Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\.serial] 'ImagePath' = '\?'
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB27979$\4121336045\@
- %WINDIR%\$NtUninstallKB27979$\4121336045\L\alehhooo
- %WINDIR%\$NtUninstallKB27979$\4121336045\Desktop.ini
- 'localhost':80
- 'j.###mind.com':80
- le#####eecounters.com/5699002-2F6F334BF9ACF1B2401D3874A5B0C048/counter.img?th################################
- le#####eecounters.com/5699002-2F6F334BF9ACF1B2401D3874A5B0C048/counter.img?th###############################
- j.###mind.com/app/geoip.js
- DNS ASK �c#�3
- DNS ASK �c#|}�
- DNS ASK �c#�
- DNS ASK �c#��`
- DNS ASK �c#�
- DNS ASK �c#Y�
- DNS ASK �c#L!�
- DNS ASK �c#�I
- DNS ASK j.###mind.com
- DNS ASK �c#���
- DNS ASK �c#>7�
- DNS ASK �c#�_:
- '18#.#20.171.15':16471
- '67.##.123.217':16471
- '24.##.196.12':16471
- '77.##.249.12':16471
- '61.##.48.217':16471
- '17#.#06.114.216':16471
- '16#.#59.209.17':16471
- '71.#7.9.217':16471
- '18#.#6.201.15':16471
- '82.##1.103.11':16471
- '68.#6.52.7':16471
- '76.##6.233.224':16471
- '24.#5.189.4':16471
- '12#.#37.144.6':16471
- '10#.2.99.7':16471
- '85.#9.71.10':16471
- '62.##7.209.218':16471
- '11#.#06.176.222':16471
- '37.##0.62.221':16471
- '84.##.23.208':16471
- '5.###.195.206':16471
- '76.##.196.22':16471
- '21#.#51.46.23':16471
- '68.#.141.206':16471
- '84.##.19.203':16471
- '68.##.232.202':16471
- '89.##.118.205':16471
- '95.##.33.205':16471
- '22#.#30.80.209':16471
- '11#.#3.209.213':16471
- '68.##.243.20':16471
- '17#.#98.71.18':16471
- '11#.#8.153.19':16471
- '76.##.190.211':16471
- '18#.#63.34.210':16471
- '61.##.177.22':16471
- '75.#0.54.21':16471
- '46.##0.10.211':16471
- '15#.#52.253.254':16471
- '66.##7.197.254':16471
- '18#.#52.253.254':16471
- '17#.#52.253.254':16471
- '99.##8.69.246':16471
- '98.##2.12.243':16471
- '12#.#62.84.242':16471
- '17#.#7.209.244':16471
- '87.##1.75.243':16471
- '71.##3.253.254':16471
- '88.##4.253.254':16471
- '71.##4.253.254':16471
- '18#.#54.253.254':16471
- '13#.#54.253.254':16471
- '24#.#53.253.254':16471
- '16#.#53.253.254':16471
- '11#.#53.253.254':16471
- '21#.#53.253.254':16471
- '18#.#53.253.254':16471
- '12#.#.22.232':16471
- '70.##0.158.231':16471
- '87.##1.101.232':16471
- '18#.#9.26.232':16471
- '27.#1.3.230':16471
- '93.##4.61.227':16471
- '21#.#27.20.227':16471
- '24.##.220.229':16471
- '77.##4.110.228':16471
- '11#.#2.86.234':16471
- '70.##.211.240':16471
- '81.##4.195.240':16471
- '86.##4.233.241':16471
- '18#.#63.46.241':16471
- '74.##.199.239':16471
- '21#.#22.203.236':16471
- '89.##.148.236':16471
- '15#.#1.127.238':16471
- '18#.#7.26.238':16471