ScheduledTasks.xml

Posts referencing this indicator

• The Gentlemen are knocking: сustom backdoors and evolving tactics

  KKaspersky

  Malicious XML file created in the SYSVOL directory by deploy_gpo.ps1 to register a hidden scheduled task that downloads and runs the ransomware on all domain computers via GPO.

  2026-08-08