top of page

New PipeMon malware uses Windows print processors for persistence

C45-2020-05-21-4

Indicators of Compromise (IOC) List

Indicator of Compromise (IOC)
Date Published
IOC Type
HKLM\SYSTEM\ControlSet001\Control\Print\Environments\Windows x64\Print Processors\PrintFiiterPipelineSvc\Driver
21/05/2020
Win_Registry
HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Print Processors\lltdsvc1\Driver
21/05/2020
Win_Registry
Download as CSV
bottom of page