Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\assembly\GAC\Desktop.ini
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- '21#.#08.252.185':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- DNS ASK p�#q
- DNS ASK p�#��v
- DNS ASK p�#<��,
- DNS ASK p�#�-��
- DNS ASK p�# tg
- DNS ASK p�#��D
- DNS ASK pr####.fling.com
- DNS ASK p�#��:1
- DNS ASK p�#_XF
- '98.##3.97.208':16471
- '24.##.172.206':16471
- '16#.#32.190.208':16471
- '27.##9.119.212':16471
- '24.##.121.210':16471
- '18#.#1.26.205':16471
- '98.##6.217.204':16471
- '71.##.67.205':16471
- '97.##.128.206':16471
- '75.##8.64.206':16471
- '19#.#3.143.213':16471
- '90.##9.19.223':16471
- '68.##8.194.222':16471
- '71.##.22.223':16471
- '17#.#09.165.223':16471
- '31.##.125.223':16471
- '76.##4.171.216':16471
- '11#.#11.217.215':16471
- '75.##.13.218':16471
- '99.##9.135.220':16471
- '21#.#31.57.220':16471
- '68.##.173.204':16471
- '69.##3.57.188':16471
- '15#.#1.223.187':16471
- '96.##.115.189':16471
- '98.##5.41.190':16471
- '70.##1.216.189':16471
- '15#.#81.86.184':16471
- '68.##8.245.183':16471
- '11#.#09.30.187':16471
- '69.##.139.187':16471
- '69.##3.54.187':16471
- '1.##.128.190':16471
- '21#.#46.134.202':16471
- '24.##.161.201':16471
- '71.##.236.202':16471
- '74.##5.162.203':16471
- '74.##.135.203':16471
- '20#.#4.10.197':16471
- '70.##.129.191':16471
- '98.##9.15.197':16471
- '17#.#8.62.198':16471
- '79.##3.19.198':16471
- '95.##.248.240':16471
- '71.##5.212.240':16471
- '11#.#87.37.242':16471
- '89.##2.164.242':16471
- '24.##.76.242':16471
- '12#.#37.246.237':16471
- '62.##7.8.237':16471
- '24.#.249.238':16471
- '76.##.64.240':16471
- '24.##3.52.240':16471
- '12#.#9.144.243':16471
- '68.##6.196.247':16471
- '98.##4.145.247':16471
- '24.##.106.252':16471
- '5.##.46.254':16471
- '66.##5.155.253':16471
- '65.##.75.246':16471
- '84.##3.60.245':16471
- '72.##2.114.246':16471
- '69.##7.36.247':16471
- '24.##.151.246':16471
- '12#.#8.31.236':16471
- '71.##2.219.229':16471
- '67.##.201.229':16471
- '10#.#92.70.230':16471
- '98.##0.57.231':16471
- '62.##7.178.230':16471
- '76.##0.227.226':16471
- '75.##5.203.224':16471
- '98.##1.3.227':16471
- '88.##3.170.227':16471
- '84.##5.19.227':16471
- '69.##9.253.231':16471
- '97.##.208.233':16471
- '71.##.66.233':16471
- '67.##.234.233':16471
- '66.##8.13.235':16471
- '18#.#6.156.234':16471
- '75.#4.8.233':16471
- '66.#7.8.233':16471
- '76.##.14.233':16471
- '76.##.60.233':16471
- '67.##7.17.233':16471