PUA.Win32.PAExec.AA

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Diese Malware hat keine Verbreitungsroutine.

Diese Malware hat keine Backdoor-Routine.

Diese Malware kann keine Daten stehlen.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Verbreitung

Diese Malware hat keine Verbreitungsroutine.

Backdoor-Routine

Diese Malware hat keine Backdoor-Routine.

Datendiebstahl

Diese Malware kann keine Daten stehlen.

Andere Details

Es macht Folgendes:

• It is used to launch Windows programs on remote Windows computers without needing to install software on the remote computer first.
• It returns the error code it receives from the application that is launched remotely.
• If it encounters an error, the return code will be one of the following:
  • -1 → Internal error
  • -2 → Command line error
  • -3 → Failed to launch app (locally)
  • -4 → Failed to copy PAExec to remote (connection to ADMIN$ might have failed)
  • -5 → Connection to server taking too long (timeout)
  • -6 → PAExec service could not be installed/started on remote server
  • -7 → Could not communicate with remote PAExec service
  • -8 → Failed to copy app to remote server
  • -9 → Failed to launch app (remotely)
  • -10 → App was terminated after timeout expired
  • -11 → Forcibly stopped with Ctrl-C / Ctrl-Break