Trojan.DownLoader34.16485

Technical Information

Modifies file system

Creates the following files

%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Network activity

Connects to

'da##.71xe.com':445

TCP

HTTP GET requests

http://www.uc##g.com/statics/2018pc/css/style.css
http://www.uc##g.com/uploads/icon/kuaizip.png
http://www.uc##g.com/uploads/icon/7-zip.png
http://www.uc##g.com/uploads/2019/0119/20190119094744233.png
http://www.uc##g.com/uploads/icon/yingyinxianfeng.png
http://www.uc##g.com/uploads/icon/bdplayer.png
http://www.uc##g.com/uploads/icon/qqmusic.png
http://www.uc##g.com/uploads/icon/kugou.png
http://www.uc##g.com/uploads/icon/wangyiyunyinyue.png
http://www.uc##g.com/uploads/icon/kuwo.png
http://www.uc##g.com/uploads/icon/QQLive.png
http://www.uc##g.com/uploads/icon/youku.png
http://www.uc##g.com/uploads/icon/iqyi.png
http://www.uc##g.com/uploads/icon/letv.png
http://www.uc##g.com/uploads/icon/ludashi.png
http://www.uc##g.com/uploads/icon/GlaryUtilities.png
http://www.uc##g.com/uploads/icon/PartitionMagic.png
http://www.uc##g.com/uploads/icon/DiskGenius.png
http://www.uc##g.com/uploads/icon/meituxx.png
http://www.uc##g.com/uploads/icon/photoshop.png
http://www.uc##g.com/uploads/icon/guangyingkantu.jpg
http://www.uc##g.com/uploads/icon/qudongjingling.jpg
http://www.uc##g.com/uploads/icon/qudongrs.png
http://www.uc##g.com/uploads/icon/360qdds.png
http://www.uc##g.com/uploads/icon/DriverReviver.png
http://www.uc##g.com/uploads/icon/360sjzs.png
http://www.uc##g.com/uploads/icon/yingyongbao.png
http://www.uc##g.com/uploads/icon/huaweisjzs.png
http://www.uc##g.com/uploads/icon/HaoZip.png
http://www.uc##g.com/uploads/icon/i4tools.jpg
http://www.uc##g.com/uploads/icon/jsduba.png
http://www.uc##g.com/uploads/icon/360.png
http://www.uc##g.com/uploads/2020/0324/2003245e7970f209044.png
http://www.uc##g.com/uploads/icon/yxswz.png
http://www.uc##g.com/uploads/icon/52pojie.png
http://www.uc##g.com/uploads/icon/eyuyan.png
http://www.uc##g.com/uploads/icon/qqguanjia.png
http://www.uc##g.com/uploads/icon/360zip.png
http://www.uc##g.com/uploads/2019/1209/1912095dede19d3d6b3.jpg
http://www.uc##g.com/uploads/icon/baofengjihuo.png
http://www.uc##g.com/uploads/icon/idm.png
http://www.uc##g.com/uploads/icon/xunlei9.png
http://www.uc##g.com/uploads/icon/uTorrent.png
http://www.uc##g.com/uploads/2019/0202/20190202114504136.png
http://www.uc##g.com/uploads/icon/qq.png
http://www.uc##g.com/uploads/icon/tim.png
http://www.uc##g.com/uploads/2018/1018/20181018050057486.jpg
http://www.uc##g.com/uploads/icon/baidusrf.jpg
http://www.uc##g.com/uploads/icon/sogousrf.jpg
http://www.uc##g.com/uploads/icon/qqsrf.jpg
http://www.uc##g.com/uploads/icon/iflysrf.jpg
http://www.uc##g.com/uploads/icon/qqwubi.png
http://www.uc##g.com/uploads/icon/sogouwubi.png
http://www.uc##g.com/uploads/icon/wnwubisrf.png
http://www.uc##g.com/uploads/icon/jpwb.png
http://www.uc##g.com/uploads/icon/360aqllq.png
http://www.uc##g.com/uploads/icon/GoogleChrome.png
http://www.uc##g.com/uploads/icon/sogougsllq.png
http://www.uc##g.com/uploads/icon/Firefox.png
http://www.uc##g.com/uploads/icon/360sd.jpg
http://www.uc##g.com/uploads/2020/0614/2006145ee5dd68b6414.jpg
http://www.uc##g.com/uploads/2019/0516/1905165cdd110d42491.jpg
http://www.uc##g.com/uploads/icon/jingdongjinrong.jpg
http://www.uc##g.com/uploads/icon/lkwgwukongfz.png
http://www.uc##g.com/uploads/icon/ucbugzmxy3.png
http://www.uc##g.com/uploads/icon/xiaoyaofz.png
http://www.uc##g.com/uploads/icon/jipinfz.png
http://www.uc##g.com/uploads/icon/wushenfz.png
http://www.uc##g.com/uploads/icon/weizhi.png
http://www.uc##g.com/uploads/icon/fuzhu.png
http://www.uc##g.com/uploads/icon/ucbugzmxy4.png
http://www.uc##g.com/uploads/icon/XM.png
http://www.uc##g.com/uploads/icon/zmxy4cxfz.png
http://www.uc##g.com/uploads/icon/xiaowangxgq.png
http://www.uc##g.com/uploads/icon/ssjjaishangfz.png
http://www.uc##g.com/uploads/icon/ssjjwdfz.png
http://www.uc##g.com/uploads/icon/canxiayxzs.png
http://www.uc##g.com/uploads/2020/0723/2007235f1909457ee00.png
http://www.uc##g.com/uploads/2019/0316/20190316023010422.png
http://www.uc##g.com/uploads/allimg/141104/1_110419561B936.jpg
http://www.uc##g.com/uploads/allimg/150122/1_01221320034O1.jpg
http://www.uc##g.com/uploads/icon/xiaopimnq.png
http://www.uc##g.com/uploads/icon/51moniqi.png
http://www.uc##g.com/uploads/2018/1230/20181230054506220.jpg
http://www.uc##g.com/uploads/icon/youxia.png
http://www.uc##g.com/uploads/icon/trainer.png
http://www.uc##g.com/img/beianicon.png
http://www.uc##g.com/caches/poster_js/17.js
http://www.uc##g.com/uploads/icon/sjxunlei.png
http://www.uc##g.com/uploads/icon/2345ktw.png
http://www.uc##g.com/uploads/icon/lkwg.png
http://www.uc##g.com/uploads/2018/1210/20181210031723994.png
http://www.uc##g.com/uploads/icon/lkwgdgfz.png
http://www.uc##g.com/uploads/2020/0608/2006085ede0f947a1f3.jpg
http://www.uc##g.com/uploads/icon/yizhifuapp.png
http://www.uc##g.com/uploads/2019/0104/20190104124246224.png
http://www.uc##g.com/uploads/2020/0209/2002095e40068c5e83b.png
http://www.uc##g.com/uploads/2019/0601/1906015cf1e2168857e.png
http://www.uc##g.com/uploads/2018/1217/20181217102554822.png
http://www.uc##g.com/uploads/2019/0716/1907165d2d7734d33c3.png
http://www.uc##g.com/uploads/2019/0308/20190308112122718.png
http://www.uc##g.com/uploads/2019/0410/1904105cae0e60f3417.png
http://www.uc##g.com/uploads/2019/1220/1912205dfc4bf522af8.png
http://www.uc##g.com/uploads/2020/0329/2003295e80c101160ad.png
http://www.uc##g.com/uploads/allimg/140613/1_061311215b2R.jpg
http://www.uc##g.com/uploads/2019/0511/1905115cd68762b594d.png
http://www.uc##g.com/uploads/icon/bcfdgssy.png
http://www.uc##g.com/uploads/allimg/150111/1_01110SQ3aN.jpg
http://www.uc##g.com/uploads/2019/1212/1912125df1a86d98e71.png
http://www.uc##g.com/uploads/2019/0717/1907175d2e8068e7a81.jpg
http://www.uc##g.com/uploads/2019/0715/1907155d2c216bc1ee3.png
http://www.uc##g.com/uploads/icon/ARESVIRUS.png
http://www.uc##g.com/uploads/2019/0112/20190112073218300.jpg
http://www.uc##g.com/uploads/2019/1104/1911045dbf75f279937.jpg
http://www.uc##g.com/uploads/2019/0301/20190301092449810.jpg
http://www.uc##g.com/uploads/2019/0328/20190328053004107.jpg
http://www.uc##g.com/uploads/2019/0301/20190301011945857.jpg
http://www.uc##g.com/uploads/2019/0801/1908015d4304089c3fd.jpg
http://www.uc##g.com/uploads/2020/0102/2001025e0d9d359beb1.jpg
http://www.uc##g.com/uploads/2019/1108/1911085dc57df4cee40.jpg
http://www.uc##g.com/uploads/2019/1204/1912045de7051737377.jpg
http://www.uc##g.com/uploads/icon/zhifubao.png
http://www.uc##g.com/uploads/icon/baiduqianbao.png
http://www.uc##g.com/uploads/icon/MicroKMS.png
http://www.uc##g.com/uploads/2020/0801/2008015f252486cf503.jpg
http://www.uc##g.com/uploads/2019/1007/1910075d9ac981c1006.png
http://www.uc##g.com/uploads/2018/1217/20181217095854535.png
http://www.uc##g.com/uploads/2019/0917/1909175d803b7aa5330.png
http://www.uc##g.com/uploads/2020/0516/2005165ebf534c1475c.png
http://www.uc##g.com/uploads/2020/0405/2004055e89edcdaebcb.png
http://www.uc##g.com/uploads/icon/KMSTools.png
http://www.uc##g.com/uploads/2020/0802/2008025f2629ec7fe71.png
http://www.uc##g.com/uploads/2020/0802/2008025f2628200e218.png
http://www.uc##g.com/uploads/2020/0802/2008025f26277a437a5.png
http://www.uc##g.com/uploads/2020/0802/2008025f262686ae1c9.png
http://www.uc##g.com/uploads/2020/0802/2008025f2626048d0c5.png
http://www.uc##g.com/uploads/2020/0802/2008025f2625875e9b9.png
http://www.uc##g.com/uploads/2020/0802/2008025f2625094f06c.png
http://www.uc##g.com/uploads/2020/0802/2008025f2621950ca1a.png
http://www.uc##g.com/uploads/2020/0802/2008025f26204fe73df.png
http://www.uc##g.com/uploads/2020/0802/2008025f261f874556f.png
http://www.uc##g.com/uploads/icon/MP4Downloader.png
http://www.uc##g.com/uploads/2019/0715/1907155d2bf0be7fd84.png
http://www.uc##g.com/uploads/icon/peizhaochen.png
http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
http://www.uc##g.com/uploads/2019/0201/20190201120327391.png
http://www.uc##g.com/uploads/2020/0801/2008015f2529a8718a6.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f2528d04454a.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f25287012311.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f25280ba80d1.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f25279d7b5ff.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f2527379f5dc.jpg
http://www.uc##g.com/uploads/2019/0601/1906015cf1d66642046.png
http://www.uc##g.com/uploads/2020/0801/2008015f25268db7ce2.jpg
http://www.uc##g.com/uploads/icon/zuoyebang.png
http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
http://www.uc##g.com/statics/2018pc/js/html5.min.js
http://www.uc##g.com/statics/2018pc/js/jquery.min.js
http://www.uc##g.com/statics/2018pc/js/plugin.js
http://www.uc##g.com/statics/2018pc/js/common.js
http://cd#.#2wq.com/scrtips/ucbug_8.29.js
http://www.uc##g.com/statics/2018pc/images/logo.png
http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
http://www.uc##g.com/uploads/icon/ce.png
http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
http://www.uc##g.com/uploads/icon/office2016.png
http://www.uc##g.com/uploads/icon/wps.png
http://www.uc##g.com/caches/poster_js/1.js
http://www.uc##g.com/statics/2018pc/images/spr.png
http://www.uc##g.com/uploads/2020/0701/2007015efc0b596f4e7.jpg
http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
http://www.uc##g.com/uploads/icon/SBgameHacker.png
http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
http://www.uc##g.com/uploads/icon/360shoujizs.png
http://www.uc##g.com/uploads/icon/xfplay.png
http://www.uc##g.com/uploads/icon/weishi.png
http://www.uc##g.com/uploads/2020/0701/2007015efc640a40fce.png
http://www.uc##g.com/uploads/2019/0413/1904135cb137b6582dd.jpg
http://www.uc##g.com/uploads/2020/0801/2008015f25241f1a9ac.jpg
http://www.uc##g.com/uploads/2020/0623/2006235ef2228dd0c66.png
http://www.uc##g.com/uploads/2020/0623/2006235ef220d49855f.png
http://www.uc##g.com/uploads/2020/0618/2006185eeb582e4fc76.png
http://www.uc##g.com/uploads/2020/0607/2006075edc48e18628b.png
http://www.uc##g.com/uploads/2020/0615/2006155ee7271f341ec.png
http://www.uc##g.com/uploads/2020/0614/2006145ee5f9a69ca4e.png
http://www.uc##g.com/uploads/2020/0608/2006085ede1a184590b.png
http://www.uc##g.com/uploads/2020/0608/2006085ede190459a97.png
http://www.uc##g.com/uploads/icon/ditiepaokusy.png
http://www.uc##g.com/uploads/2019/0508/1905085cd2f02f133ff.png
http://www.uc##g.com/uploads/2019/1015/1910155da5a391d852f.jpg
http://www.uc##g.com/uploads/icon/mingrizhsy.png
http://www.uc##g.com/uploads/icon/zmxyol.png
http://www.uc##g.com/uploads/icon/taobaobasy.png
http://www.uc##g.com/uploads/icon/id5.png
http://www.uc##g.com/uploads/icon/wzry.png
http://www.uc##g.com/uploads/icon/huoyingrzsy.png
http://www.uc##g.com/uploads/icon/smtw2sy.png
http://www.uc##g.com/uploads/2019/1024/1910245db14c58cec5b.jpg
http://www.uc##g.com/uploads/2019/0814/1908145d541b67bd57f.jpg
http://www.uc##g.com/uploads/2019/0813/1908135d52cf1b3d2a8.png
http://www.uc##g.com/uploads/2019/0127/20190127073013901.png
http://www.uc##g.com/uploads/icon/Xshell.png
http://www.uc##g.com/uploads/2019/1128/1911285ddf45f9c962f.png
http://www.uc##g.com/uploads/2018/1231/20181231032657859.png
http://www.uc##g.com/uploads/2019/1113/1911135dcc1e9c674c4.png
http://www.uc##g.com/uploads/icon/AdobeAcrobat.png
http://www.uc##g.com/uploads/2019/0706/1907065d2044e25371e.png
http://www.uc##g.com/uploads/2019/0624/1906245d0fa32d570d4.jpg
http://www.uc##g.com/uploads/2020/0701/2007015efc62186af64.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9d8fc9be1.png
http://www.uc##g.com/uploads/2020/0731/2007315f23df0428d18.jpg
http://www.uc##g.com/uploads/2020/0731/2007315f23de8899f2f.jpg
http://www.uc##g.com/uploads/2019/1012/1910125da1966731edf.png
http://www.uc##g.com/uploads/2020/0802/2008025f26698380a22.png
http://www.uc##g.com/uploads/2019/1009/1910095d9db0f4f2f93.png
http://www.uc##g.com/uploads/icon/xiachufang.jpg
http://www.uc##g.com/uploads/2019/0630/1906305d17fa4cb3d4f.png
http://www.uc##g.com/uploads/icon/weixin.png
http://www.uc##g.com/uploads/2020/0522/2005225ec7a6638113e.png
http://www.uc##g.com/uploads/2019/0218/20190218091055515.png
http://www.uc##g.com/uploads/icon/SolidExplorer.png
http://www.uc##g.com/uploads/icon/ssdashi.png
http://www.uc##g.com/uploads/2020/0731/2007315f23cc9b2fe12.png
http://www.uc##g.com/uploads/2020/0731/2007315f23c91d5c070.png
http://www.uc##g.com/uploads/2019/0111/20190111082348147.png
http://www.uc##g.com/uploads/2020/0731/2007315f23c5324810e.png
http://www.uc##g.com/uploads/2020/0512/2005125eba41c6b0442.png
http://www.uc##g.com/uploads/2020/0731/2007315f236884bd3c7.png
http://www.uc##g.com/uploads/icon/AIDA64.png
http://www.uc##g.com/uploads/2019/0314/20190314090722192.png
http://www.uc##g.com/uploads/2019/0914/1909145d7cab0b60624.png
http://www.uc##g.com/uploads/2020/0717/2007175f117c116082c.png
http://www.uc##g.com/uploads/icon/StickmanRopeHero.png
http://www.uc##g.com/uploads/2019/0720/1907205d3337d671b6d.png
http://www.uc##g.com/uploads/2020/0714/2007145f0da06f68fcd.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9f7ed6426.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9ea91726f.png
http://www.uc##g.com/uploads/2020/0801/2008015f252600805fa.jpg
http://www.uc##g.com/statics/2018pc/images/litterStar.png

'hm.##idu.com':443

UDP

DNS ASK uc##g.com
DNS ASK hm.##idu.com
DNS ASK cd#.#2wq.com
DNS ASK da##.71xe.com

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней