Technical Information
- %WINDIR%\tasks\k9help.job
- %ALLUSERSPROFILE%\application data\{0393a6eb-4672-a932-0393-3a6eb4679bad}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{0393a6eb-4672-a932-0393-3a6eb4679bad}\<File name>.dat
- DNS ASK al###lstate.com
- DNS ASK al####el-pro.com
- DNS ASK di###lstate.com
- DNS ASK se####state.link