It surveys a system upon check-in to discover network configuration details using the arp -a, nbtstat -n, net config, ipconfig /all, and route commands, as well as NBTscan. It RPC backdoors have also retrieved registered RPC interface information from process memory.