Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\isddwtis.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 2119540291
- %APPDATA%\microsoft\windows\isddwtis\hrgisrfs.exe
- %APPDATA%\microsoft\windows\isddwtis\hrgisrfs.exe
- DNS ASK et###identa.cc
- DNS ASK wa#####herstonthis.army
- DNS ASK he####rratreb.store
- DNS ASK ev#####slightorsheg.app
- DNS ASK ry####onthatin.tech
- DNS ASK ha#####trobrigh.live
- DNS ASK to####ortitren.com
- DNS ASK ve####eledrop.tv
- DNS ASK to###ncal.com
- DNS ASK re###ghand.com