Technical Information
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\alg.exe
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- 'localhost':80
- 'pr####.fling.com':80
- fo#####-counters.com/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK ��#v?[
- DNS ASK ��#��
- DNS ASK ��#oMM�
- DNS ASK ��#��%W
- DNS ASK ��#�3e
- DNS ASK pr####.fling.com
- DNS ASK ��#pfn�
- DNS ASK ��# .g