VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: | - |
Threat Names: |
Generic.Ransom.LockBit.19F98D1F
Generic.Ransom.LockBit.AEA92F84
Mal/Generic-S
|
bcrqdk.exe
Windows Exe (x86-32)
Created at 2020-03-27T21:18:00
Remarks (1/1)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "1 hour, 15 seconds" to "2 minutes, 10 seconds" to reveal dormant functionality.
Remarks
(0x0200001D): The maximum number of extracted files was exceeded. Some files may be missing in the report.
(0x0200001B): The maximum number of file reputation requests per analysis (150) was exceeded.
Master Boot Record Changes
»
Sector Number | Sector Size | Actions |
---|---|---|
2063 | 512 Bytes |
...
|
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\bcrqdk.exe | Sample File | Binary |
Malicious
|
...
|
»
File Reputation Information
»
Severity |
Blacklisted
|
Names | Mal/Generic-S |
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x41b160 |
Size Of Code | 0x1ee00 |
Size Of Initialized Data | 0x8a00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2020-02-17 05:58:42+00:00 |
Sections (3)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x1edcb | 0x1ee00 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.36 |
.rdata | 0x420000 | 0x642a | 0x6600 | 0x1f200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 6.95 |
.data | 0x427000 | 0x2350 | 0x200 | 0x25800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.62 |
Imports (14)
»
NETAPI32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
NetShareEnum | 0x0 | 0x4201b0 | 0x2519c | 0x2439c | 0xef |
NetWkstaGetInfo | 0x0 | 0x4201b4 | 0x251a0 | 0x243a0 | 0x108 |
NetApiBufferFree | 0x0 | 0x4201b8 | 0x251a4 | 0x243a4 | 0x65 |
IPHLPAPI.DLL (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetAdaptersInfo | 0x0 | 0x420094 | 0x25080 | 0x24280 | 0x3f |
WS2_32.dll (11)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WSAGetLastError | 0x6f | 0x42025c | 0x25248 | 0x24448 | - |
ioctlsocket | 0xa | 0x420260 | 0x2524c | 0x2444c | - |
htons | 0x9 | 0x420264 | 0x25250 | 0x24450 | - |
connect | 0x4 | 0x420268 | 0x25254 | 0x24454 | - |
socket | 0x17 | 0x42026c | 0x25258 | 0x24458 | - |
inet_addr | 0xb | 0x420270 | 0x2525c | 0x2445c | - |
WSAStartup | 0x73 | 0x420274 | 0x25260 | 0x24460 | - |
select | 0x12 | 0x420278 | 0x25264 | 0x24464 | - |
closesocket | 0x3 | 0x42027c | 0x25268 | 0x24468 | - |
__WSAFDIsSet | 0x97 | 0x420280 | 0x2526c | 0x2446c | - |
WSACleanup | 0x74 | 0x420284 | 0x25270 | 0x24470 | - |
CRYPT32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CryptBinaryToStringA | 0x0 | 0x42008c | 0x25078 | 0x24278 | 0x7c |
gdiplus.dll (24)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GdipDeleteGraphics | 0x0 | 0x42028c | 0x25278 | 0x24478 | 0x90 |
GdipDeleteStringFormat | 0x0 | 0x420290 | 0x2527c | 0x2447c | 0x97 |
GdipDeleteFont | 0x0 | 0x420294 | 0x25280 | 0x24480 | 0x8e |
GdipCreateBitmapFromScan0 | 0x0 | 0x420298 | 0x25284 | 0x24484 | 0x50 |
GdipSetStringFormatAlign | 0x0 | 0x42029c | 0x25288 | 0x24488 | 0x24b |
GdipSaveImageToFile | 0x0 | 0x4202a0 | 0x2528c | 0x2448c | 0x1f0 |
GdipGetImageEncodersSize | 0x0 | 0x4202a4 | 0x25290 | 0x24490 | 0x11f |
GdipGetImageGraphicsContext | 0x0 | 0x4202a8 | 0x25294 | 0x24494 | 0x121 |
GdipDeleteFontFamily | 0x0 | 0x4202ac | 0x25298 | 0x24498 | 0x8f |
GdipCreateLineBrushFromRect | 0x0 | 0x4202b0 | 0x2529c | 0x2449c | 0x65 |
GdipCreateStringFormat | 0x0 | 0x4202b4 | 0x252a0 | 0x244a0 | 0x84 |
GdiplusStartup | 0x0 | 0x4202b8 | 0x252a4 | 0x244a4 | 0x275 |
GdipDisposeImage | 0x0 | 0x4202bc | 0x252a8 | 0x244a8 | 0x98 |
GdipCloneBrush | 0x0 | 0x4202c0 | 0x252ac | 0x244ac | 0x32 |
GdipDrawString | 0x0 | 0x4202c4 | 0x252b0 | 0x244b0 | 0xc8 |
GdipFree | 0x0 | 0x4202c8 | 0x252b4 | 0x244b4 | 0xed |
GdipGetGenericFontFamilySansSerif | 0x0 | 0x4202cc | 0x252b8 | 0x244b8 | 0x113 |
GdipFillRectangle | 0x0 | 0x4202d0 | 0x252bc | 0x244bc | 0xe4 |
GdipCreateFont | 0x0 | 0x4202d4 | 0x252c0 | 0x244c0 | 0x56 |
GdipAlloc | 0x0 | 0x4202d8 | 0x252c4 | 0x244c4 | 0x21 |
GdipDeleteBrush | 0x0 | 0x4202dc | 0x252c8 | 0x244c8 | 0x8a |
GdipCreateFontFamilyFromName | 0x0 | 0x4202e0 | 0x252cc | 0x244cc | 0x57 |
GdipGetImageEncoders | 0x0 | 0x4202e4 | 0x252d0 | 0x244d0 | 0x11e |
GdipSetStringFormatLineAlign | 0x0 | 0x4202e8 | 0x252d4 | 0x244d4 | 0x24f |
SHLWAPI.dll (6)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
PathAddBackslashW | 0x0 | 0x4201d4 | 0x251c0 | 0x243c0 | 0x30 |
PathFindExtensionW | 0x0 | 0x4201d8 | 0x251c4 | 0x243c4 | 0x47 |
PathRemoveExtensionA | 0x0 | 0x4201dc | 0x251c8 | 0x243c8 | 0x88 |
PathRemoveFileSpecW | 0x0 | 0x4201e0 | 0x251cc | 0x243cc | 0x8b |
PathRemoveBackslashW | 0x0 | 0x4201e4 | 0x251d0 | 0x243d0 | 0x85 |
StrFormatByteSize64A | 0x0 | 0x4201e8 | 0x251d4 | 0x243d4 | 0x128 |
MPR.dll (5)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WNetAddConnection2W | 0x0 | 0x420198 | 0x25184 | 0x24384 | 0x6 |
WNetOpenEnumW | 0x0 | 0x42019c | 0x25188 | 0x24388 | 0x3d |
WNetEnumResourceW | 0x0 | 0x4201a0 | 0x2518c | 0x2438c | 0x1c |
WNetGetConnectionW | 0x0 | 0x4201a4 | 0x25190 | 0x24390 | 0x24 |
WNetCloseEnum | 0x0 | 0x4201a8 | 0x25194 | 0x24394 | 0x10 |
ntdll.dll (31)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RtlEnterCriticalSection | 0x0 | 0x420308 | 0x252f4 | 0x244f4 | 0x248 |
RtlLeaveCriticalSection | 0x0 | 0x42030c | 0x252f8 | 0x244f8 | 0x2ed |
RtlDeleteCriticalSection | 0x0 | 0x420310 | 0x252fc | 0x244fc | 0x220 |
RtlInitializeCriticalSection | 0x0 | 0x420314 | 0x25300 | 0x24500 | 0x2b5 |
NtSetInformationThread | 0x0 | 0x420318 | 0x25304 | 0x24504 | 0x16a |
RtlCreateUserThread | 0x0 | 0x42031c | 0x25308 | 0x24508 | 0x211 |
NtAdjustPrivilegesToken | 0x0 | 0x420320 | 0x2530c | 0x2450c | 0x81 |
NtOpenProcessToken | 0x0 | 0x420324 | 0x25310 | 0x24510 | 0xfb |
NtQueryInformationToken | 0x0 | 0x420328 | 0x25314 | 0x24514 | 0x11d |
VerSetConditionMask | 0x0 | 0x42032c | 0x25318 | 0x24518 | 0x3c4 |
RtlGetAce | 0x0 | 0x420330 | 0x2531c | 0x2451c | 0x27f |
NtOpenProcess | 0x0 | 0x420334 | 0x25320 | 0x24520 | 0xfa |
RtlQueryInformationAcl | 0x0 | 0x420338 | 0x25324 | 0x24524 | 0x320 |
RtlAllocateAndInitializeSid | 0x0 | 0x42033c | 0x25328 | 0x24528 | 0x1c2 |
RtlAddAce | 0x0 | 0x420340 | 0x2532c | 0x2452c | 0x1b3 |
RtlLengthSid | 0x0 | 0x420344 | 0x25330 | 0x24530 | 0x2f0 |
RtlAdjustPrivilege | 0x0 | 0x420348 | 0x25334 | 0x24534 | 0x1c0 |
RtlFreeSid | 0x0 | 0x42034c | 0x25338 | 0x24538 | 0x279 |
RtlAddAccessDeniedAce | 0x0 | 0x420350 | 0x2533c | 0x2453c | 0x1b0 |
RtlCreateAcl | 0x0 | 0x420354 | 0x25340 | 0x24540 | 0x1fe |
NtSetInformationFile | 0x0 | 0x420358 | 0x25344 | 0x24544 | 0x165 |
RtlDosPathNameToNtPathName_U | 0x0 | 0x42035c | 0x25348 | 0x24548 | 0x237 |
RtlInterlockedPushEntrySList | 0x0 | 0x420360 | 0x2534c | 0x2454c | 0x2c8 |
RtlInitializeSListHead | 0x0 | 0x420364 | 0x25350 | 0x24550 | 0x2bc |
RtlInterlockedPopEntrySList | 0x0 | 0x420368 | 0x25354 | 0x24554 | 0x2c7 |
RtlInterlockedFlushSList | 0x0 | 0x42036c | 0x25358 | 0x24558 | 0x2c6 |
RtlInitUnicodeString | 0x0 | 0x420370 | 0x2535c | 0x2455c | 0x2b0 |
NtAllocateVirtualMemory | 0x0 | 0x420374 | 0x25360 | 0x24560 | 0x87 |
LdrEnumerateLoadedModules | 0x0 | 0x420378 | 0x25364 | 0x24564 | 0x54 |
RtlAcquirePebLock | 0x0 | 0x42037c | 0x25368 | 0x24568 | 0x1a6 |
RtlReleasePebLock | 0x0 | 0x420380 | 0x2536c | 0x2456c | 0x33b |
msvcrt.dll (5)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
srand | 0x0 | 0x4202f0 | 0x252dc | 0x244dc | 0x52f |
malloc | 0x0 | 0x4202f4 | 0x252e0 | 0x244e0 | 0x4ff |
free | 0x0 | 0x4202f8 | 0x252e4 | 0x244e4 | 0x4c7 |
rand | 0x0 | 0x4202fc | 0x252e8 | 0x244e8 | 0x51e |
calloc | 0x0 | 0x420300 | 0x252ec | 0x244ec | 0x4a6 |
KERNEL32.dll (62)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFileW | 0x0 | 0x42009c | 0x25088 | 0x24288 | 0x8f |
GetFileAttributesW | 0x0 | 0x4200a0 | 0x2508c | 0x2428c | 0x1ea |
GetDiskFreeSpaceExW | 0x0 | 0x4200a4 | 0x25090 | 0x24290 | 0x1ce |
FindClose | 0x0 | 0x4200a8 | 0x25094 | 0x24294 | 0x12e |
WaitForMultipleObjects | 0x0 | 0x4200ac | 0x25098 | 0x24298 | 0x4f7 |
GetWindowsDirectoryW | 0x0 | 0x4200b0 | 0x2509c | 0x2429c | 0x2af |
CreateIoCompletionPort | 0x0 | 0x4200b4 | 0x250a0 | 0x242a0 | 0x94 |
GetQueuedCompletionStatus | 0x0 | 0x4200b8 | 0x250a4 | 0x242a4 | 0x25e |
GetFileSizeEx | 0x0 | 0x4200bc | 0x250a8 | 0x242a8 | 0x1f1 |
ReadFile | 0x0 | 0x4200c0 | 0x250ac | 0x242ac | 0x3c0 |
CreateProcessW | 0x0 | 0x4200c4 | 0x250b0 | 0x242b0 | 0xa8 |
FindNextVolumeW | 0x0 | 0x4200c8 | 0x250b4 | 0x242b4 | 0x14a |
GetVolumePathNamesForVolumeNameW | 0x0 | 0x4200cc | 0x250b8 | 0x242b8 | 0x2ad |
FindVolumeClose | 0x0 | 0x4200d0 | 0x250bc | 0x242bc | 0x150 |
SetVolumeMountPointW | 0x0 | 0x4200d4 | 0x250c0 | 0x242c0 | 0x4ab |
FindNextFileW | 0x0 | 0x4200d8 | 0x250c4 | 0x242c4 | 0x145 |
FindFirstFileExW | 0x0 | 0x4200dc | 0x250c8 | 0x242c8 | 0x134 |
GetLogicalDrives | 0x0 | 0x4200e0 | 0x250cc | 0x242cc | 0x209 |
AllocConsole | 0x0 | 0x4200e4 | 0x250d0 | 0x242d0 | 0x10 |
GetConsoleWindow | 0x0 | 0x4200e8 | 0x250d4 | 0x242d4 | 0x1b7 |
GetProcAddress | 0x0 | 0x4200ec | 0x250d8 | 0x242d8 | 0x245 |
FindFirstVolumeW | 0x0 | 0x4200f0 | 0x250dc | 0x242dc | 0x13f |
QueryDosDeviceW | 0x0 | 0x4200f4 | 0x250e0 | 0x242e0 | 0x3a0 |
WaitForSingleObject | 0x0 | 0x4200f8 | 0x250e4 | 0x242e4 | 0x4f9 |
CreateProcessA | 0x0 | 0x4200fc | 0x250e8 | 0x242e8 | 0xa4 |
lstrcmpiA | 0x0 | 0x420100 | 0x250ec | 0x242ec | 0x544 |
GetCurrentProcessId | 0x0 | 0x420104 | 0x250f0 | 0x242f0 | 0x1c1 |
MoveFileExW | 0x0 | 0x420108 | 0x250f4 | 0x242f4 | 0x360 |
Process32Next | 0x0 | 0x42010c | 0x250f8 | 0x242f8 | 0x397 |
CreateToolhelp32Snapshot | 0x0 | 0x420110 | 0x250fc | 0x242fc | 0xbe |
OpenProcess | 0x0 | 0x420114 | 0x25100 | 0x24300 | 0x380 |
TerminateProcess | 0x0 | 0x420118 | 0x25104 | 0x24304 | 0x4c0 |
Process32First | 0x0 | 0x42011c | 0x25108 | 0x24308 | 0x395 |
GetComputerNameA | 0x0 | 0x420120 | 0x2510c | 0x2430c | 0x18c |
VerifyVersionInfoW | 0x0 | 0x420124 | 0x25110 | 0x24310 | 0x4e8 |
GetSystemInfo | 0x0 | 0x420128 | 0x25114 | 0x24314 | 0x273 |
GetVersionExA | 0x0 | 0x42012c | 0x25118 | 0x24318 | 0x2a3 |
LoadLibraryA | 0x0 | 0x420130 | 0x2511c | 0x2431c | 0x33c |
OpenMutexA | 0x0 | 0x420134 | 0x25120 | 0x24320 | 0x37c |
CreateMutexA | 0x0 | 0x420138 | 0x25124 | 0x24324 | 0x9b |
GetTickCount | 0x0 | 0x42013c | 0x25128 | 0x24328 | 0x293 |
GetTempFileNameW | 0x0 | 0x420140 | 0x2512c | 0x2432c | 0x283 |
GetTempPathW | 0x0 | 0x420144 | 0x25130 | 0x24330 | 0x285 |
GetDriveTypeW | 0x0 | 0x420148 | 0x25134 | 0x24334 | 0x1d3 |
lstrcmpiW | 0x0 | 0x42014c | 0x25138 | 0x24338 | 0x545 |
ExitProcess | 0x0 | 0x420150 | 0x2513c | 0x2433c | 0x119 |
CreateThread | 0x0 | 0x420154 | 0x25140 | 0x24340 | 0xb5 |
CloseHandle | 0x0 | 0x420158 | 0x25144 | 0x24344 | 0x52 |
DeleteFileW | 0x0 | 0x42015c | 0x25148 | 0x24348 | 0xd6 |
GetLocalTime | 0x0 | 0x420160 | 0x2514c | 0x2434c | 0x203 |
SetConsoleCtrlHandler | 0x0 | 0x420164 | 0x25150 | 0x24350 | 0x42d |
SetConsoleTextAttribute | 0x0 | 0x420168 | 0x25154 | 0x24354 | 0x446 |
SetConsoleTitleA | 0x0 | 0x42016c | 0x25158 | 0x24358 | 0x447 |
WriteFile | 0x0 | 0x420170 | 0x2515c | 0x2435c | 0x525 |
SetConsoleMode | 0x0 | 0x420174 | 0x25160 | 0x24360 | 0x43d |
SetProcessShutdownParameters | 0x0 | 0x420178 | 0x25164 | 0x24364 | 0x483 |
SetThreadUILanguage | 0x0 | 0x42017c | 0x25168 | 0x24368 | 0x49d |
ExitThread | 0x0 | 0x420180 | 0x2516c | 0x2436c | 0x11a |
GetModuleHandleA | 0x0 | 0x420184 | 0x25170 | 0x24370 | 0x215 |
Sleep | 0x0 | 0x420188 | 0x25174 | 0x24374 | 0x4b2 |
GetConsoleMode | 0x0 | 0x42018c | 0x25178 | 0x24378 | 0x1ac |
SetFileAttributesW | 0x0 | 0x420190 | 0x2517c | 0x2437c | 0x461 |
USER32.dll (26)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
DispatchMessageA | 0x0 | 0x4201f0 | 0x251dc | 0x243dc | 0xae |
IsWindowVisible | 0x0 | 0x4201f4 | 0x251e0 | 0x243e0 | 0x1e0 |
DeleteMenu | 0x0 | 0x4201f8 | 0x251e4 | 0x243e4 | 0x9e |
wsprintfA | 0x0 | 0x4201fc | 0x251e8 | 0x243e8 | 0x332 |
ShowWindow | 0x0 | 0x420200 | 0x251ec | 0x243ec | 0x2df |
SetWindowLongA | 0x0 | 0x420204 | 0x251f0 | 0x243f0 | 0x2c3 |
GetMessageA | 0x0 | 0x420208 | 0x251f4 | 0x243f4 | 0x159 |
GetWindowLongA | 0x0 | 0x42020c | 0x251f8 | 0x243f8 | 0x195 |
RegisterHotKey | 0x0 | 0x420210 | 0x251fc | 0x243fc | 0x256 |
RegisterClassA | 0x0 | 0x420214 | 0x25200 | 0x24400 | 0x24b |
DefWindowProcA | 0x0 | 0x420218 | 0x25204 | 0x24404 | 0x9b |
FlashWindow | 0x0 | 0x42021c | 0x25208 | 0x24408 | 0xfb |
CreateWindowExA | 0x0 | 0x420220 | 0x2520c | 0x2440c | 0x6d |
SetLayeredWindowAttributes | 0x0 | 0x420224 | 0x25210 | 0x24410 | 0x298 |
TranslateMessage | 0x0 | 0x420228 | 0x25214 | 0x24414 | 0x2fc |
wsprintfW | 0x0 | 0x42022c | 0x25218 | 0x24418 | 0x333 |
EnableMenuItem | 0x0 | 0x420230 | 0x2521c | 0x2441c | 0xd6 |
SetForegroundWindow | 0x0 | 0x420234 | 0x25220 | 0x24420 | 0x293 |
CharUpperA | 0x0 | 0x420238 | 0x25224 | 0x24424 | 0x39 |
GetSystemMenu | 0x0 | 0x42023c | 0x25228 | 0x24428 | 0x17d |
GetMessageW | 0x0 | 0x420240 | 0x2522c | 0x2442c | 0x15d |
SystemParametersInfoW | 0x0 | 0x420244 | 0x25230 | 0x24430 | 0x2ec |
wvsprintfA | 0x0 | 0x420248 | 0x25234 | 0x24434 | 0x334 |
GetSystemMetrics | 0x0 | 0x42024c | 0x25238 | 0x24438 | 0x17e |
CharLowerBuffW | 0x0 | 0x420250 | 0x2523c | 0x2443c | 0x2d |
PeekMessageW | 0x0 | 0x420254 | 0x25240 | 0x24440 | 0x233 |
ADVAPI32.dll (34)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
OpenSCManagerA | 0x0 | 0x420000 | 0x24fec | 0x241ec | 0x1f8 |
RegCreateKeyExA | 0x0 | 0x420004 | 0x24ff0 | 0x241f0 | 0x238 |
RegQueryValueExA | 0x0 | 0x420008 | 0x24ff4 | 0x241f4 | 0x26d |
RegCloseKey | 0x0 | 0x42000c | 0x24ff8 | 0x241f8 | 0x230 |
SetThreadToken | 0x0 | 0x420010 | 0x24ffc | 0x241fc | 0x2c1 |
RegOpenKeyA | 0x0 | 0x420014 | 0x25000 | 0x24200 | 0x25f |
CryptReleaseContext | 0x0 | 0x420018 | 0x25004 | 0x24204 | 0xcb |
EqualSid | 0x0 | 0x42001c | 0x25008 | 0x24208 | 0x107 |
AllocateAndInitializeSid | 0x0 | 0x420020 | 0x2500c | 0x2420c | 0x20 |
OpenProcessToken | 0x0 | 0x420024 | 0x25010 | 0x24210 | 0x1f7 |
FreeSid | 0x0 | 0x420028 | 0x25014 | 0x24214 | 0x120 |
CreateProcessAsUserW | 0x0 | 0x42002c | 0x25018 | 0x24218 | 0x7c |
DuplicateToken | 0x0 | 0x420030 | 0x2501c | 0x2421c | 0xde |
DuplicateTokenEx | 0x0 | 0x420034 | 0x25020 | 0x24220 | 0xdf |
GetTokenInformation | 0x0 | 0x420038 | 0x25024 | 0x24224 | 0x15a |
SetSecurityInfo | 0x0 | 0x42003c | 0x25028 | 0x24228 | 0x2bb |
GetSecurityInfo | 0x0 | 0x420040 | 0x2502c | 0x2422c | 0x14e |
EnumDependentServicesA | 0x0 | 0x420044 | 0x25030 | 0x24230 | 0xfc |
CloseServiceHandle | 0x0 | 0x420048 | 0x25034 | 0x24234 | 0x57 |
InitializeSecurityDescriptor | 0x0 | 0x42004c | 0x25038 | 0x24238 | 0x177 |
CheckTokenMembership | 0x0 | 0x420050 | 0x2503c | 0x2423c | 0x51 |
RegSetValueExA | 0x0 | 0x420054 | 0x25040 | 0x24240 | 0x27d |
ControlService | 0x0 | 0x420058 | 0x25044 | 0x24244 | 0x5c |
RegSetValueExW | 0x0 | 0x42005c | 0x25048 | 0x24248 | 0x27e |
RegDeleteValueW | 0x0 | 0x420060 | 0x2504c | 0x2424c | 0x248 |
QueryServiceStatusEx | 0x0 | 0x420064 | 0x25050 | 0x24250 | 0x229 |
RegQueryValueExW | 0x0 | 0x420068 | 0x25054 | 0x24254 | 0x26e |
OpenServiceA | 0x0 | 0x42006c | 0x25058 | 0x24258 | 0x1fa |
SetFileSecurityW | 0x0 | 0x420070 | 0x2505c | 0x2425c | 0x2aa |
CryptAcquireContextW | 0x0 | 0x420074 | 0x25060 | 0x24260 | 0xb1 |
SetSecurityDescriptorOwner | 0x0 | 0x420078 | 0x25064 | 0x24264 | 0x2b8 |
CryptGenRandom | 0x0 | 0x42007c | 0x25068 | 0x24268 | 0xc1 |
LookupPrivilegeValueA | 0x0 | 0x420080 | 0x2506c | 0x2426c | 0x196 |
CreateWellKnownSid | 0x0 | 0x420084 | 0x25070 | 0x24270 | 0x83 |
SHELL32.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CommandLineToArgvW | 0x0 | 0x4201c0 | 0x251ac | 0x243ac | 0x6 |
SHEmptyRecycleBinW | 0x0 | 0x4201c4 | 0x251b0 | 0x243b0 | 0xa5 |
ShellExecuteExA | 0x0 | 0x4201c8 | 0x251b4 | 0x243b4 | 0x120 |
ShellExecuteExW | 0x0 | 0x4201cc | 0x251b8 | 0x243b8 | 0x121 |
ole32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CoGetObject | 0x0 | 0x420388 | 0x25374 | 0x24574 | 0x35 |
CoUninitialize | 0x0 | 0x42038c | 0x25378 | 0x24578 | 0x6c |
CoInitializeEx | 0x0 | 0x420390 | 0x2537c | 0x2457c | 0x3f |
Memory Dumps (2)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
bcrqdk.exe | 1 | 0x00400000 | 0x00429FFF | Relevant Image | 32-bit | 0x00409810 |
...
|
|||
bcrqdk.exe | 1 | 0x00400000 | 0x00429FFF | Final Dump | 32-bit | 0x0041D2E0 |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Generic.Ransom.LockBit.19F98D1F |
Malicious
|
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png | Modified File | Binary |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00956_.WMF | Modified File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\secretst.ttf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dissolveanother.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\flippage\1047x576black.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\memories\notes_btn-back-static.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\oldage\15x15dot.png.lockbit | Dropped File | Binary |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\oldage\navigationleft_buttongraphic.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\performance\nextmenubuttonicon.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\pets\title_page_ref_pal.wmv.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\photoedge_buttongraphic.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\photoedge_selectionsubpicture.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\photoedge_videoinset.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\push\1047x576black.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\resizingpanels\panel_mask_pal.wmv.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\sports\goldring.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\stacking\15x15dot.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\vignette\15x15dot.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\vignette\navigationright_selectionsubpicture.png.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Stacking\Restore-My-Files.txt | Dropped File | Text |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00103_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif.lockbit | Dropped File | Binary |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00169_.gif.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an00010_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an00790_.wmf.lockbit | Dropped File | Binary |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an00015_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an01216_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an02724_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an03500_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04134_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04174_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04195_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04196_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04225_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04235_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04326_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04369_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04385_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bd00141_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bd00146_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00012_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00122_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00174_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00438_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00443_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00444_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00445_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01638_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01143_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01151_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01157_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01162_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01163_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01160_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01178_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01183_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01585_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01793_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ed00019_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ed00184_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ed00010_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00077_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00336_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00361_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00403_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00459_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00544_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00799_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00814_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01657_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02075_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02115_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02153_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fincl_02.mid.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00057_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fincl_01.mid.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00241_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00443_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00524_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00526_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00546_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00612_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00687_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01759_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01923_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01065_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02166_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02313_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hm00005_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hm00172_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00233_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00915_.wmf.lockbit | Dropped File | Stream |
Unknown
|
...
|
»
C:\\Program Files\DVD Maker\en-US\OmdProject.dll.mui | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png | Dropped File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Dot.png | Dropped File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv | Dropped File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\offset.ax.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\rtstreamsink.ax.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\babygirl\btn-next-static.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\babygirl\content-foreground.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\circleround_glass.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\circle_glass_thumbnail.bmp.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\flippage\pagecurl.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\memories\btn-next-static.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\navigationleft_buttongraphic.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\postage_buttongraphic.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\push\1047_576black.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\push\navigationleft_buttongraphic.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\push\navigationleft_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\push\navigationright_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\rectangles\15x15dot.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\rectangles\navigationleft_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\resizingpanels\navigationup_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\scene_button_style_default_thumbnail.bmp.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\shatter\navigationleft_buttongraphic.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\specialoccasion\navigationright_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\specialoccasion\navigationleft_selectionsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\sports\navigationbuttonsubpicture.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\sports\scenebuttoninset_alpha2.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\shared\dvdstyles\travel\btn-next-static.png.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\dvd maker\soniccolorconverter.ax.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00120_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00157_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00158_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00160_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00161_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00163_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00164_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00165_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00167_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00171_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00174_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00175_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00176_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ag00172_.gif.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an00853_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an01218_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an01251_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an01545_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an02122_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an02559_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04108_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04117_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04191_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04206_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04267_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04269_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04323_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04332_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04355_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\an04384_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bd00116_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bd00160_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00045_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00098_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00105_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00130_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00194_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00195_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00148_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bl00152_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00100_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00135_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00136_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00145_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00184_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00186_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00200_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00224_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00439_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00440_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00441_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00442_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs00453_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01080_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01603_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01634_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01635_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01636_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01637_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\bs01639_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\carbn_01.mid.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\classic1.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\classic2.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd00414_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd00419_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01139_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01140_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01146_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01152_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01145_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01167_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01168_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01169_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01170_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01171_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01172_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01173_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01176_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01180_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01181_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01182_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01186_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01366_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01434_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01586_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01629_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01628_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01630_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01631_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01761_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\dd01772_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\ed00172_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00076_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00086_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00090_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00096_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00296_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00297_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00306_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00382_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00397_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00414_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00419_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00428_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00435_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00438_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00455_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00543_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00564_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00586_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00775_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00779_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd00965_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01074_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01176_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01191_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01193_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01196_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01548_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01658_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01659_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd01660_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02068_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02088_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02097_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02116_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02141_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02158_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\fd02161_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\grden_01.mid.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00084_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00235_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00236_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00260_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00276_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00334_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00513_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00527_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00601_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00602_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00623_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00625_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00636_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00681_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00685_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00688_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01013_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01058_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh00693_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01015_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01242_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01291_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01329_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01461_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01618_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh01875_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02155_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02282_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02298_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hh02312_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hm00114_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hm00116_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\hm00426_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\htech_01.mid.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00046_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00118_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00177_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00204_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00343_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00346_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00351_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00557_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00919_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»
c:\program files\microsoft office\clipart\pub60cor\in00957_.wmf.lockbit | Dropped File | Stream |
Not Queried
|
...
|
»