Technical Information
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
- %TEMP%\spCXSlOC.txt
- <SYSTEM32>\Client.exe
- 'bl######sec.serveirc.com':1515
- DNS ASK bl######sec.serveirc.com
- '<SYSTEM32>\Client.exe'
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'