Technical Information
- [<HKLM>\System\CurrentControlSet\Services\PFS Downloader] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\PFS Downloader] 'ImagePath' = '<Full path to file>'
- 'PFS Downloader' <Full path to file>
- '%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="PFSDownload" dir=in program="<Full path to file>" action=allow
- C:\log.txt
- '%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="PFSDownload" dir=in program="<Full path to file>" action=allow' (with hidden window)