Technical Information
- <SYSTEM32>\tasks\mytask
- %TEMP%\rarsfx0\11.exe
- %TEMP%\rarsfx0\123.exe
- %TEMP%\rarsfx0\2.bat
- '47.##.83.238':8080
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\rarsfx0\11.exe'
- '%TEMP%\rarsfx0\123.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\2.bat" "
- '<SYSTEM32>\cmd.exe' /c schtasks /query /tn "MyTask"
- '<SYSTEM32>\schtasks.exe' /query /tn "MyTask"
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "MyTask" /tr "C" /sc daily /st 08:00
- '<SYSTEM32>\schtasks.exe' /create /tn "MyTask" /tr "C" /sc daily /st 08:00