Technical Information
- <SYSTEM32>\tasks\usnetworkservice
- %APPDATA%\inexplor\xnetworklib.exe
- %APPDATA%\inexplor\id.txt
- '14#.#6.176.89':80
- '%APPDATA%\inexplor\xnetworklib.exe'
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "USNetworkService" /tr %APPDATA%\InExplor\xnetworklib.exe' (with hidden window)
- '%APPDATA%\inexplor\xnetworklib.exe' ' (with hidden window)
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "USNetworkService" /tr %APPDATA%\InExplor\xnetworklib.exe
- '<SYSTEM32>\taskeng.exe' {3C6B5FFC-7B55-4AA3-9D11-385A60083767} S-1-5-21-1960123792-2022915161-3775307078-1001:jdalxwakt\user:Interactive:[1]