Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\aaa.exe" "aaa.exe" ENABLE
- %APPDATA%\aaa.exe
- 'to####44.ddns.net':1177
- DNS ASK to####44.ddns.net
- '%APPDATA%\aaa.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\aaa.exe" "aaa.exe" ENABLE' (with hidden window)