Technical Information
- %WINDIR%\temp\cab1ca4.tmp
- %WINDIR%\temp\tar1ca5.tmp
- %WINDIR%\temp\cab1ca4.tmp
- %WINDIR%\temp\tar1ca5.tmp
- 'localhost':49175
- 'localhost':49177
- 'et###itypr.net':443
- 'microsoft.com':80
- 'oc##.#tartssl.com':80
- 'oc##.thawte.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://oc##.#tartssl.com/sub/class2/code/ca/MEMwQTA%2FMD0wOzAJBgUrDgMCGgUABBQSOgrhRCSnWfKxoWTjWxhk8hga9AQU0E4PQJlsuEsZbzsouODjiAc0qrcCAhAV
- http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
- 'localhost':49175
- 'localhost':49177
- 'localhost':49178
- 'et###itypr.net':443
- DNS ASK et###itypr.net
- DNS ASK microsoft.com
- DNS ASK oc##.#tartssl.com
- DNS ASK oc##.thawte.com
- '%WINDIR%\syswow64\cmd.exe' /c cls