Technical Information
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
- %APPDATA%\ucsvc.exe
- %TEMP%\wfRtNHuiG.txt
- %APPDATA%\ucsvc.exe
- <Full path to file>
- 'sp####s.mooo.com':123
- '<L###LNET>.1.86':123
- 'localhost':123
- DNS ASK Sp####s.mooo.com
- '%APPDATA%\ucsvc.exe'
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe'