more versions

Server:
C:\WINDOWS\SYSTEM\USER32.EXE 

size: 60 KB

port: 23005, 23006 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run