Technical Information
- <SYSTEM32>\tasks\xml_update
- 'ap#.##legram.org':443
- 'ap#.##legram.org':443
- DNS ASK ap#.##legram.org
- '<SYSTEM32>\cmd.exe' /c schtasks /query /tn "XML_UPDATE"
- '<SYSTEM32>\schtasks.exe' /query /tn "XML_UPDATE"
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "XML_UPDATE" /tr "\"<Full path to file>\"" /sc onlogon /rl highest /f
- '<SYSTEM32>\schtasks.exe' /create /tn "XML_UPDATE" /tr "\"<Full path to file>\"" /sc onlogon /rl highest /f