Technical Information
- %WINDIR%\tasks\benefit.job
- <SYSTEM32>\tasks\benefit
- %PROGRAMDATA%\{f0403572-7d62-276c-f040-035727d6d5c9}\<File name>.exe
- %PROGRAMDATA%\{f0403572-7d62-276c-f040-035727d6d5c9}\<File name>.dat
- DNS ASK fi####usapro.info
- DNS ASK ge###luesee.com
- DNS ASK gr###model.biz