Technical Information
- '%APPDATA%\Antivirus.exe'
- '<SYSTEM32>\schtasks.exe' /Create /TN "Update\Antivirus" /XML "%TEMP%\2085628506.xml"
- '<SYSTEM32>\schtasks.exe' /Delete /TN "Update\Antivirus" /F
- %TEMP%\2085628506.xml
- %APPDATA%\Antivirus.exe
- %TEMP%\2085628506.xml
- 'localhost':1010
- '21#.#.192.248':1010