Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- '21#.#08.252.185':80
- 'pr####.fling.com':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK p�#1Z�t
- DNS ASK p�#���
- DNS ASK p�#�ql.
- DNS ASK p�#��
- DNS ASK p�#.q�3
- DNS ASK p�#((�F
- DNS ASK pr####.fling.com
- DNS ASK p�#����
- DNS ASK p�#D
- '71.#0.80.24':16471
- '18#.#51.30.29':16471
- '21#.#18.7.15':16471
- '18#.#3.186.202':16471
- '98.##2.144.13':16471
- '99.##8.45.199':16471
- '61.#1.2.199':16471
- '96.##.213.31':16471
- '84.##0.37.29':16471
- '17#.#19.151.199':16471
- '20#.#96.66.204':16471
- '12#.#3.78.219':16471
- '24.#.237.216':16471
- '68.##5.140.220':16471
- '98.##6.244.226':16471
- '50.##.242.225':16471
- '75.##0.166.11':16471
- '70.##.168.12':16471
- '68.##4.120.9':16471
- '75.#42.78.9':16471
- '14#.#.226.207':16471
- '11#.#5.35.190':16471
- '98.##1.88.59':16471
- '11#.#92.226.190':16471
- '22#.#5.197.52':16471
- '96.#0.15.56':16471
- '67.##.163.63':16471
- '22#.#17.229.71':16471
- '11#.#09.30.187':16471
- '98.##3.45.60':16471
- '18#.72.8.62':16471
- '12#.#3.159.192':16471
- '21#.#6.148.39':16471
- '69.##7.68.41':16471
- '11#.#1.110.37':16471
- '24.##7.188.36':16471
- '12#.#7.55.37':16471
- '71.#5.35.51':16471
- '75.##8.34.52':16471
- '11#.#34.151.50':16471
- '81.##3.122.48':16471
- '17#.#23.151.194':16471
- '24.##4.27.253':16471
- '70.##5.253.252':16471
- '89.##.36.253':16471
- '24.##1.105.253':16471
- '24.##8.38.253':16471
- '98.##0.75.252':16471
- '20#.#94.38.252':16471
- '76.##7.115.252':16471
- '71.##6.192.252':16471
- '71.##.140.252':16471
- '67.##6.216.253':16471
- '70.##.253.254':16471
- '71.##9.252.254':16471
- '21#.#26.253.254':16471
- '17#.#65.253.254':16471
- '11#.#36.253.254':16471
- '24.##.242.253':16471
- '71.##.235.253':16471
- '81.##6.90.254':16471
- '21#.#22.251.254':16471
- '66.##9.189.254':16471
- '12.##5.149.240':16471
- '17#.#69.124.239':16471
- '17#.#10.204.240':16471
- '68.##6.38.242':16471
- '24.##1.211.241':16471
- '46.##0.153.232':16471
- '50.##0.144.229':16471
- '12#.#51.78.233':16471
- '24.##3.189.238':16471
- '11#.#63.142.236':16471
- '95.##5.67.242':16471
- '83.##.159.250':16471
- '12#.#52.35.250':16471
- '83.##9.183.251':16471
- '10#.#3.206.251':16471
- '72.##8.194.251':16471
- '60.##.185.244':16471
- '24.##4.124.243':16471
- '68.##.101.245':16471
- '17#.#17.234.249':16471
- '19#.#9.135.246':16471