Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Update' = '%APPDATA%\Updater\Updater.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Update' = '%APPDATA%\Updater\Updater.exe'
- '%APPDATA%\Updater\Updater.exe'
- %APPDATA%\Monitor\Screenshots\05-29-2017\4.24 PM
- %APPDATA%\Updater\Updater.exe
- 'an#####network.co.uk':27442
- DNS ASK an#####network.co.uk