Technical Information
- [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'TrustedInstaller' = '<Full path to file>'
- <SYSTEM32>\tasks\<File name>
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK mo#####.map.fastly.net
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- '<SYSTEM32>\cmd.exe' /C SCHTASKS /Create /TN "<File name>" /SC MINUTE /MO 1 /TR "<Full path to file>" /RL HIGHEST /F
- '<SYSTEM32>\schtasks.exe' /Create /TN "<File name>" /SC MINUTE /MO 1 /TR "<Full path to file>" /RL HIGHEST /F