Trojan.Siggen23.8700

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-q8b89.tmp\<File name>.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-l7t4p.tmp
%ProgramFiles(x86)%\videomix\iconengines\is-pc2vt.tmp
%ProgramFiles(x86)%\videomix\bearer\is-biae6.tmp
%ProgramFiles(x86)%\videomix\audio\is-8slqg.tmp
%ProgramFiles(x86)%\videomix\audio\is-80kkk.tmp
%ProgramFiles(x86)%\videomix\is-m3bms.tmp
%ProgramFiles(x86)%\videomix\is-hstk6.tmp
%ProgramFiles(x86)%\videomix\is-s2o13.tmp
%ProgramFiles(x86)%\videomix\is-3kjfb.tmp
%ProgramFiles(x86)%\videomix\is-gfst1.tmp
%ProgramFiles(x86)%\videomix\is-u926e.tmp
%ProgramFiles(x86)%\videomix\is-c9f7d.tmp
%ProgramFiles(x86)%\videomix\is-75id6.tmp
%ProgramFiles(x86)%\videomix\is-nj9pq.tmp
%ProgramFiles(x86)%\videomix\is-eihdv.tmp
%ProgramFiles(x86)%\videomix\is-55cql.tmp
%ProgramFiles(x86)%\videomix\is-e3jae.tmp
%ProgramFiles(x86)%\videomix\is-6gkg8.tmp
%ProgramFiles(x86)%\videomix\is-vj6a8.tmp
%ProgramFiles(x86)%\videomix\is-9pps4.tmp
%ProgramFiles(x86)%\videomix\is-p908m.tmp
%ProgramFiles(x86)%\videomix\is-lk37b.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-2e4qb.tmp
%ProgramFiles(x86)%\videomix\playlistformats\is-86dg4.tmp
%ProgramFiles(x86)%\videomix\unins000.dat
%ProgramFiles(x86)%\videomix\is-1krl2.tmp
%ProgramFiles(x86)%\videomix\is-sfqum.tmp
%ProgramFiles(x86)%\videomix\is-lmm08.tmp
%ProgramFiles(x86)%\videomix\is-gs4c0.tmp
%ProgramFiles(x86)%\videomix\styles\is-hc3j7.tmp
%ProgramFiles(x86)%\videomix\printsupport\is-m3dta.tmp
%ProgramFiles(x86)%\videomix\position\is-qe8pc.tmp
%ProgramFiles(x86)%\videomix\position\is-vbmkr.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-uipa9.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-3qbof.tmp
%ProgramFiles(x86)%\videomix\platforms\is-cda04.tmp
%ProgramFiles(x86)%\videomix\mediaservice\is-nmja0.tmp
%ProgramFiles(x86)%\videomix\mediaservice\is-9s8oq.tmp
%ProgramFiles(x86)%\videomix\mediaservice\is-c3fce.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-0d2oq.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-uuqin.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-13ooo.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-f34rd.tmp
%ProgramFiles(x86)%\videomix\imageformats\is-1orbj.tmp
%ProgramFiles(x86)%\videomix\position\is-vj16c.tmp
%ProgramFiles(x86)%\videomix\is-b3s7q.tmp
%ProgramFiles(x86)%\videomix\is-2p111.tmp
%ProgramFiles(x86)%\videomix\is-ohs84.tmp
%ProgramFiles(x86)%\videomix\is-rrf53.tmp
%ProgramFiles(x86)%\videomix\is-6bu7h.tmp
%ProgramFiles(x86)%\videomix\is-abjl2.tmp
%ProgramFiles(x86)%\videomix\is-7bonq.tmp
%ProgramFiles(x86)%\videomix\is-jie2k.tmp
%ProgramFiles(x86)%\videomix\is-0f80e.tmp
%ProgramFiles(x86)%\videomix\is-829h2.tmp
%ProgramFiles(x86)%\videomix\is-vva21.tmp
%ProgramFiles(x86)%\videomix\is-3sh0l.tmp
%ProgramFiles(x86)%\videomix\is-rl26s.tmp
%ProgramFiles(x86)%\videomix\is-3rpfs.tmp
%ProgramFiles(x86)%\videomix\is-v5og0.tmp
%ProgramFiles(x86)%\videomix\is-cpcf2.tmp
%ProgramFiles(x86)%\videomix\is-fgdou.tmp
%ProgramFiles(x86)%\videomix\is-ijh0o.tmp
%TEMP%\is-o4unv.tmp\_isetup\_iscrypt.dll
%TEMP%\is-o4unv.tmp\_isetup\_shfoldr.dll
%TEMP%\is-o4unv.tmp\_isetup\_setup64.tmp
%TEMP%\is-o4unv.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\videomix\is-r5ung.tmp
%ProgramFiles(x86)%\videomix\is-kgn4g.tmp
%ProgramFiles(x86)%\videomix\is-7nnv5.tmp
%ProgramFiles(x86)%\videomix\is-47a50.tmp
%ProgramFiles(x86)%\videomix\is-sd07c.tmp
%ProgramFiles(x86)%\videomix\is-d384v.tmp
%ProgramFiles(x86)%\videomix\is-mvaks.tmp
%ProgramFiles(x86)%\videomix\is-0hoik.tmp
%ProgramFiles(x86)%\videomix\is-2m7l1.tmp
%ProgramFiles(x86)%\videomix\is-nioai.tmp
%ProgramFiles(x86)%\videomix\is-0ll3n.tmp
%ProgramFiles(x86)%\videomix\is-spce7.tmp
%ProgramFiles(x86)%\videomix\is-3qvqb.tmp
%ProgramFiles(x86)%\videomix\is-e1llr.tmp
%ProgramFiles(x86)%\videomix\is-50taj.tmp
%ProgramFiles(x86)%\videomix\is-j5i8a.tmp
%ProgramFiles(x86)%\videomix\is-n5n9n.tmp
%ProgramFiles(x86)%\videomix\is-cbpce.tmp
%ProgramFiles(x86)%\videomix\is-3al3m.tmp
%ProgramFiles(x86)%\videomix\is-1l0s6.tmp
%ProgramFiles(x86)%\videomix\is-rb1j5.tmp
%ProgramFiles(x86)%\videomix\is-9lf5j.tmp
%ProgramFiles(x86)%\videomix\is-8igdb.tmp
%ProgramFiles(x86)%\videomix\is-i7vd4.tmp
%ProgramFiles(x86)%\videomix\is-ft7j4.tmp
%ProgramFiles(x86)%\videomix\is-0b7cj.tmp
%ProgramFiles(x86)%\videomix\videomix.exe
%TEMP%\license.txt

Moves the following files

from %ProgramFiles(x86)%\videomix\is-ijh0o.tmp to %ProgramFiles(x86)%\videomix\unins000.exe
from %ProgramFiles(x86)%\videomix\iconengines\is-pc2vt.tmp to %ProgramFiles(x86)%\videomix\iconengines\qsvgicon.dll
from %ProgramFiles(x86)%\videomix\bearer\is-biae6.tmp to %ProgramFiles(x86)%\videomix\bearer\qgenericbearer.dll
from %ProgramFiles(x86)%\videomix\audio\is-8slqg.tmp to %ProgramFiles(x86)%\videomix\audio\qtaudio_windows.dll
from %ProgramFiles(x86)%\videomix\audio\is-80kkk.tmp to %ProgramFiles(x86)%\videomix\audio\qtaudio_wasapi.dll
from %ProgramFiles(x86)%\videomix\is-m3bms.tmp to %ProgramFiles(x86)%\videomix\qtwebengineprocess.exe
from %ProgramFiles(x86)%\videomix\is-hstk6.tmp to %ProgramFiles(x86)%\videomix\qt5webenginewidgets.dll
from %ProgramFiles(x86)%\videomix\is-s2o13.tmp to %ProgramFiles(x86)%\videomix\qt5webchannel.dll
from %ProgramFiles(x86)%\videomix\is-3kjfb.tmp to %ProgramFiles(x86)%\videomix\qt5svg.dll
from %ProgramFiles(x86)%\videomix\is-lk37b.tmp to %ProgramFiles(x86)%\videomix\maintainer_business.md
from %ProgramFiles(x86)%\videomix\is-u926e.tmp to %ProgramFiles(x86)%\videomix\qt5serialport.dll
from %ProgramFiles(x86)%\videomix\is-c9f7d.tmp to %ProgramFiles(x86)%\videomix\qt5printsupport.dll
from %ProgramFiles(x86)%\videomix\is-75id6.tmp to %ProgramFiles(x86)%\videomix\qt5positioning.dll
from %ProgramFiles(x86)%\videomix\is-nj9pq.tmp to %ProgramFiles(x86)%\videomix\qt5opengl.dll
from %ProgramFiles(x86)%\videomix\is-eihdv.tmp to %ProgramFiles(x86)%\videomix\qt5multimediawidgets.dll
from %ProgramFiles(x86)%\videomix\is-55cql.tmp to %ProgramFiles(x86)%\videomix\qt5multimedia.dll
from %ProgramFiles(x86)%\videomix\is-e3jae.tmp to %ProgramFiles(x86)%\videomix\libegl.dll
from %ProgramFiles(x86)%\videomix\is-6gkg8.tmp to %ProgramFiles(x86)%\videomix\changelog.txt
from %ProgramFiles(x86)%\videomix\is-vj6a8.tmp to %ProgramFiles(x86)%\videomix\gpl.txt
from %ProgramFiles(x86)%\videomix\is-p908m.tmp to %ProgramFiles(x86)%\videomix\qt5quickwidgets.dll
from %ProgramFiles(x86)%\videomix\is-9pps4.tmp to %ProgramFiles(x86)%\videomix\readme.md
from %ProgramFiles(x86)%\videomix\imageformats\is-l7t4p.tmp to %ProgramFiles(x86)%\videomix\imageformats\qgif.dll
from %ProgramFiles(x86)%\videomix\mediaservice\is-nmja0.tmp to %ProgramFiles(x86)%\videomix\mediaservice\wmfengine.dll
from %ProgramFiles(x86)%\videomix\is-lmm08.tmp to %ProgramFiles(x86)%\videomix\spoutlibrary.dll
from %ProgramFiles(x86)%\videomix\is-gs4c0.tmp to %ProgramFiles(x86)%\videomix\libssl-1_1.dll
from %ProgramFiles(x86)%\videomix\styles\is-hc3j7.tmp to %ProgramFiles(x86)%\videomix\styles\qwindowsvistastyle.dll
from %ProgramFiles(x86)%\videomix\printsupport\is-m3dta.tmp to %ProgramFiles(x86)%\videomix\printsupport\windowsprintersupport.dll
from %ProgramFiles(x86)%\videomix\position\is-qe8pc.tmp to %ProgramFiles(x86)%\videomix\position\qtposition_winrt.dll
from %ProgramFiles(x86)%\videomix\position\is-vbmkr.tmp to %ProgramFiles(x86)%\videomix\position\qtposition_serialnmea.dll
from %ProgramFiles(x86)%\videomix\position\is-vj16c.tmp to %ProgramFiles(x86)%\videomix\position\qtposition_positionpoll.dll
from %ProgramFiles(x86)%\videomix\playlistformats\is-86dg4.tmp to %ProgramFiles(x86)%\videomix\playlistformats\qtmultimedia_m3u.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-3qbof.tmp to %ProgramFiles(x86)%\videomix\imageformats\qico.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-2e4qb.tmp to %ProgramFiles(x86)%\videomix\imageformats\qicns.dll
from %ProgramFiles(x86)%\videomix\mediaservice\is-9s8oq.tmp to %ProgramFiles(x86)%\videomix\mediaservice\qtmedia_audioengine.dll
from %ProgramFiles(x86)%\videomix\mediaservice\is-c3fce.tmp to %ProgramFiles(x86)%\videomix\mediaservice\dsengine.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-0d2oq.tmp to %ProgramFiles(x86)%\videomix\imageformats\qwebp.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-uuqin.tmp to %ProgramFiles(x86)%\videomix\imageformats\qwbmp.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-13ooo.tmp to %ProgramFiles(x86)%\videomix\imageformats\qtiff.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-f34rd.tmp to %ProgramFiles(x86)%\videomix\imageformats\qtga.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-1orbj.tmp to %ProgramFiles(x86)%\videomix\imageformats\qsvg.dll
from %ProgramFiles(x86)%\videomix\imageformats\is-uipa9.tmp to %ProgramFiles(x86)%\videomix\imageformats\qjpeg.dll
from %ProgramFiles(x86)%\videomix\platforms\is-cda04.tmp to %ProgramFiles(x86)%\videomix\platforms\qwindows.dll
from %ProgramFiles(x86)%\videomix\is-gfst1.tmp to %ProgramFiles(x86)%\videomix\credits.md
from %ProgramFiles(x86)%\videomix\is-b3s7q.tmp to %ProgramFiles(x86)%\videomix\contributing.md
from %ProgramFiles(x86)%\videomix\is-2p111.tmp to %ProgramFiles(x86)%\videomix\building.md
from %ProgramFiles(x86)%\videomix\is-kgn4g.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-util-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-3sh0l.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-timezone-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-7nnv5.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-sysinfo-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-rrf53.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-synch-l1-2-0.dll
from %ProgramFiles(x86)%\videomix\is-6bu7h.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-synch-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-abjl2.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-string-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-7bonq.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-rtlsupport-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-n5n9n.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-conio-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-jie2k.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-profile-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-829h2.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-processthreads-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-vva21.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-processenvironment-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-rl26s.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-namedpipe-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-r5ung.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-memory-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-3rpfs.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-localization-l1-2-0.dll
from %ProgramFiles(x86)%\videomix\is-v5og0.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-libraryloader-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-cpcf2.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-interlocked-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-fgdou.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-heap-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-0f80e.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-processthreads-l1-1-1.dll
from %ProgramFiles(x86)%\videomix\is-0b7cj.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-convert-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-47a50.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-core-xstate-l2-1-0.dll
from %ProgramFiles(x86)%\videomix\is-ft7j4.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-environment-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-ohs84.tmp to %ProgramFiles(x86)%\videomix\backers.md
from %ProgramFiles(x86)%\videomix\is-e1llr.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-time-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-sd07c.tmp to %ProgramFiles(x86)%\videomix\qt.conf
from %ProgramFiles(x86)%\videomix\is-mvaks.tmp to %ProgramFiles(x86)%\videomix\stellarium-devdocs.url
from %ProgramFiles(x86)%\videomix\is-0hoik.tmp to %ProgramFiles(x86)%\videomix\stellarium.url
from %ProgramFiles(x86)%\videomix\is-2m7l1.tmp to %ProgramFiles(x86)%\videomix\vcruntime140.dll
from %ProgramFiles(x86)%\videomix\is-nioai.tmp to %ProgramFiles(x86)%\videomix\showmysky-qt5.dll
from %ProgramFiles(x86)%\videomix\is-0ll3n.tmp to %ProgramFiles(x86)%\videomix\msvcp140.dll
from %ProgramFiles(x86)%\videomix\is-spce7.tmp to %ProgramFiles(x86)%\videomix\concrt140.dll
from %ProgramFiles(x86)%\videomix\is-3qvqb.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-utility-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-50taj.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-string-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-i7vd4.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-filesystem-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-d384v.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-stdio-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-j5i8a.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-runtime-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-cbpce.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-process-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-3al3m.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-private-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-1l0s6.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-multibyte-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-rb1j5.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-math-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-9lf5j.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-locale-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-8igdb.tmp to %ProgramFiles(x86)%\videomix\api-ms-win-crt-heap-l1-1-0.dll
from %ProgramFiles(x86)%\videomix\is-sfqum.tmp to %ProgramFiles(x86)%\videomix\spout_licence.txt
from %ProgramFiles(x86)%\videomix\is-1krl2.tmp to %ProgramFiles(x86)%\videomix\videomix.exe

Network activity

Connects to

'mi####njobs.works':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

HTTP POST requests

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: 'fa1bb9_VM11271Class_fa1bb9'

Creates and executes the following

'%TEMP%\is-q8b89.tmp\<File name>.tmp' /SL5="$50238,6320905,54272,<Full path to file>"
'%ProgramFiles(x86)%\videomix\videomix.exe'
'%ProgramFiles(x86)%\videomix\videomix.exe' 37d8c645ff3f7454be71c62eb100937b

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "VM11271"
'%WINDIR%\syswow64\schtasks.exe' /Query

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial