Technical Information
- <SYSTEM32>\tasks\onedrive reporting task-ddd-1-4-21-53529385-53453634-535436459-55601
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -windowstyle hidden -ExecutionPolicy Bypass %APPDATA%\firefox.ps1
- %APPDATA%\firefox.ps1
- %APPDATA%\wale.ps1
- %APPDATA%\firefox.ps1
- DNS ASK ra#.####ubusercontent.com
- DNS ASK fi#####.###tings.services.mozilla.com