Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Host Process for Windows Tasks' = '%APPDATA%\Microsoft\Windows\taskhostw.exe'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'Host Process for Windows Tasks' = '%APPDATA%\Microsoft\Windows\taskhostw.exe'
- %APPDATA%\microsoft\windows\taskhostw.exe
- %APPDATA%\microsoft\windows\taskhostw.exe
- '18#.#19.82.175':7777
- '%APPDATA%\microsoft\windows\taskhostw.exe'