Multi-License Discount Quote

Change Region

English
Threat Database Trojans Trojan.Kryptik.YKAD

Trojan.Kryptik.YKAD

By CagedTech in Trojans

Threat Scorecard

Popularity Rank: 11,843
Threat Level: 80 % (High)
Infected Computers: 264
First Seen: August 29, 2023
Last Seen: December 14, 2025
OS(es) Affected: Windows

Analysis Report

General information

Family Name: Trojan.Kryptik.YKAD
Signature status: No Signature

Known Samples

MD5: b09921d0e936ea60a174e517d311c4fb
SHA1: 18c54e62bce2ecf0de354e5d65438130a420d868
SHA256: 07DF31F29FDBE221AE9B7447832089457DC0CA0735F1E408AC03EC036EFDE662
File Size: 7.26 MB, 7259401 bytes
MD5: a59d2b7396816a704e9b81c4ca5b6679
SHA1: bab586cbc375dadad449de9ca1f0aa825386d7c0
SHA256: 0B7F4C4A43D84FABF326A920197B2AFA7773A33F71989A62A57D8FF2D85F5A90
File Size: 6.67 MB, 6672896 bytes
MD5: f092dee6e61d605208b0581d1d1a1257
SHA1: b3deba9bf13b72c37473563db61c9f9ecf222507
SHA256: AC7C8D9C9412D4424F5BBBE9D78064428835C47CD3E69FC4C068359B6AA45EB9
File Size: 5.71 MB, 5713920 bytes
MD5: e3097deeea0542e22fd485f75f46cc5a
SHA1: 92b19d2044e7e975cd5936ec52c8224bf611efd9
SHA256: 83AA141A93FFC08CB7C7CF0CA5F2B4EE68A53231B3F1DD4D3F668BDAE8E5C7EC
File Size: 3.41 MB, 3414528 bytes
MD5: ead7320934a610dd7e3dab11993483d9
SHA1: 71263afa1763a48d05bcec87fd9ccaaed1a868ca
SHA256: B33A59B5991D8FE497716A977CEAAD5C80EB921E7F7B8003B34EFC8F894E0F6B
File Size: 6.49 MB, 6492160 bytes
Show More
MD5: 8b3d706fe64dc26ea159f46b0a0c7d0c
SHA1: 30483c172d889e1476e263b34ef842e9433da2fe
SHA256: 84DBD7A2ED462C6302967F5D02F1AE40E4B746699434F17B02DADD7C5FEAB3CD
File Size: 5.10 MB, 5100544 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has exports table
  • File has TLS information
  • File is 64-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Assembly Version 841.369.2574.183
Comments Elevate Insight Platform – Advanced Data Management and Real-time Analytical Intelligence
Company Name
  • Alayumoqiwosotufidupo
  • Ascension Data Labs
  • Obexoruwalajisa
  • Olabapelelonazub
File Description
  • Aqiboremitujijiyef Afanitebe Eyusotocikoqeri Atazeco Iyexuyuhegixiri Usuqacec Onebajatejasuge.
  • Ogujiyocoto Edajena Apajijunucodobezito Axaqukoqobofigo.
  • PeakCore
  • Utufake Ujegosabixasunavugaso Agubozana Asoqiyuhiniwe Ofigoxoyis.
File Version
  • 841.369.2574.0183
  • 9.11.601.88
  • 3.74.455.61
  • 1.40.251.16
Internal Name
  • Ejiyafiwinumuseb
  • Ijemokuteso
  • Iniferosusorovomo
  • PeakCore.dll
Legal Copyright
  • © 2025 Alayumoqiwosotufidupo
  • © 2025 Obexoruwalajisa
  • © 2025 Olabapelelonazub
Original Filename
  • Apimedunixetisa
  • Eqivuwi
  • PeakCore.dll
  • Ubexatuheqeve
Product Name
  • Adaqeyuxamazuzogopo
  • Elevate Insight Platform
  • Otofitizijixiniladol
  • Owamefavehutikomi
Product Version
  • 9.11.601.88
  • 3.74.455.61
  • 1.40.251.16
  • 1.0.0

File Traits

  • 2+ executable sections
  • dll
  • HighEntropy
  • No Version Info
  • VirtualAllocExNuma
  • x64

Block Information

Total Blocks: 15,684
Potentially Malicious Blocks: 10,167
Whitelisted Blocks: 3,234
Unknown Blocks: 2,283

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 2 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • Kryptik.YKAD

Files Modified

File Attributes
c:\users\user\appdata\local\temp\_mei13722\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\msvcm90.dll Generic Write,Read Attributes
Show More
c:\users\user\appdata\local\temp\_mei13722\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei13722\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei14002\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei15522\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei20922\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei21882\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei24962\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei27122\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei31642\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei35402\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei43042\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei45162\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei51762\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\mpc\concrt141.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\mpc\data Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\mpc\ign.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\mpc\sbiedll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\mpc\x.bat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\msvcm90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\msvcp90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\msvcr90.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\python27.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\select.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei52962\unicodedata.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei54482\_hashlib.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei54482\bz2.pyd Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei54482\data.exe.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei54482\microsoft.vc90.crt.manifest Generic Write,Read Attributes
c:\users\user\appdata\local\temp\_mei54482\mpc\concrt141.dll Generic Write,Read Attributes

145 additional files are not displayed above.

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtClose
  • ntdll.dll!NtConnectPort
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtDeviceIoControlFile
Show More
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDebugFilterState
  • ntdll.dll!NtQueryFullAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationJobObject
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRequestWaitReplyPort
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWriteFile
  • ntdll.dll!NtWriteVirtualMemory
  • UNKNOWN
  • win32u.dll!NtGdiBitBlt
  • win32u.dll!NtGdiCreateBitmap
  • win32u.dll!NtGdiCreateCompatibleDC
  • win32u.dll!NtGdiCreateDIBitmapInternal
  • win32u.dll!NtGdiCreateSolidBrush
  • win32u.dll!NtGdiDeleteObjectApp
  • win32u.dll!NtGdiExtGetObjectW
  • win32u.dll!NtGdiGetDCforBitmap
  • win32u.dll!NtGdiGetDCObject
  • win32u.dll!NtGdiGetDeviceCaps
  • win32u.dll!NtGdiRestoreDC
  • win32u.dll!NtGdiSaveDC
  • win32u.dll!NtGdiSelectBitmap
  • win32u.dll!NtGdiSetDIBitsToDeviceInternal
  • win32u.dll!NtUserBuildHwndList
  • win32u.dll!NtUserCallTwoParam
  • win32u.dll!NtUserCreateEmptyCursorObject
  • win32u.dll!NtUserCreateWindowEx
  • win32u.dll!NtUserDestroyWindow
  • win32u.dll!NtUserFindExistingCursorIcon
  • win32u.dll!NtUserGetAncestor
  • win32u.dll!NtUserGetClassInfoEx
  • win32u.dll!NtUserGetClassName
  • win32u.dll!NtUserGetDC
  • win32u.dll!NtUserGetGUIThreadInfo
  • win32u.dll!NtUserGetIconInfo
  • win32u.dll!NtUserGetIconSize
  • win32u.dll!NtUserGetImeInfoEx
  • win32u.dll!NtUserGetKeyboardLayout
  • win32u.dll!NtUserGetObjectInformation
  • win32u.dll!NtUserGetProcessWindowStation
  • win32u.dll!NtUserGetProp
  • win32u.dll!NtUserGetThreadDesktop
  • win32u.dll!NtUserGetThreadState
  • win32u.dll!NtUserGetWindowCompositionAttribute
  • win32u.dll!NtUserIsNonClientDpiScalingEnabled
  • win32u.dll!NtUserIsTopLevelWindow
  • win32u.dll!NtUserMessageCall

10 additional items are not displayed above.

Process Shell Execute
  • CreateProcess

Shell Command Execution

c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
Show More
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"
c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401 "c:\users\user\downloads\18c54e62bce2ecf0de354e5d65438130a420d868_0007259401"

Trending

Most Viewed

Loading...