Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.lnk
- %ALLUSERSPROFILE%\{8acaa313-29f3-17df-8aca-aa31329f8c4c}\<File name>.exe
- %ALLUSERSPROFILE%\{8acaa313-29f3-17df-8aca-aa31329f8c4c}\<File name>.dat
- DNS ASK ki####nqview.info
- DNS ASK le###-user.com