Technical Information
- [HKLM\System\CurrentControlSet\Control\Print\Providers\5mY5c.dll] 'Name' = '<SYSTEM32>\spool\PRTPROCS\x64\5mY5c.dll'
- %TEMP%\nsu448f.tmp
- %TEMP%\xcvjxja5gn.exe
- <SYSTEM32>\spool\prtprocs\x64\5my5c.dll
- from %TEMP%\xcvjxja5gn.exe to %TEMP%\7k31gmy
- '%TEMP%\xcvjxja5gn.exe'