Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svcl.exe' = '"%ProgramFiles(x86)%\rcl\csrcl.exe" -a /a'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'svcl.exe' = '"%ProgramFiles(x86)%\rcl\csrcl.exe" -a /a'
- %ProgramFiles(x86)%\rcl\csrcl.exe
- 'microsoft.com':80
- '18#.#7.1.198':50458
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK microsoft.com