Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\{87fd4744-bd02-96e5-87fd-d4744bd01d12}\<File name>.exe
- %ALLUSERSPROFILE%\{87fd4744-bd02-96e5-87fd-d4744bd01d12}\<File name>.dat
- DNS ASK ki###whale.info
- DNS ASK sh####-models.com