Technical Information
Malicious functions
Terminates or attempts to terminate
the following user processes:
- iexplore.exe
Miscellaneous
Creates and executes the following
- '<SYSTEM32>\msiexec.exe' /I "install_flash_player_32_active_x.msi" REBOOT=0 /qn' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c SCHTASKS /Delete /TN "Adobe Flash Player Updater" /F' (with hidden window)
Executes the following
- '<SYSTEM32>\msiexec.exe' /x {55F6C148-A47A-4280-8CB0-EE2B3AE261D0} /qn
- '<SYSTEM32>\msiexec.exe' /I "install_flash_player_32_active_x.msi" REBOOT=0 /qn
- '<SYSTEM32>\msiexec.exe' /x {EE56217C-B3F9-402B-B4EC-63F090F51D3D} /qn
- '<SYSTEM32>\msiexec.exe' /x {B3DADA45-F0ED-48FD-946E-7E82C2229D59} /qn
- '<SYSTEM32>\msiexec.exe' /x {63CB452B-D374-47A7-99AD-D992CA46624F} /qn
- '<SYSTEM32>\msiexec.exe' /x {48C41A9D-0CEB-4C44-A473-F3A0A609DF0F} /qn
- '<SYSTEM32>\msiexec.exe' /x {4F07316C-9DE0-4735-ACD9-94DEAB4DDECB} /qn
- '<SYSTEM32>\msiexec.exe' /x {D4104A09-1DD8-4793-8201-C7EE73BE335F} /qn
- '<SYSTEM32>\msiexec.exe' /x {6CA6558D-E970-4F24-AC7B-A607A3EE072A} /qn
- '<SYSTEM32>\msiexec.exe' /x {D7563581-D08A-49CF-8E8C-14BFC53D015F} /qn
- '<SYSTEM32>\msiexec.exe' /x {95F1F3F1-0347-4452-97F0-4CFA9B74899D} /qn
- '<SYSTEM32>\msiexec.exe' /x {57B3953E-BB96-418D-9228-57B7082B921A} /qn
- '<SYSTEM32>\msiexec.exe' /x {8C901387-B304-404D-93C0-E2E0C2D53D90} /qn
- '<SYSTEM32>\cmd.exe' /c SCHTASKS /Delete /TN "Adobe Flash Player Updater" /F
- '<SYSTEM32>\msiexec.exe' /x {68BC8140-3FAA-4419-B6EE-CCF60BE6DAB2} /qn
- '<SYSTEM32>\msiexec.exe' /x {51BC62C1-8EAD-429A-A1BA-ADF48728AE1C} /qn
- '<SYSTEM32>\msiexec.exe' /x {6580FBC8-7AB9-459F-B4B5-FD903F894E8E} /qn
- '<SYSTEM32>\msiexec.exe' /x {C5C57947-A700-448D-AFFB-8F70482526C2} /qn
- '<SYSTEM32>\msiexec.exe' /x {5708517C-59A3-45C6-9727-6C06C8595AFD} /qn
- '<SYSTEM32>\msiexec.exe' /x {42E870AA-8C2E-4764-9340-31A693D2E033} /qn
- '<SYSTEM32>\msiexec.exe' /x {6E6D2BB7-B844-4842-B62D-0A7F0AA7884E} /qn
- '<SYSTEM32>\msiexec.exe' /x {58E533B1-9B29-432D-BB38-25B489C1D53B} /qn
- '<SYSTEM32>\msiexec.exe' /x {22AF9D99-A980-4071-A0BD-1D0BB956B9EA} /qn
- '<SYSTEM32>\msiexec.exe' /x {3D5E2F56-60D2-4B5F-802E-9EAF7DC2E8E1} /qn
- '<SYSTEM32>\msiexec.exe' /x {D7830E9A-5E0C-4BD5-8724-0F89757EBF07} /qn
- '<SYSTEM32>\msiexec.exe' /x {C4665839-5F86-4F82-90B1-FF35F0FA2DDE} /qn
- '<SYSTEM32>\msiexec.exe' /x {ECCB1019-16A6-49EF-A2F9-E85777C1C588} /qn
- '<SYSTEM32>\msiexec.exe' /x {465571A6-29A2-4D39-B77D-3A1F6C964B65} /qn
- '<SYSTEM32>\schtasks.exe' /Delete /TN "Adobe Flash Player Updater" /F
