Техническая информация
Вредоносные функции
Внедряет код в
следующие системные процессы:
- <SYSTEM32>\notepad.exe
Изменения в файловой системе
Создает следующие файлы
- C:\users\public\public favorites\usb_f_2026-06-11\split.avi
- C:\users\public\public favorites\copy_index.txt
- C:\users\public\public favorites\usb_f_2026-06-11\archer.avi
- C:\users\public\public favorites\usb_f_2026-06-11\dashborder_144.bmp
- C:\users\public\public favorites\usb_f_2026-06-11\dashborder_96.bmp
- C:\users\public\public favorites\usb_f_2026-06-11\toolbar.bmp
- C:\users\public\public favorites\usb_f_2026-06-11\default.bmp
- C:\users\public\public favorites\usb_f_2026-06-11\contosoroot_1.cer
- C:\users\public\public favorites\usb_f_2026-06-11\testcertificate.cer
- C:\users\public\public favorites\usb_f_2026-06-11\contosoroot.cer
- C:\users\public\public favorites\usb_f_2026-06-11\contoso_1.cer
- C:\users\public\public favorites\usb_f_2026-06-11\contoso.cer
- C:\users\public\public favorites\usb_f_2026-06-11\sdkfailsafeemulator.cer
- C:\users\public\public favorites\usb_f_2026-06-11\sdksampleunprivdeveloper.cer
- C:\users\public\public favorites\usb_f_2026-06-11\sdksampleprivdeveloper.cer
- C:\users\public\public favorites\usb_f_2026-06-11\lisp_success.doc
- C:\users\public\public favorites\usb_f_2026-06-11\508softwareandos.doc
- C:\users\public\public favorites\usb_f_2026-06-11\uep_form_786_bulletin_1726i602.doc
- C:\users\public\public favorites\usb_f_2026-06-11\applicantform_en.doc
- C:\users\public\public favorites\usb_f_2026-06-11\february_catalogue__2015.doc
- C:\users\public\public favorites\usb_f_2026-06-11\hanni_umami_chapter.doc
- C:\users\public\public favorites\usb_f_2026-06-11\hadac_newsletter_july_2010_final.docx
- C:\users\public\public favorites\usb_f_2026-06-11\sdszfo.docx
- C:\users\public\public favorites\usb_f_2026-06-11\issi2013_template_for_posters.docx
- C:\users\public\public favorites\usb_f_2026-06-11\adhd_and_obesity.docx
- C:\users\public\public favorites\usb_f_2026-06-11\jre-7u75-windows-i586-iftw.exe
- C:\users\public\public favorites\usb_f_2026-06-11\dotnetfx45_full_setup.exe
- C:\users\public\public favorites\usb_f_2026-06-11\tcm851ax32.exe
- C:\users\public\public favorites\usb_f_2026-06-11\trivial-merge.htm
- C:\users\public\public favorites\usb_f_2026-06-11\64bit_notes.htm
- C:\users\public\public favorites\usb_f_2026-06-11\iisstart.htm
- C:\users\public\public favorites\usb_f_2026-06-11\about.htm
- C:\users\public\public favorites\usb_f_2026-06-11\garden.htm
- C:\users\public\public favorites\usb_f_2026-06-11\howto-index.html
- C:\users\public\public favorites\usb_f_2026-06-11\about.html
- C:\users\public\public favorites\usb_f_2026-06-11\api-hashmap.html
- C:\users\public\public favorites\usb_f_2026-06-11\alert.html
- C:\users\public\public favorites\usb_f_2026-06-11\trivial-merge.html
- C:\users\public\public favorites\usb_f_2026-06-11\4f0bf7ff71f28.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\168.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\region-north-karelia.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\210252809.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\1189.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\13.jpeg
- C:\users\public\public favorites\usb_f_2026-06-11\parnas_01.jpg
- C:\users\public\public favorites\usb_f_2026-06-11\pushkin.jpg
- C:\users\public\public favorites\usb_f_2026-06-11\3.jpg
- C:\users\public\public favorites\usb_f_2026-06-11\4f0bf7ff71f28.jpg
- C:\users\public\public favorites\usb_f_2026-06-11\firefly1.mov
- C:\users\public\public favorites\usb_f_2026-06-11\video.mp4
- C:\users\public\public favorites\usb_f_2026-06-11\51.mp4
- C:\users\public\public favorites\usb_f_2026-06-11\clip_480_5sec_6mbps_h264.mp4
- C:\users\public\public favorites\usb_f_2026-06-11\bc01.pdf
- C:\users\public\public favorites\usb_f_2026-06-11\ff_ot_user_guide.pdf
- C:\users\public\public favorites\usb_f_2026-06-11\dualectls.pdf
- C:\users\public\public favorites\usb_f_2026-06-11\lom602.pdf
- C:\users\public\public favorites\usb_f_2026-06-11\delongcacert.pem
- C:\users\public\public favorites\usb_f_2026-06-11\systisoft.pem
- C:\users\public\public favorites\usb_f_2026-06-11\cert.pem
- C:\users\public\public favorites\usb_f_2026-06-11\background.png
- C:\users\public\public favorites\usb_f_2026-06-11\arrow-down.png
- C:\users\public\public favorites\usb_f_2026-06-11\breakpoint.png
- C:\users\public\public favorites\usb_f_2026-06-11\ppswamp.ppt
- C:\users\public\public favorites\usb_f_2026-06-11\sacs_presentation_sacs_qep_improving_rt_education_final.ppt
- C:\users\public\public favorites\usb_f_2026-06-11\mappingconcepthubberlin.ppt
- C:\users\public\public favorites\usb_f_2026-06-11\ksearch_esa_talk.ppt
- C:\users\public\public favorites\usb_f_2026-06-11\proposaltemplates.ppt
- C:\users\public\public favorites\usb_f_2026-06-11\roozenedowebinar.pptx
- C:\users\public\public favorites\usb_f_2026-06-11\hypothyroidism_slides.pptx
- C:\users\public\public favorites\usb_f_2026-06-11\stoc13_ml_quoc_le.pptx
- C:\users\public\public favorites\usb_f_2026-06-11\waterresourcesag.pptx
- C:\users\public\public favorites\usb_f_2026-06-11\contenttypes.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\20140114.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\elvisimp.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\digest.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\schema.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\foaf.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\skos.rdf
- C:\users\public\public favorites\usb_f_2026-06-11\pandp.rtf
- C:\users\public\public favorites\usb_f_2026-06-11\pubnet_855.rtf
- C:\users\public\public favorites\usb_f_2026-06-11\phytoremediation.rtf
- C:\users\public\public favorites\usb_f_2026-06-11\static_electricity_easy_and_quick_activities.rtf
- C:\users\public\public favorites\usb_f_2026-06-11\router_manual.rtf
- C:\users\public\public favorites\usb_f_2026-06-11\babyboymaintonotesbackground_pal.wmv
- C:\users\public\public favorites\usb_f_2026-06-11\flower_trans_matte.wmv
- C:\users\public\public favorites\usb_f_2026-06-11\testwmv.wmv
- C:\users\public\public favorites\usb_f_2026-06-11\passport_pal.wmv
- C:\users\public\public favorites\usb_f_2026-06-11\calculatorworksheet.xls
- C:\users\public\public favorites\usb_f_2026-06-11\1sm_price.xls
- C:\users\public\public favorites\usb_f_2026-06-11\contractualdeadlines.xls
- C:\users\public\public favorites\usb_f_2026-06-11\removedtitles_records.xls
- C:\users\public\public favorites\usb_f_2026-06-11\productos.xls
- C:\users\public\public favorites\usb_f_2026-06-11\guide_reorganization_mapping.xls
- C:\users\public\public favorites\usb_f_2026-06-11\highly_cited_2001.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\national_autism_preparation_programs.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\suspendedcompanies.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\cee_mmsprogram_summary_public.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\trtf_matrix2012_oct.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\al.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\disclosuredetails.xlsx
- C:\users\public\public favorites\usb_f_2026-06-11\productos.zip
- C:\users\public\public favorites\usb_f_2026-06-11\price.zip
- C:\users\public\public favorites\usb_f_2026-06-11\fiche_inscription_2015.zip
- C:\users\public\public favorites\usb_f_2026-06-11\system volume information\wpsettings.dat
Другое
Запускает на исполнение
- '<SYSTEM32>\notepad.exe'
