Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\svhost.lnk
- %TEMP%\content\4496-4528-<File name>.exe-12-05-27-699.dump
- %APPDATA%\svhost.exe
- %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\<File name>.exe.log
- 'localhost':17000
- 'mi#####3456.ddns.net':17000
- 'mi#####3456.ddns.net':17000
- DNS ASK mi#####3456.ddns.net