Technical Information
- <SYSTEM32>\tasks\mwthmzodsiaoze
- <SYSTEM32>\tasks\phena
- '<SYSTEM32>\wscript.exe' "%TEMP%\error_log.vbe"
- %TEMP%\error_log.vbe
- %TEMP%\error_log.vbe
- DNS ASK hu######osurf.inti.co.uk
- '<SYSTEM32>\wscript.exe' "%TEMP%\error_log.vbe"' (with hidden window)
- '<SYSTEM32>\taskeng.exe' {960152BF-48E3-4F49-87F3-C9509002B5D5} S-1-5-21-1960123792-2022915161-3775307078-1001:nqabyvdij\user:Interactive:[1]