Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\crsysys.exe
- %LOCALAPPDATA%\lanthu.txt
- 'docs.google.com':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'docs.google.com':443
- DNS ASK docs.google.com
- DNS ASK microsoft.com