Technical Information
Modifies file system
Creates the following files
- %TEMP%\mz_etilqs_frjfk2zjnljqp9t
- %TEMP%\mz_etilqs_fb8wr27z6ifroqr
- %TEMP%\mz_etilqs_wqcbvqpvkd73h5p
- %TEMP%\mz_etilqs_xwotyv1nhkmigfv
Network activity
Connects to
- 'to###yttes.com':445
- 'us###drive.com':443
- 'it####inbelltor.com':443
- 'fo###.#oogleapis.com':443
- 'cd###.#loudflare.com':443
- 'pk#.goog':80
- 'oc##.#ectigo.com':80
- 'x1.#.lencr.org':80
- 'r3.#.lencr.org':80
TCP
HTTP GET requests
- http://pk#.goog/gsr1/gsr1.crt
- http://oc##.#ectigo.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQC%2BEB%2BcLf49DbvKiQrwH3fy
- http://x1.#.lencr.org/
- http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgSuu4g0n%2FA8lWe6%2BcUkSS2sJA%3D%3D
Other
- 'fo###.#oogleapis.com':443
- 'us###drive.com':443
- 'it####inbelltor.com':443
- 'cd###.#loudflare.com':443
UDP
- DNS ASK to###yttes.com
- DNS ASK us###drive.com
- DNS ASK it####inbelltor.com
- DNS ASK fo###.#oogleapis.com
- DNS ASK cd###.#loudflare.com
- DNS ASK pk#.goog
- DNS ASK oc##.#ectigo.com
- DNS ASK fe########alog-cdn.prod.mozaws.net
- DNS ASK x1.#.lencr.org
- DNS ASK r3.#.lencr.org
