Technical Information
- <SYSTEM32>\tasks\updates\tiuivrada
- %APPDATA%\tiuivrada.exe
- %TEMP%\tmpb392.tmp
- %TEMP%\tmpb392.tmp
- 'ba#####s496.ddns.net':4782
- DNS ASK ba#####s496.ddns.net
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\TiUIVRada" /XML "%TEMP%\tmpB392.tmp"' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\TiUIVRada" /XML "%TEMP%\tmpB392.tmp"