Technical Information
- <SYSTEM32>\tracerpt.exe
- <SYSTEM32>\svchost.exe
- %ALLUSERSPROFILE%\displaysessioncontainers.log
- 'xx.#########01a65e5cef76757445408a3.life':49189
- 'xx.#########01a65e5cef76757445408a3.life':49189
- DNS ASK xx.#########01a65e5cef76757445408a3.life
- '<SYSTEM32>\tracerpt.exe'
- '<SYSTEM32>\svchost.exe'
- '<SYSTEM32>\tracerpt.exe' ' (with hidden window)
- '<SYSTEM32>\svchost.exe' ' (with hidden window)