VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
Dropper
Trojan
|
Threat Names: |
Gen:Variant.Strictor.230978
Trojan.Ransom.AIG
Win32.Trojan.Xorist
|
WinRAR.exe
Windows Exe (x86-32)
Created at 2020-01-21T05:39:00
Remarks
(0x0200001B): The maximum number of file reputation requests per analysis (150) was exceeded.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
File Reputation Information
»
Severity |
Blacklisted
|
First Seen | 2020-01-21 02:41 (UTC+1) |
Last Seen | 2020-01-21 05:39 (UTC+1) |
Names | Win32.Trojan.Xorist |
Families | Xorist |
Classification | Trojan |
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x41e239 |
Size Of Code | 0x30800 |
Size Of Initialized Data | 0x1b200 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2019-12-05 07:37:23+00:00 |
Sections (6)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x3060f | 0x30800 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.69 |
.rdata | 0x432000 | 0xa402 | 0xa600 | 0x30c00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 5.2 |
.data | 0x43d000 | 0x238b0 | 0x1200 | 0x3b200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 3.84 |
.gfids | 0x461000 | 0xe8 | 0x200 | 0x3c400 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 2.12 |
.rsrc | 0x462000 | 0xd474 | 0xd600 | 0x3c600 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 6.86 |
.reloc | 0x470000 | 0x212c | 0x2200 | 0x49c00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.62 |
Imports (2)
»
KERNEL32.dll (141)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetLastError | 0x0 | 0x432000 | 0x3b680 | 0x3a280 | 0x202 |
SetLastError | 0x0 | 0x432004 | 0x3b684 | 0x3a284 | 0x473 |
FormatMessageW | 0x0 | 0x432008 | 0x3b688 | 0x3a288 | 0x15e |
GetCurrentProcess | 0x0 | 0x43200c | 0x3b68c | 0x3a28c | 0x1c0 |
DeviceIoControl | 0x0 | 0x432010 | 0x3b690 | 0x3a290 | 0xdd |
SetFileTime | 0x0 | 0x432014 | 0x3b694 | 0x3a294 | 0x46a |
CloseHandle | 0x0 | 0x432018 | 0x3b698 | 0x3a298 | 0x52 |
CreateDirectoryW | 0x0 | 0x43201c | 0x3b69c | 0x3a29c | 0x81 |
RemoveDirectoryW | 0x0 | 0x432020 | 0x3b6a0 | 0x3a2a0 | 0x403 |
CreateFileW | 0x0 | 0x432024 | 0x3b6a4 | 0x3a2a4 | 0x8f |
DeleteFileW | 0x0 | 0x432028 | 0x3b6a8 | 0x3a2a8 | 0xd6 |
CreateHardLinkW | 0x0 | 0x43202c | 0x3b6ac | 0x3a2ac | 0x93 |
GetShortPathNameW | 0x0 | 0x432030 | 0x3b6b0 | 0x3a2b0 | 0x261 |
GetLongPathNameW | 0x0 | 0x432034 | 0x3b6b4 | 0x3a2b4 | 0x20f |
MoveFileW | 0x0 | 0x432038 | 0x3b6b8 | 0x3a2b8 | 0x363 |
GetFileType | 0x0 | 0x43203c | 0x3b6bc | 0x3a2bc | 0x1f3 |
GetStdHandle | 0x0 | 0x432040 | 0x3b6c0 | 0x3a2c0 | 0x264 |
WriteFile | 0x0 | 0x432044 | 0x3b6c4 | 0x3a2c4 | 0x525 |
ReadFile | 0x0 | 0x432048 | 0x3b6c8 | 0x3a2c8 | 0x3c0 |
FlushFileBuffers | 0x0 | 0x43204c | 0x3b6cc | 0x3a2cc | 0x157 |
SetEndOfFile | 0x0 | 0x432050 | 0x3b6d0 | 0x3a2d0 | 0x453 |
SetFilePointer | 0x0 | 0x432054 | 0x3b6d4 | 0x3a2d4 | 0x466 |
SetFileAttributesW | 0x0 | 0x432058 | 0x3b6d8 | 0x3a2d8 | 0x461 |
GetFileAttributesW | 0x0 | 0x43205c | 0x3b6dc | 0x3a2dc | 0x1ea |
FindClose | 0x0 | 0x432060 | 0x3b6e0 | 0x3a2e0 | 0x12e |
FindFirstFileW | 0x0 | 0x432064 | 0x3b6e4 | 0x3a2e4 | 0x139 |
FindNextFileW | 0x0 | 0x432068 | 0x3b6e8 | 0x3a2e8 | 0x145 |
GetVersionExW | 0x0 | 0x43206c | 0x3b6ec | 0x3a2ec | 0x2a4 |
GetCurrentDirectoryW | 0x0 | 0x432070 | 0x3b6f0 | 0x3a2f0 | 0x1bf |
GetFullPathNameW | 0x0 | 0x432074 | 0x3b6f4 | 0x3a2f4 | 0x1fb |
FoldStringW | 0x0 | 0x432078 | 0x3b6f8 | 0x3a2f8 | 0x15c |
GetModuleFileNameW | 0x0 | 0x43207c | 0x3b6fc | 0x3a2fc | 0x214 |
GetModuleHandleW | 0x0 | 0x432080 | 0x3b700 | 0x3a300 | 0x218 |
FindResourceW | 0x0 | 0x432084 | 0x3b704 | 0x3a304 | 0x14e |
FreeLibrary | 0x0 | 0x432088 | 0x3b708 | 0x3a308 | 0x162 |
GetProcAddress | 0x0 | 0x43208c | 0x3b70c | 0x3a30c | 0x245 |
GetCurrentProcessId | 0x0 | 0x432090 | 0x3b710 | 0x3a310 | 0x1c1 |
ExitProcess | 0x0 | 0x432094 | 0x3b714 | 0x3a314 | 0x119 |
SetThreadExecutionState | 0x0 | 0x432098 | 0x3b718 | 0x3a318 | 0x493 |
Sleep | 0x0 | 0x43209c | 0x3b71c | 0x3a31c | 0x4b2 |
LoadLibraryW | 0x0 | 0x4320a0 | 0x3b720 | 0x3a320 | 0x33f |
GetSystemDirectoryW | 0x0 | 0x4320a4 | 0x3b724 | 0x3a324 | 0x270 |
CompareStringW | 0x0 | 0x4320a8 | 0x3b728 | 0x3a328 | 0x64 |
AllocConsole | 0x0 | 0x4320ac | 0x3b72c | 0x3a32c | 0x10 |
FreeConsole | 0x0 | 0x4320b0 | 0x3b730 | 0x3a330 | 0x15f |
AttachConsole | 0x0 | 0x4320b4 | 0x3b734 | 0x3a334 | 0x17 |
WriteConsoleW | 0x0 | 0x4320b8 | 0x3b738 | 0x3a338 | 0x524 |
GetProcessAffinityMask | 0x0 | 0x4320bc | 0x3b73c | 0x3a33c | 0x246 |
CreateThread | 0x0 | 0x4320c0 | 0x3b740 | 0x3a340 | 0xb5 |
SetThreadPriority | 0x0 | 0x4320c4 | 0x3b744 | 0x3a344 | 0x499 |
InitializeCriticalSection | 0x0 | 0x4320c8 | 0x3b748 | 0x3a348 | 0x2e2 |
EnterCriticalSection | 0x0 | 0x4320cc | 0x3b74c | 0x3a34c | 0xee |
LeaveCriticalSection | 0x0 | 0x4320d0 | 0x3b750 | 0x3a350 | 0x339 |
DeleteCriticalSection | 0x0 | 0x4320d4 | 0x3b754 | 0x3a354 | 0xd1 |
SetEvent | 0x0 | 0x4320d8 | 0x3b758 | 0x3a358 | 0x459 |
ResetEvent | 0x0 | 0x4320dc | 0x3b75c | 0x3a35c | 0x40f |
ReleaseSemaphore | 0x0 | 0x4320e0 | 0x3b760 | 0x3a360 | 0x3fe |
WaitForSingleObject | 0x0 | 0x4320e4 | 0x3b764 | 0x3a364 | 0x4f9 |
CreateEventW | 0x0 | 0x4320e8 | 0x3b768 | 0x3a368 | 0x85 |
CreateSemaphoreW | 0x0 | 0x4320ec | 0x3b76c | 0x3a36c | 0xae |
GetSystemTime | 0x0 | 0x4320f0 | 0x3b770 | 0x3a370 | 0x277 |
SystemTimeToTzSpecificLocalTime | 0x0 | 0x4320f4 | 0x3b774 | 0x3a374 | 0x4be |
TzSpecificLocalTimeToSystemTime | 0x0 | 0x4320f8 | 0x3b778 | 0x3a378 | 0x4d0 |
SystemTimeToFileTime | 0x0 | 0x4320fc | 0x3b77c | 0x3a37c | 0x4bd |
FileTimeToLocalFileTime | 0x0 | 0x432100 | 0x3b780 | 0x3a380 | 0x124 |
LocalFileTimeToFileTime | 0x0 | 0x432104 | 0x3b784 | 0x3a384 | 0x346 |
FileTimeToSystemTime | 0x0 | 0x432108 | 0x3b788 | 0x3a388 | 0x125 |
GetCPInfo | 0x0 | 0x43210c | 0x3b78c | 0x3a38c | 0x172 |
IsDBCSLeadByte | 0x0 | 0x432110 | 0x3b790 | 0x3a390 | 0x2fe |
MultiByteToWideChar | 0x0 | 0x432114 | 0x3b794 | 0x3a394 | 0x367 |
WideCharToMultiByte | 0x0 | 0x432118 | 0x3b798 | 0x3a398 | 0x511 |
GlobalAlloc | 0x0 | 0x43211c | 0x3b79c | 0x3a39c | 0x2b3 |
LockResource | 0x0 | 0x432120 | 0x3b7a0 | 0x3a3a0 | 0x354 |
GlobalLock | 0x0 | 0x432124 | 0x3b7a4 | 0x3a3a4 | 0x2be |
GlobalUnlock | 0x0 | 0x432128 | 0x3b7a8 | 0x3a3a8 | 0x2c5 |
GlobalFree | 0x0 | 0x43212c | 0x3b7ac | 0x3a3ac | 0x2ba |
LoadResource | 0x0 | 0x432130 | 0x3b7b0 | 0x3a3b0 | 0x341 |
SizeofResource | 0x0 | 0x432134 | 0x3b7b4 | 0x3a3b4 | 0x4b1 |
SetCurrentDirectoryW | 0x0 | 0x432138 | 0x3b7b8 | 0x3a3b8 | 0x44d |
GetExitCodeProcess | 0x0 | 0x43213c | 0x3b7bc | 0x3a3bc | 0x1df |
GetLocalTime | 0x0 | 0x432140 | 0x3b7c0 | 0x3a3c0 | 0x203 |
GetTickCount | 0x0 | 0x432144 | 0x3b7c4 | 0x3a3c4 | 0x293 |
MapViewOfFile | 0x0 | 0x432148 | 0x3b7c8 | 0x3a3c8 | 0x357 |
UnmapViewOfFile | 0x0 | 0x43214c | 0x3b7cc | 0x3a3cc | 0x4d6 |
CreateFileMappingW | 0x0 | 0x432150 | 0x3b7d0 | 0x3a3d0 | 0x8c |
OpenFileMappingW | 0x0 | 0x432154 | 0x3b7d4 | 0x3a3d4 | 0x379 |
GetCommandLineW | 0x0 | 0x432158 | 0x3b7d8 | 0x3a3d8 | 0x187 |
SetEnvironmentVariableW | 0x0 | 0x43215c | 0x3b7dc | 0x3a3dc | 0x457 |
ExpandEnvironmentStringsW | 0x0 | 0x432160 | 0x3b7e0 | 0x3a3e0 | 0x11d |
GetTempPathW | 0x0 | 0x432164 | 0x3b7e4 | 0x3a3e4 | 0x285 |
MoveFileExW | 0x0 | 0x432168 | 0x3b7e8 | 0x3a3e8 | 0x360 |
GetLocaleInfoW | 0x0 | 0x43216c | 0x3b7ec | 0x3a3ec | 0x206 |
GetTimeFormatW | 0x0 | 0x432170 | 0x3b7f0 | 0x3a3f0 | 0x297 |
GetDateFormatW | 0x0 | 0x432174 | 0x3b7f4 | 0x3a3f4 | 0x1c8 |
GetNumberFormatW | 0x0 | 0x432178 | 0x3b7f8 | 0x3a3f8 | 0x233 |
SetFilePointerEx | 0x0 | 0x43217c | 0x3b7fc | 0x3a3fc | 0x467 |
GetConsoleMode | 0x0 | 0x432180 | 0x3b800 | 0x3a400 | 0x1ac |
GetConsoleCP | 0x0 | 0x432184 | 0x3b804 | 0x3a404 | 0x19a |
HeapSize | 0x0 | 0x432188 | 0x3b808 | 0x3a408 | 0x2d4 |
SetStdHandle | 0x0 | 0x43218c | 0x3b80c | 0x3a40c | 0x487 |
GetProcessHeap | 0x0 | 0x432190 | 0x3b810 | 0x3a410 | 0x24a |
RaiseException | 0x0 | 0x432194 | 0x3b814 | 0x3a414 | 0x3b1 |
GetSystemInfo | 0x0 | 0x432198 | 0x3b818 | 0x3a418 | 0x273 |
VirtualProtect | 0x0 | 0x43219c | 0x3b81c | 0x3a41c | 0x4ef |
VirtualQuery | 0x0 | 0x4321a0 | 0x3b820 | 0x3a420 | 0x4f1 |
LoadLibraryExA | 0x0 | 0x4321a4 | 0x3b824 | 0x3a424 | 0x33d |
IsProcessorFeaturePresent | 0x0 | 0x4321a8 | 0x3b828 | 0x3a428 | 0x304 |
IsDebuggerPresent | 0x0 | 0x4321ac | 0x3b82c | 0x3a42c | 0x300 |
UnhandledExceptionFilter | 0x0 | 0x4321b0 | 0x3b830 | 0x3a430 | 0x4d3 |
SetUnhandledExceptionFilter | 0x0 | 0x4321b4 | 0x3b834 | 0x3a434 | 0x4a5 |
GetStartupInfoW | 0x0 | 0x4321b8 | 0x3b838 | 0x3a438 | 0x263 |
QueryPerformanceCounter | 0x0 | 0x4321bc | 0x3b83c | 0x3a43c | 0x3a7 |
GetCurrentThreadId | 0x0 | 0x4321c0 | 0x3b840 | 0x3a440 | 0x1c5 |
GetSystemTimeAsFileTime | 0x0 | 0x4321c4 | 0x3b844 | 0x3a444 | 0x279 |
InitializeSListHead | 0x0 | 0x4321c8 | 0x3b848 | 0x3a448 | 0x2e7 |
TerminateProcess | 0x0 | 0x4321cc | 0x3b84c | 0x3a44c | 0x4c0 |
RtlUnwind | 0x0 | 0x4321d0 | 0x3b850 | 0x3a450 | 0x418 |
EncodePointer | 0x0 | 0x4321d4 | 0x3b854 | 0x3a454 | 0xea |
InitializeCriticalSectionAndSpinCount | 0x0 | 0x4321d8 | 0x3b858 | 0x3a458 | 0x2e3 |
TlsAlloc | 0x0 | 0x4321dc | 0x3b85c | 0x3a45c | 0x4c5 |
TlsGetValue | 0x0 | 0x4321e0 | 0x3b860 | 0x3a460 | 0x4c7 |
TlsSetValue | 0x0 | 0x4321e4 | 0x3b864 | 0x3a464 | 0x4c8 |
TlsFree | 0x0 | 0x4321e8 | 0x3b868 | 0x3a468 | 0x4c6 |
LoadLibraryExW | 0x0 | 0x4321ec | 0x3b86c | 0x3a46c | 0x33e |
QueryPerformanceFrequency | 0x0 | 0x4321f0 | 0x3b870 | 0x3a470 | 0x3a8 |
GetModuleHandleExW | 0x0 | 0x4321f4 | 0x3b874 | 0x3a474 | 0x217 |
GetModuleFileNameA | 0x0 | 0x4321f8 | 0x3b878 | 0x3a478 | 0x213 |
GetACP | 0x0 | 0x4321fc | 0x3b87c | 0x3a47c | 0x168 |
HeapFree | 0x0 | 0x432200 | 0x3b880 | 0x3a480 | 0x2cf |
HeapAlloc | 0x0 | 0x432204 | 0x3b884 | 0x3a484 | 0x2cb |
HeapReAlloc | 0x0 | 0x432208 | 0x3b888 | 0x3a488 | 0x2d2 |
GetStringTypeW | 0x0 | 0x43220c | 0x3b88c | 0x3a48c | 0x269 |
LCMapStringW | 0x0 | 0x432210 | 0x3b890 | 0x3a490 | 0x32d |
FindFirstFileExA | 0x0 | 0x432214 | 0x3b894 | 0x3a494 | 0x133 |
FindNextFileA | 0x0 | 0x432218 | 0x3b898 | 0x3a498 | 0x143 |
IsValidCodePage | 0x0 | 0x43221c | 0x3b89c | 0x3a49c | 0x30a |
GetOEMCP | 0x0 | 0x432220 | 0x3b8a0 | 0x3a4a0 | 0x237 |
GetCommandLineA | 0x0 | 0x432224 | 0x3b8a4 | 0x3a4a4 | 0x186 |
GetEnvironmentStringsW | 0x0 | 0x432228 | 0x3b8a8 | 0x3a4a8 | 0x1da |
FreeEnvironmentStringsW | 0x0 | 0x43222c | 0x3b8ac | 0x3a4ac | 0x161 |
DecodePointer | 0x0 | 0x432230 | 0x3b8b0 | 0x3a4b0 | 0xca |
gdiplus.dll (9)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GdiplusShutdown | 0x0 | 0x432238 | 0x3b8b8 | 0x3a4b8 | 0x274 |
GdiplusStartup | 0x0 | 0x43223c | 0x3b8bc | 0x3a4bc | 0x275 |
GdipCreateHBITMAPFromBitmap | 0x0 | 0x432240 | 0x3b8c0 | 0x3a4c0 | 0x5f |
GdipCreateBitmapFromStreamICM | 0x0 | 0x432244 | 0x3b8c4 | 0x3a4c4 | 0x52 |
GdipCreateBitmapFromStream | 0x0 | 0x432248 | 0x3b8c8 | 0x3a4c8 | 0x51 |
GdipDisposeImage | 0x0 | 0x43224c | 0x3b8cc | 0x3a4cc | 0x98 |
GdipCloneImage | 0x0 | 0x432250 | 0x3b8d0 | 0x3a4d0 | 0x36 |
GdipFree | 0x0 | 0x432254 | 0x3b8d4 | 0x3a4d4 | 0xed |
GdipAlloc | 0x0 | 0x432258 | 0x3b8d8 | 0x3a4d8 | 0x21 |
Memory Dumps (2)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
winrar.exe | 1 | 0x00D20000 | 0x00D92FFF | Relevant Image | 32-bit | 0x00D415E6 |
...
|
|||
winrar.exe | 1 | 0x00D20000 | 0x00D92FFF | Process Termination | 32-bit | - |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Gen:Variant.Strictor.230978 |
Malicious
|
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x42bbe0 |
Size Of Code | 0x3000 |
Size Of Initialized Data | 0x1000 |
Size Of Uninitialized Data | 0x28000 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2012-01-29 18:49:03+00:00 |
Sections (3)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
UPX0 | 0x401000 | 0x28000 | 0x0 | 0x200 | IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0.0 |
UPX1 | 0x429000 | 0x3000 | 0x2e00 | 0x200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 7.63 |
.rsrc | 0x42c000 | 0x1000 | 0x400 | 0x3000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 3.38 |
Imports (7)
»
KERNEL32.DLL (6)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
LoadLibraryA | 0x0 | 0x42c208 | 0x2c208 | 0x3208 | 0x0 |
GetProcAddress | 0x0 | 0x42c20c | 0x2c20c | 0x320c | 0x0 |
VirtualProtect | 0x0 | 0x42c210 | 0x2c210 | 0x3210 | 0x0 |
VirtualAlloc | 0x0 | 0x42c214 | 0x2c214 | 0x3214 | 0x0 |
VirtualFree | 0x0 | 0x42c218 | 0x2c218 | 0x3218 | 0x0 |
ExitProcess | 0x0 | 0x42c21c | 0x2c21c | 0x321c | 0x0 |
advapi32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegCloseKey | 0x0 | 0x42c224 | 0x2c224 | 0x3224 | 0x0 |
comctl32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
InitCommonControls | 0x0 | 0x42c22c | 0x2c22c | 0x322c | 0x0 |
gdi32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFontIndirectA | 0x0 | 0x42c234 | 0x2c234 | 0x3234 | 0x0 |
shell32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ShellExecuteA | 0x0 | 0x42c23c | 0x2c23c | 0x323c | 0x0 |
shlwapi.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
PathMatchSpecA | 0x0 | 0x42c244 | 0x2c244 | 0x3244 | 0x0 |
user32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
EndPaint | 0x0 | 0x42c24c | 0x2c24c | 0x324c | 0x0 |
Memory Dumps (15)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
1.exe | 3 | 0x00400000 | 0x0042CFFF | First Execution | 32-bit | 0x0042BBE0 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00401F87 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00401665 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x0040253E |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x004013C2 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00402562 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x004013C2 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x004013C2 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00402562 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x004013C2 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00402562 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x004013C2 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00402604 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Content Changed | 32-bit | 0x00401736 |
...
|
|||
1.exe | 3 | 0x00400000 | 0x0042CFFF | Process Termination | 32-bit | - |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Trojan.Ransom.AIG |
Malicious
|
C:\Program Files\Java\jre1.8.0_144\README.txt.EnCiPhErEd | Dropped File | Text |
Whitelisted
|
...
|
»
File Reputation Information
»
Severity |
Whitelisted
|
First Seen | 2014-04-28 00:54 (UTC+2) |
Last Seen | 2019-11-21 05:15 (UTC+1) |
C:\588bce7c90097ed212\DHtmlHeader.html | Modified File | Text |
Unknown
|
...
|
»
C:\588bce7c90097ed212\header.bmp | Modified File | Image |
Unknown
|
...
|
»
C:\588bce7c90097ed212\SplashScreen.bmp.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\588bce7c90097ed212\watermark.bmp.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\1.exe.lnk.EnCiPhErEd | Dropped File | Shortcut |
Unknown
|
...
|
»
C:\Users\FD1HVy\AppData\Local\Temp\flagmcioejpekagm.bmp | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.EnCiPhErEd | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.EnCiPhErEd | Dropped File | Zip |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.EnCiPhErEd | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.EnCiPhErEd | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.EnCiPhErEd | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\Welcome.html.EnCiPhErEd | Dropped File | Text |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office16\OSPP.HTM.EnCiPhErEd | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101866.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101867.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0144773.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145168.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145212.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145272.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145361.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145373.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145669.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145707.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145879.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145895.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145904.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0146142.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148309.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148757.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148798.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149018.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149118.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0164153.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0174952.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175361.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175428.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177257.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177806.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178348.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178459.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178632.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178639.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178932.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0179963.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0182689.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0202045.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227419.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227558.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287641.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287642.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287643.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287644.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287645.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0289430.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309480.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309567.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309585.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309598.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309664.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309705.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313896.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313965.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313970.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313974.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0314068.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315580.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315612.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0321179.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0337280.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341328.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341344.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341439.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341447.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341448.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341455.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341475.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341499.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341534.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341551.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341557.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341559.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341561.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341634.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341636.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341653.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341654.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341738.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341742.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382836.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382925.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382926.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382927.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382930.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382931.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382939.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382942.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382944.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382947.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382948.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382950.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382952.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382954.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382955.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382957.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382959.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382960.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382961.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382963.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382965.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382966.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382967.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382968.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382969.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382970.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384862.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384885.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384895.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384900.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386120.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386267.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386270.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386485.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386764.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387337.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387578.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387591.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387604.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387882.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387895.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0390072.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400001.PNG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400002.PNG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400003.PNG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400004.PNG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400005.PNG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00780U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01035U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01046J.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01179J.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01213K.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01221K.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01235U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01236U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01239K.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01247U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01255G.GIF.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01265U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01332U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01478U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01607U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01931J.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02040U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02053J.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02058U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02062U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02069J.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02071U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02074U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02208U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02223U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02291U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02398U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02412K.JPG.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02417U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02466U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02470U.BMP.EnCiPhErEd | Dropped File | Image |
Unknown
|
...
|
»
__tmp_rar_sfx_access_check_18212937 | Dropped File | Unknown |
Not Queried
|
...
|
»
C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\HOW TO DECRYPT FILES.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145810.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178460.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178523.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216112.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216153.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341554.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341645.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382938.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382958.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382962.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384888.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00601G.GIF.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01562U.BMP.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02028K.JPG.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02039U.BMP.EnCiPhErEd | Dropped File | Image |
Not Queried
|
...
|
»