Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'LiveUpdateSvc' = '"%APPDATA%\LiveUpdate\rundll32.exe" LiveUpdateSvc.dll,rdl'
- %APPDATA%\liveupdate\liveupdatesvc.dll
- %APPDATA%\liveupdate\rundll32.exe
- %TEMP%\vsfeedbackup\vcruntime140.dll
- %TEMP%\vsfeedbackup\rawdll.dll
- %TEMP%\vsfeedbackup\kb4552919.exe
- %TEMP%\vsfeedbackup\kb4552919.exe
- '21#.#59.210.188':443
- '%TEMP%\vsfeedbackup\kb4552919.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "%TEMP%\VSFeedBackup\KB4552919.exe"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 && del "%TEMP%\VSFeedBackup\KB4552919.exe"
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1