Technical Information
Network activity
Connects to
- 'ca######ightlyspider.com':445
- 'co####r.24log.com':80
- 'lo###irls.xyz':80
- 'su###model.bar':80
- 'to####z1.mail.ru':443
- 'co####r.yadro.ru':445
- 'microsoft.com':80
- 'x1.#.lencr.org':80
- 'ad.##ads.com':445
- 'ad###sites.top':443
- 'ca######ightlyspider.com':80
- 'ae####nership.com':443
- 'co####r.24log.com':443
- 'ad###.#oonsearch.net':80
- 'im####.imagevenue.com':80
- 'ad###sites.top':80
- 'ho###lolli.top':80
- 'lo##itop.cc':80
- '18##p.link':80
- 'cu###ist.xyz':443
- 'to##or.top':80
- 'ne#####.neocities.org':443
- 'ad#####tetoplist.com':80
- 'st.##xxx.info':445
- 'ca######ightlyspider.com':139
- 'cl###ic-porn.cc':80
- 'ad.##ads.com':80
TCP
HTTP GET requests
- http://ad#####tetoplist.com/skins/romskin/screen.css
- http://co####r.24log.com/buttons/24/bg24-4_2.gif
- http://co####r.24log.com/buttons/24/bg24-4_3.gif
- http://co####r.24log.com/buttons/24/bg24-4_1.gif
- http://lo###irls.xyz/loli831.jpg
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://x1.#.lencr.org/
- http://18##p.link/images/button.png
- http://ca######ightlyspider.com/acff4782b00f89bd93bc4d401155815e/invoke.js
- http://www.ad###.#oonsearch.net/atx/sexcar88x31.gif
- http://co####r.24log.com/counter?id################################################################################################
- http://to##or.top/images/button.png
- http://18##p.link/button.php?u=################
- http://im####.imagevenue.com/loc540/th_841417311_youngnudetop1_123_540lo.jpg
- http://ho###lolli.top/cgi-sys/suspendedpage.cgi?u=################
- http://ad###sites.top/astl1.gif
- http://ho###lolli.top/button.php?u=################
- http://to##or.top/button.php?u=################
- http://lo##itop.cc/button.php?u=############
- http://ad#####tetoplist.com/babko.png
- http://ad#####tetoplist.com/skins/romskin/header.jpg
- http://cl###ic-porn.cc/831banner.gif
- http://su###model.bar/toplist/button.php?u=########
Other
- 'ne#####.neocities.org':443
- 'cu###ist.xyz':443
- 'ad###sites.top':443
- 'ae####nership.com':443
- 'co####r.24log.com':443
- 'to####z1.mail.ru':443
UDP
- DNS ASK ca######ightlyspider.com
- DNS ASK to####z1.mail.ru
- DNS ASK co####r.24log.com
- DNS ASK co####r.yadro.ru
- DNS ASK microsoft.com
- DNS ASK x1.#.lencr.org
- DNS ASK ad.##ads.com
- DNS ASK ad#####ogtoplist.com
- DNS ASK ae####nership.com
- DNS ASK ad###.#oonsearch.net
- DNS ASK lo###irls.xyz
- DNS ASK cl###ic-porn.cc
- DNS ASK ad###sites.top
- DNS ASK ho###lolli.top
- DNS ASK lo##itop.cc
- DNS ASK 18##p.link
- DNS ASK to##or.top
- DNS ASK cu###ist.xyz
- DNS ASK ne#####.neocities.org
- DNS ASK st.##xxx.info
- DNS ASK ad#####tetoplist.com
- DNS ASK im####.imagevenue.com
- DNS ASK su###model.bar
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
