Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\taskhost.exe'
Modifies file system :
Deletes the following files:
- <SYSTEM32>\Tasks\Microsoft\Windows Defender\MP Scheduled Scan