Technical Information
- %HOMEPATH%\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\application data\{7248c969-b25c-8076-7248-8c969b2525a6}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{7248c969-b25c-8076-7248-8c969b2525a6}\<File name>.dat
- DNS ASK gu###liban.info
- DNS ASK sh####-models.com