Technical Information
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run\] 'Microsoft Updater' = '"%WINDIR%\microsoft.exe"'
- microsoft.exe
- %WINDIR%\microsoft.exe
- DNS ASK fr####123.ddns.net
- '%WINDIR%\microsoft.exe'
- '%WINDIR%\microsoft.exe' ' (with hidden window)