Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021083120210901\index.dat
Modifies the following files
Network activity
Connects to
- 'yo#####rentforum.com':80
- 'ww#.####gparentforum.com':80
- 'pa###ngcrew.net':80
- 'iy##z.com':80
- 'js#####t.newrelic.com':443
TCP
HTTP GET requests
- http://yo#####rentforum.com/px.js?ch##
- http://pa###ngcrew.net/assets/scripts/js3.js
- http://ww#.####gparentforum.com/track.php?do#####################################################################################################################################################...
- http://ww#.####gparentforum.com/favicon.ico
- http://ww#.####gparentforum.com/
- http://iy##z.com/?dn###################################
- http://iy##z.com/favicon.ico
- http://ww#.####gparentforum.com/&meta=1
Other
- 'js#####t.newrelic.com':443
UDP
- DNS ASK yo#####rentforum.com
- DNS ASK ww#.####gparentforum.com
- DNS ASK pa###ngcrew.net
- DNS ASK iy##z.com
- DNS ASK js#####t.newrelic.com
- DNS ASK microsoft.com
Miscellaneous
Searches for the following windows
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
