Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- '21#.#08.252.185':80
- 'pr####.fling.com':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK �#u�a�
- DNS ASK �#�[d
- DNS ASK �#�) V
- DNS ASK �#ȓ��
- DNS ASK �#Y�
- DNS ASK �#l�w
- DNS ASK pr####.fling.com
- DNS ASK �#�wj
- DNS ASK �#j�B�
- DNS ASK �#�*
- '67.##0.181.199':16471
- '24.##1.72.194':16471
- '11#.#4.56.206':16471
- '98.##5.140.200':16471
- '24.##1.206.193':16471
- '75.##.248.190':16471
- '72.##5.241.190':16471
- '74.##0.221.192':16471
- '18#.#3.208.191':16471
- '12#.#71.212.206':16471
- '20#.#58.223.212':16471
- '31.##0.226.208':16471
- '68.##.49.214':16471
- '95.##.50.213':16471
- '92.##.30.208':16471
- '66.##2.109.207':16471
- '50.##.246.206':16471
- '11#.#44.7.208':16471
- '24.##6.210.207':16471
- '99.##.30.190':16471
- '69.##8.100.181':16471
- '69.##5.30.181':16471
- '83.##7.198.182':16471
- '18#.#9.238.181':16471
- '10#.#21.238.180':16471
- '79.##7.229.176':16471
- '22#.#58.79.175':16471
- '66.##3.51.179':16471
- '18#.#0.42.179':16471
- '17#.#8.42.183':16471
- '71.##5.67.189':16471
- '5.#.234.188':16471
- '67.##0.24.190':16471
- '11#.#03.7.190':16471
- '11#.#35.76.188':16471
- '72.##8.229.183':16471
- '11#.#33.48.183':16471
- '24.##0.183.187':16471
- '98.##2.84.186':16471
- '24.##3.224.216':16471
- '98.##6.48.244':16471
- '69.##9.50.242':16471
- '76.##6.95.245':16471
- '24.##6.141.244':16471
- '50.##.130.241':16471
- '99.##3.194.238':16471
- '87.##.29.238':16471
- '71.##.229.239':16471
- '75.##1.181.239':16471
- '83.##6.96.245':16471
- '21#.#12.134.252':16471
- '76.#5.3.252':16471
- '69.##3.116.253':16471
- '70.##.10.253':16471
- '75.##.99.249':16471
- '76.##.135.245':16471
- '18#.#69.100.245':16471
- '69.##3.18.249':16471
- '17#.#.193.246':16471
- '70.##3.244.233':16471
- '76.##7.121.222':16471
- '12#.#66.2.222':16471
- '17#.#4.163.223':16471
- '67.##0.156.222':16471
- '90.##9.137.221':16471
- '67.##8.108.217':16471
- '62.#.11.217':16471
- '11#.#24.197.217':16471
- '67.##5.178.217':16471
- '68.##.33.225':16471
- '17#.#8.203.233':16471
- '11#.#45.128.233':16471
- '11#.#54.231.233':16471
- '70.##2.217.233':16471
- '95.##8.86.233':16471
- '17#.#34.72.230':16471
- '24.##.41.227':16471
- '65.##.209.232':16471
- '70.##.185.232':16471