Technical Information
- <SYSTEM32>\tasks\t6dio59nvrmex8mlli6sgujqq5powkg0umx.exe
- %APPDATA%\t6dio59nvrmex8mlli6sgujqq5powkg0umx.exe
- '%APPDATA%\t6dio59nvrmex8mlli6sgujqq5powkg0umx.exe'
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 1 /tn t6DIO59NvRMEX8MlLI6sGUjQq5pOwkg0UmX.exe /tr %APPDATA%\t6DIO59NvRMEX8MlLI6sGUjQq5pOwkg0UmX.exe' (with hidden window)
- '%APPDATA%\t6dio59nvrmex8mlli6sgujqq5powkg0umx.exe' ' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 1 /tn t6DIO59NvRMEX8MlLI6sGUjQq5pOwkg0UmX.exe /tr %APPDATA%\t6DIO59NvRMEX8MlLI6sGUjQq5pOwkg0UmX.exe
- '<SYSTEM32>\taskeng.exe' {0B76CDA5-783C-42EA-AE39-B8D6C5F24AC7} S-1-5-21-1960123792-2022915161-3775307078-1001:ykagvwbzdjqu\user:Interactive:[1]