Technical Information
- <SYSTEM32>\tasks\<File name>.vbs
- User Account Control (UAC)
- '<SYSTEM32>\schtasks.exe' /Query /FO CSV /NH /TN "<File name>.vbs"
- '<SYSTEM32>\wscript.exe' "<PATH_SAMPLE>.vbs" /CreateTask
- '<SYSTEM32>\schtasks.exe' /Create /SC ONCE /TN "<File name>.vbs" /TR "wscript.exe \"<PATH_SAMPLE>.vbs\" /AsAdmin" /ST 00:01 /IT /F /RL HIGHEST
- '<SYSTEM32>\reg.exe' ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
- '<SYSTEM32>\schtasks.exe' /Query /FO CSV /NH /TN "<File name>.vbs"' (with hidden window)
- '<SYSTEM32>\schtasks.exe' /Create /SC ONCE /TN "<File name>.vbs" /TR "wscript.exe \"<PATH_SAMPLE>.vbs\" /AsAdmin" /ST 00:01 /IT /F /RL HIGHEST' (with hidden window)