Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\IEHost2Services] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k IEHost2Services
- %TEMP%\94750_res.tmp
- <SYSTEM32>\IEHost2Services.dll
- 'ci###n.gicp.net':6173
- DNS ASK ci###n.gicp.net
- '<Private IP address>':1035