Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\System.exe" "System.exe" ENABLE
- %APPDATA%\system.exe
- 'ji####.ddnsking.com':13
- DNS ASK ji####.ddnsking.com
- '%APPDATA%\system.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\System.exe" "System.exe" ENABLE' (with hidden window)