Analisado por: Jaime Benigno Reyes   
 Modificado por: : Cris Nowell Pantanilla
 Plataforma:

Windows

 Classificao do risco total:
 Potencial de dano:
 Potencial de distribuição:
 infecção relatada:
 Exposição das informações:
Baixo
Medium
Alto
Crítico

  • Tipo de grayware:
    Adware

  • Destrutivo:
    Não

  • Criptografado:
     

  • In the Wild:
    Sim

  Visão geral

Wird möglicherweise manuell von einem Benutzer installiert.

Zum Zeitpunkt der Fertigstellung dieses Dokuments sind die erwähnten Sites jedoch nicht zugänglich.

  Detalhes técnicos

Tipo de compactação: 2,610,688 bytes
Tipo de arquivo: EXE
Residente na memória: Não
Data de recebimento das amostras iniciais: 05 maio 2015

Übertragungsdetails

Wird möglicherweise manuell von einem Benutzer installiert.

Download-Routine

Öffnet die folgenden Websites, um Dateien herunterzuladen:

  • http://{BLOCKED}sions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=dotnet_version_4.0&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}ssions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=download_textarea_error&spsource=google_pdfcreator-display-CA-336x280_gif_borders&referrer=http://install2.optimum-installer.com/config/PDFCreator/offers.json?version=1.0&pid=installer&ts=2012-09-24T15:35:25.9486485Z&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}sions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=dpi_1&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}essions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=install_bad_config&spsource=google_pdfcreator-display-CA-336x280_gif_borders&referrer=http://install2.optimum-installer.com/config/PDFCreator/offers.json?version=1.0&pid=installer&ts=2012-09-24T15:35:25.9486485Z&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}pressions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=json_installer_initialize_5218&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}essions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=offer_0_accepted_&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://{BLOCKED}sions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=setup_complete&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://i{BLOCKED}ssions-proxy-1085035873.us-east-1.elb.amazonaws.com/impression.do/?user_id=99827062-3b3c-4104-8166-ceb556821a28&event=setup_run&spsource=google_pdfcreator-display-CA-336x280_gif_borders&subid=software&subid2=www.download.hr&traffic_source=google_wisedownloads&offer_id=PDFCreator
  • http://i{BLOCKED}ll2.optimum-installer.com/config/PDFCreator/offers.json?version=1.0&pid=installer&ts=2012-09-24T15:35:25.9486485Z
  • http://www.{BLOCKED}ownloads.com/Installer/Complete?source=google_pdfcreator-display-CA-336x280_gif_borders&reason=cancel&user_id=99827062-3b3c-4104-8166-ceb556821a28&ask=False

Zum Zeitpunkt der Fertigstellung dieses Dokuments sind die erwähnten Sites jedoch nicht zugänglich.