Trojan.Siggen32.46149

Technical Information

Modifies file system

Creates the following files

%TEMP%\autoupdate.tmp.exe
%TEMP%\{1076a44b-fba1-4893-9b77-45ff15ea3ea0}.png
%TEMP%\{1609fbac-3109-4f2a-a29b-ecfa1fe5b72c}.png
%LOCALAPPDATA%\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.{045a2d90-7ff5-b2d9-8968-62e084bf191b}.png
%TEMP%\autoupdate.new.exe
nul
%APPDATA%\microsoft\windows\start menu\programs\autoupdate\jx hoÐÂ i niệm.lnk
%HOMEPATH%\desktop\jx hoÐÂ i niệm.lnk
%TEMP%\slider_tmp.png
<Current directory>\update.xml
<Current directory>\adddep.bat.tmp
<Current directory>\autojx\autotrainjx.exe.tmp
<Current directory>\autojx\data\vlmienphi.pak.tmp
<Current directory>\autojx\managedwinapi.dll.tmp
<Current directory>\autojx\pacthauto\confighwid.ini.tmp
<Current directory>\autojx\pacthauto\core.dll.tmp
<Current directory>\autojx\pacthauto\ttthvlbs.exe.tmp
<Current directory>\autojx\pacthauto\vlbs13\autovlbs.exe.tmp
<Current directory>\autojx\pacthauto\vlbs13\config.ini.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\1.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\100.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\101.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\11.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\121.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\137.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\139.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\153.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\160.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\162.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\174.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\175.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\176.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\185.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\190.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\20.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\224.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\225.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\226.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\227.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\30.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\325.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\342.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\37.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\380.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\383.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\386.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\47.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\53.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\54.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\586.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\587.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\589.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\590.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\591.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\593.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\594.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\595.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\597.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\606.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\78.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\80.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\86.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\900.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\904.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\986.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\988.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\989.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\99.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\maplist.ini.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\phongkytren.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\935.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\936.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\937.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\938.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\939.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\940.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\maps\941.map.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\chuyenvatpham.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\datau_dunglongden.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\gomvatpham.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahoangkim.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahuyhoang.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\layhongbao.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\laylochongbao.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\layloclenhbai.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\laymocnhan.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\lib\vulanlib.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\muatdp_daohoanguyen.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\raovat.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\scripts\ruttiendong_tientrang.lua.tmp
<Current directory>\autojx\pacthauto\vlbs13\userdata\cajdiji.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs13\userdata\mitssusu.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs13\userdata\mittoteo.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs13\userdata\supporter05.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs13\vn.fon.tmp
<Current directory>\autojx\pacthauto\vlbs19\autovlbs.exe.tmp
<Current directory>\autojx\pacthauto\vlbs19\config.ini.tmp
<Current directory>\autojx\pacthauto\vlbs19\confighwid.ini.tmp
<Current directory>\autojx\pacthauto\vlbs19\core.dll.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\1.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\100.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\101.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\11.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\121.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\137.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\139.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\153.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\160.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\162.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\174.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\175.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\176.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\185.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\190.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\20.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\224.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\225.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\226.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\227.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\30.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\325.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\342.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\37.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\380.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\383.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\386.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\47.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\53.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\54.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\586.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\587.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\589.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\590.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\591.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\593.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\594.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\595.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\597.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\606.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\78.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\80.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\86.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\900.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\904.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\986.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\988.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\989.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\99.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\maplist.ini.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\phongkytren.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\935.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\936.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\937.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\938.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\939.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\940.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\maps\941.map.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\chuyenvatpham.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\datau_dunglongden.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\gomvatpham.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahoangkim.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahuyhoang.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\layhongbao.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\laylochongbao.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\layloclenhbai.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\laymocnhan.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\lib\vulanlib.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\muatdp_daohoanguyen.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\raovat.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\scripts\ruttiendong_tientrang.lua.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\07777777.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\devgame.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\devqsrpec.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\namson.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\volamsumon.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\111111.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\123123123.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\222222.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\33ttttt.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\boss-39game.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\cl66666.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\gamemaster.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\vd11111.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-3910.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-398.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-399.cfg.tmp
<Current directory>\autojx\pacthauto\vlbs19\winmm.dll.tmp
<Current directory>\autojx\pacthauto\winmm.dll.tmp

Deletes following files that it created itself

%TEMP%\autoupdate.tmp.exe
%TEMP%\{1076a44b-fba1-4893-9b77-45ff15ea3ea0}.png
%TEMP%\{1609fbac-3109-4f2a-a29b-ecfa1fe5b72c}.png
%LOCALAPPDATA%\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.{045a2d90-7ff5-b2d9-8968-62e084bf191b}.png

Moves the following files

from <Current directory>\adddep.bat.tmp to <Current directory>\adddep.bat
from <Current directory>\autojx\autotrainjx.exe.tmp to <Current directory>\autojx\autotrainjx.exe
from <Current directory>\autojx\data\vlmienphi.pak.tmp to <Current directory>\autojx\data\vlmienphi.pak
from <Current directory>\autojx\managedwinapi.dll.tmp to <Current directory>\autojx\managedwinapi.dll
from <Current directory>\autojx\pacthauto\confighwid.ini.tmp to <Current directory>\autojx\pacthauto\confighwid.ini
from <Current directory>\autojx\pacthauto\core.dll.tmp to <Current directory>\autojx\pacthauto\core.dll
from <Current directory>\autojx\pacthauto\ttthvlbs.exe.tmp to <Current directory>\autojx\pacthauto\ttthvlbs.exe
from <Current directory>\autojx\pacthauto\vlbs13\autovlbs.exe.tmp to <Current directory>\autojx\pacthauto\vlbs13\autovlbs.exe
from <Current directory>\autojx\pacthauto\vlbs13\config.ini.tmp to <Current directory>\autojx\pacthauto\vlbs13\config.ini
from <Current directory>\autojx\pacthauto\vlbs13\maps\1.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\1.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\100.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\100.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\101.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\101.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\11.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\11.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\121.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\121.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\137.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\137.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\139.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\139.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\153.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\153.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\160.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\160.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\162.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\162.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\174.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\174.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\175.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\175.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\176.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\176.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\185.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\185.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\190.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\190.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\20.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\20.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\224.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\224.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\225.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\225.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\226.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\226.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\227.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\227.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\30.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\30.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\325.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\325.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\342.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\342.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\37.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\37.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\380.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\380.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\383.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\383.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\386.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\386.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\47.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\47.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\53.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\53.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\54.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\54.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\586.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\586.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\587.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\587.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\589.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\589.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\590.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\590.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\591.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\591.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\593.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\593.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\594.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\594.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\595.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\595.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\597.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\597.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\606.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\606.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\78.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\78.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\80.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\80.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\86.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\86.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\900.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\900.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\904.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\904.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\986.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\986.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\988.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\988.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\989.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\989.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\99.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\99.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\maplist.ini.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\maplist.ini
from <Current directory>\autojx\pacthauto\vlbs13\maps\phongkytren.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\phongkytren.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\935.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\935.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\936.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\936.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\937.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\937.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\938.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\938.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\939.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\939.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\940.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\940.map
from <Current directory>\autojx\pacthauto\vlbs13\maps\941.map.tmp to <Current directory>\autojx\pacthauto\vlbs13\maps\941.map
from <Current directory>\autojx\pacthauto\vlbs13\scripts\chuyenvatpham.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\chuyenvatpham.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\datau_dunglongden.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\datau_dunglongden.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\gomvatpham.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\gomvatpham.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahoangkim.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahoangkim.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahuyhoang.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\haiquahuyhoang.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\layhongbao.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\layhongbao.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\laylochongbao.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\laylochongbao.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\layloclenhbai.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\layloclenhbai.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\laymocnhan.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\laymocnhan.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\lib\vulanlib.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\lib\vulanlib.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\muatdp_daohoanguyen.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\muatdp_daohoanguyen.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\raovat.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\raovat.lua
from <Current directory>\autojx\pacthauto\vlbs13\scripts\ruttiendong_tientrang.lua.tmp to <Current directory>\autojx\pacthauto\vlbs13\scripts\ruttiendong_tientrang.lua
from <Current directory>\autojx\pacthauto\vlbs13\userdata\cajdiji.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs13\userdata\cajdiji.cfg
from <Current directory>\autojx\pacthauto\vlbs13\userdata\mitssusu.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs13\userdata\mitssusu.cfg
from <Current directory>\autojx\pacthauto\vlbs13\userdata\mittoteo.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs13\userdata\mittoteo.cfg
from <Current directory>\autojx\pacthauto\vlbs13\userdata\supporter05.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs13\userdata\supporter05.cfg
from <Current directory>\autojx\pacthauto\vlbs13\vn.fon.tmp to <Current directory>\autojx\pacthauto\vlbs13\vn.fon
from <Current directory>\autojx\pacthauto\vlbs19\autovlbs.exe.tmp to <Current directory>\autojx\pacthauto\vlbs19\autovlbs.exe
from <Current directory>\autojx\pacthauto\vlbs19\config.ini.tmp to <Current directory>\autojx\pacthauto\vlbs19\config.ini
from <Current directory>\autojx\pacthauto\vlbs19\confighwid.ini.tmp to <Current directory>\autojx\pacthauto\vlbs19\confighwid.ini
from <Current directory>\autojx\pacthauto\vlbs19\core.dll.tmp to <Current directory>\autojx\pacthauto\vlbs19\core.dll
from <Current directory>\autojx\pacthauto\vlbs19\maps\1.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\1.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\100.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\100.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\101.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\101.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\11.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\11.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\121.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\121.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\137.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\137.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\139.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\139.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\153.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\153.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\160.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\160.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\162.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\162.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\174.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\174.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\175.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\175.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\176.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\176.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\185.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\185.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\190.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\190.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\20.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\20.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\224.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\224.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\225.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\225.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\226.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\226.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\227.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\227.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\30.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\30.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\325.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\325.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\342.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\342.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\37.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\37.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\380.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\380.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\383.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\383.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\386.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\386.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\47.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\47.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\53.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\53.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\54.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\54.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\586.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\586.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\587.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\587.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\589.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\589.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\590.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\590.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\591.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\591.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\593.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\593.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\594.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\594.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\595.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\595.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\597.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\597.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\606.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\606.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\78.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\78.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\80.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\80.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\86.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\86.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\900.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\900.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\904.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\904.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\986.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\986.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\988.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\988.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\989.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\989.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\99.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\99.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\maplist.ini.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\maplist.ini
from <Current directory>\autojx\pacthauto\vlbs19\maps\phongkytren.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\phongkytren.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\935.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\935.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\936.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\936.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\937.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\937.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\938.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\938.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\939.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\939.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\940.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\940.map
from <Current directory>\autojx\pacthauto\vlbs19\maps\941.map.tmp to <Current directory>\autojx\pacthauto\vlbs19\maps\941.map
from <Current directory>\autojx\pacthauto\vlbs19\scripts\chuyenvatpham.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\chuyenvatpham.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\datau_dunglongden.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\datau_dunglongden.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\gomvatpham.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\gomvatpham.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahoangkim.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahoangkim.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahuyhoang.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\haiquahuyhoang.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\layhongbao.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\layhongbao.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\laylochongbao.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\laylochongbao.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\layloclenhbai.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\layloclenhbai.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\laymocnhan.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\laymocnhan.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\lib\vulanlib.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\lib\vulanlib.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\muatdp_daohoanguyen.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\muatdp_daohoanguyen.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\raovat.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\raovat.lua
from <Current directory>\autojx\pacthauto\vlbs19\scripts\ruttiendong_tientrang.lua.tmp to <Current directory>\autojx\pacthauto\vlbs19\scripts\ruttiendong_tientrang.lua
from <Current directory>\autojx\pacthauto\vlbs19\userdata\07777777.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\07777777.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\devgame.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\devgame.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\devqsrpec.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\devqsrpec.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\namson.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\namson.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\volamsumon.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\volamsumon.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\111111.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\111111.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\123123123.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\123123123.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\222222.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\222222.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\33ttttt.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\33ttttt.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\boss-39game.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\boss-39game.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\cl66666.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\cl66666.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\gamemaster.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\gamemaster.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\vd11111.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\vd11111.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-3910.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-3910.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-398.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-398.cfg
from <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-399.cfg.tmp to <Current directory>\autojx\pacthauto\vlbs19\userdata\vdvdvd-399.cfg
from <Current directory>\autojx\pacthauto\vlbs19\winmm.dll.tmp to <Current directory>\autojx\pacthauto\vlbs19\winmm.dll
from <Current directory>\autojx\pacthauto\winmm.dll.tmp to <Current directory>\autojx\pacthauto\winmm.dll

Substitutes the following files

%TEMP%\autoupdate.tmp.exe

Network activity

Connects to

'up####.jx-hoainiem.net':80
'up####.jx-hoainiem.net':443
'x1.#.lencr.org':80
'yr.#.lencr.org':80
'yr#.#.lencr.org':80

TCP

HTTP GET requests

http://x1.#.lencr.org/
http://yr.#.lencr.org/
http://yr#.#.lencr.org/117.crl
http://jx###ainiem.net/get_news.php
http://up####.jx-hoainiem.net/autoupdate/download.php?p=######################################

Other

'up####.jx-hoainiem.net':443

UDP

DNS ASK up####.jx-hoainiem.net
DNS ASK x1.#.lencr.org
DNS ASK yr.#.lencr.org
DNS ASK yr#.#.lencr.org
DNS ASK jx###ainiem.net

Miscellaneous

Creates and executes the following

'<Full path to file>'

Restarts the analyzed sample

Executes the following

'%WINDIR%\syswow64\cmd.exe' /C timeout 2 >nul && move /Y "%TEMP%\AutoUpdate.new.exe" "<Full path to file>" && start "" "<Full path to file>"
'%WINDIR%\syswow64\timeout.exe' 2
'%WINDIR%\syswow64\cmd.exe' /C timeout 2 >nul && move /Y "%TEMP%\AutoUpdate.new.exe" "<Full path to file>" && start "" "<Full path to file>"' (with hidden window)

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial