report: https://blogs.jpcert.or.jp/en/2019/09/tscookie-loader.html
IOC
/index?o=E7E168C4EC82E /news?%c=%X%X /index?%c=%X%X /?id=%X%X /Default.aspx?%c=%X%X /m%u.jsp?m=%d /N%u.jsp?m=%d
C:\Windows C:\ProgramData\Microsoft C:\Users\Public\Documents C:\Program Files\Internet Explorer