ChainScript ComponentTask33Agent persistence via schtasks/Run key

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•3

Detects signs of malicious activity involving specific files (StreamServiceSharedBridge.ps1, ComponentTask33Agent) and behaviors, including PowerShell execution, scheduled task creation, script execution via wscript, and registry run key modification. These behaviors are indicative of persistence mechanisms and potentially suspicious command execution.