Technical Information
- '%TEMP%\wandame.exe'
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\icanhazip[1]
- %TEMP%\wandame.exe
- %TEMP%\WAN2C49.txt
- '91.##1.17.201':13344
- 'ic###azip.com':80
- http://ic###azip.com/
- DNS ASK ic###azip.com
- ClassName: 'Shell_TrayWnd' WindowName: ''