Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- '21#.#08.252.185':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- DNS ASK ܡc#�$�
- DNS ASK ܡc#�k
- DNS ASK ܡc#oL
- DNS ASK ܡc#��
- DNS ASK ܡc#D�G
- DNS ASK ܡc#�2�
- DNS ASK pr####.fling.com
- DNS ASK ܡc#1/�
- DNS ASK ܡc#�
- DNS ASK ܡc#DoZ
- '71.##3.165.212':16471
- '41.##9.50.212':16471
- '20#.#91.247.212':16471
- '77.##.153.13':16471
- '89.##.66.213':16471
- '17#.#23.128.17':16471
- '98.##2.138.209':16471
- '69.##2.114.16':16471
- '11#.#09.42.212':16471
- '68.##.151.15':16471
- '67.##3.233.11':16471
- '75.##0.145.12':16471
- '15#.#33.99.11':16471
- '69.##1.57.10':16471
- '76.##3.107.225':16471
- '49.##9.226.12':16471
- '87.##9.17.13':16471
- '24.##8.153.219':16471
- '24.##.167.220':16471
- '82.##5.252.219':16471
- '74.#7.99.20':16471
- '17#.#34.174.194':16471
- '98.##.73.193':16471
- '66.##.91.195':16471
- '61.##4.90.198':16471
- '11#.#5.0.198':16471
- '82.##5.146.190':16471
- '96.##.115.189':16471
- '98.##9.192.190':16471
- '96.##.34.192':16471
- '61.##.250.191':16471
- '97.#9.59.23':16471
- '24.##7.135.203':16471
- '97.##.247.205':16471
- '18#.#41.174.207':16471
- '24.##.130.21':16471
- '18#.#11.34.200':16471
- '71.##.107.198':16471
- '70.##0.65.200':16471
- '61.##3.223.202':16471
- '98.##2.113.202':16471
- '72.#19.9.10':16471
- '98.##9.160.242':16471
- '78.##.129.242':16471
- '22#.#45.195.242':16471
- '18#.#66.33.244':16471
- '91.##8.119.243':16471
- '22#.#19.155.237':16471
- '72.##6.39.237':16471
- '71.##.213.238':16471
- '59.##1.230.239':16471
- '68.##1.217.239':16471
- '49.##2.243.252':16471
- '17#.#3.117.251':16471
- '79.##9.190.253':16471
- '79.##2.253.254':16471
- '78.#2.155.1':16471
- '75.##1.1.246':16471
- '97.##.166.245':16471
- '76.##8.157.246':16471
- '20#.#26.69.248':16471
- '69.##8.171.246':16471
- '67.##6.225.236':16471
- '95.#8.45.6':16471
- '11#.#17.16.7':16471
- '76.##.209.229':16471
- '94.##4.138.5':16471
- '94.##9.198.230':16471
- '88.#91.90.8':16471
- '18#.#5.247.226':16471
- '79.#2.28.7':16471
- '59.##.213.228':16471
- '24.##9.22.228':16471
- '66.#69.70.3':16471
- '17#.#8.105.3':16471
- '24.#9.43.2':16471
- '76.##.196.236':16471
- '76.##2.169.236':16471
- '20#.#81.195.232':16471
- '82.#31.85.4':16471
- '11#.#62.42.4':16471
- '71.##.227.234':16471
- '97.##.26.234':16471