Technical Information
- <SYSTEM32>\cmd.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- <SYSTEM32>\wbem\Logs\wbemess.lo_
- '21#.#08.252.185':80
- 'pr####.fling.com':80
- 21#.#08.252.185/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK p�#�m6
- DNS ASK p�#�R
- DNS ASK p�#�F,q
- DNS ASK p�#�g�
- DNS ASK pr####.fling.com
- DNS ASK p�#�4:C
- DNS ASK p�#J�'A