Technical Information
- %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\f1zw5rae.newcfg
- %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\hvszhkdq.newcfg
- from %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\f1zw5rae.newcfg to %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\user.config
- from %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\hvszhkdq.newcfg to %LOCALAPPDATA%\umbrelladesign\<File name>.exe_url_hwj0h2u2hjogbfiswkux30deawuy3moe\1.0.0.0\user.config
- <Full path to file>
- from <Full path to file> to <Full path to file>.bak
- http://di##.uc.zone/version_launcher2.json
- http://di##.uc.zone/data/UmbrellaLoader.exe
- DNS ASK di##.uc.zone
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;