Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Klass' = '%WINDIR%\spoolsv.exe'
- '%WINDIR%\spoolsv.exe'
- %WINDIR%\spoolsv.exe
- %WINDIR%\dir
- %WINDIR%\name
- 'ne####y.no-ip.org':5252
- DNS ASK ne####y.no-ip.org
- ClassName: 'Indicator' WindowName: '(null)'