Trojan.DownLoader33.56566

Technical Information

Modifies file system

Creates the following files

%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Network activity

Connects to

'da##.71xe.com':445

TCP

HTTP GET requests

http://www.uc##g.com/statics/2018pc/css/style.css
http://www.uc##g.com/uploads/icon/2345ktw.png
http://www.uc##g.com/uploads/icon/guangyingkantu.jpg
http://www.uc##g.com/uploads/icon/qudongjingling.jpg
http://www.uc##g.com/uploads/icon/qudongrs.png
http://www.uc##g.com/uploads/icon/DriverReviver.png
http://www.uc##g.com/uploads/icon/360sjzs.png
http://www.uc##g.com/uploads/icon/huaweisjzs.png
http://www.uc##g.com/uploads/icon/i4tools.jpg
http://www.uc##g.com/uploads/icon/zhifubao.png
http://www.uc##g.com/uploads/icon/baiduqianbao.png
http://www.uc##g.com/uploads/icon/jingdongjinrong.jpg
http://www.uc##g.com/uploads/icon/DiskGenius.png
http://www.uc##g.com/uploads/icon/meituxx.png
http://www.uc##g.com/uploads/icon/yizhifuapp.png
http://www.uc##g.com/uploads/2019/0308/20190308112122718.png
http://www.uc##g.com/uploads/2019/0410/1904105cae0e60f3417.png
http://www.uc##g.com/uploads/2019/1220/1912205dfc4bf522af8.png
http://www.uc##g.com/uploads/2020/0329/2003295e80c101160ad.png
http://www.uc##g.com/uploads/2019/0307/20190307015638906.png
http://www.uc##g.com/uploads/2019/0717/1907175d2e8068e7a81.jpg
http://www.uc##g.com/uploads/2019/0715/1907155d2c216bc1ee3.png
http://www.uc##g.com/uploads/icon/ARESVIRUS.png
http://www.uc##g.com/uploads/2019/0507/1905075cd19700f16a8.jpg
http://www.uc##g.com/uploads/2019/0112/20190112073218300.jpg
http://www.uc##g.com/uploads/2019/0301/20190301011945857.jpg
http://www.uc##g.com/uploads/2019/0104/20190104124246224.png
http://www.uc##g.com/uploads/2020/0209/2002095e40068c5e83b.png
http://www.uc##g.com/uploads/icon/PartitionMagic.png
http://www.uc##g.com/uploads/icon/GlaryUtilities.png
http://www.uc##g.com/uploads/icon/letv.png
http://www.uc##g.com/uploads/icon/qq.png
http://www.uc##g.com/uploads/2018/1018/20181018050057486.jpg
http://www.uc##g.com/uploads/icon/baidusrf.jpg
http://www.uc##g.com/uploads/icon/qqsrf.jpg
http://www.uc##g.com/uploads/icon/iflysrf.jpg
http://www.uc##g.com/uploads/icon/qqwubi.png
http://www.uc##g.com/uploads/icon/sogouwubi.png
http://www.uc##g.com/uploads/icon/wnwubisrf.png
http://www.uc##g.com/uploads/icon/jpwb.png
http://www.uc##g.com/uploads/icon/360aqllq.png
http://www.uc##g.com/uploads/icon/GoogleChrome.png
http://www.uc##g.com/uploads/icon/sogougsllq.png
http://www.uc##g.com/uploads/2019/0202/20190202114504136.png
http://www.uc##g.com/uploads/icon/Firefox.png
http://www.uc##g.com/uploads/icon/360sd.jpg
http://www.uc##g.com/uploads/icon/jsduba.png
http://www.uc##g.com/uploads/icon/HaoZip.png
http://www.uc##g.com/uploads/icon/kuaizip.png
http://www.uc##g.com/uploads/icon/7-zip.png
http://www.uc##g.com/uploads/2019/0119/20190119094744233.png
http://www.uc##g.com/uploads/icon/bdplayer.png
http://www.uc##g.com/uploads/icon/qqmusic.png
http://www.uc##g.com/uploads/icon/kugou.png
http://www.uc##g.com/uploads/icon/kuwo.png
http://www.uc##g.com/uploads/icon/QQLive.png
http://www.uc##g.com/uploads/icon/iqyi.png
http://www.uc##g.com/uploads/icon/360.png
http://www.uc##g.com/uploads/2019/0516/1905165cdd110d42491.jpg
http://www.uc##g.com/uploads/2019/0801/1908015d4304089c3fd.jpg
http://www.uc##g.com/statics/2018pc/images/litterStar.png
http://www.uc##g.com/uploads/2019/1122/1911225dd77517cde75.jpg
http://www.uc##g.com/uploads/2020/0615/2006155ee6eb5126ea1.png
http://www.uc##g.com/uploads/2020/0608/2006085ede1a184590b.png
http://www.uc##g.com/uploads/2019/0720/1907205d3337d671b6d.png
http://www.uc##g.com/uploads/icon/wzry.png
http://www.uc##g.com/uploads/2019/0814/1908145d541b67bd57f.jpg
http://www.uc##g.com/uploads/2019/0127/20190127073013901.png
http://www.uc##g.com/uploads/2019/1209/1912095dede19d3d6b3.jpg
http://www.uc##g.com/uploads/icon/idm.png
http://www.uc##g.com/uploads/icon/sogousrf.jpg
http://www.uc##g.com/uploads/icon/yingyinxianfeng.png
http://www.uc##g.com/uploads/icon/youku.png
http://www.uc##g.com/uploads/2020/0617/2006175ee9ef9a0f644.jpg
http://www.uc##g.com/uploads/2019/0127/20190127080239905.png
http://www.uc##g.com/uploads/icon/ludashi.png
http://www.uc##g.com/uploads/2019/0602/1906025cf3479da255e.png
http://www.uc##g.com/uploads/2019/0511/1905115cd68762b594d.png
http://www.uc##g.com/uploads/2019/0304/20190304061338890.jpg
http://www.uc##g.com/uploads/2019/1112/1911125dca62a6451cd.jpg
http://www.uc##g.com/uploads/2020/0525/2005255ecb8761058fe.jpg
http://www.uc##g.com/uploads/icon/lkwgwukongfz.png
http://www.uc##g.com/uploads/icon/tim.png
http://www.uc##g.com/uploads/icon/wangyiyunyinyue.png
http://www.uc##g.com/uploads/icon/photoshop.png
http://www.uc##g.com/uploads/2020/0609/2006095edef121830fc.jpg
http://www.uc##g.com/uploads/2019/1104/1911045dbf75f279937.jpg
http://www.uc##g.com/uploads/icon/360qdds.png
http://www.uc##g.com/uploads/icon/yingyongbao.png
http://www.uc##g.com/uploads/2020/0103/2001035e0f0f7ab5869.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eeab34c6873d.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eead6c97c5d2.png
http://www.uc##g.com/uploads/icon/lkwgdgfz.png
http://www.uc##g.com/uploads/icon/lkwg.png
http://www.uc##g.com/uploads/icon/ucbugzmxy3.png
http://www.uc##g.com/uploads/icon/xiaoyaofz.png
http://www.uc##g.com/uploads/icon/jipinfz.png
http://www.uc##g.com/uploads/icon/wushenfz.png
http://www.uc##g.com/uploads/icon/weizhi.png
http://www.uc##g.com/uploads/icon/fuzhu.png
http://www.uc##g.com/uploads/icon/ucbugzmxy4.png
http://www.uc##g.com/uploads/icon/zmxy4cxfz.png
http://www.uc##g.com/uploads/icon/xiaowangxgq.png
http://www.uc##g.com/uploads/icon/ssjjwdfz.png
http://www.uc##g.com/uploads/2020/0102/2001025e0d9d359beb1.jpg
http://www.uc##g.com/uploads/icon/ssjjaishangfz.png
http://www.uc##g.com/uploads/icon/canxiayxzs.png
http://www.uc##g.com/uploads/2019/0316/20190316023010422.png
http://www.uc##g.com/uploads/2019/0125/20190125102958869.png
http://www.uc##g.com/uploads/icon/yeshenmnq.png
http://www.uc##g.com/uploads/2018/1230/20181230054506220.jpg
http://www.uc##g.com/uploads/icon/mumumnq.png
http://www.uc##g.com/uploads/icon/xingxingmnq.png
http://www.uc##g.com/uploads/2019/0201/20190201120327391.png
http://www.uc##g.com/uploads/icon/dashengfz.png
http://www.uc##g.com/uploads/icon/trainer.png
http://www.uc##g.com/img/beianicon.png
http://www.uc##g.com/caches/poster_js/17.js
http://www.uc##g.com/uploads/icon/cangyxzs.png
http://www.uc##g.com/uploads/icon/uTorrent.png
http://www.uc##g.com/uploads/2019/0619/1906195d0a553514a27.jpg
http://www.uc##g.com/uploads/icon/xunlei9.png
http://www.uc##g.com/uploads/2020/0617/2006175ee9df5a1f619.jpg
http://www.uc##g.com/uploads/2019/0804/1908045d46662579bcd.png
http://www.uc##g.com/uploads/2018/1214/20181214092739820.png
http://www.uc##g.com/uploads/icon/WondersharePDFelement.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eeae11437f65.png
http://www.uc##g.com/uploads/icon/weixin.png
http://www.uc##g.com/uploads/2019/0222/20190222112247343.png
http://www.uc##g.com/uploads/2020/0618/2006185eeae00334096.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eeadf10839ec.png
http://www.uc##g.com/uploads/2020/0618/2006185eeade6b51bea.png
http://www.uc##g.com/uploads/2020/0618/2006185eeadd240f19b.png
http://www.uc##g.com/uploads/2020/0618/2006185eeadc0a9b9ac.png
http://www.uc##g.com/uploads/icon/sjxunlei.png
http://www.uc##g.com/uploads/2019/0809/1908095d4cef9a23212.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eeadaf3426c2.png
http://www.uc##g.com/uploads/2020/0618/2006185eead39da6fc0.png
http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
http://www.uc##g.com/uploads/2019/0327/20190327013403188.jpg
http://www.uc##g.com/uploads/2020/0617/2006175ee9f2aebf9bd.jpg
http://www.uc##g.com/uploads/2020/0426/2004265ea5179514929.png
http://www.uc##g.com/uploads/2020/0617/2006175ee9f03b0214e.jpg
http://www.uc##g.com/uploads/2020/0617/2006175ee9ee9995f31.jpg
http://www.uc##g.com/uploads/2020/0301/2003015e5b69fc1e9fc.jpg
http://www.uc##g.com/uploads/2019/0819/1908195d5a79233633a.jpg
http://www.uc##g.com/uploads/2020/0608/2006085ede0f947a1f3.jpg
http://www.uc##g.com/uploads/2020/0606/2006065edb189cedf70.jpg
http://www.uc##g.com/uploads/2020/0618/2006185eeada29e8d70.png
http://www.uc##g.com/uploads/2020/0618/2006185eead4d597e24.png
http://www.uc##g.com/uploads/icon/zuoyebang.png
http://www.uc##g.com/uploads/icon/weishi.png
http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
http://www.uc##g.com/statics/2018pc/js/jquery.min.js
http://www.uc##g.com/statics/2018pc/js/plugin.js
http://www.uc##g.com/statics/2018pc/js/common.js
http://cd#.#2wq.com/scrtips/ucbug_8.29.js
http://www.uc##g.com/statics/2018pc/images/logo.png
http://www.uc##g.com/uploads/icon/ce.png
http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
http://www.uc##g.com/statics/2018pc/js/html5.min.js
http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
http://www.uc##g.com/uploads/icon/wps.png
http://www.uc##g.com/statics/2018pc/images/spr.png
http://www.uc##g.com/caches/poster_js/1.js
http://www.uc##g.com/uploads/2020/0613/2006135ee41fb202f49.jpg
http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
http://www.uc##g.com/uploads/icon/SBgameHacker.png
http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
http://www.uc##g.com/uploads/icon/360shoujizs.png
http://www.uc##g.com/uploads/icon/xfplay.png
http://www.uc##g.com/uploads/icon/office2016.png
http://www.uc##g.com/uploads/2020/0617/2006175ee9e00fdbbd8.jpg
http://www.uc##g.com/uploads/2020/0617/2006175ee9def804dfd.jpg
http://www.uc##g.com/uploads/icon/bianfengyx.png
http://www.uc##g.com/uploads/2020/0617/2006175ee9de928be3b.png
http://www.uc##g.com/uploads/2019/1015/1910155da5a391d852f.jpg
http://www.uc##g.com/uploads/icon/zmxyol.png
http://www.uc##g.com/uploads/icon/taobaobasy.png
http://www.uc##g.com/uploads/icon/id5.png
http://www.uc##g.com/uploads/icon/huoyingrzsy.png
http://www.uc##g.com/uploads/icon/smtw2sy.png
http://www.uc##g.com/uploads/2019/0813/1908135d52cf1b3d2a8.png
http://www.uc##g.com/uploads/2019/0813/1908135d52bafd15a72.jpg
http://www.uc##g.com/uploads/2019/1128/1911285ddf45f9c962f.png
http://www.uc##g.com/uploads/2018/1231/20181231032657859.png
http://www.uc##g.com/uploads/2019/1113/1911135dcc1e9c674c4.png
http://www.uc##g.com/uploads/icon/wailingsswz.png
http://www.uc##g.com/uploads/2020/0523/2005235ec91753a5ddf.png
http://www.uc##g.com/uploads/icon/AdobeAcrobat.png
http://www.uc##g.com/uploads/icon/KMSTools.png
http://www.uc##g.com/uploads/icon/MicroKMS.png
http://www.uc##g.com/uploads/2018/1209/20181209091258534.png
http://www.uc##g.com/uploads/2018/1210/20181210031723994.png
http://www.uc##g.com/uploads/2020/0324/2003245e7970f209044.png
http://www.uc##g.com/uploads/icon/yxswz.png
http://www.uc##g.com/uploads/2019/0804/1908045d465d7f8c1fc.jpg
http://www.uc##g.com/uploads/icon/52pojie.png
http://www.uc##g.com/uploads/icon/eyuyan.png
http://www.uc##g.com/uploads/icon/qqguanjia.png
http://www.uc##g.com/uploads/icon/360zip.png
http://www.uc##g.com/uploads/2019/0413/1904135cb137b6582dd.jpg
http://www.uc##g.com/uploads/2019/0624/1906245d0fa32d570d4.jpg
http://www.uc##g.com/uploads/2020/0524/2005245ec9fcd38f88c.png
http://www.uc##g.com/uploads/2019/0508/1905085cd2f02f133ff.png
http://www.uc##g.com/uploads/icon/mingrizhsy.png
http://www.uc##g.com/uploads/2019/0105/20190105085330785.png
http://www.uc##g.com/uploads/2018/1211/20181211100554749.png
http://www.uc##g.com/uploads/icon/wyyyy.png
http://www.uc##g.com/uploads/2020/0103/2001035e0e8f00de031.png
http://www.uc##g.com/uploads/2020/0422/2004225e9fa36613941.png
http://www.uc##g.com/uploads/2019/0308/20190308055417406.png
http://www.uc##g.com/uploads/icon/CCleaner.png
http://www.uc##g.com/uploads/2020/0615/2006155ee725aea5a25.png
http://www.uc##g.com/uploads/2020/0522/2005225ec7a9a2d0892.png
http://www.uc##g.com/uploads/2020/0615/2006155ee6ee235c596.png
http://www.uc##g.com/uploads/2020/0615/2006155ee6ed6580668.png
http://www.uc##g.com/uploads/icon/tuniu.png
http://www.uc##g.com/uploads/2020/0610/2006105ee07e405727e.png
http://www.uc##g.com/uploads/2020/0615/2006155ee6ec3c638fe.png
http://www.uc##g.com/uploads/2020/0607/2006075edc48e18628b.png
http://www.uc##g.com/uploads/2020/0615/2006155ee7271f341ec.png
http://www.uc##g.com/uploads/2020/0614/2006145ee5f9a69ca4e.png
http://www.uc##g.com/uploads/2020/0608/2006085ede190459a97.png
http://www.uc##g.com/uploads/icon/ditiepaokusy.png
http://www.uc##g.com/uploads/2020/0502/2005025ead1cde4afa1.png
http://www.uc##g.com/uploads/2019/0706/1907065d2044e25371e.png
http://www.uc##g.com/uploads/2020/0607/2006075edc4822c542c.png
http://www.uc##g.com/uploads/2020/0607/2006075edc424742262.png
http://www.uc##g.com/uploads/2019/1212/1912125df1a86d98e71.png
http://www.uc##g.com/uploads/2019/0804/1908045d467a4fa0607.png
http://www.uc##g.com/uploads/2018/1220/20181220061901537.jpg
http://www.uc##g.com/uploads/2020/0615/2006155ee6ea2c76f6f.png
http://www.uc##g.com/uploads/icon/baofengjihuo.png
http://www.uc##g.com/statics/2018pc/images/gotop.png

'hm.##idu.com':443

UDP

DNS ASK uc##g.com
DNS ASK hm.##idu.com
DNS ASK cd#.#2wq.com
DNS ASK da##.71xe.com

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней