Trojan.DownLoader45.17113

Technical Information

Modifies file system

Creates the following files

%LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012022091420220915\index.dat

Modifies the following files

Network activity

Connects to

'go#####agmanager.com':443
'it###ell.ru.com':80
'microsoft.com':80
'go#####analytics.com':80
'fo###.#oogleapis.com':443
'fo###.gstatic.com':443
'am#####.outbrain.com':80
'co#####.facebook.net':443
'tr.##tbrain.com':80
'fi#######torage.googleapis.com':443

TCP

HTTP GET requests

http://www.it###ell.ru.com/jquery-1.11.0.min.js
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Roboto-Bold.7c18188784f21915f42a.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Georgia-Regular.f4b306eed95aa7d27484.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Georgia-Bold.d312a7a0fe830489de6c.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586101527005_heartbeat.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
http://am#####.outbrain.com/cp/obtp.js
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
http://tr.##tbrain.com/log?ob####################################################################################################################################################################...
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/runtime-es5.9502c56c7b8ec72c1df4.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/polyfills-es5.9482d8240e8c7859861f.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/main-es5.a486239d1b6b56551079.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Poppins-Bold.922cb3bc86ec0568c825.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Montserrat-Bold.a3b387c9388260479286.ttf
http://www.it###ell.ru.com/offer.php?id##########################################################################################################################################################...
http://www.it###ell.ru.com/favicon.ico
http://www.it###ell.ru.com/clicks/chapter2/GX-watch.php?si#######################################################################################################################################...
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/fbevents.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/obtp.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/gtm.js.download
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
http://www.go#####analytics.com/analytics.js
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.eot?
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/outline-icons.eot?
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.eot?
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/FredokaOne-Regular.4bb907265bb0cc90180d.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/JosefinSans-Regular.53931de48478e5acd136.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/JosefinSans-Bold.6d9e5dd5fa9def9c4bb2.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Montserrat-Regular.a8a117360e71de94ae3b.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/NotoSans-Regular.5a87cce84010f7cea085.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/NotoSans-Bold.98f0cacc6bb63b64b98a.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Oswald-Regular.7460aaf583642ad42ea8.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Oswald-Bold.4656077824d1c690c19b.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Poppins-Regular.dd1aed50244d7243b920.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/LuckiestGuy-Regular.08010c3c508ed427652e.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/Roboto-Regular.18d44f79b3979ec16886.ttf
http://www.it###ell.ru.com/clicks/chapter2/GX-watch_files/semantic.min.js.download