Technical Information
- %APPDATA%\microsoft\windows\templates\farpay.dll
- %HOMEPATH%\application data\microsoft\forms\excel.box
- %TEMP%\vbd79d.tmp
- %TEMP%\09df0000
- %TEMP%\absol.xlsx.zip
- %TEMP%\oleobject1.bin
- %APPDATA%\microsoft\windows\templates\farpay.dll
- %TEMP%\vbd79c.tmp
- from %TEMP%\vbd79d.tmp to %TEMP%\vbd79c.tmp
- from %TEMP%\09df0000 to %TEMP%\absol.xlsx
- 'sh####ileszz.com':443
- DNS ASK sh####ileszz.com
- ClassName: '' WindowName: 'Microsoft Office Components'