Technical Information
- %HOMEPATH%\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\application data\{7b26d59b-32f9-8157-7b26-6d59b32f566c}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{7b26d59b-32f9-8157-7b26-6d59b32f566c}\<File name>.dat
- DNS ASK sh####-models.com
- DNS ASK gu###liban.info