Technical Information
- %APPDATA%\microsoft\windows\templates\contract_.dll
- %HOMEPATH%\application data\microsoft\forms\excel.box
- %TEMP%\vb5c00.tmp
- %TEMP%\4d501000
- %TEMP%\xcopy00.xlsx.zip
- %TEMP%\oleobject1.bin
- %APPDATA%\microsoft\windows\templates\contract_.dll
- %TEMP%\vb5bff.tmp
- from %TEMP%\vb5c00.tmp to %TEMP%\vb5bff.tmp
- from %TEMP%\4d501000 to %TEMP%\xcopy00.xlsx
- 'in####r-ms-home.com':443
- DNS ASK in####r-ms-home.com
- ClassName: '' WindowName: 'Microsoft Office Components'