Technical Information
- <SYSTEM32>\notepad.exe
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\8d9dd521067ed5cd75e7a145884b0a48_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
- http://co######ico.azureedge.net/en-us/test.html?me##########
- http://co######ico.azureedge.net/en-us/index.html?pa#######
- http://co######ico.azureedge.net/en-us/docs.html?ty#################
- http://co######ico.azureedge.net/en-us/index.html?pa#################
- DNS ASK co######ico.azureedge.net
- '<SYSTEM32>\notepad.exe'