Technical Information
- [HKLM\System\CurrentControlSet\Control\Print\Providers\1214] 'Name' = '<SYSTEM32>\spool\PRTPROCS\x64\1218A16.tmp'
- [HKLM\System\CurrentControlSet\Services\Spooler] 'Start' = '00000002'
- <SYSTEM32>\spool\prtprocs\x64\1218a16.tmp
- %TEMP%\ldr8a25.tmp
- %TEMP%\ldr8a35.tmp
- from <SYSTEM32>\spool\prtprocs\x64\1218a16.tmp to %TEMP%\1363e8.tmp