Technical Information
- <SYSTEM32>\tasks\updates\gyudpwwmvznjf
- %APPDATA%\gyudpwwmvznjf.exe
- %TEMP%\tmp565f.tmp
- %APPDATA%\gyudpwwmvznjf.exe
- %TEMP%\tmp565f.tmp
- '17#.#1.129.208':2012
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\gYUdPwWmVzNjF" /XML "%TEMP%\tmp565F.tmp"' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\gYUdPwWmVzNjF" /XML "%TEMP%\tmp565F.tmp"