Technical Information
Network activity
Connects to
- 'as###om.club':443
- 'sc##.alicdn.com':443
- 'ae##.alicdn.com':443
- 'go###morning.cc':80
- 'mq##ll.com':443
- 'microsoft.com':80
- 'x.##2.us':80
- 'vi#.##arabiya.net':443
- 'cd#.#osoah.com':80
- 'oc##.#ectigo.com':80
- 'o.##2.us':80
- 's.##2.us':80
- 'oc##.###tg2.amazontrust.com':80
- 'x1.#.lencr.org':80
- 'cr#.####g2.amazontrust.com':80
- 'as####.hardwarezone.com':443
- 'cm#.qz.com':443
- 'ak######a-in.tosshub.com':443
- 'st###ounter.com':443
- 'mu##wa.com':443
- 'i.##img.com':443
- 'pb#.#wimg.com':443
- 'sl###gear.com':443
- 'up####.wikimedia.org':443
- 'i.###yimg.com':443
- 'go###morning.cc':443
- 'oc##.####ca1.amazontrust.com':80
- 'oc##.#tartssl.com':80
- '66.###ia.tumblr.com':443
- 'ru##a.com':443
- 'd3#######v44wi.cloudfront.net':443
- 'le####agenda.com':443
- 'mo##3.com':443
- 'cd#.#osoah.com':443
- 'cf.###pee.com.my':443
- 'ma######entmanlyyeast.com':80
- 'i.###img.com':443
- 'cr#.####ca1.amazontrust.com':80
TCP
HTTP GET requests
- http://ma######entmanlyyeast.com/15e02a98e14fca939a577dcac91ff067/invoke.js
- http://ma######entmanlyyeast.com/2966268db0a00ae6c736797ef59f1416/invoke.js
- http://go###morning.cc/wp-content/uploads/2019/10/8568-2.jpg
- http://go###morning.cc/wp-content/uploads/2019/10/8568-4.jpg
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://x.##2.us/x.cer
- http://oc##.#tartssl.com/sub/class2/code/ca/MEMwQTA%2FMD0wOzAJBgUrDgMCGgUABBQSOgrhRCSnWfKxoWTjWxhk8hga9AQU0E4PQJlsuEsZbzsouODjiAc0qrcCAhAV
- http://oc##.#ectigo.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQDONYqobJ8KbaYuGX%2BgBqKn
- http://o.##2.us//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D
- http://s.##2.us/r.crl
- http://oc##.###tg2.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D
- http://x1.#.lencr.org/
- http://cr#.####g2.amazontrust.com/rootg2.crl
- http://oc##.####ca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D
- http://cr#.####ca1.amazontrust.com/rootca1.crl
Other
- 'as###om.club':443
- 'sc##.alicdn.com':443
- 'cm#.qz.com':443
- 'cf.###pee.com.my':443
- 'as####.hardwarezone.com':443
- 'ak######a-in.tosshub.com':443
- 'st###ounter.com':443
- 'mo##3.com':443
- 'mu##wa.com':443
- 'cd#.#osoah.com':443
- 'le####agenda.com':443
- 'go###morning.cc':443
- 'vi#.##arabiya.net':443
- '66.###ia.tumblr.com':443
- 'ru##a.com':443
- 'i.###img.com':443
- 'd3#######v44wi.cloudfront.net':443
- 'up####.wikimedia.org':443
- 'i.###yimg.com':443
- 'pb#.#wimg.com':443
- 'sl###gear.com':443
- 'i.##img.com':443
- 'ae##.alicdn.com':443
- 'mq##ll.com':443
UDP
- DNS ASK as###om.club
- DNS ASK cd#.#osoah.com
- DNS ASK as####.hardwarezone.com
- DNS ASK st###ounter.com
- DNS ASK ak######a-in.tosshub.com
- DNS ASK cm#.qz.com
- DNS ASK mq##ll.com
- DNS ASK microsoft.com
- DNS ASK x.##2.us
- DNS ASK oc##.#tartssl.com
- DNS ASK oc##.#ectigo.com
- DNS ASK o.##2.us
- DNS ASK s.##2.us
- DNS ASK oc##.###tg2.amazontrust.com
- DNS ASK x1.#.lencr.org
- DNS ASK cr#.####g2.amazontrust.com
- DNS ASK mu##wa.com
- DNS ASK oc##.####ca1.amazontrust.com
- DNS ASK mo##3.com
- DNS ASK ae##.alicdn.com
- DNS ASK ma######entmanlyyeast.com
- DNS ASK i.##img.com
- DNS ASK sl###gear.com
- DNS ASK up####.wikimedia.org
- DNS ASK le####agenda.com
- DNS ASK pb#.#wimg.com
- DNS ASK i.###yimg.com
- DNS ASK i.###img.com
- DNS ASK d3#######v44wi.cloudfront.net
- DNS ASK ru##a.com
- DNS ASK th##fya.com
- DNS ASK go###morning.cc
- DNS ASK vi#.##arabiya.net
- DNS ASK 66.###ia.tumblr.com
- DNS ASK sc##.alicdn.com
- DNS ASK cf.###pee.com.my
- DNS ASK cr#.####ca1.amazontrust.com
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
