Technical Information
- %WINDIR%\tasks\contentsplitter.job
- %ALLUSERSPROFILE%\application data\{06a11b8c-8582-88d4-06a1-11b8c8586e32}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{06a11b8c-8582-88d4-06a1-11b8c8586e32}\<File name>.dat
- DNS ASK to###itgold.org