Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\] 'Inshallahsx' = '"<Full path to file>"'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Inshallahsx' = '"<Full path to file>"'
- %PROGRAMDATA%\filename.exe
- DNS ASK ra#####urdongers.wtf
- '%PROGRAMDATA%\filename.exe'