Technical Information
- <SYSTEM32>\tasks\test
- 'ip##gger.ru':443
- 'ip##gger.ru':443
- DNS ASK ip##gger.ru
- '%WINDIR%\syswow64\cmd.exe' /C schtasks /create /tn \test /tr %appdata%\driver.exe /st 00:00 /du 9999:59 /sc once /ri 1 /f
- '%WINDIR%\syswow64\schtasks.exe' /create /tn \test /tr %APPDATA%\driver.exe /st 00:00 /du 9999:59 /sc once /ri 1 /f
- '<SYSTEM32>\taskeng.exe' {55D2A1C2-7FD0-4100-82D0-2C43C482DAC7} S-1-5-21-1960123792-2022915161-3775307078-1001:qwqjxd\user:Interactive:[1]