Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012020061820200619\index.dat
Сетевая активность
Подключается к
- 'st####.xx.fbcdn.net':443
- 'sc#######ams4-1.xx.fbcdn.net':443
TCP
Запросы HTTP GET
- http://www.tr##z.pl/rc/
- http://me######omp.blogspot.com/feeds/posts/summary?ma######################################################
- http://me######omp.blogspot.com/js/cookienotice.js
- http://3.##.#logspot.com/-EA-jUDVxurM/WZhTb_6_M_I/AAAAAAAAFms/AHTEid5Bpr0rV6n2g7gOdYi5DtUL275AwCLcBGAs/w60-h60-c/Infus%2BIP%2B2770%2B%257E%2BMentari%2BKomputer%2BBuayan%2Bwww.mentarikomp.blogsp...
- http://me######omp.blogspot.com/feeds/posts/default/-/Tutorial?or#####################################################
- http://2.##.#logspot.com/-SUfEA11Trm8/WCnw6vrK5hI/AAAAAAAAFXI/RX44530uaYQTuXQVOj6eD_1q_hlBvjJSwCLcB/w60-h60-c/IMG-20161114-WA0019.jpg
- http://3.##.#logspot.com/-Conkuddypss/WCnpodOl_UI/AAAAAAAAFW0/pW5Mg86aQuMtD_uKCRWbNFrw-qbvFer4gCPcBGAYYCw/w60-h60-c/IMG_20161114_161112.jpg
- http://4.##.#logspot.com/-HBNTdLOMbY4/W6Spa8sv5SI/AAAAAAAAJ-I/zgYpv98ZrzIguzU7GfBXmW8KQIWVnCOGACKgBGAs/w300-h140-c/P_20180917_161428.jpg
- http://me######omp.blogspot.com/feeds/posts/default/-/Printer?or#####################################################
- http://1.##.#logspot.com/-9cIC4pvxPYU/WblbDflbxLI/AAAAAAAAGmM/a2MrdLDc4kY8-1PzblCHOtQrvxNxtrXyACLcBGAs/w60-h60-c/Linux%2B-%2BMentari%2BKomputer%2BBuayan.png
- http://4.##.#logspot.com/-oNK45CM4D2U/WblYOGpo_zI/AAAAAAAAGmA/pxH_FO5uqVoteMfx-yX4_e2i3XcVf9V8QCLcBGAs/w60-h60-c/Windows%2B7%2B-%2BMentari%2BKomputer%2BBuayan.png
- http://1.##.#logspot.com/-zFGX9fDfxOI/XU2Qs9y0JgI/AAAAAAAAImA/i6miS5oZJIEfisNGO2fK3TIwPg4smQdsQCLcBGAs/w60-h60-c/5.%2BPosisi%2BJumper%2B2%2B%257E%2BMentari%2BKomputer%2BBuayan.jpg
- http://me######omp.blogspot.com/feeds/posts/default/-/Laptop?or#####################################################
- http://1.##.#logspot.com/-w7QCJ-JURBk/XU2ZOy2YPnI/AAAAAAAAImk/1im0bNxXVNcUjxqzyl7_qnj6pGXOmkTpACLcBGAs/w300-h140-c/Cara%2BCek%2BSpesifikasi%2BLaptop%2Batau%2BKomputer%2B%257E%2BMentari%2BKomput...
- http://me######omp.blogspot.com/feeds/posts/default/-/Komputer?or#####################################################
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- http://1.##.#logspot.com/-oiLqtRLW4tY/WB7w7ckQxvI/AAAAAAAAFTM/HumuI2WLlNUSPwbPJ9Y1av146i5mDGfoQCPcBGAYYCw/w60-h60-c/MENTARI%2B%2BKOMPUTER%2BPANGGILAN.jpg
- http://4.##.#logspot.com/-m-FUidx0Xb0/W4-1DVB6guI/AAAAAAAAJ2E/9m_l_9uovDkJfH-PwISU1vzWDgpW8LjFgCLcBGAs/w60-h60-c/Blue%2BVoucher.png
- http://3.##.#logspot.com/-f9q2y3qeAqM/WZ4-HKH-YDI/AAAAAAAAFpg/ZTP-q73lFD4e_tUg17lFDju33gVZtXv9wCLcBGAs/w60-h60-c/Hotspot%2BWifi%2BLogin%2B-%2Bwww.mentarikomp.blogspot.co.id.png
- http://2.##.#logspot.com/-gHuLK6gf7rw/W5S-xxQrSpI/AAAAAAAAJ3k/uNydFKEDkCU6YLEENQ1z49bdiJFxTnS-ACLcBGAs/w300-h140-c/Setting%2BEmail%2BMikrotik.png
- http://me######omp.blogspot.com/feeds/posts/default/-/Internet?or#####################################################
- http://1.##.#logspot.com/-LbJ2lUnOwDE/WZsGUuQ7DyI/AAAAAAAAIME/k4Yg_WNcjeUOikIm5p7_AgHltnep6QP-QCLcBGAs/w60-h60-c/Penampakan%2BWindows%2BLoader%2Bv2.2.2.png
- http://co#####.facebook.net/en_US/sdk.js
- http://1.##.#logspot.com/-fElFC_Vcphs/W6xeO7pPQ9I/AAAAAAAAKEA/OEvzapaPxrAbGrU4TPPHzihLPzZSNg2oACK4BGAYYCw/s1600/Test%2BHead%2BMentari%2BKomputer.png
- http://me######omp.blogspot.com/feeds/posts/default/-/Download?or#####################################################
- http://fo###.gstatic.com/s/opensanscondensed/v14/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMQw.eot
- http://aj##.#oogleapis.com/ajax/libs/jquery/1/jquery.min.js
- http://fo###.#oogleapis.com/css?fa############################
- http://me######omp.blogspot.com/
- http://de######rtal.firefox.com/success.txt
- http://me######omp.blogspot.co.id/
- http://3.##.#logspot.com/-cQwe6TQDLlQ/W219-uiOn7I/AAAAAAAAJhI/htzjr5LzJ2Up3Mtf6I9r2oazFZfSHMi1gCPcBGAYYCw/w60-h60-c/P_20180527_171636.jpg
- http://me######omp.blogspot.com/favicon.ico
UDP
- DNS ASK tr##z.pl
- DNS ASK oc##.thawte.com
- DNS ASK fa###ook.com
- DNS ASK re#####es.blogblog.com
- DNS ASK 4.##.#logspot.com
- DNS ASK sy########og.files.wordpress.com
- DNS ASK 2.##.#logspot.com
- DNS ASK 3.##.#logspot.com
- DNS ASK 1.##.#logspot.com
- DNS ASK co#####.facebook.net
- DNS ASK st####.xx.fbcdn.net
- DNS ASK go#####analytics.com
- DNS ASK fo###.gstatic.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK fo###.#oogleapis.com
- DNS ASK bl##ger.com
- DNS ASK me######omp.blogspot.com
- DNS ASK de######rtal.firefox.com
- DNS ASK me######omp.blogspot.co.id
- DNS ASK se####.hotspot.net
- DNS ASK microsoft.com
- DNS ASK sc#######ams4-1.xx.fbcdn.net
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Static' WindowName: ''
