Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\winder.exe" "winder.exe" ENABLE
- %APPDATA%\winder.exe
- 'sg###gcc.p-e.kr':441
- DNS ASK sg###gcc.p-e.kr
- '%APPDATA%\winder.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\winder.exe" "winder.exe" ENABLE' (with hidden window)