Technical Information
- <SYSTEM32>\tracerpt.exe
- %ALLUSERSPROFILE%\displaysessioncontainers.log
- '43.##4.99.186':80
- '94.##1.18.236':6666
- http://43.##4.99.186/qts.bin
- '94.##1.18.236':6666
- '<SYSTEM32>\tracerpt.exe' ' (with hidden window)
- '<SYSTEM32>\tracerpt.exe'