Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012022090520220906\index.dat
Modifies the following files
Network activity
Connects to
- 'tu###ideo.eu':80
- 'se##top.eu':80
- 'hd##ture.eu':80
- 'sh###per.org':80
- 'a.###lsrv.com':443
- 'xx##de.eu':80
- 'ma###tube.eu':80
- 'st###adult.xyz':80
TCP
HTTP GET requests
- http://tu###ideo.eu/scpqrzdb.cgi?2&###################################################
- http://i.####yadult.xyz/streamrotator/thumbs/Yh/466035.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Fg/395540.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kh/426897.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Gh/448318.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ue/280566.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/fi/473858.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Pe/301386.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ei/472454.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Bh/443916.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/zh/441965.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ve/281799.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Bh/443769.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/nh/429037.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/bf/313112.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Rh/459627.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/lh/427746.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ai/468131.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ff/317315.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ie/268115.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/uf/332153.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ke/296661.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/jh/425951.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ne/299695.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ah/442777.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ze/285266.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Me/298278.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430718.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430956.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Oh/456506.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Je/295501.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/xh/439899.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/he/267736.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ae/260497.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Re/303948.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Uh/462833.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Lh/453136.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ih/424901.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/fg/369128.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kf/322741.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Dh/445648.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/lg/375667.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Le/297071.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Qf/354361.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/He/293812.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ph/457143.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Eh/446474.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ve/307297.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kh/426703.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Bf/339631.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430586.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ag/390560.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Hd/241320.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430200.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/gg/370591.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/va/73333.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ze/285278.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kg/374584.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/hh/423179.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/hg/371024.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Gg/396205.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Re/303986.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430986.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/af/312072.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/se/278319.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ld/245748.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/of/326983.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Eg/394248.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Lh/453468.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ei/472529.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ah/442688.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/jh/425487.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Fe/291906.jpg
- http://ma###tube.eu/ftt2/o.php
- http://st###adult.xyz/
- http://st###adult.xyz/f/check.php?t=#############################################################
- http://i.####yadult.xyz/streamrotator/thumbs/Bh/443251.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ag/364767.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Je/295569.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Wc/204632.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oi/482234.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/nh/429593.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/fe/265434.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Th/461378.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kh/426461.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ue/306762.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/gc/162601.jpg
- http://ma###tube.eu/ftt2/check.php?t=#############################################################
- http://i.####yadult.xyz/streamrotator/thumbs/f/5636.jpg
- http://ma###tube.eu/ftt2/cron.php
- http://tu###ideo.eu/jry.cgi?3
- http://tu###ideo.eu/ojaftz11.html
- http://se##top.eu/go.php?u=####################################################################################
- http://se##top.eu/favicon.ico
- http://tu###ideo.eu/agvv2.html
- http://tu###ideo.eu/scpqrzdb.cgi?2&###############################
- http://tu###ideo.eu/ghaugjqk.cgi?2&###################################################
- http://hd##ture.eu/
- http://xx##de.eu/ftt2/o.php
- http://hd##ture.eu/analiz.js
- http://sh###per.org/ajn.cgi?14###########
- http://hd##ture.eu/ftt2/check.php?t=#############################################################
- http://hd##ture.eu/ftt2/o.php
- http://xx##de.eu/
- http://xx##de.eu/ftt2/check.php?t=#############################################################
- http://ma###tube.eu/
- http://i.####yadult.xyz/streamrotator/thumbs/Be/287460.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Uh/462475.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Kh/452183.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Xh/465552.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Gh/448302.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/kh/426639.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/yg/388135.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Hf/345753.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Mh/454294.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Bh/443406.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ng/403999.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Fg/395511.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Fh/447303.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/mh/428692.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ze/311336.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Ye/310586.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/We/308971.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Je/295014.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ih/424341.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Hd/241997.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/bi/469115.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Zf/363031.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Tf/357493.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/wh/438356.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ih/424822.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ih/424578.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/ig/372553.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Nb/143566.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Zh/467635.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/lg/375745.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/th/435266.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/rh/433346.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/di/471774.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/oh/430624.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/bi/469550.jpg
- http://i.####yadult.xyz/streamrotator/thumbs/Og/404385.jpg
- http://st###adult.xyz/favicon.ico
Other
- 'a.###lsrv.com':443
UDP
- DNS ASK tu###ideo.eu
- DNS ASK se##top.eu
- DNS ASK hd##ture.eu
- DNS ASK sh###per.org
- DNS ASK a.###lsrv.com
- DNS ASK xx##de.eu
- DNS ASK ma###tube.eu
- DNS ASK st###adult.xyz
- DNS ASK i.####yadult.xyz
Miscellaneous
Searches for the following windows
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
