Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] '25CEKMQR' = '"%CommonProgramFiles%\Microsoft Shared\MSINFO\25CEKMQR.exe"'
- %CommonProgramFiles%\microsoft shared\msinfo\25cekmqr.exe
- %CommonProgramFiles%\microsoft shared\msinfo\25cekmqr.exe
- 'localhost':8010
- ClassName: 'TAppBuilder' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\msinfo\25cekmqr.exe'
- '%CommonProgramFiles%\microsoft shared\msinfo\25cekmqr.exe' ' (with hidden window)