LausivLoader MicrosoftEdgeUpdateTaskCore scheduled task persistence

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•3

Detects the execution of wscript.exe with silent (/B) and no-logo (/Nologo) flags, spawned by a process named MicrosoftEdgeUpdateTaskCore. This pattern is indicative of potential living-off-the-land techniques where an adversary leverages a legitimate system task to execute scripts stealthily.