Trojan.MulDrop28.38287

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\ED Video Splitter 11.5.46] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\ED Video Splitter 11.5.46] 'ImagePath' = '%ALLUSERSPROFILE%\ED Video Splitter 11.5.46\ED Video Splitter 11.5.46.exe'

Создает следующие сервисы

'ED Video Splitter 11.5.46' %ALLUSERSPROFILE%\ED Video Splitter 11.5.46\ED Video Splitter 11.5.46.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-ct9ff.tmp\<Имя файла>.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-7b4ag.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-l4jat.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-ou9f5.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-ncnfl.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-7e2ag.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-fio9s.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-t1d54.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-fpsls.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\cutmovie.exe
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-hd7hr.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-8hins.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-qrqp8.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-n0rgd.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\drivers\summa\is-jb1lg.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-mcl54.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\unins000.dat
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-57gps.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-1504h.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-332s6.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-bm5ne.tmp
%TEMP%\is-ci1ng.tmp\_isetup\_setup64.tmp
%TEMP%\is-ci1ng.tmp\_isetup\_shfoldr.dll
%TEMP%\is-ci1ng.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-jpp6e.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-ufktd.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-at7de.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-l7jft.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-f7m5b.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-t75m4.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-2qqk4.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-tlkca.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-lpecg.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-sgmhl.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-j660o.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-tksmg.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\is-714mc.tmp
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-dpfm3.tmp
%ALLUSERSPROFILE%\ed video splitter 11.5.46\ed video splitter 11.5.46.exe

Перемещает следующие файлы

%LOCALAPPDATA%\cut movie 2022.2.01\is-jpp6e.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\unins000.exe
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-n0rgd.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\winter.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-qrqp8.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\weather.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-8hins.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\usa.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-hd7hr.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\talk bubbles.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-fpsls.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\tags, signs & banners.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-1504h.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\symbols.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-t1d54.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\swirls.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-fio9s.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\summer.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-7e2ag.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\spring.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-ncnfl.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\newborn.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-ou9f5.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\music.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-l4jat.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\michellemybelle creations.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-7b4ag.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\game.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-57gps.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\fall.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-332s6.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\createinspain designs.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-dpfm3.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\basic shapes.scal
%LOCALAPPDATA%\cut movie 2022.2.01\library\is-t75m4.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\library\arrows.scal
%LOCALAPPDATA%\cut movie 2022.2.01\is-714mc.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\winsparkle.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-tksmg.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\ch375dll.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-j660o.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\cairogfx.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-sgmhl.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\msvcr71.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-lpecg.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\msvcp71.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-tlkca.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\easy cut studio help.pdf
%LOCALAPPDATA%\cut movie 2022.2.01\is-2qqk4.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\unicows.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-f7m5b.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\stlport_vc7146.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-bm5ne.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\installer.xml
%LOCALAPPDATA%\cut movie 2022.2.01\is-l7jft.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\doc.ico
%LOCALAPPDATA%\cut movie 2022.2.01\is-at7de.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\readme.txt
%LOCALAPPDATA%\cut movie 2022.2.01\is-ufktd.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\license.txt
%LOCALAPPDATA%\cut movie 2022.2.01\drivers\summa\is-jb1lg.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\drivers\summa\summausb.dll
%LOCALAPPDATA%\cut movie 2022.2.01\is-mcl54.tmp в %LOCALAPPDATA%\cut movie 2022.2.01\cutmovie.exe