Technical Information
- iexplore.exe
- %LOCALAPPDATA%\virtualstore\mcztle.exe
- %LOCALAPPDATA%\virtualstore\iexplore.exe
- 'microsoft.com':80
- '16#.#35.72.162':80
- '12#.#1.79.29':8000
- http://16#.#35.72.162/root/RedGirl/ip/88888888.html
- DNS ASK microsoft.com
- '%LOCALAPPDATA%\virtualstore\mcztle.exe' 1
- '%LOCALAPPDATA%\virtualstore\iexplore.exe'