Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'WindowsUpdateService' = '%APPDATA%\Microsoft\Windows\Templates\svchost.exe'
- %APPDATA%\microsoft\windows\templates\svchost.exe
- %APPDATA%\microsoft\windows\templates\svchost.exe
- '<LOCALNET>.56.105':4444
- 'mo#####.map.fastly.net':443
- DNS ASK mo#####.map.fastly.net