Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{7880g99b-b2gf-14d0-89bb-1090ce808e85}] 'StubPath' = '<SYSTEM32>\LiveUpdate360.exe'
- '<SYSTEM32>\LiveUpdate360.exe'
- '<SYSTEM32>\userinit.exe'
- '<SYSTEM32>\notepad.exe'
- <SYSTEM32>\userinit.exe
- <SYSTEM32>\LiveUpdate360.exe
- 'xu####123.oicp.net':8080
- DNS ASK xu####123.oicp.net
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Notepad' WindowName: ''