Technical Information
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\aut783b.tmp
- %TEMP%\murky
- %TEMP%\aut8288.tmp
- %TEMP%\preconform
- %TEMP%\aut783b.tmp
- %TEMP%\aut8288.tmp
- '34.##9.100.209':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '%WINDIR%\syswow64\svchost.exe'