Trojan.Siggen21.36297

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-tqslr.tmp\is-636de.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-pv45a.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-jrf4i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-lmtdf.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-uva1n.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-3htid.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-61dgj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-373b9.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-0n4ms.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-4orcu.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-jfn2g.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-0ldns.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-nrdmj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-4k0u6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-nfu2i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-q05bc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-35lkd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-h38q6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-hf7ge.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\unins000.dat
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-1ceuc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\is-anm19.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-hetqh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-5cfmd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-nr0el.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-h9295.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-aaju9.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-9v7dc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-78uq8.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-qmij8.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-aahig.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-fs4h7.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-4ftod.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-542tt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-867bm.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-6snli.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-i4lt0.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-19qhp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-q0brt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-ms54d.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-e593h.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-uq9bq.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-o7huh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-d7d0c.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-olosn.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-8to60.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ailtv.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ibnaq.tmp
%TEMP%\is-apsp7.tmp\_iscrypt.dll
%TEMP%\is-apsp7.tmp\_isetup\_shfoldr.dll
%TEMP%\is-apsp7.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-gepnd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-cbufj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-p47qt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jcofl.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5i71i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-465uh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-vcmdp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-hsl22.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5q2sp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-utrbp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1ah2k.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-9un61.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jvbki.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-7scrh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-m2sr5.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-luv15.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-r26k6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1cjg2.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-t6t4m.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-74n3c.tmp
%TEMP%\license.txt

Moves the following files

from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-ibnaq.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\unins000.exe
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-nrdmj.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\btn_t.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-0ldns.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\loading_trake.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-jfn2g.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\loading_trake2.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-4orcu.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_down.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-q05bc.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_down2.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-0n4ms.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_up.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-61dgj.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_up2.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-3htid.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\microsoft.vc90.crt.manifest
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-uva1n.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcm90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-lmtdf.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcp90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-jrf4i.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcr90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-pv45a.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qgif.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-373b9.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qicns.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1cjg2.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_check_on.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-35lkd.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qico.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-hf7ge.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qsvg.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-542tt.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qtga.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-4ftod.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qtiff.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-fs4h7.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qwbmp.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-aahig.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qwebp.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-qmij8.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\bg_msg.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-78uq8.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\btn_close.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-9v7dc.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\btn_common.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-aaju9.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\error.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-h9295.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\help.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-nr0el.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\msg_title_icon.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-5cfmd.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\success.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-hetqh.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\warning.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-nfu2i.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\warning.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-4k0u6.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\btn_delete.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-867bm.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\tag.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-6snli.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\seleted.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-74n3c.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\no_title_logo.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-8to60.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\mmsubtitle.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-gepnd.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcm90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-olosn.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcp90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-o7huh.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcr90.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-uq9bq.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\winsparkle.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-e593h.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\microsoft.vc90.crt.manifest
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-ms54d.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\background.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-q0brt.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\background_2.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-19qhp.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_1.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-d7d0c.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_2.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-cbufj.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_combobox3.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-p47qt.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_nofile.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jcofl.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_add_files.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\is-anm19.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\qwindows.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-h38q6.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qjpeg.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-t6t4m.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_check_off.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-luv15.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_common1.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-m2sr5.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_convert.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-7scrh.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_edit.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jvbki.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_menu.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-9un61.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_min.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1ah2k.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_open.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-utrbp.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_output.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5q2sp.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_prefer.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-hsl22.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\down.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-vcmdp.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\edit_selections_no.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-465uh.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\edit_selections_yes.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5i71i.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\main_logo.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-i4lt0.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\new.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-ailtv.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\libmp4v2.dll
from %ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-r26k6.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_close.png
from %ProgramFiles(x86)%\tuneskit subtitle extractor\is-1ceuc.tmp to %ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe

Network activity

Connects to

'mi####njobs.works':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

HTTP POST requests

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Miscellaneous

Searches for the following windows

ClassName: 'jf6509_isetup8197Class_jf6509' WindowName: ''

Creates and executes the following

'%TEMP%\is-tqslr.tmp\is-636de.tmp' /SL4 $90256 "<Full path to file>" 5457658 76288
'%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe'
'%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe' ab722d8514dac10f29855ef97d04d20a

Executes the following

'%WINDIR%\syswow64\net.exe' helpmsg 19
'%WINDIR%\syswow64\net1.exe' helpmsg 19
'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "SubtitleExtractor-819"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней