Technical Information
- %LOCALAPPDATA%\modifiablewindowsapps ver0.11\modifiablewindowsapps.exe
- %TEMP%\7ec0ae7ec51fb2f6c619
- %LOCALAPPDATA%\modifiablewindowsapps ver0.11\modifiablewindowsapps.exe
- %TEMP%\7ec0ae7ec51fb2f6c619
- '%LOCALAPPDATA%\modifiablewindowsapps ver0.11\modifiablewindowsapps.exe'
- '%LOCALAPPDATA%\modifiablewindowsapps ver0.11\modifiablewindowsapps.exe' /f
- '%WINDIR%\syswow64\schtasks.exe' /create /sc MINUTE /mo 1 /tn "AppServer ver7.73" /tr "'%LOCALAPPDATA%\ModifiableWindowsApps ver0.11\ModifiableWindowsApps.exe"'/f' (with hidden window)
- '%LOCALAPPDATA%\modifiablewindowsapps ver0.11\modifiablewindowsapps.exe' /f' (with hidden window)
- '%WINDIR%\syswow64\schtasks.exe' /create /sc MINUTE /mo 1 /tn "AppServer ver7.73" /tr "'%LOCALAPPDATA%\ModifiableWindowsApps ver0.11\ModifiableWindowsApps.exe"'/f
- '<SYSTEM32>\taskeng.exe' {1679CF4A-E02A-41F5-AE88-629D60BA4256} S-1-5-21-1960123792-2022915161-3775307078-1001:ieygsw\user:Interactive:[1]