Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Samsung Memory Indexer' = '%APPDATA%\Memory Indexer.exe'
- %APPDATA%\Memory Indexer.exe
- %APPDATA%\Internal.log
- 'wp#d':80
- 'li##ling.pw':80
- http://11#.#11.111.1/wpad.dat via wp#d
- http://li##ling.pw/forums/members/gate.php
- DNS ASK wp#d
- DNS ASK li##ling.pw
- '%APPDATA%\Memory Indexer.exe'