Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\f53c683f58fb34388ad481abe83a555c.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%HOMEPATH%\spoolsv.exe' = '%HOMEPATH%\spoolsv.exe:*:Enabled:spoolsv.ex...
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%HOMEPATH%\spoolsv.exe" "spoolsv.exe" ENABLE
- %HOMEPATH%\spoolsv.exe
- 'sp##8.ze.am':5551
- DNS ASK sp##8.ze.am
- '%HOMEPATH%\spoolsv.exe'