Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012024081320240814\index.dat
- %APPDATA%\microsoft\windows\privacie\index.dat
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
Network activity
Connects to
- 'ge####traffic.com':80
- 'sw#####diangirls.pro':80
- 're####si###n.pro':80
- 'fo###.#oogleapis.com':443
- 'go####si###n.pro':80
- 'cd#.##yndicate.com':80
- 'pk#.goog':80
- 'fo###.gstatic.com':443
- 'go###best.com':80
- 'cd#.#eliman.net':443
- 'i.###fimgs.com':443
- 'a.###srv.com':443
- 'pl######71.highratecpm.com':80
- 'x1.#.lencr.org':80
TCP
HTTP GET requests
- http://ge####traffic.com/tgwfhalok.cgi?21##############################################################################################
- http://go###best.com/KyDK5.js
- http://go####si###n.pro/###ntmb/20/610-beauty.jpg
- http://go####si###n.pro/###ntmb/20/606-blue-with.jpg
- http://go####si###n.pro/###ntmb/20/609-.jpg
- http://go####si###n.pro/###ntmb/20/608-school-girl.jpg
- http://go####si###n.pro/###ntmb/20/548-with.jpg
- http://go####si###n.pro/###ntmb/20/547-teen-coochie.jpg
- http://go####si###n.pro/###ntmb/20/545-great.jpg
- http://go####si###n.pro/###ntmb/20/546-xvideos-32a8d900509eee67a2efc7881b6a560a.jpg
- http://go####si###n.pro/###ntmb/20/544-s##-with-black.jpg
- http://go####si###n.pro/###ntmb/20/543-black-for-joseline.jpg
- http://go####si###n.pro/###ntmb/20/542-neighbours-showed-got.jpg
- http://go####si###n.pro/###ntmb/20/536-vs.jpg
- http://go####si###n.pro/###ntmb/20/535-f###ing-hued.jpg
- http://go####si###n.pro/###ntmb/20/534-###t.jpg
- http://go###best.com/D0pn3.js
- http://go####si###n.pro/###ntmb/20/533-smallish-ebony-white.jpg
- http://go####si###n.pro/###ntmb/20/532-first-black.jpg
- http://go####si###n.pro/###ntmb/20/530-with.jpg
- http://go####si###n.pro/###ntmb/20/573-young-girl-18.jpg
- http://go###best.com/OY0C9.js
- http://go####si###n.pro/###ntmb/20/572-white-m###-monster.jpg
- http://go####si###n.pro/###ntmb/20/571-railing.jpg
- http://go####si###n.pro/###ntmb/20/570-year-milky-girl.jpg
- http://go####si###n.pro/###ntmb/20/569-culiaron-v.jpg
- http://go####si###n.pro/###ntmb/20/562-ebony-beauty.jpg
- http://go####si###n.pro/###ntmb/20/561-submissive-romped-by.jpg
- http://go####si###n.pro/###ntmb/20/611-df636c2f6db0edd62c2348ab937e2e36.jpg
- http://go####si###n.pro/###ntmb/15/351-desi-old-s##.jpg
- http://go####si###n.pro/###ntmb/20/612-drilled-by.jpg
- http://go###best.com/api/spots/104851?p=#################
- http://go####si###n.pro/###ntmb/18/634-indian.jpg
- http://go####si###n.pro/###ntmb/17/506-for-her.jpg
- http://go####si###n.pro/###ntmb/16/979-muslim-girl.jpg
- http://go###best.com/api/spots/104853?p=#################
- http://go###best.com/api/spots/104854?p=#################
- http://go###best.com/api/spots/104855?p=#################
- http://go###best.com/api/spots/104857?p=#################
- http://go####si###n.pro/###ntmb/20/588-teenage-f###-brother.jpg
- http://go####si###n.pro/###ntmb/20/600-dil-kya-hardcore.jpg
- http://go####si###n.pro/###ntmb/20/599-hansika-hot.jpg
- http://go####si###n.pro/###ntmb/20/598-bhabi.jpg
- http://go####si###n.pro/###ntmb/20/597-indian-s##y.jpg
- http://go####si###n.pro/###ntmb/20/596-indian-college-girl.jpg
- http://go####si###n.pro/###ntmb/20/595-gf-b###s.jpg
- http://go####si###n.pro/###ntmb/20/594-big-ass-love.jpg
- http://go###best.com/bHzY1.js
- http://go###best.com/Y2yD3.js
- http://go####si###n.pro/###ntmb/20/592-1-.jpg
- http://go####si###n.pro/###ntmb/20/591-soot-mood.jpg
- http://go####si###n.pro/###ntmb/20/590-i.jpg
- http://go####si###n.pro/###ntmb/20/589-hema-aunty.jpg
- http://go####si###n.pro/###ntmb/20/582-daddy-won-doughter.jpg
- http://go####si###n.pro/###ntmb/20/580-gangbang.jpg
- http://go####si###n.pro/###ntmb/20/579-s##.jpg
- http://go####si###n.pro/###ntmb/20/581-titties.jpg
- http://go####si###n.pro/###ntmb/20/613-and.jpg
- http://go####si###n.pro/###ntmb/20/625-hubby.jpg
- http://go####si###n.pro/###ntmb/20/623-indian-maid-compelled.jpg
- http://go####si###n.pro/###ntmb/15/242-hot-f###ed.jpg
- http://go####si###n.pro/###ntmb/20/560-p###y-yara-skye.jpg
- http://go####si###n.pro/###ntmb/20/556-black-milky-teenager.jpg
- http://go####si###n.pro/###ntmb/20/553-babes-hump.jpg
- http://go####si###n.pro/###ntmb/20/578-indian-summer.jpg
- http://go####si###n.pro/###ntmb/20/577-mom.jpg
- http://go####si###n.pro/###ntmb/20/616-killer-filmed-douche.jpg
- http://go####si###n.pro/###ntmb/20/615-taken.jpg
- http://go####si###n.pro/###ntmb/20/614-room.jpg
- http://go####si###n.pro/###ntmb/20/576-f###.jpg
- http://go####si###n.pro/###ntmb/20/603-indian.jpg
- http://go####si###n.pro/###ntmb/20/574-bigbooty-clyster-milk.jpg
- http://go####si###n.pro/###ntmb/20/568-teen.jpg
- http://go###best.com/api/spots/104852?p=#################
- http://go####si###n.pro/###ntmb/20/567-by-big.jpg
- http://go####si###n.pro/###ntmb/15/329-girl-video.jpg
- http://go####si###n.pro/###ntmb/20/566-as-sissy.jpg
- http://go####si###n.pro/###ntmb/20/607-girl-leaked-.jpg
- http://go####si###n.pro/###ntmb/20/605-desi-arpita.jpg
- http://go####si###n.pro/###ntmb/20/575-hood-hood-p2.jpg
- http://go####si###n.pro/###ntmb/20/527-cougar-18.jpg
- http://go####si###n.pro/###ntmb/20/563-big.jpg
- http://go####si###n.pro/###ntmb/20/565-and.jpg
- http://go####si###n.pro/###ntmb/20/564-her-hard.jpg
- http://go###best.com/api/spots/104858?p=#################
- http://go###best.com/api/spots/104859?p=#################
- http://go###best.com/api/spots/104860?p=#################
- http://go###best.com/api/spots/104861?p=#################
- http://pl######71.highratecpm.com/2f6a5f1ef1ebf372a6af07738bc81851/invoke.js
- http://go####si###n.pro/###ntmb/20/541-by.jpg
- http://go####si###n.pro/###ntmb/20/540-big.jpg
- http://go####si###n.pro/###ntmb/20/558-public.jpg
- http://go####si###n.pro/###ntmb/20/559-diesel.jpg
- http://go####si###n.pro/###ntmb/20/538-ass-milky-guys.jpg
- http://go####si###n.pro/###ntmb/20/583-time-desi-chudayi.jpg
- http://go####si###n.pro/###ntmb/20/624-young-boy-huge.jpg
- http://go####si###n.pro/###ntmb/20/622-village-audio.jpg
- http://go####si###n.pro/###ntmb/20/621-023-cute-girl.jpg
- http://go####si###n.pro/###ntmb/20/620-f###ing-teen-pounded.jpg
- http://go####si###n.pro/###ntmb/20/619-f###ing.jpg
- http://go####si###n.pro/###ntmb/20/618-indian-girlfriend.jpg
- http://go####si###n.pro/###ntmb/20/539-bbc.jpg
- http://go####si###n.pro/###ntmb/20/551-.jpg
- http://go####si###n.pro/###ntmb/20/537-tight-snatch.jpg
- http://go####si###n.pro/###ntmb/20/531--.jpg
- http://go####si###n.pro/###ntmb/20/528-destroyed.jpg
- http://go####si###n.pro/###ntmb/20/529-liani.jpg
- http://go####si###n.pro/###ntmb/20/555-black-.jpg
- http://go####si###n.pro/###ntmb/20/554-a###.jpg
- http://go####si###n.pro/###ntmb/20/552-with.jpg
- http://go####si###n.pro/###ntmb/20/593-gf-self.jpg
- http://go####si###n.pro/###ntmb/20/601-bhabhi.jpg
- http://go####si###n.pro/###ntmb/20/587-indian.jpg
- http://go####si###n.pro/###ntmb/20/586-desi.jpg
- http://go####si###n.pro/###ntmb/20/585-new-pari-hottest.jpg
- http://go####si###n.pro/###ntmb/20/584-indian-unsatisfied-masterbating.jpg
- http://go####si###n.pro/###ntmb/20/617-supah.jpg
- http://go####si###n.pro/###ntmb/20/604-spoiled-o####m.jpg
- http://go####si###n.pro/###ntmb/20/602-hot-lover.jpg
- http://go####si###n.pro/###ntmb/20/550-stunner-rails.jpg
- http://go####si###n.pro/###ntmb/20/557-02072012-all.jpg
- http://go####si###n.pro/###ntmb/20/549-dark-in.jpg
- http://go####si###n.pro/###ntmb/12/747-malak-frome-baghdad.jpg
- http://go####si###n.pro/###ntmb/12/775-seetu-veetu.jpg
- http://go####si###n.pro/###ntmb/11/732--.jpg
- http://go####si###n.pro/###ntmb/16/316-washes.jpg
- http://go###best.com/3QDb3.js
- http://go###best.com/Y4v91.js
- http://go###best.com/15hE7.js
- http://go###best.com/ttLy5.js
- http://go####si###n.pro/###ntmb/13/544-young-selfie-boyfriend.jpg
- http://go####si###n.pro/###ntmb/14/443-pressed.jpg
- http://go####si###n.pro/###ntmb/10/460-with-his-hot.jpg
- http://go####si###n.pro/###ntmb/14/664-randi.jpg
- http://go####si###n.pro/###ntmb/16/433-girl.jpg
- http://go####si###n.pro/###ntmb/14/604-friend-sister.jpg
- http://go###best.com/tFB63.js
- http://go####si###n.pro/###ntmb/15/866-indian-erotic-scene.jpg
- http://go####si###n.pro/###ntmb/11/225-goes.jpg
- http://go####si###n.pro/###ntmb/14/791-lovers.jpg
- http://go####si###n.pro/###ntmb/17/253-.jpg
- http://go####si###n.pro/###ntmb/11/211-uncle.jpg
- http://go####si###n.pro/###ntmb/16/663-girl.jpg
- http://go####si###n.pro/###ntmb/11/078-couple.jpg
- http://go####si###n.pro/###ntmb/16/504-088.jpg
- http://go####si###n.pro/###ntmb/10/671-gets-f###ed.jpg
- http://go####si###n.pro/###ntmb/19/142-and.jpg
- http://go####si###n.pro/###ntmb/12/419-bf-.jpg
- http://go####si###n.pro/###ntmb/14/358-20161104.jpg
- http://go####si###n.pro/###ntmb/15/155-teen-f###ed-by.jpg
- http://go####si###n.pro/###ntmb/11/287-video-mov.jpg
- http://go####si###n.pro/###ntmb/11/575-mom-and-.jpg
- http://go####si###n.pro/###ntmb/10/259-in-jungle.jpg
- http://go####si###n.pro/###ntmb/11/372-s##y.jpg
- http://go####si###n.pro/###ntmb/12/948-wife.jpg
- http://ge####traffic.com/spsymkdfg.cgi?30#####################################################################
- http://ge####traffic.com/tgwfhalok.cgi?21#############################################
- http://ge####traffic.com/favicon.ico
- http://ge####traffic.com/zftirj.cgi?30#####################################################################
- http://re####si###n.pro/
- http://re####si###n.pro/en/
- http://ge####traffic.com/zftirj.cgi?30#################################################
- http://re####si###n.pro/css/import.css
- http://re####si###n.pro/font/css/font-awesome.css
- http://re####si###n.pro/css/styles.css
- http://re####si###n.pro/js/jquery.min.js
- http://re####si###n.pro/js/functions.js
- http://re####si###n.pro/font/css/font-awesome.min.css
- http://re####si###n.pro/font/fonts/fontawesome-webfont.eot?
- http://go####si###n.pro/
- http://go####si###n.pro/css/styles.css
- http://go####si###n.pro/css/import.css
- http://go####si###n.pro/js/functions.js
- http://go####si###n.pro/js/jquery.min.js
- http://go####si###n.pro/font/css/font-awesome.css
- http://cd#.##yndicate.com/sdk/v1/bi.js
- http://go####si###n.pro/font/fonts/fontawesome-webfont.eot?
- http://pk#.goog/gsr1/gsr1.crt
- http://go####si###n.pro/hds/top/tt/xxxdesis##.pro.jpg
- http://go####si###n.pro/###ntmb/10/913-village-beauty-www.jpg
- http://go####si###n.pro/###ntmb/18/160-babe-f###ed-in.jpg
- http://go####si###n.pro/###ntmb/11/556-indian-cute.jpg
- http://go####si###n.pro/###ntmb/11/169-bhabhi.jpg
- http://go####si###n.pro/###ntmb/13/434---.jpg
- http://go####si###n.pro/###ntmb/10/239-desi-girl-x.jpg
- http://go####si###n.pro/###ntmb/15/318-hard-bf.jpg
- http://go####si###n.pro/###ntmb/15/669-indian4u.jpg
- http://go####si###n.pro/###ntmb/0/125-maid.jpg
- http://go####si###n.pro/###ntmb/11/026-vid-20170725-wa0091.jpg
- http://go####si###n.pro/###ntmb/11/768-wife-s##.jpg
- http://go####si###n.pro/###ntmb/13/546-band.jpg
- http://go####si###n.pro/###ntmb/18/338-punjabi-girl-s##.jpg
- http://go####si###n.pro/###ntmb/13/745-bf.jpg
- http://go####si###n.pro/###ntmb/10/707-showing.jpg
- http://go####si###n.pro/###ntmb/17/293-girl-having-s##.jpg
- http://go####si###n.pro/###ntmb/15/371-video.jpg
- http://go####si###n.pro/###ntmb/10/420-indian-in-bf.jpg
- http://go####si###n.pro/###ntmb/12/861-f6b9f5e4eb1118dc45d0de2ba75a287d.jpg
- http://go####si###n.pro/###ntmb/12/932-wife-having.jpg
- http://go####si###n.pro/###ntmb/13/390-hard-f###.jpg
- http://go####si###n.pro/###ntmb/13/442-.jpg
- http://go####si###n.pro/###ntmb/10/924-aunty-husbands-camera.jpg
- http://go####si###n.pro/###ntmb/19/944---.jpg
- http://go####si###n.pro/###ntmb/13/057-nepali.jpg
- http://go####si###n.pro/###ntmb/13/598-desi-school-bf.jpg
- http://go####si###n.pro/###ntmb/10/197-gets.jpg
- http://go####si###n.pro/###ntmb/14/710-tamilyounggirlassets.jpg
- http://go####si###n.pro/###ntmb/12/614-for-bf.jpg
- http://go####si###n.pro/###ntmb/18/646-indian.jpg
- http://go####si###n.pro/###ntmb/14/621-young-###king-and.jpg
- http://go####si###n.pro/###ntmb/14/290--.jpg
- http://go####si###n.pro/###ntmb/11/303-in.jpg
- http://go####si###n.pro/###ntmb/14/926-away.jpg
- http://go####si###n.pro/###ntmb/18/071-young-f###ed-by.jpg
- http://go####si###n.pro/###ntmb/11/419-f###ed.jpg
- http://go####si###n.pro/###ntmb/10/178-hotel.jpg
- http://go####si###n.pro/###ntmb/18/620-054.jpg
- http://go####si###n.pro/###ntmb/14/122-delhi-lady.jpg
- http://go####si###n.pro/###ntmb/13/360-girl-desi.jpg
- http://go####si###n.pro/###ntmb/11/750--.jpg
- http://go####si###n.pro/###ntmb/18/980-college-l#####n-s##.jpg
- http://go####si###n.pro/###ntmb/10/334-nice-girl.jpg
- http://go####si###n.pro/###ntmb/16/202---.jpg
- http://go####si###n.pro/###ntmb/14/319-enjoyed-by.jpg
- http://go####si###n.pro/###ntmb/15/205-1551557-and.jpg
- http://go####si###n.pro/###ntmb/11/443-leaked-video.jpg
- http://go####si###n.pro/###ntmb/12/094---.jpg
- http://go####si###n.pro/###ntmb/10/990---.jpg
- http://go####si###n.pro/###ntmb/11/156-shy-gf-bf.jpg
- http://go####si###n.pro/###ntmb/15/145-bengali-f###ed.jpg
- http://pl######70.highratecpm.com/d804deeb4570595514b861dc8c8aca43/invoke.js
- http://go####si###n.pro/###ntmb/20/526-guy-very.jpg
- http://go####si###n.pro/###ntmb/13/863-s-leaked-video.jpg
- http://go####si###n.pro/###ntmb/10/719-homemade.jpg
- http://go####si###n.pro/###ntmb/16/270-punjabi-homemade.jpg
- http://go####si###n.pro/###ntmb/16/355-04-hards##tube-randi.jpg
- http://go####si###n.pro/###ntmb/16/530-my-with-married.jpg
- http://go####si###n.pro/###ntmb/16/554-arrested.jpg
- http://go####si###n.pro/###ntmb/13/605-me-her.jpg
- http://go####si###n.pro/###ntmb/11/958-fist-com.jpg
- http://go####si###n.pro/###ntmb/10/515-tamil-hair.jpg
- http://go####si###n.pro/###ntmb/19/380-call-girl-what.jpg
- http://go####si###n.pro/###ntmb/11/133--.jpg
- http://go####si###n.pro/###ntmb/11/153-floor.jpg
- http://go####si###n.pro/###ntmb/17/567-.jpg
- http://go####si###n.pro/###ntmb/11/237-vid-wa0000.jpg
- http://go####si###n.pro/###ntmb/19/438-old.jpg
- http://x1.#.lencr.org/
Other
- 'fo###.#oogleapis.com':443
- 'cd#.#eliman.net':443
- 'i.###fimgs.com':443
- 'a.###srv.com':443
UDP
- DNS ASK ge####traffic.com
- DNS ASK sw#####diangirls.pro
- DNS ASK re####si###n.pro
- DNS ASK fo###.#oogleapis.com
- DNS ASK go####si###n.pro
- DNS ASK cd#.##yndicate.com
- DNS ASK pk#.goog
- DNS ASK fo###.gstatic.com
- DNS ASK go###best.com
- DNS ASK cd#.#eliman.net
- DNS ASK i.###fimgs.com
- DNS ASK a.###srv.com
- DNS ASK pl######70.highratecpm.com
- DNS ASK pl######71.highratecpm.com
- DNS ASK x1.#.lencr.org
Miscellaneous
Searches for the following windows
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
