Technical Information
- <SYSTEM32>\tasks\firefox default browser agent 12fab5b6ff9020cb
- %WINDIR%\explorer.exe
- %APPDATA%\isgetre
- %APPDATA%\isgetre
- 'gh####tellorb.com':80
- http://gh####tellorb.com/
- DNS ASK gh####tellorb.com
- DNS ASK ha####yaionex.shop
- '%APPDATA%\isgetre'
- '%APPDATA%\isgetre' ' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {13A56A60-BA18-4902-B2FD-0AFC27464AD7} S-1-5-21-1960123792-2022915161-3775307078-1001:mbakqyxuvkda\user:Interactive:[1]