The dropper seems to be prompted to function by the existence of these strings. Because IIS reports 404 errors in the same log file by default, Cranefly is able to send instructions using a URL ...