Technical Information
- Handler for all processes: %LOCALAPPDATA%\gctmp\~2e31.tmp
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\8a49be81901ccdbe1f5ce4e5acd4287b_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
- %LOCALAPPDATA%\gctmp\~2e31.tmp
- ClassName: 'MPWClass' WindowName: ''