Technical Information
- %TEMP%\zlib.dll
- %TEMP%\a202391
- <PATH_SAMPLE>.dat
- %TEMP%\a202394
- %TEMP%\a202392
- %TEMP%\a202393
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012023092220230923\index.dat
- 'vl##.com':80
- 'im##.ph.126.net':80
- http://www.vl##.com/NGGS.ASP?na###############################
- http://www.vl##.com/GG.ASP?na###############################
- http://www.vl##.com/INC/QQzonePLS.txt
- http://www.vl##.com/T/?10###################
- http://im##.ph.126.net/FxyzvD03iwKqdpxBLPDscQ==/63050394800284016.jpg
- http://im##.ph.126.net/GGS-yToV3YyJjxFJp3goEA==/1300414392420331259.jpg
- http://im##.ph.126.net/yqpqBAhcdOlbRdj3Hbingw==/2507942042509048049.jpg
- http://im##.ph.126.net/WdrLXyAxQFiAn5cZ224jlw==/1582733794061115296.jpg
- http://www.vl##.com/gg.htm
- http://www.vl##.com/ads.asp?na########
- DNS ASK vl##.com
- DNS ASK ng#.#lss.com
- DNS ASK im##.ph.126.net
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''