Trojan.MulDrop28.31522

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\Design Pro Studio 10.17.46] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\Design Pro Studio 10.17.46] 'ImagePath' = '%ALLUSERSPROFILE%\Design Pro Studio 10.17.46\Design Pro Studio 10.17.46.exe'

Creates the following services

'Design Pro Studio 10.17.46' %ALLUSERSPROFILE%\Design Pro Studio 10.17.46\Design Pro Studio 10.17.46.exe

Modifies file system

Creates the following files

%TEMP%\is-s9gra.tmp\<File name>.exe.tmp
%LOCALAPPDATA%\filmster\is-qppc7.tmp
%LOCALAPPDATA%\filmster\is-2q2a1.tmp
%LOCALAPPDATA%\filmster\is-vd0r9.tmp
%LOCALAPPDATA%\filmster\is-77quq.tmp
%LOCALAPPDATA%\filmster\is-dfcim.tmp
%LOCALAPPDATA%\filmster\is-t6o1a.tmp
%LOCALAPPDATA%\filmster\is-h6q2p.tmp
%LOCALAPPDATA%\filmster\is-kvo39.tmp
%LOCALAPPDATA%\filmster\is-7op45.tmp
%LOCALAPPDATA%\filmster\is-i9svm.tmp
%LOCALAPPDATA%\filmster\is-g2htl.tmp
%LOCALAPPDATA%\filmster\is-c9aoo.tmp
%LOCALAPPDATA%\filmster\is-7hvqd.tmp
%LOCALAPPDATA%\filmster\is-e1d5t.tmp
%LOCALAPPDATA%\filmster\uninstall\unins000.dat
%LOCALAPPDATA%\filmster\is-g6ucg.tmp
%LOCALAPPDATA%\filmster\filmster32.exe
%LOCALAPPDATA%\filmster\is-r1d7d.tmp
%LOCALAPPDATA%\filmster\is-486r1.tmp
%TEMP%\is-kig9h.tmp\_isetup\_regdll.tmp
%TEMP%\is-kig9h.tmp\_isetup\_setup64.tmp
%TEMP%\is-kig9h.tmp\_isetup\_shfoldr.dll
%TEMP%\is-kig9h.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\filmster\uninstall\is-sv30j.tmp
%LOCALAPPDATA%\filmster\is-ipb06.tmp
%LOCALAPPDATA%\filmster\is-lperb.tmp
%LOCALAPPDATA%\filmster\is-vflle.tmp
%LOCALAPPDATA%\filmster\is-v51j3.tmp
%LOCALAPPDATA%\filmster\is-2imfk.tmp
%LOCALAPPDATA%\filmster\is-il57h.tmp
%LOCALAPPDATA%\filmster\is-19mdb.tmp
%LOCALAPPDATA%\filmster\is-rfphl.tmp
%LOCALAPPDATA%\filmster\is-rqjbe.tmp
%LOCALAPPDATA%\filmster\is-2qf1l.tmp
%LOCALAPPDATA%\filmster\is-v78d1.tmp
%ALLUSERSPROFILE%\design pro studio 10.17.46\design pro studio 10.17.46.exe

Moves the following files

from %LOCALAPPDATA%\filmster\uninstall\is-sv30j.tmp to %LOCALAPPDATA%\filmster\uninstall\unins000.exe
from %LOCALAPPDATA%\filmster\is-c9aoo.tmp to %LOCALAPPDATA%\filmster\libwinpthread-1.dll
from %LOCALAPPDATA%\filmster\is-g2htl.tmp to %LOCALAPPDATA%\filmster\libtiff-5.dll
from %LOCALAPPDATA%\filmster\is-i9svm.tmp to %LOCALAPPDATA%\filmster\libsigc-2.0-0.dll
from %LOCALAPPDATA%\filmster\is-7op45.tmp to %LOCALAPPDATA%\filmster\librsvg-2-2.dll
from %LOCALAPPDATA%\filmster\is-kvo39.tmp to %LOCALAPPDATA%\filmster\libpng16-16.dll
from %LOCALAPPDATA%\filmster\is-h6q2p.tmp to %LOCALAPPDATA%\filmster\libpixman-1-0.dll
from %LOCALAPPDATA%\filmster\is-t6o1a.tmp to %LOCALAPPDATA%\filmster\libpcre-1.dll
from %LOCALAPPDATA%\filmster\is-dfcim.tmp to %LOCALAPPDATA%\filmster\libpangowin32-1.0-0.dll
from %LOCALAPPDATA%\filmster\is-77quq.tmp to %LOCALAPPDATA%\filmster\libpangomm-1.4-1.dll
from %LOCALAPPDATA%\filmster\is-vd0r9.tmp to %LOCALAPPDATA%\filmster\libpangoft2-1.0-0.dll
from %LOCALAPPDATA%\filmster\is-2q2a1.tmp to %LOCALAPPDATA%\filmster\libpangocairo-1.0-0.dll
from %LOCALAPPDATA%\filmster\is-qppc7.tmp to %LOCALAPPDATA%\filmster\libpango-1.0-0.dll
from %LOCALAPPDATA%\filmster\is-7hvqd.tmp to %LOCALAPPDATA%\filmster\zlib1.dll
from %LOCALAPPDATA%\filmster\is-g6ucg.tmp to %LOCALAPPDATA%\filmster\liblzma-5.dll
from %LOCALAPPDATA%\filmster\is-v78d1.tmp to %LOCALAPPDATA%\filmster\libjpeg-8.dll
from %LOCALAPPDATA%\filmster\is-486r1.tmp to %LOCALAPPDATA%\filmster\libintl-8.dll
from %LOCALAPPDATA%\filmster\is-2qf1l.tmp to %LOCALAPPDATA%\filmster\libharfbuzz-0.dll
from %LOCALAPPDATA%\filmster\is-rqjbe.tmp to %LOCALAPPDATA%\filmster\libgraphite2.dll
from %LOCALAPPDATA%\filmster\is-rfphl.tmp to %LOCALAPPDATA%\filmster\libgomp-1.dll
from %LOCALAPPDATA%\filmster\is-19mdb.tmp to %LOCALAPPDATA%\filmster\libgobject-2.0-0.dll
from %LOCALAPPDATA%\filmster\is-il57h.tmp to %LOCALAPPDATA%\filmster\libgmodule-2.0-0.dll
from %LOCALAPPDATA%\filmster\is-2imfk.tmp to %LOCALAPPDATA%\filmster\libglibmm-2.4-1.dll
from %LOCALAPPDATA%\filmster\is-v51j3.tmp to %LOCALAPPDATA%\filmster\libgdk_pixbuf-2.0-0.dll
from %LOCALAPPDATA%\filmster\is-vflle.tmp to %LOCALAPPDATA%\filmster\libgdkmm-2.4-1.dll
from %LOCALAPPDATA%\filmster\is-lperb.tmp to %LOCALAPPDATA%\filmster\libgdk-win32-2.0-0.dll
from %LOCALAPPDATA%\filmster\is-ipb06.tmp to %LOCALAPPDATA%\filmster\libgcc_s_dw2-1.dll
from %LOCALAPPDATA%\filmster\is-r1d7d.tmp to %LOCALAPPDATA%\filmster\liblcms2-2.dll
from %LOCALAPPDATA%\filmster\is-e1d5t.tmp to %LOCALAPPDATA%\filmster\filmster32.exe