Trojan.DownLoader45.9460

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = ''

Modifies file system

Creates the following files

%TEMP%\{ee34eec2-8cf0-44a8-a7ec-827b939af588}
<Current directory>\$$iutemp\in_acja02.zipy
<Current directory>\$$iutemp\in_acja03.zipy
<Current directory>\$$iutemp\in_acja04.zipy
<Current directory>\$$iutemp\in_acja05.zipy
<Current directory>\$$iutemp\in_acja06.zipy
<Current directory>\$$iutemp\in_acja07.zipy
<Current directory>\$$iutemp\in_acja08.zipy
<Current directory>\$$iutemp\min_shop_24.zipy
<Current directory>\$$iutemp\school_in_ad_001.zipy
<Current directory>\$$iutemp\school_in_ad_002.zipy
<Current directory>\$$iutemp\school_in_ad_003.zipy
<Current directory>\$$iutemp\school_in_ad_004.zipy
<Current directory>\$$iutemp\school_in_ad_005.zipy
<Current directory>\$$iutemp\busmain51f.zipy
<Current directory>\$$iutemp\busmainrcb1.zipy
<Current directory>\$$iutemp\busmainshibuya3.zipy
<Current directory>\$$iutemp\busstation.zipy
<Current directory>\$$iutemp\npc_51f.zipy
<Current directory>\$$iutemp\npc_farmsite.zipy
<Current directory>\$$iutemp\npc_rcb1.zipy
<Current directory>\$$iutemp\flysun1_1.zipy
<Current directory>\$$iutemp\min_ae-icebox_01.zipy
<Current directory>\$$iutemp\min_ae-icebox05.zipy
<Current directory>\$$iutemp\in_acja01.zipy
<Current directory>\$$iutemp\00774.zipy
<Current directory>\$$iutemp\bus02.zipy
<Current directory>\$$iutemp\ad_ppl2_12.zipy
<Current directory>\$$iutemp\quest_daily2.zipy
<Current directory>\$$iutemp\quest_daily3.zipy
<Current directory>\$$iutemp\login_man.zipy
<Current directory>\$$iutemp\quest_daily4test.zipy
<Current directory>\$$iutemp\class0.zipy
<Current directory>\$$iutemp\class1.zipy
<Current directory>\$$iutemp\class2.zipy
<Current directory>\$$iutemp\class3.zipy
<Current directory>\$$iutemp\class4.zipy
<Current directory>\$$iutemp\class5.zipy
<Current directory>\$$iutemp\class6.zipy
<Current directory>\$$iutemp\class7.zipy
<Current directory>\$$iutemp\class8.zipy
<Current directory>\$$iutemp\class9.zipy
<Current directory>\$$iutemp\classa.zipy
<Current directory>\$$iutemp\classb.zipy
<Current directory>\$$iutemp\classc.zipy
<Current directory>\$$iutemp\classd.zipy
<Current directory>\$$iutemp\classe.zipy
<Current directory>\$$iutemp\classf.zipy
<Current directory>\$$iutemp\inven_helper_3.zipy
<Current directory>\$$iutemp\ad_ppl2_10.zipy
<Current directory>\$$iutemp\ad_ppl2_11.zipy
<Current directory>\$$iutemp\bus01.zipy
<Current directory>\$$iutemp\00776.zipy
<Current directory>\$$iutemp\min_column_01.zipy
<Current directory>\$$iutemp\w_cos_min_body.zipy
<Current directory>\$$iutemp\cdmstore03.zipy
<Current directory>\$$iutemp\ceilingtile02_d.zipy
<Current directory>\$$iutemp\ceramictile01.zipy
<Current directory>\$$iutemp\conc_hn_stair01.zipy
<Current directory>\$$iutemp\conc_hn_trim02.zipy
<Current directory>\$$iutemp\conc_jr_trimset01.zipy
<Current directory>\$$iutemp\concfloor06_d.zipy
<Current directory>\$$iutemp\concfloortile03.zipy
<Current directory>\$$iutemp\concfloortile04.zipy
<Current directory>\$$iutemp\concfloortile05.zipy
<Current directory>\$$iutemp\decal_streetsign01.zipy
<Current directory>\$$iutemp\concfloortile07.zipy
<Current directory>\$$iutemp\concfloortile18_d.zipy
<Current directory>\$$iutemp\concstairstep_d.zipy
<Current directory>\$$iutemp\concstep01.zipy
<Current directory>\$$iutemp\conctrimset03.zipy
<Current directory>\$$iutemp\concwall02.zipy
<Current directory>\$$iutemp\concwall04.zipy
<Current directory>\$$iutemp\concwall05.zipy
<Current directory>\$$iutemp\concwall07.zipy
<Current directory>\$$iutemp\concwallbase_d.zipy
<Current directory>\$$iutemp\decal_ivy01_d.zipy
<Current directory>\$$iutemp\cdmstore01.zipy
<Current directory>\$$iutemp\cdmstore02.zipy
<Current directory>\$$iutemp\cdmposter01.zipy
<Current directory>\$$iutemp\buildingset07.zipy
<Current directory>\$$iutemp\buildingset02.zipy
<Current directory>\$$iutemp\gameextext.zipy
<Current directory>\$$iutemp\servertext.zipy
<Current directory>\$$iutemp\minia1.zipy
<Current directory>\$$iutemp\chestmo1.zipy
<Current directory>\$$iutemp\chestmo2.zipy
<Current directory>\$$iutemp\chestmo3.zipy
<Current directory>\$$iutemp\xgbox.zipy
<Current directory>\$$iutemp\quest_4000.zipy
<Current directory>\$$iutemp\quest_4001.zipy
<Current directory>\$$iutemp\quest_4002.zipy
<Current directory>\$$iutemp\quest_daily1.zipy
<Current directory>\$$iutemp\new_window_main.zipy
<Current directory>\$$iutemp\gameword.zipy
<Current directory>\$$iutemp\bb1.zipy
<Current directory>\$$iutemp\bb2.zipy
<Current directory>\$$iutemp\bb3.zipy
<Current directory>\$$iutemp\bb4.zipy
<Current directory>\$$iutemp\airportfueltruck01_d.zipy
<Current directory>\$$iutemp\asphalt01.zipy
<Current directory>\$$iutemp\brickfloor01b_d.zipy
<Current directory>\$$iutemp\brickfloortile01.zipy
<Current directory>\$$iutemp\brickwall04.zipy
<Current directory>\$$iutemp\buildingset01a_d.zipy
<Current directory>\$$iutemp\npc_fight.zipy
<Current directory>\$$iutemp\yogasummer_2019.zipy
<Current directory>\$$iutemp\concfloortile11_d.zipy
<Current directory>\$$iutemp\quest_battlesvr.zipy
<Current directory>\$$iutemp\pkstreak2.zipy
<Current directory>\$$iutemp\class1a.zipy
<Current directory>\$$iutemp\class1b.zipy
<Current directory>\$$iutemp\class02.zipy
<Current directory>\$$iutemp\class2a.zipy
<Current directory>\$$iutemp\class2b.zipy
<Current directory>\$$iutemp\class03.zipy
<Current directory>\$$iutemp\class04.zipy
<Current directory>\$$iutemp\class05.zipy
<Current directory>\$$iutemp\class06.zipy
<Current directory>\$$iutemp\class07.zipy
<Current directory>\$$iutemp\class08.zipy
<Current directory>\$$iutemp\class09.zipy
<Current directory>\$$iutemp\class10.zipy
<Current directory>\$$iutemp\class11.zipy
<Current directory>\$$iutemp\class12.zipy
<Current directory>\$$iutemp\class13.zipy
<Current directory>\$$iutemp\class14.zipy
<Current directory>\$$iutemp\class15.zipy
<Current directory>\$$iutemp\class16.zipy
<Current directory>\$$iutemp\class17.zipy
<Current directory>\$$iutemp\class18.zipy
<Current directory>\$$iutemp\class19.zipy
<Current directory>\$$iutemp\class20.zipy
<Current directory>\$$iutemp\class01.zipy
<Current directory>\$$iutemp\class21.zipy
<Current directory>\$$iutemp\class0b.zipy
<Current directory>\$$iutemp\class00.zipy
<Current directory>\$$iutemp\update.urs
%TEMP%\update.urs.$$$.$$$
%TEMP%\update.urs.$$$
%TEMP%\update.ini
%TEMP%\incupdate_tempimg1.bmp
%TEMP%\incupdate_tempimg2.bmp
%TEMP%\incupdate_tempimg3.bmp
%TEMP%\incupdate_tempimg4.bmp
%TEMP%\incupdate.idx
%TEMP%\updateidx.$$$
%TEMP%\updateidx.ini
%TEMP%\update.zipy
%TEMP%\update.exe
%TEMP%\sblcopyf.ini
%TEMP%\sblcopyf.exe
%TEMP%\{f2439131-b2b6-4f64-bb44-b305c8f9c617}
<Current directory>\$$iutemp\yoga.zipy
<Current directory>\$$iutemp\rfeature.zipy
<Current directory>\$$iutemp\gameintext.zipy
<Current directory>\$$iutemp\uiinnercfg01.zipy
<Current directory>\$$iutemp\itemmix.zipy
<Current directory>\$$iutemp\minia.zipy
<Current directory>\$$iutemp\bettaaaa.zipy
<Current directory>\$$iutemp\class0a.zipy
<Current directory>\$$iutemp\class22.zipy
<Current directory>\$$iutemp\class23.zipy
<Current directory>\$$iutemp\class24.zipy
<Current directory>\$$iutemp\ad_ppl2_04.zipy
<Current directory>\$$iutemp\min_flag_01_02.zipy
<Current directory>\$$iutemp\min_flag_01_03.zipy
<Current directory>\$$iutemp\min_flag_01_04.zipy
<Current directory>\$$iutemp\min_su_11_04.zipy
<Current directory>\$$iutemp\min_su_11_04_redbull.zipy
<Current directory>\$$iutemp\mapslist.zipy
<Current directory>\$$iutemp\minimap_w_clubkill_in.zipy
<Current directory>\$$iutemp\logo1_a.zipy
<Current directory>\$$iutemp\supplies_set.zipy
<Current directory>\$$iutemp\npc_skillhelper_1.zipy
<Current directory>\$$iutemp\pkstreak.zipy
<Current directory>\$$iutemp\pkstreak3.zipy
<Current directory>\$$iutemp\param.zipy
<Current directory>\$$iutemp\ad_ppl2_05.zipy
<Current directory>\$$iutemp\ad_ppl2_06.zipy
<Current directory>\$$iutemp\ad_ppl2_07.zipy
<Current directory>\$$iutemp\ad_ppl2_08.zipy
<Current directory>\$$iutemp\ad_ppl2_09.zipy
<Current directory>\$$iutemp\comment.zipy
<Current directory>\$$iutemp\dailyquest.zipy
<Current directory>\$$iutemp\npc_1_t_knight1.zipy
<Current directory>\$$iutemp\ad_ppl2_02.zipy
<Current directory>\$$iutemp\ad_ppl2_03.zipy
<Current directory>\$$iutemp\ad_ppl2_01.zipy
<Current directory>\$$iutemp\ad_ppl1_02.zipy
<Current directory>\$$iutemp\yoga2.zipy
<Current directory>\$$iutemp\class26.zipy
<Current directory>\$$iutemp\class27.zipy
<Current directory>\$$iutemp\class28.zipy
<Current directory>\$$iutemp\class29.zipy
<Current directory>\$$iutemp\crow.zipy
<Current directory>\$$iutemp\crowstrtable.zipy
<Current directory>\$$iutemp\default.zipy
<Current directory>\$$iutemp\inven_loc_1.zipy
<Current directory>\$$iutemp\item.zipy
<Current directory>\$$iutemp\itemstrtable.zipy
<Current directory>\$$iutemp\quest.zipy
<Current directory>\$$iutemp\skillstrtable.zipy
<Current directory>\$$iutemp\skill.zipy
<Current directory>\$$iutemp\sinio.zipy
<Current directory>\$$iutemp\budots.zipy
<Current directory>\$$iutemp\activities_gui.zipy
<Current directory>\$$iutemp\charinven.zipy
<Current directory>\$$iutemp\charinven02.zipy
<Current directory>\$$iutemp\charinven03.zipy
<Current directory>\$$iutemp\gui_combination.zipy
<Current directory>\$$iutemp\interface_main.zipy
<Current directory>\$$iutemp\q_icon.zipy
<Current directory>\$$iutemp\sc_battle_ui_set.zipy
<Current directory>\$$iutemp\class25.zipy
<Current directory>\$$iutemp\_inner_student_record_ui.zipy
<Current directory>\$$iutemp\decaldrain01.zipy

Deletes the following files

%TEMP%\{ee34eec2-8cf0-44a8-a7ec-827b939af588}
%TEMP%\update.urs.$$$.$$$
%TEMP%\update.ini
%TEMP%\incupdate.idx
%TEMP%\updateidx.$$$
%TEMP%\updateidx.ini
%TEMP%\update.zipy
%TEMP%\update.urs.$$$
%TEMP%\incupdate_tempimg1.bmp
%TEMP%\incupdate_tempimg2.bmp
%TEMP%\incupdate_tempimg3.bmp
%TEMP%\incupdate_tempimg4.bmp
<Current directory>\$$iutemp\update.urs
%TEMP%\update.exe
%TEMP%\{f2439131-b2b6-4f64-bb44-b305c8f9c617}

Substitutes the following files

<Current directory>\$$iutemp\update.urs
%TEMP%\update.urs.$$$
%TEMP%\update.ini
%TEMP%\incupdate_tempimg1.bmp
%TEMP%\incupdate_tempimg2.bmp
%TEMP%\incupdate_tempimg3.bmp
%TEMP%\incupdate_tempimg4.bmp
%TEMP%\incupdate.idx
%TEMP%\updateidx.ini

Network activity

Connects to

'pa#####.yoga-ran.com':80

TCP

HTTP GET requests

http://pa#####.yoga-ran.com/incupdate.idx
http://pa#####.yoga-ran.com/school_in_ad_001.zipy
http://pa#####.yoga-ran.com/school_in_ad_002.zipy
http://pa#####.yoga-ran.com/school_in_ad_003.zipy
http://pa#####.yoga-ran.com/school_in_ad_004.zipy
http://pa#####.yoga-ran.com/school_in_ad_005.zipy
http://pa#####.yoga-ran.com/busmain51f.zipy
http://pa#####.yoga-ran.com/busmainrcb1.zipy
http://pa#####.yoga-ran.com/busmainshibuya3.zipy
http://pa#####.yoga-ran.com/busstation.zipy
http://pa#####.yoga-ran.com/classf.zipy
http://pa#####.yoga-ran.com/npc_51f.zipy
http://pa#####.yoga-ran.com/npc_rcb1.zipy
http://pa#####.yoga-ran.com/flysun1_1.zipy
http://pa#####.yoga-ran.com/min_ae-icebox_01.zipy
http://pa#####.yoga-ran.com/min_ae-icebox05.zipy
http://pa#####.yoga-ran.com/00774.zipy
http://pa#####.yoga-ran.com/00776.zipy
http://pa#####.yoga-ran.com/min_column_01.zipy
http://pa#####.yoga-ran.com/w_cos_min_body.zipy
http://pa#####.yoga-ran.com/npc_fight.zipy
http://pa#####.yoga-ran.com/in_acja08.zipy
http://pa#####.yoga-ran.com/min_shop_24.zipy
http://pa#####.yoga-ran.com/in_acja07.zipy
http://pa#####.yoga-ran.com/in_acja06.zipy
http://pa#####.yoga-ran.com/in_acja05.zipy
http://pa#####.yoga-ran.com/class5.zipy
http://pa#####.yoga-ran.com/class6.zipy
http://pa#####.yoga-ran.com/class7.zipy
http://pa#####.yoga-ran.com/class8.zipy
http://pa#####.yoga-ran.com/class9.zipy
http://pa#####.yoga-ran.com/classa.zipy
http://pa#####.yoga-ran.com/classb.zipy
http://pa#####.yoga-ran.com/classc.zipy
http://pa#####.yoga-ran.com/classd.zipy
http://pa#####.yoga-ran.com/gameextext.zipy
http://pa#####.yoga-ran.com/npc_farmsite.zipy
http://pa#####.yoga-ran.com/classe.zipy
http://pa#####.yoga-ran.com/ad_ppl2_10.zipy
http://pa#####.yoga-ran.com/ad_ppl2_11.zipy
http://pa#####.yoga-ran.com/ad_ppl2_12.zipy
http://pa#####.yoga-ran.com/bus01.zipy
http://pa#####.yoga-ran.com/bus02.zipy
http://pa#####.yoga-ran.com/in_acja01.zipy
http://pa#####.yoga-ran.com/in_acja02.zipy
http://pa#####.yoga-ran.com/in_acja03.zipy
http://pa#####.yoga-ran.com/in_acja04.zipy
http://pa#####.yoga-ran.com/class4.zipy
http://pa#####.yoga-ran.com/inven_helper_3.zipy
http://pa#####.yoga-ran.com/bb3.zipy
http://pa#####.yoga-ran.com/decaldrain01.zipy
http://pa#####.yoga-ran.com/chestmo1.zipy
http://pa#####.yoga-ran.com/conc_hn_stair01.zipy
http://pa#####.yoga-ran.com/conc_hn_trim02.zipy
http://pa#####.yoga-ran.com/conc_jr_trimset01.zipy
http://pa#####.yoga-ran.com/concfloor06_d.zipy
http://pa#####.yoga-ran.com/concfloortile03.zipy
http://pa#####.yoga-ran.com/concfloortile04.zipy
http://pa#####.yoga-ran.com/concfloortile05.zipy
http://pa#####.yoga-ran.com/concfloortile07.zipy
http://pa#####.yoga-ran.com/concfloortile11_d.zipy
http://pa#####.yoga-ran.com/servertext.zipy
http://pa#####.yoga-ran.com/concfloortile18_d.zipy
http://pa#####.yoga-ran.com/concstep01.zipy
http://pa#####.yoga-ran.com/conctrimset03.zipy
http://pa#####.yoga-ran.com/concwall02.zipy
http://pa#####.yoga-ran.com/concwall04.zipy
http://pa#####.yoga-ran.com/concwall05.zipy
http://pa#####.yoga-ran.com/concwall07.zipy
http://pa#####.yoga-ran.com/concwallbase_d.zipy
http://pa#####.yoga-ran.com/decal_ivy01_d.zipy
http://pa#####.yoga-ran.com/decal_streetsign01.zipy
http://pa#####.yoga-ran.com/ceilingtile02_d.zipy
http://pa#####.yoga-ran.com/ceramictile01.zipy
http://pa#####.yoga-ran.com/cdmstore03.zipy
http://pa#####.yoga-ran.com/cdmstore02.zipy
http://pa#####.yoga-ran.com/cdmstore01.zipy
http://pa#####.yoga-ran.com/chestmo3.zipy
http://pa#####.yoga-ran.com/xgbox.zipy
http://pa#####.yoga-ran.com/quest_4000.zipy
http://pa#####.yoga-ran.com/quest_4001.zipy
http://pa#####.yoga-ran.com/quest_4002.zipy
http://pa#####.yoga-ran.com/gameword.zipy
http://pa#####.yoga-ran.com/new_window_main.zipy
http://pa#####.yoga-ran.com/yogasummer_2019.zipy
http://pa#####.yoga-ran.com/bb1.zipy
http://pa#####.yoga-ran.com/minia1.zipy
http://pa#####.yoga-ran.com/class3.zipy
http://pa#####.yoga-ran.com/bb2.zipy
http://pa#####.yoga-ran.com/airportfueltruck01_d.zipy
http://pa#####.yoga-ran.com/asphalt01.zipy
http://pa#####.yoga-ran.com/brickfloor01b_d.zipy
http://pa#####.yoga-ran.com/brickfloortile01.zipy
http://pa#####.yoga-ran.com/brickwall04.zipy
http://pa#####.yoga-ran.com/buildingset01a_d.zipy
http://pa#####.yoga-ran.com/buildingset02.zipy
http://pa#####.yoga-ran.com/buildingset07.zipy
http://pa#####.yoga-ran.com/cdmposter01.zipy
http://pa#####.yoga-ran.com/chestmo2.zipy
http://pa#####.yoga-ran.com/bb4.zipy
http://pa#####.yoga-ran.com/concstairstep_d.zipy
http://pa#####.yoga-ran.com/class2.zipy
http://pa#####.yoga-ran.com/dailyquest.zipy
http://pa#####.yoga-ran.com/class13.zipy
http://pa#####.yoga-ran.com/class14.zipy
http://pa#####.yoga-ran.com/class15.zipy
http://pa#####.yoga-ran.com/class16.zipy
http://pa#####.yoga-ran.com/class17.zipy
http://pa#####.yoga-ran.com/class18.zipy
http://pa#####.yoga-ran.com/class19.zipy
http://pa#####.yoga-ran.com/class20.zipy
http://pa#####.yoga-ran.com/class21.zipy
http://pa#####.yoga-ran.com/class01.zipy
http://pa#####.yoga-ran.com/class22.zipy
http://pa#####.yoga-ran.com/class24.zipy
http://pa#####.yoga-ran.com/class25.zipy
http://pa#####.yoga-ran.com/class26.zipy
http://pa#####.yoga-ran.com/class27.zipy
http://pa#####.yoga-ran.com/class28.zipy
http://pa#####.yoga-ran.com/class29.zipy
http://pa#####.yoga-ran.com/crow.zipy
http://pa#####.yoga-ran.com/crowstrtable.zipy
http://pa#####.yoga-ran.com/default.zipy
http://pa#####.yoga-ran.com/class11.zipy
http://pa#####.yoga-ran.com/class12.zipy
http://pa#####.yoga-ran.com/class10.zipy
http://pa#####.yoga-ran.com/class09.zipy
http://pa#####.yoga-ran.com/class08.zipy
http://pa#####.yoga-ran.com/yoga.zipy
http://pa#####.yoga-ran.com/rfeature.zipy
http://pa#####.yoga-ran.com/gameintext.zipy
http://pa#####.yoga-ran.com/uiinnercfg01.zipy
http://pa#####.yoga-ran.com/itemmix.zipy
http://pa#####.yoga-ran.com/minia.zipy
http://pa#####.yoga-ran.com/bettaaaa.zipy
http://pa#####.yoga-ran.com/class00.zipy
http://pa#####.yoga-ran.com/class0a.zipy
http://pa#####.yoga-ran.com/inven_loc_1.zipy
http://pa#####.yoga-ran.com/class23.zipy
http://pa#####.yoga-ran.com/class0b.zipy
http://pa#####.yoga-ran.com/class1b.zipy
http://pa#####.yoga-ran.com/class02.zipy
http://pa#####.yoga-ran.com/class2a.zipy
http://pa#####.yoga-ran.com/class2b.zipy
http://pa#####.yoga-ran.com/class03.zipy
http://pa#####.yoga-ran.com/class04.zipy
http://pa#####.yoga-ran.com/class05.zipy
http://pa#####.yoga-ran.com/class06.zipy
http://pa#####.yoga-ran.com/class07.zipy
http://pa#####.yoga-ran.com/update.zipy
http://pa#####.yoga-ran.com/class1a.zipy
http://pa#####.yoga-ran.com/sc_battle_ui_set.zipy
http://pa#####.yoga-ran.com/class0.zipy
http://pa#####.yoga-ran.com/skill.zipy
http://pa#####.yoga-ran.com/pkstreak.zipy
http://pa#####.yoga-ran.com/pkstreak2.zipy
http://pa#####.yoga-ran.com/pkstreak3.zipy
http://pa#####.yoga-ran.com/param.zipy
http://pa#####.yoga-ran.com/ad_ppl2_05.zipy
http://pa#####.yoga-ran.com/ad_ppl2_06.zipy
http://pa#####.yoga-ran.com/ad_ppl2_07.zipy
http://pa#####.yoga-ran.com/ad_ppl2_08.zipy
http://pa#####.yoga-ran.com/ad_ppl2_09.zipy
http://pa#####.yoga-ran.com/item.zipy
http://pa#####.yoga-ran.com/comment.zipy
http://pa#####.yoga-ran.com/npc_1_t_knight1.zipy
http://pa#####.yoga-ran.com/npc_skillhelper_1.zipy
http://pa#####.yoga-ran.com/quest.zipy
http://pa#####.yoga-ran.com/quest_battlesvr.zipy
http://pa#####.yoga-ran.com/quest_daily1.zipy
http://pa#####.yoga-ran.com/quest_daily2.zipy
http://pa#####.yoga-ran.com/quest_daily3.zipy
http://pa#####.yoga-ran.com/login_man.zipy
http://pa#####.yoga-ran.com/quest_daily4test.zipy
http://pa#####.yoga-ran.com/logo1_a.zipy
http://pa#####.yoga-ran.com/supplies_set.zipy
http://pa#####.yoga-ran.com/minimap_w_clubkill_in.zipy
http://pa#####.yoga-ran.com/mapslist.zipy
http://pa#####.yoga-ran.com/min_su_11_04_redbull.zipy
http://pa#####.yoga-ran.com/_inner_student_record_ui.zipy
http://pa#####.yoga-ran.com/sinio.zipy
http://pa#####.yoga-ran.com/budots.zipy
http://pa#####.yoga-ran.com/activities_gui.zipy
http://pa#####.yoga-ran.com/charinven.zipy
http://pa#####.yoga-ran.com/charinven02.zipy
http://pa#####.yoga-ran.com/charinven03.zipy
http://pa#####.yoga-ran.com/gui_combination.zipy
http://pa#####.yoga-ran.com/interface_main.zipy
http://pa#####.yoga-ran.com/itemstrtable.zipy
http://pa#####.yoga-ran.com/class1.zipy
http://pa#####.yoga-ran.com/q_icon.zipy
http://pa#####.yoga-ran.com/ad_ppl1_02.zipy
http://pa#####.yoga-ran.com/ad_ppl2_01.zipy
http://pa#####.yoga-ran.com/ad_ppl2_02.zipy
http://pa#####.yoga-ran.com/ad_ppl2_03.zipy
http://pa#####.yoga-ran.com/ad_ppl2_04.zipy
http://pa#####.yoga-ran.com/min_flag_01_02.zipy
http://pa#####.yoga-ran.com/min_flag_01_03.zipy
http://pa#####.yoga-ran.com/min_flag_01_04.zipy
http://pa#####.yoga-ran.com/min_su_11_04.zipy
http://pa#####.yoga-ran.com/skillstrtable.zipy
http://pa#####.yoga-ran.com/yoga2.zipy
http://pa#####.yoga-ran.com/decalgabagepile01_a.zipy

UDP

DNS ASK pa#####.yoga-ran.com

Miscellaneous

Creates and executes the following

'%TEMP%\sblcopyf.exe'

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней