Technical Information
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde
- rdrcef.exe
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1400' = '00000003'
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1C00' = '00000000'
- %TEMP%\a9r17jpzos_ervzka_284.tmp\.has been verified. however jpg, pdf, doc, ########################.jpg, pdf, doc,pdf, jpg.xls
- %TEMP%\a9r1b8dkva_ervzkc_284.tmp
- %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\cookies-journal
- %TEMP%\etilqs_wepgal55l7fgqcr
- %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\cookies