Technical Information
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'telemetry' = '%APPDATA%\telemetry\svcservice.exe'
- %APPDATA%\telemetry\svcservice.exe
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- '51.##5.166.203':80
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- DNS ASK mo#####.map.fastly.net
- '%APPDATA%\telemetry\svcservice.exe'
- '%APPDATA%\telemetry\svcservice.exe' ' (with hidden window)