Technical Information
- %HOMEPATH%\start menu\programs\startup\<File name>.lnk
- %WINDIR%\tasks\bidaily synchronize task.job
- %ALLUSERSPROFILE%\application data\{de1793ea-c1bc-ba9e-de17-793eac1b4fab}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{de1793ea-c1bc-ba9e-de17-793eac1b4fab}\<File name>.dat
- DNS ASK le###-user.net
- DNS ASK gu###liban.info