VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: - |
on.exe
Windows Exe (x86-32)
Created at 2019-12-08T20:44:00
Remarks
(0x200001d): The maximum number of extracted files was exceeded. Some files may be missing in the report.
(0x200001b): The maximum number of file reputation requests per analysis (150) was exceeded.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\on.exe | Sample File | Binary |
Malicious
|
...
|
»
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x4305e8 |
Size Of Code | 0x2ee00 |
Size Of Initialized Data | 0x5c00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2019-12-01 19:41:33+00:00 |
Packer | BobSoft Mini Delphi -> BoB / BobSoft |
Sections (9)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x2d4a4 | 0x2d600 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.6 |
.itext | 0x42f000 | 0x1604 | 0x1800 | 0x2da00 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 7.45 |
.data | 0x431000 | 0x1754 | 0x1800 | 0x2f200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.08 |
.bss | 0x433000 | 0x104d4c | 0x0 | 0x30a00 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0.0 |
.idata | 0x538000 | 0x14e6 | 0x1600 | 0x30a00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.91 |
.tls | 0x53a000 | 0xc | 0x0 | 0x32000 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0.0 |
.rdata | 0x53b000 | 0x18 | 0x200 | 0x32000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 0.21 |
.reloc | 0x53c000 | 0x2938 | 0x2a00 | 0x32200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.65 |
.rsrc | 0x53f000 | 0x0 | 0x200 | 0x34c00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 0.0 |
Imports (15)
»
oleaut32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SysFreeString | 0x0 | 0x538458 | 0x138140 | 0x30b40 | 0x0 |
SysReAllocStringLen | 0x0 | 0x53845c | 0x138144 | 0x30b44 | 0x0 |
SysAllocStringLen | 0x0 | 0x538460 | 0x138148 | 0x30b48 | 0x0 |
advapi32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegQueryValueExA | 0x0 | 0x538468 | 0x138150 | 0x30b50 | 0x0 |
RegOpenKeyExA | 0x0 | 0x53846c | 0x138154 | 0x30b54 | 0x0 |
RegCloseKey | 0x0 | 0x538470 | 0x138158 | 0x30b58 | 0x0 |
user32.dll (5)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetKeyboardType | 0x0 | 0x538478 | 0x138160 | 0x30b60 | 0x0 |
DestroyWindow | 0x0 | 0x53847c | 0x138164 | 0x30b64 | 0x0 |
LoadStringA | 0x0 | 0x538480 | 0x138168 | 0x30b68 | 0x0 |
MessageBoxA | 0x0 | 0x538484 | 0x13816c | 0x30b6c | 0x0 |
CharNextA | 0x0 | 0x538488 | 0x138170 | 0x30b70 | 0x0 |
kernel32.dll (33)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetACP | 0x0 | 0x538490 | 0x138178 | 0x30b78 | 0x0 |
Sleep | 0x0 | 0x538494 | 0x13817c | 0x30b7c | 0x0 |
VirtualFree | 0x0 | 0x538498 | 0x138180 | 0x30b80 | 0x0 |
VirtualAlloc | 0x0 | 0x53849c | 0x138184 | 0x30b84 | 0x0 |
GetTickCount | 0x0 | 0x5384a0 | 0x138188 | 0x30b88 | 0x0 |
QueryPerformanceCounter | 0x0 | 0x5384a4 | 0x13818c | 0x30b8c | 0x0 |
GetCurrentThreadId | 0x0 | 0x5384a8 | 0x138190 | 0x30b90 | 0x0 |
InterlockedDecrement | 0x0 | 0x5384ac | 0x138194 | 0x30b94 | 0x0 |
InterlockedIncrement | 0x0 | 0x5384b0 | 0x138198 | 0x30b98 | 0x0 |
VirtualQuery | 0x0 | 0x5384b4 | 0x13819c | 0x30b9c | 0x0 |
WideCharToMultiByte | 0x0 | 0x5384b8 | 0x1381a0 | 0x30ba0 | 0x0 |
MultiByteToWideChar | 0x0 | 0x5384bc | 0x1381a4 | 0x30ba4 | 0x0 |
lstrlenA | 0x0 | 0x5384c0 | 0x1381a8 | 0x30ba8 | 0x0 |
lstrcpynA | 0x0 | 0x5384c4 | 0x1381ac | 0x30bac | 0x0 |
LoadLibraryExA | 0x0 | 0x5384c8 | 0x1381b0 | 0x30bb0 | 0x0 |
GetThreadLocale | 0x0 | 0x5384cc | 0x1381b4 | 0x30bb4 | 0x0 |
GetStartupInfoA | 0x0 | 0x5384d0 | 0x1381b8 | 0x30bb8 | 0x0 |
GetProcAddress | 0x0 | 0x5384d4 | 0x1381bc | 0x30bbc | 0x0 |
GetModuleHandleA | 0x0 | 0x5384d8 | 0x1381c0 | 0x30bc0 | 0x0 |
GetModuleFileNameA | 0x0 | 0x5384dc | 0x1381c4 | 0x30bc4 | 0x0 |
GetLocaleInfoA | 0x0 | 0x5384e0 | 0x1381c8 | 0x30bc8 | 0x0 |
GetCommandLineA | 0x0 | 0x5384e4 | 0x1381cc | 0x30bcc | 0x0 |
FreeLibrary | 0x0 | 0x5384e8 | 0x1381d0 | 0x30bd0 | 0x0 |
FindFirstFileA | 0x0 | 0x5384ec | 0x1381d4 | 0x30bd4 | 0x0 |
FindClose | 0x0 | 0x5384f0 | 0x1381d8 | 0x30bd8 | 0x0 |
ExitProcess | 0x0 | 0x5384f4 | 0x1381dc | 0x30bdc | 0x0 |
ExitThread | 0x0 | 0x5384f8 | 0x1381e0 | 0x30be0 | 0x0 |
CreateThread | 0x0 | 0x5384fc | 0x1381e4 | 0x30be4 | 0x0 |
WriteFile | 0x0 | 0x538500 | 0x1381e8 | 0x30be8 | 0x0 |
UnhandledExceptionFilter | 0x0 | 0x538504 | 0x1381ec | 0x30bec | 0x0 |
RtlUnwind | 0x0 | 0x538508 | 0x1381f0 | 0x30bf0 | 0x0 |
RaiseException | 0x0 | 0x53850c | 0x1381f4 | 0x30bf4 | 0x0 |
GetStdHandle | 0x0 | 0x538510 | 0x1381f8 | 0x30bf8 | 0x0 |
kernel32.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
TlsSetValue | 0x0 | 0x538518 | 0x138200 | 0x30c00 | 0x0 |
TlsGetValue | 0x0 | 0x53851c | 0x138204 | 0x30c04 | 0x0 |
LocalAlloc | 0x0 | 0x538520 | 0x138208 | 0x30c08 | 0x0 |
GetModuleHandleA | 0x0 | 0x538524 | 0x13820c | 0x30c0c | 0x0 |
user32.dll (14)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
TranslateMessage | 0x0 | 0x53852c | 0x138214 | 0x30c14 | 0x0 |
PeekMessageA | 0x0 | 0x538530 | 0x138218 | 0x30c18 | 0x0 |
MsgWaitForMultipleObjects | 0x0 | 0x538534 | 0x13821c | 0x30c1c | 0x0 |
MessageBoxA | 0x0 | 0x538538 | 0x138220 | 0x30c20 | 0x0 |
LoadStringA | 0x0 | 0x53853c | 0x138224 | 0x30c24 | 0x0 |
GetSystemMetrics | 0x0 | 0x538540 | 0x138228 | 0x30c28 | 0x0 |
DispatchMessageA | 0x0 | 0x538544 | 0x13822c | 0x30c2c | 0x0 |
CharNextW | 0x0 | 0x538548 | 0x138230 | 0x30c30 | 0x0 |
CharLowerBuffW | 0x0 | 0x53854c | 0x138234 | 0x30c34 | 0x0 |
CharNextA | 0x0 | 0x538550 | 0x138238 | 0x30c38 | 0x0 |
CharLowerBuffA | 0x0 | 0x538554 | 0x13823c | 0x30c3c | 0x0 |
CharLowerA | 0x0 | 0x538558 | 0x138240 | 0x30c40 | 0x0 |
CharUpperA | 0x0 | 0x53855c | 0x138244 | 0x30c44 | 0x0 |
CharToOemA | 0x0 | 0x538560 | 0x138248 | 0x30c48 | 0x0 |
mpr.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WNetOpenEnumW | 0x0 | 0x538568 | 0x138250 | 0x30c50 | 0x0 |
WNetEnumResourceW | 0x0 | 0x53856c | 0x138254 | 0x30c54 | 0x0 |
WNetCloseEnum | 0x0 | 0x538570 | 0x138258 | 0x30c58 | 0x0 |
kernel32.dll (82)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WriteProcessMemory | 0x0 | 0x538578 | 0x138260 | 0x30c60 | 0x0 |
WriteFile | 0x0 | 0x53857c | 0x138264 | 0x30c64 | 0x0 |
WaitForSingleObject | 0x0 | 0x538580 | 0x138268 | 0x30c68 | 0x0 |
VirtualQuery | 0x0 | 0x538584 | 0x13826c | 0x30c6c | 0x0 |
VirtualAllocEx | 0x0 | 0x538588 | 0x138270 | 0x30c70 | 0x0 |
TerminateThread | 0x0 | 0x53858c | 0x138274 | 0x30c74 | 0x0 |
TerminateProcess | 0x0 | 0x538590 | 0x138278 | 0x30c78 | 0x0 |
SetLastError | 0x0 | 0x538594 | 0x13827c | 0x30c7c | 0x0 |
SetFileTime | 0x0 | 0x538598 | 0x138280 | 0x30c80 | 0x0 |
SetFilePointer | 0x0 | 0x53859c | 0x138284 | 0x30c84 | 0x0 |
SetFileAttributesW | 0x0 | 0x5385a0 | 0x138288 | 0x30c88 | 0x0 |
SetEvent | 0x0 | 0x5385a4 | 0x13828c | 0x30c8c | 0x0 |
SetEndOfFile | 0x0 | 0x5385a8 | 0x138290 | 0x30c90 | 0x0 |
ResumeThread | 0x0 | 0x5385ac | 0x138294 | 0x30c94 | 0x0 |
ResetEvent | 0x0 | 0x5385b0 | 0x138298 | 0x30c98 | 0x0 |
ReadFile | 0x0 | 0x5385b4 | 0x13829c | 0x30c9c | 0x0 |
OpenProcess | 0x0 | 0x5385b8 | 0x1382a0 | 0x30ca0 | 0x0 |
MoveFileW | 0x0 | 0x5385bc | 0x1382a4 | 0x30ca4 | 0x0 |
LoadLibraryA | 0x0 | 0x5385c0 | 0x1382a8 | 0x30ca8 | 0x0 |
LeaveCriticalSection | 0x0 | 0x5385c4 | 0x1382ac | 0x30cac | 0x0 |
InitializeCriticalSection | 0x0 | 0x5385c8 | 0x1382b0 | 0x30cb0 | 0x0 |
GlobalUnlock | 0x0 | 0x5385cc | 0x1382b4 | 0x30cb4 | 0x0 |
GlobalReAlloc | 0x0 | 0x5385d0 | 0x1382b8 | 0x30cb8 | 0x0 |
GlobalHandle | 0x0 | 0x5385d4 | 0x1382bc | 0x30cbc | 0x0 |
GlobalLock | 0x0 | 0x5385d8 | 0x1382c0 | 0x30cc0 | 0x0 |
GlobalFree | 0x0 | 0x5385dc | 0x1382c4 | 0x30cc4 | 0x0 |
GlobalAlloc | 0x0 | 0x5385e0 | 0x1382c8 | 0x30cc8 | 0x0 |
GetVersionExA | 0x0 | 0x5385e4 | 0x1382cc | 0x30ccc | 0x0 |
GetUserDefaultLangID | 0x0 | 0x5385e8 | 0x1382d0 | 0x30cd0 | 0x0 |
GetTickCount | 0x0 | 0x5385ec | 0x1382d4 | 0x30cd4 | 0x0 |
GetThreadLocale | 0x0 | 0x5385f0 | 0x1382d8 | 0x30cd8 | 0x0 |
GetStdHandle | 0x0 | 0x5385f4 | 0x1382dc | 0x30cdc | 0x0 |
GetProcAddress | 0x0 | 0x5385f8 | 0x1382e0 | 0x30ce0 | 0x0 |
GetModuleHandleA | 0x0 | 0x5385fc | 0x1382e4 | 0x30ce4 | 0x0 |
GetModuleFileNameW | 0x0 | 0x538600 | 0x1382e8 | 0x30ce8 | 0x0 |
GetModuleFileNameA | 0x0 | 0x538604 | 0x1382ec | 0x30cec | 0x0 |
GetLocaleInfoA | 0x0 | 0x538608 | 0x1382f0 | 0x30cf0 | 0x0 |
GetLocalTime | 0x0 | 0x53860c | 0x1382f4 | 0x30cf4 | 0x0 |
GetLastError | 0x0 | 0x538610 | 0x1382f8 | 0x30cf8 | 0x0 |
GetFullPathNameA | 0x0 | 0x538614 | 0x1382fc | 0x30cfc | 0x0 |
GetFileAttributesW | 0x0 | 0x538618 | 0x138300 | 0x30d00 | 0x0 |
GetFileAttributesA | 0x0 | 0x53861c | 0x138304 | 0x30d04 | 0x0 |
GetExitCodeThread | 0x0 | 0x538620 | 0x138308 | 0x30d08 | 0x0 |
GetEnvironmentVariableW | 0x0 | 0x538624 | 0x13830c | 0x30d0c | 0x0 |
GetEnvironmentVariableA | 0x0 | 0x538628 | 0x138310 | 0x30d10 | 0x0 |
GetDriveTypeA | 0x0 | 0x53862c | 0x138314 | 0x30d14 | 0x0 |
GetDiskFreeSpaceA | 0x0 | 0x538630 | 0x138318 | 0x30d18 | 0x0 |
GetDateFormatA | 0x0 | 0x538634 | 0x13831c | 0x30d1c | 0x0 |
GetCurrentThreadId | 0x0 | 0x538638 | 0x138320 | 0x30d20 | 0x0 |
GetCurrentProcess | 0x0 | 0x53863c | 0x138324 | 0x30d24 | 0x0 |
GetCommandLineW | 0x0 | 0x538640 | 0x138328 | 0x30d28 | 0x0 |
GetCPInfo | 0x0 | 0x538644 | 0x13832c | 0x30d2c | 0x0 |
InterlockedIncrement | 0x0 | 0x538648 | 0x138330 | 0x30d30 | 0x0 |
InterlockedExchange | 0x0 | 0x53864c | 0x138334 | 0x30d34 | 0x0 |
InterlockedDecrement | 0x0 | 0x538650 | 0x138338 | 0x30d38 | 0x0 |
FreeLibrary | 0x0 | 0x538654 | 0x13833c | 0x30d3c | 0x0 |
FormatMessageA | 0x0 | 0x538658 | 0x138340 | 0x30d40 | 0x0 |
FindNextFileW | 0x0 | 0x53865c | 0x138344 | 0x30d44 | 0x0 |
FindFirstFileW | 0x0 | 0x538660 | 0x138348 | 0x30d48 | 0x0 |
FindClose | 0x0 | 0x538664 | 0x13834c | 0x30d4c | 0x0 |
FileTimeToLocalFileTime | 0x0 | 0x538668 | 0x138350 | 0x30d50 | 0x0 |
FileTimeToDosDateTime | 0x0 | 0x53866c | 0x138354 | 0x30d54 | 0x0 |
ExitThread | 0x0 | 0x538670 | 0x138358 | 0x30d58 | 0x0 |
ExitProcess | 0x0 | 0x538674 | 0x13835c | 0x30d5c | 0x0 |
EnumCalendarInfoA | 0x0 | 0x538678 | 0x138360 | 0x30d60 | 0x0 |
EnterCriticalSection | 0x0 | 0x53867c | 0x138364 | 0x30d64 | 0x0 |
DuplicateHandle | 0x0 | 0x538680 | 0x138368 | 0x30d68 | 0x0 |
DeleteFileW | 0x0 | 0x538684 | 0x13836c | 0x30d6c | 0x0 |
DeleteCriticalSection | 0x0 | 0x538688 | 0x138370 | 0x30d70 | 0x0 |
CreateThread | 0x0 | 0x53868c | 0x138374 | 0x30d74 | 0x0 |
CreateRemoteThread | 0x0 | 0x538690 | 0x138378 | 0x30d78 | 0x0 |
CreateProcessW | 0x0 | 0x538694 | 0x13837c | 0x30d7c | 0x0 |
CreateProcessA | 0x0 | 0x538698 | 0x138380 | 0x30d80 | 0x0 |
CreatePipe | 0x0 | 0x53869c | 0x138384 | 0x30d84 | 0x0 |
CreateFileW | 0x0 | 0x5386a0 | 0x138388 | 0x30d88 | 0x0 |
CreateFileA | 0x0 | 0x5386a4 | 0x13838c | 0x30d8c | 0x0 |
CreateEventA | 0x0 | 0x5386a8 | 0x138390 | 0x30d90 | 0x0 |
CreateDirectoryW | 0x0 | 0x5386ac | 0x138394 | 0x30d94 | 0x0 |
CopyFileW | 0x0 | 0x5386b0 | 0x138398 | 0x30d98 | 0x0 |
CompareStringW | 0x0 | 0x5386b4 | 0x13839c | 0x30d9c | 0x0 |
CompareStringA | 0x0 | 0x5386b8 | 0x1383a0 | 0x30da0 | 0x0 |
CloseHandle | 0x0 | 0x5386bc | 0x1383a4 | 0x30da4 | 0x0 |
advapi32.dll (15)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegSetValueExW | 0x0 | 0x5386c4 | 0x1383ac | 0x30dac | 0x0 |
RegSetValueExA | 0x0 | 0x5386c8 | 0x1383b0 | 0x30db0 | 0x0 |
RegQueryValueExW | 0x0 | 0x5386cc | 0x1383b4 | 0x30db4 | 0x0 |
RegQueryValueExA | 0x0 | 0x5386d0 | 0x1383b8 | 0x30db8 | 0x0 |
RegOpenKeyExW | 0x0 | 0x5386d4 | 0x1383bc | 0x30dbc | 0x0 |
RegOpenKeyExA | 0x0 | 0x5386d8 | 0x1383c0 | 0x30dc0 | 0x0 |
RegEnumKeyExA | 0x0 | 0x5386dc | 0x1383c4 | 0x30dc4 | 0x0 |
RegDeleteValueA | 0x0 | 0x5386e0 | 0x1383c8 | 0x30dc8 | 0x0 |
RegDeleteKeyA | 0x0 | 0x5386e4 | 0x1383cc | 0x30dcc | 0x0 |
RegCreateKeyExW | 0x0 | 0x5386e8 | 0x1383d0 | 0x30dd0 | 0x0 |
RegCreateKeyExA | 0x0 | 0x5386ec | 0x1383d4 | 0x30dd4 | 0x0 |
RegCloseKey | 0x0 | 0x5386f0 | 0x1383d8 | 0x30dd8 | 0x0 |
OpenProcessToken | 0x0 | 0x5386f4 | 0x1383dc | 0x30ddc | 0x0 |
LookupPrivilegeValueA | 0x0 | 0x5386f8 | 0x1383e0 | 0x30de0 | 0x0 |
AdjustTokenPrivileges | 0x0 | 0x5386fc | 0x1383e4 | 0x30de4 | 0x0 |
kernel32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
Sleep | 0x0 | 0x538704 | 0x1383ec | 0x30dec | 0x0 |
wininet.dll (8)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
InternetReadFile | 0x0 | 0x53870c | 0x1383f4 | 0x30df4 | 0x0 |
InternetOpenUrlA | 0x0 | 0x538710 | 0x1383f8 | 0x30df8 | 0x0 |
InternetOpenA | 0x0 | 0x538714 | 0x1383fc | 0x30dfc | 0x0 |
InternetConnectA | 0x0 | 0x538718 | 0x138400 | 0x30e00 | 0x0 |
InternetCloseHandle | 0x0 | 0x53871c | 0x138404 | 0x30e04 | 0x0 |
HttpSendRequestA | 0x0 | 0x538720 | 0x138408 | 0x30e08 | 0x0 |
HttpOpenRequestA | 0x0 | 0x538724 | 0x13840c | 0x30e0c | 0x0 |
HttpAddRequestHeadersA | 0x0 | 0x538728 | 0x138410 | 0x30e10 | 0x0 |
shell32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ShellExecuteW | 0x0 | 0x538730 | 0x138418 | 0x30e18 | 0x0 |
shell32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SHGetSpecialFolderLocation | 0x0 | 0x538738 | 0x138420 | 0x30e20 | 0x0 |
shell32.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SHGetPathFromIDListW | 0x0 | 0x538740 | 0x138428 | 0x30e28 | 0x0 |
SHGetMalloc | 0x0 | 0x538744 | 0x13842c | 0x30e2c | 0x0 |
oleaut32.dll (8)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SafeArrayPtrOfIndex | 0x0 | 0x53874c | 0x138434 | 0x30e34 | 0x0 |
SafeArrayGetUBound | 0x0 | 0x538750 | 0x138438 | 0x30e38 | 0x0 |
SafeArrayGetLBound | 0x0 | 0x538754 | 0x13843c | 0x30e3c | 0x0 |
SafeArrayCreate | 0x0 | 0x538758 | 0x138440 | 0x30e40 | 0x0 |
VariantChangeType | 0x0 | 0x53875c | 0x138444 | 0x30e44 | 0x0 |
VariantCopy | 0x0 | 0x538760 | 0x138448 | 0x30e48 | 0x0 |
VariantClear | 0x0 | 0x538764 | 0x13844c | 0x30e4c | 0x0 |
VariantInit | 0x0 | 0x538768 | 0x138450 | 0x30e50 | 0x0 |
Memory Dumps (4)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Points | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
on.exe | 1 | 0x00240000 | 0x0037FFFF | Relevant Image | - | 32-bit | - |
![]() |
![]() |
...
|
on.exe | 3 | 0x00240000 | 0x0037FFFF | Relevant Image | - | 32-bit | - |
![]() |
![]() |
...
|
on.exe | 1 | 0x00240000 | 0x0037FFFF | Final Dump | - | 32-bit | - |
![]() |
![]() |
...
|
on.exe | 3 | 0x00240000 | 0x0037FFFF | Final Dump | - | 32-bit | - |
![]() |
![]() |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Generic.Ransom.Buhtrap.9E656C86 |
Malicious
|
C:\Users\5P5NRG~1\AppData\Local\Temp\FA928B86.zeppelin | Dropped File | Stream |
Whitelisted
|
...
|
»
File Reputation Information
»
Severity |
Whitelisted
|
First Seen | 2011-05-31 22:44 (UTC+2) |
Last Seen | 2019-12-05 22:30 (UTC+1) |
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF | Modified File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00780L.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02055_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\Groove Starter Template.xsn.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CHART_M.VST.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CHART_U.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMOLE_M.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMPS_M.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\DVCALL_M.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\DVCALL_U.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\DWGCNV_U.VTX.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECHIP_M.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECHIP_U.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECOMP_U.VSS.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EEGENR_U.VST.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\DigSig.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\makeaccessible.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\ReadOutLoud.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\reflow.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\SendMail.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Spelling.CAT.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\EScript.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\pddom.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\ReadOutLoud.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\reflow.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\SaveAsRTF.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Search.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Spelling.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\updater.DAN.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Acroform.ESP.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Multimedia.ESP.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\pddom.ESP.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\PPKLITE.ESP.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\AdobeCollabSync.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Checkers.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\DVA.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\IA32.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Multimedia.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\PPKLITE.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Search.SUO.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services\DEXShare.asfx.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Acroform.FRA.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\AdobeCollabSync.FRA.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Services\Services.asfx.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\pddom.SKY.244-A80-137 | Dropped File | Stream |
Unknown
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CHART_U.VST | Modified File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02039_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02073_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02074_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\FRENCH.LNG.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\FOREST.CSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GANTT.CSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CHART_M.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMOLE_M.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMOLE_U.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMOLE_U.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMPLN_M.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMPLN_U.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\COMPS_U.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CONLOG_M.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\CONLOG_U.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\DWGCNV_M.VTX.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECHIP_M.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECHIP_U.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EECOMP_M.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EEFUND_M.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EEFUND_U.VSS.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EEGENR_M.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\Office14\Visio Content\1033\EEICS_M.VST.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\DVA.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\eBook.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\EScript.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\IA32.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Multimedia.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\pddom.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\PPKLite.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\RdLang32.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\SaveAsRTF.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Search.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\updater.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\WebLink.CAT.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\DVA.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\eBook.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\IA32.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\makeaccessible.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Multimedia.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\PPKLITE.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\RdLang32.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\SendMail.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Weblink.DAN.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Services\DEXShare.asfx.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Services\Services.asfx.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\accessibility.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\AdobeCollabSync.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Annots.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\BRdlang32.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Checkers.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\DigSig.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\DVA.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\eBook.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\EScript.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\IA32.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\makeaccessible.ESP.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\WebLink.EUQ.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\DEXShare.asfx.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\Services.asfx.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\accessibility.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Acroform.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Annots.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\BRdlang32.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\DigSig.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\eBook.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\EScript.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\makeaccessible.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\pddom.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\RdLang32.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\ReadOutLoud.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\reflow.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\SaveAsRTF.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\SendMail.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Spelling.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\updater.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Weblink.SUO.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services\Services.asfx.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\accessibility.FRA.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Annots.FRA.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT | Dropped File | Text |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Multimedia.SKY.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\PPKLite.SKY.244-A80-137 | Dropped File | Stream |
Not Queried
|
...
|
»