Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsCacheService' = '%ALLUSERSPROFILE%\Microsoft\Windows\Caches\mscorsvc.exe'
- <SYSTEM32>\tasks\microsoftnetcachesvc
- %ALLUSERSPROFILE%\microsoft\windows\caches\mscorsvc.exe
- '<LOCALNET>.0.105':8443
- '%ALLUSERSPROFILE%\microsoft\windows\caches\mscorsvc.exe' 19#.#68.0.105
- '<SYSTEM32>\schtasks.exe' /create /f /tn "MicrosoftNETCacheSvc" /tr "%ALLUSERSPROFILE%\Microsoft\Windows\Caches\mscorsvc.exe" /sc onlogon /ru SYSTEM /rl HIGHEST
- '<SYSTEM32>\schtasks.exe' /create /f /tn "MicrosoftNETCacheSvc" /tr "%ALLUSERSPROFILE%\Microsoft\Windows\Caches\mscorsvc.exe" /sc onlogon /ru SYSTEM /rl HIGHEST' (with hidden window)
- '%ALLUSERSPROFILE%\microsoft\windows\caches\mscorsvc.exe' 19#.#68.0.105' (with hidden window)