Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\efsui.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\rdpsauachelper\aadcloudap.exe
- %HOMEPATH%\rdpsauachelper\efsui.vbs
- 'kk####o.ddns.net':8787
- DNS ASK kk####o.ddns.net
- '%WINDIR%\syswow64\dllhost.exe'