Technical Information
- %HOMEPATH%\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\application data\{c1952e05-e31e-9df1-c195-52e05e31b817}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{c1952e05-e31e-9df1-c195-52e05e31b817}\<File name>.dat
- DNS ASK sh####-models.com
- DNS ASK ki###whale.info
- DNS ASK gu###liban.info