Associated Malware Groups
The filename is associated with the malware groups:
- Worm
- Malware Dropper
- Cloaked Malware
- Malware Downloader
File Behavior
WEBSOFTCODECDRIVERN[n].EXE has been seen to perform the following behavior:
- This process creates other processes on disk
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- This Process Deletes Other Processes From Disk
- Creates new folders in the file system
- Copies files
- Registers a Dynamic Link Library File
- Executes a process using Internet Explorer
- Enables an In Process Object/Server - Common with DLL Injections
WEBSOFTCODECDRIVERN[n].EXE has been the subject of the following behavior:
- Executed from Temporary Folders
- Executed as a Process
- Created as a process on disk
- Has code inserted into its Virtual Memory space by other programs
- Deleted as a process from disk
- Terminated as a Process
- Downloaded from covert web sites without the user knowing
Country Of Origin
The filename WEBSOFTCODECDRIVERN[n].EXE was first seen on Jun 6 2008 in the following geographical regions of the Prevx community:
- SPAIN on Jun 6 2008
- POLAND on Jun 6 2008
- The EUROPEAN UNION on Jun 18 2008
- FRANCE on Sep 29 2008
File Name Aliases
WEBSOFTCODECDRIVERN[n].EXE can also use the following file names:
- WEBSOFTCODECDRIVERN[1].EXE
- T13.PHP
- 09234608.DAT
- 28421938.DAT
- WEBSOFTCODECDRIVERN[2].EXE
- WEBSOFTCODECDRIVERN.0702-08-1.EXE
- 28685418.DAT
- 01C921819D83F1C0_T13_PHP.PE
- WEBSOFTCODECDRIVERN.0629-20.EXE
- MEDIA.PHP
- 50468412.EXE
- 70228094.DAT
- 59306706.EXE
- WEBSOFTCODECDRIVERN.0619-20-2.EXE
- 45254447.DAT
Filesizes
The following file size has been seen:
- 395,462 bytes
- 290,900 bytes
- 373,922 bytes
- 290,628 bytes
- 34,816 bytes
- 122,880 bytes
- 306,662 bytes
- 327,692 bytes
File Type
The filename WEBSOFTCODECDRIVERN[n].EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.