Remote Host Port Number
vteamunix.info 51987
00000000 | 4E49 434B 2070 4C61 6755 657B 5350 4C4F | NICK pLagUe{SPLO
00000010 | 6954 7D37 3738 3332 0D0A 5553 4552 2053 | iT}77832..USER S
00000020 | 6E69 7061 202A 206F 6B20 0334 0254 6561 | nipa * ok .4.Tea
00000030 | 4D20 556E 6958 2062 3061 7420 302E 340D | M UniX b0at 0.4.
00000040 | 0A
* The following ports were open in the system:
Port Protocol Process
1035 TCP raidhost.exe (%Windir%raidhost.exe)
1037 TCP raidhost.exe (%Windir%raidhost.exe)
Registry Modifications
* The newly created Registry Value is:
o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
+ raidhost = “raidhost.exe”
so that raidhost.exe runs every time Windows starts
Resolved : [vteamunix.info] To [64.89.27.36]