Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\windows system operation.exe" "windows system operation.exe" ENABLE
- %APPDATA%\windows system operation.exe
- 'ma###a.dynu.net':5553
- 'ma####.linkpc.net':5553
- 'localhost':5553
- 'pa###bin.com':443
- DNS ASK pa###bin.com
- DNS ASK ma###a.dynu.net
- DNS ASK ma####.linkpc.net
- '%APPDATA%\windows system operation.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\windows system operation.exe" "windows system operation.exe" ENABLE' (with hidden window)