: New, randomly named .exe or .dat files appearing in %AppData%\Local\Temp .

: Instances of cvtrese.exe or MSBuild.exe running with high CPU usage or appearing in unusual directories.

If you have interacted with this file, look for these common red flags: