schtasks.exe
Named by 2 kept items in this workspace.
Search every workspace for schtasks.exe. It matches the name as written, so it can find other things that share it.
The items that name it 2
Used by the WorldProxyPool installer to start the agent task immediately with /Run.
Used by threat actor to create the 'Recovery Diagnostics' scheduled task to run new.ps1
All technologies in this workspace.