Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Launcher BitLocker SPP Fax Resource CNG Font' = '%APPDATA%\hbpzmlxu\hvfhkcwu.exe'
- '%APPDATA%\hbpzmlxu\ayhmpvqky.exe' "%APPDATA%\hbpzmlxu\hvfhkcwu.exe"
- '%APPDATA%\hbpzmlxu\hvfhkcwu.exe'
- %APPDATA%\hbpzmlxu\hvfhkcwu.yzp7k
- %APPDATA%\hbpzmlxu\ayhmpvqky.exe
- %APPDATA%\hbpzmlxu\hvfhkcwu.exe
- %APPDATA%\hbpzmlxu\ayhmpvqky.exe
- %APPDATA%\hbpzmlxu\hvfhkcwu.exe
- 'ge###eclose.net':80
- 'he###close.net':80
- 're###nspace.net':80
- 'va####sspace.net':80
- 'ge####travel.net':80
- 'he###travel.net':80
- 'ge####yellow.net':80
- 'he###yellow.net':80
- 'va####stravel.net':80
- 'ag####tshore.net':80
- 're###nclose.net':80
- 'ag####twritten.net':80
- 'do###shore.net':80
- 'va####syellow.net':80
- 're####travel.net':80
- 'va####sclose.net':80
- 're####yellow.net':80
- 'or###close.net':80
- 're####eyellow.net':80
- 'le###rspace.net':80
- 're####eclose.net':80
- 'or###travel.net':80
- 're####espace.net':80
- 'or###yellow.net':80
- 're####etravel.net':80
- 'he###nspace.net':80
- 'he###nclose.net':80
- 'le###rclose.net':80
- 'ge###espace.net':80
- 'he###space.net':80
- 'he####travel.net':80
- 'le####travel.net':80
- 'he####yellow.net':80
- 'le####yellow.net':80
- ge###eclose.net/forum/search.php?em##################################
- he###close.net/forum/search.php?em##################################
- re###nspace.net/forum/search.php?em##################################
- va####sspace.net/forum/search.php?em##################################
- ge####travel.net/forum/search.php?em##################################
- he###travel.net/forum/search.php?em##################################
- ge####yellow.net/forum/search.php?em##################################
- he###yellow.net/forum/search.php?em##################################
- va####stravel.net/forum/search.php?em##################################
- ag####tshore.net/forum/search.php?em##################################
- re###nclose.net/forum/search.php?em##################################
- ag####twritten.net/forum/search.php?em##################################
- do###shore.net/forum/search.php?em##################################
- va####syellow.net/forum/search.php?em##################################
- re####travel.net/forum/search.php?em##################################
- va####sclose.net/forum/search.php?em##################################
- re####yellow.net/forum/search.php?em##################################
- or###close.net/forum/search.php?em##################################
- re####eyellow.net/forum/search.php?em##################################
- le###rspace.net/forum/search.php?em##################################
- re####eclose.net/forum/search.php?em##################################
- or###travel.net/forum/search.php?em##################################
- re####espace.net/forum/search.php?em##################################
- or###yellow.net/forum/search.php?em##################################
- re####etravel.net/forum/search.php?em##################################
- he###nspace.net/forum/search.php?em##################################
- he###nclose.net/forum/search.php?em##################################
- le###rclose.net/forum/search.php?em##################################
- ge###espace.net/forum/search.php?em##################################
- he###space.net/forum/search.php?em##################################
- he####travel.net/forum/search.php?em##################################
- le####travel.net/forum/search.php?em##################################
- he####yellow.net/forum/search.php?em##################################
- le####yellow.net/forum/search.php?em##################################
- DNS ASK ge###eclose.net
- DNS ASK he###close.net
- DNS ASK re###nspace.net
- DNS ASK va####sspace.net
- DNS ASK ge####travel.net
- DNS ASK he###travel.net
- DNS ASK ge####yellow.net
- DNS ASK he###yellow.net
- DNS ASK va####stravel.net
- DNS ASK ag####tshore.net
- DNS ASK re###nclose.net
- DNS ASK ag####twritten.net
- DNS ASK do###shore.net
- DNS ASK va####syellow.net
- DNS ASK re####travel.net
- DNS ASK va####sclose.net
- DNS ASK re####yellow.net
- DNS ASK or###close.net
- DNS ASK re####eyellow.net
- DNS ASK le###rspace.net
- DNS ASK re####eclose.net
- DNS ASK or###travel.net
- DNS ASK re####espace.net
- DNS ASK or###yellow.net
- DNS ASK re####etravel.net
- DNS ASK he###nspace.net
- DNS ASK he###nclose.net
- DNS ASK le###rclose.net
- DNS ASK ge###espace.net
- DNS ASK he###space.net
- DNS ASK he####travel.net
- DNS ASK le####travel.net
- DNS ASK he####yellow.net
- DNS ASK le####yellow.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'