Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Server' = '%LOCALAPPDATA%\svchost32.eXe'
- svchost32.exe
- %LOCALAPPDATA%\svchost32.exe
- '84.##3.241.81':999
- '%LOCALAPPDATA%\svchost32.exe'
- '%LOCALAPPDATA%\svchost32.exe' ' (with hidden window)