Technical Information
Modifies file system
Creates the following files
- %TEMP%\2a075027\8x9y2dvlt7tyglj.dat
- C:\users\administrator\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\administrator\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\guest\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %LOCALAPPDATA%\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %LOCALAPPDATA%\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %WINDIR%\syswow64\grouppolicy\gpt.ini
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\gssbq@c.org\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\gssbq@c.org\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\gssbq@c.org\content\gxk.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %LOCALAPPDATA%\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\torch\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\gssbq@c.org\install.rdf
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\ycvs.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\pv2.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\ubw1qxgyn.js
- %TEMP%\2a075027\gssbq@c.org\install.rdf
- %TEMP%\2a075027\gssbq@c.org\chrome.manifest
- %TEMP%\2a075027\gssbq@c.org\bootstrap.js
- %TEMP%\2a075027\gssbq@c.org\content\gxk.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\pv2.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ubw1qxgyn.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\ycvs.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\glbmnfhkjdolaeeflolcfeneaknojmhd\3.0\manifest.json
- %ALLUSERSPROFILE%\f86a60ece7abfba8\{64a4abca-cf3d-c548-2dc4-72a55dc5882a}.20220716124631
Deletes the following files
- %TEMP%\2a075027\8x9y2dvlt7tyglj.dat
- %TEMP%\2a075027\gssbq@c.org\content\gxk.js
- %TEMP%\2a075027\gssbq@c.org\bootstrap.js
- %TEMP%\2a075027\gssbq@c.org\chrome.manifest
- %TEMP%\2a075027\gssbq@c.org\install.rdf
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\ubw1qxgyn.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\pv2.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\ycvs.js
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\background.html
- %TEMP%\2a075027\glbmnfhkjdolaeeflolcfeneaknojmhd\manifest.json
Modifies the following files
- %LOCALAPPDATA%\google\chrome\user data\local state
- %LOCALAPPDATA%\google\chrome\user data\default\preferences
Substitutes the following files
- %ALLUSERSPROFILE%\ntuser.pol
Miscellaneous
Executes the following
- '<SYSTEM32>\raserver.exe' /offerraupdate
