Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\assembly\GAC\Desktop.ini
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- 'pr####.fling.com':80
- '21#.#08.252.185':80
- pr####.fling.com/geo/txt/city.php
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- DNS ASK p�#�M`
- DNS ASK p�#�]
- DNS ASK p�#���
- DNS ASK p�#0f��
- DNS ASK p�#�?v�
- DNS ASK p�#�o
- DNS ASK pr####.fling.com
- DNS ASK p�#�+
- DNS ASK p�#�m
- '20#.#90.117.91':16471
- '20#.#36.34.92':16471
- '24.##.132.79':16471
- '18#.#54.194.78':16471
- '17#.#0.172.189':16471
- '76.##6.160.98':16471
- '76.##0.151.182':16471
- '58.#.170.184':16471
- '20#.#72.121.187':16471
- '78.##.227.97':16471
- '74.##.175.76':16471
- '5.###.43.197':16471
- '21#.#31.157.59':16471
- '21#.#14.161.197':16471
- '70.##2.87.59':16471
- '74.##3.215.199':16471
- '18#.#40.16.194':16471
- '95.##.174.64':16471
- '98.##0.237.194':16471
- '95.##9.223.60':16471
- '49.##9.13.61':16471
- '93.##3.78.99':16471
- '84.##3.28.164':16471
- '70.##.240.160':16471
- '68.##.23.129':16471
- '69.##4.180.119':16471
- '11#.#16.214.164':16471
- '70.##6.126.155':16471
- '76.##.133.143':16471
- '21#.#21.197.133':16471
- '12#.#.250.158':16471
- '79.##.219.158':16471
- '17#.#9.3.116':16471
- '68.##7.118.103':16471
- '75.##9.199.106':16471
- '27.##1.201.100':16471
- '17#.#9.28.178':16471
- '76.##3.203.177':16471
- '68.##0.80.168':16471
- '68.##.115.167':16471
- '77.##.144.168':16471
- '11#.#19.12.169':16471
- '12#.#0.222.168':16471
- '95.##6.49.59':16471
- '67.##9.132.19':16471
- '22#.#56.194.20':16471
- '24.##5.164.17':16471
- '79.##7.185.13':16471
- '13#.#0.40.16':16471
- '37.##3.223.26':16471
- '24.##.109.30':16471
- '24.#9.49.24':16471
- '67.#5.66.22':16471
- '21#.#19.115.22':16471
- '68.##.175.231':16471
- '17#.#6.156.2':16471
- '89.#53.80.3':16471
- '71.##4.246.1':16471
- '83.#.179.241':16471
- '17#.#79.116.241':16471
- '18#.#5.243.232':16471
- '21#.#67.26.11':16471
- '76.##8.238.5':16471
- '18#.#7.199.236':16471
- '88.#23.81.4':16471
- '24.##.182.30':16471
- '67.##5.64.44':16471
- '67.##9.65.44':16471
- '68.##.44.209':16471
- '18#.#54.226.42':16471
- '15#.#8.221.43':16471
- '24.##1.26.50':16471
- '22#.#44.30.58':16471
- '68.##.169.46':16471
- '11#.#86.122.45':16471
- '18#.#56.61.46':16471
- '69.##4.135.42':16471
- '19#.#43.188.35':16471
- '24.##3.190.37':16471
- '24.#2.73.34':16471
- '91.##7.179.33':16471
- '76.##.145.216':16471
- '24.##8.206.211':16471
- '76.##.195.40':16471
- '71.##5.193.39':16471
- '74.##9.109.38':16471
- '86.##7.145.212':16471