Technical Information
- <SYSTEM32>\tasks\windowstelemetryservice
- <SYSTEM32>\subdir\client.exe
- <Full path to file>
- '72.##1.135.249':25567
- '<SYSTEM32>\subdir\client.exe'
- '<SYSTEM32>\schtasks.exe' /create /tn "WindowsTelemetryService" /sc ONLOGON /tr "<Full path to file>" /rl HIGHEST /f
- '<SYSTEM32>\schtasks.exe' /create /tn "WindowsTelemetryService" /sc ONLOGON /tr "<SYSTEM32>\SubDir\Client.exe" /rl HIGHEST /f