Technical Information
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\system.exe" "system.exe" ENABLE
- <Current directory>\49155648_532844107215154_9164803715322871808_n.jpg
- <Current directory>\32432.exe
- %TEMP%\system.exe
- <Current directory>\32432.exe
- %TEMP%\system.exe
- 'localhost':5552
- ClassName: 'EDIT' WindowName: ''
- '<Current directory>\32432.exe'
- '%TEMP%\system.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\system.exe" "system.exe" ENABLE' (with hidden window)