Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0EBE643F-D17A-DFDD-0302-070103050505}] 'StubPath' = '<SYSTEM32>\System.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\System.exe
- 'tr####a.no-ip.biz':1234
- DNS ASK tr####a.no-ip.biz
- '<Private IP address>':1035