Technical Information
- %WINDIR%\tasks\timesketch.job
- <SYSTEM32>\tasks\timesketch
- %PROGRAMDATA%\{7f92171b-d8c6-d3d4-7f92-2171bd8c5c6f}\<File name>.exe
- %PROGRAMDATA%\{7f92171b-d8c6-d3d4-7f92-2171bd8c5c6f}\<File name>.dat
- DNS ASK ce####-ring.info
- DNS ASK al####el-pro.com
- DNS ASK ge###luesee.com
- DNS ASK pa###tmodel.biz