Technical Information
- [HKLM\SYSTEM\CurrentControlSet\Services\null64] 'ImagePath' = '<DRIVERS>\null64.sys'
- 'null64' <DRIVERS>\null64.sys
- <DRIVERS>\null64.sys
- <DRIVERS>\null64.sys
- from <DRIVERS>\null64.sys to %TEMP%\926687\....\temporaryfile
- <DRIVERS>\null64.sys