Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{6698797C-5386-5238-15D3-823D74C8D5ED}] 'StubPath' = '<SYSTEM32>\webup.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\webup.exe
- 'mi######tupdate.dynssl.com':80
- DNS ASK mi######tupdate.dynssl.com