Trojan.Siggen3.22251

Техническая информация

Вредоносные функции:

Запускает на исполнение:

<SYSTEM32>\xcopy.exe Models\DAUGHTER_OF_MORRIGU\MEDIUM Models\DAUGHTER_OF_MORRIGU\LOW /E /I
<SYSTEM32>\xcopy.exe Models\CUMBRIAN_ARCHERS\MEDIUM Models\CUMBRIAN_ARCHERS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\DAUGHTER_OF_MORRIGU\MEDIUM Models\DAUGHTER_OF_MORRIGU\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\DEFENDER\MEDIUM Models\DEFENDER\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\DEFENDER\MEDIUM Models\DEFENDER\LOW /E /I
<SYSTEM32>\xcopy.exe Models\CUMBRIAN_ARCHERS\MEDIUM Models\CUMBRIAN_ARCHERS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\CAVALRY_ELITE\MEDIUM Models\CAVALRY_ELITE\LOW /E /I
<SYSTEM32>\xcopy.exe Models\CAVALRY\MEDIUM Models\CAVALRY\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CAVALRY_ELITE\MEDIUM Models\CAVALRY_ELITE\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CHAMPIONS\MEDIUM Models\CHAMPIONS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CHAMPIONS\MEDIUM Models\CHAMPIONS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\FIRE_WYRM\MEDIUM Models\FIRE_WYRM\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\FIRE_WYRM\MEDIUM Models\FIRE_WYRM\LOW /E /I
<SYSTEM32>\xcopy.exe Models\FOMORIANS\MEDIUM Models\FOMORIANS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\FOOTMEN\MEDIUM Models\FOOTMEN\LOW /E /I
<SYSTEM32>\xcopy.exe Models\FOMORIANS\MEDIUM Models\FOMORIANS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\ENCHANTRESS\MEDIUM Models\ENCHANTRESS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\DEFENDER_HORSE\MEDIUM Models\DEFENDER_HORSE\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\DEFENDER_HORSE\MEDIUM Models\DEFENDER_HORSE\LOW /E /I
<SYSTEM32>\xcopy.exe Models\Drest_the_Chosen\MEDIUM Models\Drest_the_Chosen\LOW /E /I
<SYSTEM32>\xcopy.exe Models\ENCHANTRESS\MEDIUM Models\ENCHANTRESS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\Drest_the_Chosen\MEDIUM Models\Drest_the_Chosen\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CAVALRY\MEDIUM Models\CAVALRY\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BLACK_KNIGHT\MEDIUM Models\BLACK_KNIGHT\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BLACK_KNIGHT\MEDIUM Models\BLACK_KNIGHT\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BOWMEN\MEDIUM Models\BOWMEN\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BREAKSHIELDS\MEDIUM Models\BREAKSHIELDS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BOWMEN\MEDIUM Models\BOWMEN\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\AXEMEN\MEDIUM Models\AXEMEN\HIGH /E /I
<SYSTEM32>\xcopy.exe CommonTextures\MEDIUM CommonTextures\HIGH /E /I
<SYSTEM32>\xcopy.exe CommonTextures\MEDIUM CommonTextures\LOW /E /I
<SYSTEM32>\xcopy.exe Models\AUTUMNBREED\MEDIUM Models\AUTUMNBREED\LOW /E /I
<SYSTEM32>\xcopy.exe Models\AXEMEN\MEDIUM Models\AXEMEN\LOW /E /I
<SYSTEM32>\xcopy.exe Models\AUTUMNBREED\MEDIUM Models\AUTUMNBREED\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BRIGANDS\MEDIUM Models\BRIGANDS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BRETON_LORD_HORSE\MEDIUM Models\BRETON_LORD_HORSE\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BRIGANDS\MEDIUM Models\BRIGANDS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CAMELOT_KNIGHTS\MEDIUM Models\CAMELOT_KNIGHTS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\CAMELOT_KNIGHTS\MEDIUM Models\CAMELOT_KNIGHTS\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BRETON_LORD_HORSE\MEDIUM Models\BRETON_LORD_HORSE\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BREAKSHIELDS_ELITE\MEDIUM Models\BREAKSHIELDS_ELITE\LOW /E /I
<SYSTEM32>\xcopy.exe Models\BREAKSHIELDS\MEDIUM Models\BREAKSHIELDS\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BREAKSHIELDS_ELITE\MEDIUM Models\BREAKSHIELDS_ELITE\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BRETON_LORD\MEDIUM Models\BRETON_LORD\HIGH /E /I
<SYSTEM32>\xcopy.exe Models\BRETON_LORD\MEDIUM Models\BRETON_LORD\LOW /E /I