Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\.mrxsmb] 'ImagePath' = '\?'
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB27979$\4121336045\@
- %WINDIR%\$NtUninstallKB27979$\4121336045\L\alehhooo
- %WINDIR%\$NtUninstallKB27979$\4121336045\Desktop.ini
- 'localhost':80
- 'j.###mind.com':80
- le#####eecounters.com/5699002-2F6F334BF9ACF1B2401D3874A5B0C048/counter.img?th################################
- le#####eecounters.com/5699002-2F6F334BF9ACF1B2401D3874A5B0C048/counter.img?th###############################
- j.###mind.com/app/geoip.js
- DNS ASK ޡc#��$
- DNS ASK ޡc#��
- DNS ASK ޡc#eX
- DNS ASK ޡc#�Kw
- DNS ASK ޡc#k#
- DNS ASK ޡc#'
- DNS ASK ޡc#2
- DNS ASK ޡc#��
- DNS ASK j.###mind.com
- DNS ASK ޡc#�0�
- DNS ASK ޡc#��
- DNS ASK ޡc#ѐ-
- '21#.#2.248.49':16471
- '90.##1.167.14':16471
- '65.##1.56.14':16471
- '82.##9.34.225':16471
- '24.##1.157.219':16471
- '2.###.20.212':16471
- '93.##.151.18':16471
- '46.#49.5.15':16471
- '68.##.173.16':16471
- '15#.#5.248.52':16471
- '66.##.64.233':16471
- '12#.#02.198.66':16471
- '10#.#22.108.235':16471
- '71.#0.30.68':16471
- '89.##.135.63':16471
- '87.##.214.57':16471
- '74.##.221.12':16471
- '2.##8.8.156':16471
- '17#.#78.149.12':16471
- '17#.#75.60.33':16471
- '88.##8.53.30':16471
- '46.##6.45.20':16471
- '77.##9.97.33':16471
- '66.##9.161.22':16471
- '78.##.235.22':16471
- '18#.#23.198.25':16471
- '69.##1.42.26':16471
- '21#.#15.4.189':16471
- '69.##1.94.195':16471
- '18#.#77.80.209':16471
- '75.##7.202.36':16471
- '17#.#9.23.19':16471
- '83.#.70.42':16471
- '65.##.63.167':16471
- '98.##6.13.116':16471
- '17#.#77.156.19':16471
- '17#.#8.16.199':16471
- '17#.#7.162.34':16471
- '98.##4.115.151':16471
- '88.##2.253.254':16471
- '79.##2.253.254':16471
- '17#.#52.253.254':16471
- '95.##2.253.254':16471
- '11#.#35.44.2':16471
- '78.##.140.247':16471
- '60.#8.232.4':16471
- '24.##.184.248':16471
- '79.##8.162.248':16471
- '18#.#52.253.254':16471
- '88.##4.253.254':16471
- '71.##4.253.254':16471
- '18#.#54.253.254':16471
- '13#.#54.253.254':16471
- '21#.#53.253.254':16471
- '11#.#53.253.254':16471
- '71.##3.253.254':16471
- '18#.#53.253.254':16471
- '16#.#53.253.254':16471
- '12#.#44.188.240':16471
- '79.##7.218.239':16471
- '69.##5.49.11':16471
- '68.##.36.241':16471
- '12#.#.160.237':16471
- '22#.#7.180.236':16471
- '89.##5.234.235':16471
- '94.##5.85.89':16471
- '21#.#39.24.75':16471
- '79.##4.21.11':16471
- '17#.#2.49.91':16471
- '84.##6.156.129':16471
- '79.##6.241.4':16471
- '20#.#99.223.246':16471
- '85.#31.16.7':16471
- '12#.#3.72.243':16471
- '68.##3.88.242':16471
- '21#.#48.188.9':16471
- '82.##.85.243':16471