Technical Information
- %WINDIR%\tasks\cleartasks.job
- %ALLUSERSPROFILE%\application data\{17d00528-c00d-6bcf-17d0-00528c0014a3}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{17d00528-c00d-6bcf-17d0-00528c0014a3}\<File name>.dat
- DNS ASK ce####-ring.link
- DNS ASK al####el-pro.com
- DNS ASK ge####uesee.info
- DNS ASK mo###odel.biz