Technical Information
- '<SYSTEM32>\regsvr32.exe' /s calc
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhda.ooccxx
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhdb.ooccxx
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhdc.ooccxx
- %TEMP%\error020880_01.xml
- 'ai###cson.com':443
- 'ai###cson.com':443
- DNS ASK ai###cson.com
- DNS ASK au####orpsoll.com
- '<SYSTEM32>\regsvr32.exe' /s calc' (with hidden window)
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhda.ooccxx' (with hidden window)
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhdb.ooccxx' (with hidden window)
- '<SYSTEM32>\regsvr32.exe' C:\Jhfrg\Rgsrhdc.ooccxx' (with hidden window)