Technical Information
- <SYSTEM32>\tasks\updates\kyasaa
- %APPDATA%\kyasaa.exe
- %TEMP%\tmp7622.tmp
- %APPDATA%\kyasaa.exe
- %TEMP%\tmp7622.tmp
- 'mi####.freemyip.com':1995
- DNS ASK mi####.freemyip.com
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\KYaSAa" /XML "%TEMP%\tmp7622.tmp"' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /Create /TN "Updates\KYaSAa" /XML "%TEMP%\tmp7622.tmp"