Technical Information
- [HKLM\System\CurrentControlSet\Services\FSPFileOut] 'ImagePath' = '%TEMP%\FSPFileOut.sys'
- 'FSPFileOut' %TEMP%\FSPFileOut.sys
- [HKLM\System\CurrentControlSet\Services\FSPFileOut] 'Group' = 'FSFilter Activity Monitor'
- %TEMP%\evbae88.tmp
- %TEMP%\sd_aec7\exepath\exepath.ini
- %TEMP%\sd_aec7\exepath.ini
- %TEMP%\sd_aec7\cmbc-ht-939-1ú¿¦ú¦»2020ú¬+ñ+¦+e¦ú¦»+±-+1-+ñ+¦+e+¦+-+---+-+º---¦¿+v¦n.doc
- %TEMP%\sd_aec7\selfextract.exe
- %TEMP%\sd_aec7\sdextpolicy.lst
- %TEMP%\sd_aec7\watermarkconfig.ini
- %TEMP%\sd_aec7\fileredirectex.dll
- %TEMP%\sd_aec7\csp_soft.dll
- %TEMP%\sd_aec7\csp_crypto_dll.dll
- %TEMP%\sd_aec7\sd_assistp.dll
- %TEMP%\sd_aec7\fspfileout64.sys
- %TEMP%\sd_aec7\fspfileout.sys
- %TEMP%\fspfileout.sys
- %TEMP%\sd_aec7\fspfileout.dll
- %TEMP%\sd_aec7\sdouthookloader.exe
- %TEMP%\sd_aec7\sdouthook64.dll
- %TEMP%\sd_aec7\sdouthook.dll
- %TEMP%\sd_aec7\loaderinterface.dll
- %TEMP%\sd_aec7\impcontrol.dll
- %TEMP%\sd_aec7\fsp_printlimit64.dll
- %TEMP%\sd_aec7\fsp_printlimit.dll
- %TEMP%\sd_aec7\fsp_notice.dll
- %TEMP%\sd_aec7\decreseprint.exe
- %TEMP%\sd_aec7\sdcommonex.dll
- %TEMP%\sd_aec7\sdcommon.dll
- %TEMP%\sd_aec7\sdextclient.exe
- %TEMP%\sd_aec7\sdouthookloader64.exe
- C:\users\public\documents\eetrust\operationrecord.lst
- %TEMP%\sd_aec7\exepath.ini
- '%TEMP%\sd_aec7\sdextclient.exe'