Trojan.Siggen33.1493

Technical Information

Malicious functions

To complicate detection of its presence in the operating system,

adds antivirus exclusion:

'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden -Command "$ErrorActionPreference='SilentlyContinue'; Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\Microsoft'; Add-MpPreference -ExclusionPath '%LOCALAPPDATA%\Temp'; Add-M...

Modifies file system

Creates the following files

%APPDATA%\losslessscaling\losslessscaling 1.0.0\install\losslessscaling.msi
%TEMP%\shi44e4.tmp
%TEMP%\msi45b0.tmp
%TEMP%\msi49c8.tmp
%TEMP%\msi4b50.tmp
%TEMP%\msi4bed.tmp
%APPDATA%\losslessscaling\losslessscaling 1.0.0\install\losslessscaling1.cab
%WINDIR%\temp\~df7ca2aabe57a9177e.tmp
%WINDIR%\installer\sourcehash{283ff56e-b177-4228-b96f-1e856c5a57f8}
%WINDIR%\temp\~df04cca9595308a5a8.tmp
%WINDIR%\temp\~df7ecd280c5dfbda4f.tmp
%WINDIR%\temp\~dfe9b068dce154e70d.tmp
%LOCALAPPDATA%\losslessscaling\effects\acnet.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_3d_aa_upscale_us.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_3d_upscale_us.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_denoise_bilateral_mean.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_denoise_bilateral_median.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_denoise_bilateral_mode.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_l.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_m.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_s.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_soft_l.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_soft_m.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_soft_s.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_soft_ul.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_soft_vl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_ul.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_restore_vl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_thin_hq.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_denoise_l.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_denoise_s.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_denoise_ul.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_denoise_vl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_gan_x2_m.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_gan_x2_s.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_gan_x3_l.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_l.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_s.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_ul.hlsl
%LOCALAPPDATA%\losslessscaling\effects\anime4k\anime4k_upscale_vl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\bicubic.hlsl
%LOCALAPPDATA%\losslessscaling\effects\bilinear.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cas\cas.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cas\cas_scaling.hlsl
%LOCALAPPDATA%\losslessscaling\effects\crt\crt_easymode.hlsl
%LOCALAPPDATA%\losslessscaling\effects\crt\crt_geom.hlsl
%LOCALAPPDATA%\losslessscaling\effects\crt\crt_hyllian.hlsl
%LOCALAPPDATA%\losslessscaling\effects\crt\crt_lottes.hlsl
%LOCALAPPDATA%\losslessscaling\effects\crt\data\be\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\bg\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\bn\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\ca\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\cs\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\cy\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\data.7z
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\net_framework_4.8.bat
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\update.vbs
%LOCALAPPDATA%\losslessscaling\effects\crt\data\de\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\el\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\en\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\en_ca\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\en_gb\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\en_us\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\es\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\es_419\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\et\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\eu\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\fa\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\fi\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\fil\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\fr\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\fr_ca\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\gl\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\gu\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\hi\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\hr\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\hu\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\data\hy\messages.json
%LOCALAPPDATA%\losslessscaling\effects\crt\gtu_v050.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-16x16c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-16x16c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-2x4c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-2x4c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-3x4c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-3x4c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x16c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x16c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x4c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x4c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x8c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-4x8c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-6x8c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-6x8c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x16c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x16c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x4c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x4c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x8c-nvl-dn.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny\cunny-8x8c-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-3x12-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-4x12-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-4x16-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-4x24-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-4x32-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-8x32-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-fast-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-faster-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\cunny2\cunny-veryfast-nvl.hlsl
%LOCALAPPDATA%\losslessscaling\effects\deband.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fsr\fsr_easu.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fsr\fsr_rcas.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fsrcnnx\fsrcnnx.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fsrcnnx\fsrcnnx_lineart.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fxaa\fxaa.hlsli
%LOCALAPPDATA%\losslessscaling\effects\fxaa\fxaa_high.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fxaa\fxaa_medium.hlsl
%LOCALAPPDATA%\losslessscaling\effects\fxaa\fxaa_ultra.hlsl
%LOCALAPPDATA%\losslessscaling\effects\imageadjustment.hlsl
%LOCALAPPDATA%\losslessscaling\effects\jinc.hlsl
%LOCALAPPDATA%\losslessscaling\effects\lanczos.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nearest.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nis\coef_scale.dds
%LOCALAPPDATA%\losslessscaling\effects\nis\coef_usm.dds
%LOCALAPPDATA%\losslessscaling\effects\nis\nis.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nis\nis_scaler.hlsli
%LOCALAPPDATA%\losslessscaling\effects\nis\nvsharpen.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns128_win8x4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns128_win8x6.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns16_win8x4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns16_win8x6.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns256_win8x4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns256_win8x6.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns32_win8x4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns32_win8x6.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns64_win8x4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\nnedi3_nns64_win8x6.hlsl
%LOCALAPPDATA%\losslessscaling\effects\nnedi3\prescalers.hlsli
%LOCALAPPDATA%\losslessscaling\effects\pixel art\mmpx.hlsl
%LOCALAPPDATA%\losslessscaling\effects\pixel art\pixellate.hlsl
%LOCALAPPDATA%\losslessscaling\effects\pixel art\sharpbilinear.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\prescalers.hlsli
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_lut2_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_lut3_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_lut4_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r2_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r3_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_3x_r4_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_ar_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_ar_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_ar_r4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_lut2_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_lut3_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_lut4_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lite_r4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lut2_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lut3_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_lut4_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r2_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r3_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r4.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_r4_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_ar_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_ar_r2_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_ar_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_ar_r3_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_lut2_ar_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_lut2_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_lut3_ar_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_lut3_f16.dds
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_r2.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_r2_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_r3.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ravu\ravu_zoom_r3_rgb.hlsl
%LOCALAPPDATA%\losslessscaling\effects\sharpen\adaptivesharpen.hlsl
%LOCALAPPDATA%\losslessscaling\effects\sharpen\finesharp.hlsl
%LOCALAPPDATA%\losslessscaling\effects\sharpen\lcas.hlsl
%LOCALAPPDATA%\losslessscaling\effects\sharpen\lumasharpen.hlsl
%LOCALAPPDATA%\losslessscaling\effects\smaa\areatex.dds
%LOCALAPPDATA%\losslessscaling\effects\smaa\searchtex.dds
%LOCALAPPDATA%\losslessscaling\effects\smaa\smaa.hlsli
%LOCALAPPDATA%\losslessscaling\effects\smaa\smaa_high.hlsl
%LOCALAPPDATA%\losslessscaling\effects\smaa\smaa_low.hlsl
%LOCALAPPDATA%\losslessscaling\effects\smaa\smaa_medium.hlsl
%LOCALAPPDATA%\losslessscaling\effects\smaa\smaa_ultra.hlsl
%LOCALAPPDATA%\losslessscaling\effects\ssimdownscaler.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_2x.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_3x.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_4x.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_5x.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_6x.hlsl
%LOCALAPPDATA%\losslessscaling\effects\xbrz\xbrz_freescale.hlsl
%LOCALAPPDATA%\losslessscaling\losslessscaling.exe
%LOCALAPPDATA%\losslessscaling\microsoft.ui.xaml.dll
%LOCALAPPDATA%\losslessscaling\resources.pri
%LOCALAPPDATA%\losslessscaling\touchhelper.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\losslessscaling\losslessscaling.exe.lnk
C:\users\public\desktop\losslessscaling.exe.lnk
%WINDIR%\temp\~dfcab9553a2c6cb815.tmp
%WINDIR%\temp\~dfd25ac5240dd854af.tmp
%WINDIR%\temp\~df1e58bb1c2e5beab5.tmp
%WINDIR%\temp\~df80db2a423dfcf522.tmp
nul
%TEMP%\getadmin.vbs
%APPDATA%\winrar\version.dat
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\garena\update.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\update.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\ada92cb5d92a588d1b93__mypyc.cp310-win_amd64.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\base_library.zip
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\certifi\cacert.pem
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\charset_normalizer\cd.cp310-win_amd64.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\charset_normalizer\md.cp310-win_amd64.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_arc4.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_chacha20.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_pkcs1_decode.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_aes.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_aesni.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_arc2.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_blowfish.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_cast.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_cbc.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_cfb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_ctr.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_des.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_des3.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_ecb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_eksblowfish.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_ocb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_raw_ofb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\cipher\_salsa20.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_blake2b.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_blake2s.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_ghash_clmul.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_ghash_portable.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_keccak.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_md2.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_md4.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_md5.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_poly1305.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_ripemd160.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_sha1.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_sha224.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_sha256.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_sha384.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\hash\_sha512.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\math\_modexp.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\protocol\_scrypt.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\publickey\_curve25519.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\publickey\_curve448.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\publickey\_ec_ws.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\publickey\_ed25519.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\publickey\_ed448.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\util\_cpuid_c.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\crypto\util\_strxor.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_arc4.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_chacha20.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_pkcs1_decode.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_aes.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_aesni.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_arc2.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_blowfish.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_cast.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_cbc.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_cfb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_ctr.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_des.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_des3.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_ecb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_eksblowfish.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_ocb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_raw_ofb.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\cipher\_salsa20.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_blake2b.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_blake2s.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_ghash_clmul.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_ghash_portable.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_keccak.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_md2.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_md4.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_md5.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_poly1305.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_ripemd160.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_sha1.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_sha224.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_sha256.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_sha384.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\hash\_sha512.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\math\_modexp.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\protocol\_scrypt.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\publickey\_curve25519.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\publickey\_curve448.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\publickey\_ec_ws.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\publickey\_ed25519.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\publickey\_ed448.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\util\_cpuid_c.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\cryptodome\util\_strxor.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\pyexpat.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\pythonwin\win32ui.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\select.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\entry_points.txt
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\installer
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\license
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\metadata
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\record
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\top_level.txt
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\setuptools-65.5.0.dist-info\wheel
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\unicodedata.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\win32\win32api.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\win32\win32event.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\win32\win32trace.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\win32\_win32sysloader.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\win32com\shell\shell.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_asyncio.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_bz2.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_cffi_backend.cp310-win_amd64.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_ctypes.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_decimal.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_hashlib.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_lzma.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_multiprocessing.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_overlapped.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_queue.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_socket.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_sqlite3.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_ssl.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\_uuid.pyd
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\update\update.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\libcrypto-1_1.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\libffi-7.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\libssl-1_1.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\python310.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\pywin32_system32\pythoncom310.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\pywin32_system32\pywintypes310.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\sqlite3.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\vcruntime140.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\temp\microsoftedge\_internal\vcruntime140_1.dll
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\uninstall.exe

Deletes following files that it created itself

%TEMP%\shi44e4.tmp
%TEMP%\msi45b0.tmp
%TEMP%\msi49c8.tmp
%TEMP%\msi4b50.tmp
%TEMP%\msi4bed.tmp
%LOCALAPPDATA%\losslessscaling\effects\crt\data\da\net_framework_4.8.bat

Miscellaneous

Searches for the following windows

ClassName: 'WinRarWindow' WindowName: ''

Creates and executes the following

'%WINDIR%\installer\msibccc.tmp' "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da\Update.vbs"
'<SYSTEM32>\wscript.exe' "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da\Update.vbs"
'<SYSTEM32>\wscript.exe' "%TEMP%\getadmin.vbs"

Executes the following

'%WINDIR%\syswow64\msiexec.exe' /i "%APPDATA%\losslessscaling\losslessscaling 1.0.0\install\losslessscaling.msi" AI_SETUPEXEPATH=<Full path to file> SETUPEXEDIR=<Current directory>\ EXE_CMD_LINE="/exenoupdates /forcecleanup ...
'<SYSTEM32>\cmd.exe' /c .\NET_Framework_4.8.bat
'<SYSTEM32>\cacls.exe' "<SYSTEM32>\config\system"
'<SYSTEM32>\cmd.exe' /C "%LOCALAPPDATA%\LOSSLE~1\effects\CRT\data\da\NET_FR~1.BAT"
'%ProgramFiles%\winrar\winrar.exe' x -pREADME "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da\data.7z" *.* "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da"
'<SYSTEM32>\cmd.exe' /c .\NET_Framework_4.8.bat' (with hidden window)
'%ProgramFiles%\winrar\winrar.exe' x -pREADME "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da\data.7z" *.* "%LOCALAPPDATA%\losslessscaling\effects\CRT\data\da"' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations