Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\pdf\pdf.exe
- %WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe
- 'ti##.nist.gov':13
- 'an####r-side.online':4404
- DNS ASK ti##.nist.gov
- DNS ASK an####r-side.online
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe'
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath '"%APPDATA%\Microsoft\Windows\Start Menu\Programs\PDF\pdf.exe"'