NewApp Digest
search bot

Task Scheduler

How to quickly launch multiple apps with a single action in Windows 11
Winsage
July 6, 2026

How to quickly launch multiple apps with a single action in Windows 11

Windows includes a Task Scheduler for automating tasks and batch files for streamlining operations. Batch files, with a .bat extension, are plaintext scripts that execute a series of commands in sequence, useful for automating repetitive tasks. A common use is launching multiple applications simultaneously, such as Microsoft Outlook, Microsoft Teams, Google Chrome, Excel, and File Explorer, to enhance productivity. To create a batch file, users should identify the executable locations of the desired applications, create a text file named Launch Apps.bat, and input a specific script to launch the applications. The batch file can be executed by double-clicking it, and users can add echo commands for execution status or automate it with Task Scheduler. Some applications may require administrator privileges, and paths may need adjustments based on installation locations.
Introduction to COM usage by Windows threats
Winsage
June 25, 2026

Introduction to COM usage by Windows threats

Component Object Model (COM) is a technology in Windows that enables object activation, inter-process communication, and automation across different programming languages. Malware exploits COM interfaces for activities such as lateral movement, execution, downloading, exfiltration, persistence, evasion, system discovery, and automation of Windows and Office functionalities. Reverse engineering COM-heavy binaries involves navigating GUIDs and indirect vtable calls to understand malware mechanics. Research at the AVAR 2025 conference and CARO 2026 workshop discusses methodologies for analyzing COM binaries and case studies of malware families that utilize COM. COM is an application binary interface (ABI) model that allows software components to be reused and enables interaction between different programming languages through interfaces defined at the binary level. Distributed COM (DCOM) allows clients to activate COM objects on remote systems. COM classes are identified by unique class identifiers (CLSIDs), and interfaces by interface identifiers (IIDs). The Windows registry stores COM registration data, with classes and interfaces located under specific keys. Malware often acts as a COM client, utilizing the COM runtime to instantiate classes and request interfaces. ProgIDs provide human-readable registry entries for COM classes. The CoCreateInstance function helps create class objects by resolving CLSID registrations. All COM interfaces derive from IUnknown, which manages object lifetimes and interface querying. COM has its own security model, and identifying classes and interfaces used by malware is crucial for threat researchers. Tools like ComView and OleView.NET assist in inspecting COM registrations. The analysis workflow includes identifying activation API calls, extracting CLSID and IID values, consulting registry definitions, and mapping vtable calls. Qakbot, a banking trojan, exemplifies the use of COM in malware, with its architecture enabling malicious activities like credential theft. Dynamic analysis tools can log COM-related calls in real-time to trace execution flow. Notable malware families that utilize COM include Gh0stRAT, which uses Task Scheduler COM interfaces, and the Attor platform, which employs BITS for file transfers. WarmCookie demonstrates the use of COM for persistence through Task Scheduler. Understanding COM's role in malware is essential for cybersecurity professionals.
What Is OneLaunch.exe? Pros, Cons, and How to Remove It
Tech Optimizer
June 8, 2026

What Is OneLaunch.exe? Pros, Cons, and How to Remove It

OneLaunch is a software application that creates a personalized dock and desktop environment on Windows computers, often pre-installed or bundled with other software. It has received mixed reviews, with concerns about system slowdowns and its legitimacy. OneLaunch.exe is a background process supporting the OneLaunch application, which provides quick access to applications and updates but can consume system resources. The OneLaunch browser, installed alongside the main application, can alter browser settings and redirect searches, potentially leading to unwanted advertisements. While OneLaunch is not classified as traditional malware, it is often categorized as a Potentially Unwanted Program (PUP) due to its bundled installation and ability to modify system settings. It can monitor browsing habits and share data with third-party advertisers. Users report intrusive behavior, such as altering default browser settings, and it can negatively impact system performance. To remove OneLaunch, users should end the running process, uninstall the application, delete leftover folders, remove startup entries, and reset browser settings. OneLaunch may reappear due to accidental reinstallations, active browser extensions, lingering scheduled tasks, or hidden companion programs. Preventative measures include downloading from official sources, reading installation screens carefully, keeping systems updated, and performing regular system checks.
Microsoft's new CPU trick might finally fix Windows 11's app stutters
Winsage
May 8, 2026

Microsoft’s new CPU trick might finally fix Windows 11’s app stutters

Microsoft is introducing a feature called the "Low Latency Profile" for Windows 11, which temporarily boosts CPU speeds during critical tasks to reduce delays and stuttering. Early reports indicate that this feature can accelerate app launches by up to 40% and improve Start menu performance by up to 70%, especially for budget PCs. The Low Latency Profile activates automatically, responding to performance demands without user intervention, and the CPU can spike usage up to 96% before returning to normal levels. Currently in testing, this feature aims to enhance the responsiveness of Windows 11 while minimizing impacts on heat generation and battery life.
Go straight to sell! Windows second-chance setup hawks Microsoft services at IT's expense
Winsage
April 26, 2026

Go straight to sell! Windows second-chance setup hawks Microsoft services at IT’s expense

Months after acquiring a laptop, users may encounter a prompt from Windows 11 stating, “You’re almost done setting up your PC.” This leads to a series of inquiries about adopting Microsoft’s recommended browser settings, linking a phone for SMS notifications, and acknowledging Office installation. Users may feel compelled to click through these prompts, which can include advertisements, such as for Xbox Game Pass Premium at .99 per month. This series of prompts is referred to as the Second Chance Out of Box Experience (SCOOBE), which can resurface due to Windows updates and may lead to unnecessary support calls and potential unauthorized subscriptions in organizational settings. Users can disable SCOOBE by adjusting settings in Windows or Group Policy, but ongoing vigilance is required due to the evolving nature of Microsoft’s software.
Intel VP claims up to 30% of CPU performance is untapped by modern games — software optimization is critical to unlocking full potential of hybrid CPUs
AppWizard
April 25, 2026

Intel VP claims up to 30% of CPU performance is untapped by modern games — software optimization is critical to unlocking full potential of hybrid CPUs

Intel's transition to a hybrid architecture for its CPUs began with the Alder Lake series in 2021, combining performance and efficiency cores. Intel's Vice President, Robert Hallock, noted that while the hybrid architecture has matured, a "unified core" is still in development. He mentioned that many users disable efficiency cores (E-cores) to enhance performance, but the performance difference between using only performance cores (P-cores) and both types of cores is minimal, around 1%. Hallock explained that early implementation of Intel's Thread Director improved performance with only P-cores, and the Windows task scheduler struggles without it. He emphasized the importance of software optimization for enhancing performance, stating that a significant portion of potential performance—estimated between 10% to 30%—remains untapped due to suboptimal game optimization. AMD's approach includes integrating additional SRAM through its 3D V-cache technology, while Intel's upcoming Nova Lake will introduce a Big Last Level Cache (bLLC). Hallock indicated that developers have primarily optimized for AMD's silicon, limiting the full potential of Intel's hybrid architecture.
Researchers Uncover OysterLoader, an Advanced Obfuscated Loader Powering Rhysida Attacks
Tech Optimizer
February 16, 2026

Researchers Uncover OysterLoader, an Advanced Obfuscated Loader Powering Rhysida Attacks

OysterLoader, a sophisticated malware loader also known as Broomstick and CleanUp, has emerged as a significant threat since mid-2024. It is a multi-stage downloader linked to ransomware attacks and data theft, particularly associated with the Rhysida ransomware group. Written in C++, it infiltrates systems through malicious websites that impersonate legitimate software download platforms, tricking victims into executing a signed Microsoft Installer (MSI) that launches the malware. OysterLoader employs a four-stage infection chain designed to evade detection. The first stage uses a packer named TextShell to load hidden code into memory, creating an illusion of legitimacy through harmless Windows API calls. The second stage decompresses a concealed payload using a modified LZMA algorithm. The third stage functions as a downloader and environment tester, establishing contact with its command-and-control (C2) server via HTTPS. In the final stage, OysterLoader installs a malicious DLL that executes every 13 minutes through the Windows Task Scheduler, communicating with multiple hardcoded servers and transmitting critical system information. The malware uses customized Base64 encoding and variable communication endpoints to evade detection. Its primary objective is to ensure persistence and facilitate the delivery of additional payloads, including ransomware and credential stealers. Security analysts predict that OysterLoader will remain a formidable threat through 2026, particularly for organizations downloading administrative tools from unverified sources. Indicators of Compromise (IOC): - Mutex: h6p#dx!&fse?%AS! - Task: COPYING3 (rundll32 DllRegisterServer) - C2 Domain: grandideapay[.]com/api/v2/facade - RC4 Key: vpjNm4FDCr82AtUfhe39EG5JLwuZszKPyTcXWVMHYnRgBkSQqxzBfb6m75HZV3UyRY8vPxDna4WC2KMAgJjQqukrFdELXeGNSws9SBFXnYJ6ExMyu97KCebD5mTwaUj42NPAvHdkGhVtczWgfrZ3sLyRZg4HuX97AnQtK8xvpLU2CWDhVq5PEfjTNz36wdFasecBrkGSDApf83d6NMyaJCsvcRBq9ZYKthjuw5S27EVzWrPHgkmUxFL4bQSgMa4F - IP: 85.239.53.66
Search