KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/Tasks_Migrated/Microsoft/Windows/RemoteAssistance/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/Tasks_Migrated/Microsoft/Windows/RemoteAssistance/RemoteAssistanceTask
��<?xml version="1.0" encoding="UTF-16"?>

<Task xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">

  <RegistrationInfo>

    <Date>2005-11-08T17:18:32</Date>

    <SecurityDescriptor>O:BAG:BAD:P(A;;FA;;;BA)(A;;FA;;;SY)</SecurityDescriptor>

    <Source>$(@%systemroot%\system32\msra.exe,-687)</Source>

    <Author>$(@%systemroot%\system32\msra.exe,-686)</Author>

    <Description>$(@%systemroot%\system32\msra.exe,-688)</Description>

    <URI>Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask</URI>

  </RegistrationInfo>

  <Principals>

    <Principal id="Creator">

      <UserId>S-1-5-18</UserId>

      <RunLevel>HighestAvailable</RunLevel>

    </Principal>

  </Principals>

  <Settings>

    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>

    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>

    <Hidden>true</Hidden>

    <MultipleInstancesPolicy>Queue</MultipleInstancesPolicy>

    <IdleSettings>

      <Duration>PT10M</Duration>

      <WaitTimeout>PT1H</WaitTimeout>

      <StopOnIdleEnd>true</StopOnIdleEnd>

      <RestartOnIdle>false</RestartOnIdle>

    </IdleSettings>

    <UseUnifiedSchedulingEngine>true</UseUnifiedSchedulingEngine>

  </Settings>

  <Triggers>

    <EventTrigger id="5a33e62f-7fb9-41d8-bc94-4ac450677743">

      <Delay>PT15S</Delay>

      <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="System"&gt;&lt;Select Path="System"&gt;*[System[Provider[@Name='Microsoft-Windows-GroupPolicy'] and EventID=1502]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>

    </EventTrigger>

    <RegistrationTrigger />

  </Triggers>

  <Actions Context="Creator">

    <Exec id="49b247cd-24d4-4ada-ad69-2d975a02b748">

      <Command>%windir%\system32\RAServer.exe</Command>

      <Arguments>/offerraupdate</Arguments>

      <WorkingDirectory>%windir%</WorkingDirectory>

    </Exec>

  </Actions>

</Task>

Anon7 - 2021