Scheduled Tasks

File Creation

evil.exe

Job files created in C:\Windows\Tasks XML

task files created in C:\Windows\System32\Tasks

Author tag under "RegistrationInfo"