Technical Information
Modifies file system
Creates the following files
- %TEMP%\25240f17\un8w.dat
- C:\users\administrator\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\administrator\appdata\local\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %WINDIR%\syswow64\grouppolicy\gpt.ini
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\mcbc6u@pab-dbyeu.edu\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\mcbc6u@pab-dbyeu.edu\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\mcbc6u@pab-dbyeu.edu\content\bg.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %LOCALAPPDATA%\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %LOCALAPPDATA%\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- %LOCALAPPDATA%\torch\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\mcbc6u@pab-dbyeu.edu\install.rdf
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\al5ek.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\content.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\lsdb.js
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\bootstrap.js
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\chrome.manifest
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\install.rdf
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\content\bg.js
- %TEMP%\25240f17\un8w.exe
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\al5ek.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\lsdb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\content.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\amnphkgajkhcfgommhapepnkflcifend\3.9\manifest.json
- %ALLUSERSPROFILE%\9afbdbafeecabea1\{fdb962f0-b5b8-9460-d12f-7966e97baa43}.20220620223634
Deletes the following files
- %TEMP%\25240f17\un8w.dat
- %TEMP%\25240f17\un8w.exe
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\content\bg.js
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\install.rdf
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\chrome.manifest
- %TEMP%\25240f17\mcbc6u@pab-dbyeu.edu\bootstrap.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\lsdb.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\content.js
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\manifest.json
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\background.html
- %TEMP%\25240f17\amnphkgajkhcfgommhapepnkflcifend\al5ek.js
Modifies the following files
- %LOCALAPPDATA%\google\chrome\user data\local state
- %LOCALAPPDATA%\google\chrome\user data\default\preferences
Substitutes the following files
- %ALLUSERSPROFILE%\ntuser.pol
Miscellaneous
Creates and executes the following
- '%TEMP%\25240f17\un8w.exe'
Executes the following
- '<SYSTEM32>\raserver.exe' /offerraupdate
