Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\assembly\GAC\Desktop.ini
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- %WINDIR%\Installer\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\@
- <LS_APPDATA>\{2ebe1c2e-2a38-cb36-436c-4d1cb8c2630c}\n
- '20#.#08.79.128':80
- 'pr####.fling.com':80
- 20#.#08.79.128/count.php?id########################
- 20#.#08.79.128/count.php?id#######################
- pr####.fling.com/geo/txt/city.php
- 20#.#08.79.128/count.php?id######################
- DNS ASK ��#��(
- DNS ASK ��#j%VJ
- DNS ASK ��#sW@x
- DNS ASK ��#_�
- DNS ASK ��#�|�"
- DNS ASK ��#��>
- DNS ASK pr####.fling.com
- DNS ASK ��#< #
- DNS ASK ��#���
- DNS ASK ��#l|c?
- '94.##2.198.18':16471
- '68.##.155.19':16471
- '17#.#0.77.214':16471
- '71.##3.22.214':16471
- '12#.#73.92.208':16471
- '71.##2.146.205':16471
- '67.##6.46.26':16471
- '78.#7.47.21':16471
- '82.##6.233.22':16471
- '10#.#4.60.15':16471
- '19#.#93.217.16':16471
- '74.##6.81.223':16471
- '20#.#46.97.221':16471
- '11#.#46.141.17':16471
- '78.##.120.18':16471
- '12#.#02.233.214':16471
- '49.##2.107.216':16471
- '78.#3.18.18':16471
- '11#.#54.188.195':16471
- '72.##8.36.33':16471
- '17#.#12.74.197':16471
- '72.##.27.196':16471
- '79.##0.129.194':16471
- '67.##3.112.192':16471
- '93.##.217.36':16471
- '70.##6.143.35':16471
- '18#.#3.96.36':16471
- '18#.#5.183.201':16471
- '99.##8.17.27':16471
- '18#.#32.128.202':16471
- '71.#.13.27':16471
- '19#.#0.71.30':16471
- '21#.#03.103.197':16471
- '18#.#33.58.32':16471
- '20#.#95.184.198':16471
- '19#.#1.170.30':16471
- '24.##.111.224':16471
- '24.##.127.250':16471
- '31.##0.6.250':16471
- '77.##.171.251':16471
- '12#.#01.86.251':16471
- '99.##4.250.249':16471
- '67.##4.154.247':16471
- '17#.#.182.243':16471
- '68.##.231.249':16471
- '17#.#2.88.249':16471
- '69.##5.234.252':16471
- '11#.#7.175.252':16471
- '75.##9.191.253':16471
- '16#.#0.29.253':16471
- '82.##.132.252':16471
- '11#.#.206.251':16471
- '15#.#0.205.251':16471
- '85.##.132.252':16471
- '85.##6.206.251':16471
- '19#.#9.141.229':16471
- '17#.#4.80.229':16471
- '19#.#63.251.9':16471
- '78.##3.88.12':16471
- '12#.#3.20.14':16471
- '21#.#20.80.225':16471
- '12#.#13.28.15':16471
- '21#.#09.180.14':16471
- '11#.#11.221.225':16471
- '78.#0.81.1':16471
- '67.##3.152.234':16471
- '74.##.59.241':16471
- '94.##4.153.237':16471
- '71.#2.147.4':16471
- '67.#1.111.6':16471
- '17#.#15.92.7':16471
- '81.#98.10.6':16471
- '46.#18.28.6':16471
- ClassName: '' WindowName: 'ghgkhjiuyi8yjghkjhgkhjkjh'