Technical Information
- %TEMP%\a2023101
- <PATH_SAMPLE>.dat
- %TEMP%\a2023105
- %TEMP%\a2023103
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012023103020231031\index.dat
- %LOCALAPPDATA%\microsoft\internet explorer\msimgsiz.dat
- %TEMP%\a2023102
- %TEMP%\a2023104
- 'vl##.com':80
- 'im##.ph.126.net':80
- http://www.vl##.com/NGGS.ASP?na#########################################
- http://www.vl##.com/GG.ASP?na#########################################
- http://www.vl##.com/INC/QQMJJS.txt
- http://im##.ph.126.net/FxyzvD03iwKqdpxBLPDscQ==/63050394800284016.jpg
- http://im##.ph.126.net/GGS-yToV3YyJjxFJp3goEA==/1300414392420331259.jpg
- http://im##.ph.126.net/OsKX8lQQ3Xx9RVzwPe5qKQ==/668221594728193105.jpg
- http://www.vl##.com/ads.asp?na##########
- http://www.vl##.com/gg.htm
- http://www.vl##.com/ads.asp?na########
- http://im##.ph.126.net/yqpqBAhcdOlbRdj3Hbingw==/2507942042509048049.jpg
- http://im##.ph.126.net/WdrLXyAxQFiAn5cZ224jlw==/1582733794061115296.jpg
- DNS ASK vl##.com
- DNS ASK ng#.#lss.com
- DNS ASK im##.ph.126.net
- DNS ASK ta##23.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''