Technical Information
- '' (downloaded from the Internet)
- '%APPDATA%\wlanext.exe'
- %APPDATA%\wlanext.exe
- <Current directory>\eb511000
- '19#.#.179.162':80
- http://19#.#.179.162/hdw/Microsoftdecidedtodeleteentirehistorycachecookieeverythingfromthepc.Doc
- http://19#.#.179.162/352/wlanext.exe
- '%ProgramFiles%\microsoft office\office14\winword.exe' -Embedding
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding