checks if a sample drops anything to system32