Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0F4CE8A1-E385-37A0-0506-030306080101}] 'StubPath' = '<SYSTEM32>\Updata.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\Updata.exe
- '58.#icp.net':3460
- DNS ASK 58.#icp.net
- '<Private IP address>':1037