Technical Information
- <Current directory>\applink\gzip.dll
- <Current directory>\applink\sql.dll
- <Current directory>\appdata\qs.db-journal
- <Current directory>\appdata\qs.db
- <Current directory>\appdata\appconfig.ini
- <Current directory>\èõö¾\²ù×÷èõö¾2021äê3ôâ15èõ.txt
- %TEMP%\dfg.dat
- <Full path to file>
- <Current directory>\appdata\qs.db-journal
- <Full path to file>
- <Current directory>\appdata\qs.db-journal
- from <Full path to file> to <Current directory>\yddtxzimauqcbjczjphb.dfg
- 'z1#.#nzz.com':80
- 'ap####t.df0535.com':443
- 'zz.##35k.com':80
- '7x####.##m2.z0.glb.qiniucdn.com':80
- 'pa###ngcrew.net':80
- 'iy###arch.com':80
- http://ww##.#z.1235k.com/track.php?do############################################################################################################################################################...
- http://ww##.#z.1235k.com/?XQ######
- DNS ASK z1#.#nzz.com
- DNS ASK ap####t.df0535.com
- DNS ASK zz.##35k.com
- DNS ASK 7x####.##m2.z0.glb.qiniucdn.com
- DNS ASK ww##.#z.1235k.com
- DNS ASK pa###ngcrew.net
- DNS ASK iy###arch.com
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''