592f2089...69c3 | VMRay Analyzer Report
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Wiper, Trojan

bvzqdb.exe

Windows Exe (x86-32)

Created at 2019-05-29T16:17:00

...

VMRay Threat Indicators (6 rules, 456 matches)

Severity Category Operation Count Classification
5/5
Reputation Known malicious file 1 Trojan
  • File "C:\Users\FD1HVy\Desktop\bvzqdb.exe" is a known malicious file.
    ...
4/5
File System Modifies content of user files 1 Ransomware
  • Modifies the content of multiple user files. This is an indicator for an encryption attempt.
    ...
4/5
File System Deletes user files 1 Wiper
  • Deletes multiple user files. This is an indicator for ransomware or wiper malware.
    ...
1/5
Process Creates process with hidden window 1 -
  • The process "C:\WINDOWS\system32\cmd.exe" starts with hidden window.
    ...
1/5
File System Modifies application directory 451 -
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklist.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]blacklisted.certs.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]cacerts.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.policy.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]java.security.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]javaws.policy.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]local_policy.jar.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]trusted.libraries.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\security\[sysfrog@protonmail.com]us_export_policy.jar.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\[sysfrog@protonmail.com]sound.properties.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzdb.dat.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\lib\[sysfrog@protonmail.com]tzmappings.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]license.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]readme.txt.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]release.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]thirdpartylicensereadme-javafx.txt.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]thirdpartylicensereadme.txt.sysfrog".
    ...
  • Modifies "c:\program files\java\jre1.8.0_144\[sysfrog@protonmail.com]welcome.html.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\[sysfrog@protonmail.com]appxmanifest.xml.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\office16\[sysfrog@protonmail.com]ospp.htm.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\office16\[sysfrog@protonmail.com]ospp.vbs.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\office16\[sysfrog@protonmail.com]ospprearm.exe.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\office16\[sysfrog@protonmail.com]slerror.xml.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\packagemanifests\[sysfrog@protonmail.com]appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\packagemanifests\[sysfrog@protonmail.com]appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\packagemanifests\[sysfrog@protonmail.com]appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00004_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00011_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00021_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00037_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00038_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00040_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00052_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00057_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00090_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00092_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00103_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00120_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00126_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00129_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00130_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00135_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00139_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00142_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00154_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00157_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00158_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00160_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00161_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00163_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00164_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00165_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00167_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00169_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00170_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00171_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00172_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00174_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00175_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ag00176_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00010_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00015_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00790_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00853_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00914_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00932_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an00965_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01039_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01044_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01060_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01084_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01173_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01174_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01184_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01216_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01218_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01251_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an01545_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an02122_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an02559_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an02724_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an03500_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04108_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04117_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04134_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04174_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04191_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04195_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04196_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04206_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04225_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04235_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04267_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04269_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04323_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04326_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04332_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04355_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04369_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04384_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]an04385_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]baby_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00116_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00141_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00146_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00155_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00160_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd00173_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd05119_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd06102_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd06200_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd07761_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd07804_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd07831_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd08758_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd08773_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd08808_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd08868_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd09031_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd09194_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd09662_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd09664_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd10890_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd10972_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19563_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19582_.gif.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19695_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19827_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19828_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19986_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd19988_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bd20013_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00008_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00012_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00045_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00098_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00105_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00122_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00130_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00148_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00152_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00194_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00195_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00234_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00242_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00247_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00248_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00252_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00254_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00261_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00262_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00265_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00267_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00269_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00270_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00273_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00274_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00296_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00390_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00392_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00524_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00525_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00526_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00648_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00921_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00923_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00932_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bl00985_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]boat.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]boatinst.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00076_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00078_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00092_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00100_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00135_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00136_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00145_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00174_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00184_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00186_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00200_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00224_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00438_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00439_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00440_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00441_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00442_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00443_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00444_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00445_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs00453_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01080_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01603_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01634_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01635_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01636_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01637_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01638_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]bs01639_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]carbn_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]cg1606.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]classic1.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]classic2.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]clip.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]cmnty_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]crane.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]craninst.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]cup.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]cupinst.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00117_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00121_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00234_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00255_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00256_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00261_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00297_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00372_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00405_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00407_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00413_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00414_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00419_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00437_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00448_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00449_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00687_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd00705_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01015_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01039_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01138_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01139_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01140_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01143_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01145_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01146_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01151_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01152_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01157_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01160_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01162_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01163_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01166_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01167_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01168_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01169_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01170_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01171_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01172_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01173_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01176_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01178_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01179_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01180_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01181_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01182_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01183_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01186_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01366_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01434_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01585_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01586_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01628_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01629_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01630_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01631_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01761_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01772_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]dd01793_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]east_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ed00010_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ed00019_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ed00172_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]ed00184_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00006_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00202_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00222_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00242_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00319_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00320_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00397_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]en00902_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]explr_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fall_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00074_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00076_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00077_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00086_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00090_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00096_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00296_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00297_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00306_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00336_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00361_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00369_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00382_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00397_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00403_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00414_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00419_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00428_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00435_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00438_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00455_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00459_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00543_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00544_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00564_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00586_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00775_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00779_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00799_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00814_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd00965_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01074_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01084_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01176_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01191_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01193_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01196_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01548_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01657_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01658_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01659_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd01660_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02068_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02071_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02075_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02088_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02097_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02115_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02116_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02141_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02153_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02158_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fd02161_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fincl_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]fincl_02.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]flap.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]grden_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]grid_01.mid.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00057_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00084_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00231_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00235_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00236_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00241_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00260_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00276_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00334_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00443_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00513_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00524_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00526_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00527_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00546_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00601_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00602_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00612_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00623_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00625_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00636_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00669_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00681_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00685_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00687_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00688_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh00693_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01013_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01015_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01058_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01065_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01080_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01242_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01291_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01329_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01461_.wmf.sysfrog".
    ...
  • Modifies "c:\program files\microsoft office\root\clipart\pub60cor\[sysfrog@protonmail.com]hh01618_.wmf.sysfrog".
    ...
1/5
File System Creates an unusually large number of files 1 -

Screenshots

Monitored Processes

Process Graph

Process Graph Legend

Sample Information

ID #666583
MD5 37bc83a36cd6a78b11cea4c5762d88a2 Copy to Clipboard
SHA1 cf108d3cc2b58d2ea2bb44993a4d70cfe444ee17 Copy to Clipboard
SHA256 592f208906f12ca821db91f302c82c94b895ffb31d4af69f007fa0f9a8b569c3 Copy to Clipboard
SSDeep 24576:zI65GK9tyjgNpvW3RrZ+fhq/Il14M3Ch3IX2mrJW19h7KeMy:RGK2gYRc5K47CJIXrw19wB Copy to Clipboard
ImpHash 49ede76aa3940ae92a9fb54caef01d35 Copy to Clipboard
Filename bvzqdb.exe
File Size 1.23 MB
Sample Type Windows Exe (x86-32)

Analysis Information

Creation Time 2019-05-29 18:17 (UTC+2)
Analysis Duration 00:05:26
Number of Monitored Processes 8
Execution Successful True
Reputation Enabled True
WHOIS Enabled True
Local AV Enabled True
YARA Enabled True
Number of AV Matches 0
Number of YARA Matches 0
Termination Reason Timeout
Tags
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image