Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\67a29fa0dfbf1d3a49191ce2152fca60.exe
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\ .exe" " .exe" ENABLE
- %APPDATA%\ .exe
- 'localhost':5552
- '%APPDATA%\ .exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\ .exe" " .exe" ENABLE' (with hidden window)