Technical Information
- [<HKLM>\System\CurrentControlSet\Services\EFS] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\dhcpcore6] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\dhcpcore6] 'ImagePath' = '"%WINDIR%\SysWOW64\ksuser\dhcpcore6.exe"'
- 'dhcpcore6' "%WINDIR%\SysWOW64\ksuser\dhcpcore6.exe"
- 'dhcpcore6' %WINDIR%\SysWOW64\ksuser\dhcpcore6.exe
- from <Full path to file> to %WINDIR%\syswow64\ksuser\dhcpcore6.exe
- '80.##7.52.78':80
- http://80.##7.52.78/wEDfj7/MyTEbMQ5mI4VdHPcQ/7HxcgrmjF1Yz/