Trojan.DownLoader12.52515

Technical Information

Malicious functions

Injects code into

the following system processes:

%WINDIR%\explorer.exe

Modifies file system

Creates the following files

%TEMP%\<File name>20200910.nbl
<Current directory>\fzpljo.n

Substitutes the following executable files

<Full path to file>

Moves itself

from <Full path to file> to <Current directory>\fzpljo.nxx

Network activity

TCP

HTTP GET requests

http://c2.##toto.net/update/main/2018-05-07_16_38_53_313/adf3a29347adf5cef51a74fe30d9ff71.dat

'up####.bainv.net':31215

UDP

DNS ASK l.####media.com.cn
DNS ASK u.####media.com.cn
DNS ASK up####.bainv.net
DNS ASK c2.##toto.net
'<LOCALNET>.42.85':31009
'<LOCALNET>.42.90':31009
'<LOCALNET>.42.89':31009
'<LOCALNET>.42.88':31009
'<LOCALNET>.42.87':31009
'<LOCALNET>.42.86':31009
'<LOCALNET>.42.78':31009
'<LOCALNET>.42.84':31009
'<LOCALNET>.42.83':31009
'<LOCALNET>.42.82':31009
'<LOCALNET>.42.81':31009
'<LOCALNET>.42.79':31009
'<LOCALNET>.42.94':31009
'<LOCALNET>.42.75':31009
'<LOCALNET>.42.80':31009
'<LOCALNET>.42.74':31009
'<LOCALNET>.42.73':31009
'<LOCALNET>.42.72':31009
'<LOCALNET>.42.71':31009
'<LOCALNET>.42.70':31009
'<LOCALNET>.42.69':31009
'<LOCALNET>.42.68':31009
'<LOCALNET>.42.67':31009
'<LOCALNET>.42.66':31009
'<LOCALNET>.42.65':31009
'<LOCALNET>.42.64':31009
'<LOCALNET>.42.77':31009
'<LOCALNET>.42.76':31009
'<LOCALNET>.42.92':31009
'<LOCALNET>.42.62':31009
'<LOCALNET>.42.91':31009
'<LOCALNET>.42.120':31009
'<LOCALNET>.42.119':31009
'<LOCALNET>.42.118':31009
'<LOCALNET>.42.117':31009
'<LOCALNET>.42.116':31009
'<LOCALNET>.42.115':31009
'<LOCALNET>.42.114':31009
'<LOCALNET>.42.113':31009
'<LOCALNET>.42.112':31009
'<LOCALNET>.42.111':31009
'<LOCALNET>.42.110':31009
'<LOCALNET>.42.93':31009
'<LOCALNET>.42.122':31009
'<LOCALNET>.42.63':31009
'<LOCALNET>.42.109':31009
'<LOCALNET>.42.105':31009
'<LOCALNET>.42.104':31009
'<LOCALNET>.42.103':31009
'<LOCALNET>.42.102':31009
'<LOCALNET>.42.101':31009
'<LOCALNET>.42.100':31009
'<LOCALNET>.42.99':31009
'<LOCALNET>.42.98':31009
'<LOCALNET>.42.97':31009
'<LOCALNET>.42.96':31009
'<LOCALNET>.42.95':31009
'<LOCALNET>.42.108':31009
'<LOCALNET>.42.107':31009
'<LOCALNET>.42.106':31009
'<LOCALNET>.42.125':31009
'<LOCALNET>.42.27':31009
'<LOCALNET>.42.121':31009
'<LOCALNET>.42.26':31009
'<LOCALNET>.42.25':31009
'<LOCALNET>.42.24':31009
'<LOCALNET>.42.23':31009
'<LOCALNET>.42.22':31009
'<LOCALNET>.42.21':31009
'<LOCALNET>.42.20':31009
'<LOCALNET>.42.19':31009
'<LOCALNET>.42.18':31009
'<LOCALNET>.42.17':31009
'<LOCALNET>.42.16':31009
'<LOCALNET>.42.15':31009
'<LOCALNET>.42.28':31009
'<LOCALNET>.42.61':31009
'<LOCALNET>.42.29':31009
'<LOCALNET>.42.11':31009
'<LOCALNET>.42.10':31009
'<LOCALNET>.42.9':31009
'<LOCALNET>.42.8':31009
'<LOCALNET>.42.7':31009
'<LOCALNET>.42.6':31009
'<LOCALNET>.42.5':31009
'<LOCALNET>.42.4':31009
'<LOCALNET>.42.3':31009
'<LOCALNET>.42.2':31009
'<LOCALNET>.42.1':31009
'12#.#9.137.181':7838
'<LOCALNET>.42.13':31009
'<LOCALNET>.42.14':31009
'<LOCALNET>.42.60':31009
'<LOCALNET>.42.31':31009
'<LOCALNET>.42.44':31009
'<LOCALNET>.42.58':31009
'<LOCALNET>.42.57':31009
'<LOCALNET>.42.56':31009
'<LOCALNET>.42.55':31009
'<LOCALNET>.42.54':31009
'<LOCALNET>.42.53':31009
'<LOCALNET>.42.52':31009
'<LOCALNET>.42.51':31009
'<LOCALNET>.42.50':31009
'<LOCALNET>.42.49':31009
'<LOCALNET>.42.48':31009
'<LOCALNET>.42.47':31009
'<LOCALNET>.42.30':31009
'<LOCALNET>.42.123':31009
'<LOCALNET>.42.59':31009
'<LOCALNET>.42.43':31009
'<LOCALNET>.42.42':31009
'<LOCALNET>.42.41':31009
'<LOCALNET>.42.40':31009
'<LOCALNET>.42.39':31009
'<LOCALNET>.42.38':31009
'<LOCALNET>.42.37':31009
'<LOCALNET>.42.36':31009
'<LOCALNET>.42.35':31009
'<LOCALNET>.42.34':31009
'<LOCALNET>.42.33':31009
'<LOCALNET>.42.32':31009
'<LOCALNET>.42.45':31009
'<LOCALNET>.42.46':31009
'<LOCALNET>.42.124':31009
'<LOCALNET>.42.255':5879
'<LOCALNET>.42.12':31009
'<LOCALNET>.42.216':31009
'<LOCALNET>.42.215':31009
'<LOCALNET>.42.214':31009
'<LOCALNET>.42.213':31009
'<LOCALNET>.42.212':31009
'<LOCALNET>.42.211':31009
'<LOCALNET>.42.210':31009
'<LOCALNET>.42.209':31009
'<LOCALNET>.42.208':31009
'<LOCALNET>.42.207':31009
'<LOCALNET>.42.206':31009
'<LOCALNET>.42.219':31009
'<LOCALNET>.42.220':31009
'<LOCALNET>.42.217':31009
'<LOCALNET>.42.205':31009
'<LOCALNET>.42.201':31009
'<LOCALNET>.42.200':31009
'<LOCALNET>.42.199':31009
'<LOCALNET>.42.198':31009
'<LOCALNET>.42.197':31009
'<LOCALNET>.42.196':31009
'<LOCALNET>.42.195':31009
'<LOCALNET>.42.194':31009
'<LOCALNET>.42.193':31009
'<LOCALNET>.42.192':31009
'<LOCALNET>.42.191':31009
'<LOCALNET>.42.204':31009
'<LOCALNET>.42.203':31009
'<LOCALNET>.42.202':31009
'<LOCALNET>.42.218':31009
'<LOCALNET>.42.190':31009
'l.####media.com.cn':9002
'<LOCALNET>.42.248':31009
'<LOCALNET>.42.247':31009
'<LOCALNET>.42.246':31009
'<LOCALNET>.42.245':31009
'<LOCALNET>.42.244':31009
'<LOCALNET>.42.243':31009
'<LOCALNET>.42.242':31009
'<LOCALNET>.42.241':31009
'<LOCALNET>.42.240':31009
'<LOCALNET>.42.239':31009
'<LOCALNET>.42.238':31009
'<LOCALNET>.42.221':31009
'<LOCALNET>.42.250':31009
'<LOCALNET>.42.222':31009
'<LOCALNET>.42.237':31009
'<LOCALNET>.42.233':31009
'<LOCALNET>.42.232':31009
'<LOCALNET>.42.231':31009
'<LOCALNET>.42.230':31009
'<LOCALNET>.42.229':31009
'<LOCALNET>.42.228':31009
'<LOCALNET>.42.227':31009
'<LOCALNET>.42.226':31009
'<LOCALNET>.42.225':31009
'<LOCALNET>.42.224':31009
'<LOCALNET>.42.223':31009
'<LOCALNET>.42.236':31009
'<LOCALNET>.42.235':31009
'<LOCALNET>.42.234':31009
'<LOCALNET>.42.126':31009
'<LOCALNET>.42.189':31009
'<LOCALNET>.42.185':31009
'<LOCALNET>.42.152':31009
'<LOCALNET>.42.151':31009
'<LOCALNET>.42.150':31009
'<LOCALNET>.42.149':31009
'<LOCALNET>.42.148':31009
'<LOCALNET>.42.147':31009
'<LOCALNET>.42.146':31009
'<LOCALNET>.42.145':31009
'<LOCALNET>.42.144':31009
'<LOCALNET>.42.143':31009
'<LOCALNET>.42.142':31009
'<LOCALNET>.42.155':31009
'<LOCALNET>.42.156':31009
'<LOCALNET>.42.153':31009
'<LOCALNET>.42.141':31009
'<LOCALNET>.42.137':31009
'<LOCALNET>.42.136':31009
'<LOCALNET>.42.135':31009
'<LOCALNET>.42.134':31009
'<LOCALNET>.42.133':31009
'<LOCALNET>.42.132':31009
'<LOCALNET>.42.131':31009
'<LOCALNET>.42.130':31009
'<LOCALNET>.42.129':31009
'<LOCALNET>.42.128':31009
'<LOCALNET>.42.127':31009
'<LOCALNET>.42.140':31009
'<LOCALNET>.42.139':31009
'<LOCALNET>.42.138':31009
'<LOCALNET>.42.154':31009
'<LOCALNET>.42.188':31009
'<LOCALNET>.42.187':31009
'<LOCALNET>.42.184':31009
'<LOCALNET>.42.183':31009
'<LOCALNET>.42.182':31009
'<LOCALNET>.42.181':31009
'<LOCALNET>.42.180':31009
'<LOCALNET>.42.179':31009
'<LOCALNET>.42.178':31009
'<LOCALNET>.42.177':31009
'<LOCALNET>.42.176':31009
'<LOCALNET>.42.175':31009
'<LOCALNET>.42.174':31009
'<LOCALNET>.42.157':31009
'<LOCALNET>.42.186':31009
'<LOCALNET>.42.158':31009
'<LOCALNET>.42.173':31009
'<LOCALNET>.42.169':31009
'<LOCALNET>.42.168':31009
'<LOCALNET>.42.167':31009
'<LOCALNET>.42.166':31009
'<LOCALNET>.42.165':31009
'<LOCALNET>.42.164':31009
'<LOCALNET>.42.163':31009
'<LOCALNET>.42.162':31009
'<LOCALNET>.42.161':31009
'<LOCALNET>.42.160':31009
'<LOCALNET>.42.159':31009
'<LOCALNET>.42.172':31009
'<LOCALNET>.42.171':31009
'<LOCALNET>.42.170':31009
'<LOCALNET>.42.253':31009
'<LOCALNET>.42.211':769
'<LOCALNET>.42.249':31009
'<LOCALNET>.42.212':769
'<LOCALNET>.42.213':769
'<LOCALNET>.42.214':769
'<LOCALNET>.42.215':769
'<LOCALNET>.42.216':769
'<LOCALNET>.42.196':769
'<LOCALNET>.42.197':769
'<LOCALNET>.42.198':769
'<LOCALNET>.42.199':769
'<LOCALNET>.42.200':769
'<LOCALNET>.42.201':769
'<LOCALNET>.42.202':769
'<LOCALNET>.42.181':769
'<LOCALNET>.42.189':769
'<LOCALNET>.42.180':769
'<LOCALNET>.42.206':769
'<LOCALNET>.42.207':769
'<LOCALNET>.42.208':769
'<LOCALNET>.42.209':769
'<LOCALNET>.42.210':769
'<LOCALNET>.42.182':769
'<LOCALNET>.42.183':769
'<LOCALNET>.42.184':769
'<LOCALNET>.42.185':769
'<LOCALNET>.42.186':769
'<LOCALNET>.42.187':769
'<LOCALNET>.42.188':769
'<LOCALNET>.42.204':769
'<LOCALNET>.42.203':769
'<LOCALNET>.42.205':769
'<LOCALNET>.42.178':769
'<LOCALNET>.42.165':769
'<LOCALNET>.42.75':769
'<LOCALNET>.42.76':769
'<LOCALNET>.42.77':769
'<LOCALNET>.42.78':769
'<LOCALNET>.42.79':769
'<LOCALNET>.42.80':769
'<LOCALNET>.42.81':769
'<LOCALNET>.42.82':769
'<LOCALNET>.42.83':769
'<LOCALNET>.42.84':769
'<LOCALNET>.42.85':769
'<LOCALNET>.42.86':769
'<LOCALNET>.42.179':769
'<LOCALNET>.42.73':769
'<LOCALNET>.42.74':769
'<LOCALNET>.42.166':769
'<LOCALNET>.42.167':769
'<LOCALNET>.42.168':769
'<LOCALNET>.42.169':769
'<LOCALNET>.42.170':769
'<LOCALNET>.42.171':769
'<LOCALNET>.42.172':769
'<LOCALNET>.42.173':769
'<LOCALNET>.42.174':769
'<LOCALNET>.42.175':769
'<LOCALNET>.42.176':769
'<LOCALNET>.42.177':769
'<LOCALNET>.42.88':769
'<LOCALNET>.42.87':769
'<LOCALNET>.42.251':31009
'<LOCALNET>.42.72':769
'<LOCALNET>.42.235':769
'<LOCALNET>.42.236':769
'<LOCALNET>.42.217':769
'<LOCALNET>.42.218':769
'<LOCALNET>.42.219':769
'<LOCALNET>.42.220':769
'<LOCALNET>.42.221':769
'<LOCALNET>.42.222':769
'<LOCALNET>.42.223':769
'<LOCALNET>.42.224':769
'<LOCALNET>.42.225':769
'<LOCALNET>.42.247':769
'<LOCALNET>.42.248':769
'<LOCALNET>.42.234':769
'<LOCALNET>.42.191':769
'<LOCALNET>.42.233':769
'<LOCALNET>.42.252':769
'<LOCALNET>.42.253':769
'<LOCALNET>.42.254':769
'<LOCALNET>.42.255':769
'<LOCALNET>.42.157':769
'<LOCALNET>.42.158':769
'<LOCALNET>.42.159':769
'<LOCALNET>.42.160':769
'<LOCALNET>.42.161':769
'<LOCALNET>.42.245':769
'<LOCALNET>.42.246':769
'<LOCALNET>.42.226':769
'<LOCALNET>.42.250':769
'<LOCALNET>.42.249':769
'<LOCALNET>.42.190':769
'<LOCALNET>.42.231':769
'<LOCALNET>.42.90':769
'<LOCALNET>.42.194':769
'<LOCALNET>.42.195':769
'<LOCALNET>.42.237':769
'<LOCALNET>.42.238':769
'<LOCALNET>.42.239':769
'<LOCALNET>.42.240':769
'<LOCALNET>.42.241':769
'<LOCALNET>.42.242':769
'<LOCALNET>.42.243':769
'<LOCALNET>.42.244':769
'<LOCALNET>.42.154':769
'<LOCALNET>.42.155':769
'<LOCALNET>.42.232':769
'<LOCALNET>.42.192':769
'<LOCALNET>.42.193':769
'<LOCALNET>.42.91':769
'<LOCALNET>.42.92':769
'<LOCALNET>.42.93':769
'<LOCALNET>.42.94':769
'<LOCALNET>.42.95':769
'<LOCALNET>.42.96':769
'<LOCALNET>.42.97':769
'<LOCALNET>.42.162':769
'<LOCALNET>.42.163':769
'<LOCALNET>.42.164':769
'<LOCALNET>.42.229':769
'<LOCALNET>.42.230':769
'<LOCALNET>.42.89':769
'<LOCALNET>.42.156':769
'<LOCALNET>.42.255':18837
'<LOCALNET>.42.70':769
'<LOCALNET>.42.143':769
'<LOCALNET>.42.37':769
'<LOCALNET>.42.38':769
'<LOCALNET>.42.39':769
'<LOCALNET>.42.40':769
'<LOCALNET>.42.41':769
'<LOCALNET>.42.42':769
'<LOCALNET>.42.43':769
'<LOCALNET>.42.44':769
'<LOCALNET>.42.45':769
'<LOCALNET>.42.46':769
'<LOCALNET>.42.47':769
'<LOCALNET>.42.48':769
'<LOCALNET>.42.35':769
'<LOCALNET>.42.64':769
'<LOCALNET>.42.34':769
'<LOCALNET>.42.52':769
'<LOCALNET>.42.53':769
'<LOCALNET>.42.54':769
'<LOCALNET>.42.55':769
'<LOCALNET>.42.56':769
'<LOCALNET>.42.57':769
'<LOCALNET>.42.58':769
'<LOCALNET>.42.59':769
'<LOCALNET>.42.60':769
'<LOCALNET>.42.61':769
'<LOCALNET>.42.62':769
'<LOCALNET>.42.63':769
'<LOCALNET>.42.50':769
'<LOCALNET>.42.49':769
'<LOCALNET>.42.51':769
'<LOCALNET>.42.32':769
'<LOCALNET>.42.19':769
'<LOCALNET>.42.5':769
'<LOCALNET>.42.6':769
'<LOCALNET>.42.7':769
'<LOCALNET>.42.8':769
'<LOCALNET>.42.9':769
'<LOCALNET>.42.10':769
'<LOCALNET>.42.11':769
'<LOCALNET>.42.12':769
'<LOCALNET>.42.13':769
'<LOCALNET>.42.14':769
'<LOCALNET>.42.15':769
'<LOCALNET>.42.16':769
'<LOCALNET>.42.33':769
'<LOCALNET>.42.71':769
'<LOCALNET>.42.2':769
'<LOCALNET>.42.20':769
'<LOCALNET>.42.21':769
'<LOCALNET>.42.22':769
'<LOCALNET>.42.23':769
'<LOCALNET>.42.24':769
'<LOCALNET>.42.25':769
'<LOCALNET>.42.26':769
'<LOCALNET>.42.27':769
'<LOCALNET>.42.28':769
'<LOCALNET>.42.29':769
'<LOCALNET>.42.30':769
'<LOCALNET>.42.31':769
'<LOCALNET>.42.18':769
'<LOCALNET>.42.17':769
'<LOCALNET>.42.1':769
'<LOCALNET>.42.36':769
'<LOCALNET>.42.128':769
'<LOCALNET>.42.129':769
'<LOCALNET>.42.130':769
'<LOCALNET>.42.131':769
'<LOCALNET>.42.132':769
'<LOCALNET>.42.133':769
'<LOCALNET>.42.134':769
'<LOCALNET>.42.135':769
'<LOCALNET>.42.136':769
'<LOCALNET>.42.137':769
'<LOCALNET>.42.138':769
'<LOCALNET>.42.139':769
'<LOCALNET>.42.140':769
'<LOCALNET>.42.127':769
'<LOCALNET>.42.66':769
'<LOCALNET>.42.126':769
'<LOCALNET>.42.144':769
'<LOCALNET>.42.145':769
'<LOCALNET>.42.146':769
'<LOCALNET>.42.147':769
'<LOCALNET>.42.148':769
'<LOCALNET>.42.149':769
'<LOCALNET>.42.150':769
'<LOCALNET>.42.151':769
'<LOCALNET>.42.152':769
'<LOCALNET>.42.153':769
'<LOCALNET>.42.68':769
'<LOCALNET>.42.69':769
'<LOCALNET>.42.142':769
'<LOCALNET>.42.141':769
'<LOCALNET>.42.65':769
'<LOCALNET>.42.124':769
'<LOCALNET>.42.111':769
'<LOCALNET>.42.4':769
'<LOCALNET>.42.98':769
'<LOCALNET>.42.99':769
'<LOCALNET>.42.100':769
'<LOCALNET>.42.101':769
'<LOCALNET>.42.102':769
'<LOCALNET>.42.103':769
'<LOCALNET>.42.104':769
'<LOCALNET>.42.105':769
'<LOCALNET>.42.106':769
'<LOCALNET>.42.107':769
'<LOCALNET>.42.108':769
'<LOCALNET>.42.125':769
'<LOCALNET>.42.67':769
'<LOCALNET>.42.3':769
'<LOCALNET>.42.112':769
'<LOCALNET>.42.113':769
'<LOCALNET>.42.114':769
'<LOCALNET>.42.115':769
'<LOCALNET>.42.116':769
'<LOCALNET>.42.117':769
'<LOCALNET>.42.118':769
'<LOCALNET>.42.119':769
'<LOCALNET>.42.120':769
'<LOCALNET>.42.121':769
'<LOCALNET>.42.122':769
'<LOCALNET>.42.123':769
'<LOCALNET>.42.110':769
'<LOCALNET>.42.109':769
'<LOCALNET>.42.174':18837
'<LOCALNET>.42.254':31009
'<LOCALNET>.42.251':769
'<LOCALNET>.42.92':5879
'<LOCALNET>.42.91':5879
'<LOCALNET>.42.90':5879
'<LOCALNET>.42.89':5879
'<LOCALNET>.42.88':5879
'<LOCALNET>.42.87':5879
'<LOCALNET>.42.86':5879
'<LOCALNET>.42.85':5879
'<LOCALNET>.42.84':5879
'<LOCALNET>.42.83':5879
'<LOCALNET>.42.82':5879
'<LOCALNET>.42.95':5879
'<LOCALNET>.42.96':5879
'<LOCALNET>.42.93':5879
'<LOCALNET>.42.81':5879
'<LOCALNET>.42.77':5879
'<LOCALNET>.42.76':5879
'<LOCALNET>.42.75':5879
'<LOCALNET>.42.74':5879
'<LOCALNET>.42.73':5879
'<LOCALNET>.42.72':5879
'<LOCALNET>.42.71':5879
'<LOCALNET>.42.70':5879
'<LOCALNET>.42.69':5879
'<LOCALNET>.42.68':5879
'<LOCALNET>.42.67':5879
'<LOCALNET>.42.80':5879
'<LOCALNET>.42.79':5879
'<LOCALNET>.42.78':5879
'<LOCALNET>.42.128':5879
'<LOCALNET>.42.66':5879
'<LOCALNET>.42.127':5879
'<LOCALNET>.42.124':5879
'<LOCALNET>.42.123':5879
'<LOCALNET>.42.122':5879
'<LOCALNET>.42.121':5879
'<LOCALNET>.42.120':5879
'<LOCALNET>.42.119':5879
'<LOCALNET>.42.118':5879
'<LOCALNET>.42.117':5879
'<LOCALNET>.42.116':5879
'<LOCALNET>.42.115':5879
'<LOCALNET>.42.114':5879
'<LOCALNET>.42.97':5879
'<LOCALNET>.42.126':5879
'<LOCALNET>.42.98':5879
'<LOCALNET>.42.113':5879
'<LOCALNET>.42.109':5879
'<LOCALNET>.42.108':5879
'<LOCALNET>.42.107':5879
'<LOCALNET>.42.106':5879
'<LOCALNET>.42.105':5879
'<LOCALNET>.42.104':5879
'<LOCALNET>.42.103':5879
'<LOCALNET>.42.102':5879
'<LOCALNET>.42.101':5879
'<LOCALNET>.42.100':5879
'<LOCALNET>.42.99':5879
'<LOCALNET>.42.112':5879
'<LOCALNET>.42.111':5879
'<LOCALNET>.42.110':5879
'<LOCALNET>.42.125':5879
'<LOCALNET>.42.65':5879
'<LOCALNET>.42.61':5879
'<LOCALNET>.42.28':5879
'<LOCALNET>.42.27':5879
'<LOCALNET>.42.26':5879
'<LOCALNET>.42.25':5879
'<LOCALNET>.42.24':5879
'<LOCALNET>.42.23':5879
'<LOCALNET>.42.22':5879
'<LOCALNET>.42.21':5879
'<LOCALNET>.42.20':5879
'<LOCALNET>.42.19':5879
'<LOCALNET>.42.18':5879
'<LOCALNET>.42.31':5879
'<LOCALNET>.42.32':5879
'<LOCALNET>.42.29':5879
'<LOCALNET>.42.17':5879
'<LOCALNET>.42.13':5879
'<LOCALNET>.42.12':5879
'<LOCALNET>.42.11':5879
'<LOCALNET>.42.10':5879
'<LOCALNET>.42.9':5879
'<LOCALNET>.42.8':5879
'<LOCALNET>.42.7':5879
'<LOCALNET>.42.6':5879
'<LOCALNET>.42.5':5879
'<LOCALNET>.42.4':5879
'<LOCALNET>.42.3':5879
'<LOCALNET>.42.16':5879
'<LOCALNET>.42.15':5879
'<LOCALNET>.42.14':5879
'<LOCALNET>.42.30':5879
'<LOCALNET>.42.64':5879
'<LOCALNET>.42.63':5879
'<LOCALNET>.42.60':5879
'<LOCALNET>.42.59':5879
'<LOCALNET>.42.58':5879
'<LOCALNET>.42.57':5879
'<LOCALNET>.42.56':5879
'<LOCALNET>.42.55':5879
'<LOCALNET>.42.54':5879
'<LOCALNET>.42.53':5879
'<LOCALNET>.42.52':5879
'<LOCALNET>.42.51':5879
'<LOCALNET>.42.50':5879
'<LOCALNET>.42.33':5879
'<LOCALNET>.42.62':5879
'<LOCALNET>.42.34':5879
'<LOCALNET>.42.49':5879
'<LOCALNET>.42.45':5879
'<LOCALNET>.42.44':5879
'<LOCALNET>.42.43':5879
'<LOCALNET>.42.42':5879
'<LOCALNET>.42.41':5879
'<LOCALNET>.42.40':5879
'<LOCALNET>.42.39':5879
'<LOCALNET>.42.38':5879
'<LOCALNET>.42.37':5879
'<LOCALNET>.42.36':5879
'<LOCALNET>.42.35':5879
'<LOCALNET>.42.48':5879
'<LOCALNET>.42.47':5879
'<LOCALNET>.42.46':5879
'<LOCALNET>.42.227':769
'<LOCALNET>.42.176':5879
'<LOCALNET>.42.130':5879
'<LOCALNET>.42.220':5879
'<LOCALNET>.42.219':5879
'<LOCALNET>.42.218':5879
'<LOCALNET>.42.217':5879
'<LOCALNET>.42.216':5879
'<LOCALNET>.42.215':5879
'<LOCALNET>.42.214':5879
'<LOCALNET>.42.213':5879
'<LOCALNET>.42.212':5879
'<LOCALNET>.42.211':5879
'<LOCALNET>.42.210':5879
'<LOCALNET>.42.223':5879
'<LOCALNET>.42.224':5879
'<LOCALNET>.42.221':5879
'<LOCALNET>.42.209':5879
'<LOCALNET>.42.205':5879
'<LOCALNET>.42.204':5879
'<LOCALNET>.42.203':5879
'<LOCALNET>.42.202':5879
'<LOCALNET>.42.201':5879
'<LOCALNET>.42.200':5879
'<LOCALNET>.42.199':5879
'<LOCALNET>.42.198':5879
'<LOCALNET>.42.197':5879
'<LOCALNET>.42.196':5879
'<LOCALNET>.42.195':5879
'<LOCALNET>.42.208':5879
'<LOCALNET>.42.207':5879
'<LOCALNET>.42.206':5879
'<LOCALNET>.42.129':5879
'<LOCALNET>.42.240':5879
'<LOCALNET>.42.226':5879
'<LOCALNET>.42.243':5879
'<LOCALNET>.42.244':5879
'<LOCALNET>.42.245':5879
'<LOCALNET>.42.246':5879
'<LOCALNET>.42.247':5879
'<LOCALNET>.42.249':5879
'<LOCALNET>.42.242':5879
'<LOCALNET>.42.250':5879
'<LOCALNET>.42.251':5879
'<LOCALNET>.42.252':5879
'<LOCALNET>.42.253':5879
'<LOCALNET>.42.248':5879
'<LOCALNET>.42.225':5879
'<LOCALNET>.42.194':5879
'<LOCALNET>.42.239':5879
'<LOCALNET>.42.238':5879
'<LOCALNET>.42.237':5879
'<LOCALNET>.42.236':5879
'<LOCALNET>.42.235':5879
'<LOCALNET>.42.234':5879
'<LOCALNET>.42.233':5879
'<LOCALNET>.42.232':5879
'<LOCALNET>.42.231':5879
'<LOCALNET>.42.230':5879
'<LOCALNET>.42.229':5879
'<LOCALNET>.42.228':5879
'<LOCALNET>.42.227':5879
'<LOCALNET>.42.241':5879
'<LOCALNET>.42.254':5879
'<LOCALNET>.42.2':5879
'<LOCALNET>.42.191':5879
'<LOCALNET>.42.190':5879
'<LOCALNET>.42.157':5879
'<LOCALNET>.42.156':5879
'<LOCALNET>.42.155':5879
'<LOCALNET>.42.154':5879
'<LOCALNET>.42.153':5879
'<LOCALNET>.42.152':5879
'<LOCALNET>.42.151':5879
'<LOCALNET>.42.150':5879
'<LOCALNET>.42.149':5879
'<LOCALNET>.42.148':5879
'<LOCALNET>.42.147':5879
'<LOCALNET>.42.146':5879
'<LOCALNET>.42.192':5879
'<LOCALNET>.42.158':5879
'<LOCALNET>.42.159':5879
'<LOCALNET>.42.142':5879
'<LOCALNET>.42.141':5879
'<LOCALNET>.42.140':5879
'<LOCALNET>.42.139':5879
'<LOCALNET>.42.138':5879
'<LOCALNET>.42.137':5879
'<LOCALNET>.42.136':5879
'<LOCALNET>.42.135':5879
'<LOCALNET>.42.134':5879
'<LOCALNET>.42.133':5879
'<LOCALNET>.42.132':5879
'<LOCALNET>.42.131':5879
'<LOCALNET>.42.145':5879
'<LOCALNET>.42.143':5879
'<LOCALNET>.42.222':5879
'<LOCALNET>.42.144':5879
'<LOCALNET>.42.193':5879
'<LOCALNET>.42.189':5879
'<LOCALNET>.42.188':5879
'<LOCALNET>.42.187':5879
'<LOCALNET>.42.186':5879
'<LOCALNET>.42.185':5879
'<LOCALNET>.42.184':5879
'<LOCALNET>.42.183':5879
'<LOCALNET>.42.182':5879
'<LOCALNET>.42.181':5879
'<LOCALNET>.42.180':5879
'<LOCALNET>.42.179':5879
'<LOCALNET>.42.178':5879
'<LOCALNET>.42.162':5879
'<LOCALNET>.42.160':5879
'<LOCALNET>.42.161':5879
'<LOCALNET>.42.174':5879
'<LOCALNET>.42.173':5879
'<LOCALNET>.42.172':5879
'<LOCALNET>.42.171':5879
'<LOCALNET>.42.170':5879
'<LOCALNET>.42.169':5879
'<LOCALNET>.42.168':5879
'<LOCALNET>.42.167':5879
'<LOCALNET>.42.166':5879
'<LOCALNET>.42.165':5879
'<LOCALNET>.42.164':5879
'<LOCALNET>.42.163':5879
'<LOCALNET>.42.177':5879
'<LOCALNET>.42.175':5879
'<LOCALNET>.42.252':31009
'<LOCALNET>.42.253':18837
'<LOCALNET>.42.252':18837
'<LOCALNET>.42.91':18837
'<LOCALNET>.42.90':18837
'<LOCALNET>.42.89':18837
'<LOCALNET>.42.88':18837
'<LOCALNET>.42.87':18837
'<LOCALNET>.42.86':18837
'<LOCALNET>.42.85':18837
'<LOCALNET>.42.84':18837
'<LOCALNET>.42.83':18837
'<LOCALNET>.42.82':18837
'<LOCALNET>.42.81':18837
'<LOCALNET>.42.80':18837
'<LOCALNET>.42.64':18837
'<LOCALNET>.42.92':18837
'<LOCALNET>.42.93':18837
'<LOCALNET>.42.76':18837
'<LOCALNET>.42.75':18837
'<LOCALNET>.42.74':18837
'<LOCALNET>.42.73':18837
'<LOCALNET>.42.72':18837
'<LOCALNET>.42.71':18837
'<LOCALNET>.42.70':18837
'<LOCALNET>.42.69':18837
'<LOCALNET>.42.68':18837
'<LOCALNET>.42.67':18837
'<LOCALNET>.42.66':18837
'<LOCALNET>.42.65':18837
'<LOCALNET>.42.79':18837
'<LOCALNET>.42.77':18837
'<LOCALNET>.42.254':18837
'<LOCALNET>.42.78':18837
'<LOCALNET>.42.110':18837
'<LOCALNET>.42.123':18837
'<LOCALNET>.42.122':18837
'<LOCALNET>.42.121':18837
'<LOCALNET>.42.120':18837
'<LOCALNET>.42.119':18837
'<LOCALNET>.42.118':18837
'<LOCALNET>.42.117':18837
'<LOCALNET>.42.116':18837
'<LOCALNET>.42.115':18837
'<LOCALNET>.42.114':18837
'<LOCALNET>.42.113':18837
'<LOCALNET>.42.112':18837
'<LOCALNET>.42.96':18837
'<LOCALNET>.42.94':18837
'<LOCALNET>.42.95':18837
'<LOCALNET>.42.108':18837
'<LOCALNET>.42.107':18837
'<LOCALNET>.42.106':18837
'<LOCALNET>.42.105':18837
'<LOCALNET>.42.104':18837
'<LOCALNET>.42.103':18837
'<LOCALNET>.42.102':18837
'<LOCALNET>.42.101':18837
'<LOCALNET>.42.100':18837
'<LOCALNET>.42.99':18837
'<LOCALNET>.42.98':18837
'<LOCALNET>.42.97':18837
'<LOCALNET>.42.111':18837
'<LOCALNET>.42.109':18837
'<LOCALNET>.42.124':18837
'<LOCALNET>.42.125':18837
'<LOCALNET>.42.60':18837
'<LOCALNET>.42.27':18837
'<LOCALNET>.42.26':18837
'<LOCALNET>.42.25':18837
'<LOCALNET>.42.24':18837
'<LOCALNET>.42.23':18837
'<LOCALNET>.42.22':18837
'<LOCALNET>.42.21':18837
'<LOCALNET>.42.20':18837
'<LOCALNET>.42.19':18837
'<LOCALNET>.42.18':18837
'<LOCALNET>.42.17':18837
'<LOCALNET>.42.16':18837
'<LOCALNET>.42.62':18837
'<LOCALNET>.42.28':18837
'<LOCALNET>.42.29':18837
'<LOCALNET>.42.12':18837
'<LOCALNET>.42.11':18837
'<LOCALNET>.42.10':18837
'<LOCALNET>.42.9':18837
'<LOCALNET>.42.8':18837
'<LOCALNET>.42.7':18837
'<LOCALNET>.42.6':18837
'<LOCALNET>.42.5':18837
'<LOCALNET>.42.4':18837
'<LOCALNET>.42.3':18837
'<LOCALNET>.42.2':18837
'<LOCALNET>.42.1':18837
'<LOCALNET>.42.15':18837
'<LOCALNET>.42.13':18837
'<LOCALNET>.42.61':18837
'<LOCALNET>.42.14':18837
'<LOCALNET>.42.63':18837
'<LOCALNET>.42.59':18837
'<LOCALNET>.42.58':18837
'<LOCALNET>.42.57':18837
'<LOCALNET>.42.56':18837
'<LOCALNET>.42.55':18837
'<LOCALNET>.42.54':18837
'<LOCALNET>.42.53':18837
'<LOCALNET>.42.52':18837
'<LOCALNET>.42.51':18837
'<LOCALNET>.42.50':18837
'<LOCALNET>.42.49':18837
'<LOCALNET>.42.48':18837
'<LOCALNET>.42.32':18837
'<LOCALNET>.42.30':18837
'<LOCALNET>.42.31':18837
'<LOCALNET>.42.44':18837
'<LOCALNET>.42.43':18837
'<LOCALNET>.42.42':18837
'<LOCALNET>.42.41':18837
'<LOCALNET>.42.40':18837
'<LOCALNET>.42.39':18837
'<LOCALNET>.42.38':18837
'<LOCALNET>.42.37':18837
'<LOCALNET>.42.36':18837
'<LOCALNET>.42.35':18837
'<LOCALNET>.42.34':18837
'<LOCALNET>.42.33':18837
'<LOCALNET>.42.47':18837
'<LOCALNET>.42.45':18837
'<LOCALNET>.42.94':5879
'<LOCALNET>.42.46':18837
'<LOCALNET>.42.1':5879
'<LOCALNET>.42.219':18837
'<LOCALNET>.42.218':18837
'<LOCALNET>.42.217':18837
'<LOCALNET>.42.216':18837
'<LOCALNET>.42.215':18837
'<LOCALNET>.42.214':18837
'<LOCALNET>.42.213':18837
'<LOCALNET>.42.212':18837
'<LOCALNET>.42.211':18837
'<LOCALNET>.42.210':18837
'<LOCALNET>.42.209':18837
'<LOCALNET>.42.208':18837
'<LOCALNET>.42.192':18837
'<LOCALNET>.42.220':18837
'<LOCALNET>.42.221':18837
'<LOCALNET>.42.204':18837
'<LOCALNET>.42.203':18837
'<LOCALNET>.42.202':18837
'<LOCALNET>.42.201':18837
'<LOCALNET>.42.200':18837
'<LOCALNET>.42.199':18837
'<LOCALNET>.42.198':18837
'<LOCALNET>.42.197':18837
'<LOCALNET>.42.196':18837
'<LOCALNET>.42.195':18837
'<LOCALNET>.42.194':18837
'<LOCALNET>.42.193':18837
'<LOCALNET>.42.207':18837
'<LOCALNET>.42.205':18837
'<LOCALNET>.42.128':18837
'<LOCALNET>.42.206':18837
'<LOCALNET>.42.238':18837
'<LOCALNET>.42.251':18837
'<LOCALNET>.42.250':18837
'<LOCALNET>.42.249':18837
'<LOCALNET>.42.248':18837
'<LOCALNET>.42.247':18837
'<LOCALNET>.42.246':18837
'<LOCALNET>.42.245':18837
'<LOCALNET>.42.244':18837
'<LOCALNET>.42.243':18837
'<LOCALNET>.42.242':18837
'<LOCALNET>.42.241':18837
'<LOCALNET>.42.240':18837
'<LOCALNET>.42.224':18837
'<LOCALNET>.42.222':18837
'<LOCALNET>.42.223':18837
'<LOCALNET>.42.236':18837
'<LOCALNET>.42.235':18837
'<LOCALNET>.42.234':18837
'<LOCALNET>.42.233':18837
'<LOCALNET>.42.232':18837
'<LOCALNET>.42.231':18837
'<LOCALNET>.42.230':18837
'<LOCALNET>.42.229':18837
'<LOCALNET>.42.228':18837
'<LOCALNET>.42.227':18837
'<LOCALNET>.42.226':18837
'<LOCALNET>.42.225':18837
'<LOCALNET>.42.239':18837
'<LOCALNET>.42.237':18837
'<LOCALNET>.42.126':18837
'<LOCALNET>.42.127':18837
'<LOCALNET>.42.188':18837
'<LOCALNET>.42.155':18837
'<LOCALNET>.42.154':18837
'<LOCALNET>.42.153':18837
'<LOCALNET>.42.152':18837
'<LOCALNET>.42.151':18837
'<LOCALNET>.42.150':18837
'<LOCALNET>.42.149':18837
'<LOCALNET>.42.148':18837
'<LOCALNET>.42.147':18837
'<LOCALNET>.42.146':18837
'<LOCALNET>.42.145':18837
'<LOCALNET>.42.144':18837
'<LOCALNET>.42.190':18837
'<LOCALNET>.42.156':18837
'<LOCALNET>.42.157':18837
'<LOCALNET>.42.140':18837
'<LOCALNET>.42.139':18837
'<LOCALNET>.42.138':18837
'<LOCALNET>.42.137':18837
'<LOCALNET>.42.136':18837
'<LOCALNET>.42.135':18837
'<LOCALNET>.42.134':18837
'<LOCALNET>.42.133':18837
'<LOCALNET>.42.132':18837
'<LOCALNET>.42.131':18837
'<LOCALNET>.42.130':18837
'<LOCALNET>.42.129':18837
'<LOCALNET>.42.143':18837
'<LOCALNET>.42.141':18837
'<LOCALNET>.42.189':18837
'<LOCALNET>.42.142':18837
'<LOCALNET>.42.191':18837
'<LOCALNET>.42.187':18837
'<LOCALNET>.42.186':18837
'<LOCALNET>.42.185':18837
'<LOCALNET>.42.184':18837
'<LOCALNET>.42.183':18837
'<LOCALNET>.42.182':18837
'<LOCALNET>.42.181':18837
'<LOCALNET>.42.180':18837
'<LOCALNET>.42.179':18837
'<LOCALNET>.42.178':18837
'<LOCALNET>.42.177':18837
'<LOCALNET>.42.176':18837
'<LOCALNET>.42.160':18837
'<LOCALNET>.42.158':18837
'<LOCALNET>.42.159':18837
'<LOCALNET>.42.172':18837
'<LOCALNET>.42.171':18837
'<LOCALNET>.42.170':18837
'<LOCALNET>.42.169':18837
'<LOCALNET>.42.168':18837
'<LOCALNET>.42.167':18837
'<LOCALNET>.42.166':18837
'<LOCALNET>.42.165':18837
'<LOCALNET>.42.164':18837
'<LOCALNET>.42.163':18837
'<LOCALNET>.42.162':18837
'<LOCALNET>.42.161':18837
'<LOCALNET>.42.175':18837
'<LOCALNET>.42.173':18837
'<LOCALNET>.42.228':769

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: 'default__ad_shower__'
ClassName: '__adPublisherWndClass__' WindowName: ''
ClassName: '' WindowName: 'iKeeperВјГ†В·Г‘В№ГњГЂГГЏВµГЌВі'
ClassName: '' WindowName: 'WHPLATFORM_BARCLIENT'
ClassName: 'Progman' WindowName: ''
ClassName: 'SHELLDLL_DefView' WindowName: ''
ClassName: 'SysListView32' WindowName: ''

Creates and executes the following

'<Full path to file>'

Executes the following

'<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "<Full path to file>"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней