Technical Information
- %ProgramFiles%\System\System.exe
- '41.##1.122.49':65470
- '17#.#2.241.17':65470
- 'wp#d':80
- '20#.#6.232.182':80
- http://crl.microsoft.com/pki/crl/products/CSPCA.crl via 20#.#6.232.182
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK crl.microsoft.com
- DNS ASK wp#d
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /tn "System" /rl highest /tr "'%ProgramFiles%\System\System.exe' /startup" /f