Technical Information
- %WINDIR%\Tasks\services update.job
- '%APPDATA%\winapp\a551de38.exe'
- a551de38.exe
- %APPDATA%\winapp\client_id
- %WINDIR%\Temp\~DFDB89.tmp
- %TEMP%\~DF7959.tmp
- %TEMP%\~DF5B25.tmp
- %APPDATA%\winapp\a551de38.exe
- %TEMP%\~DF7959.tmp
- %TEMP%\~DF5B25.tmp
- 'ic###azip.com':80
- http://ic###azip.com/
- DNS ASK ic###azip.com