Task scheduler dll loaded by application located in potentially suspicious location

Intel Name: Task scheduler dll loaded by application located in potentially suspicious location

Date of Scan: September 18, 2024

Impact: Low

Summary:
Identifies when the “taskschd.dll” module is loaded from a potentially suspicious or unusual directory. This loading could suggest that the application has the ability to create a scheduled task using the “Schedule.Service” COM object. An investigation into the application and its behavior is necessary to determine if it is malicious.

More Details