Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\svhost.lnk
- %TEMP%\content\3776-3696-<File name>.exe-19-37-21-283.dump
- %APPDATA%\svhost.exe
- %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\<File name>.exe.log
- 'localhost':17000
- 'mi#####3456.ddns.net':17000
- 'mi#####3456.ddns.net':17000
- DNS ASK mi#####3456.ddns.net