Technical Information
Modifies file system
Creates the following files
- %TEMP%\ixp000.tmp\atinta~1.exe
- %TEMP%\ixp000.tmp\atinta~1.con
- %TEMP%\ixp000.tmp\atinta~1.pdb
- %TEMP%\ixp000.tmp\axinte~1.dll
- %TEMP%\ixp000.tmp\intero~1.dll
- %TEMP%\ixp000.tmp\newton~1.dll
- %TEMP%\ixp000.tmp\newton~1.xml
Deletes following files that it created itself
- %TEMP%\ixp000.tmp\newton~1.xml
- %TEMP%\ixp000.tmp\newton~1.dll
- %TEMP%\ixp000.tmp\intero~1.dll
- %TEMP%\ixp000.tmp\axinte~1.dll
- %TEMP%\ixp000.tmp\atinta~1.pdb
- %TEMP%\ixp000.tmp\atinta~1.con
- %TEMP%\ixp000.tmp\atinta~1.exe
Network activity
Connects to
- 'mo#####.map.fastly.net':443
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
UDP
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
Miscellaneous
Creates and executes the following
- '%TEMP%\ixp000.tmp\atinta~1.exe'
Executes the following
- '%TEMP%\ixp000.tmp\atinta~1.exe' ' (with hidden window)
