Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WindowsTools] 'ImagePath' = '"%WINDIR%\WindowsTools\paybootdaemon.exe" /sercice'
- [<HKLM>\SYSTEM\ControlSet001\Services\WindowsTools] 'Start' = '00000002'
- %WINDIR%\WindowsTools\paybootdaemon.exe
- '25#.4.43.3':1104
- '%WINDIR%\WindowsTools\paybootdaemon.exe' /sercice