APACHE TOMCAT 7.0 52 ARCHIVE
APACHE TOMCAT 7.0 52 WINDOWS

'iexplore.exe' wrote bytes '30306d6e' to virtual address '0ењ†D0DFE90' (part of module 'IEFRAME.DLL') 'iexplore.exe' wrote bytes 'a0356d6e' to virtual address '0x75B1202C' (part of module 'SHELе…ѓ2.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x00DC70C0' 'iexplore.exe' wrote bytes 'a0356d6e' to virtual address '0x73C6139C' (part of module 'UXTHEME.DLL') 'iexplore.exe' wrote bytes 'c0bf6e6e' to virtual address '0x75B11F68' (part of module 'SHELе…ѓ2.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x73C61250' (part of module 'UXTHEME.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x76C51210' (part of module 'IMM32.DLL') 'iexplore.exe' wrote bytes 'a0356d6e' to virtual address '0x7699B0CC' (part of module 'IERTUTIL.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x76DF17CC' (part of module 'ADVAPI32.DLL') 'iexplore.exe' wrote bytes '60cd706e' to virtual address '0ењ†D0DFEC0' (part of module 'IEFRAME.DLL') 'iexplore.exe' wrote bytes 'c03a6d6e' to virtual address '0ењ†D0DFE80' (part of module 'IEFRAME.DLL')

'iexplore.exe' wrote bytes '60d2706e' to virtual address '0x75B11D7C' (part of module 'SHELе…ѓ2.DLL') 'iexplore.exe' wrote bytes '60d2706e' to virtual address '0x76F513B8' (part of module 'SHLWAPI.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x76F511B8' (part of module 'SHLWAPI.DLL') 'iexplore.exe' wrote bytes '60d2706e' to virtual address '0ењ†D0DFEC4' (part of module 'IEFRAME.DLL') 'iexplore.exe' wrote bytes 'b0336d6e' to virtual address '0x75A71164' (part of module 'USP10.DLL') 'iexplore.exe' wrote bytes 'c03a6d6e' to virtual address '0x75B11FB0' (part of module 'SHELе…ѓ2.DLL') '_A0135ACF-4216-11E9-ACE6-0A002728BED8_.dat' has type 'Composite Document File V2 Document Cannot read section info' 'search_1_.json' has type 'ASCII text with no line terminators' 'RecoveryStore._A0135ACD-4216-11E9-ACE6-0A002728BED8_.dat' has type 'Composite Document File V2 Document Cannot read section info' 'favicon_3_.ico' has type 'PNG image data 16 x 16 4-bit colormap non-interlaced'

APACHE TOMCAT 7.0 52 ARCHIVE

'57C8EDB95DF3F0AD4EE2DC2B8CFD4157' has type 'Microsoft Cabinet archive data 6559 bytes 1 file' '~DFBBD0A8BC765BEB3E.TMP' has type 'data' 'favicon_2_.ico' has type 'PNG image data 16 x 16 4-bit colormap non-interlaced' Installs hooks/patches the running processДЇound malicious artifacts related to '120.52.51.17'.

APACHE TOMCAT 7.0 52 WINDOWS

Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager.

Apache tomcat 7.0 52