Technical Information
- <SYSTEM32>\tasks\videocard service
- '17#.#11.174.107':80
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "Videocard Service" /tr "<Full path to file>" /f' (with hidden window)
- '<Full path to file>' ' (with hidden window)
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "Videocard Service" /tr "<Full path to file>" /f
- '<SYSTEM32>\taskeng.exe' {8B3A4E9F-D12F-4D56-91BB-DDA5689E0277} S-1-5-21-1960123792-2022915161-3775307078-1001:farwejw\user:Interactive:[1]