e8e9365bebcc1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

Filesize
508B

MD5
774030831880d8234c4b3b39ff984dc8

SHA1
00a3cbca4fe364562f36c9540075ca5174bdc7df

SHA256
975df134e45a107b0d11cb04b438826378b9ac978eb26ab8c81306048540ce1c

SHA512
67d91b1ea92ace2ef3db943c12c3101db56dd57e57a5fa5da4885129da5ea2f8d474f749b60613076056ed978eadf0922e26d375befc7f28cf1369fb5b8e7639

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

Filesize
1KB

MD5
d544ca3c020b256fd05bc90d8e371fa8

SHA1
18c0d69f54fdd44755077ac791d517e9dfc9753f

SHA256
85a32c57a25e5a0f63a3c8721354218e428d2628f45d1a66c6f5549f29df0b7b

SHA512
a011403cab4b1abaa609f9c02786f19ce68d7e732bee48f6d6d385a9c76de78e71fe11543cf3edde0e456b39258442379845c0f881bb0e7ce68526578f75263b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

Filesize
5KB

MD5
46a7fee88fbc21a06914931fde7dd092

SHA1
da69f98e7586e3aa2f405919722d9c9b94185aa2

SHA256
2b9b557e1367966b68987e265ef49b58be3fa1506d1f1dce67cf2dceefd27e96

SHA512
c2a56f754e02d195173fc99c19e0bf52bdd7685fd72768ff8c0909192134f6e27bfdb6c37bf456d915cd04b6869f90e4773e1db6f586cf9009018c9e891bac44

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

Filesize
31KB

MD5
0fb2fe0d8c7168e068e3f2f5df1c85b9

SHA1
68857ab51ee895acb03e1c5ebccf74554f12d229

SHA256
7b823fd45b996fcbd79071746d5025311d3ba6d4f8b8726952db76d0740b5fc2

SHA512
64e9488533a2482ed5d5dcc37fd7dfedd6da99956f77ab08d64e379ae12d17f5425d19e4b173dd82c4df7389a337dab12dd3079aff31c18b7e65f6c3998fd102

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

Filesize
4KB

MD5
1de7b238ad3889805ebc9f8d92b751d0

SHA1
823539b77ae0cb5bfeb6261cdc9dfb8638ac65f0

SHA256
48383c0114b51269c2a4b6aedab782a07e2e5afd1f1fd0c5ab79def5fe6b89ee

SHA512
ca61743474869e5c09ab9fc6e5a6e14b6b0035d9dddd73064c029ca54c4bd21ed3a9099afa63be4f54a5fafb482d15debd394f3945eaa9723f5167e9d33f2d92

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

Filesize
21KB

MD5
f85a4b9f4677df47482f416aa04ede1a

SHA1
4198eadc9c7d42bca246c48de2fbd4b1f7e82b2c

SHA256
0bc16259144ad68838044709c2b8354120085acfaa3ff8b866e97a75c6a2c987

SHA512
78f9a21ea0b0f7ee5d7054b9d51ba474d98f1aef52b66d447f21851734947dbdf256d5d680c7b5f9f3ad461902d5c95aa1941a20a16610a982595160fd9d4ede

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

Filesize
118B

MD5
ebc5bb0b5e4110a845d7f4096ecb1702

SHA1
2571acab3f972eaa29234467bc19b3851b64546c

SHA256
6625fd63f6e5547a8affa11cdf689dc83fe264bf441dfc56db052db5755e5a4b

SHA512
4817c4ce055cd41db3f644c964ac098b7a45a2eb837f5de8e84fb34810edc2fe8ee6cf478cc8ae5f88a0d2f52523a708c49f166f75fb911c158187b9f21436ba

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

Filesize
8KB

MD5
57cb1eb4b62872c600963f831bc14fe2

SHA1
3d82f2d5bd0c11ad3b8864e2f66e9dbc893d6146

SHA256
625b48303251cb69f6afc2018c85240f0e9547d0f7d6e61c37a88fd35b21d80d

SHA512
18c6ef8bc9150e9373cb0588d61e4e2730a97fdb4430c09540e127a7df0d317c69ed544b34dee258586f3c038ca8c0f6c902d11476f0b8c05899f121b3f1d19b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

Filesize
15KB

MD5
c3d7e8f062a42d665a31f1553ec6c717

SHA1
a0e71aa26706632425f2f211c4af840e75c0f4f1

SHA256
c7503fd06ed7568476550e631b56ed7cf8d73b3bc291122e06a9d7a40b2542f9

SHA512
bb81e170cd92db3907b241bd600b3e495656c3b6b22c11ad7c5068d9ee0da76896ae1d205a5118ffe7b94830c7c601fa68c19ddc934e269e66b85d50fe1503dd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

Filesize
6KB

MD5
81432e8c37fd6342dd3f506eaa84a5a0

SHA1
443c7b90db7f127d5c38408ca1d93c8b444b865b

SHA256
4afff79030c542640ff77c191c2f6974e62f6f85f8b84f79e0992b2b13aeac71

SHA512
587904cb494221cf88fdef5dab0f1d67d298503d015dc1c7baabf364f94a59945be517ce3980876efc35438960bfac5e1ef571a1a337b694b78e192e7027e0dd

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

Filesize
20KB

MD5
7363f715ca47a815f49cd506a1c250ff

SHA1
90d6a5bd4b2b9ee0f5bc3be783471b322e67a47e

SHA256
7202426cd3fd56910a9aee2d67f977940724021c2bff20c13aa378e60c09c5fa

SHA512
a9cca9d2093d019a29ff0b8889db34ae76ab8933800fa3f19ef9478be0176d0c111da9b2865998265c3b62e5c18940dfa49a21c02fb7ba9c415e598b3f832171

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

Filesize
6KB

MD5
a03772d86800bd6aec3e4c9d367cc377

SHA1
d072b6f239d7739a0259815ac752dae2b96735d9

SHA256
a3bc59ce38c7e12964700ac9c4326cc38b578f4d8b938eddfa23ae76c195f337

SHA512
32c31f7c1f8e9a0978fc5ceea5faac9dcec5865b64a2aadb69a7f53dc3fc99f72302b9ce123b32131b89bca1a25b300dd1d0706754e963802b2c12806ba4f57f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

Filesize
15KB

MD5
e9ebc19ec1a71c67fe9c4dc947027e6a

SHA1
6e6801f55dc790e864e2e7d24fb60cc3d5e2e548

SHA256
ce09acefcf258b267ba01b2c7f7b9653fdaa028e9abced9d0e010d166050bb53

SHA512
bb83b4cfdea3968570c4743dc4bc460569449343d188bdef538f0e2bd5b18147a8464c3a5c264ee6aa82ea270f037274447ba0298fa21dc8d07c8a75ceb419a8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

Filesize
2KB

MD5
4b102c3aab516c4f184ae75b1b86020a

SHA1
c577b581382d60f44755b55f2118f2b5ceafc404

SHA256
d001921ef313e8e7641a83af467185c1f27cfdf10e53a007816c3881a8a40cb0

SHA512
b811f4c3efbbca4c8fc70ea45b6e39e817863eb8289f952ef1fa817a4cfc9a9d017089508d70be84f4177ae9c2d1b0067421209f458962903dd993035b361c73

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

Filesize
2KB

MD5
33ed58f61cbf8c41d5e31ae6ef9beee4

SHA1
739ea698248f0bf9069f49f8c7fc3c7b31f2be72

SHA256
31cf981e758847f7e7da3e5de76de9bfa9d35938a244490406785edc1d5becec

SHA512
2d87ff550a5597ed2f0ddf5b5cd20dfc4faedd53941b574850b595c58146385c1a9d46c216a1fc3a673c4fb7ad04c385fe736101bedeb0a89f2756d18d2de586

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

Filesize
7KB

MD5
d1d9a3dbcbb715a7e1e3c4168d0ee877

SHA1
7d730d9d7bf75f9cef0661de490c9b8fdddb6bd4

SHA256
38435068c4c510d662ef05f721fea4ca71850ebb5d2ed3edfbe3eee9a609af7f

SHA512
42fb0eefd7c3c4aadeab229a46b5d1436628cf1af46e9daa32dd4a56581df73245af3a5c5e5d62bfabe02819d69133e6bfe9f0fe2853b87bfaed6f7323a28a48

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

Filesize
267B

MD5
138b17b187b28cede41772f15fa14aa1

SHA1
f638c428a9f9c0e55965e1ade5d284feff501350

SHA256
d6f37478bd13b6aef2076b5e59ab03263fe111e988f0745451976ddfe2bf9162

SHA512
cd799802f273df25c28cd441a3e27c6c89732d431aee2b3e493836e7d9ae480ea2841a7efe338efaa12175bfb9bce0c7a1b4bb34214a42c4a91f150b86a192de

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

Filesize
335B

MD5
610e87df247e39f89688738e55e09e1d

SHA1
673a953abdeaa62270622a89de45359d8ef2bc73

SHA256
8de1776870bff2b4228de58fbe82ba7f260de6e7dffec248e6e316bd5a1461ca

SHA512
e55f939dab1b7d2de6331be1d896724757a4813a3cf88abc9dc32938a0000c0126851ae109fbd3600b799fab944bac2945a09155e18e1bac1d8373780be00d59

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

Filesize
379B

MD5
6898792a7364028cdf84e023edbc4508

SHA1
f019d0c8e140d5c6fcdd58e3f1b85accd539c587

SHA256
60caa2d4ce4353fda93c1cc52e8924a17ed5aba6ded19fb3a0d4af7c4851e1c8

SHA512
baf0bdd0504cc6368275b13c2227a6946e6ff3573cad07e916553bf73b4f0a70e832888cf7ad1b0fe6787064677be15d69ade05430cb4dc3cf747329c64c86ee

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

Filesize
160B

MD5
1f7116d4973ce15078ca15e4d2abfd0b

SHA1
f3eef5a58f17e7c4ce7e8c873a62aadc62804665

SHA256
1e775e7760b6a96fa8222f35b0a6c8f57b6e609b15273b8c12cdc9c6f01d6a00

SHA512
3b6e06768cef612ffd1dd2a75e1b2dfd48b59e84f3aa40faca7d08fe5898926855898e1506159bec09cc1dd0ae4143b01d79191553e724c449159f2e75ba04e2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

Filesize
452B

MD5
487892d7b1128c2eef46b63b66b48e88

SHA1
d70f7169d1c808380a32c27eaf5cb5a867a9c090

SHA256
27d3c10f9f830dbbdba88af3edc0ec8d47a950471a7058efe17e947307015276

SHA512
c5e2297ae8c2c85462e0ab005905c4db214b0603ba24f5e6c42ae0701e2a31f6262638b4e9fce58bfa6fa62dfa17bd5340e3ac8f18c5d24b62de421c8b8ab660

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

Filesize
474B

MD5
ca75d3cb1f27e501b6d9ce149689542f

SHA1
e1ca59decf3a51a1f4333745d1d28ba7a7405fa0

SHA256
d8591d18ffe1166648615a5bce7d727176aa97fc14ee7fc23909ea0588bed6a7

SHA512
51c1eb06f0f61b40161bc4f9fa03226e1951a6f091ec137e185081ba4dbe41ca8b5b4fa6c47e27c8b28607a18c80507231a49032f3b52c51680d440daa355593

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

Filesize
279B

MD5
d92a28d6ac076f6fa35400a66b11f510

SHA1
bdea073ae0abc8693840619443b98569542b1187

SHA256
0ed9281f57dc1c05df5ca522f77677291e0bec52d65a0d82c30d539a10f4cf8f

SHA512
bb27c6ee15b65412651d8502c9330809ba3c140bce9983de1f99ed10967eac367b3e564f4d0c8c1301b94b6ea00f72426d144778d89a4f5fda4b95a57bba2090

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

Filesize
2KB

MD5
1357d85e3b08c1044a40bc362a2e909d

SHA1
17028b9cf6844c7735702140c595b88ba1332992

SHA256
aac0efb25ff03264c2dd174f536f00bc2e2b9be5783b6cfff778b947dc215333

SHA512
25a8f9a5dade21be74c33d2c9592b6a7666e9ff61acf298cc87d849fa3c1bfeaa782e0f5a42236b4f97d53806022b2391aa1187d25d002b127263b7e7a4b56b4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF

Filesize
3KB

MD5
06d3ec7ea0f84a9dc88babc0d9fc6fe5

SHA1
968d48063add2c1eec0e48849fc524f43d23d18e

SHA256
c5b1fdd836ee1d092f9ee747d7459eb480427bcf174d43e69984b57b90586672

SHA512
7d51fd5eba4a4c981602dd5db08ffae841fd1602b2f2abc185f638ff06e91fcb8db406d31c70f885ea98cdd41cd7102787751e442db5bdcc6d2dd37347200cc7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF

Filesize
474B

MD5
d1949ca25ad6244d3256ed5c288297c7

SHA1
ae97c143aec413085f6198dafe75095806998b1c

SHA256
49d9ae53fa44440496cf8ab8c470d9e9a52576ac0c6652478116a50fe7962812

SHA512
7fb9135247a65b937883a9c3442f6be4decaa68ef6d63869807d51a3dc07e1e050dae138c5009832b53ca10010c18fcade88399e63063bc7ae8d362fe3e16736

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF

Filesize
276B

MD5
59cb2cb1a1e3282a4f75473bfda440f0

SHA1
42b28632e3ac0a671c78d397462767a27c463078

SHA256
3f756325be8b357c72271235f1666764673456f7b7d0a1beb540398b5853bbe8

SHA512
066926746964e2726ac226363d53d052fcb2ed2b7038b4778f6632e425e1d2be5e2f8a3ba265e7bb9a050c3037025abc935b99e253d26b1171efe2e227294c47

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

Filesize
245B

MD5
22659fc09adf762bd11deced9daa678a

SHA1
91985aa88fe6f0db5c26dca7996bf7d7f58892b7

SHA256
825fe1a58de35e88f0ffa6cb94bf210ef4b702d74950db871661dcd93dc8fbf1

SHA512
8b06c5b34bb630eea7a7fe0007cea8a1c8f11482018750e1b5c293df7c2471415c49101e7bee2356821a78487bfb7012d5fa1d265b31b536066ec39cab024cab

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

Filesize
376B

MD5
a54117ca0471a719cd53503ea675b387

SHA1
7f1ebb0a5bd29f3c447c022bcc55c34fd8b0bc9b

SHA256
fab3c97ef97788e8f089a6eac100219a893aa263c9ec657ac7aecd5bac0c1b6f

SHA512
3ed9e3f1214bb2c6811854b791605f98d5c9397ed6318c88c47e1c8355c75fc5e1320faf99528c6fdb8f93da5d467be805831a2f7cc544250c781e7fb956f51a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

Filesize
376B

MD5
44d2e31cae08d92b5b07bed11c0e7633

SHA1
d3ccf710a2cc0b732dd37fc2a7de0fdd8257fc03

SHA256
7708fe6be8ae3bed4706e4ca11785b0fa882783147038e26b22f04af68bb2641

SHA512
ec6f75936134bf92017e88bdfca9836efaee72c903c458672bd4a0faac5a1d55ea85c1212333b2bd7587d95b753a0f63b9508d3549de1c77b46baedcbe77c5d3

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

Filesize
6KB

MD5
cf6a775ae24379db8ba73640ef1cfed6

SHA1
0972660909b738c238e0c4f00e63ffbe83cf457e

SHA256
1711997cb9e238808e2e57168b8cee1513e1c84b7004089a4e71aca394c3f5c2

SHA512
956520b357bb96754c8b0c51dbaa0dc21b820f7b2c45198cb8e4e6aaa2fd2d88620402644835edcd3422c89343bc54cec9881c27f95ff5c367f82e97fffcf94a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

Filesize
440B

MD5
28ecb334a8785bb9bd3292895f4fc641

SHA1
bfea7904d056be83a35d6c087e3af0f9f23c6637

SHA256
6fb19a941625a962e526399115905c7858e8839fcc0f2476de194313366989fa

SHA512
b675d2b0a31bbca3dae2420a9334940834dd54c504809ff5e5cdbfa38a53a360a20eb2cfb173c7fbca81eba862dce44536edcdb9a9511270ebdd388ac8f69a27

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF

Filesize
26KB

MD5
85622fd28103fa6d85af7a0227a0fccd

SHA1
f86def61a507837d15610334be416bb0219ce590

SHA256
738640a15e632ce1b8b90c5c8c8509313a022b4d774f60feca727ad5fe55b0f3

SHA512
ec3e672d9c6a86ab22b4bc4330096d484593f15cb5e8b2ae1cc527946248bac52269636fa818d0e00a43890770d6f5c8d5b54a42deef91d2a88c6cb4462b7d2f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

Filesize
827B

MD5
f51ec36f0ef9221c190e3190e3582dbd

SHA1
289f3c0c5ad3eea4adadb1c0f003d5468db271b2

SHA256
90a1a66afd52eeac977c632d3d9d0abb40ce0e928be9c14bf530e7abe04ec6f8

SHA512
186217ee2dcdadbfd98931387bb41331d2c5bb3b7ca83d388197cfb4c0076ff532fe17bdc8bf071e53af495a6f6f984d7c4e3a0923a0715d64290ecd3634a5c1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

Filesize
882B

MD5
01b064808715b623429a567415daef47

SHA1
a57fe5eb710fbedaff534b18b5f579192ef98844

SHA256
8ef75e254c690d70c0bd70885bac4e3f6f4475ec5da825bf3a732a0a70e9e2da

SHA512
dababcb544b15fd050fb09bcc9e1cdfcafed759ce627471d92533046e470c3bf66dd19354aeb3b320e25c2d285b02a1adc483bca058c669c7d59560069686f3b

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

Filesize
3KB

MD5
48805b7cfa3710b3c9c033f7a46194a6

SHA1
5e940b8bb38fe481fc2403a4c2039faf037b8e6c

SHA256
0f25cd10660aea58401e0f671fe2960f87a2fcd3f98dee0ee2366318d97f0f04

SHA512
d267eb2288539e55628c2adf5f2d3816639522e40696aa38a36f0e4d94b17c993e605bf88e16ca02163b3eb448bff0f4d3cba167e88bb28259ddd922869d1dea

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

Filesize
2KB

MD5
dfe93bf4f779260d19bb300052c7a852

SHA1
9a0bef3a9114951d5869b0cf20745624cb97f1cc

SHA256
32a933c2154b9214c2b392483222df726d1c49aa7988d10346b3e2e5c4419d00

SHA512
c8d60570f12405b03dea125ab06fbeef7132fe9276706858735922964e58d5a40844d06bad463679dbc4e10d75924bc5dbca87508c81fdc1c06bf40604551623

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

Filesize
19KB

MD5
c7e710c6f156f38984e77e47f85ede2f

SHA1
fe29aa80dc8198cab83b55108f4ea8c2cfca326e

SHA256
ddd5eeb0e7924e3908c2282a8111b5e7803b7b5f7ed2479ce86a07240d177be0

SHA512
c23e0e21838fb21038a777594225438efd1af823c60dced80b873cae93f052e357fff7e6970139ee0b25ca0e6dcebe5ab2798fe180477b03817c6bcbd9bdfdb1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

Filesize
902B

MD5
e8f5bd9853c505749bb9b92e5e574d7d

SHA1
8a780d54e1b802e69cf494d26c9a9ad9ae238c66

SHA256
331e6bb3c085c9ae9ea57b3ebf7d6a84459417d17df076436e816a22ba6b0b67

SHA512
2320f10c5ca305f09d8670c061459b76534739882d66a7b79ca9fe384b3c3c4e25b7c70c8f14976cc28e7289fb1f506df36906637b7c8fd1e7e0a2187994e2cf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

Filesize
864B

MD5
38ae069e91bf578351f4f8ba037d1b08

SHA1
87440f634fe83d32cde884e01871dbc6ef6d9e18

SHA256
732eb2ef701ca8a287e1756cc38f64f61bde7a0b1059037c38f821ff1a268429

SHA512
b10df4174428d357c7db59303cfec5682250fb503392f76d878cc4aac1745f9d60468941db864195af94dc86c83dfbe7d2e4eb72ed9422f37addbeb5f5dc6bf7

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

Filesize
872B

MD5
8aa9052cadc111ba5a8c45c873f73f43

SHA1
e8d5e401d2c37e07199168189c0b924993b69db9

SHA256
d4b2be69716400e1243299bd53bd181a33cd996f4b067e16320ea0b1811b0008

SHA512
9499694b81d5420790d38ce1945dbd05172ed721e9d243ba0a9fccde83687c301b4ba15b2c696a2b842656de0a8e3aef01c0aa81927a6e27fe732fae2e9dceb5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

Filesize
592B

MD5
636f9f4df4976646d132899d411a22c5

SHA1
a34a8dfee1784b5a7a6ffa586f7a510c5e08a4ff

SHA256
e8851985caa0b0137878514cb139a19a1276df9680b7e4a07282edd4d39941ec

SHA512
f11a20452f375f1080157343517d0998690b2b111a82f4c503cfe3d9aea3643a3a0eb3e9c45264e053c0be127ba45cdf5d288ae59b2644ec5e78e2b215224ebc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

Filesize
911B

MD5
4c7a0438ca0888b1fe8d0310a7b12101

SHA1
d428480de6fdaab9c1aabd22763670288ff72449

SHA256
d400b8d91601654dadbd0027fe8b59b55a866b745d74716789d48b0185dfa52d

SHA512
13969bf37daeae3107c44a758889cf5c0dd9297173b0d4a607cea02e2c7b52393a08382b9ed752d3381fd553b276632686d29075b04e5617d1a165ffcaccab27

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

Filesize
637B

MD5
efa46a552b5a3a6e7f689425c0257880

SHA1
84de669139ed719aeb2c9b8b6c668cb401845baf

SHA256
49a760fddc9775881d551b2c26562c10a6ed10428d0c4d0dde455d7f5be44817

SHA512
d80f92de7b800d1f454a26ae1a929910e6f86ed28f1bee4d3f654df4540a833524de81f79e686d3119b85ec55fbc9de75012423b99d7be4f2e793e360994a903

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

Filesize
885B

MD5
e0b2151bccca64f428bf3d0da546c1cc

SHA1
5e80f99230e52459f01249dcba80f534a5bf50e4

SHA256
6a987c4c915b961d54dc44e4476d480a8e48ed3d618bd52d4089b0f88453aa15

SHA512
5e8e88c9dfb58997f9a2805e2776b28f6af2adbf9106bf6bbdc121cb5468277ec2414493adf7c523ccafcff52aecd2d4eb377c0737e3497caf2d5e7015516850

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

Filesize
5KB

MD5
0a00cd23ce30868f046e617f4aafad41

SHA1
e6376587c6c906f45d5ed84deb18c6bceb5c11be

SHA256
220d6d9a5443cbcead1c5bed0c09bae2ea4ed75f3219a16e6be829c9ee1dc0fe

SHA512
ba13612080f60c0c8768c23ad6a84b740f1a0fa632b0102f6eba90d9aeec6d1d7df9b8ada63d62d5511b912276c38861462b8364fb001da52d918e254732a128

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

Filesize
1KB

MD5
b621e23c328e5435a01999f620acfc1e

SHA1
f5d712838ec0844a8c875514aee8b44e615dcadd

SHA256
0022a9af13e683d2ccd6ce915418ba92e8ed4c872964580854a4222818eedaa8

SHA512
ae8d865c3937db9f0b6f36683dec69cac71b12c7894638997639f47ec0ce129ae0335179348ad8824a2cdaa821c94f89511e22a909f7551995aaab80dcca8531

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

Filesize
627B

MD5
814126a20a46e9512ffa76aaf00961d0

SHA1
76164726734fced31826c21982c245833962cd18

SHA256
cc5c053fd26ce64bdf84c3f80ba61c3359212c2fe203ae65039af282ffa8d547

SHA512
0ce60d0d5fa7eabc573803c4ff5fb282e47aaf9c86f23febee15f3c3b1f6f2853593ecc815b451f0cf4986bac2e3ebd94c5b0fa040d802c3e927504c2d8434fe

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

Filesize
860B

MD5
e0fceb37d15aea575568e908bd3ec23c

SHA1
b06076dd9f724f58b58a51ce4a83e4daa0e8dfa6

SHA256
e6ffa048b91ef3067f93b53bd3244b09dba237dcaf6595b46af316022e56a053

SHA512
34d0b6241d6ff586b8b088d5fd88b4463c5d2bdb9852d1b1cc71a1c70eaa72909cca4276121a527d4e90161c2b8a7abea664b4dd89b04cd2d73d79e6a80925e5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

Filesize
859B

MD5
2c06ec81ecb8a0b2cc45df26deccd113

SHA1
20aba185da5d62bf8a8bf5acdcf78a8e57b7e53b

SHA256
19230260c853a73617d37ef3a680d9f37199b6044ec42f06a6ca90d511df57ba

SHA512
6d1f9970453ad4c4e952e93e3ea752ba12dd5e91c30e4a89fc285bd702f06511c045c5a7ebcfae9052f202c00ab8b4ecd894f8f357b160862e381d089099e9a8

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

Filesize
881B

MD5
478bf8488ca6651059d7e32da6439102

SHA1
15f717557c8b24d7c991de82f28e6842430492c1

SHA256
48193ced6da5c117c3cb5d623a03b4967b0684b16a89d4178a8501f8ca34c3a0

SHA512
e2e0cfa35126bbd2920f3f4b20ee10aff14baf4fdc6c731109320cec494bce838c2b3efb0862a9b83bb61c9d4d56514891f7fcbc7aa402fe34dec50da04bb5a9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

Filesize
859B

MD5
6a0ef3dbdca3ad4f6ee3c00c051567fc

SHA1
b2a58fe84cad9bb79b4b5046bb291cda57d413bc

SHA256
c53668b52aa507c1a468da2f9c7356f00675ba205a1564fbb87c491d54d6a80b

SHA512
d9604e0f351f9f1f9aada89cc7438ad57b3b4abe8068d9895cc8cf00904b8622a10bb50de8f0b3a619ed6248d14f82f61e48a00e9f153004a35f50cabfc56b29

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

Filesize
875B

MD5
4efe258956351c5f9627fad92f2515a9

SHA1
2132362d3071cfe21bf792df223318314f565033

SHA256
9dfef08b8435dec8860c6e3b4a7a981e914596c3f42574b5b43917af8a9e98a2

SHA512
7b218ba29eb938b1ff9f41fd2832c3262bd427256061b751b949a7b4b08d0219e6458724964bf425a9f95c466f606c21f6c686e1332094fe747f8b8c5f828e16

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

Filesize
873B

MD5
dd5d74ef3edfdd5c746f145b3d9908b9

SHA1
cbc43731033d53855d9bfe4d483c7fcfce63bdcb

SHA256
65138dcf2ecd3cf8df11ac44ad8ba93ebc30d0efb0a0d44db05410af540f520c

SHA512
411f5189e452027172c96525679c42b67f6c07d6a6e73641b6c0a45d0a49487ca2d0451160784ce4476c18442bebc9729bc97cee2550b363a18f28a8fb9470d2

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

Filesize
862B

MD5
dd597019adc3d6cf216d677b7c85a201

SHA1
dfd93664a95cd3b918af04d25f99b554367b70df

SHA256
90b5d8eab15eef9bc749c72826737b05198afaecd4516f615df2b9a445a61f61

SHA512
08e1d00e8d22fa58467f99e648bb59bbcab08005c774240b87f81d9ac03322f2bf6f4031fb6175981baabfe46e96b0bfc8d0d554b218a843c20793316254dcaa

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

Filesize
895B

MD5
6d5a9c8cb62c3cb5f32681d459fd1ca3

SHA1
20884bec6b858f4aef6c8d125d6110fa7897f456

SHA256
5c3af2c0fff7e785a69a0d5a994caa31dc57aa94c0cef2679dc8af663511d8fe

SHA512
0cdee6e3d72fd0338da841d0330eadd407ebf5be68622408863d3fd0f4705acb1935f7406cb02db042329c616396ebf1ef39810f47f977fefa9b000dd38784cb

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml

Filesize
247KB

MD5
6d8db736c5cac2df3d465c0e47bcfc1e

SHA1
72b2de5dba089c24fd91fd3e28eb46a5b9c8d860

SHA256
b940fcd19e925eda491f4e9845926391cdcf43d339e55b9d5463a09d12307791

SHA512
88944ffa712787c738c0ad3eac333a14a90c6d4a4466af9e855560468068a024f2567c43bbcee8db8091af349817a69b4064e6c0c859262c97fc4f33a26afe37

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\TALK21.COM.XML

Filesize
819B

MD5
e988fb0a3abd14732a897bc4f66c2d3e

SHA1
b57fe25fd2adbc1e104b9bf2f9ee9f79433a8663

SHA256
0b020712a3c1e7185524dd0bafa21ed5fb1b0392f9d4c0f739ea6afd7d36ac55

SHA512
c532e8810247b4443ff3a1c599436da9fc03428144d9f655bc60043878e90025f92cdd96146172149a47a704b5783a08506d79fabf009e70c18e6fecbea5f30a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML

Filesize
818B

MD5
f4695495703d293793c135a62efc9e7a

SHA1
59c8f547ce4eed97cd5c0d33f5104d8170f4ffa0

SHA256
aedf3365b1ef5072a08c9331f6c61938eb7d4b56a0a3c2a528d72c3b1d82d8f0

SHA512
3b5f3197b4310accb366d19e5b9e966469a667c4386f878140f0e3fb8b07800e56ac0411f60c649cb19e9b50d7c95d3bb87cda3289c234df579e015b04f6f056

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
165B

MD5
cf2a9b495bf27af7e4e1ffa4b156ad59

SHA1
a4139aaf42bf364fa098ffc27390d55df326ca6a

SHA256
3f03e1b2f11053d4990bd7696f258dc6379f224d95708074039520d5199840d9

SHA512
284f865ec31cb62756c249b4d2367932583ca75497db0f61e7ec8ff2bcaa2859ab519b8ea10f0897502eee08855c1d04ff92ef56410ac1d30217bc648c1fbe30

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
59d3576817bda61dd5ec6ae3155454ab

SHA1
48a991045c2590a1dc7c6229bc40648d79426997

SHA256
b5e2cb3f55e378678945a0b2b0681b2bab9199d77a1b1868c434795b5e50a3cf

SHA512
76f766d1d5279589fcec2d33ef2cd78137f6660c55312688877260efacd689daefffd1bcce5fe972d26cbee43276996302fc4d6b08140adbfaf7931bdb18169b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
0405445137198a7023212c0b1db0332a

SHA1
290342d8d326da50cfb64785af5bdcbb360a921e

SHA256
395515a1b3c64029e50a6374f73f5c05482572663762201c29a4bf241fe9106a

SHA512
1cb7b5f0b10825b0057f6c1c7c598e3c89b1e6c2d54d1923d553a67d449f8e7d922afda5879c09f0defd31a45406fd02d8cba35e3e5056b189b8925f36e0b4fe

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA

Filesize
7KB

MD5
f27300cbe0e0a8bc9925c6d5cd57bb66

SHA1
198f4ad61030933486b42e5743215c4e147df789

SHA256
6715e95c7c4c610e76c40ffc882a340adc934669bf50b1fcdfee12afef5497d3

SHA512
ae668f65cf79d285cb5bd84fa1dbf15128c61c620485285d4f586a4d31dd604b50d42aa0567a88c9d1da322dd1de73dfba6fd4e63f46237aa3e39c54853163a5

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
395a4a168e1c5d58ae1820d4abdab29c

SHA1
70735d7c7ae2bb53b1503092386ebcfde4cfdd7f

SHA256
f44ae669cd2260f5e67447f74da57ee40cc43f31998b604218cb9db785872231

SHA512
46206fbe0d763ddce16ee122ea536401f901893271fd4bdb70ba466ad53e4e7f4dd88cf25c5eccd27309f54cddd888dee1c9a82d511e42b1044ed9eeedd8ef6f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

Filesize
7KB

MD5
eb20d2e932cac3dc95044ba04b63a1e0

SHA1
e10d23a2fbe2c07569636d544c3d9da9dcb6a35c

SHA256
396092cf68e864a7e900da0f5127588df6f62d13f5dcdfd55f90f296c330c992

SHA512
6a21a7d1cde803ba2b84a46b5f0fe318cf6de29ef4240a6fc0cacb4da0a3473a479c758ce3071ce7bd8edc638f6ca3f1f46c0f5974e18ccf1bc36f2f208f3a78

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
109KB

MD5
55be175571134073b50fdbb8f786a99d

SHA1
931ce2c7edd1c9ec1a0c1b8ab2d31c8519a99470

SHA256
a1280e5d41969f18e7e59a317d4c0c701e7a357083c3cd4b23e5401aedb997dd

SHA512
166051f28101452c4fc1901da226f5b2046a4e0f3e1dd84d5efbce2130a54268f51fdffffe07ada1f78c00f802be28c4a5c4f9d736571a5baeadb090e00b55a2

Download Submit
C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
e15a3838dc4d139e707a6a4561d963d5

SHA1
51d22a023c7fd22e4463a56e04ad97cd0b9f5fd6

SHA256
0cd69c8bd53e89326439979172d27fe578f2abb983a77c1df3a2765d1a26c2da

SHA512
63f2073316d993d269ad50ecd1fc622d036e0b3a4fd581cf1a11c4acb69f8328fad7636ad47455d9e9023485eef98befa02bcc4d2ac7099ac91306f08f6e8dbe

Download Submit
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000

Filesize
252B

MD5
8b02e5a8eae1a7aa70baee22213a0910

SHA1
1a33a9614fbba0537352ded9b5145b80b1e630fe

SHA256
2580812a445e4908f1381a96de4783b32639699fa250ebd3c8db4d285fc99197

SHA512
d1d012c0917e28021d69a26c92b7a79e9b04f3743625c8fd93218b59cfed554d3d9ba3ed74e903a1eb90b7acc66c559eb2458c8f1cd69fc672ba32ad1a96575c

Download Submit
C:\Users\Admin\AppData\Local\Temp\ntfs_system.bat

Filesize
98B

MD5
7e039f12e215a66f5ffe77b553372c4e

SHA1
b67129403cc7e1f10e1a1522d82426a740c6aef1

SHA256
8bd5b66c5131bb5e969683e4229d76b6286c061e27ce099cf0562ca53d925721

SHA512
d96abcaec02168551d574e1b76743544b41eb248d31c2eae532d9659c9caf0680eac8281469f3f34330a2c04fe21f5d0e181857efd3b651217612102b2541604

Download Submit
C:\vcredist2010_x86.log.html

Filesize
81KB

MD5
749ed4a0725dd3b929bf518c74465c25

SHA1
2addca1052d98345d0c5a21963d88acbb6a71097

SHA256
228e330a0128d6cde3ff2204dce10bcabe47842a15ed3cf0ca44e6c00650ddd7

SHA512
5bfaca166c896ea56a1508ab51ad2ab74691f4dd03d49bf717de8b3500db124ab17e20c173b3b9dcc802ecb0159b43db05dce56876f09b62cf593b8e983e1ef2

Download Submit