Technical Information
- %WINDIR%\tasks\recordmyrun.job
- %ALLUSERSPROFILE%\application data\{79df5447-3f34-b335-79df-f54473f3511c}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{79df5447-3f34-b335-79df-f54473f3511c}\<File name>.dat
- DNS ASK ce####-ring.link
- DNS ASK ce####-ring.info
- DNS ASK ge###luesee.com