Technical Information
- [<HKLM>\System\CurrentControlSet\Services\netfilter2] 'Start' = '00000001'
- [<HKLM>\System\CurrentControlSet\Services\netfilter2] 'ImagePath' = 'system32\drivers\netfilter2.sys'
- 'netfilter2' system32\drivers\netfilter2.sys
- %WINDIR%\syswow64\cmd.exe
- %WINDIR%\syswow64\nfapi.dll
- <DRIVERS>\netfilter2.sys
- ctrlsmnetfilter2
- %WINDIR%\temp\udd40d6.tmp
- %WINDIR%\temp\udd40d6.tmp
- '%WINDIR%\syswow64\cmd.exe' C: \Windows\system32\svchost.exe
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\syswow64\cmd.exe"