VTI SCORE: 98/100
Dynamic Analysis Report |
Classification: Ransomware |
a.exe
Windows Exe (x86-32)
Created at 2019-07-26T17:39:00
Remarks
(0x200001d): The maximum number of extracted files was exceeded. Some files may be missing in the report.
(0x200001b): The maximum number of file reputation requests per analysis (150) was exceeded.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x49a001 |
Size Of Code | 0x1800 |
Size Of Initialized Data | 0x92c00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2012-01-29 18:49:03+00:00 |
Packer | ASPack v2.12 -> Alexey Solodovnikov |
Sections (6)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x2000 | 0xc00 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 7.31 |
.rdata | 0x403000 | 0x1000 | 0x600 | 0x1000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 6.11 |
.data | 0x404000 | 0x4000 | 0x400 | 0x1600 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 6.57 |
.rsrc | 0x408000 | 0x92000 | 0x1c00 | 0x1a00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 6.65 |
.xxxx | 0x49a000 | 0x1d000 | 0x1ca00 | 0x3600 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 6.55 |
.adata | 0x4b7000 | 0x1000 | 0x0 | 0x20000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 0.0 |
Imports (1)
»
kernel32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetProcAddress | 0x0 | 0x49afc4 | 0x9afc4 | 0x45c4 | 0x0 |
GetModuleHandleA | 0x0 | 0x49afc8 | 0x9afc8 | 0x45c8 | 0x0 |
LoadLibraryA | 0x0 | 0x49afcc | 0x9afcc | 0x45cc | 0x0 |
Memory Dumps (3)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
a.exe | 1 | 0x00400000 | 0x004B7FFF | Content Changed | - | 32-bit | 0x0049A001 |
![]() |
![]() |
...
|
a.exe | 1 | 0x00400000 | 0x004B7FFF | Relevant Image | - | 32-bit | - |
![]() |
![]() |
...
|
a.exe | 1 | 0x00400000 | 0x004B7FFF | Process Termination | - | 32-bit | - |
![]() |
![]() |
...
|
C:\$GetCurrent\SafeOS\preoobe.cmd | Modified File | Unknown |
Unknown
|
...
|
»
C:\588bce7c90097ed212\DHtmlHeader.html | Modified File | Text |
Unknown
|
...
|
»
C:\588bce7c90097ed212\header.bmp | Modified File | Image |
Unknown
|
...
|
»
C:\588bce7c90097ed212\SplashScreen.bmp | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101866.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101867.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0144773.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145168.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145212.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145272.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145361.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145669.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145707.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145879.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0146142.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148309.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148757.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149018.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149118.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0164153.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0174952.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175361.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175428.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177257.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177806.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178459.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178460.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178523.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178632.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0179963.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216112.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216153.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287641.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287642.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287643.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287644.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0289430.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309480.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309585.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313970.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315580.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315612.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0321179.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0337280.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341328.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341344.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341439.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341447.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341448.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341475.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341534.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341551.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341554.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341557.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341634.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341645.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341653.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341654.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341742.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382836.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382925.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382926.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382927.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382930.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382931.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382942.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382944.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382948.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382950.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382952.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382955.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382958.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382959.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382960.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382965.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382966.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382967.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382969.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382970.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384862.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384885.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384888.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384895.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384900.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386120.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386267.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386270.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386485.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387337.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387578.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387591.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387604.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387882.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387895.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400001.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400003.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400004.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400005.PNG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00601G.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00780U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01046J.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01179J.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01213K.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01221K.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01236U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01247U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01255G.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01265U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01478U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01562U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01607U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01931J.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02028K.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02040U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02058U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02074U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02208U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02223U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02291U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02470U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02503U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02567J.JPG | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02736U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02738U.BMP | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02740G.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02742G.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02743G.GIF | Modified File | Image |
Unknown
|
...
|
»
C:\$GetCurrent\Logs\HOW-TO-DECRYPT-FILES.HTM | Dropped File | Text |
Unknown
|
...
|
»
C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd | Modified File | Unknown |
Not Queried
|
...
|
»
C:\$GetCurrent\SafeOS\SetupComplete.cmd | Modified File | Unknown |
Not Queried
|
...
|
»
C:\588bce7c90097ed212\watermark.bmp | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145373.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145810.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145895.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145904.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148798.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178348.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178639.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178932.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0182689.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227419.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227558.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287645.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309567.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309598.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309664.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309705.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313896.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313965.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313974.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0314068.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341455.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341499.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341559.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341561.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341636.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341738.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382938.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382939.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382947.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382954.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382957.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382961.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382962.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382963.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382968.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386764.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0390072.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400002.PNG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01035U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01235U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01239K.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01332U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02039U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02053J.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02062U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02069J.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02071U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02398U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02412K.JPG | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02417U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02466U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02736G.GIF | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02740U.BMP | Modified File | Image |
Not Queried
|
...
|
»
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02742U.BMP | Modified File | Image |
Not Queried
|
...
|
»