Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Windows Updater' = '%LOCALAPPDATA%\winsvchost.exe'
- winsvchost.exe
- %LOCALAPPDATA%\winsvchost.exe
- DNS ASK xb###fusion.net
- '%LOCALAPPDATA%\winsvchost.exe'
- '%LOCALAPPDATA%\winsvchost.exe' ' (with hidden window)