An advanced persistence mechanism was detected on a host system. The attackers have modified the Windows registry to run a malicious executable upon system start and scheduled a task to ensure the persistent backdoor remains active. The executable is associated with known APT activity.