Technical Information
- <SYSTEM32>\tasks\chrome
- %PROGRAMDATA%\updata\filesys.exe
- 'localhost':6666
- '%WINDIR%\syswow64\cmd.exe' /c schtasks /Create /SC MINUTE /MO 2 /tn chrome /tr '%ProgramData%\updata\FileSys.exe' /ec system
- '%WINDIR%\syswow64\schtasks.exe' /Create /SC MINUTE /MO 2 /tn chrome /tr '%PROGRAMDATA%\updata\FileSys.exe' /ec system
- '<SYSTEM32>\taskeng.exe' {67CFB6B8-EA17-4818-89F0-D46A11099F4A} S-1-5-21-1960123792-2022915161-3775307078-1001:ovrrlwpxfe\user:Interactive:[1]