File Behavior
N22[1].EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Uses rootkit techniques to conceal its presence, interrogation or removal
- Found on infected systems and resists interrogation by security products
N22[1].EXE has been the subject of the following behavior:
- Executed as a Process
- Deleted as a process from disk
- Created as a process on disk
Country Of Origin
The filename N22[1].EXE was first seen on Dec 31 2009 in the following geographical regions of the Prevx community:
- Hungary on Dec 31 2009
- Colombia on Dec 31 2009
- Greece on Jan 13 2010
- Guatemala on Feb 19 2010
- Pakistan on Feb 19 2010
- Russian Federation on Mar 1 2010
- Serbia on Mar 1 2010
- The United States on Mar 8 2010
- Libyan Arab Jamahiriya on Mar 19 2010
- Philippines on Mar 19 2010
File Name Aliases
N22[1].EXE can also use the following file names:
- N22[nn].EXE
- N22CARPE11A.EXE
- N22CA9UNCFK.EXE
- N22CA3U7X32.EXE
- N22CAVA6NFT.EXE
- N22CAA2CZFW.EXE
- N22CAGEWKT1.EXE
- N22CAUUCX9B.EXE
- N22CAXE7CN3.EXE
- N22CAXL5EYC.EXE
- N22CAB2201K.EXE
- N22CAJL3HHC.EXE
- N22CATU2EX5.EXE
- N22CAWJA90O.EXE
- N22CASMZDX4.EXE
- N22CAX6MJCX.EXE
- N22CARFPPQB.EXE
- N22CAAD1GFD.EXE
- N22CAFGH2VU.EXE
- N22CAJBJVI3.EXE
- 895649402EXE.640
- 1429772651EXE
- 253354042EXE
- 897848578EXE
- 1015393475EXE. 1780
- 318843522EXE
- 564808402EXE
- 156699162EXE
- 980601153EXE
- 1084088116EXE
- 790423253EXE
- 1400423089EXE
- 426873832EXE
- 243178335EXE
- 2137858729EXE. 1064
- 93193146.DAT
Filesizes
The following file size has been seen:
- 106,496 bytes
- 107,008 bytes
- 108,544 bytes
File Type
The filename N22[1].EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.