Technical Information
- <SYSTEM32>\tasks\g100
- %TEMP%\nsu53bb.tmp
- C:\inst100.bat
- %TEMP%\g100.bat
- nul
- '%WINDIR%\syswow64\cmd.exe' /c ""C:\inst100.bat" "
- '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "G100"
- '%WINDIR%\syswow64\schtasks.exe' /Create /F /SC HOURLY /MO 3 /TN "G100" /RL HIGHEST /TR "powershell -WindowStyle Hidden -Command \"Start-Process -WindowStyle hidden -FilePath \\\"%TEMP%\g100.bat\\\" -ArgumentList \\\"111\\\"\"...
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command ""Set-ScheduledTask -TaskName G100 -Trigger (New-JobTrigger -Once -RepetitionInterval 03:00:00 -RepetitionDuration (New-TimeSpan -Days 2) -At (Get-Date).AddMinutes(20)) -Settings $(New...