Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sysnet' = '%LOCALAPPDATA%\sysnetwin.exe'
- %LOCALAPPDATA%\sysnetwin.exe
- %TEMP%\screen.jpg
- <Full path to file>
- 'ip#####.#hatismyipaddress.com':80
- DNS ASK ip#####.#hatismyipaddress.com