Technical Information
- [<HKLM>\System\CurrentControlSet\Services\netra] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\netra] 'ImagePath' = '<DRIVERS>\svchost.exe'
- [<HKLM>\system\controlset001\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] '<DRIVERS>\svchost.exe' = '<DRIVERS>\svchost.exe:*:Enabled:@xpsp2res.dl...
- %WINDIR%\syswow64\drivers\svchost.exe
- %WINDIR%\syswow64\drivers\svchost.exe
- '%WINDIR%\syswow64\drivers\svchost.exe'