Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\filehistory.url
- %WINDIR%\syswow64\svchost.exe
- %HOMEPATH%\filehistory\filehistory.vbs
- %HOMEPATH%\filehistory\tracerpt.exe
- '18#.#40.53.5':1969
- '%WINDIR%\syswow64\svchost.exe'