Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
7ASw97uLwOWnId-4R23XxVbAzQ0mid1ESUy4KWXADfo.png
|
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
|
initial sample
|
||
|
C:\Windows\debug\WIA\wiatrace.log
|
ASCII text, with CRLF, LF line terminators
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\mspaint.exe
|
mspaint.exe "C:\Users\user\Desktop\7ASw97uLwOWnId-4R23XxVbAzQ0mid1ESUy4KWXADfo.png"
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
315D000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2930000
|
unclassified section
|
page readonly
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
48F0000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2E3B000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
315A000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
49A0000
|
heap
|
page read and write
|
||
|
4991000
|
heap
|
page read and write
|
||
|
2C94000
|
heap
|
page read and write
|
||
|
86F1000
|
heap
|
page read and write
|