Legitimate binary abused for DLL sideloading; deployed to C:\ProgramData\WinDir\WinDirStat.exe via SysAid update mechanism
