Technical Information
Modifies file system
Creates the following files
- %APPDATA%\verge\debug.log
- %APPDATA%\tor\unverified-microdesc-consensus.tmp
- %APPDATA%\verge\banlist.a745
- %APPDATA%\verge\peers.e269
- %APPDATA%\verge\onion_private_key
- %APPDATA%\verge\tor\onion\hostname.tmp
- %APPDATA%\verge\tor\onion\hs_ed25519_public_key.tmp
- %APPDATA%\verge\tor\onion\hs_ed25519_secret_key.tmp
- %APPDATA%\verge\wallets\database\log.0000000004
- %APPDATA%\tor\control_auth_cookie.tmp
- %APPDATA%\tor\state.tmp
- %APPDATA%\verge\wallets\database\log.0000000003
- %APPDATA%\verge\tor\tor.log
- %APPDATA%\verge\wallets\database\log.0000000002
- %APPDATA%\verge\wallets\wallet.dat
- %APPDATA%\verge\wallets\__db.80000001.38f52cc0
- %APPDATA%\verge\wallets\database\log.0000000001
- %APPDATA%\verge\chainstate\000003.log
- %APPDATA%\verge\chainstate\000002.dbtmp
- %APPDATA%\verge\chainstate\manifest-000002
- %APPDATA%\verge\chainstate\000001.dbtmp
- %APPDATA%\verge\chainstate\manifest-000001
- %APPDATA%\verge\blocks\blk00000.dat
- %APPDATA%\verge\blocks\index\000002.dbtmp
- %APPDATA%\verge\blocks\index\manifest-000002
- %APPDATA%\verge\blocks\index\000001.dbtmp
- %APPDATA%\verge\blocks\index\manifest-000001
- %APPDATA%\verge\.cookie.tmp
- %APPDATA%\tor\cached-certs.tmp
- %APPDATA%\tor\cached-microdesc-consensus.tmp
Deletes the following files
- %APPDATA%\verge\blocks\index\current
- %APPDATA%\verge\blocks\index\manifest-000001
- %APPDATA%\verge\chainstate\current
- %APPDATA%\verge\chainstate\manifest-000001
- %APPDATA%\tor\unverified-microdesc-consensus
Moves the following files
- from %APPDATA%\verge\.cookie.tmp to %APPDATA%\verge\.cookie
- from %APPDATA%\verge\blocks\index\000001.dbtmp to %APPDATA%\verge\blocks\index\current
- from %APPDATA%\verge\blocks\index\000002.dbtmp to %APPDATA%\verge\blocks\index\current
- from %APPDATA%\verge\chainstate\000001.dbtmp to %APPDATA%\verge\chainstate\current
- from %APPDATA%\verge\chainstate\000002.dbtmp to %APPDATA%\verge\chainstate\current
- from %APPDATA%\verge\wallets\__db.80000001.38f52cc0 to %APPDATA%\verge\wallets\wallet.dat
- from %APPDATA%\tor\state.tmp to %APPDATA%\tor\state
- from %APPDATA%\tor\control_auth_cookie.tmp to %APPDATA%\tor\control_auth_cookie
- from %APPDATA%\verge\tor\onion\hs_ed25519_secret_key.tmp to %APPDATA%\verge\tor\onion\hs_ed25519_secret_key
- from %APPDATA%\verge\tor\onion\hs_ed25519_public_key.tmp to %APPDATA%\verge\tor\onion\hs_ed25519_public_key
- from %APPDATA%\verge\tor\onion\hostname.tmp to %APPDATA%\verge\tor\onion\hostname
- from %APPDATA%\verge\peers.e269 to %APPDATA%\verge\peers.dat
- from %APPDATA%\verge\banlist.a745 to %APPDATA%\verge\banlist.dat
- from %APPDATA%\tor\unverified-microdesc-consensus.tmp to %APPDATA%\tor\unverified-microdesc-consensus
- from %APPDATA%\tor\cached-certs.tmp to %APPDATA%\tor\cached-certs
- from %APPDATA%\tor\cached-microdesc-consensus.tmp to %APPDATA%\tor\cached-microdesc-consensus
Substitutes the following files
- %APPDATA%\verge\blocks\index\current
- %APPDATA%\verge\chainstate\current
Network activity
TCP
- 'localhost':9051
- 'localhost':49208
- '18#.#29.62.62':9001
- '17#.#0.104.240':443
- '13#.#01.250.33':9011
- '21#.#82.75.181':9001
- '12#.31.0.34':9101
- '19#.#5.52.53':9001
- 'localhost':49198
- '19#.#0.112.165':443
- '20#.#3.164.118':443
- '17#.#7.174.14':9001
- '66.#11.2.16':9001
- '21#.#39.217.18':1337
- '18#.#00.85.101':9001
- '37.##2.185.182':8080
- '13#.#88.40.189':443
- '16#.#72.139.104':443
- '46.##.237.221':9001
- 'localhost':49185
- 'localhost':9090
- '5.##.111.149':443
- 'localhost':49183
- '19#.#0.191.95':443
- '16#.#72.176.167':443
UDP
- DNS ASK x9.###############mfej45jgphupxob5fci4hjxvw2ui75e24tjssl2id.onion
- DNS ASK x9.#####jrrtxteffvt.onion
- DNS ASK x9.#####ovpwfeauspf.onion
- DNS ASK x9.#####6tts7zhm24k.onion
- DNS ASK x9.#####twxzwxrmory.onion
- DNS ASK x9.#####m6j3vcuw2qz.onion
- DNS ASK x9.#####6k4a6d4qe53.onion
- DNS ASK x9.#####j5k5xymy5su.onion
- DNS ASK x9.#####ambifo2ybdm.onion
- DNS ASK x9.#####pxfpim5lwqv.onion
- DNS ASK x9.#####66g4z5o4aso.onion
- DNS ASK x9.#####u7gsi7nan5m.onion
- DNS ASK x9.#####jfsvexzba4w.onion
- DNS ASK x9.#####sfmkrqjehjy.onion
- DNS ASK x9.#####foxxedddnme.onion
- DNS ASK x9.###############5kaal5cwwfbrsgnimw77gawwltsaklgxxlubjvhid.onion
- DNS ASK x9.###############ghkkvz2pmxalgmoviokgjiwjgcvpcxa6piym5m2ad.onion
- DNS ASK x9.#####u5gcmjox26m.onion
- DNS ASK x9.#####bsuva4qkff2.onion
Miscellaneous
Executes the following
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "<Full path to file>"
