Technical Information
- <SYSTEM32>\tasks\orcus
- %ProgramFiles(x86)%\orcus\orcus.exe
- %ProgramFiles(x86)%\orcus\orcus.exe.config
- %ProgramFiles(x86)%\orcus\orcus.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK microsoft.com
- '%ProgramFiles(x86)%\orcus\orcus.exe'