Technical Information
- %WINDIR%\tasks\searchup.job
- %ALLUSERSPROFILE%\application data\{e20683c9-f0d0-5339-e206-683c9f0d0f27}\<File name>.exe
- %ALLUSERSPROFILE%\application data\{e20683c9-f0d0-5339-e206-683c9f0d0f27}\<File name>.dat
- DNS ASK mo###odel.biz
- DNS ASK al####el-pro.com
- DNS ASK fu###set.link
- DNS ASK fu###set.work