Technical Information
- %TEMP%\fclphfdsozrd.tfxucelt
- %TEMP%\iwch.txt
- http://ad#.#ensa.at/api1/KVIvTA1kLPAqic/daVUW9A8QBljcD2T8Ix0d/a6dqr5BPCHOjsWLa/cwV_2BxBytJXBwO/Gwl_2BK9hqgwMpVWUQ/k1DU9s_2B/BVAkIX152yfAfFHxAlLU/EYf9zEhuEd8YSVsF1Az/iBFWuIUUo9ciG4S5rf_2Bi/CtaMm...
- http://no##.calag.at/api1/f2a9EYSiLUkgYlD79VgSwb/hbaK99ZMfB3fb/apfgVfry/oCsV8n29D1DiIB7n1JSATLs/OeFAfet_2B/xoHi63cYILp3TkKQZ/JtTg7D_2B_2F/tLT2LVqGGgN/mpCrMbRlRGebr5/M1aRLn5M4M8E4nssZ8X9u/Yt7LET...
- DNS ASK ad#.#ensa.at
- DNS ASK no##.calag.at
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '<SYSTEM32>\regsvr32.exe' -s %TEMP%\\iwCh.txt