Technical Information
- %APPDATA%\microsoft\windows\templates\farpay.dll
- %HOMEPATH%\application data\microsoft\forms\excel.box
- %TEMP%\vb950c.tmp
- %TEMP%\89911000
- %TEMP%\absol.xlsx.zip
- %TEMP%\oleobject1.bin
- %APPDATA%\microsoft\windows\templates\farpay.dll
- %TEMP%\vb950b.tmp
- from %TEMP%\vb950c.tmp to %TEMP%\vb950b.tmp
- from %TEMP%\89911000 to %TEMP%\absol.xlsx
- 'sh####ileszz.com':443
- DNS ASK sh####ileszz.com
- ClassName: '' WindowName: 'Microsoft Office Components'