Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Physical Memory Protector] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Physical Memory Protector] 'ImagePath' = '"<Full path to file>"'
- 'Physical Memory Protector' "<Full path to file>"
- 'Physical Memory Protector' <Full path to file>
- %WINDIR%\explorer.exe
- '91.##3.92.103':80