Technical Information
Modifies file system
Creates the following files
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
Network activity
Connects to
- 'da##.71xe.com':445
TCP
HTTP GET requests
- http://www.uc##g.com/statics/2018pc/css/style.css
- http://www.uc##g.com/uploads/2018/1217/20181217095722855.png
- http://www.uc##g.com/uploads/2019/0904/1909045d6f322b54066.png
- http://www.uc##g.com/uploads/2019/0128/20190128105043156.png
- http://www.uc##g.com/uploads/2019/0912/1909125d79be4ae5b77.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3cd7244a1ee.png
- http://www.uc##g.com/uploads/2019/1201/1912015de37d0ac0987.jpg
- http://www.uc##g.com/uploads/2019/1022/1910225dae6145c32c0.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cf2251f48c.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cf0cd70310.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cf045460b1.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cef1c80cd8.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cee1bd5d95.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3ceda9d0d1d.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3ced1e48a08.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3cec475058e.jpg
- http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3cebf1c5b18.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3ceb947b884.jpg
- http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba61966d77.jpg
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba557e40d3.jpg
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba4eb98205.jpg
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba467203ec.png
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba2c66f2b0.jpg
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba2428bd28.jpg
- http://www.uc##g.com/uploads/2020/0818/2008185f3ba1e2b5170.jpg
- http://www.uc##g.com/uploads/icon/dydsp.png
- http://www.uc##g.com/statics/2018pc/images/spr.png
- http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
- http://www.uc##g.com/uploads/2020/0817/2008175f3a27b7c5f99.jpg
- http://www.uc##g.com/uploads/2019/0724/1907245d37f0a309d61.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3cecac5e41f.jpg
- http://www.uc##g.com/uploads/2020/0819/2008195f3ce74b06f2c.png
- http://www.uc##g.com/uploads/icon/wps.png
- http://www.uc##g.com/statics/2018pc/js/html5.min.js
- http://www.uc##g.com/statics/2018pc/js/jquery.min.js
- http://www.uc##g.com/statics/2018pc/js/plugin.js
- http://www.uc##g.com/statics/2018pc/js/common.js
- http://cd#.#2wq.com/scrtips/ucbug_8.29.js
- http://www.uc##g.com/statics/2018pc/images/logo.png
- http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
- http://www.uc##g.com/uploads/icon/ce.png
- http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
- http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
- http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
- http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
- http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
- http://www.uc##g.com/uploads/icon/office2016.png
- http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3cf1b6ea8ea.png
- http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
- http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
- http://www.uc##g.com/uploads/icon/SBgameHacker.png
- http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
- http://www.uc##g.com/uploads/icon/360shoujizs.png
- http://www.uc##g.com/uploads/icon/xfplay.png
- http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
- http://www.uc##g.com/uploads/icon/weishi.png
- http://www.uc##g.com/uploads/icon/zuoyebang.png
- http://www.uc##g.com/uploads/icon/sjxunlei.png
- http://www.uc##g.com/uploads/icon/Opera.png
- http://www.uc##g.com/uploads/icon/Snipaste.png
- http://www.uc##g.com/uploads/2019/1012/1910125da1966731edf.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3cfc330d585.png
- http://www.uc##g.com/uploads/2019/0108/20190108061207772.png
- http://www.uc##g.com/uploads/2020/0819/2008195f3d03b651d87.png
UDP
- DNS ASK uc##g.com
- DNS ASK hm.##idu.com
- DNS ASK cd#.#2wq.com
- DNS ASK da##.71xe.com
