Gauss: Abnormal Distribution
Common Information
Type Value
UUID b540a7f0-24e9-4bb2-875f-2eb4bd313ddb
Fingerprint b635da53ed962199
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 9, 2012, 5:01 p.m.
Added to db Jan. 18, 2023, 9:39 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline Gauss: Abnormal Distribution
Title Gauss: Abnormal Distribution
Detected Hints/Tags/Attributes 126/3/332
Attributes
Details Type #Events CTI Value
Details CVE 48
cve-2010-2568
Details Domain 454
www.google.com
Details Domain 2
www.update.windows.com
Details Domain 3
gowin7.com
Details Domain 3
secuurity.net
Details Domain 3
datajunction.org
Details Domain 3
bestcomputeradvisor.com
Details Domain 3
dotnetadvisor.info
Details Domain 3
guest-access.net
Details Domain 2
bestcomputeradvisor.info
Details Domain 1
bestcomputeradvisro.info
Details Domain 2
dataspotlight.net
Details File 2
wmiqry32.dll
Details File 2
wmihlp32.dll
Details File 3
hub001.dat
Details File 143
thumbs.db
Details File 1
%system32%wbemwmiqry32.dll
Details File 1
%system32%wbemwmihlp32.dll
Details File 2
shw.tmp
Details File 2
stm.tmp
Details File 478
lsass.exe
Details File 1
%system32%wbemwbemsvc.dll
Details File 3
wbemsvc.dll
Details File 1122
svchost.exe
Details File 4
lmon.exe
Details File 4
sagui.exe
Details File 4
rdtask.exe
Details File 7
kpf4gui.exe
Details File 12
alsvc.exe
Details File 5
pxagent.exe
Details File 7
fsma32.exe
Details File 3
licwiz.exe
Details File 25
savservice.exe
Details File 4
prevxcsi.exe
Details File 4
alertwall.exe
Details File 3
livehelp.exe
Details File 19
savadminservice.exe
Details File 2
csi-eui.exe
Details File 5
mpf.exe
Details File 3
lookout.exe
Details File 4
savprogress.exe
Details File 4
lpfw.exe
Details File 4
mpfcm.exe
Details File 4
emlproui.exe
Details File 4
savmain.exe
Details File 11
outpost.exe
Details File 6
fameh32.exe
Details File 6
emlproxy.exe
Details File 3
savcleanup.exe
Details File 29
filemon.exe
Details File 4
antihook.exe
Details File 3
endtaskpro.exe
Details File 3
savcli.exe
Details File 74
procmon.exe
Details File 3
xfilter.exe
Details File 3
netguardlite.exe
Details File 3
backgroundscanclient.exe
Details File 6
sniffer.exe
Details File 6
scfservice.exe
Details File 4
oasclnt.exe
Details File 4
sdcservice.exe
Details File 11
acs.exe
Details File 4
scfmanager.exe
Details File 3
omnitray.exe
Details File 3
sdcdevconx.exe
Details File 5
aupdrun.exe
Details File 1
atorshield.exe
Details File 9
onlinent.exe
Details File 3
sdcdevconia.exe
Details File 4
sppfw.exe
Details File 156
1.exe
Details File 3
opf.exe
Details File 3
sdcdevcon.exe
Details File 4
spfirewallsvc.exe
Details File 3
ssupdate.exe
Details File 3
pctavsvc.exe
Details File 3
configuresav.exe
Details File 4
fwsrv.exe
Details File 3
terminet.exe
Details File 4
pctav.exe
Details File 7
alupdate.exe
Details File 4
opfsvc.exe
Details File 3
tscutynt.exe
Details File 3
pcviper.exe
Details File 3
instlsp.exe
Details File 3
uwcdsvr.exe
Details File 3
umxtray.exe
Details File 9
persfw.exe
Details File 3
cmain.exe
Details File 5
dfw.exe
Details File 3
updclient.exe
Details File 3
pgaccount.exe
Details File 3
cavaud.exe
Details File 4
ipatrol.exe
Details File 3
webwall.exe
Details File 4
privatefirewall3.exe
Details File 3
cavemsrv.exe
Details File 4
pcipprev.exe
Details File 4
winroute.exe
Details File 8
protect.exe
Details File 3
cavmr.exe
Details File 4
prifw.exe
Details File 8
apvxdwin.exe
Details File 4
rtt_crc_service.exe
Details File 3
cavvl.exe
Details File 4
tzpfw.exe
Details File 3
as3pf.exe
Details File 4
schedulerdaemon.exe
Details File 3
cavapp.exe
Details File 4
avas.exe
Details File 4
sdtrayapp.exe
Details File 3
cavcons.exe
Details File 4
pfft.exe
Details File 3
avcom.exe
Details File 8
siteadv.exe
Details File 3
cavmud.exe
Details File 4
armorwall.exe
Details File 6
avkproxy.exe
Details File 5
sndsrvc.exe
Details File 3
cavumas.exe
Details File 4
app_firewall.exe
Details File 7
avkservice.exe
Details File 3
snsmcon.exe
Details File 3
uupd.exe
Details File 9
blackd.exe
Details File 8
avktray.exe
Details File 3
snsupd.exe
Details File 3
cavasm.exe
Details File 7
blackice.exe
Details File 3
avkwctrl.exe
Details File 4
procguard.exe
Details File 3
cavsub.exe
Details File 4
umxagent.exe
Details File 3
avmgma.exe
Details File 4
dcsuserprot.exe
Details File 3
cavuserupd.exe
Details File 6
kpf4ss.exe
Details File 6
avtask.exe
Details File 8
avkwctl.exe
Details File 3
cavq.exe
Details File 4
tppfdmn.exe
Details File 4
aws.exe
Details File 9
firewall.exe
Details File 3
cavoar.exe
Details File 4
blinksvc.exe
Details File 3
bgctl.exe
Details File 4
thguard.exe
Details File 3
cemrep.exe
Details File 3
sp_rsser.exe
Details File 3
bgnt.exe
Details File 6
spybotsd.exe
Details File 3
onaccessinstaller.exe
Details File 6
op_mon.exe
Details File 3
bootsafe.exe
Details File 3
xauth_service.exe
Details File 3
softact.exe
Details File 23
cmdagent.exe
Details File 10
bullguard.exe
Details File 3
cavsn.exe
Details File 3
vcatch.exe
Details File 3
cdas2.exe
Details File 6
zlh.exe
Details File 4
packetizer.exe
Details File 4
spyhunter3.exe
Details File 6
cmgrdian.exe
Details File 4
adoronsfirewall.exe
Details File 4
packetyzer.exe
Details File 4
wwasher.exe
Details File 3
configmgr.exe
Details File 6
zanda.exe
Details File 4
authfw.exe
Details File 6
cpd.exe
Details File 3
zerospywarele.exe
Details File 3
dvpapi.exe
Details File 3
espwatch.exe
Details File 5
dltray.exe
Details File 4
zerospywarelite_installer.exe
Details File 5
clamd.exe
Details File 3
fgui.exe
Details File 5
dlservice.exe
Details File 71
wireshark.exe
Details File 4
sab_wab.exe
Details File 3
filedeleter.exe
Details File 3
ashwebsv.exe
Details File 9
tshark.exe
Details File 9
superantispyware.exe
Details File 13
ashdisp.exe
Details File 6
rawshark.exe
Details File 4
vdtask.exe
Details File 3
firewall2004.exe
Details File 3
ashmaisv.exe
Details File 17
ethereal.exe
Details File 4
asr.exe
Details File 5
firewallgui.exe
Details File 8
ashserv.exe
Details File 4
tethereal.exe
Details File 3
gateway.exe
Details File 4
aswupdsv.exe
Details File 22
windump.exe
Details File 4
nstzerospywarelite.exe
Details File 3
hpf_.exe
Details File 41
avastui.exe
Details File 22
tcpdump.exe
Details File 4
cdinstx.exe
Details File 4
iface.exe
Details File 41
avastsvc.exe
Details File 4
netcap.exe
Details File 4
cdas17.exe
Details File 3
invent.exe
Details File 19
netmon.exe
Details File 4
fsrt.exe
Details File 3
ipcserver.exe
Details File 6
cv.exe
Details File 4
vsdesktop.exe
Details File 3
ipctray.exe
Details File 1260
explorer.exe
Details File 32
prefs.js
Details File 4
userhome.php
Details File 2
gdl.tmp
Details File 2
wabdat.dat
Details File 196
desktop.ini
Details File 2
system32.dat
Details File 2
system32.bin
Details File 2
catroot.tmp
Details File 4
gdfirewalltray.exe
Details File 4
gdfwsvc.exe
Details File 18
gdscan.exe
Details File 2
abcd.exe
Details File 119
avp.exe
Details File 4
fch32.exe
Details File 2
fsar32.exe
Details File 7
fsav32.exe
Details File 14
fsdfwd.exe
Details File 6
fsgk32.exe
Details File 4
fsgk32st.exe
Details File 5
fsguidll.exe
Details File 3
fshdll32.exe
Details File 8
fsm32.exe
Details File 4
fsmb32.exe
Details File 6
fsorsp.exe
Details File 3
fspc.exe
Details File 3
fsqh.exe
Details File 7
fssm32.exe
Details File 2
fsus.exe
Details File 2
gsava.exe
Details File 2
gssm32.exe
Details File 8
vsmon.exe
Details File 2
zapro.exe
Details File 10
zlclient.exe
Details File 1
%commonprogramfiles%systemwabdat.dat
Details File 533
ntdll.dll
Details File 2
mdk.tmp
Details File 1
%temp%md.bak
Details File 1
%systemroot%temps61cs3.dat
Details File 2
savedwnetworkconnectionswin5.cpp
Details File 1
utilsmywlanapi.cpp
Details File 2
savedwnetworkconnectionswin6.cpp
Details File 2
visiblenetworks.cpp
Details File 12
wlanapi.dll
Details File 2
zm6ad3.tmp
Details File 1
%temp%ws1bin.dat
Details File 3
browser.js
Details File 2
fileio.js
Details File 2
lppd.dat
Details File 2
rssf.dat
Details File 2
lfm.dat
Details File 2
mppd.dat
Details File 2
pddp.dat
Details File 2
history.cpp
Details File 2
firefoxplugininstaller.cpp
Details File 3
telemetry.cpp
Details File 2
storage.cpp
Details File 2
osutils.cpp
Details File 2
processsnapshot.cpp
Details File 2
event.cpp
Details File 2
gaussthread.cpp
Details File 2
buffer.cpp
Details File 2
remotememorybuffer.cpp
Details File 2
file.cpp
Details File 2
mutex.cpp
Details File 2
waiter.cpp
Details File 2
everyonesecurityattributes.cpp
Details File 2
catcher.cpp
Details File 2
browserconnector.cpp
Details File 2
assigner.cpp
Details File 2
ieabstractelements.cpp
Details File 2
formextractor.cpp
Details File 2
comabstractdatatypes.cpp
Details File 1
%systemroot%tempws1bin.dat
Details File 2
ws1bin.dat
Details File 24
evil.exe
Details File 1
%systemroot%explorer.exe
Details File 2
lddp.dat
Details File 3
dotnetadvisor.inf
Details File 2
bestcomputeradvisor.inf
Details File 1
bestcomputeradvisro.inf
Details File 2
c.dot
Details File 2
netadvisor.inf
Details File 4
c.dat
Details File 14
d.dat
Details File 1206
index.php
Details File 9
md.bak
Details File 2
s61cs3.dat
Details md5 2
C3B8AD4ECA93114947C777B19D3C6059
Details md5 2
08D7DDB11E16B86544E0C3E677A60E10
Details md5 2
055AE6B8070DF0B3521D78E1B8D2FCE4
Details md5 2
FA54A8D31E1434539FBB9A412F4D32FF
Details md5 2
01567CA73862056304BB87CBF797B899
Details md5 2
23D956C297C67D94F591FCB574D9325F
Details md5 2
ED5559B0C554055380D75C1D7F9C4424
Details md5 2
E379270F53BA148D333134011AA3600C
Details md5 2
EF83394D9600F6D2808E0E99B5F932CA
Details md5 3
9CA4A49135BCCDB09931CF0DBE25B5A9
Details md5 2
ED2B439708F204666370337AF2A9E18F
Details md5 2
CBB982032AED60B133225A2715D94458
Details md5 2
4FB4D2EB303160C5F419CEC2E9F57850
Details md5 2
DE2D0D6C340C75EB415F726338835125
Details sha256 1
5604a86ce596a239dd5b232ae32e02c690f5c45420c295c73067af44028ce0dd
Details sha256 1
ef6451fde3751f698b49c8d4975a58b57ac2799b5337b4be54e5d5b03b214572
Details IPv4 2
109.71.45.115
Details IPv4 2
182.18.166.116
Details IPv4 2
173.204.235.204
Details IPv4 2
173.204.235.196
Details IPv4 2
173.204.235.201
Details Windows Registry Key 3
HKCRCLSID
Details Windows Registry Key 1
HKLMSOFTWAREMicrosoftWindowsCurrentVersionReliability
Details Windows Registry Key 1
HKLMSYSTEMCurrentControlSetServicesDiskEnum
Details Windows Registry Key 1
HKLMSOFTWAREMicrosoftWZCSVCParametersInterfaces
Details Windows Registry Key 1
HKLMHARDWAREDESCRIPTIONSystem
Details Windows Registry Key 1
HKLMSOFTWAREKasperskyLabAVP6
Details Windows Registry Key 1
HKLMSOFTWAREKasperskyLabprotectedAVP7
Details Windows Registry Key 7
HKLMSOFTWAREMicrosoftWindows