Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\{f5ea71eb-7116-a9ae-f5ea-a71eb711c7ad}\<File name>.exe
- %ALLUSERSPROFILE%\{f5ea71eb-7116-a9ae-f5ea-a71eb711c7ad}\<File name>.dat
- 'le###-user.net':80
- DNS ASK le###-user.net