Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- '21#.#08.252.185':80
- 'pr####.fling.com':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK �#�]��
- DNS ASK �#W��=
- DNS ASK �#N��
- DNS ASK �#bvG�
- DNS ASK �#��/U
- DNS ASK �#�/��
- DNS ASK pr####.fling.com
- DNS ASK �#���
- DNS ASK �#�v�
- DNS ASK �#Q��H
- '15#.#9.19.24':16471
- '72.##1.69.26':16471
- '72.##4.32.23':16471
- '82.##6.233.22':16471
- '10#.#73.143.203':16471
- '50.##0.52.198':16471
- '11#.#74.153.31':16471
- '77.#1.21.31':16471
- '98.##4.168.28':16471
- '66.##.140.199':16471
- '21#.#56.124.17':16471
- '98.##.34.209':16471
- '24.##8.19.212':16471
- '89.##.220.212':16471
- '75.##.59.212':16471
- '67.##0.203.204':16471
- '50.##.252.21':16471
- '69.##2.40.21':16471
- '16#.#42.0.18':16471
- '68.##.131.19':16471
- '24.##1.86.182':16471
- '83.##.188.181':16471
- '74.##.171.182':16471
- '20#.#69.148.44':16471
- '24.#97.9.45':16471
- '22#.#43.213.178':16471
- '18#.#63.149.49':16471
- '12#.4.6.47':16471
- '24.##.99.181':16471
- '11#.#06.17.45':16471
- '22#.#33.94.33':16471
- '68.#4.91.34':16471
- '20#.#4.253.32':16471
- '68.##.252.197':16471
- '85.##.202.31':16471
- '67.##.143.43':16471
- '88.##8.61.187':16471
- '72.##0.221.39':16471
- '92.##0.101.192':16471
- '98.##3.125.34':16471
- '12#.#11.104.243':16471
- '72.##7.118.242':16471
- '69.##.119.243':16471
- '98.##6.48.244':16471
- '24.##.164.243':16471
- '68.##0.195.237':16471
- '75.##.210.235':16471
- '17#.#38.60.239':16471
- '71.##7.228.240':16471
- '49.##4.134.240':16471
- '97.##.185.251':16471
- '19#.#04.130.250':16471
- '17#.#7.55.252':16471
- '11#.#88.214.254':16471
- '24.##4.195.254':16471
- '17#.#3.82.246':16471
- '19#.#03.80.244':16471
- '85.##7.184.246':16471
- '17#.#74.134.248':16471
- '92.##0.51.247':16471
- '24.##8.212.14':16471
- '24.#9.9.218':16471
- '20#.#3.110.9':16471
- '24.##8.169.8':16471
- '68.##8.210.8':16471
- '19#.#5.128.16':16471
- '18#.#31.135.16':16471
- '86.##7.40.16':16471
- '76.##.85.217':16471
- '62.##3.17.15':16471
- '21#.#19.90.2':16471
- '76.##1.186.224':16471
- '12#.#92.44.229':16471
- '12#.#37.201.234':16471
- '67.##3.25.234':16471
- '84.##3.217.221':16471
- '10#.#9.148.6':16471
- '71.#96.31.6':16471
- '72.#98.96.2':16471
- '72.#28.84.3':16471