Technical Information
Modifies file system
Creates the following files
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
Network activity
Connects to
- 'da##.71xe.com':445
TCP
HTTP GET requests
- http://www.uc##g.com/statics/2018pc/css/style.css
- http://www.uc##g.com/uploads/2019/0601/1906015cf1e2168857e.png
- http://www.uc##g.com/uploads/2020/0623/2006235ef155d921149.jpg
- http://www.uc##g.com/uploads/2019/1126/1911265ddd09036f704.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef157493ce00.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1581341d83.jpg
- http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
- http://www.uc##g.com/uploads/icon/MrAntiFun.png
- http://www.uc##g.com/uploads/2020/0316/2003165e6f7c3f37997.jpg
- http://www.uc##g.com/uploads/2020/0616/2006165ee8818293c32.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1785c65078.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c11fb76e5.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c2e0009d8.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c35d4d864.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c4263fd75.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c5dbb2f86.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef176dc38a05.png
- http://www.uc##g.com/uploads/icon/SpeedyFox.png
- http://www.uc##g.com/uploads/2020/0127/2001275e2eb370856df.png
- http://www.uc##g.com/uploads/2020/0224/2002245e53566385d42.png
- http://www.uc##g.com/uploads/2020/0426/2004265ea5179514929.png
- http://www.uc##g.com/uploads/2019/0314/20190314090722192.png
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c2342542a.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1c3c6654cd.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef175f47c4ce.png
- http://www.uc##g.com/uploads/2019/1218/1912185df99a1191c4f.jpg
- http://www.uc##g.com/uploads/icon/MovaviScreenRecorder.jpg
- http://www.uc##g.com/uploads/icon/sjxunlei.png
- http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
- http://www.uc##g.com/uploads/2020/0106/2001065e12fd47c99b2.png
- http://www.uc##g.com/uploads/icon/yingshidq.png
- http://www.uc##g.com/uploads/2019/0308/20190308095326828.png
- http://www.uc##g.com/uploads/icon/esrwglq.png
- http://www.uc##g.com/uploads/icon/qlazhfjl.png
- http://www.uc##g.com/uploads/2020/0621/2006215eeeb17b57a8b.png
- http://www.uc##g.com/uploads/2019/1231/1912315e0b67e646e97.png
- http://www.uc##g.com/uploads/icon/bilibili.png
- http://www.uc##g.com/uploads/2019/0526/1905265ce9f219cb608.png
- http://www.uc##g.com/uploads/2019/0915/1909155d7d893dc0f19.png
- http://www.uc##g.com/uploads/2019/1119/1911195dd33c81a4a02.png
- http://www.uc##g.com/uploads/2019/0902/1909025d6cd08189695.png
- http://www.uc##g.com/uploads/icon/PowerISO.png
- http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
- http://www.uc##g.com/statics/2018pc/images/spr.png
- http://www.uc##g.com/caches/poster_js/1.js
- http://www.uc##g.com/uploads/icon/wps.png
- http://www.uc##g.com/uploads/icon/office2016.png
- http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
- http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
- http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
- http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
- http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
- http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
- http://www.uc##g.com/uploads/icon/ce.png
- http://www.uc##g.com/statics/2018pc/images/logo.png
- http://cd#.#2wq.com/scrtips/ucbug_8.29.js
- http://www.uc##g.com/statics/2018pc/js/common.js
- http://www.uc##g.com/statics/2018pc/js/plugin.js
- http://www.uc##g.com/statics/2018pc/js/jquery.min.js
- http://www.uc##g.com/statics/2018pc/js/html5.min.js
- http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
- http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
- http://www.uc##g.com/uploads/2018/1211/20181211062717830.jpg
- http://www.uc##g.com/uploads/2020/0613/2006135ee41fb202f49.jpg
- http://www.uc##g.com/uploads/2020/0612/2006125ee301b4d02e9.png
- http://www.uc##g.com/uploads/2019/0324/20190324090908905.png
- http://www.uc##g.com/uploads/2019/0710/1907105d2554b424d3b.png
- http://www.uc##g.com/uploads/2020/0513/2005135ebb558fd97a7.png
- http://www.uc##g.com/uploads/2019/0619/1906195d09892e68f9c.png
- http://www.uc##g.com/uploads/icon/BSCDesigner.jpg
- http://www.uc##g.com/uploads/2019/0818/1908185d58c24904c1d.jpg
- http://www.uc##g.com/uploads/2020/0623/2006235ef1b30fd53c2.png
- http://www.uc##g.com/uploads/2020/0623/2006235ef1b81ebf9f5.png
- http://www.uc##g.com/uploads/icon/zuoyebang.png
- http://www.uc##g.com/uploads/icon/weishi.png
- http://www.uc##g.com/uploads/icon/xfplay.png
- http://www.uc##g.com/uploads/icon/360shoujizs.png
- http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
- http://www.uc##g.com/uploads/icon/SBgameHacker.png
- http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
- http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
- http://www.uc##g.com/uploads/2019/0317/20190317085238751.png
- http://www.uc##g.com/statics/2018pc/images/gotop.png
UDP
- DNS ASK uc##g.com
- DNS ASK hm.##idu.com
- DNS ASK cd#.#2wq.com
- DNS ASK da##.71xe.com
