Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'update check' = '%APPDATA%\Giberg\updater.exe'
- %APPDATA%\Logs\12-06-2017
- %APPDATA%\Giberg\updater.exe
- %APPDATA%\Giberg\updater.exe
- 'wi###.servebeer.com':1928
- 'fr###eoip.net':443
- DNS ASK wi###.servebeer.com
- DNS ASK fr###eoip.net
- '%APPDATA%\Giberg\updater.exe'