Trojan.DownLoader34.3357

Technical Information

Modifies file system

Creates the following files

%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Network activity

Connects to

'da##.71xe.com':445
'public-trust.com':80

TCP

HTTP GET requests

http://www.uc##g.com/statics/2018pc/css/style.css
http://www.uc##g.com/uploads/icon/photoshop.png
http://www.uc##g.com/uploads/icon/2345ktw.png
http://www.uc##g.com/uploads/icon/guangyingkantu.jpg
http://www.uc##g.com/uploads/icon/qudongjingling.jpg
http://www.uc##g.com/uploads/icon/qudongrs.png
http://www.uc##g.com/uploads/icon/360qdds.png
http://www.uc##g.com/uploads/icon/DriverReviver.png
http://www.uc##g.com/uploads/icon/360sjzs.png
http://www.uc##g.com/uploads/icon/yingyongbao.png
http://www.uc##g.com/uploads/icon/i4tools.jpg
http://www.uc##g.com/uploads/icon/zhifubao.png
http://www.uc##g.com/uploads/icon/DiskGenius.png
http://www.uc##g.com/uploads/icon/meituxx.png
http://www.uc##g.com/uploads/icon/jingdongjinrong.jpg
http://www.uc##g.com/uploads/2019/0104/20190104124246224.png
http://www.uc##g.com/uploads/2020/0209/2002095e40068c5e83b.png
http://www.uc##g.com/uploads/2019/0716/1907165d2d7734d33c3.png
http://www.uc##g.com/uploads/2019/0308/20190308112122718.png
http://www.uc##g.com/uploads/2019/0410/1904105cae0e60f3417.png
http://www.uc##g.com/uploads/2019/1220/1912205dfc4bf522af8.png
http://www.uc##g.com/uploads/2020/0329/2003295e80c101160ad.png
http://www.uc##g.com/uploads/2020/0106/2001065e12d42294bfd.jpg
http://www.uc##g.com/uploads/icon/bcfdgssy.png
http://www.uc##g.com/uploads/2019/0715/1907155d2c216bc1ee3.png
http://www.uc##g.com/uploads/icon/ARESVIRUS.png
http://www.uc##g.com/uploads/icon/yizhifuapp.png
http://www.uc##g.com/uploads/2019/0601/1906015cf1e3a70a57d.png
http://www.uc##g.com/uploads/icon/PartitionMagic.png
http://www.uc##g.com/uploads/icon/GlaryUtilities.png
http://www.uc##g.com/uploads/icon/ludashi.png
http://www.uc##g.com/uploads/icon/weixin.png
http://www.uc##g.com/uploads/icon/baidusrf.jpg
http://www.uc##g.com/uploads/icon/qqsrf.jpg
http://www.uc##g.com/uploads/icon/iflysrf.jpg
http://www.uc##g.com/uploads/icon/qqwubi.png
http://www.uc##g.com/uploads/icon/sogouwubi.png
http://www.uc##g.com/uploads/icon/jpwb.png
http://www.uc##g.com/uploads/icon/360aqllq.png
http://www.uc##g.com/uploads/icon/sogougsllq.png
http://www.uc##g.com/uploads/icon/Firefox.png
http://www.uc##g.com/uploads/icon/360.png
http://www.uc##g.com/uploads/icon/360sd.jpg
http://www.uc##g.com/uploads/2018/1018/20181018050057486.jpg
http://www.uc##g.com/uploads/icon/jsduba.png
http://www.uc##g.com/uploads/icon/kuaizip.png
http://www.uc##g.com/uploads/icon/7-zip.png
http://www.uc##g.com/uploads/2019/0119/20190119094744233.png
http://www.uc##g.com/uploads/icon/yingyinxianfeng.png
http://www.uc##g.com/uploads/icon/bdplayer.png
http://www.uc##g.com/uploads/icon/qqmusic.png
http://www.uc##g.com/uploads/icon/kugou.png
http://www.uc##g.com/uploads/icon/wangyiyunyinyue.png
http://www.uc##g.com/uploads/icon/QQLive.png
http://www.uc##g.com/uploads/icon/youku.png
http://www.uc##g.com/uploads/icon/iqyi.png
http://www.uc##g.com/uploads/icon/letv.png
http://www.uc##g.com/uploads/icon/HaoZip.png
http://www.uc##g.com/uploads/2019/1104/1911045dbf75f279937.jpg
http://www.uc##g.com/uploads/2019/0201/20190201082255728.jpg
http://www.uc##g.com/uploads/icon/lkwgdgfz.png
http://www.uc##g.com/uploads/2019/0328/20190328053004107.jpg
http://www.uc##g.com/uploads/icon/4399.png
http://www.uc##g.com/uploads/2020/0723/2007235f18fc7066526.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f8e833591.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f55b155e5.bmp
http://www.uc##g.com/uploads/2020/0722/2007225f17f7eb289e1.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f6b94c3a8.jpg
http://www.uc##g.com/uploads/2020/0718/2007185f12ed2de663c.png
http://www.uc##g.com/uploads/2020/0718/2007185f12ef87349ec.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9d8fc9be1.png
http://www.uc##g.com/uploads/2019/0706/1907065d2044e25371e.png
http://www.uc##g.com/uploads/icon/ditiepaokusy.png
http://www.uc##g.com/img/beianicon.png
http://www.uc##g.com/caches/poster_js/17.js
http://www.uc##g.com/uploads/icon/mingrizhsy.png
http://www.uc##g.com/uploads/icon/KMSTools.png
http://www.uc##g.com/uploads/icon/52pojie.png
http://www.uc##g.com/uploads/icon/xunlei9.png
http://www.uc##g.com/uploads/icon/qq.png
http://www.uc##g.com/uploads/icon/sogousrf.jpg
http://www.uc##g.com/uploads/icon/wnwubisrf.png
http://www.uc##g.com/uploads/icon/GoogleChrome.png
http://www.uc##g.com/uploads/icon/baiduqianbao.png
http://www.uc##g.com/uploads/2019/0717/1907175d2e8068e7a81.jpg
http://www.uc##g.com/uploads/2018/1210/20181210031723994.png
http://www.uc##g.com/uploads/icon/huaweisjzs.png
http://www.uc##g.com/uploads/icon/id5.png
http://www.uc##g.com/uploads/2019/1024/1910245db14c58cec5b.jpg
http://www.uc##g.com/uploads/icon/trainer.png
http://www.uc##g.com/uploads/icon/LIRW.png
http://www.uc##g.com/uploads/icon/youxia.png
http://www.uc##g.com/uploads/2019/0516/1905165cdd110d42491.jpg
http://www.uc##g.com/uploads/2019/0619/1906195d0a553514a27.jpg
http://www.uc##g.com/uploads/2019/0801/1908015d4304089c3fd.jpg
http://www.uc##g.com/uploads/2019/1112/1911125dca62a6451cd.jpg
http://www.uc##g.com/uploads/2020/0102/2001025e0d9d359beb1.jpg
http://www.uc##g.com/uploads/2019/1108/1911085dc57df4cee40.jpg
http://www.uc##g.com/uploads/2019/1204/1912045de7051737377.jpg
http://www.uc##g.com/uploads/icon/lkwg.png
http://www.uc##g.com/uploads/icon/lkwgwukongfz.png
http://www.uc##g.com/uploads/icon/weizhi.png
http://www.uc##g.com/uploads/icon/ucbugzmxy3.png
http://www.uc##g.com/uploads/icon/xiaoyaofz.png
http://www.uc##g.com/uploads/2019/0301/20190301011945857.jpg
http://www.uc##g.com/uploads/icon/jipinfz.png
http://www.uc##g.com/uploads/icon/zmxy4cxfz.png
http://www.uc##g.com/uploads/icon/xiaowangxgq.png
http://www.uc##g.com/uploads/icon/wushenfz.png
http://www.uc##g.com/uploads/icon/ssjjaishangfz.png
http://www.uc##g.com/uploads/icon/ssjjwdfz.png
http://www.uc##g.com/uploads/icon/canxiayxzs.png
http://www.uc##g.com/uploads/2019/0316/20190316023010422.png
http://www.uc##g.com/uploads/2019/0125/20190125102958869.png
http://www.uc##g.com/uploads/2018/1230/20181230054506220.jpg
http://www.uc##g.com/uploads/icon/mumumnq.png
http://www.uc##g.com/uploads/2019/0720/1907205d32b00db77a0.png
http://www.uc##g.com/uploads/icon/xingxingmnq.png
http://www.uc##g.com/uploads/icon/ucbugzmxy4.png
http://www.uc##g.com/uploads/icon/tim.png
http://www.uc##g.com/uploads/2019/0112/20190112073218300.jpg
http://www.uc##g.com/uploads/2019/0202/20190202114504136.png
http://www.uc##g.com/uploads/2020/0722/2007225f17f58c888c8.jpg
http://www.uc##g.com/uploads/icon/fuzhu.png
http://www.uc##g.com/uploads/2020/0723/2007235f18fd2aa30bd.png
http://www.uc##g.com/uploads/2020/0723/2007235f18fbcedea9a.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f9ae7e6ee.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f8266fcfd.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f6148f6ba.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f4aa69aae.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f3da48921.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f347beddf.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f2cc712d7.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f245245c9.png
http://www.uc##g.com/uploads/icon/sjxunlei.png
http://www.uc##g.com/uploads/2020/0723/2007235f1909457ee00.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f19a57d9d.png
http://www.uc##g.com/uploads/icon/Abolfazlk.png
http://www.uc##g.com/uploads/2020/0423/2004235ea155d29112b.png
http://www.uc##g.com/uploads/2019/0201/20190201120327391.png
http://www.uc##g.com/uploads/icon/peizhaochen.png
http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
http://www.uc##g.com/uploads/2020/0722/2007225f17f994c683d.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f93584c05.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f8e078370.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f785ca4af.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f71a4c772.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f65adbf02.jpg
http://www.uc##g.com/uploads/2020/0723/2007235f18f11814828.png
http://www.uc##g.com/uploads/2020/0723/2007235f18f08e01fe6.png
http://www.uc##g.com/uploads/icon/zuoyebang.png
http://www.uc##g.com/uploads/icon/weishi.png
http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
http://www.uc##g.com/statics/2018pc/js/jquery.min.js
http://www.uc##g.com/statics/2018pc/js/plugin.js
http://www.uc##g.com/statics/2018pc/js/common.js
http://cd#.#2wq.com/scrtips/ucbug_8.29.js
http://www.uc##g.com/statics/2018pc/images/logo.png
http://www.uc##g.com/uploads/icon/ce.png
http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
http://www.uc##g.com/statics/2018pc/js/html5.min.js
http://www.uc##g.com/uploads/icon/wps.png
http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
http://www.uc##g.com/uploads/icon/office2016.png
http://www.uc##g.com/statics/2018pc/images/spr.png
http://www.uc##g.com/uploads/2020/0701/2007015efc0b596f4e7.jpg
http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
http://www.uc##g.com/uploads/icon/SBgameHacker.png
http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
http://www.uc##g.com/uploads/icon/360shoujizs.png
http://www.uc##g.com/uploads/icon/xfplay.png
http://www.uc##g.com/caches/poster_js/1.js
http://www.uc##g.com/uploads/2020/0722/2007225f17f5e991f6b.jpg
http://www.uc##g.com/uploads/2020/0722/2007225f17f4f8a0054.jpg
http://www.uc##g.com/uploads/icon/idm.png
http://www.uc##g.com/uploads/2020/0213/2002135e44aa2b5cdad.png
http://www.uc##g.com/uploads/2019/0508/1905085cd2f02f133ff.png
http://www.uc##g.com/uploads/2019/1015/1910155da5a391d852f.jpg
http://www.uc##g.com/uploads/icon/zmxyol.png
http://www.uc##g.com/uploads/icon/taobaobasy.png
http://www.uc##g.com/uploads/icon/wzry.png
http://www.uc##g.com/uploads/icon/huoyingrzsy.png
http://www.uc##g.com/uploads/icon/smtw2sy.png
http://www.uc##g.com/uploads/2019/0814/1908145d541b67bd57f.jpg
http://www.uc##g.com/uploads/2019/0813/1908135d52cf1b3d2a8.png
http://www.uc##g.com/uploads/2019/0127/20190127073013901.png
http://www.uc##g.com/uploads/2019/1128/1911285ddf45f9c962f.png
http://www.uc##g.com/uploads/2020/0608/2006085ede1a184590b.png
http://www.uc##g.com/uploads/2020/0608/2006085ede190459a97.png
http://www.uc##g.com/uploads/2018/1231/20181231032657859.png
http://www.uc##g.com/uploads/2019/0413/1904135cb137b6582dd.jpg
http://www.uc##g.com/uploads/2019/0624/1906245d0fa32d570d4.jpg
http://www.uc##g.com/uploads/icon/MicroKMS.png
http://www.uc##g.com/uploads/2018/1209/20181209091258534.png
http://www.uc##g.com/uploads/2020/0324/2003245e7970f209044.png
http://www.uc##g.com/uploads/icon/yxswz.png
http://www.uc##g.com/uploads/icon/eyuyan.png
http://www.uc##g.com/uploads/icon/qqguanjia.png
http://www.uc##g.com/uploads/icon/360zip.png
http://www.uc##g.com/uploads/2019/1209/1912095dede19d3d6b3.jpg
http://www.uc##g.com/uploads/icon/baofengjihuo.png
http://www.uc##g.com/uploads/2019/1113/1911135dcc1e9c674c4.png
http://www.uc##g.com/uploads/icon/AdobeAcrobat.png
http://www.uc##g.com/uploads/2020/0614/2006145ee5f9a69ca4e.png
http://www.uc##g.com/uploads/2020/0615/2006155ee7271f341ec.png
http://www.uc##g.com/uploads/2020/0607/2006075edc48e18628b.png
http://www.uc##g.com/uploads/icon/eswjglq.png
http://www.uc##g.com/uploads/2019/0318/20190318084957846.jpg
http://www.uc##g.com/uploads/2019/0314/20190314090722192.png
http://www.uc##g.com/uploads/2019/1127/1911275dddfa5fc9cd2.png
http://www.uc##g.com/uploads/icon/CPU-Z.png
http://www.uc##g.com/uploads/icon/AIDA64.png
http://www.uc##g.com/uploads/2019/0922/1909225d86ef9ff01d0.png
http://www.uc##g.com/uploads/icon/tubadaohang.png
http://www.uc##g.com/uploads/icon/txsptv.png
http://www.uc##g.com/uploads/2019/1119/1911195dd3b7f77a6aa.png
http://www.uc##g.com/uploads/2019/0526/1905265ce9f219cb608.png
http://www.uc##g.com/uploads/icon/kuwo.png
http://www.uc##g.com/uploads/2020/0722/2007225f178dd98b854.png
http://www.uc##g.com/uploads/2019/0706/1907065d20444a3af73.png
http://www.uc##g.com/uploads/2020/0718/2007185f12f11173f90.png
http://www.uc##g.com/uploads/2020/0717/2007175f117c116082c.png
http://www.uc##g.com/uploads/icon/StickmanRopeHero.png
http://www.uc##g.com/uploads/2019/0720/1907205d3337d671b6d.png
http://www.uc##g.com/uploads/2020/0714/2007145f0da06f68fcd.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9f7ed6426.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9ea91726f.png
http://www.uc##g.com/uploads/2020/0701/2007015efc640a40fce.png
http://www.uc##g.com/uploads/2020/0701/2007015efc62186af64.png
http://www.uc##g.com/uploads/2020/0623/2006235ef2228dd0c66.png
http://www.uc##g.com/uploads/2020/0623/2006235ef220d49855f.png
http://www.uc##g.com/uploads/2020/0618/2006185eeb582e4fc76.png
http://www.uc##g.com/uploads/2019/0325/20190325012922112.png
http://www.uc##g.com/uploads/icon/uTorrent.png
http://www.uc##g.com/statics/2018pc/images/litterStar.png

'hm.##idu.com':443

UDP

DNS ASK uc##g.com
DNS ASK hm.##idu.com
DNS ASK cd#.#2wq.com
DNS ASK da##.71xe.com
DNS ASK public-trust.com

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней