Technical Information
- <SYSTEM32>\tasks\shell infrastructure host task {h5j7s8h9d6-2s6e8r2k4-8g6m3c2d3e}
- '%WINDIR%\syswow64\schtasks.exe' /create /F /sc minute /mo 5 /tn "Shell Infrastructure Host Task {H5J7S8H9D6-2S6E8R2K4-8G6M3C2D3E}" /tr "%APPDATA%\Windows\System32\sihost.exe"
- '%WINDIR%\syswow64\schtasks.exe' /Query /XML /TN "Shell Infrastructure Host Task {H5J7S8H9D6-2S6E8R2K4-8G6M3C2D3E}"