Техническая информация
- <SYSTEM32>\tasks\usoshared ver2.36
- %APPDATA%\workflow manager tools ver5.62\workflowmanagertools.exe
- %TEMP%\fd1bf04aa3a96de6f96e
- %APPDATA%\workflow manager tools ver5.62\workflowmanagertools.exe
- %TEMP%\fd1bf04aa3a96de6f96e
- '%APPDATA%\workflow manager tools ver5.62\workflowmanagertools.exe'
- '%APPDATA%\workflow manager tools ver5.62\workflowmanagertools.exe' /f
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "USOShared ver2.36" /tr "'%APPDATA%\Workflow Manager Tools ver5.62\WorkflowManagerTools.exe"'/f' (со скрытым окном)
- '%APPDATA%\workflow manager tools ver5.62\workflowmanagertools.exe' /f' (со скрытым окном)
- '<SYSTEM32>\schtasks.exe' /create /sc MINUTE /mo 1 /tn "USOShared ver2.36" /tr "'%APPDATA%\Workflow Manager Tools ver5.62\WorkflowManagerTools.exe"'/f
- '<SYSTEM32>\taskeng.exe' {E6107F8C-0812-4412-83BA-1B936492982D} S-1-5-21-1960123792-2022915161-3775307078-1001:dlzjczhi\user:Interactive:[1]