Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021062320210624\index.dat
Modifies the following files
Network activity
Connects to
- 'google.com':80
- 'fo###.#oogleapis.com':443
- 'fo###.gstatic.com':443
TCP
HTTP GET requests
- http://ww#.##versity.net/px.gif?ch#######################
- http://ww#.##versity.net/favicon.ico
- http://ww#.##versity.net/glp?r=######################################################################
Other
- 'fo###.#oogleapis.com':443
UDP
- DNS ASK li###sity.net
- DNS ASK ww#.##versity.net
- DNS ASK google.com
- DNS ASK fo###.#oogleapis.com
- DNS ASK fo###.gstatic.com
- DNS ASK microsoft.com
Miscellaneous
Searches for the following windows
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
