Windows
Analysis Report
07762.zip
Overview
General Information
Detection
Score: | 0 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 80% |
Signatures
Classification
- System is w10x64_ra
- rundll32.exe (PID: 6064 cmdline:
C:\Windows \System32\ rundll32.e xe C:\Wind ows\System 32\shell32 .dll,SHCre ateLocalSe rverRunDll {9aa46009 -3ce0-458a -a354-7156 10a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)
- notepad.exe (PID: 2748 cmdline:
"C:\Window s\system32 \NOTEPAD.E XE" C:\Use rs\user\Ap pData\Loca l\Temp\Tem p1_07762.z ip\License Free.txt MD5: 27F71B12CB585541885A31BE22F61C83)
- notepad.exe (PID: 3940 cmdline:
"C:\Window s\system32 \NOTEPAD.E XE" C:\Use rs\user\Ap pData\Loca l\Temp\Tem p1_07762.z ip\License Premium.t xt MD5: 27F71B12CB585541885A31BE22F61C83)
- notepad.exe (PID: 5768 cmdline:
"C:\Window s\system32 \NOTEPAD.E XE" C:\Use rs\user\Ap pData\Loca l\Temp\Tem p1_07762.z ip\License Free.txt MD5: 27F71B12CB585541885A31BE22F61C83)
- POWERPNT.EXE (PID: 3900 cmdline:
"C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\POWER PNT.EXE" " C:\Users\u ser\AppDat a\Local\Te mp\Temp1_0 7762.zip\9 147.pptx" /ou "" MD5: 2A43FE7F9F699F7F53FEBC254F68F46D) - ai.exe (PID: 6016 cmdline:
"C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "CE8 C68FA-3231 -4514-8C06 -29F37A756 456" "8D68 3D65-D06C- 48E9-BE7E- 725356EC10 4A" "3900" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\POWE RPNT.EXE" "PowerPoin tCombinedF loatieLreO nline.onnx " MD5: EC652BEDD90E089D9406AFED89A8A8BD)
- POWERPNT.EXE (PID: 6968 cmdline:
"C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\POWER PNT.EXE" " C:\Users\u ser\Deskto p\07762\91 47.pptx" / ou "" MD5: 2A43FE7F9F699F7F53FEBC254F68F46D) - ai.exe (PID: 1852 cmdline:
"C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "689 7F103-C475 -47A1-B4D2 -6F32E7B38 2BE" "2CB6 4361-22CC- 4FC4-B8B0- 5769DC4D85 C0" "6968" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\POWE RPNT.EXE" "PowerPoin tCombinedF loatieLreO nline.onnx " MD5: EC652BEDD90E089D9406AFED89A8A8BD)
- notepad.exe (PID: 3712 cmdline:
"C:\Window s\system32 \NOTEPAD.E XE" C:\Use rs\user\De sktop\0776 2\License Free.txt MD5: 27F71B12CB585541885A31BE22F61C83)
- cleanup
Click to jump to signature section
There are no malicious signatures, click here to show all signatures.
Source: | Window detected: |
Source: | File opened: |
Source: | Memory has grown: |
Source: | Classification label: |
Source: | File created: |
Source: | File created: |
Source: | File read: |
Source: | Key opened: |
Source: | Process created: |
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: | ||
Source: | Process created: |
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: | ||
Source: | Section loaded: |
Source: | Key value queried: |
Source: | Window detected: |
Source: | Window detected: |
Source: | Key opened: |
Source: | Static file information: |
Source: | File opened: |
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: | ||
Source: | Process information set: |
Source: | Process information queried: |
Source: | Queries volume information: | ||
Source: | Queries volume information: | ||
Source: | Queries volume information: | ||
Source: | Queries volume information: | ||
Source: | Queries volume information: | ||
Source: | Queries volume information: |
Source: | Key value queried: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | Data Obfuscation | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 DLL Side-Loading | 1 Rundll32 | LSASS Memory | 1 File and Directory Discovery | Remote Desktop Protocol | Data from Removable Media | Junk Data | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Extra Window Memory Injection | 1 Process Injection | Security Account Manager | 13 System Information Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | Steganography | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 DLL Side-Loading | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | Protocol Impersonation | Traffic Duplication | Data Destruction |
Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Extra Window Memory Injection | LSA Secrets | Internet Connection Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | ReversingLabs |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
52.113.194.132 | unknown | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
20.189.173.14 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
52.109.8.89 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
23.56.109.208 | unknown | United States | 20940 | AKAMAI-ASN1EU | false | |
23.206.6.29 | unknown | United States | 16625 | AKAMAI-ASUS | false | |
23.1.237.16 | unknown | United States | 20940 | AKAMAI-ASN1EU | false | |
52.109.0.142 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false |
Joe Sandbox version: | 40.0.0 Tourmaline |
Analysis ID: | 1431104 |
Start date and time: | 2024-04-24 15:22:40 +02:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 24 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | stream |
Analysis stop reason: | Timeout |
Sample name: | 07762.zip |
Detection: | CLEAN |
Classification: | clean0.winZIP@11/93@0/34 |
Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe
- Excluded IPs from analysis (whitelisted): 52.109.8.89, 52.113.194.132, 23.206.6.29
- Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtSetValueKey calls found.
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 520156 |
Entropy (8bit): | 4.907666742859367 |
Encrypted: | false |
SSDEEP: | |
MD5: | 036628E3E3F0728DAA7D53AC1B3EF8CC |
SHA1: | 65327D9039335E1BAF9E14639AE355195766C9EC |
SHA-256: | 2CAEC4D00BD356241B8B405B1B74386C677D501A7A23CE6EF916EAF912541544 |
SHA-512: | C6524E4C732E1827B4FA8DA07DFF92F3024E15822578C6945B8A076498A85FF0D0C933E01F2AF98BA90A3E6A24DAB1601C07BE9D8D7193F4FB48A8E63FA75821 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_39.ttf
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 767532 |
Entropy (8bit): | 6.559103097590493 |
Encrypted: | false |
SSDEEP: | |
MD5: | 1BE236301B686323302632C0EACCFD6F |
SHA1: | 7EF18B642DBFA9FB6E8AFABACB50F6CA6BD73BB4 |
SHA-256: | 90200D640623BFB0518B18D72C3F9828BC6EDA63EAB2DA90FBC27A08AAD165D7 |
SHA-512: | BA6763BDB0C19103E417D808939739EF61FC15C7C4E7A8D10BB0120DC461D028054FF20A54BCB9A98FA9702B412D14CDC0270F2147F6C3FF5CB22A711934F276 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Powerpoint.CampaignStates.json
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 3573 |
Entropy (8bit): | 5.169035164546463 |
Encrypted: | false |
SSDEEP: | |
MD5: | 53A3C12ECCD3A7AF416BA4C322151C2B |
SHA1: | F478B30A11C4133E039841EC14E72B8D2AC6BC2A |
SHA-256: | 0D3BE9ED53321BB320EB2615669386BD5D3CE96102F6A7E375E27257080E29B7 |
SHA-512: | C7ECCD22CAB9F8902976DFFD704E059BAD219833AD2FE0A0FF3BBB37E212222B6662419AE2A48F5A6160683171B9087D68C2BCBAFC3FD84E1B1E8246EF282B8B |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Powerpoint.GovernedChannelStates.json
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 740 |
Entropy (8bit): | 4.578658879460996 |
Encrypted: | false |
SSDEEP: | |
MD5: | 439A34DE8DA5C04AF25AADB84A2120D4 |
SHA1: | F12F9FF6E03A5762BD03061557029446680B1DAE |
SHA-256: | 32B560C75C25C6F56C0439F67A3FA7D4F271F07B435EE41575A3D82C6C612880 |
SHA-512: | BE704CD0DF8041945D16B8103135650B33D5E97D6F7C202E9C9499C3AE57E33855C2CC3A8F73B578DB482F47026C756F1FAA411A2CC58B5E53CE23CD24229834 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 87 |
Entropy (8bit): | 4.576828956814449 |
Encrypted: | false |
SSDEEP: | |
MD5: | E4E83F8123E9740B8AA3C3DFA77C1C04 |
SHA1: | 5281EAE96EFDE7B0E16A1D977F005F0D3BD7AAD0 |
SHA-256: | 6034F27B0823B2A6A76FE296E851939FD05324D0AF9D55F249C79AF118B0EB31 |
SHA-512: | BD6B33FD2BBCE4A46991BC0D877695D16F7E60B1959A0DEFC79B627E569E5C6CAC7B4AD4E3E1D8389A08584602A51CF84D44CF247F03BEB95F7D307FBBA12BB9 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Powerpoint.SurveyEventActivityStats.json
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 110 |
Entropy (8bit): | 4.992032328238495 |
Encrypted: | false |
SSDEEP: | |
MD5: | 218D9768F3EDA7B4EE867596276D0A32 |
SHA1: | DEF2F0CBB719DD52F61CCF3A7A1C6B08F3F1FA2E |
SHA-256: | 48E3BC04FDA1038F6EB0F537ED12F5268E39A4183F7E17B9B8B6BF8E992FB33A |
SHA-512: | 7AAE7C00143E47B1FB9C5DCC30AAC2BAB9737F66172C9ECB76F4712CAEAFAFBC8331CFADA8AE1F6FE2378307427ACF4A47AA51C9459C47187879BDF281B3496C |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Powerpoint.SurveyHistoryStats.json
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 14 |
Entropy (8bit): | 3.378783493486176 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6CA4960355E4951C72AA5F6364E459D5 |
SHA1: | 2FD90B4EC32804DFF7A41B6E63C8B0A40B592113 |
SHA-256: | 88301F0B7E96132A2699A8BCE47D120855C7F0A37054540019E3204D6BCBABA3 |
SHA-512: | 8544CD778717788B7484FAF2001F463320A357DB63CB72715C1395EF19D32EEC4278BAB07F15DE3F4FED6AF7E4F96C41908A0C45BE94D5CDD8121877ECCF310D |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStoreV3\PowerPoint\ASkwMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDBfTnVsbAA.S
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | modified |
Size (bytes): | 177 |
Entropy (8bit): | 5.372724437694948 |
Encrypted: | false |
SSDEEP: | |
MD5: | 63E40E1A78466AFA770FFAB00150DF94 |
SHA1: | 9998CE397A192EB419C5022567588D968F43BB6A |
SHA-256: | D0193F62E85E037A74A0E545793B9F0A600C72B76C306045A0747D129B8FA651 |
SHA-512: | 3D3D3462F44BAA159FD1A4B2EAD83F923AC6EAFC8F88CBEB0831E8BE36E799AE6CA55BB8ACCC3DAFC20B5E7F5B09464C3259C6C8F14A8C4694D3BDC22D987024 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStore\PowerPoint\1380790193167760279.C4
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 32768 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | BB7DF04E1B0A2570657527A7E108AE23 |
SHA1: | 5188431849B4613152FD7BDBA6A3FF0A4FD6424B |
SHA-256: | C35020473AED1B4642CD726CAD727B63FFF2824AD68CEDD7FFB73C7CBD890479 |
SHA-512: | 768007E06B0CD9E62D50F458B9435C6DDA0A6D272F0B15550F97C478394B743331C3A9C9236E09AB5B9CB3B423B2320A5D66EB3C7068DB9EA37891CA40E47012 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStore\PowerPoint\ASkwMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDBfTnVsbAA.S
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 104 |
Entropy (8bit): | 5.267848903001116 |
Encrypted: | false |
SSDEEP: | |
MD5: | C499D330A4A0218B7F894F911E71F18B |
SHA1: | 60ACCC06E64B946C6C6FA27D450A04EA66797A2A |
SHA-256: | 4D0FDE95BA6E764C4093E392BAC1667156855390440A760135D66CE48B7D17CA |
SHA-512: | 51D49680592512AB8B8E14C7F8A550D1F3541D623C0B31983869BC43BD03CB8BB17A92B2FB852F7FFF985AAE03C609B516C00DFEA97199678102677BD167CB1C |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4F53E940-A73A-41B6-922A-6EEA243587F9
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 166203 |
Entropy (8bit): | 5.340907507744098 |
Encrypted: | false |
SSDEEP: | |
MD5: | 429F5153DD04D4912371E8B06C570194 |
SHA1: | 3BF247AE9376774D10085CED122B0E94078A6617 |
SHA-256: | B6DF0E2919206DE6ADA5EBA8B8ED1AFE8520AAAE566EA8DD97FB7AEE20140F6D |
SHA-512: | 1BE8E60EE58E24ECBA203E1D04B1DDE0A9593AD629DCEEA0C5D162705F0914945B677A851DBED560BF7D5A2B0334B83B14618EA4CCB37EEBB2DF5D2E6C2F5DC8 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4096 |
Entropy (8bit): | 0.09216609452072291 |
Encrypted: | false |
SSDEEP: | |
MD5: | F138A66469C10D5761C6CBB36F2163C3 |
SHA1: | EEA136206474280549586923B7A4A3C6D5DB1E25 |
SHA-256: | C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6 |
SHA-512: | 9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4616 |
Entropy (8bit): | 0.13760166725504608 |
Encrypted: | false |
SSDEEP: | |
MD5: | 61F949B499AE1BB9E05932119A6432EA |
SHA1: | C5A0671E936706E6DC6FEE3C335E71C42467B567 |
SHA-256: | 667CAA5300AD613A2B1E2090D3E9E7034A75140296030BC5113B3A0AB1C8ADBE |
SHA-512: | 396E6604C29FCBD2D2A01F531D14CD1A0844BF81E6C31ACEA79DAE4C8635838D180B141113784C648ECCCA1FCEF01FBE3051101B75AAC539AF3D5209C528FB94 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 32768 |
Entropy (8bit): | 0.045653017592669876 |
Encrypted: | false |
SSDEEP: | |
MD5: | 4258F16CAD4A1344A7BA6E1291AD2654 |
SHA1: | 66EA3BC883D6E5C49D4914947BF88E59B1DD3A82 |
SHA-256: | 08CF5830EC45D499883DB70105ADDA173F9B104989839DCAFA45F4194FCC3EA5 |
SHA-512: | 73B69F886E291854B3DD1C43E72C6D6D95993D9CA0F6DD3347605B46FBC86661395ADAC51D4747A11C189B78C4B554B862589B54F47157B8C7D9D29C087A7D5C |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | modified |
Size (bytes): | 49472 |
Entropy (8bit): | 0.4816344982926465 |
Encrypted: | false |
SSDEEP: | |
MD5: | 2EFAB66E1F8A3F1943F10504C975E29B |
SHA1: | 22F8400C06E08581E3E546E88B0612335DC27CFF |
SHA-256: | 0177B5C23763459BFA8421870DFE1784F95811FAC3B8ED21EFA327E11BF82C6A |
SHA-512: | 0CD84EDFC81B0D129631ECB8FCB9DF96CE9B54521C36F5A67F4D8B49E40FFD9123AB2B1D45DCD3056F70E1C5F4988D5525870551D793B3743FC5BCD35DAEFF71 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\POWERPNT\App1713965022897946100_BE8F30FD-744E-4700-B501-AFAD5F00A642.log
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 24453 |
Entropy (8bit): | 5.477948375567218 |
Encrypted: | false |
SSDEEP: | |
MD5: | 453F7332608862CC86826F890B7063DE |
SHA1: | A018EB68C9FA20526ED7AB6572C34F119C1F5441 |
SHA-256: | 52191CBA3CC595EB8DE316AC081D640222D0C452DC8ACEE23A7016E0BAF9B2DC |
SHA-512: | AF318C7841EF9C6F3537BAC9796F4A94047C28A1D08681CBD2F98AA8844CE80BC1EB67F6EE436660B7DD7D3B559E08B309C523A3C7F3D52E0BF1BCA931883486 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\POWERPNT\App1713965044583265800_EF75FD1E-BFAA-4CEA-98CF-ED056F751FF8.log
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 230399 |
Entropy (8bit): | 4.913655856035046 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6F79F19C57DEBF76C0D6CBD635B0B1EB |
SHA1: | DE1420911FF386ACE52528C0254A80F57A97684E |
SHA-256: | AF3C0FF1B2A46E7D001DE3170059FAE198FF6333F93C8A481CC063E772DF2070 |
SHA-512: | 2133B97B2F781C1F6520F915197A5FA27A907AAC7D53211FEDC8B2DD5E368F3E3F5AA8E9366E90359B28E0AB402A5820BE16D13148E0E341A0B696B81F374231 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 254 |
Entropy (8bit): | 3.4721586910685547 |
Encrypted: | false |
SSDEEP: | |
MD5: | 4DD225E2A305B50AF39084CE568B8110 |
SHA1: | C85173D49FC1522121AA2B0B2E98ADF4BB95B897 |
SHA-256: | 6F00DD73F169C73D425CB9895DAC12387E21C6E4C9C7DDCFB03AC32552E577F4 |
SHA-512: | 0493AB431004191381FF84AD7CC46BD09A1E0FEEC16B3183089AA8C20CC7E491FAE86FE0668A9AC677F435A203E494F5E6E9E4A0571962F6021D6156B288B28A |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4243 |
Entropy (8bit): | 7.824383764848892 |
Encrypted: | false |
SSDEEP: | |
MD5: | 7BC0A35807CD69C37A949BBD51880FF5 |
SHA1: | B5870846F44CAD890C6EFF2F272A037DA016F0D8 |
SHA-256: | BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA |
SHA-512: | B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 246 |
Entropy (8bit): | 3.5039994158393686 |
Encrypted: | false |
SSDEEP: | |
MD5: | 16711B951E1130126E240A6E4CC2E382 |
SHA1: | 8095AA79AEE029FD06428244CA2A6F28408448DB |
SHA-256: | 855342FE16234F72DA0C2765455B69CF412948CFBE70DE5F6D75A20ACDE29AE9 |
SHA-512: | 454EAA0FD669489583C317699BE1CE5D706C31058B08CF2731A7621FDEFB6609C2F648E02A7A4B2B3A3DFA8406A696D1A6FA5063DDA684BDA4450A2E9FEFB0EF |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 3683 |
Entropy (8bit): | 7.772039166640107 |
Encrypted: | false |
SSDEEP: | |
MD5: | E8308DA3D46D0BC30857243E1B7D330D |
SHA1: | C7F8E54A63EB254C194A23137F269185E07F9D10 |
SHA-256: | 6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4 |
SHA-512: | 88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 286 |
Entropy (8bit): | 3.4670546921349774 |
Encrypted: | false |
SSDEEP: | |
MD5: | 3D52060B74D7D448DC733FFE5B92CB52 |
SHA1: | 3FBA3FFC315DB5B70BF6F05C4FF84B52A50FCCBC |
SHA-256: | BB980559C6FC38B703D1E9C41720D5CE8D00D2FF86D4F25136DB02B1E54B1518 |
SHA-512: | 952EF139A72562A528C1052F1942DAE1C0509D67654BF5E7C0602C87F90147E8EE9E251D2632BCB5B511AB2FF8A3734293D0A4E3DBD3D187F5E3C042685F9A0C |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 5630 |
Entropy (8bit): | 7.87271654296772 |
Encrypted: | false |
SSDEEP: | |
MD5: | 2F8998AA9CF348F1D6DE16EAB2D92070 |
SHA1: | 85B13499937B4A584BEA0BFE60475FD4C73391B6 |
SHA-256: | 8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580 |
SHA-512: | F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 254 |
Entropy (8bit): | 3.4845992218379616 |
Encrypted: | false |
SSDEEP: | |
MD5: | E8B30D1070779CC14FBE93C8F5CF65BE |
SHA1: | 9C87F7BC66CF55634AB3F070064AAF8CC977CD05 |
SHA-256: | 2E90434BE1F6DCEA9257D42C331CD9A8D06B848859FD4742A15612B2CA6EFACB |
SHA-512: | C0D5363B43D45751192EF06C4EC3C896A161BB11DBFF1FC2E598D28C644824413C78AE3A68027F7E622AF0D709BE0FA893A3A3B4909084DF1ED9A8C1B8267FCA |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 6024 |
Entropy (8bit): | 7.886254023824049 |
Encrypted: | false |
SSDEEP: | |
MD5: | 20621E61A4C5B0FFEEC98FFB2B3BCD31 |
SHA1: | 4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4 |
SHA-256: | 223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7 |
SHA-512: | BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 16806 |
Entropy (8bit): | 7.9519793977093505 |
Encrypted: | false |
SSDEEP: | |
MD5: | 950F3AB11CB67CC651082FEBE523AF63 |
SHA1: | 418DE03AD2EF93D0BD29C3D7045E94D3771DACB4 |
SHA-256: | 9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974 |
SHA-512: | D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 254 |
Entropy (8bit): | 3.4720677950594836 |
Encrypted: | false |
SSDEEP: | |
MD5: | D04EC08EFE18D1611BDB9A5EC0CC00B1 |
SHA1: | 668FF6DFE64D5306220341FC2C1353199D122932 |
SHA-256: | FA60500F951AFAF8FFDB6D1828456D60004AE1558E8E1364ADC6ECB59F5450C9 |
SHA-512: | 97EBCCAF64FA33238B7CFC0A6D853EFB050D877E21EE87A78E17698F0BB38382FCE7F6C4D97D550276BD6B133D3099ECAB9CFCD739F31BFE545F4930D896EEC3 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 256 |
Entropy (8bit): | 3.4842773155694724 |
Encrypted: | false |
SSDEEP: | |
MD5: | 923D406B2170497AD4832F0AD3403168 |
SHA1: | A77DA08C9CB909206CDE42FE1543B9FE96DF24FB |
SHA-256: | EBF9CF474B25DDFE0F6032BA910D5250CBA2F5EDF9CF7E4B3107EDB5C13B50BF |
SHA-512: | A4CD8C74A3F916CA6B15862FCA83F17F2B1324973CCBCC8B6D9A8AEE63B83A3CD880DC6821EEADFD882D74C7EF58FA586781DED44E00E8B2ABDD367B47CE45B7 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 11380 |
Entropy (8bit): | 7.891971054886943 |
Encrypted: | false |
SSDEEP: | |
MD5: | C9F9364C659E2F0C626AC0D0BB519062 |
SHA1: | C4036C576074819309D03BB74C188BF902D1AE00 |
SHA-256: | 6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2 |
SHA-512: | 173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 252 |
Entropy (8bit): | 3.4680595384446202 |
Encrypted: | false |
SSDEEP: | |
MD5: | D79B5DE6D93AC06005761D88783B3EE6 |
SHA1: | E05BDCE2673B6AA8CBB17A138751EDFA2264DB91 |
SHA-256: | 96125D6804544B8D4E6AE8638EFD4BD1F96A1BFB9EEF57337FFF40BA9FF4CDD1 |
SHA-512: | 34057F7B2AB273964CB086D8A7DF09A4E05D244A1A27E7589BDC7E5679AB5F587FAB52A2261DB22070DA11EF016F7386635A2B8E54D83730E77A7B142C2E3929 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 5783 |
Entropy (8bit): | 7.88616857639663 |
Encrypted: | false |
SSDEEP: | |
MD5: | 8109B3C170E6C2C114164B8947F88AA1 |
SHA1: | FC63956575842219443F4B4C07A8127FBD804C84 |
SHA-256: | F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416 |
SHA-512: | F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 242 |
Entropy (8bit): | 3.4938093034530917 |
Encrypted: | false |
SSDEEP: | |
MD5: | A6B2731ECC78E7CED9ED5408AB4F2931 |
SHA1: | BA15D036D522978409846EA682A1D7778381266F |
SHA-256: | 6A2F9E46087B1F0ED0E847AF05C4D4CC9F246989794993E8F3E15B633EFDD744 |
SHA-512: | 666926612E83A7B4F6259C3FFEC3185ED3F07BDC88D43796A24C3C9F980516EB231BDEA4DC4CC05C6D7714BA12AE2DCC764CD07605118698809DEF12A71F1FDD |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4888 |
Entropy (8bit): | 7.8636569313247335 |
Encrypted: | false |
SSDEEP: | |
MD5: | 0A4CA91036DC4F3CD8B6DBF18094CF25 |
SHA1: | 6C7EED2530CD0032E9EEAB589AFBC296D106FBB9 |
SHA-256: | E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50 |
SHA-512: | 7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 238 |
Entropy (8bit): | 3.472155835869843 |
Encrypted: | false |
SSDEEP: | |
MD5: | 2240CF2315F2EB448CEA6E9CE21B5AC5 |
SHA1: | 46332668E2169E86760CBD975FF6FA9DB5274F43 |
SHA-256: | 0F7D0BD5A8CED523CFF4F99D7854C0EE007F5793FA9E1BA1CD933B0894BFBD0D |
SHA-512: | 10BA73FF861112590BF135F4B337346F9D4ACEB10798E15DC5976671E345BC29AC8527C6052FEC86AA7058E06D1E49052E49D7BCF24A01DB259B5902DB091182 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 5151 |
Entropy (8bit): | 7.859615916913808 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6C24ED9C7C868DB0D55492BB126EAFF8 |
SHA1: | C6D96D4D298573B70CF5C714151CF87532535888 |
SHA-256: | 48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F |
SHA-512: | A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 252 |
Entropy (8bit): | 3.48087342759872 |
Encrypted: | false |
SSDEEP: | |
MD5: | 69757AF3677EA8D80A2FBE44DEE7B9E4 |
SHA1: | 26AF5881B48F0CB81F194D1D96E3658F8763467C |
SHA-256: | 0F14CA656CDD95CAB385F9B722580DDE2F46F8622E17A63F4534072D86DF97C3 |
SHA-512: | BDA862300BAFC407D662872F0BFB5A7F2F72FE1B7341C1439A22A70098FA50C81D450144E757087778396496777410ADCE4B11B655455BEDC3D128B80CFB472A |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4326 |
Entropy (8bit): | 7.821066198539098 |
Encrypted: | false |
SSDEEP: | |
MD5: | D32E93F7782B21785424AE2BEA62B387 |
SHA1: | 1D5589155C319E28383BC01ED722D4C2A05EF593 |
SHA-256: | 2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478 |
SHA-512: | 5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 4026 |
Entropy (8bit): | 7.809492693601857 |
Encrypted: | false |
SSDEEP: | |
MD5: | 5D9BAD7ADB88CEE98C5203883261ACA1 |
SHA1: | FBF1647FCF19BCEA6C3CF4365C797338CA282CD2 |
SHA-256: | 8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F |
SHA-512: | 7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 250 |
Entropy (8bit): | 3.4916022431157345 |
Encrypted: | false |
SSDEEP: | |
MD5: | 1A314B08BB9194A41E3794EF54017811 |
SHA1: | D1E70DB69CA737101524C75E634BB72F969464FF |
SHA-256: | 9025DD691FCAD181D5FD5952C7AA3728CD8A2CAF20DEA14930876419BED9B379 |
SHA-512: | AB29C8674A85711EABAE5F9559E9048FE91A2F51EB12D5A46152A310DE59F759DF8C617DA248798A7C20F60E26FBB1B0FC8DB47C46B098BCD26CF8CE78989ACA |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 258 |
Entropy (8bit): | 3.4692172273306268 |
Encrypted: | false |
SSDEEP: | |
MD5: | C1B36A0547FB75445957A619201143AC |
SHA1: | CDB0A18152F57653F1A707D39F3D7FB504E244A7 |
SHA-256: | 4DFF7D1CEF6DD85CC73E1554D705FA6586A1FBD10E4A73EEE44EAABA2D2FFED9 |
SHA-512: | 0923FB41A6DB96C85B44186E861D34C26595E37F30A6F8E554BD3053B99F237D9AC893D47E8B1E9CF36556E86EFF5BE33C015CBBDD31269CDAA68D6947C47F3F |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 7370 |
Entropy (8bit): | 7.9204386289679745 |
Encrypted: | false |
SSDEEP: | |
MD5: | 586CEBC1FAC6962F9E36388E5549FFE9 |
SHA1: | D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E |
SHA-256: | 1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40 |
SHA-512: | 68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 260 |
Entropy (8bit): | 3.4895685222798054 |
Encrypted: | false |
SSDEEP: | |
MD5: | 63E8B0621B5DEFE1EF17F02EFBFC2436 |
SHA1: | 2D02AD4FD9BF89F453683B7D2B3557BC1EEEE953 |
SHA-256: | 9243D99795DCDAD26FA857CB2740E58E3ED581E3FAEF0CB3781CBCD25FB4EE06 |
SHA-512: | A27CDA84DF5AD906C9A60152F166E7BD517266CAA447195E6435997280104CBF83037F7B05AE9D4617323895DCA471117D8C150E32A3855156CB156E15FA5864 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 3075 |
Entropy (8bit): | 7.716021191059687 |
Encrypted: | false |
SSDEEP: | |
MD5: | 67766FF48AF205B771B53AA2FA82B4F4 |
SHA1: | 0964F8B9DC737E954E16984A585BDC37CE143D84 |
SHA-256: | 160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667 |
SHA-512: | AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 280 |
Entropy (8bit): | 3.484503080761839 |
Encrypted: | false |
SSDEEP: | |
MD5: | 1309D172F10DD53911779C89A06BBF65 |
SHA1: | 274351A1059868E9DEB53ADF01209E6BFBDFADFB |
SHA-256: | C190F9E7D00E053596C3477455D1639C337C0BE01012C0D4F12DFCB432F5EC56 |
SHA-512: | 31B38AD2D1FFF93E03BF707811F3A18AD08192F906E36178457306DDAB0C3D8D044C69DE575ECE6A4EE584800F827FB3C769F98EA650F1C208FEE84177070339 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 9191 |
Entropy (8bit): | 7.93263830735235 |
Encrypted: | false |
SSDEEP: | |
MD5: | 08D3A25DD65E5E0D36ADC602AE68C77D |
SHA1: | F23B6DDB3DA0015B1D8877796F7001CABA25EA64 |
SHA-256: | 58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1 |
SHA-512: | 77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 260 |
Entropy (8bit): | 3.494357416502254 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6F8FE7B05855C203F6DEC5C31885DD08 |
SHA1: | 9CC27D17B654C6205284DECA3278DA0DD0153AFF |
SHA-256: | B7F58DF058C938CCF39054B31472DC76E18A3764B78B414088A261E440870175 |
SHA-512: | C518A243E51CB4A1E3C227F6A8A8D9532EE111D5A1C86EBBB23BD4328D92CD6A0587DF65B3B40A0BE2576D8755686D2A3A55E10444D5BB09FC4E0194DB70AFE6 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 6193 |
Entropy (8bit): | 7.855499268199703 |
Encrypted: | false |
SSDEEP: | |
MD5: | 031C246FFE0E2B623BBBD231E414E0D2 |
SHA1: | A57CA6134779D54691A4EFD344BC6948E253E0BA |
SHA-256: | 2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7 |
SHA-512: | 6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 262 |
Entropy (8bit): | 3.4901887319218092 |
Encrypted: | false |
SSDEEP: | |
MD5: | 52BD0762F3DC77334807DDFC60D5F304 |
SHA1: | 5962DA7C58F742046A116DDDA5DC8EA889C4CB0E |
SHA-256: | 30C20CC835E912A6DD89FD1BF5F7D92B233B2EC24594F1C1FE0CADB03A8C3FAB |
SHA-512: | FB68B1CF9677A00D5651C51EC604B61DAC2D250D44A71D43CD69F41F16E4F0A7BAA7AD4A6F7BB870429297465A893013BBD7CC77A8F709AD6DB97F5A0927B1DD |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 5596 |
Entropy (8bit): | 7.875182123405584 |
Encrypted: | false |
SSDEEP: | |
MD5: | CDC1493350011DB9892100E94D5592FE |
SHA1: | 684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA |
SHA-256: | F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548 |
SHA-512: | 3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 264 |
Entropy (8bit): | 3.4866056878458096 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6C489D45F3B56845E68BE07EA804C698 |
SHA1: | C4C9012C0159770CB882870D4C92C307126CEC3F |
SHA-256: | 3FE447260CDCDEE287B8D01CF5F9F53738BFD6AAEC9FB9787F2826F8DEF1CA45 |
SHA-512: | D1355C48A09E7317773E4F1613C4613B7EA42D21F5A6692031D288D69D47B19E8F4D5A29AFD8B751B353FC7DE865EAE7CFE3F0BEC05F33DDF79526D64A29EB18 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 6448 |
Entropy (8bit): | 7.897260397307811 |
Encrypted: | false |
SSDEEP: | |
MD5: | 42A840DC06727E42D42C352703EC72AA |
SHA1: | 21AAAF517AFB76BF1AF4E06134786B1716241D29 |
SHA-256: | 02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7 |
SHA-512: | 8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 570901 |
Entropy (8bit): | 7.674434888248144 |
Encrypted: | false |
SSDEEP: | |
MD5: | D676DE8877ACEB43EF0ED570A2B30F0E |
SHA1: | 6C8922697105CEC7894966C9C5553BEB64744717 |
SHA-256: | DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01 |
SHA-512: | F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 282 |
Entropy (8bit): | 3.5459495297497368 |
Encrypted: | false |
SSDEEP: | |
MD5: | 76340C3F8A0BFCEDAB48B08C57D9B559 |
SHA1: | E1A6672681AA6F6D525B1D17A15BF4F912C4A69B |
SHA-256: | 78FE546321EDB34EBFA1C06F2B6ADE375F3B7C12552AB2A04892A26E121B3ECC |
SHA-512: | 49099F040C099A0AED88E7F19338140A65472A0F95ED99DEB5FA87587E792A2D11081D59FD6A83B7EE68C164329806511E4F1B8D673BEC9074B4FF1C09E3435D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 777647 |
Entropy (8bit): | 7.689662652914981 |
Encrypted: | false |
SSDEEP: | |
MD5: | B30D2EF0FC261AECE90B62E9C5597379 |
SHA1: | 4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3 |
SHA-256: | BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976 |
SHA-512: | 2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 290 |
Entropy (8bit): | 3.5091498509646044 |
Encrypted: | false |
SSDEEP: | |
MD5: | 23D59577F4AE6C6D1527A1B8CDB9AB19 |
SHA1: | A345D683E54D04CC0105C4BFFCEF8C6617A0093D |
SHA-256: | 9ADD2C3912E01C2AC7FAD6737901E4EECBCCE6EC60F8E4D78585469A440E1E2C |
SHA-512: | B85027276B888548ECB8A2FC1DB1574C26FF3FCA7AF1F29CD5074EC3642F9EC62650E7D47462837607E11DCAE879B1F83DF4762CA94667AE70CBF78F8D455346 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 562113 |
Entropy (8bit): | 7.67409707491542 |
Encrypted: | false |
SSDEEP: | |
MD5: | 4A1657A3872F9A77EC257F41B8F56B3D |
SHA1: | 4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B |
SHA-256: | C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60 |
SHA-512: | 7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 278 |
Entropy (8bit): | 3.535736910133401 |
Encrypted: | false |
SSDEEP: | |
MD5: | 487E25E610F3FC2EEA27AB54324EA8F6 |
SHA1: | 11C2BB004C5E44503704E9FFEEFA7EA7C2A9305C |
SHA-256: | 022EC5077279A8E447B590F7260E1DBFF764DE5F9CDFD4FDEE32C94C66D4A1A2 |
SHA-512: | B8DF351E2C0EF101CF91DC02E136A3EE9C1FDB18294BECB13A29D676FBBE791A80A58A18FBDEB953BC21EC54EB7608154D401407C461ABD10ACB94CE8AD0E092 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 486596 |
Entropy (8bit): | 7.668294441507828 |
Encrypted: | false |
SSDEEP: | |
MD5: | 0E37AECABDB3FDF8AAFEDB9C6D693D2F |
SHA1: | F29254D2476DF70979F723DE38A4BF41C341AC78 |
SHA-256: | 7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349 |
SHA-512: | DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 274 |
Entropy (8bit): | 3.535303979138867 |
Encrypted: | false |
SSDEEP: | |
MD5: | 35AFE8D8724F3E19EB08274906926A0B |
SHA1: | 435B528AAF746428A01F375226C5A6A04099DF75 |
SHA-256: | 97B8B2E246E4DAB15E494D2FB5F8BE3E6361A76C8B406C77902CE4DFF7AC1A35 |
SHA-512: | ACF4F124207974CFC46A6F4EA028A38D11B5AF40E55809E5B0F6F5DABA7F6FC994D286026FAC19A0B4E2311D5E9B16B8154F8566ED786E5EF7CDBA8128FD62AF |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 523048 |
Entropy (8bit): | 7.715248170753013 |
Encrypted: | false |
SSDEEP: | |
MD5: | C276F590BB846309A5E30ADC35C502AD |
SHA1: | CA6D9D6902475F0BE500B12B7204DD1864E7DD02 |
SHA-256: | 782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58 |
SHA-512: | B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 276 |
Entropy (8bit): | 3.5159096381406645 |
Encrypted: | false |
SSDEEP: | |
MD5: | 71CCB69AF8DD9821F463270FB8CBB285 |
SHA1: | 8FED3EB733A74B2A57D72961F0E4CF8BCA42C851 |
SHA-256: | 8E63D7ABA97DABF9C20D2FAC6EB1665A5D3FDEAB5FA29E4750566424AE6E40B4 |
SHA-512: | E62FC5BEAEC98C5FDD010FABDAA8D69237D31CA9A1C73F168B1C3ED90B6A9B95E613DEAD50EB8A5B71A7422942F13D6B5A299EB2353542811F2EF9DA7C3A15DC |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 558035 |
Entropy (8bit): | 7.696653383430889 |
Encrypted: | false |
SSDEEP: | |
MD5: | 3B5E44DDC6AE612E0346C58C2A5390E3 |
SHA1: | 23BCF3FCB61F80C91D2CFFD8221394B1CB359C87 |
SHA-256: | 9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2 |
SHA-512: | 2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 276 |
Entropy (8bit): | 3.5361139545278144 |
Encrypted: | false |
SSDEEP: | |
MD5: | 133D126F0DE2CC4B29ECE38194983265 |
SHA1: | D8D701298D7949BE6235493925026ED405290D43 |
SHA-256: | 08485EBF168364D846C6FD55CD9089FE2090D1EE9D1A27C1812E1247B9005E68 |
SHA-512: | 75D7322BE8A5EF05CAA48B754036A7A6C56399F17B1401F3F501DA5F32B60C1519F2981043A773A31458C3D9E1EF230EC60C9A60CAC6D52FFE16147E2E0A9830 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 608122 |
Entropy (8bit): | 7.729143855239127 |
Encrypted: | false |
SSDEEP: | |
MD5: | 8BA551EEC497947FC39D1D48EC868B54 |
SHA1: | 02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF |
SHA-256: | DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89 |
SHA-512: | CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 278 |
Entropy (8bit): | 3.516359852766808 |
Encrypted: | false |
SSDEEP: | |
MD5: | 960E28B1E0AB3522A8A8558C02694ECF |
SHA1: | 8387E9FD5179A8C811CCB5878BAC305E6A166F93 |
SHA-256: | 2707FCA8CEC54DF696F19F7BCAD5F0D824A2AC01B73815DE58F3FCF0AAB3F6A0 |
SHA-512: | 89EA06BA7D18B0B1EA624BBC052F73366522C231BD3B51745B92CF056B445F9D655F9715CBDCD3B2D02596DB4CD189D91E2FE581F2A2AA2F6D814CD3B004950A |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 165 |
Entropy (8bit): | 1.3571211171360753 |
Encrypted: | false |
SSDEEP: | |
MD5: | 096EA5AED640CA361823CC5E9F442C64 |
SHA1: | 124B2C279C4A2783CDE4E73D8902BE67842182E4 |
SHA-256: | 45172628FD0566E52A206CCC1995C0D6D5A43F7826DC03AEF7DF3C8967C74706 |
SHA-512: | 9D96E9BA06DAFB8397262DC2B8665FE126FBE6B6039F73E8E10A370BAAA2CF6CDA8C38F55A11463CD9D48B2AF501F48FF7C0E414DB2D95471019EE8FB7D45327 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 20457 |
Entropy (8bit): | 7.612540359660869 |
Encrypted: | false |
SSDEEP: | |
MD5: | 4EFA48EC307EAF2F9B346A073C67FCFB |
SHA1: | 76A7E1234FF29A2B18C968F89082A14C9C851A43 |
SHA-256: | 3EE9AE1F8DAB4C498BD561D8FCC66D83E58F11B7BB4B2776DF99F4CDA4B850C2 |
SHA-512: | 2705644D501D85A821E96732776F61641FE82820FD6A39FFAF54A45AD126C886DC36C1398CDBDBB5FE282D9B09D27F9BFE7F26A646F926DA55DFF28E61FBD696 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 20235 |
Entropy (8bit): | 7.61176626859621 |
Encrypted: | false |
SSDEEP: | |
MD5: | E3C64173B2F4AA7AB72E1396A9514BD8 |
SHA1: | 774E52F7E74B90E6A520359840B0CA54B3085D88 |
SHA-256: | 16C08547239E5B969041AB201EB55A3E30EAD400433E926257331CB945DFF094 |
SHA-512: | 7ED618578C6517ED967FB3521FD4DBED9CDFB7F7982B2B8437804786833207D246E4FCD7B85A669C305BE3B823832D2628105F01E2CF30B494172A17FC48576D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 19288 |
Entropy (8bit): | 7.570850633867256 |
Encrypted: | false |
SSDEEP: | |
MD5: | B9A6FF715719EE9DE16421AB983CA745 |
SHA1: | 6B3F68B224020CD4BF142D7EDAAEC6B471870358 |
SHA-256: | E3BE3F1E341C0FA5E9CB79E2739CF0565C6EA6C189EA3E53ACF04320459A7070 |
SHA-512: | 062A765AC4602DB64D0504B79BE7380C14C143091A09F98A5E03E18747B2166BD862CE7EF55403D27B54CEB397D95BFAE3195C15D5516786FEBDAC6CD5FBF9CD |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 22149 |
Entropy (8bit): | 7.659898883631361 |
Encrypted: | false |
SSDEEP: | |
MD5: | 66C5199CF4FB18BD4F9F3F2CCB074007 |
SHA1: | BA9D8765FFC938549CC19B69B3BF5E6522FB062E |
SHA-256: | 4A7DC4ED098E580C8D623C51B57C0BC1D601C45F40B60F39BBA5F063377C3C1F |
SHA-512: | 94C434A131CDE47CB64BCD2FB8AF442482F8ECFA63D958C832ECA935DEB10D360034EF497E2EBB720C72B4C1D7A1130A64811D362054E1D52A441B91C46034B0 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 19893 |
Entropy (8bit): | 7.592090622603185 |
Encrypted: | false |
SSDEEP: | |
MD5: | EF9CB8BDFBC08F03BEF519AD66BA642F |
SHA1: | D98C275E9402462BF52A4D28FAF57DF0D232AF6B |
SHA-256: | 93A2F873ACF5BEAD4BC0D1CC17B5E89A928D63619F70A1918B29E5230ABEAD8E |
SHA-512: | 4DFBDF389730370FA142DCFB6F7E1AC1C0540B5320FA55F94164C0693DB06C21E6D4A1316F0ABE51E51BCBDAB3FD33AE882D9E3CFDB4385AB4C3AF4C2536B0B3 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 22594 |
Entropy (8bit): | 7.674816892242868 |
Encrypted: | false |
SSDEEP: | |
MD5: | EE0129C7CC1AC92BBC3D6CB0F653FCAE |
SHA1: | 4ABAA858176B349BDAB826A7C5F9F00AC5499580 |
SHA-256: | 345AA5CA2496F975B7E33C182D5E57377F8B740F23E9A55F4B2B446723947B72 |
SHA-512: | CDDABE701C8CBA5BD5D131ABB85F9241212967CE6924E34B9D78D6F43D76A8DE017E28302FF13CE800456AD6D1B5B8FFD8891A66E5BE0C1E74CF19DF9A7AD959 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 31083 |
Entropy (8bit): | 7.814202819173796 |
Encrypted: | false |
SSDEEP: | |
MD5: | 89A9818E6658D73A73B642522FF8701F |
SHA1: | E66C95E957B74E90B444FF16D9B270ADAB12E0F4 |
SHA-256: | F747DD8B79FC69217FA3E36FAE0AB417C1A0759C28C2C4F8B7450C70171228E6 |
SHA-512: | 321782B0B633380DA69BD7E98AA05BE7FA5D19A131294CC7C0A598A6A1A1AEF97AB1068427E4223AA30976E3C8246FF5C3C1265D4768FE9909B37F38CBC9E60D |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 21791 |
Entropy (8bit): | 7.65837691872985 |
Encrypted: | false |
SSDEEP: | |
MD5: | 7BF88B3CA20EB71ED453A3361908E010 |
SHA1: | F75F86557051160507397F653D7768836E3B5655 |
SHA-256: | E555A610A61DB4F45A29A7FB196A9726C25772594252AD534453E69F05345283 |
SHA-512: | 2C3DFB0F8913D1D8FF95A55E1A1FD58CE1F9D034268CD7BC0D2BF2DCEFEA8EF05DD62B9AFDE1F983CACADD0529538381632ADFE7195EAC19CE4143414C44DBE3 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 22008 |
Entropy (8bit): | 7.662386258803613 |
Encrypted: | false |
SSDEEP: | |
MD5: | ABBF10CEE9480E41D81277E9538F98CB |
SHA1: | F4EA53D180C95E78CC1DA88CD63F4C099BF0512C |
SHA-256: | 557E0714D5536070131E7E7CDD18F0EF23FE6FB12381040812D022EC0FEE7957 |
SHA-512: | 9430DAACF3CA67A18813ECD842BE80155FD2DE0D55B7CD16560F4AAEFDA781C3E4B714D850D367259CAAB28A3BF841A5CB42140B19CFE04AC3C23C358CA87FFB |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 21875 |
Entropy (8bit): | 7.6559132103953305 |
Encrypted: | false |
SSDEEP: | |
MD5: | E532038762503FFA1371DF03FA2E222D |
SHA1: | F343B559AE21DAEF06CBCD8B2B3695DE1B1A46F0 |
SHA-256: | 5C70DD1551EB8B9B13EFAFEEAF70F08B307E110CAEE75AD9908A6A42BBCCB07E |
SHA-512: | E0712B481F1991256A01C3D02ED56645F61AA46EB5DE47E5D64D5ECD20052CDA0EE7D38208B5EE982971CCA59F2717B7CAE4DFCF235B779215E7613AA5DCD976 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 25314 |
Entropy (8bit): | 7.729848360340861 |
Encrypted: | false |
SSDEEP: | |
MD5: | C47E3430AF813DF8B02E1CB4829DD94B |
SHA1: | 35F1F1A18AA4FD2336A4EA9C6005DBE70013C7FC |
SHA-256: | F2DB1E60533F0D108D5FB1004904C1F2E8557D4493F3B251A1B3055F8F1507A3 |
SHA-512: | 6F8904E658EB7D04C6880F7CC3EC63FCFE31EF2C3A768F4ECF40B115314F23774DAEE66DCE9C55FAF0AD31075A3AC27C8967FD341C23C953CA28BDC120997287 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 23597 |
Entropy (8bit): | 7.692965575678876 |
Encrypted: | false |
SSDEEP: | |
MD5: | 7C645EC505982FE529D0E5035B378FFC |
SHA1: | 1488ED81B350938D68A47C7F0BCE8D91FB1673E2 |
SHA-256: | 298FD9DADF0ACEBB2AA058A09EEBFAE15E5D1C5A8982DEE6669C63FB6119A13D |
SHA-512: | 9F410DA5DB24B0B72E7774B4CF4398EDF0D361B9A79FBE2736A1DDD770AFE280877F5B430E0D26147CCA0524A54EA8B41F88B771F3598C2744A7803237B314B2 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 20554 |
Entropy (8bit): | 7.612044504501488 |
Encrypted: | false |
SSDEEP: | |
MD5: | 486CBCB223B873132FFAF4B8AD0AD044 |
SHA1: | B0EC82CD986C2AB5A51C577644DE32CFE9B12F92 |
SHA-256: | B217393FD2F95A11E2C594E736067870212E3C5242A212D6F9539450E8684616 |
SHA-512: | 69A48BF2B1DB64348C63FC0A50B4807FB9F0175215E306E60252FFFD792B1300128E8E847A81A0E24757B5F999875DA9E662C0F0D178071DB4F9E78239109060 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 21111 |
Entropy (8bit): | 7.6297992466897675 |
Encrypted: | false |
SSDEEP: | |
MD5: | D30AD26DBB6DECA4FDD294F48EDAD55D |
SHA1: | CA767A1B6AF72CF170C9E10438F61797E0F2E8CE |
SHA-256: | 6B1633DD765A11E7ED26F8F9A4DD45023B3E4ADB903C934DF3917D07A3856BFF |
SHA-512: | 7B519F5D82BA0DA3B2EFFAD3029C7CAB63905D534F3CF1F7EA3446C42FA2130665CA7569A105C18289D65FA955C5624009C1D571E8960D2B7C52E0D8B42BE457 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 21357 |
Entropy (8bit): | 7.641082043198371 |
Encrypted: | false |
SSDEEP: | |
MD5: | 97F5B7B7E9E1281999468A5C42CB12E7 |
SHA1: | 99481B2FA609D1D80A9016ADAA3D37E7707A2ED1 |
SHA-256: | 1CF5C2D0F6188FFFF117932C424CC55D1459E0852564C09D7779263ABD116118 |
SHA-512: | ACE9718D724B51FE04B900CE1D2075C0C05C80243EA68D4731A63138F3A1287776E80BD67ECB14C323C69AA1796E9D8774A3611FE835BA3CA891270DE1E7FD1F |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 22340 |
Entropy (8bit): | 7.668619892503165 |
Encrypted: | false |
SSDEEP: | |
MD5: | 8B29FAB506FD65C21C9CD6FE6BBBC146 |
SHA1: | CE1B8A57BB3C682F6A0AFC32955DAFD360720FDF |
SHA-256: | 773AC516C9B9B28058128EC9BE099F817F3F90211AC70DC68077599929683D6F |
SHA-512: | AFA82CCBC0AEF9FAE4E728E4212E9C6EB2396D7330CCBE57F8979377D336B4DACF4F3BF835D04ABCEBCDB824B9A9147B4A7B5F12B8ADDADF42AB2C34A7450ADE |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 26944 |
Entropy (8bit): | 7.7574645319832225 |
Encrypted: | false |
SSDEEP: | |
MD5: | F913DD84915753042D856CEC4E5DABA5 |
SHA1: | FB1E423C8D09388C3F0B6D44364D94D786E8CF53 |
SHA-256: | AA03AFB681A76C86C1BD8902EE2BBA31A644841CE6BCB913C8B5032713265578 |
SHA-512: | C48850522C809B18208403B3E721ABEB1187F954045CE2F8C48522368171CC8FAF5F30FA44F6762AFDE130EC72284BB2E74097A35FE61F056656A27F9413C6B6 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 261258 |
Entropy (8bit): | 7.99541965268665 |
Encrypted: | true |
SSDEEP: | |
MD5: | 65828DC7BE8BA1CE61AD7142252ACC54 |
SHA1: | 538B186EAF960A076474A64F508B6C47B7699DD3 |
SHA-256: | 849E2E915AA61E2F831E54F337A745A5946467D539CCBD0214B4742F4E7E94FF |
SHA-512: | 8C129F26F77B4E73BF02DE8F9A9F432BB7E632EE4ABAD560A331C2A12DA9EF5840D737BFC1CE24FDCBB7EF39F30F98A00DD17F42C51216F37D0D237145B8DE15 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 276650 |
Entropy (8bit): | 7.995561338730199 |
Encrypted: | true |
SSDEEP: | |
MD5: | 84D8F3848E7424CBE3801F9570E05018 |
SHA1: | 71D7F2621DA8B295CE6885F8C7C81016D583C6B1 |
SHA-256: | B4BC3CD34BD328AAF68289CC0ED4D5CF8167F1EE1D7BE20232ED4747FF96A80A |
SHA-512: | E27873BFD95E464CB58B3855F2DA404858B935530CF74C7F86FF8B3FC3086C2FAEA09FA479F0CA7B04D87595ED8C4D07D104426FF92DFB31BED405FA7A017DA8 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 307348 |
Entropy (8bit): | 7.996451393909308 |
Encrypted: | true |
SSDEEP: | |
MD5: | 0EBC45AA0E67CC435D0745438371F948 |
SHA1: | 5584210C4A8B04F9C78F703734387391D6B5B347 |
SHA-256: | 3744BFA286CFCFF46E51E6A68823A23F55416CD6619156B5929FED1F7778F1C7 |
SHA-512: | 31761037C723C515C1A9A404E235FE0B412222CB239B86162D17763565D0CCB010397376FB9B61B38A6AEBDD5E6857FD8383045F924AF8A83F2C9B9AF6B81407 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 271273 |
Entropy (8bit): | 7.995547668305345 |
Encrypted: | true |
SSDEEP: | |
MD5: | 21437897C9B88AC2CB2BB2FEF922D191 |
SHA1: | 0CAD3D026AF2270013F67E43CB44F0568013162D |
SHA-256: | 372572DCBAD590F64F5D18727757CBDF9366DDE90955C79A0FCC9F536DAB0384 |
SHA-512: | A74DA3775C19A7AF4A689FA4D920E416AB9F40A8BDA82CCF651DDB3EACBC5E932A120ABF55F855474CEBED0B0082F45D091E211AAEA6460424BFD23C2A445CC7 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 222992 |
Entropy (8bit): | 7.994458910952451 |
Encrypted: | true |
SSDEEP: | |
MD5: | 26BEAB9CCEAFE4FBF0B7C0362681A9D2 |
SHA1: | F63DD970040CA9F6CFCF5793FF7D4F1F4A69C601 |
SHA-256: | 217EC1B6E00A24583B166026DEC480D447FB564CF3BCA81984684648C272F767 |
SHA-512: | 2BBEA62360E21E179014045EE95C7B330A086014F582439903F960375CA7E9C0CF5C0D5BB24E94279362965CA9D6A37E6AAA6A7C5969FC1970F6C50876582BE1 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 295527 |
Entropy (8bit): | 7.996203550147553 |
Encrypted: | true |
SSDEEP: | |
MD5: | 9A07035EF802BF89F6ED254D0DB02AB0 |
SHA1: | 9A48C1962B5CF1EE37FEEC861A5B51CE11091E78 |
SHA-256: | 6CB03CEBAB2C28BF5318B13EEEE49FBED8DCEDAF771DE78126D1BFE9BD81C674 |
SHA-512: | BE13D6D88C68FA16390B04130838D69CDB6169DC16AF0E198C905B22C25B345C541F8FCCD4690D88BE89383C19943B34EDC67793F5EB90A97CD6F6ECCB757F87 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 230916 |
Entropy (8bit): | 7.994759087207758 |
Encrypted: | true |
SSDEEP: | |
MD5: | 93FA9F779520AB2D22AC4EA864B7BB34 |
SHA1: | D1E9F53A0E012A89978A3C9DED73FB1D380A9D8A |
SHA-256: | 6A3801C1D4CF0C19A990282D93AC16007F6CACB645F0E0684EF2EDAC02647833 |
SHA-512: | AA91B4565C88E5DA0CF294DC4A2C91EAEB6D81DCA96069DB032412E1946212A13C3580F5C0143DD28B33F4849D2C2DF2214CE1E20598D634E78663D20F03C4E6 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 585 |
Entropy (8bit): | 4.632706304662489 |
Encrypted: | false |
SSDEEP: | |
MD5: | D30D1D722DA97747B4EE5F67CA235801 |
SHA1: | BA8A3B952635D26FE764717DB550E3572C14F55C |
SHA-256: | B312DBBA80C541526EBD78559F10ACB5648F59A3D05BE099A2E537792EE9FAB1 |
SHA-512: | 2718A018175BF83004BE0C6B12990AC2C885135DA90853837D52F8421BF3905BD2021A420CF82431416898BBC09498AA5BF9507F342136FF8B31AB585EBD9B65 |
Malicious: | false |
Reputation: | unknown |
Preview: |
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 43 |
Entropy (8bit): | 4.449520568655585 |
Encrypted: | false |
SSDEEP: | |
MD5: | B9CFE8182DB2DBF62A7849095E328A06 |
SHA1: | 314C51D4E3B5DCDCA69A785EC730EF371A1E7005 |
SHA-256: | D7945BBEB92940028A1DCF736B115C41D255880ABD31EBEF557838029B6C0A3B |
SHA-512: | 848DA07BF70C1B7A3357F7264F66D9F5B551441B3FCB08C78EF4C1D9A4AC8DDD24F3B095BE7F9EADE0D8D49433A512CB3CF689361E15F325E3FCD995827419CD |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 4A1657A3872F9A77EC257F41B8F56B3D |
SHA1: | 4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B |
SHA-256: | C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60 |
SHA-512: | 7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 3B5E44DDC6AE612E0346C58C2A5390E3 |
SHA1: | 23BCF3FCB61F80C91D2CFFD8221394B1CB359C87 |
SHA-256: | 9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2 |
SHA-512: | 2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | D676DE8877ACEB43EF0ED570A2B30F0E |
SHA1: | 6C8922697105CEC7894966C9C5553BEB64744717 |
SHA-256: | DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01 |
SHA-512: | F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | C276F590BB846309A5E30ADC35C502AD |
SHA1: | CA6D9D6902475F0BE500B12B7204DD1864E7DD02 |
SHA-256: | 782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58 |
SHA-512: | B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | B30D2EF0FC261AECE90B62E9C5597379 |
SHA1: | 4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3 |
SHA-256: | BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976 |
SHA-512: | 2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 0E37AECABDB3FDF8AAFEDB9C6D693D2F |
SHA1: | F29254D2476DF70979F723DE38A4BF41C341AC78 |
SHA-256: | 7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349 |
SHA-512: | DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 8BA551EEC497947FC39D1D48EC868B54 |
SHA1: | 02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF |
SHA-256: | DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89 |
SHA-512: | CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 8109B3C170E6C2C114164B8947F88AA1 |
SHA1: | FC63956575842219443F4B4C07A8127FBD804C84 |
SHA-256: | F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416 |
SHA-512: | F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 5D9BAD7ADB88CEE98C5203883261ACA1 |
SHA1: | FBF1647FCF19BCEA6C3CF4365C797338CA282CD2 |
SHA-256: | 8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F |
SHA-512: | 7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 7BC0A35807CD69C37A949BBD51880FF5 |
SHA1: | B5870846F44CAD890C6EFF2F272A037DA016F0D8 |
SHA-256: | BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA |
SHA-512: | B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 950F3AB11CB67CC651082FEBE523AF63 |
SHA1: | 418DE03AD2EF93D0BD29C3D7045E94D3771DACB4 |
SHA-256: | 9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974 |
SHA-512: | D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | C9F9364C659E2F0C626AC0D0BB519062 |
SHA1: | C4036C576074819309D03BB74C188BF902D1AE00 |
SHA-256: | 6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2 |
SHA-512: | 173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 20621E61A4C5B0FFEEC98FFB2B3BCD31 |
SHA1: | 4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4 |
SHA-256: | 223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7 |
SHA-512: | BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 08D3A25DD65E5E0D36ADC602AE68C77D |
SHA1: | F23B6DDB3DA0015B1D8877796F7001CABA25EA64 |
SHA-256: | 58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1 |
SHA-512: | 77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | D32E93F7782B21785424AE2BEA62B387 |
SHA1: | 1D5589155C319E28383BC01ED722D4C2A05EF593 |
SHA-256: | 2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478 |
SHA-512: | 5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 586CEBC1FAC6962F9E36388E5549FFE9 |
SHA1: | D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E |
SHA-256: | 1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40 |
SHA-512: | 68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | CDC1493350011DB9892100E94D5592FE |
SHA1: | 684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA |
SHA-256: | F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548 |
SHA-512: | 3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | E8308DA3D46D0BC30857243E1B7D330D |
SHA1: | C7F8E54A63EB254C194A23137F269185E07F9D10 |
SHA-256: | 6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4 |
SHA-512: | 88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 0A4CA91036DC4F3CD8B6DBF18094CF25 |
SHA1: | 6C7EED2530CD0032E9EEAB589AFBC296D106FBB9 |
SHA-256: | E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50 |
SHA-512: | 7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 42A840DC06727E42D42C352703EC72AA |
SHA1: | 21AAAF517AFB76BF1AF4E06134786B1716241D29 |
SHA-256: | 02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7 |
SHA-512: | 8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 2F8998AA9CF348F1D6DE16EAB2D92070 |
SHA1: | 85B13499937B4A584BEA0BFE60475FD4C73391B6 |
SHA-256: | 8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580 |
SHA-512: | F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 031C246FFE0E2B623BBBD231E414E0D2 |
SHA1: | A57CA6134779D54691A4EFD344BC6948E253E0BA |
SHA-256: | 2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7 |
SHA-512: | 6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1 |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 67766FF48AF205B771B53AA2FA82B4F4 |
SHA1: | 0964F8B9DC737E954E16984A585BDC37CE143D84 |
SHA-256: | 160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667 |
SHA-512: | AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | 6C24ED9C7C868DB0D55492BB126EAFF8 |
SHA1: | C6D96D4D298573B70CF5C714151CF87532535888 |
SHA-256: | 48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F |
SHA-512: | A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C8WA1EKWE1M3KVTYW4LU.temp
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 12 |
Entropy (8bit): | 0.41381685030363374 |
Encrypted: | false |
SSDEEP: | |
MD5: | E4A1661C2C886EBB688DEC494532431C |
SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | E4A1661C2C886EBB688DEC494532431C |
SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
Malicious: | false |
Reputation: | unknown |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d00655d2aa12ff6d.customDestinations-ms~RF2b6e2.TMP (copy)
Download File
Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE |
File Type: | |
Category: | dropped |
Size (bytes): | 0 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | |
MD5: | E4A1661C2C886EBB688DEC494532431C |
SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
Malicious: | false |
Reputation: | unknown |
Preview: |
File type: | |
Entropy (8bit): | 7.997909067240941 |
TrID: |
|
File name: | 07762.zip |
File size: | 2'334'361 bytes |
MD5: | 28d34d33496fa2ea685355ccd94d2210 |
SHA1: | 3d3ea089e37c1bc81ab8a6055606a96459a6b196 |
SHA256: | cc44f1bf066ba41193ad714cb091aee60d89883e44fefa8aebbb1c6016b5a9f1 |
SHA512: | 8f5dc07612c6c3f3193cf647de846213b00ffd19a9ba1c6e0074583d0c910c09fc0113ae2832943b5d6e55296c731f147bf56756f14cf059fdf61bf641c3047b |
SSDEEP: | 49152:b10b2Q+xta2wUFlYhGjemXn3eV8WXEZh0Ij/pCkRf2D/X6syk2a:b10sa2w+lYhKXuV8WUZh0IjkNDXJ2a |
TLSH: | D1B533641EEA48CAE88E61159DD702B70EFA34DB558E02B27A44FBC4374F0C5C59E9CE |
File Content Preview: | PK........!.QQ.~.j8.#.5.#.....9147.pptx...{f......m..m....m...Tl;..........^k.y...=.....$W....n.x..H)H......@....../..C.... .. .@.i...:..:..x..:....X....Q..|........T...&.J.M....;....8Y...+K..5.....,c...y.>.2SL)....,.O..{.....^O*.F...DL...D.)..#.b~.>8:I#. |
Icon Hash: | 1c1c1e4e4ececedc |