Technical Information
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%WINDIR%\help\svchost.exe" "Remote Administrator Server" ENABLE
- %TEMP%\bt0461.bat
- %TEMP%\bt0461.bat
- %TEMP%\bt0461.bat
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c %TEMP%\bt0461.bat "<Full path to file>"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c %TEMP%\bt0461.bat "<Full path to file>"
- '<SYSTEM32>\reg.exe' import serial.reg
- '%WINDIR%\regedit.exe' /s serial.reg