Threat Database Trojans Trojan.Crackonosh

Trojan.Crackonosh

By CagedTech in Trojans

Threat Scorecard

Ranking: 2,088
Threat Level: 80 % (High)
Infected Computers: 128,059
First Seen: June 28, 2021
Last Seen: April 20, 2025
OS(es) Affected: Windows

File System Details

Trojan.Crackonosh may create the following file(s):
# File Name MD5 Detections
1. ServiceInstaller.msi 156dab1b32859a3b90bdbfa51e7559e2 721
2. startupcheck.vbs b6a58f7b79567b6aa575a807840f5cbd 490
3. maintenance.vbs 4cb3b51e35ad2e8039152008f966061e 297
4. winrmsrv.exe e5ec4f6b803a7025e0278da1b54feae0 47
5. wksprtcli.dll c7308958986fe345e3576f49fc4fc153 12
6. windfn.exe 165b5b6f085f735ec8bf30be40be0598 6
7. winlogui.exe 186dfb9f55b62e7739a773024050dee3 2
8. startupchecklibrary.dll 38421cd27b886d8627c28fd64faa7b68 2
9. ServiceInstaller.msi 79538329ec6c83d3539c71210e5648c4 2
10. ServiceInstaller.exe e0b559ff1b7b4873d9e229b91039884e 2
11. winscomrssrv.dll 6ee92d315a2d53d4b878ec913443dd6f 1
More files

Registry Details

Trojan.Crackonosh may create the following registry entry or registry entries:
File name without path
7B296FC0-376B-497d-B013-58F4D9633A22-5P-1.B5841A4C-A289-439d-8115-50AB69CD450
7B296FC0-376B-497d-B013-58F4D9633A22-5P-1.B5841A4C-A289-439d-8115-50AB69CD450B
UserAccountControlSettingsDevice.dat
Regexp file mask
%windir%\system32\maintenance.vbs
%windir%\system32\startupcheck.vbs
%windir%\system32\tasks\microsoft\windows\application experience\startupchecklibrary
%windir%\system32\tasks\microsoft\windows\maintenance\installwinsat
%windir%\system32\tasks\microsoft\windows\wdi\srvhost
%windir%\system32\tasks\microsoft\windows\windows error reporting\winrmsrv
%windir%\system32\tasks\microsoft\windows\wininet\winlogui
%windir%\system32\tasks\srvhost
%windir%\system32\tasks\sysinfo
%windir%\system32\tasks\winlogui
%windir%\system32\tasks\winrmsrv

Trending

Most Viewed

Loading...