Technical Information
Modifies file system
Creates the following files
- %HOMEPATH%\cookies\user@baidu[1].txt
Network activity
Connects to
- 'js.##ers.51.la':443
TCP
HTTP GET requests
- http://www.so#####.#om.litedownloadseek.cn/public/2018/css/normal.css
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/home_btn.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/slike.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/share_weibo.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/share_qqzone.png
- http://so##hcn.com/public/2016/pc/img/i-icon5.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/nfyk.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/nfrb.png
- http://www.so##hcn.com/public/2016/pc/img/i-icon5.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/bkbg.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/zone-more.png
- http://bi##.huaxia.com/images/commentImages/end_n_input_bg2.gif
- http://bi##.###edownloadseek.cn/gate/big5/stat.huaxia.com/count/MyStat.jsp?ai###########################
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/font.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/qr2.png
- http://pu##.###nzhang.baidu.com/push.js
- http://bi##.huaxia.com/huaxiaimages/lb/45.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/39.jpg
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/share_wechat.png
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/share_tt.png
- http://bi##.huaxia.com/huaxiaimages/zz/5.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/32.jpg
- http://www.so#####.#om.litedownloadseek.cn/2018/video/prismindex1.9.9.css
- http://bi##.huaxia.com/huaxiaimages/zz/9.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/35.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/2.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/1.jpg
- http://www.so#####.#om.litedownloadseek.cn/public/2018/css/article.css
- http://www.so#####.#om.litedownloadseek.cn/public/2018/img/backtop.png
- http://bi##.###edownloadseek.cn/tj.js
UDP
- DNS ASK so#####.#om.litedownloadseek.cn
- DNS ASK bi##.huaxia.com
- DNS ASK bi##.###edownloadseek.cn
- DNS ASK pu##.###nzhang.baidu.com
- DNS ASK so##hcn.com
- DNS ASK ap#.##are.baidu.com
- DNS ASK ba##u.com
- DNS ASK js.##ers.51.la
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
