Technical Information
- User Account Control (UAC)
- <Current directory>\tt.jpg
- %TEMP%\install.zip
- C:\$loading\word\enginedp.bat
- C:\$loading\word\hi.exe
- C:\$loading\word\pin.png
- C:\$loading\word\tools.exe
- C:\$loading\word\xssdll.txt
- <Full path to file>
- from <Full path to file> to %TEMP%\10931561234567931\....\temporaryfile
- '11#.#96.20.183':1527
- ClassName: 'CTXOPConntion_Class' WindowName: ''
- 'C:\$loading\word\hi.exe'
- '%WINDIR%\syswow64\cmd.exe' /c C:\$loading\Word\EngineDP.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c C:\$loading\Word\EngineDP.bat