Technical Information
- [<HKLM>\System\CurrentControlSet\Services\LeakmPapm] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\LeakmPapm] 'ImagePath' = '"<Current directory>\JhreQoczug.exe" -cmd'
- 'LeakmPapm' "<Current directory>\JhreQoczug.exe" -cmd