Technical Information
- %HOMEPATH%\start menu\programs\startup\<File name>.lnk
- %WINDIR%\tasks\bidaily synchronize task.job
- %ALLUSERSPROFILE%\application data\{a7d427dc-7e0e-9b6a-a7d4-427dc7e09f71}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{a7d427dc-7e0e-9b6a-a7d4-427dc7e09f71}\<File name>.dat
- DNS ASK sh####-models.com
- DNS ASK ki###whale.info
- DNS ASK po####ve-models.net