VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
|
Threat Names: |
Trojan.Ransom.AIG
|
dttcodexgigas.118544d55fd8d86a7815558570d6225f35ffbf00.exe
Windows Exe (x86-32)
Created at 2020-09-17T11:40:00
Remarks
(0x0200001D): The maximum number of extracted files was exceeded. Some files may be missing in the report.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dttcodexgigas.118544d55fd8d86a7815558570d6225f35ffbf00.exe | Sample File | Binary |
Malicious
|
...
|
»
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x4021d1 |
Size Of Code | 0x1800 |
Size Of Initialized Data | 0x7ea600 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2012-01-29 18:49:03+00:00 |
Sections (4)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x1688 | 0x1800 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 5.54 |
.rdata | 0x403000 | 0x820 | 0xa00 | 0x1c00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 3.5 |
.data | 0x404000 | 0x38bb | 0x600 | 0x2600 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.9 |
.rsrc | 0x408000 | 0x7e95e8 | 0x7e9600 | 0x2c00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 1.69 |
Imports (7)
»
KERNEL32.DLL (37)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
lstrlenA | 0x0 | 0x40303c | 0x303c | 0x1c3c | 0x0 |
CloseHandle | 0x0 | 0x403040 | 0x3040 | 0x1c40 | 0x0 |
CopyFileA | 0x0 | 0x403044 | 0x3044 | 0x1c44 | 0x0 |
CreateFileA | 0x0 | 0x403048 | 0x3048 | 0x1c48 | 0x0 |
ExitProcess | 0x0 | 0x40304c | 0x304c | 0x1c4c | 0x0 |
FindClose | 0x0 | 0x403050 | 0x3050 | 0x1c50 | 0x0 |
FindFirstFileA | 0x0 | 0x403054 | 0x3054 | 0x1c54 | 0x0 |
FindNextFileA | 0x0 | 0x403058 | 0x3058 | 0x1c58 | 0x0 |
FindResourceA | 0x0 | 0x40305c | 0x305c | 0x1c5c | 0x0 |
FreeResource | 0x0 | 0x403060 | 0x3060 | 0x1c60 | 0x0 |
GetCommandLineA | 0x0 | 0x403064 | 0x3064 | 0x1c64 | 0x0 |
GetEnvironmentVariableA | 0x0 | 0x403068 | 0x3068 | 0x1c68 | 0x0 |
GetFileAttributesA | 0x0 | 0x40306c | 0x306c | 0x1c6c | 0x0 |
GetFileSize | 0x0 | 0x403070 | 0x3070 | 0x1c70 | 0x0 |
GetFileTime | 0x0 | 0x403074 | 0x3074 | 0x1c74 | 0x0 |
GetLogicalDrives | 0x0 | 0x403078 | 0x3078 | 0x1c78 | 0x0 |
GetModuleFileNameA | 0x0 | 0x40307c | 0x307c | 0x1c7c | 0x0 |
GetModuleHandleA | 0x0 | 0x403080 | 0x3080 | 0x1c80 | 0x0 |
GetProcessHeap | 0x0 | 0x403084 | 0x3084 | 0x1c84 | 0x0 |
GetTempPathA | 0x0 | 0x403088 | 0x3088 | 0x1c88 | 0x0 |
GetWindowsDirectoryA | 0x0 | 0x40308c | 0x308c | 0x1c8c | 0x0 |
GlobalFree | 0x0 | 0x403090 | 0x3090 | 0x1c90 | 0x0 |
HeapAlloc | 0x0 | 0x403094 | 0x3094 | 0x1c94 | 0x0 |
LoadResource | 0x0 | 0x403098 | 0x3098 | 0x1c98 | 0x0 |
LockResource | 0x0 | 0x40309c | 0x309c | 0x1c9c | 0x0 |
MoveFileA | 0x0 | 0x4030a0 | 0x30a0 | 0x1ca0 | 0x0 |
ReadFile | 0x0 | 0x4030a4 | 0x30a4 | 0x1ca4 | 0x0 |
RtlMoveMemory | 0x0 | 0x4030a8 | 0x30a8 | 0x1ca8 | 0x0 |
SetErrorMode | 0x0 | 0x4030ac | 0x30ac | 0x1cac | 0x0 |
SetFilePointer | 0x0 | 0x4030b0 | 0x30b0 | 0x1cb0 | 0x0 |
SetFileTime | 0x0 | 0x4030b4 | 0x30b4 | 0x1cb4 | 0x0 |
SizeofResource | 0x0 | 0x4030b8 | 0x30b8 | 0x1cb8 | 0x0 |
WriteFile | 0x0 | 0x4030bc | 0x30bc | 0x1cbc | 0x0 |
lstrcatA | 0x0 | 0x4030c0 | 0x30c0 | 0x1cc0 | 0x0 |
lstrcmpA | 0x0 | 0x4030c4 | 0x30c4 | 0x1cc4 | 0x0 |
lstrcmpiA | 0x0 | 0x4030c8 | 0x30c8 | 0x1cc8 | 0x0 |
lstrcpyA | 0x0 | 0x4030cc | 0x30cc | 0x1ccc | 0x0 |
advapi32.dll (10)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegCreateKeyExA | 0x0 | 0x403000 | 0x3000 | 0x1c00 | 0x0 |
CryptCreateHash | 0x0 | 0x403004 | 0x3004 | 0x1c04 | 0x0 |
CryptDestroyHash | 0x0 | 0x403008 | 0x3008 | 0x1c08 | 0x0 |
CryptGetHashParam | 0x0 | 0x40300c | 0x300c | 0x1c0c | 0x0 |
RegSetValueExA | 0x0 | 0x403010 | 0x3010 | 0x1c10 | 0x0 |
RegDeleteKeyA | 0x0 | 0x403014 | 0x3014 | 0x1c14 | 0x0 |
CryptAcquireContextA | 0x0 | 0x403018 | 0x3018 | 0x1c18 | 0x0 |
RegCloseKey | 0x0 | 0x40301c | 0x301c | 0x1c1c | 0x0 |
CryptReleaseContext | 0x0 | 0x403020 | 0x3020 | 0x1c20 | 0x0 |
CryptHashData | 0x0 | 0x403024 | 0x3024 | 0x1c24 | 0x0 |
comctl32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
InitCommonControls | 0x0 | 0x40302c | 0x302c | 0x1c2c | 0x0 |
gdi32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFontIndirectA | 0x0 | 0x403034 | 0x3034 | 0x1c34 | 0x0 |
shell32.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ShellExecuteA | 0x0 | 0x4030d4 | 0x30d4 | 0x1cd4 | 0x0 |
SHGetSpecialFolderPathA | 0x0 | 0x4030d8 | 0x30d8 | 0x1cd8 | 0x0 |
shlwapi.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
PathFindFileNameA | 0x0 | 0x4030e0 | 0x30e0 | 0x1ce0 | 0x0 |
PathFindExtensionA | 0x0 | 0x4030e4 | 0x30e4 | 0x1ce4 | 0x0 |
PathAddBackslashA | 0x0 | 0x4030e8 | 0x30e8 | 0x1ce8 | 0x0 |
PathMatchSpecA | 0x0 | 0x4030ec | 0x30ec | 0x1cec | 0x0 |
user32.dll (16)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegisterClassExA | 0x0 | 0x4030f4 | 0x30f4 | 0x1cf4 | 0x0 |
PeekMessageA | 0x0 | 0x4030f8 | 0x30f8 | 0x1cf8 | 0x0 |
SendMessageA | 0x0 | 0x4030fc | 0x30fc | 0x1cfc | 0x0 |
LoadCursorA | 0x0 | 0x403100 | 0x3100 | 0x1d00 | 0x0 |
GetSystemMetrics | 0x0 | 0x403104 | 0x3104 | 0x1d04 | 0x0 |
GetMessageA | 0x0 | 0x403108 | 0x3108 | 0x1d08 | 0x0 |
GetDlgItemTextA | 0x0 | 0x40310c | 0x310c | 0x1d0c | 0x0 |
EndPaint | 0x0 | 0x403110 | 0x3110 | 0x1d10 | 0x0 |
SystemParametersInfoA | 0x0 | 0x403114 | 0x3114 | 0x1d14 | 0x0 |
TranslateMessage | 0x0 | 0x403118 | 0x3118 | 0x1d18 | 0x0 |
UpdateWindow | 0x0 | 0x40311c | 0x311c | 0x1d1c | 0x0 |
MessageBoxA | 0x0 | 0x403120 | 0x3120 | 0x1d20 | 0x0 |
DispatchMessageA | 0x0 | 0x403124 | 0x3124 | 0x1d24 | 0x0 |
DefWindowProcA | 0x0 | 0x403128 | 0x3128 | 0x1d28 | 0x0 |
CreateWindowExA | 0x0 | 0x40312c | 0x312c | 0x1d2c | 0x0 |
BeginPaint | 0x0 | 0x403130 | 0x3130 | 0x1d30 | 0x0 |
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Trojan.Ransom.AIG |
Malicious
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099192.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099193.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099194.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099195.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099196.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099197.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099198.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099199.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099200.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099201.GIF.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099202.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099203.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101863.BMP.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101864.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101865.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101867.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.TAKA | Dropped File | Text |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.TAKA | Dropped File | Text |
Unknown
|
...
|
»
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\HOW TO DECRYPT FILES.txt | Dropped File | Text |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145373.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145669.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145707.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145810.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145879.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145895.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145904.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148309.JPG.TAKA | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148757.JPG | Dropped File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148798.JPG | Dropped File | Image |
Unknown
|
...
|
»