Technical Information
- %WINDIR%\tasks\backgoundcutter.job
- %ALLUSERSPROFILE%\application data\{57170eaa-e7b1-3ae7-5717-70eaae7b3aab}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{57170eaa-e7b1-3ae7-5717-70eaae7b3aab}\<File name>.dat
- DNS ASK fi####usapro.info
- DNS ASK gr###model.biz
- DNS ASK ce####-ring.info